Home

Compex Systems WPE53G User's Manual

1. Appt Add a new Packet Filter rule Rule Marig IF Address Arny From 192 168 168 T 192 163 168 Destination Port i Any Prom T Day of the Week ij An rori i Mon lo fn Time of the Days Ae hh 00 23 mm 00 59 Fran hh rrm Toi thh mm as Cangt Hai A Range of IP addresses In this case you will have to define From which IP address To which IP address yourrange extends A Single IP address Here you need only specify the source IP address in the From field Any IP address You may here leave both the From as well as the To fields blank Here the rule will apply to all IP addresses 4c At the Destination Port drop down list select either A Range of ICP ports In this case you will have to define From which port To which port your rule applies A Single TCP port Here you need only specify the source port in the From field Any IP port You may here leave both the From as well as the To fields blank Here the rule will apply to all ports 4d From the Day of the Week drop down list select whether the rule Should apply to A Range of days Here you will have to select From which day To which day Any day In this case you may skip both the From as well as the To drop down fields Page 140 IP Address EATA From 192 168 168 lt 5 To 192 168 168 75 IP Address EIME 192
2. CTRY MEXICO MX CTRY MONACO MC CTRY MOROCCO MA CTRY_NETHERLANDS NL C TRY NEW_ZEALAND NZ CTRY NORWAY NO CTRY OMAN OM CTRY PAKISTAN PK CTRY PANAMA PA CTRY PERU PE CTRY_PHILIPPINES PH CTRY POLAND PL CTRY PORTUGAL PT CTRY_PUERTO_RICO PR CTRY QATAR QA CTRY ROMANIA RO CTRY RUSSIA RU CTRY SAUDI ARABIA SA CTRY SINGAPORE SG CTRY SLOVAKIA SK CTRY SLOVENIA SI CTRY_ SOUTH AFRICA ZA CTRY SPAIN ES CTRY SWEDEN SE CTRY_SWITZERLAND CH CTRY SYRIA SY CTRY TAIWAN TW CTRY THAILAND TH CTRY TRINIDAD_Y TOBAGO TT CTRY TUNISIA TN CTRY TURKEY TR CTRY_UKRAINE UA CTRY UAE AE CTRY_UNITED_ KINGDOM GB CTRY_UNITED_ STATES US CTRY_ URUGUAY UY CTRY_UZBEKISTAN UZ CTRY_ VENEZUELA VE CTRY VIETNAM VN CTRY YEMEN YE CIRY ZMBABWE ZW Channel DESC RIPTION Set channel lt value gt Value in decimal SSID DESC RIPTION Set ssid lt string gt Not More than 32 characters Closed System DESC RIPTION Set hidessid enable disable Enable ordisable broadcasting of SSID Per Node DESC RIPTION Set apbndge enable disable Enable ordisable isolation of wireless client RIS Fragment and Beacon Interval SYNTAX DESRIPION Set rts lt value Value in decimal default 2312 range 1 to 2312 i Set fragment lt value gt
3. CTRY_AZERBAI AN AZ CTRY_ BAHRAIN BH CTRY_ BELARUS BY CTRY BELGIUM BE CTRY BEUZ BZ CTRY BOUVIA BO CTRY BRAZL BR y C TRY_BRUNEI DARUSSALAM BN CTRY BULGARIA BG CTRY CANADA CA CTRY_CHILE AS CTRY_CHINA CN CTRY COLOMBIA CO CTRY_COSTA RICA CR CTRY_ CROATIA HR CTRY_CYPRUS CY CTRY_CZECH CZ CTRY_ DENMARK DK CTRY_ DOMINICAN REPUBLIC DO CTRY ECUADOR EC C TRY_EGYPT EG C TRY_EL SALVADOR SV CTRY ESTONIA EE CTRY_ FINLAND FI CTRY_ FRANCE FR CTRY FRANCE2 F2 CTRY_ GEORGIA GE CTRY_ GERMANY DE CTRY_ GREECE GR CTRY_ GUATEMALA GT C TRY HONDURAS HN CTRY HONG KONG HK CTRY_ HUNGARY HU CTRY_ICELAND S y CTRY_INDIA N y CTRY_ INDONESIA ID CTRY_IRAN R CTRY_IRELAND IE CTRY ISRAEL IL Page 168 Page 169 CRY MALY IT CTRY JAPAN JP CTRY JAPANI J1 CTRY JAPAN2 2 CTRY JAPAN3 3 CTRY JAPAN4 4 CTRY JAPAN5 J5 CTRY JAPAN6 J6 CTRY JORDAN JO CTRY_KAZAKHSTAN KZ CTRY_KOREA_NORTH KP CTRY_KOREA_ ROC KR CTRY KOREA ROC2 K2 CTRY_KOREA_ROC3 K3 CTRY KUWAIT KW CTRY LATVIA LV CTRY LEBANON LB CTRY LIECHTENSTEIN LI CTRY_ LITHUANIA LT CTRY_LUXEMBOURG LU CTRY MACAU MO CRY MACEDONIA MK CTRY MALAYSIA MY CTRY MALTA MT
4. Value in decimal default 2346 range 256 to 2346 Set beaconintval lt value gt Value in decimal default 1 range 1 to 1000 Set dtim lt value gt Data Beacon Rate value in decimal default 1 range 1 to 16384 WLAN State SYNTAX DESCRIPTION Get wlanstate Display whether status of current wireless operation is Enabled or Disabled Set wlanstate enable disable Set to Disable to tum off wireless operation Set to Enable to tum back on wireless operation Note When executing this command please ensure that you are not connected on wireless with device or you will be disconnected from the device and network The wireless operation can only be Enabled from the Ethemet port or UTP cable connection to device Get buttonpassreset Display the status of Reset Button operation If status is Enabled resetting of password by pressing Reset Button is allowed If status is Disabled resetting ing Reset Button isnot allowed Set buttonpassreset enable disable Set to Disable to prevent resetting of password by pressing Reset button Set to Enable to allow resetting of password by pressing Reset button Upgrade Firmware Set upgrade lt P address of AP gt lt firmware image filename gt DESC RIPTION To upgrade firmware in CU enter this command with the IP address of AP and the firmware image filename Page 170 Custom Configuration Update nem Cfgfile lt operation type gt lt P of PC running TFIP server gt lt f
5. networks work USER S MANUAL nd O an Ti V rab O QO lt Ea i O end 2 Q Y V ob a COMPEX WPE53G RoHS compliant Copyright 2007 Compex Systems Pte Lid All Rights Reserved This document contains information which is protected by copynght Reproduction adaptation or translation without pror pemission is prohibited except as allowed under the copynght laws Trademakk Infomation Compex isa registered trademark of Compex Inc Microsoft Windows and the Windows logo are the trademarks of Microsoft Com NetWare isthe registered trademark of Novell Inc WM M and WPA are the registered trademarks of Wi Fi Alliance All other brand and product names are trademarks or registered trademarks of their respective owners Notice Copynghts 2007 by Compex Inc All nghts reserved Reproduction adaptation or translation without prior permission of Compex Inc is prohibited except as allowed under the copynght laws Manual Revision by J ojo Manual Number U 0587 V1 12C Version 1 12 J uly 2008 Disclaimer Compex Inc provides this manual without waranty of any kind expressed or implied including but not limited to the implied warranties of merchantability and fitness fora particular purpose Compex Inc may make improvements and or changes to the product and or specifications of the product descnbed in this manual without pnor notice Compex Inc will not be liable for any tech
6. A reserved IP address is excluded from the pool of free IP addresses the DHCP server drawson fordynamic IP address allocation For instance if you set up a publicly accessible FIP or HTP server within your pnvate LAN while that server requires a fixed IP address you would still want the DHCP server to dynamically allocate IP addresses to the rest of the PCson the LAN Step 1 From the Advanced DHCP Server O ptions section click on the DHCP Server Reservations button Advanced DHCP Server Options show Active Dhep Leases i 4 T i Step 2 Click on the Add button DHCP Server Reservations Hardware Address Page 37 Step 3 Fill in The host portion of the IP Addressto be reserved The Hardware Address in pairs of two hexadecimal values Press the Apply button to effect your new entry DHCP Server Reservations IP Address 192 168 168 20 Hardware Address O00 80 45 e5 0d 05 xx xX XX XK XX XX Add Cancel The DHCP Server Reservations page refreshes to display the curently reserved IP addresses DHCP Server Reservations IP Address Hardware Address 192 168 168 20 00 80 45 e5 0d 05 Page 38 Delete DHCP Server Reservation Step 1 Select the reserved IP address to delete DHCP Server Reservations Hardware Address 00 80 45 65 0d 05 Add Back Step 2 Click on the Delete button DHCP Server Reservations IP Address 192 168 168 20 Hardware Address
7. AUTO Step 3 Click the Apply button and reboot your system after which your settings will become effective Page 138 Configure the Sec unty Features Use Packet Filtering Packet filtering selectively allows disallows applications from Intemet connection Configure Packet Filtering Available in Wireless Routing Clientand Gateway modes Step 1 p Select Packet Filtering from the Secunty Configuration command menu Packet Filter Configuration Packet Filter Type Disabled Step 3 Select fom three choices Disabled Sent Discarded and then click on the Apply button The default is Disabled which allowsall packetsto be sent Packet Filter Configuration Packet Filter Type Sent Destination Day of the Time of the Rule Name IE eb ERGE Part s week Day Add Step 4 Click on the Add button and you will be able to define the details of your Packet Filter Rule from the screen on the nght 4a Enter Rule Name for this new packet filtenng rule For example BlockCS 4b From the IP Address drop down list select whether to apply the rule to Page 139 Step 2 Select the Packet Filter Type by clicking on the Change button Select Packet Filtering Type amp Disabled All IF packets will be sent Sent AIP packets willbe sent except for moe those matching one or more of the rules All JF packets will be discarded except O Crecarded for those matching one or mone of the rules
8. Add Back Page 88 Step 1 Select NAT from the CONHGURATION Command menu Step 2 Click the IP Forwarding button in Advanced NATOptons Add IP Forward Entry fi 92 168 165 55 21 3 18 213 101 Add Cancel Private IP Address Public IP Address Step 5 The IP Forward Entries page reflects yournew addition Control the Bandwidth Available Available in Wireless Routing Client and Gateway modes Keep in control of your LAN network in router operation Bandwidth access to the Intemet on both the wireless LAN connection in Gateway mode and the Ethemet connection in Wireless Routing Client Mode can be managed Enable Bandwidth Control Step 1 Select Bandwidth Contol from the CONHGURATION command menu Enable Disable Bandwidth Control Bandwidth Control Status C Enable Disable Apply WAN Bandwidth Control Setup Upload Download Bandwidth Setting Download Total Rate kbit lo Upload Total Rate kbit lo LAN Bandwidth Control Setup Name Committed Rate kbit Ceil Rate kbit IPMAC Address Rule type Step 2 Bandwidth Contol is disabled by default select Enable and click the Apply button Enable Disable Bandwidth Control Bandwidth Control Status f Enable Disable Page 89 Configure WAN Bandwidth Contol The Upload Download Bandwidth Setting can limit throughput to the defined rates regardless of the number of connections Step 1 Select WAN Bandwi
9. Ca Page 23 Step 3 At the Address bartype in http 192 168 168 1 and press Enteron your keyboard Step 4 At the login page click on the LOGIN Button Wireless LAN Access Point Management Please enter your password seeccece Forgot your password see the User s Guide for instructions You willthen reach the home page of the access point web interface Page 24 fit ele lAn Poirt AF Soi ice Inherent aparer mn 4 i lB x Ble D ew Fabs Dei Hil Gu O is 2 fp ln gle ree oo A o L S Aes 6 hiie aE 158 168 ergai ap e uras Cooge C7 POCELA Bamar t m Hea a ee COMPEX Wireless LAN Access Point WPES36 BEE Sib SMP Setyo TeinetS5M Setup Web Hasagemnent Sets The current operation mode is Access Point please choose an option fren the configuration mena 1 choose an option Fron the configuration men opt an ption trem the configuration arn t anfi n nemu chooser Choose an ption fren the can Jiii i tsup oF arsos the Router configuration pettings nnn Perform Basic Configuration Setup Management Port At the Management Port Setup page you may e Automatically obtain IP address from DHCP server The default IP 192 168 168 1 is used until a new IP isobtained Access Point Clients also allows PCs connected to the Ethemet port to obtain IP from the DHCP server at the access point end network e Manually define IP address Follow th
10. Parallel Broadband feature enabled through the web based configuration Please note that all the access points need to be interconnected Step 1 Select Parallel Broadband from the CONHGURATION command menu Step 2 Select Enable and click the Apply Parallel Broadband Enable Disable button Step 3 Status Enable Disable Repeat Step 1 and Step 2 forthe rest of g the access points New users will then be assigned to the access point with the smallest load ensuring that each access point has a ppro users ximately the same number of Important Implementing Parallel Broadband is redundant if there isonly 1 access point Page 95 Setup Email Notification This feature notifies you by email if there is a change in the WAN IP address that was supplied to you Step 1 WAN PPPoE Setup Select WAN PPPoE Setup or WAN PPTP Setup from the CONAGURATION command menu Step 2 Click on the Email Notification button Email Notification Email Notification Enable Disable Email address of Receiver mail yahoo corn IP address of Mail Server 192 168 88 43 Needs Authentication User Name sampleUser Password Email address of Sender send yahoo com Status Step 3 Select to Enable Email Notification and enter the following details e Email address of Receiver Email address of the receiverto whom the message would be sent e IP address of Email Server IP address of
11. Select WAN Type Static IP Address Dynamic IP Address PPP over Ethernet PPTP Apply Cancel Help Page 57 Setup your WAN forcable intemet whereby fixed WAN IP address is assigned by ISP WAN Setup Parameters Example e IP Address 203 120 12 240 e Network Mask 255 255 255 0 e Gateway IP Address 203 120 12 2 Step 1 Under CONHGURATION on the command menu select WAN Setup Step 2 Access the Select WAN Type page and select Static IP Address before clicking the Apply button Select WAN Type Static IP Address Dynamic IP Address PPP over Ethernet PPTP Apply Cancel Help Step 3 Fill in the information provided by your ISP in the IP Address Network Mask and Gateway IP Address fields and click the Apply button Select Reboot System under SYSTEM TOOLS and click the Reboot button to effect the settings WAN Static Setup WAM Type Static Change IF Address 20312012240 Network Mask 255 255 255 0 Gateway IP Address 203120122 Help Page 58 Setup your WAN for ADSL Intemet using PPP over Ethemet If you subscnbe to an ADSL service using PPP over Ethemet PPPoE authentication you can set up your access point s WAN type as follows Forexample you may configure an account whose usemame is guest asdescnbed below Step 1 Under CONAGURATION on the command menu click on WAN Setup Step 2 Access the Select WAN Type page and choose PPP over Ethemet before clicking the Apply bu
12. Select the checkbox of the MAC address you wish to delete Click the Delete button MAC Filter Address List MAC Address List Radio 1 Del MAC Address Comments E 08 70 f8 70 80 70 maci 00 b0 d0 86 bb f7 mac3 Apply to all 1 AP s f All changes will take effect after reboot Page 73 Step 3 The MAC Filter Address List page displays with updated MAC Address List MAC Filter Address List MAC Address List Radio 1 Del MAC Address Comments Apply to F 08 70 f8 70 80 70 maci all Al changes will take effect after reboot Page 74 Delete a MAC Address from Individual Access Point Step 1 Select MAC Filtering from WLAN Setup The MAC Address Filtering page displays Select Editforthe cormesponding access point MAC Address Filtering Radio 1 MAC Filtering Options AP Type ESSID Security Status Policy Main AP sampleRouter NONE Enable v Accept v Virtual AP VAP1 NONE Disable Deny Virtual AP VAP2 NONE Enable Deny View Complete MAC List ii changes wil take effect after reboot Step 2 The MAC Filter Address List page displays Select the checkbox of the MAC address you wish to delete Click the Delete button MAC Filter Address List MAC Address List ESSID sampleRouter Del MAC Address Comments Apply to F 08 70 f8 70 80 70 maci 09 70 f8 70 80 70 all mac2 all O 00 b0 d0 86 bb f7 mac3 1 AP s NIE CTR aco AEROS KS LOA hee erage
13. z Wireless Chents 5 Su bnet Page 79 Configure Static Routing Step 1 Select Routing from the CONAGURATION command menu The System Routing Table page displays Initially the table contains the default routing entnes of the access point Static Routing Table Network Mask Gateway Add Beck Step 3 Enter the Destnaton IP Address Destination Net Mask and Gateway IP Address and click the Add button The Static Routing Table reflects the entry Page 80 System Routing Table Destination Network Mask Gateway 192 168 88 43 25525525255 2 192 168 168 0 255 255 255 0 Static Routing Table Step 2 Click on the Static Routing Table button and then click the Add button Static Routing Table Destination IP Address 192 168 100 0 Destination Net Mask 255 255 255 0 Gateway IP Address 192 168 168 254 Add Cancel Static Routing Table Destination Network Mask Gateway 192 168 100 0 255 255 255 0 192 168 168 254 Add Back Use Routing Information Protocol Available in Wireless Routing Clientand Gateway modes RIP Routing Information Protocol allows information to be exchanged within a set of routers underthe same administration RIPv1 bases the path used to passtraffic between routers on the fewest number of hops between the source and destination IP addresses within a packet Routers broadcast RIPv1 information on all router interfaces every 30 seconds and process t
14. 168 168 25 192 168 168 IP Address Any w From 192 168 168 TO 192 166 166 Destination Port Aange From 2 Destination Port Am From To Day of the Week From Maen To Fri Day of the Week PENi From Sun To 4e At the Time of the Day drop down list you may also choose to apply the rule to A Range of time In which case you have to specify the time in the format HH MM where HH may take any value from 00 to 23 and MM any value from 00 to 59 Any time Here you may leave both From and To fields blank Step 5 Click on the Apply button to make the new tule effective The Filtering Configuration table will then be updated Add a new Packet Filter rule Rule Name Blockts IP Address Arny ow om 192 168 166 192 164 168 27015 27015 ange From gt haan F Oo Fn las Range hh 00 23 mm 00 59 rom 0700 hh mm 18 00 hh mm Ada Canco Hep Page 141 Time of the Day Range hh 00 23 mm 00 59 From 08 00 hh mm To 21 30 hh mm Time of the Day Arny From To Step 6 In this example we would block an application called CS from all PCs any IP address within the network from Monday to Fnday 7am to 6pm and this application is using the port number 27015 Therefore for a mle we name BlockCS and add the entnes depicted on the
15. 29 System4 Debug 10 0 0 10 This is Syslog test message number 17 03 07 2006 10 18 28 Local3 Info 10 0 0 10 This is Syslog test message number 16 03 07 2006 10 18 27 Lpr Critical 10 0 0 10 This is Syslog test message number 15 03 07 2006 10 18 26 System4 Notice 10 0 0 10 This is Syslog test message number 14 03 07 2006 10 18 25 System1_Critical 10 0 0 10 This is Syslog test message number 13 03 07 2006 10 18 24 User Warning 10 0 0 10 This is Syslog test message number 12 03 07 2006 10 18 23 System2 Info 10 0 0 10 This is Syslog test message number 11 03 07 2006 10 18 22 Local6 Critical 10 0 0 10 This is Syslog test message number 10 03 07 2006 10 18 21 Local4 Emerg 10 0 0 10 This is Syslog test message number 9 03 07 2006 10 18 20 UUCP Debug 10 0 0 10 This is Syslog test message number 8 03 07 2006 10 18 19 Local4_Info 10 0 0 10 This is Syslog test message number 7 03 07 2006 10 18 18 User_Error 10 0 0 10 This is Syslog test message number 6 03 07 2006 10 18 17 Local3 Notice 10 0 0 10 This is Syslog test message number 5 03 07 2006 10 18 16 Kernel Info 10 0 0 10 This is Sysloa test message number 4 4 100 24MPH 10 20 03 07 2006 Page 151 Setup System Clock Step 1 Select System Clock Setup from the SYSTEM TOOLS menu System Time Setting Current System Time 01 01 2000 00 14 52 and Time Zone GMT oO7 00 Proposed System Time 06 11 2007 EA Select your Time Zone GMT 07 00 Mountain Time US amp Canadal bd Auto T
16. About SYSLOIN cccccccsssssssceeeeeceeenseseceeecesseeeaassseeeeeseeseeeeasseeeseeeess 165 GEETECCHNIGA SUD DOM rire E A 166 APPENDIX USE THE COMMAND LINE INTERFACE 167 APPENDIX VIRTUAL AP MULTI SSID FAQ secsec 172 APPENDIX VIEW THE TEC HNIC AL SPEC IFC A TONS 176 Overview the Product Intoduction NetPassage WPE53G is a high performance and low cost IEEE802 11b g Access Point using the latest AR5007 technology NetPassage WPE53G is also very small compared to other Access Points in the market Using Atheros System on Chip SoC solution WPE53G supports high soeed data transmission of up to 54Mbps or 108 Mbps Moreover Powerover Ethemet support enables NetPassage WPE53G to be used even in areas without readily available power outlets NetPassage WPE53G complements devices supporting multiple virtual AP connections by directing each to a separate secure virtual LAN Each VLAN can be secured with different wireless encryption methods providing the secunty connections necessary for enterpnse networks NetPassage WPE53G also incorporates features that are useful to system integrators such as Antenna Alignment for adjusting your antenna to optimize performance Syslog for event logging as well as Telnet SSH for easy device management Page 1 Features and Benefits Compact Fom Factor Small in dimension light in weight You can brng it with you anywhere e Multiple SSID Supporting VLAN Segmentatio
17. Gateway mode Parallel Booadband provides scalable Intemet bandwidth with Load Balancing and FailLOver Redundancy Load Balancing is provided by balancing the aggregate bandwidth of multiple broadband connections across the traffic demands of your pnvate network With Parallel Broadband if a particular broadband connection fails the access point will use the remaining functional broadband connections thus providing Fail Over Redundancy Implementing Parallel Booadband requires the installation of 2 or more access points in the network each connected to separate broadband Intemet service account As there is no restnction to the type of broadband Intemet they are connected to be it cable or ADSL you may thus have one access point connected to cable Intemet and another to an ADSL line The access points have to be operating in Gateway mode with Parallel Broadband and set to the same ESSID Parallel Broadband 3 x Cable ADSL INTERNET modems i Load Balancing Redundancy f gt nN Z 3 Xx Access Point Laptop with PCI adapter Page 94 Enable Parallel Broadband Begin by venfying that every access point in the network is properly configured to connect to its individual broadband Intemet account Secondly ensure that either e each access point is connected to an Ethemet port in the network OR e the accesspoints are wired to each other Then allthe access points hasto have the DHCP server followed by the
18. IP of the DHCP client The DHCP client will thus receive its dynamic IP address from the access point but will access to the Intemet or the other LAN through the Default Gateway defined by the DHCP Gateway IP Address For instance if the access point in Access Point Client mode connects to an Intemet gateway X a PC wired to the access point will be unable to obtain a dynamic IP address directly from X But if you enable the DHCP server of the access point and set the IP address of X as the DHCP Gateway IP Address the PC will obtain its IP address from the access point and access the Intemet through X Page 35 View Active DHCP Leases Step 1 Select Management Setup from the CONHGURATION menu Step 2 Go to the Advanced DHCP Server Options section and click on the Show Active DHCP leases button Advanced DHCP Server Options Show Active Dhcp Leases Dhcp Server Reservations The DHCP Active Leases ta ble displays e The Host Name of the DHCP client e The IP Address allocated to the DHCP client e The Hardware MAC Address of the DHCP client e The Lease Expired Time DHCP Active Leases Host Name IP Address Hardware Address Lease Expired Time sampleHost 192 168 168 22 09 00 7c 01 00 01 11 NOTE Invalid date and time displayed in the Lease Expired Time column indicates that the clock of the access point has not been set propery Page 36 Reserve IP Addresses for Predetemined DHCP Clients
19. LAN clients allowing the access point to direct DNS requests from the LAN to a local or to a closer DNS server that it is aware of thus improving the response time DNS Redirection also provides more control to the network administrator In the event that there isa change in DNS servers he can simply indicate the actual DNS server IP address an the access point LAN Setup and enable DNS Redirection without having to reconfigure the DNS settings of every LAN client Page 98 pe ira oe cae ro sanar i indicate S Server A Enter a URL in y the web browser 6 Website displays when communication _ g between web server and router is established H gt Router i 1 Router asks DNS Server A Internet 4 DNS Server A returns web server IP address to router jii iii ts i a Web Server hosting the website 3 2 DNS Server A does not have the web server IP address and contacts another DNS Server for the answer 3 DNS Server B then searches its cache or contacts birir spse ba pu other DNS servers to reply to DNS Server A thee DNS ServerA Another DNS Server B contacted by Router contacted by DNS ServerA NOTE An entry forthe DNS Server field in the PC TCP IP Properties is required for Intemet access If the exact DNSIP address is unavailable simple key in any valid IP address forexample 10 10 10 10 Page 99 Enable or Disable DNS Redirection Step 1 Select DNS
20. Redirection from the Home User Features command menu Step 2 Enable Disable DNS Redirection Select to Enable or Disable DNS Redirection Status Enable Disable Step 3 Apply Click the Apply button Page 100 Dynamic DNS Setup With Dynamic IP Intemet connection keeping track of your public IP address for Intemet communication is complicated as it is changed regulary by the ISP If you are doing some web hosting on your computer Intemet users will have to keep up with the changing IP addressto access your computer When you sign up for an account with a Dynamic Domain Name Service DDNS provider it will register your permanent domain name for example MyName Domain com You can configure the access point to automatically contact your DDNS provider whenever it detects a change in its public IP address The access point will then log on to update your account with its latest public IP address If a user enters your address MyName Domain com into their web browser this request would go to the DDNS provider which will then redirect the request to your computer regardless of the IP address it Is Currently assigned by your ISP To enable disable Dynamic DNS Setup Step 1 Select Dynamic DNS Setup from the Home User Features command menu Step 2 Select to Enable or Disable Dynamic Enable Disable Dynamic DNS DNS Sena 3 eee Dynamic DNS is disabled by default ic DNS Status Enable Disable Click the Ap
21. Select to Enable Syslog Enter the Logging IP or Domain Name Enter the Logging Port Click Apply to make the changes Page 150 Follow these sample stepsto view logged information Step 1 Search fora Syslog listening application Web Images Groups News more Search the web pages from Singapore Step 2 Select a Syslog listening application Web Syslog Daemon for Windows Free Syslog Server Firewall logging Windows Syslog Daemon recelves filters logs displays and forwards Syslog messages and SNMP traps Freeware and service versions available Step 3 Download Syslog listening application Domujoag WOM Step 4 Insta Il Syslog listening application Step 5 View logged information on Syslog listening application Syslog Daemon elk File Edit View Help M mA Display 00 Default Date Time Priority Hostname Message 03 07 2006 10 18 36 Mail Info 10 0 0 10 This is Syslog test message number 24 03 07 2006 10 18 35 System3 Emerg 10 0 0 10 This is Syslog test message number 23 03 07 2006 10 18 34 Local0 Emerg 10 0 0 10 This is Syslog test message number 22 03 07 2006 10 18 33 Mail_Debug 10 0 0 10 This is Syslog test message number 21 03 07 2006 10 18 32 Syslog Warning 10 0 0 10 This is Syslog test message number 20 03 07 2006 10 18 31 Local0 Debug 10 0 0 10 This is Syslog test message number 19 03 07 2006 10 18 30 Local5 Alert 10 0 0 10 This is Syslog test message number 18 03 07 2006 10 18
22. Setup page for Client Mode WLAN Basic Setup Card Status enable The Current Mode Client Change ESSID compexwpeb3g Site Survey Remote AP MAC 00 00 00 00 00 00 Wireless Profile 802 11b g mixed gt Country NO_COUNTRY_SET NA Ts Rate Fully Auto gt Example WLAN Basic Setup page for Access Point WLAN Basic Setup Card Status enable The Current Mode Access Paint Change ESSID compexwpeSig Wireless Profile 802 11b g mixed Country MO _COUNTRY_SET NA Channel SmarSelect x Channel Survey Tx Rate Fully Auto Maximum Associations ha 32 1 128 l Closed System Act as RootAP I VLANID 1 4094 Page 41 WLAN Basic Setup Desc nption page Parameters The Current Mode The default operating mode is the Access Point mode Operating modes e Access Point Mode Client Mode Wireless Routing Client Gateway Mode Wireless Adapter Mode Transparent Client Mode RepeaterMode You can toggle the modes by clicking on the Change button ESSID Enter a preferred name for the wireless network Your wireless clients must be configured with the same ESSID This case sensitive entry can consist of a maximum of 32 Characters Site Survey A list of wireless devices in the WLAN that are detected by your access point Information such as MAC address channel SSID algonthm and signal strength can be found in the listing This feature is supported by the Access Point Client and W
23. VAP2 NONE Step 4 Enter the MAC Address of the client in the format XX XX XX XX XX XX where xcan take any value from Oto 9ora tof Enter the Comment This descnbesthe MAC Address you have entered To apply to all vitual access points check Apply to All To apply to specific virtual access point select the checkbox of the conesponding access point Click the Apply button Add MAC Address MAC Address 08 70 18 70 80 70 xx Xx XX XX xx XXx Comment mac4 Apply to All Selected AP ESSID Security sampleRouter NONE E YAPI NONE O YAP2 NONE Page 71 Step 5 MAC Filter Address List page displays with updated MAC Address List MAC Filter Address List MAC Address List ESSID sampleRouter Del MAC Address Comments Apply to F 08 70 f8 70 80 70 mac4 all All changes will take effect after reboot NOTE Please reboot to effect allchangesand new MAC address entres Page 72 Delete a MAC Address from All Access Points Step 1 Select MAC Filtering from WLAN Setup The MAC Address Filtering page displays Select View Complete MAC List MAC Address Filtering Radio 1 MAC Filtering Options AP Type ESSID Security Status Policy Main AP sampleRouter NONE Enable v Accept v Virtual AP VAP1 NONE Disable Deny virtual AP VAP2 NONE Enable Deny View Complete MAC List All changes will take effect after reboot Step 2 The MAC Filter Address List page displays
24. as the access point For example if the access point IP address is 192 168 168 1 and the network mask is 192 168 168 1 and 255 255 255 0 the DHCP Start IP Address should be 192 168 168 X where X can be any number from 2 to 254 It is pre set to 192 168 168 100 DHCP End IP Address This is the last IP address that the DHCP servercan assign and should also belong to the same subnet as your access point For example if the access point IP address is 192 168 168 1 and the network mask is 192 168 168 1 and 255 255 255 0 the DHCP End IP Address should be 192 168 168 X where X can be any number from 2 to 254 It is pre set as 192 168 168 254 Page 32 DHCP Gateway IP Address Though the DHCP server usually also acts as the Default Gateway of the DHCP client the access point allows you to define a different Gateway IP Address which will be allocated as the Default Gateway IP of the DHCP client The DHCP client will thus receive its dynamic IP address from the access point but will access to the Intemet or the other LAN through the Default Gateway defined by the DHCP Gateway IP Address For instance if the access point in Access Point Client mode connects to an Intemet gateway X a PC wired to the access point will be unable to obtain a dynamic IP address directly from X But if you enable the DHCP server of the access point and set the IP address of X asthe DHCP Gateway IP Address the PC will obtain its IP address f
25. automatically switchesto loader mode Recovery in progres ON Before starting check the status of the diagnostic LED to confim if finmware failure hasoccuned Step 1 Stop power supply and disconnect the access point from the network Step 2 Connect the LAN port of the access point to the LAN port of your computer with an MDI cable Step 3 Power on the access point and start up your computer You are recommended to set your computers IP address to 192 168 168 100 and its network mask to 255 255 255 0 It is recommended that your computer IP address is set to 192 168 168 100 and the network mask is set to 255 255 255 0 Step 4 Insert the Product CD into the CD dnve of your computer Page 157 Step 5 From the Start menu click Run and type cmd When the command prompt window appears type in the following command XA recovery TFIP i 192 168 168 1 PUT image_name IMG where X refers to your CD dnve and image_name IMG refers to the firmware filename found in the Recovery folder of the Product CD Step 6 If you have downloaded a newer firmware and have saved it in yourlocal hard disk as C accesspoint accesspoinboo IMG then replace the command with this new path and fimware name For example C accesspoint IFIP i 192 168 168 1 PUT acc esspoinboxx img The recovery process takes place You can monitor the progress of the recovery process with the diagnostic LED When firmware restoration is compl
26. e Checkand enterthe Remote BSSID root AP s MAC address Femote ESSID default Remote BSSID 00 80 48 3c 0681 r Click Apply Page 126 Secure your Wireless LAN Step 1 Select Security from WLAN Setup under the CONHGURATION menu Step 2 Make a selection from the Securty Mode drop down list The Security Mode is set to NONE by default Click on the Apply button NOTE All nodes in your network must share the same wireless settings in orderto communicate Page 127 Setup WEP At the WEP Setup page WEP Setup WEP Setup Transmission Key Key 1 gt Transmission Key WEP Key Table Edit WEP Key Table Apply Apply Step 1 Select the Transmission Key from the pull down menu e Key 1 e Key 2 e Key 3 e Key 4 WEP Key Setup Key String Type Hex 0 9 a f A F Length 10 or 26 C ASCII 0 9 a z A Z Length 5 or 13 Key 1 64Bit C 128Bit a Reset Key 2 64Bit 128Bit hz Reset Key 3 64Bit 128Bit oOo Reset Key 4 64Bit 128Bit as Reset Apply back Step 2 Specify the key entry type by selecting either e Use Hexadecimal e Use ASCII The access point lets you define up to four different transmission keys It defines a set of shared keys for network secunty You must enter at least one WEP key to enable secunty using a shared key Step 3 Select the length of each encryption key e 64 bit WEP 10 hexadecimal or 5 ASCII Text e 12
27. from the specified destination port Users can either set a single port number ora range of port numbers This parameter refers to the options in the packet header The available selection options are abbreviated as follows SEC Secunty LSRR Loose Source Routing Timestamp Timestamp RR Record Route SID Stream Identifier SSRR Strict Source Routing RA Router Alert This parameter would let you screen packets according to their Time To Live TTL value available options are 1 Equal 2 Lessthan 3 Greaterthan 4 Not equal Use the Firewall Log The Firewall Log captures and stores network traffic information such as the type of data traffic the time the source and destination address port aswell asthe action taken by the firewall View Firewall Logs Available in Wireless Routing Client and Gateway modes Step 1 Select Firewall Log from the SECURITY CONHGURATION command menu Step 2 Firewall Log Click on the Refresh button to see the information captured in the log Source Destination Source Destination lnforriation hagess Address Pon Pon Time at which the packet was detected by the firewall Action which states whether the packet wasaccepted ordenied Protocol type of the packet Source Address from which the packet onginated Destnaton Address to which the packet was intended Source Port from which the packet was initiated Destination Portto which the packet was meant
28. in which to save the key i home localuser ssh id dsaj Enter passphrase empty for no passphrase Enter same passphrase again Your identification has been saved in homer localuser ssh id dsa Your public key has been saved in home localuser ssh id dsa pubh The key fingerprint is aal 3d f8 e5 localuserfmybox home cor Page 67 Set the WEB Mode Client HTTP Server The access point supports HTIPS SSL featuring additonal authentication and encryption for secure communication in addition to the standard HTIP Step 1 Select Web Management Setup from the CONHGURATION menu Step 2 Select whetherto set web server to HMP or HTIPS SSL mode Specify the Login Timeout time of inactivity in seconds before user is automatically logged out Click Apply Changeswill be effected after reboot Web Server Setup Mode HTTP HTTPS SSL Login Timeout I00 Seconds 3 Apply Page 68 Use MAC Filtering MAC Filtenng acts as a secunty measure by restncting user network access according to MAC address Each WLAN or radio card supports up to 16 virtual access pointsand hasitsown MAC address listing NOTE MAC Filtenng will not filter any MAC address from the Ethemet port Page 69 Add a MAC Address to the MAC Address List Step 1 Select MAC Filtering from WLAN Setup The MAC Address Filtering page displays In this page you may also set the MAC Filtering Status t
29. left Clicking on the Add button will effect your packet filter rule Use URL FAiltenng URL Filtering allows you to block objectionable websites from your LAN users Configure URL Filtering Available in Wireless Routing Clientand Gateway modes Step 1 Select URL Filtering from the Security Configuraton command menu Step 2 URL Filter Configuration To select the URL Filter Type click the Change button Step 3 Select to Block or Allow and then Select URL Filtering Type click on the Apply button The default is Disabled which allows all websites to be accessed Then click the Add button Step 4 Add a new URL Filter For the Host Name field input the web site address that you wish to block Then Host Name wow objectablewebstes com click the Add button to complete your Gea Lome setup Page 142 Configure the Firewall Configure SPI Rrewall Available in Wireless Routing Client and Gateway modes Stateful Packet Inspection SPI thwarts common hacker attacks like IP Spoofing Port Scanning Ping of Death and SynFlood by companng certain key parts of the packet to a database of trusted information before allowing it through NOTE Firewall secunty rules should be planned carefully as incorect configuration may Cause improper network function Select Rrewall Configuration from the Security Configuration command menu Enable the firewall You can choose among the Default Low Default Medium or Defau
30. of the FCC Rules Operation is subject to the following two conditions This device may not cause ha mful interference and This device must accept any interference received including interference that may cause undesired operation RF Exposure waming The equipment complies with FCC RF exposure limits set forth for an uncontrolled environment The equipment must not be co located or operating in conjunction with any other antenna or transmitter IC ES 003 Statement This Class B digital apparatus complies with Canadian IC ES 003 Declaration of Conformity Compex Inc declares the following Product Name Wireless Network Access Point Model No WPE53G conforms to the following Product Standards This device complies with the Electromagnetic Compatibility Directive 89 336 EEC issued by the Commission of the European Community Compliance with this directive implies c onfo mity to the following European Noms in brackets are the equivalent intemational standards Hlectomagnetic Interference Conduction and Radiation EN 55022 CISPR 22 Elec tromagnetic Immunity EN 55024 IEC 61000 4 2 3 4 5 6 8 11 Low Voltage Directive EN 60 950 1992 A 1 1993 A 2 1993443 1995 A4 19964411 1997 Therefore this product is in conformity with the following regional standards FCC Class B following the provisions of FCC Part 15 directive CE Mark following the provisions of the EC directive Compex Inc also declares that The wire
31. rebooting to take effect after saving Long Range Check for recommended values from long distance option setup page SYNTAX DESCRIPTON Enable outdoor for long range connection Set the connection distant value in decimal Set the ACK timeout value in decimal Set the CTS timeout value in decimal Set the Slot timeout value in decimal TX Power SYNTAX DESRPION Set txpower lt string gt Default full auto 1 2 3 4 17 full min TX Rate SNAX DESCRIPMON Set txrate lt string gt Values are default auto 802 11a 6 9 12 18 24 36 48 54 auto Version AG 802 11b g mixed 1 2 5 5 11 6 9 12 18 24 36 48 54 auto 802 11b only 1 2 5 5 11 auto Page 167 Wireless Mode PSYNTAX DESCRIPTION Set radio_off_eth_down enable disable WEP Key Must first set a key entry type and then proceed to set the key index size and value SYNTAX C s ESCRIPTION Set key lt keyindex gt lt keysize gt lt keyvalue gt Set keyentrymethod hex ascii Set key lt keyindex gt default Set default key Add or Delete User SYNTAX ee CS C S C C C C C C CC TDESCRIPMECCN County Code Set countrycode lt iso name gt List of countnes Set countrycode lt 2 letter string gt 0 NA CTRY ALBANIA AL CTRY_ ALGERIA DZ CTRY_ARGENTINA AR CTRY_ ARMENIA AM CTRY_AUSTRALIA AU CTRY_ AUSTRIA AT
32. users Can upgrade the firmware remotely through Telnet SSH e RIP1 2 In Routing Mode Routing Information Protocol Version 1 2 is supported Page 3 When to Use Which Mode Access Point Mode The Access Point Mode is the default mode of the access point and enables the bndging of wireless clients to access the wired network infrastructure and also enables their communication with each other In this example the wireless users are able to access the file server connected to the switch through the access point in Access Point Mode Internet Switch modem amp router Access Point File server Page 4 Access Point Client Mode In Access Point Client Mode the device actsasa wireless client When connected to an access point it createsa network link between the Ethemet network connected at this client device and the wireless Ethemet network connected at the access point In this mode it can only connect with another access point Other wireless clients cannot connect to it directly unless they are also connected to the same access point allowing them to communicate with alldevicesconnected to the Ethemet port of the access point In this example the workgroup PCs can access the printer connected to the access point in Access Point Client Mode Optional additional feature Point to Point connection in this operation mode is also supported if you specifically wish to connect with an access point on
33. 00 60 45 e5 0d 05 XX XX XX XX XX XX Sad Deter The DHCP Server Reservations table refreshesto display yourchanges Page 39 Setup WLAN Configure the Basic Setup of the Wireless Mode Step 1 Select WLAN Setup from the CONHGURATION menu and you will see the sub menus expanded under WLAN Setup select Basic The default operating mode of the access point is the Access Point mode WLAN Basic Setup Card Status enable The Current Mode Access Point Change ESSID lcompexswpe53q Wireless Protile 802 11b q mixed Country NO_COUNTRY_SET NA Channel SmanSelect Channel Survey Tx Rate Fully Auto Maximum Associations 32 32 1 128 l Closed System l Act as RootAP I VLANID 1 4094 Step 2 Optional Change Current mode To change the cument mode of the access point click on Change select the Operaton Mode and click on the Apply button to access the setup page of the selected mode You will be prompted to reboot the access point to effect the mode setting WLAN Operation Mode Operation Mode Wireless Routing Client Client Mode PPM Wireless Routing Client Gateway Mode Wireless Adapter Mode Transparent Client Mode Repeater Mode Page 40 Step 3 Enter the parameters in their respective fields click on the Apply button and reboot your device to let yourchanges take effect Note that the WLAN Basic Setup pages for the modes are different Example WLAN Basic
34. 02C 10 to 80 RH Humidity RH Relative Humidity 91 8mm x 66mm x 25mm H x W x D Technical Support Information The warranty information and registration fom are found in the Quick Install Guide For technical support you may contact Compex or its subsidianes For your convenience you may also seek technical assistance from the local distnbutor or from the authonzed dealer reseller that you have purchased this product from For technical support by email wnte to support compex com sg Referto the table below forthe nearest Technical Support Centres Technical Support Centres Contact the technical support centre that services your location U S A Canada Latin America and South America Compex Inc 840 Columbia Street Suite B Brea CA 92821 USA Tel 1 714 482 0333 8 a m 5 p m Pacific time Tel 1 800 279 8891 Ext 122 Technical Support Fax 1 714 482 0332 Asia Australia New Zealand Middle East and the rest of the World Compex Systems Pte Ltd 135 Joo Seng Road 08 01 PM Industnal Building Singapore 368363 Tel 65 6286 1805 8 a m 5 p m local time Tel 65 6286 2086 Ext 199 Technical Support Fax 65 6283 8337 Intemet E mail support compex com sg access FiPsite fto compex com sg Website http www cpx com orhttp www compex com sg We value your feedback If you have any suggestions on improving we would like to hearfrom you Please contact usat Fax 65 62809947 Ema
35. 153 Step 4 You need to reboot the system after the finmware upgrade Firmware Upgrade Firmware upgrade successfully reboot now NOTE The fimmware upgrade process must NOT be interrupted otherwise the device might become unusable Page 154 Upgrade the Anmware with Command Line Interface You can check the types and version of your fimmware by clicking on About System from the HELP menu in UC onfig Follow these steps to upgrade firmware from Command Line Interface CL Step 1 Ensure that you have the updated firmware available firmware File Edit View Deri Tools Help Step 2 On the PC connected to the AP run a TFIP server and setup to point to the same firmware image filename ANI T Current Directory C4 fFirmwar Browse Server interaces 17218 0101 Show Dir Thtp Server Tftp Client Syslog server Connection received from 172 158 0 3 on port 2045 Read request for file lt Firmware IMG Firmware MG sent 7506 blks 364273 bytes Connection received from 172 185 0 3 on port 2048 Read request for file lt Firmware MG CO y I File size 34ra 3166720 Bytes sent 263093 Bytes sec Current Acton Sample Screenshot Page 155 Step 3 In the Command Line Interface enter the command with the IP address of the AP and the filename of the finmware image asthe parameters Set upgrade lt P address of AP gt lt firmware image filename
36. 8 bit WEP 26 hexadecimal or 13 ASCII Text To clearthe values that you have entered in the field click on the Reset button Click on the Apply button and reboot youraccess point Page 128 Setup WPA Personal Available in Access Point Repeaterand Gateway Modes Follow these steps if you have activated the WPA Personal WPA2 Personal or WPA Personal AUTO sec unty modes At the WPAI 2 PSK Setup page VWPA1 2 PSK Setup Key String Type C Hexadecimalfa4 hex digits Passphrase 8 63 ascii characters WPA PSK Cipher Type GTK Update seconds 60 9999 Step 1 Specify the key entry type by selecting either e Passphrase Alphanumeric characters e Hexadecimal Step 2 Fillin the pre shared network key If you are using the Passphrase format your entry can consist of a minimum of 8 alohanumenc charactersora maximum of 63 alohanumenc characters Otherwise when using the Hexadecimal format your entry MUST consist of 64 hexadecimal characters Page 129 Step 3 For WPA Personal Set the Cipher Type to TKIP WPA replaces WEP with a strong encryption technology called Temporal Key Integnty Protocol TKIP with Message Integnty Check MIC For WPA2 Personal Set the Cipher Type to AES Advanced Encryption Standard AES is a stronger symmetnc 128 bit block data encryption technique AES is a requirement of WPA2 under the IEEE 802 11i standard For VWPA Personal AUTO Set the Cipher Type to Auto to a
37. 80 48 ff 00 20 o OMbps Retresh Back Step 3 To check the details on an individual wireless client click on the corresponding MAC Addressin the WLAN Station List The statistics of the selected wireless client displays 00 30 43 ff 00 2c Statistics Authentication Type Encryption Open No Authentication Deauthentication Association Disassociation Reassociation 0 T g 0 MSDU Data Multicast Management Control Errors Receive 0 0 14794 o 0 Transmit 0 10998 T 0 In Client mode you are not allowed to view the information of other wireless clients to do that you need to change to the Access Point mode Page 56 Setup Your WAN Available in Wireless Routing Client and Gateway modes Setup your WAN to share Intemet connection among the clients of the access point Setup your WAN forcable intemet whereby WAN IP address is dynamically assigned by ISP The access point is pre configured to support this WAN type However you may venfy the WAN settings with the following steps Step 1 Under CONHGURATION on the command menu select WAN Setup Step 2 On the WAN Dynamic Setup screen venfy that the WAN Type is Dynamic DHCP Otherwise click on the Change button WAN Dynamic Setup WAN Type Dynamic DHCP Change IP Address Refresh Network Mask Gateway IP Address Primary DNS Secondary DNS Step 3 Select Dynamic IP Address and hit the Apply button Reboot to let the settings take effect
38. Address O oint 1 CKK KK K K K RR sine l Enter the MAC addresses of oint 3 FRE RKERRERKERKEX the prefered APs oint 4 o Ce eer ie et a 2 Click Apply to effect the settings Page 112 Get Long Distance Parameters The access point can calculate and display suggested values for certain parameters to use to ensure that efficient wireless communication between physically distant access points Select Advanced from WLAN Setup under Configuration Click on the Long Distance Parameters button under the Extended Features section Extended Features Long Distance Parameters Wihdhd Settings WOS2 Settings Select to Enable the Outdoorfunction Long Distance Parameters OutDoor Disable Distance meter la Show Reference Data SlotTimefus ACKTimeOut us CTSTimeOut us Note Enter the distance of the client from the AP 2 set for recommended parameters for SlotTime AKCTimeOut and CTSTimeout will be computed You can use the recommended parameters or make your own fine tunings Changes made will only take effect after rebooting Apply Page 113 The access point can automatically calculate the values of the parameters to input based on the distance between your access point and the other wireless device Enter the distance in meters and click on the Show Reference Data button Microsoft Internet Explorer X AN Recommended slottine 10 sacknowdege timeout 23 cts timeout z3 You can e
39. Channel Survey Status Channel MyQuality APCount NeighQuality Recommendation 1 0 0 0 a CB Cee Cee Cee Cee Ce H s Sd ooh stn 4 ona on mm BD am SS o o a sa a 0 0 0 0 0 0 0 0 0 0 E Am A A A A oe en eh re poe ren sh a Recommended Retresh Back Step 2 To connect the client to one of the channels detected select the corresponding radio button Step 3 Click on the Apply button to effect the change and retum to the setup page Step 4 Click on the Refresh button to update the screen Page 50 Read Only Parameters of All Desc nption Channels Viewable from Channel Survey page Freq Frequency of the channel at which your access point isoperating Channel Channel of the access point being used for transmission depending on its ongin of country MyQuality Interference level of the respective channel with this AP The lower the value the less interference If the value is zero there isno interference APC ount Total number of access points operating at the Current channel NeighQuality Interference level with those discovered APs at those respective channels The lower the value the less interference If the value is zero there is no interference Recommendation Best channel for the device to use in its curent environment Page 51 Align the Antenna Antenna Alignment precisely aligns the antenna over long distances for higher signal stren
40. Communications Step 5 Enter the GTK Group Transient Key Updates This is the length of time after which the access point will automatically generate a new shared key to secure multicast broadcast traffic among all stations that are Communicating with it By default the value is 600 seconds Step 6 Click the Apply button and reboot your system after which your settings will become effective Page 135 Setup WPA Entenpnse for Client Available in Client Transparent Client Wireless Routing Client and Wireless Adapter Modes Follow these steps if you have selected the WPA1 Enterpnse WPA2 Enterprise or WPA Enterpnse AUTO secunty modes At the WPAIJ 2 Enterpniise Client Setup page VWPA1 2 Enterprise Client Setup WPA EAP Type liser Name Anonymous Identity anonymous Password ecccceee Cipher Type AES Page 136 Step 1 Select whether to use EAP TILS or EAP PEAP WPA EAP Type Step 2 Both EAP TILS Extensible Authentication Protocol Tunneled Transport Layer Secunty and EAP PEAP Protected Extensible Authentication Protocol support identity hiding In the WLAN the access point generates an identity request To preserve anonymity the client resoonds with only enough information to allow the RADIUS server to processthe request If using EAP TILS WPA EAP Type e Enterthe UserName e Enterthe Anonymous Identity attnbute for EAP TILS e Enterthe Password e Enterthe Cipher Type For WPA Ent
41. DIAG LED Above 20 Stays tumed on Between 19 and 17 Flashes 6 times Between 17 and 14 Flashes 3 times Between 13 and 10 Flashes once Below 10 Tums off Page 53 NOTE Outdoor long distance connection should preferably have signal strength of a RSSI of 10 and above NOTE To ensure proper functionality of the device select to Stop antenna alignment Altematively you may also reboot the device Configure the Advanced Setup of the Wireless Mode Step 1 Select WLAN Setup from the CONHAGURATION menu to expand four sub menus From here select Advanced Step 2 Enter the parameters in the WLAN Advanced Setup page Step 3 Click on the Apply button to update the changes WLAN Advanced Setup Beacon Interval fioo 100 20 1000 Data Beacon Rate DTIM fi 1 1 16384 RTS CTS Threshold 2312 2312 1 2312 Frag Threshold 2346 2346 256 2346 Transmit Power Maximum Antenna Control Auto Station Isolation C Radia Off When Ethernet Link r Down Apply Page 54 Advanced Setup Parameters Beacon Interval Only in Access Point mode Desc nption Amount of time between beacon transmissions This tells the client when to receive the beacon A beacon isa guidance Signal sent by the access point to announce its presence to other devices in the network Data Beacon Rate DTM How often the beacon contains a delivery traffic indication message DTM The DTM identifies which clients have d
42. DS2 Link Configuration WOS Link Status Enable Disable Remote AP SSID default Remote AP MAC 08 00 69 02 01 FC Iw Cur Security Mode NONE Apply OR e By Remote AP SSID Uncheck the Remote AP MAC checkbox and enter the Remote AP SSID WDS2 Link Configuration WDS2 Link Status Enable C Disable Remote AP SSID default Remote AP MAC 08 00 69 02 01 FC Iv Cur Security Mode NONE Apply Click Apply Page 109 Set Virtual AP Multiple SSID Virtual AP implements mSSID Multi SSID whereby a single wireless card can be setup with up to 16 virtual AP connections with different SSIDs or BSSID Basic Service Set Identifier and secunty modes Virtual AP delivers multiple services by VLAN segmentation making the network think there are many SSIDs available and channeling each connection through different VLANs to the respective virtual network segments on the Ethemet network Ethernet Switch with VLAN WPE53G How it Works When WLAN PC 1 connects to VAP 1 its packets are channeled to VLAN 10 group where only services connected to Port 2 and Port 3 are available to this wireless connection It is similar for WLAN PC 2 and WLAN PC 3 Although they connect to the same radio card as WLAN PC 1 WLAN PC 2 can only access the services available at Port 6 and Port 7 and WLAN PC 3 can only access the servicesavailable at Port 10 and Port 11 For more information on Virtual AP Multiple SSID
43. N N A H changes wit take effect atter reboot Page 75 Step 3 The MAC Filter Address List page displays with updated MAC Address List MAC Filter Address List MAC Address List ESSID sampleRouter Del MAC Address Comments Apply to oO 08 70 f8 70 80 70 maci all o 00 b0 d0 86 bb f7 mac3 1 AP s Ail changes will take effect after reboot Page 76 Edit MAC Address from the MAC Address List Step 1 Select MAC Filtering from WLAN Setup The MAC Address Filtering page displays Select Edit MAC Address Filtering Radio 1 MAC Filtering Options AP Type ESSID Security Status Policy Main AP sampleRouter NONE it Enable Accept v Virtual AP VAP1 NONE it Disable Deny Virtual AP VAP2 NONE it Enable Deny View Complete MAC List All changes will take effect after reboot Step 2 MAC Filter Address List page displays Select the MAC addressto edit MAC Filter Address List MAC Address List ESSID YAPI Del MAC Address Comments Apply to C 0g 70 f8 70 80 70 mac4 1 APES C Al changes wal take effect after reboot Page 77 Step 3 The Edit MAC Address page displays Edit the MAC addresssettings accordingly Click the Save button Edit MAC Address MAC Address 08 70 18 70 80 70 XX XX XX XX XX XX Comment mac4 Apply to All e Selected AP ESSID Security sampleRouter NONE YAPI NONE VAP2 NONE Save Cancel Step 4 The MAC F
44. NS Edit page Step 7 From the Dynamic DNS Edit page you can update or reset the parameters or delete the domain name Page 104 Dynamic DNS List Domain Name Update Status test 2mydns net Add Refresh Dynamic DNS Edit Provider 2MyDNS Dynamic DNS Service Provider Domain Name test 2mydns net WAN IP M Auto Detect Username Password Wildcard YES NO Mail Exchanger Backup Mail Exchanger YES NO Reset Delete Back Select DUDONS as DDNS Service Provider Step 1 Under the Choice column in the Choice DDNS Provider Choice DDNS Provider list check the radio button next to the DDNS entry croice Prove Nae reise now C 2MyDNS Dynamic DNS Service Provider Register Online O DIONS Register Online Click on the Nextbutton a Newt Bock Step 2 Enter your Domain Name Dynamic DNS Add Step 3 The Auto Detect checkbox is selected e ae by default a e I The WAN IP field is empty by default PERAR an eergome conm These default settings should be used if wan TP Beie Rae dynamic WAN IP connection is used Password If your ISP connection uses dynamic Add Reset Back WAN IP Select the Auto Detect checkbox to let the DtDNS server leam your current WAN IP address Enter your DtDNS account Usemame and Password If your ISP connection uses a fixed WAN IP Enter the IP address in the WAN IP field Deselect the Auto Detectcheckbox T
45. O_COUNTRY_SET NA Tx Rate Fully Auto Apply Page 120 Transparent Client Step 2 Select the Remote AP MAC checkbox Enterthe Remote AP MAC WLAN Basic Setup Card Status enable The Current Mode Transparent Client Change ESSID cient Remote AP MAC 09 00 28 23 00 00 8 Wireless Profile 802 11b g mixed Country NO_COUNTRY_SET NA x Tx Rate Fully Auto Apply Note When using Remote AP MAC the ESSID name must also match the AP s ESSID name especially when Closed System is enabled on the AP Repeat Transparent Client step to add more points to the Point to MultiPoint connection Page 121 Setup Repeater A Repeater AP can connect to an AP only if the option Actas RootAP is set or checked in the AP setup ork os AP ist A ater AP B LA i As 12nd Repeater AP Exa mple Network diagram with 2 repeater hops NOTE As bandwidth degrades with every repeater hop it iS recommended that a limit of 4 hops is not exceeded Page 122 Page 123 NOTE DO NOT physically connect your PC to the server via Ethemet cable in addition to the wireless connection as doing so will create a loop that is not prevented by wireless loop preventing feature RootAP _ Repeater AP Follow these settings to setup the root AP Root AP Settings Click on WLAN Setup from the CONHGURATION menu You will see the sub menus expanded under WLAN Setup Click on Basi
46. P Address 192 168 168 1 Network Mask 255 255 255 0 DHCP Server Disabled Page 165 Get Technical Support This page displays the contact information of technical support centres around the word If further information unavailable in the manual or data sheet is required please contact a Technical Support Centre by mail email fax ortelephone Click on Get Technical Supportfrom the HELP menu Support Information To register your product obtain product information documentation and updates go to http www cox com http www compex com s Regional Technical Support Centers U S A Canada Latin America and South America Compex Inc 840 Columbia Street Suite B Brea CA92821 USA Tel 714 482 0333 Fax 714 482 0332 800 Line 800 279 8891 Email support cpx com Asia Australia New Zealand Middle East and the rest of the world Compex Systems Pte Ltd 135 Joo Seng Road 08 01 PM Industrial Building Singapore 368363 HotLine 65 6 286 1805 Fax 65 6 283 8337 Page 166 Appendix Use the Command Line Interface Get Operation List SYNTAX DESCRIPION Get tasks Display all active procesytasks Get sysinfo Display system information Get brmacshow Display bridge leamed MAC address list Set Operation List SYNTAX DERON S O Save Configuration SYNTAX CSE DESCRIPMON Commit Save current configuration to flash Most commands require
47. Pacific Intemet Broadband PPTP Use PPIP if you are using ADSL services in a country utilizing PPTP connection and authentication Page 8 Wireless Adapter Mode In Wireless Adapter Mode the access point can communicate wirelessly with another access point to perfomm transparent bndging between 2 networks like in the Access Point Client Mode In this mode however the wireless adapter connects to a single workstation only No client software ordnvers are required to use this mode Optional additional feature Point to Point connection in this operation mode is also supported if you specifically wish to connect with an access point only Please referto the Point to Point setup section internet Dynamically Cable ADSL n leased IP i a gt Switch address from T a e DHCP server _ Wireless Adapter c ig A o Macintosh 25 l Access Point Bridge Workgroup of PCs Page 9 Transparent Client Mode In Transparent Client Mode the access point provides connection with an access point acting as the RootAP This operation is designed for the implementation of Point to Point and _ Point to Multipoint connections Point to Point Point to MultiPoint AnaccesspointactsasRootAPand1 Anaccesspoint actsas Root AP otheraccess point acts as Transparent and several other access point Client actsas Transparent Clients This mode is generally used for outdoor connections over long distances orf
48. TELNET session to the default IP 192 168 168 1 Microsoft TELNET command isshown here but any TELNET client can be used 1 Enter CA MINDOWS TELNET 192 168 168 1 at DOS prompt and the TELNET application will launch and connect 2 At the login prompt type in the default password password and pressenter You will then login to the CU Telnet 192 168 168 1 Fie Edt View Call Transfer Help Ole a8 aa a Router Manager Console Version 3 03 Build 1111 Nov 11 2003 17 32 20 Please enter your password Connected 0 00 31 Auto detect 19200 8 N 41 Page 66 Access the Secure Shell Host Command Line Interface SSH provides the best remote access secunty using different forms of encryption and ciphers to encrypt sessions and providing better authentication facilities and features that increase the secunty of other protocols An encrypted connection like SSH is not viewable on the network The server can still read the information but only after negotiating the encrypted session with the client A login session through Telnet Terminal Terminal Sg ae username passywor P gt client server The client types jsmith COlts06 jsmith coltso6 As seen on the network A login session through SSH Terminal Terminal oY 4hS346y9246hnr98 client The client types jsmith coltso6 As seen on the network SSH CLI hasa command line interface Generating public private dsa key pair Enter file
49. TU Button in Advanced WAN Options Advanced WAN Options MTU The MTU Value hasa range of 1 to 1492 Enter the MTU Value and click Apply MTU Setup MTU Value 1462 114925 Apply Back Page 61 Setup your WAN for ADSL Intemet using Point to Point Tunneling Protocol PP IP WAN Setup Parameters Example e IP Address 203 120 12 47 e Network Mask 255 255 255 0 e VPN Server 203 120 12 15 Step 1 Under CONHGURATION on the command menu click on WAN Setup Step 2 Access the Select WAN Type page and select PPIP before clicking the Apply button Select WAN Type Static IP Address Dynamic IP Address PPP over Ethernet PPTP Apply Cancel Help Page 62 Step 3 Fill in the information provided by your ISP in the IP Address Network Mask Gateway and VPN Server fields select whether to enable DHCP and click the Apply button Select Reboot System under SYSTEM TOOLS and click the Reboot button to effect the settings The Idle Timeout setting allows you to specify the value in seconds after the last Intemet activity by which the access point will disconnect from the ISP A value of 0 will disable idle timeout WAN PPTP Setup WAN Type PPTP Change IP Address 192 165 8643 M DHCP Network Mask 255 255 255 0 Gateway f92 168 168 254 Username samply User ts Password osse VPN Server 92 165 88 22 Idle Timeout eoo ooo 30 3600 0 disabled Status Disconnected Refresh Status IP A
50. V model Power input range from 15 48VDC PoE supplies power to startup access point via the Ethemet cable connection Users who wish to use it to supply power to the access point may follow the installation procedures as shown below Step 1 Connect the extemal antenna to the SMA connector of the access point Step 2 Use an RJ 45 Ethemet cable to connect one end of the cable to the Ethemet socket of PoE and the other end to one of the Ethemet ports of the access point Page 16 Step 3 Next connect the RJ 45 Ethemet cable attached to PoE to your PC s Ethemet network adapter Once you have finished configunng your access point you can connect the PoE RJ 45 Ethemet cable to your network device such asto a switch orhub RJ45 Ethernet Port Step 4 Connect the power adapter supplied with PoE to the main electncal supply and the power plug into the socket of PoE Note The voltage and current supplied to the access point s power adapter and PoE power adapter are different Do not interchange the power adapters Main Electrical Supply RJ45 Step 5 Now tum on your power supply Notice that the LEDs have lighted up This indicates that the access point is receiving power through PoE and that connection between the access point and yourPC hasbeen established Page 17 Step 1 Go to your desktop nght click on the My Network Places icon and select Properties Step 2 Right click t
51. apterto supply powerto the UNit eeeeeeeeeeees 14 Using PoE to supply power to the unit uu eeeeseeeeeeeseeseeesseeeeeeeeees 16 Setup TOF WiINGOWS ARs 2000 sre acdsee aiaete oe een 18 AG CES gt THE WEB INTERFACE rrnsanacirinan a 20 ACCESS WIEN UG ONTO rrenean a A a 20 Manual access with Intemet Explorer sseesssssrrrrnnreesssrrrrnrreessrnnnrerreene 23 PERFORM BASIC CONFIGURATION nssosssessesssesseernerneernerneernerrrennns 25 Lup Management POM auaineisones iin aaa 25 Se CUD DIG P SSI VC era naples cee ale eaeace teed aah 30 View Active DHCP Lea S amp S 2 cccicsscscesssssscsssesssssssccssessveuscossersensscessensensnons 36 Reserve IP Addresses for Predetermined DHCP Clients 06 37 Delete DHCP Server Reservation sssssssssrenseesssrrrrrrerossrnnrrrrrrerssrrnrrereree 39 SOU VV LANs eiae 40 Configure the Basic Setup of the Wireless MOd ccseseeeeeeeeeeeees 40 DC Ail TOF SIRS UNO Vera a eniendae 45 VIEW MK INTON Ma UON oansnien 47 Scan TOF CNANME SUVECY irinenn a 49 AGT ENS ANTE Nal sa a a sae 52 Configure the Advanced Setup of the Wireless Mode 08 54 VIEW TNE Sta tiste Suiriri a 56 SUP rour WA Noosneceseenu annaa vette aeons ceeed eee teeiles 57 Stup Tenet SSH ersin ee eaii 64 Accessthe TELNET Command Line Interface cccecccccececceeceseeeeees 66 Access the Secure Shell Host Command Line Interface 67 SENG WEB MOGE enuie a eed uatnoedperiegibuaninat
52. ata Only in Access Point mode waiting to be delivered to them If the beacon penod is st at the default value of 100 and the data beacon rate is set at the default value of 1 the access point will send a beacon containing a DIM every 100 kilomic rosecond 1 kilomicrosecond equals 1 024 microsecond Minimum size of a packet in bytes that will tigger the RIS CTS RTS CTS Threshold mechanism This value extends from 1 to 2312 bytes Maximum size that a packet can reach without being Frag Threshold fragmented represented in bytes This value extends from 256 to 2346 bytes where a value of 0 indicates that all packets should be transmitted using RTS Transmit Power Drop down list of a range of transmission power Disables the radio card automatically when the Ethemet link is Radio Off When Ethemet Link down Down NOTE The values illustrated in the example are suggested values for their respective parameters Page 55 View the Statistics The Statistics feature reveals information on the wireless device connected to the WLAN Step 1 Select WLAN Setup from the CONHGURATION menu The sub menus under WLAN Setup expand select Statistics Wireless clients that are connected to the WLAN are shown in the WLAN Station List Step 2 Click on the Refresh button to get the latest information on the availability of wireless clients in the wireless network WLAN Connection List MAC Address RSS TxRate 00
53. before access Parameters for DataO Best Effort Best Effort data traffic hasno pnontization and applications equally share available bandwidth Parameters for Datal Background Background data traffic isde pnontized and is mostly for bac kup applications orbackground transfers like backup applications or background transfers like bulk copiesthat do not impact ongoing traffic like Intemet downloads Parameters for video data traffic Parameters for voice data traffic Setup Point to Point amp Point to MultPoint Connection You can implement Point to Point connection by simply setting one access point as RootAP in Access Point mode and setting the other access points to Transparent Client mode You can seta root accesspoint and a transparent client to allow point to point communication between different buildings and enable you to bndge wireless clients that are kilometres apart while unifying the networks Or you can seta root access point and multiple transparent clients to allow point to multiple point communication between the access point located at a facility and several other access points installed in any direction from that facility Follow these stepsto setup RootAP RootAP Step 1 Click on WLAN Setup from the CONHGURATION menu You will see the sub menus expanded under WLAN Setup Click on Basic Ensure that The Current Mode is set to Access Point To change The Current Mode please refer to Common Configuratio
54. c Ensure that The Current Mode is set to Access Point To change The Current Mode please refer to Common Configuration WLAN Setup To Configure the Basic Setup of the Wireless Mode Select Actas RootAP WLAN Basic Setup Card Status enable The Current Mode Access Point Change ESSID foot o Wireless Profile 802 11b g mixed Ceai NO_COUNTRY SET NA F Channel SmarSelect Channel Survey Tx Rate Fully Auto gt Maximum Associations B2 32 1 128 I Closed System MV Act as RootAP M vanin 1 4094 C lic k Apply Page 124 Follow these settings to setup the repeater Repeater Settings Click on WLAN Setup from the CONHGURATION menu You will see the sub menus expanded under WLAN Setup Click on Basic Ensure that The Current Mode is set to Repeater To change The Current Mode please refer to Common Configuration WLAN Setup To Configure the Basic Setup of the Wireless Mode Repeater Basic Setup Card Status enable The Current Mode Repeater Change ESSID repeater Remote ESSID default site Survey Remote BSSIDO 00 00 00 00 00 00 E Wireless Profile 802 11 b g mixed Country NO_COUNTRY_SET NA Tx Rate Fully Auto C Closed System Page 125 Options for defining the root AP e Accept the default Remote ESSID root AP s SSID ESSID repeater Remote ESSID default OR e Enterthe Remote ESSID Remote ESSID froot Remote BSSID 00 00 00 00 00 00 C OR
55. ces DHCP Relay supports DHCP Clients and DHCP Servers on different networks by configunng the router to pass selective DHCP messages Follow these stepsif you do not wish to use DHCP Step 1 Click on Advanced Settings fom Management Setup from the CONHGURATION menu Step 2 Set DHCP Mode to NONE DHCP Server Setup DHCP Mode NONE Step 3 Click on the Apply button Page 30 The following will guide you to setup the DHCP Server Step 1 Click on Advanced Settings from Management Setup from the CONHGURATION menu Step 2 Set DHCP Mode to DHCP Server In DHCP Server Setup refer to the table below to set the appropnate values to suit the needs of your network DHCP Server Setup DHCP Made DHCP Server DHCP Start IP Address 192 168 168 100 DHCP End IP Address 192 168 168 254 DHCP Gateway IP Address fig2168882 DHCP Lease Time 3600 seconds I Always use these DNS servers Primary DNS IP Address 2102314 Secondary ONS IP Address 2102346 O Eee Step 3 Click on the Apply button Page 31 Thistable descnbesthe parametersthat can be modified in DHCP Server Setup Parameters Description The fields DHCP Start IP Address and DHCP End IP Address fields allow you to define the range of IP addresses from which the DHCP Server can assign an IP address to the LAN DHCP Start IP Address This is the first IP address that the DHCP server will assign and should belong to the same subnet
56. cret Key in the field provided Step 5 By default the Broadcast Key Rotation is set as 600 seconds You may leave this value as its default setting Page 131 Step 6 Select the length of each encryption key e 64 bit 10 hexadecimal or5 ASCII Text e 128 bit 26 hexadecimal or 13 ASCII Text Step 7 Click the Apply button and reboot your system after which your settings will become effective Page 132 Setup 802 1x RADIUS for Client Available in Client Transparent Client Wireless Routing Client and Wireless Adapter Modes At the IEEE 802 1x Client Setup page IEEE 802 14 Client Setup 502 14 EAP Type EAF TTLS User Name CAPPER mn Anonymous Identity anonymous Password Jeccceces Step 1 Select whether to use EAP TILS or EAP PEAP 802 1x EAP Type Step 2 Both EAP TILS Extensible Authentication Protocol Tunneled Transport Layer Secunty and EAP PEAP Protected Extensible Authentication Protocol support identity hiding In the WLAN the access point generates an identity request To preserve anonymity the client resoonds with only enough information to allow the RADIUS server to processthe request If using EAP TILS 802 1x EAP Type e Enterthe UserName e Enterthe Anonymous Identity attribute for EAP TILS e Enterthe Password IEEE 802 14 Client Setup 902 1 EAP Type EAP TTLS User Name luser example com Anonymous Identity anonymous Password ETT Apply Page 133 If u
57. ddress Network Mask Gateway IP Address Apply Email Notification Page 63 Setup Telnet SSH Client sends to Server _dnternet Telnet allows a computer to remotely connect to the access point CLI Command Line Interface for control and monitonng SSH Secure Shell Host establishes a secure host connection to the access point CLI for contol and monitonng Step 1 Select Telnet SSH Setup from the CONAHGURATION menu Step 2 1 Select Telnet Server Enable and enter the Port Numberto enable 2 Select SSH Server Enable and enter the Port Numberto enable Click the Apply button Telnet SSH Setup C Telnet Server Enable Port Number 23 O SSH Server Enable Port Number 22 Page 64 Step 3 To add user 1 Click the Add button User Management Select User Name Permission 2 In Add User Entry Page enter the User Name Password and soecify whether the user is granted pemission to Read Only or Read Write 3 Click the Apply button Add User Entry User Name Password Permission ReadOnly Fen To Delete User 1 Select which userto Delete 2 Click the Delete button User Management Select User Name Permission username RO username2 RW To Refresh User Management list click the Refresh button User Management Select User Name Permission E username 2 RW Page 65 Access the TELNET Command Line Interface You may connect to the CU Command Line Interface via a
58. dress IP address 192 168 168 160 Subnet mask 255 255 255 0 Default gateway Use the following DNS server addresses Preferred DNS server Alternate DNS server x Step 5 Click on the OK button to close all windows Step 6 To venfy that the IP address has been corectly assigned to your PC go to the Start menu Accessones select Command Prompt and type the command ipconfig all co CS WINDOWS system3 cmd exe rator ipconf ig all winxp rilrrtips 2 Unknown N M il Area Connection Li i wac if ic DHS Suffix ET Description Be eens meee Realtek RILS139 Family PCI Fast Ethe rnet NIG Physical Addresc a a BE B1 e BE 8b 37 Dhep Enabled se p a poe PEEE a Your PC is now ready to communicate with youraccess point Page 19 Access the Web Interface Access with uConfig The UConfig utility provides direct accessto the web interface Step 1 Insert the Product CD into your CD ROM drive the CD will autorun Step 2 From the Utlities section select to install the uConfig utility to your hard disk Step 3 After installation double click on the uConfig icon and click on the Yes button Uns uConfig utility should be run only in one to one connection with a uContig compatible device i your PC is connected to other IP devices in the network uCo niig may not work properly j you want to proceed Page 20 Step 6 Se
59. dth Contol Setup from the Bandwidth Contol sub menu from the CONHGURATION command menu Step 2 Enter the Download Total Rate and Upload Total Rate The default values are O which indicates that there is no bandwidth limit Click the Apply button WAN Bandwidth Control Setup Upload Download Bandwidth Setting Download Total Rate kbit Upload Total Ratefkbit Page 90 Configure LAN Bandwidth Contol Bandwidth Control can also limit LAN users throughput Step 1 Select LAN Bandwidth Control Setup from the Bandwidth Contol sub menu from the CONHGURATION command menu Step 2 Click the Add button to create the bandwidth rule for LAN user LAN Bandwidth Control Setup Name Committed Rate kbit Ceil Rate kbit IPMAC Address Rule type DownLoad By MAC sampleRule 10 100 09 00 2B 01 00 00 e Add Page 91 Step 3 Click the Add button to create the rule for LAN users bandwidth control Bandwid Add Bandwidth Control Entry th Control Rule Rule Name sampleRule Committe d Rate kbit 10 Ceil Rate kbit 100 Rule type IP MAC A DownLoad By MAC Address xi ddress 09 00 28 01 00 00 Parameters Desc nption Rule Name You can set a name for the bandwidth control rule Committed Rate kbit Minimum bandwidth rate of throughput NOTE The sum of the Committed Rate of all the rules should not exceed the total rate available Ceiling Rate kbi
60. e and a channel access function with its own para meters Applications Y Classification Map frames to AC Best Background Video Voice Effort Data2 VI D Assign Data0 BE L frames wMax to transmit CwMin queue Resolve internal collision Packet _ Scheduler T Page 115 Follow these stepsto change the setup Wireless Multimedia on your access point Step 1 1 Click on WLAN Setup from the CONHGURATION menu 2 Select Advanced Step 2 Click on the WMM Settings button Extended Features Long Distance Parameters WhiMd Settings WOse settings Step 3 Select to Enable Wireless Multimedia WMM Enter the desired WMM parameters Using the default parameters is recommended Click Apply to apply the WMM settings click Default to reset all parameters to default or click Back to discard any changesand retum to WLAN Basic Setup page WMM Setup Wireless Multimedia P Py GAMM Enable Disable AP WMM Parameters AIFs cw hlin cwhlax TxOp limit MoAck Datat BE 3 15 ad 63 h la a Datel BK F 15 1023 o C Data vl fi 7 15 3008 a Dataa YO fi 3 7 1504 Ci Station WMM Parameters AlFs cwhlin cwhlax TxOp limit ACM Datat BE 3 15 1023 lo fe Datel BK 7 15 ad 1023 fo M Data vl 2 7 15 a008 1 Dataa v0 j 2 3 7 1504 Ci Apply Detault Back Al changes wil take effect ater reboot Page 116 AIFs Arbitrary Int
61. e delivered Source Informs the host to lower the quench rate at which it sends datagrams because congestion Informs the host of preferred route Time Indicates that the Time to exceeded Live TIL of an IP datagram has expired Informs that host that there is a problem in one the ICMP parameter Request ICMP data packet Request ICMP data packet Reply ICMP data packet IGMP This IP protocol is used to establish host memberships in particular Types multicast groups on a single network The mechanisms of the protocol allow a host to infom its local router using Host Membership Reports Parameter Problem Ho st Information that is from the Membership IGMP data packet Report Ho st Information that is from the Membership IGMP data packet Query Message ICMP data packet Source IP This parameter allows you to specify workstation s generating the data packets Userscan eitherset a single IP addressorseta range of IP addresses Destnato This parameter lets you specify the set of workstations that n IP receive the data packets Users can either seta single IP address orseta range of IP addresses Source You can control requests for using a specific application by Port entenng its port number here Users can either set a single port numberora range of port numbers Page 145 Destinatio n Port Check Options Check TIL Page 146 This parameter determines the application
62. e r Fra me Space Cwmin Contention Window Minimum CwMax Contention AV iTate KOA Maximum TXOp limit Tra nsmit Opportunity Limit NoAck No Acknowledge ment ACM Admission Control Mandatory BE Best Effort BK Background VI Video LORA ex Page 117 WMM Parameters for advanced users Arbitrary InterFrame Space isthe minimum wait time interval between the wireless medium becoming idle and the start of transmission of a frame over the network Contention Window Minimum isthe minimum random wait time drawn from this interval or window forthe backoff mechanism on the network Contention Window Maximum isthe maximum random wait time drawn from this interval or window forthe backoff mechanism on the network Transmit Opportunity limit soecifiesthe minimum duration that an end user device can transmit data traffic after obtaining a transmit opportunity TxOp limit can be used to give data traffic longerand shorter access No Acknowledgement provides control of the reliability of tra ffic flow Usually an acknowledge packet is retumed for every packet received increasing traffic load and decreasing performance Enabling No Acknowledgement cancels the acknowledgement This is useful for data traffic where speed of transmission is important Admission Control Mandatory enables WMM on the radio interface When ACM isenabled associated clients must complete the WMM admission control procedure
63. ees 131 Setup 802 1x RADIUS for CHEN cccccccccssssssssseceeeeeeeeesessseeeeeeeeesseeegs 133 Setup WPA Enterprise for ACCESS Point ccccccceeeeeceeeeeeeeeeeeeeesaaeeseees 135 Setup WPA Ente nse 10 FC Me A ascsscsnsa ds venisscanadesyoisicameaeataseeatisnetedenaaes 136 CONFIG URE THE SEC URITY FEATURES cccceeecsseeeseseeeeeeees 139 Use Pac KE t FIRGHG csraeios s 139 Conig re PacCKEtFItENNO paersei anaa 139 J URESNI urarea a a T a E a tues 142 Conngure UREFKENNG eassa iaunentoienerraveareenmataviadeinirtaneiy 142 Conngure Me FrewWalln riaa aN 143 CONTIG US SP IES W alll oenn N onimadaniacsoaee 143 Use tHe FIRE Wall KO G sniniancshinnasnrixtantenietatut a Is 147 VIEW Pewa Logs cren 147 ADMINISTER THE SYSTEM cccccceseeseeeeeeeseseeseseeseueesseeenseeseenees 148 Use the System TOOIS ssssecceeceseesesssseeeeeeeeeeseeaassseeeeeeeeessagsaeeeeeeseeseneegs 148 Vene PN OUY ea 148 UE VO ee a E S E 149 HUP YLM COC Kosri a R AANT 152 Upgrade the Firmware with uConfig sssssssssserrseesssrrrrrreessssnnrrrrrees 153 Upgrade the Fimware with Command Line Interface esee 155 Perfom Finmmnware Recovery ss ssessssrrsrrrrreeerrrrrrrreressrrnrrnrrreernnnrrrreeene 157 Back p Or Rest Ne SNJ Sanini aiia 159 Reboot Ne Vie Min A 162 Change the Passwword ssessssrrrrrrrreesssrrnrrrrrreesssrnrrrrersssnrnrrrrreeessrnne 163 MOLOG O G E E A et terre rrnr 164 Use THe HELP MGI niera e E 165 View
64. eless Routing Client modes To view the connection status when the client is linked to another access point click on the Show Link Information button Link Information Show Link Information The Link Information ta ble displays the following data Link Information State Scanning ff ff ffi ff ff ff Current Channel 11 i TsRate iMbps Signal Strength 6 Page 47 Parameters Viewable from Desc nption Link Information page State Disolays whether the State is Scanning or Associated and MAC address of the access point to which the client isconnected Current Channel Channel presently being used for transmission Tx Rate Rate of data transmission in Mbps Signal Stength Intensity of the signal received in percentage Page 48 Scan for Channel Survey Available in Access Point and Gateway modes Channel Survey displays a list of all the channels supported by the access point shows the relative interference of all the channels and recommends the least congested channel Step 1 In the Mode Setup page click on the Channel Survey button WLAN Basic Setup Card Status enable The Current Mode Access Paint Change ESSID compexwpeS3g Wireless Profile 802 11b g mixed gt Country NO_COUNTRY_SET NA bd Channel SmartSelect x Channel Survey Tx Rate Fully Auto Maximum Associations 2 32 1 128 l Closed System l Act as RootAP M vlani 1 4094 Page 49
65. erpnse Set the Cipher Type to TKIP WPA replaces WEP with a strong encryption technology called Temporal Key Integnty Protocol TKIP with Message Integnty Check MIC For WPA2 Enterprise Set the Cipher Type to AES Advanced Encryption Standard AES isa symmetnc 128 bit block data encryption technique It isa requirement of WPA2 under the IEEE 802 11 standard For WPA Enterprise AUTO Set the Cipher Type to Auto to allow the access point to automatically detect the ciphertype to use WPA1 2 Enterprise Client Setup WPA EAP Type EAFP TTLS User Name user example com Anonymous Identity anonymous Password eecccees Cipher Type AES Page 137 If using EAP PEAP WPA EAP Type e Enterthe UserName e Enterthe Anonymous Identity attnbute for EAP TILS e Enterthe Password e Enterthe Cipher Type For WPA Enterpnse Set the Cipher Type to TKIP WPA replaces WEP with a strong encryption technology called Temporal Key Integnty Protocol TKIP with Message Integnty Check MIC For WPA2 Enterprise Set the Cipher Type to AES Advanced Encryption Standard AES isa symmetric 128 bit block data encryption technique Itisa requirement of WPA2 under the IEEE 802 11i standard For WPA Enterprise AUTO Set the Cipher Type to Auto to allow the access point to automatically detect the ciphertype to use VYPA1 2 Enterprise Client Setup WPA EAP Type EAP PEAP User Name user example com Password eccccese Cipher Type
66. ese steps to automatically obtain the IP address from DHCP server Step 1 Click on TCP IP Settings from Management Setup from the CONHGURATION menu Step 2 Select to Automatically obtain IP address Page 25 Step 3 Select to either Automatically obtain DNS server address or Use the following DNS server addresses and enterthe parameters if any In the Management Port Setup page refer to the table below to replace the default settings of Access point with appropnate values to suit the needs of your network Step 4 If you choose Management Port Setup Automatically obtain IP address Use the following IP address IP Address Network Mask Default Gateway IP Automatically obatain DNS server address Use the following DNS server addresses Primary DNS IP Address Secondary DNS IP Address to Automatically obtain DNS server address Management Port Setup Automatically obtain IP address Use the following IP address IP Address Network Mask Default Gateway IP Automatically obatain DNS server address Use the following DNS server addresses Primary DNS IP Address 210 23 1 4 Secondary DNS IP Address 210 23 4 6 Apply If you choose to Use the following DNS server addresses Click on the Apply button to save your new parameters Page 26 This table describes the parameters that can be modified in the Management Port Setup page if you select to Use t
67. ete reboot the access point and it will be ready to operate Page 158 Backup or Reset the Settings You may choose to save the current configuration profile create a backup of it on your hard disk restore an eanier saved profile or to reset the access point back to its default settings Reset your settings Step 1 Select Backup or Reset Settings from the SYSTEM TOOLS menu Step 2 To discard configurations made and restore the access point to its initial factory settings click on the Resetbutton Backup or Reset Settings Erase current configuration and restore factory default settings Seer e Make a backup copy of current configuration to disk gt Backup Restore backup configuration from disk Browse Restore Step 3 The system will prompt you to reboot your device click on the Rebootbutton Page 159 Backup your Settings Step 1 Select Backup or Reset Settings from the SYSTEM TOOLS menu Step 2 To back up the current settings of your access point onto your hard disk dnve click on the Backup button Backup or Reset Settings Erase current configuration and restore factory default settings spat SS Make a backup copy of current configuration to disk gt Backup Restore backup configuration from disk Browse Restore Step 3 Save your configuration file to your local disk File Download Do you want to save this file Name config cfg Type Unknown Fi
68. f the Wireless Mode Select Actas RootAP Select the Channel common to both access point 1 and access point 2 WLAN Basic Setup Card Status enable The Current Mode Access Point Change ESSID boa P Wireless Profile 802 11b g mixed Country NO COUNTRY _SET NA Y Channel S5SmatSeet gt Channel Survey Ts Rate Fully Auta gt Maximum Associations Bz o 321 128 Closed System W Act as RootaP C VLANI 1 4094 Page 107 Follow these settingsto setup access point 2 Setup access point 2 Click on WLAN Setup from the CONHGURATION menu You will see the sub menus expanded under WLAN Setup Click on Basic Select the Channel common to both access point 1 and access point 2 WLAN Basic Setup Card Status enable The Current Mode Access Point Change ESSID laccesspoint 20000 Wireless Profile 802 11b g mixed gt Country NO_COUNTRY_SET iNA Channel SmarSelect Channel Survey Tx Rate Fully Auta Maximum Associations pa 32 1 128 l Closed System F Act as RootaP C YLANID 1 4094 Page 108 Configure WDS2 link Click on WLAN Setup from the CONHGURATION menu You will see the sub menus expanded under WAN Setup Click on Advanced Extended Features Long Distance Parameters Wh Settings WOS2 Settings Under Extended Features click on the WDS2 Settings button Set WDS2 Link Status to Enable Options for configunng WDS2 link e By Remote AP MAC Enterthe Remote AP MAC W
69. for Any Information Time Action Protocol Refresh Page 147 Administer the System Use the System Tools Use the Ping Uulity Available in Wireless Routing Client and Gateway modes You can check whether the access point can communicate ping with another network host with the Ping Utility Step 1 Select Ping Utility underthe SYSTEM TOOLS command menu Step 2 Ping Utility Enter the IP address of the target host rss ET to ping Click the Start button Ping Return Message The Ping messagesare displayed Page 148 Use Syslog Syslog forwards system log messages in a network to a machine running a Syslog listening application It is used to help in managing the computer system and increase secunty on the network Freeware supporting Syslog is widely available for download from the Intemet Syslog Enabled Device Transfer Logs Via Syslog Workstations Machine Running Syslog listening application This section shows how to e Setup Syslog e View logged infomation The System Log Setup page allows the user to e Enable or Disable system logging e Set the Remote IP Address or Domain Name and Remote Port for the router to send the system log messages to Page 149 Follow these steps to setup Syslog Step 1 Click on Syslog from the SYSTEM TOOLS menu Step 2 System Log Setup Status C Enable Disable Logging IP or Domain Name 192 168 1681 Logging Port
70. gt BYSTROVANY login useri Pacem BusyBox vi A0 12006 11 23 186 24 668H gt Built in shell tash H set upgrade 172 168 808 161 firmware I MG Please waiting It is upgrading firmuare nowt Step 4 These screens display when upgrade isdone AII ELY lt OO ox Curent Directory E firmware Browse Server nterraces 17218 0101 Show Dir Thtp Server Lis Tftp Client Syslog server Connection received from 172 18 0 3 on port 2048 Read request for file lt Firrvare IMG lt Firmware IMiG gt sent 7506 blks 3842r ra bytes Connection received from 172 18 0 3 on port 2048 Read request for file lt Firmware IMG lt firmware MG sent 7506 blks 3842773 bytes Sample Screenshot WBEYTSTROVAHNY login useri Password BusyBox vi HA 2666 11 23 19 24 000 gt Built in shell tash Enter help for a list of built in commands H set upgrade 172 18 00 101 Firmware IMG Please waiting It is upgrading Firmware nowt Finished Finished NOTE The fimmware upgrade process must NOT be interrupted otherwise the device might become unusable Page 156 Perform Firmware Recovery If the system fails to launch propery the access point will automatically switch to loader mode and the diagnostic LED will remain lighted The fimware should then be reloaded Access Point State Diagnostic LED i State Conupted firmware access point
71. gth to improve the connection between the access point and another access point Step 1 Select WLAN Setup from the CONHGURATION menu You will see the sub menus expanded under WLAN Setup Click on Antenna Alignment The Antenna Alignment page can act aS a diagnostic tool to check the communication with a remote device The remote AP MAC Address is preset to all zeros by default Antenna Alignment Remote AP MAC Addresstoptian D0 80 45 e5 0a 06 E R A A R Note MAC adaress wil he used if entered otherwise SSO wil be used Start Step 2 If you wish to specify the MAC address of the remote AP edit the field next to Remote AP Address option followed by clicking on the Start button A pop up status screen will display allowing you to monitor the Signal strength received from the remote access points If there is no specified access point with the specified MAC address this screen will display To abort or to key in the MAC address of another available remote access point click on the Stop button Antenna Alignment No specified AP available around stop Page 52 NOTE f no MAC address is entered the Antenna Alignment too will make use of the SSID to align the antenna Please ensure that the corect SSID is entered If more than one access point share the same SSID the access point with the strongest signal will be shown Signal Strength Status of DIAG LED RSSI Value Indicated by
72. he APs It is recommended to connect directly to each AP to update the fimware then set to Repeater mode and configure it before updating the next AP This way you can build back the connections Referto the user manual for more details instructions on the setup Updating to the mSSID firmware is not necessary if you do not need the higher wireless sec unty support Page 174 Q8 have 2 of the access point units installed ata site about 2km from each other running PtP modes Should update to mSSID firmware Can I do it from one location to update the firmware like do with the current single SSID firmware The setup for PtP and PtMP for mSSID firmware is different the current sSSID firmware After mSSID firmware starts up the link between the 2 APs will be lost The recommended method is to setup 2 similar model units in the office Load the mSSID firmware and create the new PtP PtMP configuration using the actual parameters of the 2 units on site that you will update After testing the connection to be working in the office backup the configuration file foreach unit Go to the first ste to update the mSSID firmware and restore the configuration forthe site then go to the next site and do the same When both APs are up again the network at both sides should be connected with the new PtP setup Note If existing PtP connection is running well it is not necessary to update to the mSSID firmware Unless you have the follow
73. he access point will update the DtDNS server with the specified WAN IP Step 4 Then click on the Add button Step 5 While the new domain name is being Dynamic DNS List added to the list the message Waiting in queue willbe disolayed under the Doman Name ___Uedene Status Update Status column of the Dynamic sane Boot DNS Listta ble Page 105 Use the Wireless Extended Features Setup WDS2 WDS2 Wireless Distnbuted System 2 links up access points to create a wider network in which mobile users can roam while still staying connected to available network resources The wireless client and root access point has to be set up with the same channel frequency This allows them to connect even when the link is lost as the channel frequency setting is preserved Switch AP2 o g 5 Act as RootAP Enabled ESSID rootAPSSID WDS2 Link Status Enabled Channel 5180MHz Remote AP SSID rootAPSSID Channel 5180MHz In this example there are 2 access points Access Point 1 and Access Point 2 with Access Point 1 as the root access point Page 106 Follow these stepsto change the setup the root access point Setup access point 1 Click on WLAN Setup from the CONHGURATION menu You will see the sub menus expanded under WLAN Setup Click on Basic Ensure that The Current Mode is set to Access Point To change The Current Mode please refer to Common Configuration WLAN Setup To Configure the Basic Setup o
74. he client to one of the access points detected select the radio button comesponding to the access point you want to connect to Step 3 Click on the Apply button to effect the change and retum to the setup page Step 4 Click on the Refresh button to update the screen Page 45 Read Only Parameters of Desc ription Neighbounng Access Points Viewable from Site Survey page Bssid Wireless MAC address of the access point ina wireless network infrastructure SSID Network name that uniquely identifies the network to which the access point is connected Chan Channel being used fortransmission Auth Types of authentication such as WPA WPA Personal etc being used by the access point Alg Types of algonthm such as WEP TKIP etc being used by the access point Signal Strength of the signal received in percentage NOTE Site Survey is used to scan and display all access points based on the Current secunty setting of youraccess point Explanation of the following information supplied by the Site Survey according to the secunty setting e lf the secunty mode is set to None or WEP the scan will show all available access points with no secunty or WEP secunty If the secunty mode is set to WPA Personal the scan will show all available access points with all types of secunty from no secunty WEP sec unty to WPA Personal sec unty Page 46 View Link Information Available in Client and Wir
75. he following DNS server addresses Parameters Description Primary DNS Your ISP usually provides the IP address of IP Address the DNS server Secondary This optional field is reserved for the IP DNS IP addressofa secondary DNS server Address Page 27 Follow these stepsto manually define the IP address Step 1 Click on TCP IP Settings fom Management Setup from the CONHGURATION menu Step 2 Select to Use the following IP address In the Management Port Setup page referto the table below to replace the default settings of Access point with appropnate valuesto suit the needsof your network Management Port Setup Automatically obtain IP address Use the following IP address IP Address 192 168 168 1 Network Mask 255 255 255 0 Default Gateway IP 192 168 88 2 Automatically obatain DNS server address Use the following DNS server addresses Primary DNS IP Address 210 23 1 4 Secondary DNS IP Address 210 23 4 6 Apply Management Port Setup IP Address 192 168 168 1 Network Mask 255 255 255 0 Default Gateway IP 192 168 168 2 Primary DNS IP Address 210 23 1 4 Secondary DNS IP Address 210 23 4 6 The parameters are the same in routing mode Step 3 Click on the Apply button to save yournew parameters Page 28 This table descnbes the parameters that can be modified in the Parameters IP Address Management Port Setup page Descriptio
76. he information from other routers to determine if a better path is available RIPv2 is more secure and performs broadcasting and the assignment of IP address more efficiently Step 1 Under the CONAGURATION command menu click on Routing to be brought to Route Informaton Protocol Route Information Protocol RIP Status Enable Disable RIP version RIPV2 Page 81 Route Information Protocol RIP Status C Enable Disable RIPv2 gt RIP version Step 2 Select to Enable RIP Status Select either RIPv1 or RIPv2 On this page click the Apply button Use Network Address Translation Available in Wireless Routing Clientand Gateway modes NAT Network Address Translation allows multiple PCs in a pnvate network to share a single public IP address by using different TCP ports to identify requests coming from different PCs and is enabled by default Computers in the pnvate LAN behind the access point will not be directly accessible from the Intemet However employing virtual servers allows the hosting of Intemet servers by using IP Port Forwarding and De Militanzed Zone hosting Step 1 Select NAT from the CONAGURATION command menu Enable Disable NAT To disable it select the Disable radio button WAT Status Enable Disable Apply Help Step 2 Click the Apply button to effect the Important NAT provides for effective broadband Intemet shanng do NOTdisable NAT unless i
77. he network adapter icon and select Properties Step 3 Highlight Intemet Protocol TCP IP and click on the Properties button Step 4 Select the Use the following IP address radio button Set the IP address to 192 168 168 X and subnet mask to 255 255 255 0 where X can be any number from 2 to 254 Page 18 Setup for Windows XP 2000 LAN or High Speed Internet ocal 4Fea Connection i Disable A wis Status Repair Bridge Connections Create Shortcut Rename Properties 4 Local Area Connection Properties a General Authentication Advanced Connect using E9 Realtek RTL8139 Family PCI Fast Ett This connection uses the following items MI NwLink NetBIOS Internet Protocol TCP IP lt gt Install Properties Description Transmission Control Protocol Internet Protocol The default wide area network protocol that provides communication across diverse interconnected networks C Show icon in notification area when connected Notify me when this connection has limited or no connectivity Internet Protocol TCPAP Properties p General z 1 M NWLink IPX SPX NetBIOS Compatible Transport Prot You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings Obtain an IP address automatically Use the following IP ad
78. his PC The TFIP serverhasto be set up to point to this directory This table explains the different Operation Types Operation Type Backup The Backup operation saves the configuration from the access point to the configuration file defined in lt filename gt and stored on the PC This isa binary file bin which must not be edited as doing so will comupt tt Access Point gt PC Restore The Restore operation retums the access point back to the previous configuration according to the configuration file defined in lt filename gt on the PC This isa binary file bin which must not be edited as doing so will comupt tt PC gt Access Point Export The Export operation extracts a portion of the access point configuration to a text file on the PC which can be edited to further customise it foreach access point This text file can then be imported into otheraccess points with the Import cfgfile operation Access Point gt PC Import The Import Operation uploadsthe configuration to the access point This configuration is the access point configuration which has been exported previously with the Export cfgfile operation and then further edited to customise foreach access point PC gt Access Point Page 171 Appendix Virtual AP Mult SSID FAQ Q1 What is mSSID Multi SSID mSSID as the name suggest allows an access point AP with a single radio card to support more than one SSID Q2 What can you do with mSSID connect
79. il feedback compex com sg We hope this manual was helpful to you For more Compex information please visit usat www compex com sg Page 178
80. ilename gt DESC RIPTION The cfgfile command isused formanaging simple configuration changesto multiple access points It is useful for when the user has many access points to configure and the configuration is mostly the same For example if user needs to configure ten access points and just change the IP address configuration 1 Configure the first access point with the common configuration forall the access points using web manager 2 Export the access point configuration file with cfgfile in Telnet 3 Edit the IP addresses in the access point configuration files to customise them for the individual access points 4 Import the edited access point configuration files to the respective access points with cfgfile in Telnet Requirement and Explanation The cfgfile command uses the TFIP Trivial File Transfer Protocol This command transfers the access point configuration file to and from the access point It has 4 operation types for these transfers Backup Restore Export and Import Before executing the cfgfile command there are some requirements that have to be met in order for the command to execute successfully The TFIP server hasto be running on the PC with the Telnet connection to the access point Make a note of the directory where the access point configuration file is located in This directory can be a folder on the hard drive of the PC with the Telnet connection It can also be any storage device that is connected o t
81. ilter Address List page displays with updated MAC Address List MAC Filter Address List MAC Address List ESSID VAP1 Del MAC Address Comments Apply to O 08 70 f8 70 80 70 mact all All changes will take effect after reboot Page 78 Perform Advanced Configuration Setup Routing Available in Wireless Routing Client and Gateway modes The access point allows you to add a static routing entry into its routing table to re route IP packetsto another access point This is useful if your network has more than one access point Important You do NOTneed to set any routing information if you are simply configunng the access point for broadband Intemet shanng The wrong routing configuration might cause the access point to function impropeny In this network the main office of subnet 192 168 168 0 contains two routers the office is connected to the Intemet via the access point 192 168 168 1 and to the remote office via 192 168 168 254 The remote office resides on subnet 192 168 100 0 You can add a Static routing entry into the access point routing table so that IP packets from the clients in the main office with a destination IP address of 192 168 100 X where X is any number from 2 to 254 will be re routed to the router which actsasthe gateway to that subnet Static Routing ie ati modem 0 56K analog INT mcs modem Access pomt p 192 168 168 1 Cable ADSL ci modem 192 168 168 254 Workstations CN
82. ime Setting SNTPY Enable Disable o a time serverfe g time nist gowi fime nistgov f Select one from the list of time servers bonehed Ics mit edu z Status Unknown host Apply Step 2 Select the appropnate time zone from the Select to Change the Time Zone for the Router Location drop down list Step 3 Enable the Auto Time Setting SNIP radio button SNIP stands for Simple Network Time Protocol and isused to synchronise computer clocks Step 4 Fill in the Time Servers field and click on the Apply button to effect the changes Page 152 Upgrade the Firmware with uConfig You can check the types and version of your finmware by clicking on About System from the HELP menu To begin with ensure that you have the updated firmware available Step 1 Select Rrmware Upgrade from the SYSTEM TOOLS menu Firmware Upgrade Notice Firmware upgrading will shutdown some services To proceed click OK OK Firmware Upgrade Upgrade Firmware path and file name ___ Browse Upgrade Step 2 Click on the Browse button to locate the file Step 3 Click on the Upgrade button Follow the instructions given dunng the upgrading process Firmware Upgrade CAUTION Upgrading firmware now please wait 50 seconds and don t turn off the power until see the Firmware Upgrade Successfully page reboot to effect all changes BURNING FLASH I Please keep current upgrade page 7 Page
83. ing concems Curent firmware PtP is not compliant with IEEE 802 11h standard and the respective country authonty requires it to be changed Current firmware PtP wireless secunty only supports WEP key and you are very concemed about the vulnerability to being hacked Page 175 Appendix View the Technical Spec ific ations FCC Part 15 SubPart Band SubPart C for wireless module EN 300 328 2 EMC CE EN 301 489 EN300 826 EN 55022 CISPR 22 EN 55024 Class B EN 61000 3 2 EN61000 3 3 CE EN 60950 11Mbps 5 5Mbps 2Mbps 1Mbps 54Mbps 48Mbps 36Mbps 24Mbps 18Mbps 12Mbps 9Mbps 6Mbps automatically fallback to 5 5Mbps 2Mbps 1Mbps 108Mbps 96Mbps 72Mbps 54Mbps 48M bps 36Mbps 24Mbps 18Mbps 12Mbps 6Mbps 2 412G Hz 2 462G Hz US amp Canada 2 412G Hz 2 472G Hz Europe 2 412G Hz 2 484G Hz J apan 64 bit 128 bit WEP WPA EAP WPA PSK WPA2 Tagged VLAN IEEE 802 1x TLS TILS PEAP EAP SIM 10 100 Mbps auto negotiating Ethemet port RJ 45 OFDM BPSK QPSK 16 QAM 64 QAM DSSS BPSK QPSK CCK 11 Channels US and Canada e 13 Channels Europe 14 Channels J apan Virtual AP Long Distance Parameters Setup Smart Select HTTPS Detachable 2dBi antenna with SMA connector HTIP Web Management e Telnet SSH By MAC address Yes Page 176 Page 177 9 15VDC 15 24VDC 15 48VDC pair ve 4 5 and ve 7 8 202C to 702C 302C to 8
84. ion The application of mSSID is to provide better secunty with multiple network path connections from a single AP to multiple VLAN network segments of the switch on the local area network A network setup application is illustrated below Ethernet Switch with VLAN WPE53G E g Virtual AP with SSID VAP1 VLAN ID 10 and WPA PSK wireless sec unity enabled will be channeled to Port 2 and Port 3 where the intemet Shanng router isconnected Virtual AP with SSID VPA2 VLAN ID 20 WPA EAP enabled and connected to a radius server will be channeled to Port 5 and Port 6 which are connected to the firewall of the intemal local area network Page 172 Q3 Can l update my access point to this mSSID firmware Yes You can retain your access point configuration when you update to the mSSID firmware if the curent fimware running is v1 3x and above If AP is unning the following configuration setup updating to the mSSID firmware will affect the configuration f AP is running as PtP Point To Point or PtMP Point To MultiPoint mode The reason it cannot retain the configuration is because mSSID uses a new PtP and PtMP connection setup method called RootAP and Transparent Client This method iscompliant with IEEE 802 11h standard AP is running very old firmware v1 2x and below Q4 Can update to mSSID firmware but setup only one SSID connection Yes mSSID fimmware operation is similar to previous single SSID firmware whe
85. ireless Routing Client modes Page 42 Wireless Profile A selection of network environment types in which to operate the access point e 802 11b only Supports wireless B clients with data rates of up to 11Mbps in the frequency range of 2 4GHz e 802 11b g mixed Supports both wireless B and G clients e 802 11g only Supports wirelessG clients that offer transmission rates of up to 54Mbpsin the 2 4GHz frequency band e superG Supports wireless superG clients that offer transmission rates of up to LO8Mbpsin the 5GHz frequency band Country Choose the Country where you are located Channel This option allows you to select a frequency channel forthe wireless communication and is only available in the Access Point Point to Point and Point to Multiple Point modes Select SmartSelect to automatically scan and recommend the best channel that the access point can utilize Tx Rate Allows you to choose the rate of data transmission ranging from 1Mbps to Fully Auto Closed System The access point will not broadcast its WLAN name ESSID when Closed system is enabled By default Closed system is disabled Page 43 Actas RootAP The access point will connect with 1 or multiple clients to create a point to point and point to multi point connection network with 2 ormore access points This connection mode is fully compliant with 802 1h standards VLAN ID This is the number that identifies
86. le Type 7 52 KB From 192 168 168 1 Save i harm your computer If you do not trust the source do not save this C While files from the Internet can be useful some files can potentially file What s the tisk Page 160 Restore your Settings Step 1 Select Backup or Reset Settings from the SYSTEM TOOLS menu Step 2 To restore previously saved settings click on the Browse button and select the folder where you saved your configuration file Backup or Reset Settings Erase current configuration and restore factory default settings Make a backup copy of current configuration to disk gt Backup Restore backup configuration from disk c Documents and Settings config ctq Browse Restore Click on the Restore button and the system will prompt you to reboot your device Step 2 Page 161 Reboot the System Most of the changes you make to the system settings require a system reboot before the new parameters can take effect Step 1 Select Reboot System from the SYSTEM TOOLS menu Step 2 Click on the Reboot button Reboot System Peboot now Reboot Step 3 Wait forthe system to reboot and the login page will be displayed Rebooting The system is rebooting Please wait about 30 seconds until the login page is displayed uCoanftig Page 162 Change the Password It isrecommended that the login password ischanged from the factory default password Step 1 Se
87. lect Change Password from the SYSTEM TOOLS menu Step 2 Key in the Current Password The password is case sensitive and defaulted to password Enter the New Password field and then Confirm Password Step 3 Click on the Apply button to update the changes Change Password Current Password esse New Password esos Confirm Password levee Apply Page 163 To Logout Step 1 Select Logoutfrom the SYSTEM TOOLS menu Step 2 Click the LOGIN button to accessthe access point configuration interface again Wireless LAN Access Point Management Please enter your password esssssss LOGIN Forgot your password see the User s Guide for mstructions Page 164 Use the HELP menu View About System System Information displays system configuration information that may be required by support technicians for troubleshooting Select About System from the HELP menu The System Information page displays information about the access point configuration settings System Information Device System Up Time 0 Days 00 01 32 BIOS Loader Version 2 41 build 0516 Firmware Version 2 01 build 20 April 2007 NetWork Mode Inherent Bridge Wireless Hardware Address 00 80 48 ff 00 2c WLAN name ESSID compex wpeS3q Operating frequency 242 7MHz2 Operating Channel 4 Security Mode None Management Port Hardware Address 00 80 48 ff 00 2b I
88. lect the access point from the products list and click on the Open Web button To retneve and display the latest device s in the list click on the Refresh button Help NIC Adaptor List Realtek ATL8139 00 01 80 0E 86 37 192 168 88 43 255 255 255 0 Forward Route List Network Destination Netmask Gateway Interface Metric 00 0 0 0 0 0 0 192 168 882 192 168 88 43 20 255 0 0 0 127 0 0 1 127 0 0 1 168 255 255 255 0 192 168 88 43 192 168 88 43 19 1AA AR 43 2RR 2RR AAR PAR 127N0N1 1271001 Products List Current Selected j Step 7 Do not exit the uConfig program while accessing the web based interface as this will disconnect you from the device Click on the OK button The selected product is on different subnet uConfig will change the system settings to enable access to the product s Web Interface Do not close uConfig while accessing the product s Web Interface doing so will break the connection After finishing the product configuration press the lt ExitUconfig gt link on the product s Web Interface uConfig will then close automatically Page 21 Step 8 At the login page press the LOGIN button to enter the configuration page The default password is password Step 9 Wireless LAN Access Point Management Please enter your password seececee Forgot your password see the User s Guide for instructions You will then reach the home page of the access point web ba
89. less card in this product complies with the R amp TTE Directive 1999 5 EC issued by the Commission of the European Community Compliance with this directive implies conformity to the following EMC Standards FCC 47 CFR Part 15 Subpart B 47 CFR Part 15 Subpart C Section 15 247 CE EN 300 328 2 EN 300 826 EN 301 489 17 Therefore this product is in conformity with the following regional standards FCC Class B following the provisions of FCC Part 15 directive CE Mark following the provisions of the EC directive FArmware This manual is written based on Finnware version 2 Table of Contents OVERVIEW THE PRODUC T cniissiercsiviniensehiaaiennnatinvieaen 1 MOC UO e dense anudiaebemeaemeenbecuees 1 Features ana Bene i wetness utestesontadnnceneavannnabansadumechencahadsaueanovennseiaunssubedisd 2 When to Use Which NiO Ge tisceicanSeutssbartiotinsieuscetaaniu ies gusneat aniaasinaouiasasaunanesens 4 ACCES POINT MOG Sarnia a o a N a 4 ACCES PONEC ENT MO CC virinan iian a A 5 Wireless Routing Clent MOde sssssssssernsessssrnrrrrnreeossrnnrrenerssrrnnrrerrenee 6 Gateway MO OC apa sacicnisercnscapecnti a a a 7 Wireless Adapter MOGC cccssssssecceeecceeeeessssseceeeeeeeeesegsseeeeeeeeesseseagssseess 9 Transparent Cent ModE nera N 10 Repeate ModE ics wi saitreincesnrchaece N T NAA 12 PANEL VIEWSAND DESC RIP TION esirgesin 13 INSIALL THE HARD WA RE rerin ina 14 Setup Requirements nonnina a aie ae 14 Using powerad
90. llow the access point to automatically detect the ciphertype to use Step 4 Enter the GTK Group Transient Key Updates This is the length of time after which the access point will automatically generate a new shared key to secure multicast broadcast traffic among all stations that are Communicating with it By default the value is 600 seconds Step 5 Click the Apply button and reboot your system after which your settings will become effective Page 130 Setup 802 1x RADIUS for Access Point Available in Access Point Repeaterand Gateway Modes At the IEEE 802 1x AP Setup page IEEE 802 1X AP Setup Primary RADIUS Serwer IP 0 0 0 0 Secondary RADIUS Serwer IP 0 0 0 0 Authenticatian Port haz Accounting Port haa Shared Secret key esses Broadcast Key Rotation seconds o o 60 9999 Key Length Ed bits gt Step 1 Key in the IP address of the Primary RADIUS Server in your WLAN You can optionally add in the IP address of a Secondary RADIUS Server if any The RADIUS authentication server MUST be in the same subnet asthe access point Step 2 By default the value for Authentication Port number is 1812 You can leave this value asitis This value must be setto be the same asthe one in the RADIUS server Step 3 By default the value for Accounting Port number is 1813 You can leave this value asitis This value must be set to be the same asthe one in the RADIUS server Step 4 Enter the Shared Se
91. lt High sec unty options for convenient setup Then you may choose the type of network activity information you wish to log for reference Data activity ansing from different types of protocol can be recorded Firewall Configuration Page 143 You may add more firewall rules for specific secunty pumoses Click on the Add radio button at the screen shown above followed by the Editbutton Rule Name Disposition Policy Protoc ols ICMP Types Page 144 Edit Firewall rule 0 es ri E3 E m i aii z 4 Ea 0Daoaomo E p P OW OBOnDO Ipe m 3 a a a j LI a Entera unique name to identify this firewall rule This parameter determines whether the packets obeying the rule Should be accepted ordenied by the firewall Choose between Acceptand Deny Users are allowed to select the type of data packet from ICP UDP ICMP IGMP or ALL Note If users select either ICMP or IGMP they are required to make further selection in the ICMP Types or IGMP Types respectively This IP protocol is used to report emors in IP packet routing ICMP serves asa fom of flow control although ICMP messages are neither guaranteed to be received ortransmitted ICMP Desc nption Packet Type Echo Determines whether an IP request node a host ora router Is available on the network Echo reply Replies to an ICMP echo request Destination Informs the host that a unreachabl datagram Cannot be
92. ly Please referto the Point to Point setup section Internet Terminal Cable ADSL modem Switch 2a N Access Point Client router Workg oS of PCs Page 5 Wireless Routing Client Mode In Wireless Routing Client Mode the Ethemet port of the access point may be used to connect with other devices on the network while Intemet access would be provided through wireless communication with a wireless ISP Public IP address is Switch transmitted wirelessly Broadcasting a r Tower 2 Wireloda Routing amp D Cliont Workgroup of PCs Coo Page 6 Gateway Mode In Gateway Mode the access point supports several types of broadband connections in a wireless network after you have identified the type of broadband Intemet access you are subscnbed to Internet Cable ADSL modem gt router Gateway Laptop Page 7 Broadband Intemet Access Type Static IP Address Use Static IP Address if you have subscnbed to a fixed IP addressorto a range of fixed IP addresses from your ISP Dynamic IP Address With Dynamic IP Address the access point requests for and is automatically assigned an IP address by your ISP for instance e Singapore Cable Vision e HOME Cable Services PPP over Ethemet PPPoE Use PPPoE if you are using ADSL services in a country utilizing standard PPPoE authentication for instance e Gemany with T 1 Connection e Singapore with SingNet Broadband or
93. n Up to 4 virtual access points VAP with unique BSSIDs is supported and if required traffic from each VAP can be tagged to a specific VLAN and bndged The secunty mode foreach VLAN can be configured separately e Long Range Support Our propnetary Long Distance Algonthm for ACK and CTS Timeout adjustment support opens up the potential for long range wireless deployment Recommended values are provided for the parameters that can also be fine tuned foroptimal performance e Bandwidth Contol In Routing Mode Bandwidth Control allows the administrator to manage the bandwidth of subscnbers to prevent massive data transfer from slowing down the Intemet access of other users The Upload Download bandwidth at WAN LAN ports of specific IP or MAC addressescan be specifically limited e Wireless Distibution System WDS2 WDS2 connects access points using MAC address ESSID to create a wider network so mobile users can roam while remaining connected to network resources Page 2 e Parallel Broadband In Gateway Mode Load Balancing and _ Fail Over Redundancy provides scalable Intemet bandwidth e Antenna Contol and Alignment Allows the user to select the specific antenna to use and also adjust it for optimal throughput e DHCP Relay In Routing Mode DHCP clients can get IP address from the central DHCP server even if they are on different subnets e Remote Finmware Upgrade Even if they are physically distant from the access point
94. n WLAN Setup To Configure the Basic Setup of the Wireless Mode WLAN Basic Setup Card Status enable The Current Mode Access Point Change ESSID footAP tt s s Wireless Profile 802 11b g mixed gt Country NO_COUNTRY_SET NA v Channel SmatSelet xl Channel Survey Tx Rate Fully Auto x Maximum Associations B2 32 1 128 l Closed System l Act as RootAP M YLANID 1 4094 Apply Page 118 RootAP Step 2 Select Actas RootAP click on the Apply button and reboot your device to let your changes take effect Page 119 WLAN Basic Setup Card Status The Current Mode ESSID Wireless Profile Country Channel Tx Rate Maximum Associations enable Access Point Change fona P 802 11b g mixed z SmarSelect xl Channel Survey Fully Auto 32 32 1 128 M Closed System V Act as RootAP C vanin 1 4094 Follow these stepsto setup Transparent Client s Transparent Client Step 1 Click on WLAN Setup from the CONHGURATION menu You will see the sub menus expanded under WLAN Setup Click on Basic Ensure that The Current Mode is set to Transparent Client To change The Current Mode please refer to Common Configuration WLAN Setup To Configure the Basic Setup of the Wireless Mode WLAN Basic Setup Card Status enable The Current Mode Transparent Client Change ESSID client Site Survey Pemote AP MAC 00 00 00 00 00 00 L Wireless Profile 802 11b g mixed Country N
95. n When the DHCP server of the access point is enabled unless you set a different DHCP Gateway IP Address this LAN IP Address would be allocated as the Default Gateway of the DHCP client The IP address of your Access point is set by default to 192 168 168 1 Network Mask The Network Mask serves to identify the subnet in which your Access point resides The default network mask is 255 255 255 0 Default Gateway IP Optional As a bndge Access Point the access point does not usually communicate with devices on other IP subnets However the Default Gateway a PC allowsthe access point to communicate with devices on different subnets For instance if you want to access the access point from the Intemet or from a router on the LAN enter the router IP address in the Default Gateway IP field The Default Gateway IP address of your access point is set to nil by default IP Address Pimary DNS Your ISP usually provides the IP address of the DNS server Secondary DNS Address IP This optional field is reserved for the IP address of a secondary DNS server Page 29 Setup DHCP Server There are 3 DHCP Modes e NONE By default DHCP Mode isset to NONE Leave the selection at this mode if you do not wish to use DHCP e DHCP Server Select this mode to setup a DHCP server e DHCP Relay Select this mode to setup a DHCP relay By default DHCP broadcast messages do not cross router interfa
96. n setup with one SSID If the existing AP is running v1 3x firmware after updating to mSSID it will retain and continue to tun the previous configuration No reconfiguration isneeded Q5 have a MAC Filtenng table set from a previous firmware Will updating to mSSID cause the MAC table to be lost No if your firmware is v1 3x and higher updating to mSSID firmware will retain all entnesin the MAC table However if you switch back from mSSID to the previous sSSID fimware the MAC table will be lost Page 173 Q6 have Pseudo VLAN for Per Group enabled Will updating to mSSID firmware still support wireless clients with MAC addresses listed in Per Group The mSSID firmware replaces Pseudo VLAN and integrates it into VAP Virtual AP and MAC Filtering Thus Pseudo VLAN with its VLAN ID and MAC listing will be lost after updating to mSSID firmware Refer to the user manual on how to create new VAP with VLAN ID and MAC Filtenng Similarly Per Node control to isolate wireless station in AP being part of Pseudo VLAN will also be lost This option can be enabled again with the option Station Isolation in VAP setup page Q7 have WDS setup in my network Will mSSID still support this WDS has the limitation that it can only support WEP secunty key To support higher wireless secunty it is replaced with Repeater mode in mSSID firmware Thus updating to mSSID will disconnect the WDS links and connections with the rest of t
97. nical inaccuracies or typographical emors found in this guide Changes are penodically made to the information contained herein and will be incomorated into later versions of the manual The information contained is subject to change without pnor notice FCC NOTICE This device has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This device generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause hamful interference to radio communications However there is no guarantee that interference will not occurin a particular installation If this device does cause harmful interference to radio or televison reception the user is encouraged to try to corect the interference by one ormore of the following measures e Reonent orrelocate the receiving antenna e Connect the computer into an outlet on a circuit different from that to which the receiver ts connected e Increase the separation between the computer and receiver e Consult the dealeroran expenenced radio TV technician for help Caution Any changes or modifications not expressly approved by the grantee of this device could void the users authonty to operate the equipment FCC Compliance Statement This device complies with Part 15
98. nterthe parameters based on the recommended values in the pop up window click on the Apply button to update the changes Description Outdoor If set to Enable the Outdoor parameters will be configured for outdoor communication over short or long distancesas specified it is disabled by default Distance Determines the distance between your access point and the remote access point in meters Slot Time The amount of time is divided and each unit of time Is called one slot time ACK Timeout Determines the timeout allowed for the sending client to receive the acknowledgment response from the receiving client If no acknowledgment packet is received within this penod the sender will assume the receiver has not received the packet and will attempt to resend CTS Timeout Clearto Send Timeout is the time the wireless sender will wait fora CTS packet signaling that the channel is idle and it can start data transmission If no CTS packet is received within this penod the sender will assume the channel is busy and will wait before trying to send again Page 114 Set Wireless Multimedia Wireless Multimedia WMM is a QoS Quality of Service standard in IEEE802 11E that we have adopted to improve and support the user expenence for multimedia video and voice applications by pnontizing data traffic QoScan be realized through 4 different Access Categones AC Each AC type consists of an independent transmit queu
99. o let the DDNS server leam your current WAN IP address Enter your DDNS account Usemame and Password If your ISP connection uses a fixed WAN IP A the IP address in the WAN IP ield Deselect the Auto Detectcheckbox The access point will update the DDNS server with the specified WAN IP Step 4 Optional Your hostname will be allowed multiple identities if wildcard is enabled For example if you register mydomain 2mydns net users looking for www mydomain 2mydns net or fto mydomain 2mydns net can sill reach your hostname Page 103 Choice DDNS Provider Choice Provider Name Register Now ce 2MyDNS Dynamic DNS Service Provider Register Online C DIONS Register Online Back Dynamic DNS Add Provider 2MyDNS Dynamic DNS Service Provider Domain Name tis f 2mydns net x waNiP O OM Auto Detect Username o O O Password ee ee Wildcard C YES NO Mail Exchanger Backup Mail Exchanger YES NO Add Reset Back Dynamic DNS Add Provider 2MyONS Dynamic ONS Service Provider ee F A Mail exchanger i Step 5 Optional In the Mail Exchanger field enter the Static WAN IP address of the mail server configured to handle email for yourdomain Select Backup Mail Exchanger to enable this service Step 6 Clickon the Add button The new domain is added to the Dynamic DNS list table It willappear asa hypenink that you can click to go back to the Dynamic D
100. o Enable or Disable for access points and set the Policy to either Accept or Deny MAC addresses Status Paic MAC Filtering set to Enable with Policy to Accept only the MAC addresses in the MAC Filter Address List and deny allotherMAC addresses L neies MAC Filtering set to Enable with Policy to Deny all the Erate Dev MAC addresses in the MAC Filter Address List and acceptallotherMAC addresses ath ae MAC Filtering set to Disable Whether Policy is set to Disable acen Enable or Deny doesnot matter ea a MAC Filtering set to Disable Whether Policy is set to Enable or Deny does not matter Click the Editbutton MAC Address Filtering Radio 1 MAC Filtering Options AP Type ESSID Security MACs Status Policy Main AP sampleRouter NONE Edit Enable Accept Virtual AP VAP NONE Edit Disable Deny Virtual AP VAP2 NONE Edit Enable Deny View Complete MAC List f Pai a tent a Fam Poe E a U ota f pe Se n All changes wil take effect after reboot Page 70 Step 2 MAC Filter Address List page displays Click the Add button MAC Filter Address List MAC Address List ESSID sampleRouter Del MAC Address Comments Apply to All changes wil take effect after reboot Step 3 The Add MAC Address page displays Add MAC Address MAC Address XX XX XX XX XX XX Comment Apply to All Selected AP ESSID Security sampleRouter NONE Fi YAPI NONE O
101. orindoorconnections between local networks MAC MAC 00 70 37 2c f5 de 90 90 59 4c f7 de Current Compex model that provide RootAP support are WP54x series WPP54x series WP18 and NP18A For newer models please contact your Compex supplier or visit the Compex web site Page 10 Difference Between other client modes and Transparent Client Mode Other client modes Transparent Client Mode Connectivity with any Connectivity with RootAP standard APs supported APs Alldevices connected to Devices connected to the the Ethemet port use a Ethemet port flow through common MAC address for freely and transparently Communications with the without the MAC address AP restnction The Transparent Client Mode is more transparent making it more Suitable for linking 2 networks together in a point to point or point to multipoint network connection 2 Client Gg Root AP MAC MAC 00 80 48 3c f6 de 00 80 48 3c f6 de Page 11 Repeater Mode The access point comes with a built in Repeater Mode to extend the range and substantially enhance the performance of the wireless network by allowing communications over much greater distances In Repeater Mode the access point acts asa relay for network signals on the network by regenerating the signals it receives and retransmitting them to extend the range of the existing network infra struc ture Detailed information on the Repeater Mode is available in the Repeater Set
102. ou bets 68 Use MACFISnN O ceran ON 69 Add a MAC Addressto the MAC Address USL ccccccsssssseeeeeeeees 70 Delete a MAC Address from All Access POINS cccccssssssseeeeeeeees 73 Delete a MAC Address from Individual Access Point 75 Edit MAC Address from the MAC Address USL cccccccsssseseeeeeeeees 77 PERFORM ADVANCED CONFIGURATION cc sseceeeeeeeeeees 19 SE LUD ROUTING venscausetauninivnannaeinebuivanceiwiertheed viakeamieiautcunentuienataviniinieribaaiin 79 CGonnig Ure Static RO UNI G esr 80 Use Routing Infommation ProtocCOl ccccccccccsssssssseeeeeeeeesseeseseeeeeeseessaeegs 81 Use Network Address Translation ccccccccccccccsssssseeeeeeeseesaeesseeeeeeeseessneees 82 Configure Virtual Servers Based ON DMZHOSL cceccesessssseeeeeeeeeeees 83 Configure Virtual Servers Based on Port Forwarding cccccceseee 84 Configure Virtual Servers based on IP Forwarding cccceeeeeeee 88 Control the Bandwidth Available 0 0 0 cssssssseeeeeeeeeeesesseeeeeeeessesaeaeseees 89 Enable Bandwidth Control sessssssrsrensessssrnrrrnnnnesrrnnrrnrnersssnnnrennrenes 89 Configure WAN Bandwidth COntr0l cceeeesseeeeeeeeeeseesseeeeeeeeeeseseees 90 Configure LAN Bandwidth COntrOl cc csssssseeeeeeeeeesssessseeeeeeeeesseees 91 Perform Remote MAnaGeMe nl sccccecccssesssssseeeeseeseseessseeeeeeeeeseneegs 93 Setup Remote MANAGEMENL c cc cescececs
103. please refer to Appendix Virtua AP Multiple SSID FAQ Page 110 Follow these stepsto setup Virtual AP Virtual AP Click on WLAN Setup from the CONHGURATION menu Select Virtual AP Virtual AP List Virtual AP List page displays Statistics Security View NONE c e ClickApply to register changes XX XX XX XX XX XX View NONE elete p p y g g j Back changes will take effect after reboot All c Click Clearto clear Virtual AP List Click Back to retum to WLAN Basic Setup page Select the Delete option beside any Virtual APs you wish to delete Click Add to goto add Virtual AP page Virtual AP 1 Enter ESSID name ESSID sample virualAr VLAN ID i 2 Settings Closed System e VLAN ID RootaP e Closed System Security Mode MONE e RootAP beh Becks Select Secunty Mode Click Apply to make changes or click Back to retum to Virtual AP List page Page 111 Set Prefered APs Available in Client Mode When there is more than one AP with the same SSID the Preferred APs function allows you define the MAC address of the APs in order of preference The MAC address at the top of the Preferred APs list has the highest connection preference and the MAC address at the bottom has the lowest connection preference Follow these stepsto specify your preferred APs Preferred APs 1 Click on WLAN Setup from the CONFIGURATION menu 2 Select Preferred APs Preferred Access Point MAC
104. ply button Page 101 To manage Dynamic DNS List Step 1 Select Dynamic DNS Setup from the Home User Features command menu Step 2 If you have created a list earlier click on the Refresh button to Dynamic DNS List update the list Domain Name Update Status Add Refresh Step 3 To add a new Dyna mic DNS Choice DDNS Provider click on the Add button The Choice DDNS Provider page a a p p ears 2MyDNS Dynamic DNS Service Provider There are two default providers that you can use Newt Back The parameters are explained below e Choice Indicates your prefered DDNS provider e ProviderName Name of your prefered DDNS provider e Register Now Allows you to go to the website of your preferred DDNS provider where you can ister youraccount Page 102 2 DDNS providers are predefined for you You need to be connected to the Intemet to register your DDNS account Select 2MyDNS Dynamic DNS Service Provider as DDNS Service Provider Step 1 Under the Choice column in the Choice DDNS Provider list check the radio button next to the 2MyDNS DNS Service Provider entry Click on the Next button Step 2 Enter your Domain Name Step 3 The Auto Detect checkbox is selected by default The WAN IP field is empty by default These default settings should be used if am WAN IP connection is used If your ISP connection uses dynamic WAN IP Select the Auto Detect checkbox t
105. rom the access point and access the Intemet through X DHCP Lease Time This is the length of time that the client may use the assigned address before having to check with the DHCP server to see if the Address is still valid Always use these DNS servers Select this option to always use the DNS servers specified Pimary DNS IP Address Your ISP usually provides the IP address of the DNS server Secondary DNS IP Address This optional setting is the IP address of a secondary DNS server Page 33 The following will guide you to setup the DHCP Relay Available in Client and Wireless Routing Client modes Step 1 Click on Advanced Settings from Management Setup from the CONHGURATION menu Step 2 Set DHCP Mode to DHCP Relay In DHCP Server Setup refer to the table below to set the appropnate values to suit the needs of your network DHCP Server Setup DHCP Mode DHCP Relay DHCP server IP 192 168 168 254 DHCP Gateway IP 192 168 1 1 Apply Help Step 3 Click on the Apply button Page 34 This table descnbes the parameters that can be modified in DHCP Server Setup Parameters Description DHCP Server IP This is the IP address of the DHCP server DHCP Gateway IP Though the DHCP server usually also acts as the Default Gateway of the DHCP client the access point allows you to define a different Gateway IP Address which will be allocated as the Default Gateway
106. sed interface Page 22 Arcra Poirt AT Soe Siceoalt Inbernet aparer bd J Bh Db ew Ferie Tock b Qua O i 2 eee germ O SB _ B fel Ee tis Airesia hiim LPE LSB LOS bandman np Dinar F Google C ajep ops Wireless LAN Access Point WPES36 The current operacon mods is Access Font ase choose an option from the configuration boost an ption From the configuration aera qu P fon Fron the configuration arn n ption fren the configuration nen gjsdaporerscethetatercofigemonestting ff ff Fagan Manual access wit Intemet Explorer Step 1 Launch your Web browserand under the Toolstab select Intemet Options Z Yahoo Singapore Microsoft Internet Explorer File Edit view Favorites BETSI Help Mail and News Q Bak J x Synchronize g l Windows Update i Address 2 http lsg yahoo com Windows Messenger Yahoo Messenger Show Related Links ER Step 2 Open the Connections tab and in the LAN Settings section disable all the option boxes Click on the OK button to update the changes Local Area Network LAN Settings Automatic configuration Automatic configuration may override manual settings To ensure the use of manual settings disable automatic configuration Automatically detect settings Fi Use automatic configuration script Proxy server o Use a proxy server for your LAN These settings will not apply to dial up or YPN connections
107. sing EAP PEAP 802 1x EAP Type e Enterthe UserName e Enterthe Password IEEE 802 14 Client Setup 502 14 EAP Type EAP PEAP User Name user example com Password ETT Step 3 Click the Apply button and reboot your system after which your settings will become effective Page 134 Setup WPA Entenpnse for Access Point Available in Access Point Repeaterand Gateway Modes Follow these steps if you have selected the WPA1 Enterpnse WPA2 Enterprise or WPA Enterpnse AUTO secunty modes At the WPAI1 2 Enterpnse AP Setup page WPA 1 2 Enterprise AP Setup Primary RADIUS Server IP 0 0 0 0 Secondary RADIUS Server IP 0 0 0 0 Authentication Port 1812 Accounting Port 1813 Shared Secret Key lescecee GTK updatefseconds foots 60 9999 Step 1 Key in the IP address of the Primary RADIUS Serverin your WLAN You can optionally add in the IP address of a Secondary RADIUS Server if any The RADIUS authentication server MUST be in the same subnet asthe access point Step 2 By default the value for Authentication Port number is 1812 You can either leave this value as it is or key in a different Authentication Port but it MUST match the cormesponding port of the RADIUS server Step 3 By default the value for Accounting Portis 1813 You can leave this value as it Is This value must be set to be the same asthe one in the RADIUS server Step 4 Enter the Shared Secret Key used to validate client server RADIUS
108. ssseececsenseeeessanseeesseaseeeessansenes 93 USE PARALLEL BROADBAND crisan a 94 Enable Parallel Broadband sssssssssssrnnressrsrrrnnreeossrnnnrrnnrersssnnnrrrrrenee 95 Setup EMail NOMIC A UON roenan aN STRN 96 Using Static Address TRANSlation ccccccccecccsesssssseeeeeeeeseeeeeessseeeeeeeseseeas 97 Use DNS REdINGC UON N 98 Enable or Disa ble DNS Redirection ssssssesssssrrrrrrrreesssrnrrrrerssrrrrrrens 100 Dyna MC DNS Se UD ian a A E 101 To enable disable Dyna mic DNS Setup sssssssssseseeeeeessssssrrrrrrrrrrrrrrnn 101 To manage Dynamic DNS USL ce sseseeeecceeessssseeeeeeeeesesesseeeeeeeees 102 USE THE WIRELESS EXTENDED FEATUREG cscessseesseeeseeeees 106 SUID WWD SZ st Genes te toned ceded N N E 106 Set Virtual AP Multiple SSID cccccecceeeeeeeeeeeeeesssseeeessseeeeeeeeeneeeeesees 110 SPERIE APS anae vba sortiunes ia a adnan naa 112 Get LONG Distance PALAMALTENG ccccccccssssssssseeeeeeeeeeesessseeeeeeeeeeneees 113 Set Wireless Multimedia cccccccssssssseeceeeecseeeeessseeeeeeeeesesseasseeeeeeesenseneags 115 Setup Point to Point amp Point to MultiPoint Connection seess 118 HUP REHEAT se 122 SEC URE YOUR WIRELESS LAN sisciciscctrnoresanaratitawparieiarnetincudateds 127 Se CUD WE P o A iden aeurussaaestalnaabastts 128 SSUP WPARPC1S0 Na lirin essai randcuninaaiaens 129 Setup 802 1x RADIUS for ACCESS POINL ccesssseeeeeeeeesesssseeeeeesesseee
109. t Capped bandwidth rate of throughput Rule Type This defines whether the bandwidth control rule works on downloads or uploads and whether it works by IP address or MAC address IP MAC Address IP address or MAC address for the bandwidth control rule comesponding to whether the Rule Type is defined by IP addressorMAC address Step 4 Click the Add button Repeat Steps 1 to Step 3 to add new bandwidth rule Page 92 Perform Remote Management Available in Wireless Routing Clientand Gateway modes You can use the access point web based interface from the Intemet to manage your network remotely Setup Remote Management Step 1 Select Remote Management from the Remote Management CONAGURATION command menu Remote HTTP Port fo D disabled 3 Apply Step 2 To disable Remote Management set Remote Http Portto 0 To enable Remote Management set Remote Http Portto an unused port number It is recommended that you avoid using port number 80 as it is blocked by some ISPs In Gateway mode Remote Management is enabled with Port 88 and the Ethemet port becomesa WAN port To continue using it open the web manager using the WAN IP with Port 88 Example For WAN IP 100 100 100 1 use http 100 100 100 1 88 NOTE It is recommended that the default password is replaced with a new password changed penodically to prevent unauthonzed access Page 93 Use Parallel Broadband Available in
110. t Forwarding button in Advanced NATOptons Advanced NAT Options DMZ Port Forwarding IP Forwarding Step 2 Click the Add button on the Port Forward Entries page Port Forward Entries Server Type Protocol Public Port Private IP Private Port Page 84 Step 3 In the Add Port Forward Entry page you can set up a Virtual Server for a Known Servertype by selecting from a drop down menu or you can define a Custom Server Add Port Forward Entry Add Help Cancel l Custom Server server Type Protocol Public Port From Tes Private IP Address 92 168 168 55 Private Port From Public IP From TOR Page 85 Known Server Server Type Private IP Address Public IP From To Custom Server Server Type Protocol Public Port To Private IP Address Private Port From Page 86 Select from the drop down list of known server types e HTIP e FIP e POP3 e Netmeeting Specify the LAN IP address of the server PC running within the pnvate network Select All Sngle or Range from the dropdown list Enter the beginning of the range Enter the end of the range Define a name forthe server type you wish to configure Select either TCP or UDP protocol type from the dropdown list Select whether to define a single port ora range of public portnumbersto accept Starting public port number Ending public port number If the Public Port type is Single this field
111. t is absolutely necessary Page 82 Configure Virtual Servers Based on DMZ Host DMZ De Milittanzed Zone makes specific PCs in a NAT enabled network directly accessible from the Intemet With NAT the access point keeps track of which client is using which port number and forwards Intemet replies to the client according to the port number in the reply packet Reply packets with unrecognized port numbers are discarded but with DMZ these packets are forwarded to the DMZenabled PC instead Step 1 Select NAT from the CONHGURATION Advanced NAT Options command menu DMZ Port Forwarding IP Forwarding Step 2 Click on the DMZ button in Advanced NATOpt ons Step 3 Enter the Private IP Address of the DMZ NAT DMZ IP Address host on the NATDMZIP Address page To disable DMZ enter 0 0 0 0 Click the App 192 168 168 55 Apply Back NOTE DMZ may not function propery if the DMZhost IP address is changed due to DHCP therefore Static IP Address configuration is recommended forthe DMZhost Please note that the DMZ host is susceptible to malicious attacks asALLof its ports are exposed to the Intemet Page 83 Configure Virtual Servers Based on Port Forwarding Virtual Server based on Port Forwarding forwards Intemet requests amving at the access point WAN interface to specific PCsin the pnvate network based on their ports Step 1 Select NATfrom the CONAGURATON command menu Step 2 Click the Por
112. the Intemet is in fact the access point itself From then the notebook would contact the access point for accessto the Intemet without any change to the TCP IP settings NOTE For SATto function propery 1 The IP address of the notebook should belong to a different subnet from the LAN IP address of your access point The lt Default Gateway gt in the TCP IP settings of your notebook should NOT be left blank Step 1 Select Static Address Translation from the Home User Features command menu Step 2 Select whether to Enable or Disable SAT and click the Enable Disable Static Address Translation Apply button SATis disabled by default Seen A d o Apply Page 97 Use DNS Redirection Available in Wireless Routing Client and Gateway modes When you entera URL into your Intemet browser it requests fora name to IP address translation from the Domain Name System DNS servers to locate the web server hosting the desired website The DNS server searches its local cache for the answer and if found retums this cached IP address Otherwise it contacts other DNS servers until the query isanswered With DNS Redirection DNS requests from the LAN clients are processed by the access point It contacts the DNS server allocated by your ISP to resolve these DNS requests unless you have already specified a default DNS server in the access point LAN Setup This default DNS server ovemdes the one defined in the TCP IP settings of the
113. the SMTP server through which the message will be sent It isrecommended that you use your ISP s SMTP server e UserName UserName forthe specified email account This is necessary if authentication is required e Password Pass word forthe specified email account This is necessary if authentication is required e Email address of Sender Email addressto be displayed asthe sender Step 4 Specify whether the SMTP server Needs Authentication or not by setting the checkbox accordingly By default it isnot selected Step 5 Click on the Apply button Page 96 Using Static Address Translation Available in Wireless Routing Clientand Gateway modes If you use a notebook for work in the office you most probably brng it home to connect to the Intemet as well Since it is most likely that your office network and home network broadband shanng network subnets are configured differently you would have the hassle of reconfigunng your TCP IP settings every time you use the notebook in a different place Static Address Translation allows you to bypass this hassle With SAT if you try to access the Intemet on your notebook from home but with your office TCP IP settings the notebook will try to contact the IP address of your office gateway to the Intemet When the access point finds that the notebook is trying to contact a device lying ona different subnet from that of the home network it would inform the notebook that the gateway to
114. the different virtual network segments to which the network devices are grouped Thiscan be any numberfrom 1 to 4094 Channel Survey A list of channels that are detected by your access point in the WLAN Information such as frequency channel MyQuality NeighQuality APCount and Recommendation can be found in the listing The Access Point and Gateway modes support this feature Page 44 Scan for Site Survey Available in Client and Wireless Routing Client modes Step 1 In the Mode Setup page click on the Site Survey button WLAN Basic Setup Card Status enable The Current Mode Client Change ESSID compexwpeS3g Site Survey Remote AP MAC 00 00 00 00 00 00 a Wireless Profile 802 11b g mixed gt Country NO_COUNTRY_SET NA bd Tx Rate Fully Auto gt The Site Survey provides a list of the MAC addresses BSSID and SSID of neighbounng access points detected the Chan channels Auth Authentication Alg Algonthm used and the strength of the Signal received Site Survey Bssid SSID Chan Auth Alg Signal 0080482cd08b Powermatic Hotspot 802 119 5 WPA PSK AES 8 amp 008048ff0029 compex np25g 2 WPA PSK AES 7 9080483bd71b 54g after import 3 OPEN WEP 12 C 0080483d83e1 np28g test eng 1 OPEN NONE 36 C 068048ff0029 compex np25g 2 OPEN NONE 8 C 0080483cfbodf compex wp18 card1 4 OPEN NONE 7 C 0080483f30b3 zapova_2 5 WPA PSK TKIP 34 Apply Refresh Back Step 2 To connect t
115. tton Select WAN Type Static IP Address Dynamic IP Address PPP over Ethernet PPTP Apply Cancel Help Page 59 Step 3 Enter your account name assigned by your ISP Example guest in the field for Useemame followed by youraccount Password Select Always On if you want your access point to always maintain a connection with the ISP Otherwise select On Demand for the access point to connect to the ISP automatically when it receives Intemet requests from the PCsin your network Idle Timeout is associated with the On Demand option allowing you to specify the value in seconds after the last Intemet activity by which the access point will disconnect from the ISP A value of 0 will disable idle timeout Reconnect Time Factor is also associated with the Always on option and specifies the maximum time the access point will wait before reattempting to connect with your ISP A value of O will disable idle timeout Click the Apply button and Rebootthe access point WAN PPPoE Setup WAR Type PPPoE Change Username guest Password C On Demand Idle Timeout 0 disabled 30 seconds Always On Reconnect Time Factor 30 seconds Status Connecting Refresh Status IP Address Network Mask Default Gateway Primary DNS Secondary DNS Apply Email Notification Help Page 60 You can limit the maximum size a packet can be in a network by setting the MTU Maximum Transmissible Unit Click the M
116. up section ork ist AP l DB i i Bee 2nd Repeater AP Page 12 Panel Views and Description Page 13 Install the Hardware setup Requirements CAT5 5e Networking Cable e Atleast 1 computer installed with a web browser and a wired or wireless network interface adapter e All network nodes installed with TCP IP and propery configured IP address parameters Using power adapter to supply power to the unit Caution LV model DC Jack input voltage range is 9 15 VDC HV model DC Jack input voltage range is 15 24VDC DO NOTuse power adapter from HV model on LV model Step 1 Connect the extemal antenna to the SMA connector of the access point Page 14 Step 2 Insert one end of the Ethemet cable to the Ethemet port on your access point and the other end of the cable to your PC s Ethemet network adapter RJ45 Ethernet Port Step 3 Attach the power adapter to the main electncal supply and connect the power plug into the socket of the access point Main Electrical Supply Step 4 Tum ON the power supply and power ON your PC Notice that the LEDs Power and Port Lor 2 depending on which port you have connected the Rj 45 Ethemet cable to have lighted up This indicates that connection has been established suc cessfully between youraccess point and your PC Page 15 Using PoE to supply power to the unit supported on HV model only PoE is supported in the H
117. willbe ignored Specify the IP address of the server PC running within the pnvate network Starting pnvate port number The ending pnvate port number willbe calculated automatically according to the public port range Public IP Select All Single or Range from the dropdown list Fom Enter the beginning of the range To Enterthe end of the range For example to set up a web server on a PC with IP address 192 168 168 55 set the Server Type as HIIP and set the Private IP Address as 192 168 168 55 then click on the Add button Port Forward Entries Sener protocol Public Port Private IP Private Port Tee So 192 168 168 55 30 Type HTTP ma Page 87 Configure Virtual Servers based on IP Forwarding If you are subscnbed to more than one IP address from your ISP virtual servers based on IP forwarding can forward all Intemet requests regardless of the port number to defined computers in the pnvate network Advanced NAT Options DMZ Port Forwarding IP Forwarding Step 3 In the Add IP Forward Entry page enter the Private IP Address and Public IP Address In this example we would like all requests for 213 18 213 101 to be forwarded to a PC with Private IP Address 192 168 168 55 NOTE Please ensure that you are subscnbed to the Public IP Address you intend to forward from Step 4 Click the Add button IP Forward Entries Private IP Public IP 192 168 168 55 213 18 213 101

Compex Systems WPE53G User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents