Home

Compex Systems 802.11N User's Manual

1. SNMP Setup SNMP SETUP Enable SNMP RA Read Password public Engine ID s00007esBD000027041 Enable SNMP Trap E Trap Destination IP 192 168 168 1 Community public sts Enable SNMP Default is disabled Check on box to enable Read Only Password Password to query device Engine ID Default is Enable SNMP Trap Default is disabled Check on box to enable Trap Destination IP Enter the IP to send the info when trap is triggered Community Enter the SNMP community string NTP Setup NTP SETUP Select Your Time Zone SMT 07 00 Mountain Time US amp Canada Enable NTP Client M Custom Time Server time nist gov Known Time Server bonehed lcs mit edu Apply Enable NTP Client Default is disabled Check on box to enable Select Your Time Zone Select from list the country you reside Custom Time Server Default is time nist gov Enter preferred time server domain or IP Known Time Server You can also select one from this list as your new time server Web HTTP Security WEB SERVER Web server mode HTTPS Port Web Server Mode Default is HTTP Option is HTTP and HTTPs HTTP s Port Default is 80 for HTTP and 413 for HTTPs Enter a new preferred port number Telnet Access Setup TELNET SERVER Enable Telnet Server Server Port Enable Telnet Server Default is enabled Remove check on box to disable Server Port Default is 23 Enter new preferred port number SSH A
2. Secondary DNS IP Address 203 1270 90 40 DNS Relay Setup Default is disabled Check on box to enable These are the primary and secondary DNS IPs device proxy service use to resolve the domain name on behalf of the client PCs Primary DNS IP Address Enter the primary DNS IP address Secondary DNS IP Address Enter the secondary DNS IP address UPNP SETUP UPnP W Enabled Apply Settings UPNP Default is disabled Check on box to enabled When enabled client PC running Microsoft UPnP services can automatically open certain specific port required by the PC application in the router For security reason this service should not be open Recommend to setup manually open all port service through Port Forwarding service Services Tab Click Services tab from menu to open the page below Services section provides varieties of useful and enhanced functions to help assist device operations BASIC BASIC ADWANCED o aa aces STATUS ADVANCED PING WATCHDOG Enable Ping Watchdog O 192 168 1681 ls seconds lso seconds Ez IP Address To Ping Ping Interval Startup Delay Failure Count To Reboot AUTO REBOOT Disabled Auto Reboot Mode SERVICES SNMP SETUP Enable SNMP O public 800007e58D000027041 Enable SNMP Trap O 192 168 1681 publie Read Password Engine ID Trap Destination IP Community NTP SETUP Select Your Time Zone GMT 07 00 Mountai
3. networks work A O eL x 0 cl O O O O y Je 3 O 0 O E MIMOJunior 802 11in RoHS compliant O Copyright 2009 Compex Systems Pte Ltd All Rights Reserved This document contains information which is protected by copynght Reproduction adaptation or translation without pnor permission is prohibited except as allowed under the copynght la ws Trademark Information Compex isa registered trademark of Compex Inc Microsoft Windows and the Windows logo are the trademarks of Microsoft Corp NetWare is the registered trademark of Novell Inc WM M and WPA are the registered trademarks of Wi Fi Alliance All other brand and product names are trademarks or registered trademarks of their respective owners Notice Copyrights O 2009 by Compex Inc All rights reserved Reproduction adaptation or translation without prior permission of Compex Inc is prohibited except as allowed under the copynght la ws Disclaimer Compex Inc providesthis manual without warranty of any kind expressed orimplied including but not limited to the implied warranties of merchantability and fitness for a particular purpose Compex Inc may make improvements and or changes to the product and or specifications of the product described in this manual without pror notice Compex Inc will not be lia ble for any technicalinaccuraciesortypographical errorsfound in this guide Changesare penodically made to the information contained herei
4. Fig 2 7 WPA Access Point Access Point WDS Repeater WDS WPA PSK PSK Default WPA or WPA2 with Pre shared Key method Cipher Type TKIP Temporal Key Integrity Protocol which uses RC4 encryption algorithm AES Advanced Encryption Standard AES algorithm AUTO Default Automatically select between both algorithms Preshared Key This option is available when WPA or WPA2 with PSK selected The pre shared key is an alpha numeric password between 8 and 63 characters long WPA EAP LOCAL AP WIRELESS SECURITY Security WPA Authentication Cipher Type WPA Preshared Key pee Pri Radius Server IP laoo0 Sec Radius Server IP Oooo Authentication Port haa Accounting Port haa Radius Secret Key private MAC ACL Enabled Policy Allow Remove Fig 2 8 WPA EAP EAP WPA or WPA2 with EAP Extensible Authentication Protocol Firmware supported options for clients are EAP TLS EAP TTLS PEAP Cipher Type TKIP Temporal Key Integrity Protocol which uses RC4 encryption algorithm AKS Advanced Encryption Standard AES algorithm AUTO Default Automatically select between both algorithms Primary Radius Server IP Enter the Primary Radius Server IP address Secondary Radius Server IP Enter the Secondary Radius Server IP address Authentication Port Enter the Authentication Port number of the Radius Server Default is 1812 Accounting Port Enter the Accounting Port number of
5. WIRELESS HETARA WIRELESS HETWORK KEYS slal Status Page displays current status of the device and the statistical information Basic Wireless Page contains the controls for a wireless network configuration while covering basic wireless settings which define operating mode associating details and data security options Basic Network Page covers the configuration of network operating mode IP settings and network services 1 e DHCP Server Advanced Wireless Page settings for more advanced wireless features Advanced Network page settings for more advanced network features Services Page covers the configuration of system management services i e Ping Watchdog Auto Reboot SNMP NTP Telnet SSH System Log System Page contains controls for system maintenance routines administrator account management device customization and configuration backup Activation Keys Optional special add on functions you can purchased separately to activate in device How to save changes After made changes from each respective setup page click this button Next the prompt below appear You are asked to confirm if you want to save the change permanently to device flash Save configuration changes Save Discard Click Save will write all configuration changes to flash Click Discard will discard all changes made If not sure what changes were made earlier recommend to discard and reconfigure again Bas
6. enter starting port number here To if single port leave blank if port range enter enter last port number here Private IP Address Enter the local IP of the PC running the application Private Port From If single port enter same public port number or new port number If port range enter only the starting port number Public IP Address If the application 1s to access by any people on the internet then select the default All If only specific IP select Single and enter the IP address If only specific range of IP select Range and enter IP address range IP FORWARD ENTRIES Private IP Public IP 192 168 168 200 z06 12 100 50 Private IP Public IP Apply Setting IP Forwarding Default is disabled Check on box to enable For configuration refer to Appendix section Private IP enter the local IP address to receive forward packet by the public IP Public IP enter the public IP address when access will forward all packet to the local IP Click Add to add to list Bandwidth Control WAN BANDWIDTH CONTROL SETUP Upload Download Bandwidth Setting Download Total Rate kbit Upload Total Rate kbitj LAN BANDWIDTH CONTROL SETUP Name Committed Rate kbit Ceiling Rate kbit Rule type IP MAC IP MAC Address IO Y E Y E Y ENE Committed Rate kbit Ceiling Rate kbit Rule typelIP MAC IP MAC Address Remove Apply Setting Bandwidth Control Default is disabled Check on box to enable This control let us
7. Apply button is activated and system reboot cycle 1s completed Previous system configuration is deleted after Apply button is activated It is highly recommended to backup the system configuration before uploading the new configuration Use only configuration backups of the same type device configuration backed up from PowerStation2 suits only PowerStation2 but not LiteStation2 or LiteStationS Behavior may be unpredictable when mixing configurations from different type devices Device Maintenance DEVICE MAINTENANCE Reset to defaults The controls in this section are dedicated for the device maintenance routines rebooting resetting generating of the support information report Reboot activate Reboot control in order to initiate full reboot cycle of the device Reboot effect 1s the same as the hardware reboot which 1s similar to the power off power on cycle The system configuration is not modified after the reboot cycle completes Any non applied changes will be lost Reset to Defaults activate Reset to Defaults control in order to initiate reset the device to factory defaults routine Reset routine initiates system Reboot process similar to the power off power on cycle The running system configuration will be deleted and the default system configuration all the system settings with no exception will be set After the Reset to Defaults routine is completed the device system will return to the default IP configur
8. Password Verify New Password In this section you can modify the administrator password to protect your device from unauthorized configuration The default administrator s password should be changed on the very first system setup Administrator Username specifies the name of the system user Current Password administrator is required to enter a current password It is required for Password or Administrator Username change routine Default administrator login credentials e User Name admin e Password password New Password new password used for administrator authentication should be specified Verify Password new password should be re entered to verify its accuracy Click Change button to save the changes Enable Read Only Account READ ONLY ACCOUNT Enable Read Only Account M Read Only Username guest Password Read Only Username Password new password used for read only administrator authentication should be specified Configuration Management CONFIGURATION MANAGEMENT Backup Configuration Upload Configuration Browse Backup Configuration click Download button to export the current configuration to a file Upload Configuration click Browse button to navigate to and select the new configuration file or specify the full path to the configuration file location Activating the Upload button will transfer new configuration file to the system New configuration will be effective after the
9. automatic configuration C Automatically detect settings Use automatic configuration script Proxy server O Use a proxy server for your LAN These settings will not apply to dial up or YPN connections Pases Dr q j Ji ADWanceo i j j ass Droxvw server for local addresses Step 3 At the Address bar type in http 192 168 168 1 and press Enteron your keyboard Step 4 At the login prompt enterthe User Name and Password The default are User Name admin Password password Authentication Required u 4 username and password are being requested by http 1192 166 68 3 The site says Wireless N User Mame f Password Cancel It then opensthe device home page The Status page STATUS BASIC BASIC AOWANCED ADVANCED SERVICES SYSTEM ACTIVATION WIRELESS HETWORK WIRELESS HETWORK KEYS MAIN VERSION Uptime FIRMWARE VERSION 1 00 build 0905047 Host Name LOADER VERSION System Time 01 01 2000 00 00 42 LAN SETTING WAN SETTING H 00 80 46 a8 00 10 WAN MAC Mot Available MODE Not Available IP ADDRESS i IP ADDRESS Not Available GATEWAY IP ADDRESS GATEWAY IP ADDRESS Not Available Pri DNS IP Pri DNS IP Mot Available Sec DNS IP Sec DNS IP RADIO 1 Wireless Mode HAC g0 60 43 46 00 11 LOCAL AP SSID LOCAL AP MAC 00 80 43 48 00 11 Navigation Main Menu Bar BASIL EAS IL AOA LEO ee Le SERYILES SIS IE ALTA OE
10. device WLAN IP Address This IP addresses represents the LAN or WLAN interface which is connected to the external network according to the wireless operation mode described above This is the IP address can be used for the routing and the device management purposes The external network interface can be set for static IP or can be set to obtain an IP address from the DHCP server which should reside in the external network One of the IP assignment modes must be selected for the external network interface DHCP choose this option to obtain the IP address Gateway and DNS address dynamically from the external DHCP server PPPoE choose this option to obtain the IP address Gateway and DNS address dynamically from the external PPPoE server Static choose this option to assign the static IP settings for the external interface IP Address and Netmask settings should consist with the address space of the network segment where the device resides If the device IP settings and administrator PC which is connected to the device through wired or wireless IP settings will use different address space the device will become unreachable Netmask This is used to define the device IP classification for the chosen IP address range 255 255 255 0 is a typical netmask value for Class C networks which support IP address range 192 0 0 x to 223 255 255 x Class C network Netmask uses 24 bits to identify the network alternative notation 24 and 8 bits to
11. modes Primary Radius Server IP Enter the Primary Radius Server IP that Access Point will use to query server Secondary Radius Server IP Enter the Secondary Radius Server IP that Access Point will use to query the server Authentication Port Enter the Radius Server Authentication Port number to use Default is 1812 Accounting Port Rnter Radius server Accounting Port to use Default is 1813 Radius Secret Key Enter Radius server Secret Key that Access Point to use to authenticate itself with radius Server IEEE802 1x Key Rotation Enter time in seconds After time expired will initiate key rotation in uthentication process for higher security IEEE802 1x Key Length This is the key length of the initial seed key Select 64 or 128bit WEP LOCAL AP WIRELESS SECURITY Security YEI _ Authentication Type Open Shared Key Rey Type asci f Current Key WEP Key 1 CA WEP Key 1 Length WEP Key 2 O WEP Key 2 Length WEP Key 3 WEP Key 3 Length WEP Key 4 WEP key 4 Length MAC ACL Enabled NA Policy Allow A Fig 2 6 WEP The operation of the Keys is the same for ALL the modes Note Operating with WEP security will lower the performance significantly with 802 11n radio Not recommended for Access Point and Access Point WDS mode operation May use WEP ONLY when connecting with standard 11 and 54Mbps legacy 802 11a b g bands radio Authentication Type Open Authentication
12. of frame transmissions Because of sending smaller frames collisions are much less likely to occur However lower values of the Fragmentation Threshold will result lower throughput as well Minor or no modifications of the Fragmentation Threshold value is recommended while default setting of 2346 is optimum in most of the wireless network use cases Station Isolation This option allows packets only to be sent from the external network to the CPE and vice verse applicable for AP AP WDS mode only If the Client Isolation is enabled wireless stations connected to the same AP will not be able to interconnect on both layer 2 MAC and layer 3 IP level This is effective for the associated stations and WDS peers also Acknowledgement Timeout Device has an auto acknowledgement timeout algorithm which dynamically optimizes the frame acknowledgement timeout value without user intervention This is a critical feature required for stabilizing long distance outdoor links The user also has the ability to enter the value manually Distance specify the distance value in miles or kilometers using slider or enter the value manually The signal strength and throughput falls off with range Changing the distance value will change the ACK Timeout to the appropriate value of the distance ACK Timeout specify the ACK Timeout Every time the station receives the data frame it sends an ACK frame to the AP if transmission errors are absent If the station r
13. of transmitted and received packets that were lost or discarded for other reasons Appendix I Network This section provides more detailed explanation on the network operation modes in general The Network Page allows the administrator to setup bridge or routing functionality Device can operate in bridge or router mode The IP configuration as described below is required for device management purposes IP addresses can either be retrieved from a DHCP server or configured manually Use the Network menu to configure the IP settings Network Mode Selections Network Mode Specify the operating network mode for the device The mode depends on the network topology requirements Bridge operating mode is selected by default as it is widely used by the subscriber stations while connecting to Access Point or using WDS In this mode the device will act as a transparent bridge and will operate in Layer 2 There will be no network segmentation while broadcast domain will be the same Bridge mode will not block any broadcast or multicast traffic Additional Firewall settings can be configured for Layer 2 packet filtering and access control in Bridge mode Router operating mode can be configured in order to operate in Layer 3 to perform routing and enable network segmentation wireless clients will be on different IP subnet Router mode will block broadcasts while it is not transparent Device supports Multicast packet pass through in Route
14. take advantage higher output power available for the channel Rate Aggressiveness Allows user to reduce or increase transmit rate while still remain in Fully Auto Algorithm There are 2 scenarios that Rate Aggressiveness is useful Environment might be noisy at times Lower the throughput will ensure better stability Rate Aggressiveness allows device to reduce the transmit rate so range or power can be higher Choose a range of value from 3 2 1 Environment might be free of interference But the fully auto algorithm might give low throughput Increase Rate Aggressiveness will increase transmit rate in this case to get higher throughput Choose a range of value from 3 2 1 Station Parameters Settings BASIC WIRELESS SETTINGS Wireless Mode Station Clone MAC Remote AP ESSID Tr Test Site Survey Remote AP Lock to MAC W Enabled Remote AP Preferred MAC Country Code Wireless Profile Channel Spectrum Width 20 4 0M Data Rate Mbps Transmit Power Rate Aggressiveness Channel Scan List Enabled Fig 2 4 Basic Wireless Settings Station Station WDS This options below are only available in Station Station WDS and Repeater WDS modes unless otherwise stated Wireless Mode Station Remote AP ESSID This 1s the Service Set Identifier used by station to seek and connect to the access point of same the SSID identifier Site Survey Site Survey will search for the available wireless networks in
15. Client for Microsoft Networks y File and Print Sharing Description TCP IP is the protocol you use to connect to the Internet and wide area networks Cancel Step 4 7 TCP IP Properties 2 x Select the Specify an IP Bindings Advanced NetBIOS j DNS Configuration Gateway WINS Configuration 1P Address a ress radio Dutton n IP address can be automatically assigned to this computer If your beers brane not ory sai k panere ask t inistrat gt t iti Set the IP addres to es 192 168 168 X and subnet Obtain an IP address automatically mask to 255 255 255 0 where eo Specify an IP address Xcan be any numberfrom 2 t 254 IP Address 192 168 168 100 O Subnet Mask 255 255 255 0 Step 5 A IP Configuration l Piel x TO ve rify th a t th e IP a d d re SS ci Realtek ATL8139 Family PCI Fas y h as b een correc tly a Ssig ne d Adapter Address 00 80 48 EA A4 A2 IP Address 192168 168 160 to your PC go to the Start Subnet Mask 256 266 266 0 Default Gateway 192 168 168 16 menu select Run and enter OK the command winipcfg reason RenewAt Hon Select the Ethemet adapter from the drop down list and click OK PC isnow setup with proper IP addressto communicate with the access point For Windows XP 2000 Step 1 Go to your desktop nght click on the My Network Places icon and select Properties Step 2 Right click the network adapter a icon
16. D of the current active WLAN card running in device WLAN Local Remote AP MAC displays the MAC address of the WLAN card connected to it WLAN Security display the current active security mode Station Connection Status Info Click Mera at the bottom of the Status page to view client connection statistics RADIO 1 Wireless Mode Access Point WDS MAC 00 50 48 65 ad cf LOCAL AP SSID TY Test LOCAL AP MAC 00 80 48 65 ad cf Frequency 5 745 GHz Security WPAZ z CONNECTED STATIONS HAL ADDRESS SIGNAL STRENGTH Tx RATE Hx RATE CHANNEL WIDTH LOCAL AP STATISTICS Bytes Packets Errors Received PO Transmitted off LOCAL AP ERRORS Rx Invalid wip 0 Tx Excessive Retries Rx Invalid Ceypt O Missed Beacons la Rx Invalid Frags 0 Other Errors E Select VAP gt WLAN Connected Status MAC Address displays the MAC address of the current active WLAN card Signal Strength displays the received wireless signal level of opposite connected device TX Rate and RX Rate displays the current 802 11 data transmission TX and data reception RX rate while operating in Station mode Typically the higher the signal the higher the data rate and consequently the higher the data throughput Channel Width 20MHz is the standard channel spectrum width selected by default 40MHz the widest channel spectrum width required to connect to an 802 1la network which supports Static Turbo fea
17. Default No authentication Recommend to use this standard option over shared authentication Shared Authentication May not be compatible with all Access Point Not recommended Key Type HEX or ASCII option specifies the character format for the WEP key if WEP security method is used Current Key Specify the Index of the WEP Key used 4 different WEP keys can be configured at the same time but only one is used WEP Key WEP encryption key for the wireless traffic encryption and decryption should be specified if WEP security method is used WEP Key Length 64 bit selected by default or 128 bit WEP Key length should be selected if WEP security method is used The 128 bit option will provide higher level of security For 64 bit specify WEP key as 5 HEX 0 9 A F or a f pairs e g 00112233AA or 5 ASCH characters For 128 bit specify WEP key as 13 HEX 0 9 A F or a f pairs e g 00112233445566778899A ABBCC or 13 ASCII characters Virtual Access Point VAP Virtual AP VAP implements mSSID Multi SSID whereby a single wireless card can be setup with up to 3 virtual SSID of BSSID connections Each VAP can be set with different security authentication mode BASIC WIRELESS SETTINGS AP ESSID Mirmo Series VAP 0 Hide SSID WIRELESS SECURITY Security Apply Settings Fig 2 11 Virtual AP Only Available in Access Point Access Point WDS Mode All VAPs are created from the same radio they all sha
18. Dynamic IP Address mode DHCP and is unable to obtain an IP address from a valid DHCP server it will fall back to the static IP address listed here In case the IP settings of the devices are unknown they can be access with the help of the UConfig utility The UConfig Utility should be started on the administrator PC which resides on the same network segment as the device Device will return to the default IP configuration 192 168 168 1 255 255 255 0 if the Reset to defaults routine 1s initiated Spanning Tree Protocol Multiple interconnected bridges create larger networks using the IEEE 802 1d Spanning Tree Protocol STP which is used for finding the shortest path within network and to eliminate loops from the topology If the STP is turned on the Bridge device will communicate with other network devices by sending and receiving Bridge Protocol Data Units BPDU STP should be turned off selected by default when the device is the only bridge on the LAN or when there are no loops in the topology as there is no sense for the bridge to participate in the Spanning Tree Protocol in this case Bridge mode Firewall Configuration Settings Firewall functionality on bridge interface can be enabled using the Enable Firewall option Bridge Firewall rules can be configured enabled or disabled while using Firewall configuration window which is opened with the Configure button Firewall entries can be specified by using the following crite
19. Forwarding Enabled IP Forwarding F Enabled BANDWIDTH CONTROL ROUTING INFORMATION PROTOCOL RIP SETUP Routing Info Protocol Enabled Routing Info Protocol Yersion RIPw1 x FIREWALL SETUP Firewall Enabled FILTERING SETUP Packet Filtering Enabled URL Filtering Enabled Multicasting Filtering 7 Enabled DNS REDIRECTION SETUP DNS Redirection Y Enabled DYNAMIC DNS SETUP Dynamic DNS FF Enabled Domain Name Add DNS RELAY SETUP DNS Relay Enabled Primary DNS IP Address 203 120 90 60 Secondary DNS IP Address 203 120 90 40 UPNP SETUP UPnP V Enabled Apply Settings ST TEM Spanning Tree Setup SPANNING TREE PROTOCOL STP SETUP Spanning Tree Protocol Enabled Root Priority sz768 Dto 65536 Root Hello Time ge 1 to 10 Root Forward Delay 4 to 30 Root Maximum Age 6 to 40 Spanning Tree Protocol Default is disabled Check on box to enable Root Priority Default value is 32768 Smaller value has higher priority Root Hello Time Default time is 2 seconds Root Forward Delay Default is 15 seconds Root Maximum Age Default is 20 seconds Changing to lower time can caused high overheads to the network NAT Setup MAT SETUP WAT Enabled DMZ F Enabled DM Private IP 0 0 0 0 Port Forwarding Enabled Configure IP Forwarding C Enabled Configure NAT Enabled when in Router mode Disabled when in Bridg
20. N User Mame Password Cancel Step 7 ltthen opensthe device home page The Status page STATUS BASIC BASIC ADVANCED ADVANCED SERVICES SYSTEM ACTIVATION WIRELESS NETWORK WIRELESS NETWORK KEYS Refresh MAIN VERSION uptime FIRMWARE VERSION Host Name LOADER VERSION system Time LAN SETTING WAN SETTING WAN MAC Not Available MODE Not Available IP ADDRESS IF ADDRESS Mot Available GATEWAY P ADDRESS GATEWAY IP ADDRESS Not Available Pri DNS IP Pri DNS IP Mot Available Sec ONS IP Sec DNS IP Hot Available RADIO 1 Wireless Mode MAC 00 80 48 48 00 11 LOCAL AP SSID LOCAL AP MAC 00 80 48 48 00 11 Frequency 5 66 GHz Security Access with a Web Browser Step 1 Launch your Web browser e g MS Inte met Explorer FireFox Netscape etc For MSIE underthe Toolstab select Intemet Options Yahoo Singapore Microsoft Internet Explorer File Edit View Favorites Gm Help Mail and News Q e Y x Synchronize Windows Update _ Address hitp sa yahoo com Windows Messenger Yahoo Messenger Show Related Links PRAGA Step 2 Open the Connections tab and in the LAN Settings section disable all the option boxes Click on the OK button to update the changes Local Area Network LAN Settings Automatic configuration Automatic configuration may override manual settings To ensure the use of manual settings disable
21. PT upp 0 0 0 0 136 0 0 0 0 136 6 M Block 137 ACCEPT upp 0 0 0 0 137 0 0 0 0 137 7 M Block 138 ACCEPT upp 0 0 0 0 138 0 0 0 0 138 8 M Block 139 ACCEPT upp 0 0 0 0 139 0 0 0 0 139 9 M Internet Printer share ACCEPT TCP el 206 123 27 99 631 192 168 168 12 631 wD accermeiiee a app accermefice HA 2 00 Jacceralire mp E TT 7 i3 0 a a ay id a OL Jaccerialiree BM EA AT 7 15 0 ACCEPT TCP zll 16 0 ACCEPT l Tce zll TAT accePT l Tce zll 18 1 accerT Tce zll 19 0 accerT Tce zll 20 7 ACCEPT Tce zll Apply Cancel Firewall Setup Default is disabled Check on box to enable For configuration refer to Appendix section Comment enter a brief name for the service Policy select Accept or Deny for the apply rule IP Type select ICMP TCP and UDP packet type to check Source IP Mask enter the source IP address and Netmask Is the source IP of the packet specified within the packet header usually it is the IP of the host system which sends the packets Src Port enter the source port number in rule check Is the source port of the TCP UDP packet specified within the packet header usually it is the port of the host system application which sends the packets Destination IP Mask enter the destination IP and Netmask Is the Destination IP of the packet specified within the packet header
22. Static ON Power 1s being supplied to the device Off Power 1s not being supplied to the device DIAGNOSTC Flashing During power up Goes OFF after device 1s up LED 1 low higher low lower high high LED10 LED20 LED30 LED40 SIGNAL STRENGTH LEVEL JH DY INDICATOR O O O Steady ON Link is established between device and the network OFF Ethernet port is not connected ETHERNET 10 100Mbps Ethernet port and on PoE power Input range 12V to 24V DC SURGE Connect ground wire to earth point ARRESTOR To reboot press once and release To reset password press and hold button for 5 seconds and RESET BUTTON release To restore factory default settings press and hold button for 8 seconds and release 10 ANTENNA Build in Dual Polarization high gain antenna Install the Hardware This section will show you how to install the hardware of the access point Antenna Alignment The antenna alignment of the access point must first be considered to ensure that the signal is strong Installation Direction Afterconsidering the antenna alignment the direction in which the access point is facing must be considered to ensure that the signal is actually being directed to the receiving end Setting Up Lastly after making these considerations and confirming the final position and facing direction of the access point follow the instructions to physically set up and complete the installation of the access point Antenna Ali
23. Switch wirelessly y A 7 o Pa F d Broadcasting r Tover E Station Router or Wireless Routing Client AP Router connection example r Anternet Ethemet is use to connectto the broadband Wireless is the local network LAN sharing the broadband connection Cablo ADSL modem 2 router Broadband Intemet Access Type Static IP Address Use Static IP Address you have subscribed a fixed IP or range IP addresses from your ISP Dynamic IP Address With Dynamic IP Address the device automatically request IP address from modem or ISP PPP over Ethemet PPPoE When using ADSL services provided by your ISP support PPPoE connection Repeater WDS Mode Repeater WDS Mode to mainly to extend the wireless range and coverage of the wireless network allowing access and communications over places generally diffic ult for wireless c lientsto connect to the network In Repeater mode the access point acts as a relay for network signals on the network by regenerating the signals it receives and retra nsmitting them to main network infra structure Detailed information on the Repeater mode is available in the Repeater Setup section Note Repeater WDS requires the access pointto be setup in RootAP or Access Point WDS mode to work ork N AP Act as RootaP Enabled gl _ 1st Repeater AP Device Panel Views and Descriptions Features Status and Indications POWER LED
24. and select Properties 8 ee Status Repair LAN or High Speed Internet Bridge Connections Create Shortcut Rename Properties Step 3 Highlight Intemet Protocol TC P IP and click on the General Authentication Advanced a Connect using Properties button 88 Realtek ATLS139 Family PCI F This connection uses the following items NWLink NetBIOS Aj 4 Local Area Connection Properties j Install Description Transmission Control Protocol Internet Protocol The default wide area network protocol that provides communication across diverse interconnected networks C Show icon in notification area when connected Notify me when this connection has limited or no connectivity Step 4 Select the Use the following IP Internet Protocol TCPAP Properties address radio button Gene You can get IP settings assigned automatically if pour network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings E tn i a d d SoS to Obtain an IP address automatically 192 168 168 X a n d su b n e t ma sk Use the following IP address IP address 192 168 168 160 to 255 255 255 0 where X can io 255 255 255 0 be any number from 2 to 254 Use the following DNS server addresses Preferred DNS server Alternate DNS server od Step 5 Click on the OK b
25. ation 192 168 168 1 255 255 255 0 and will start operating in Station Bridge mode It is highly recommended to backup the system configuration before the Reset to Defaults is initiated Status Page STATUS BASTE BASIC ADVANCED ADVANCED SERVICES SYSTEM WIRELESS HETWWORK WIRELESS HE TWORK COMPEX VERSION Uptime O Days 02 15 51 FIRMWARE VERSION 2 00 build 090713 Host Name LOADER VERSION 2 56 build 0612 _ Sy sbem Time 01 01 2000 02 15 52 LAN SETTING WAN SETTING LAN MAC 00 80 48 65 ad ce WAN MAC Not Available MODE static ODE Not Available IF ADDRESS 192 168 168 6 IP ADDRESS Not Avardable GATEWAY IF ADDRESS GATEWAY IP ADDRESS Not Available Pros IP 10 10 10 10 Pri D0mSs IP Hot Available Sec DNS IP 20 20 20 20 Sec DNS IP Not Available RADIO 1 o Wireless Mode MAC LOCAL AP SSID LOCAL AP MAC Frequency Security The Status Page displays a summary of link status information current values of basic configuration settings depending on operating mode network settings and traffic statistics of all the interfaces Status Reporting Main Uptime displays device up time since boot up The time is expressed in days hours minutes and seconds Host Name displays the assigned device host name ID System Time display device current date and time Accurate system date and time is retrieved from the internet services using NTP Network Time Protoc
26. ccess Setup 55H SERVER Enable 55H Server Server Port Enable SSH Server Default is disabled Check on box to enable Server Port Default is 22 Enter new preferred port number System Log Setup SYSTEM LOG Enable System Log T Logging IPF Domain Name 192 168 168 1 Logging Fort 514 Enable System Logging Default is disabled Check on box to enable Logging IP Domain Name Enter destination IP address of device to receive log Logging Port Default is 514 Enter the new preferred port number System Tab The System Page contains Administrative options This page enables administrator to customize reboot the device set 1t to factory defaults upload a new firmware backup or update the configuration and configure administrator s credentials Firmware Upgrade FIRMWARE UPGRADE Firmware Yersion 2 01 build 090727 Browse Upgrade Use this section to find out current software version and update the device with the new firmware The device firmware update is compatible with all configuration settings System configurations are preserved while the device is updated with a new firmware version Firmware version displays the version of the current firmware of the device system Upgrade button opens the Firmware Upload window if activated Current Firmware displays the version of the device firmware which is currently operating Firmware File activate Browse button to navigate to and sel
27. ce of the network segment where device resides If the device IP settings and administrator PC which is connected to the device in wired or wireless way IP settings will use different address space the device will become unreachable Netmask This is a value which when expanded into binary provides a mapping to define which portions of IP address groups can be classified as host devices and network devices Netmask defines the address space of the network segment where device resides 255 255 255 0 or 24 Netmask is commonly used among many C Class IP networks Gateway IP Typically this is the IP address of the host router which provides the point of connection to the internet This can be a DSL modem Cable modem or a WISP gateway router Device will direct the packets of data to the gateway if the destination host is not within the local network Gateway IP address should be from same address space on same network segment as the device Primary Secondary DNS IP The Domain Name System DNS is an internet phone book which translates domain names to IP addresses These fields identify the server IP addresses of where the device looks for the translation source Primary DNS server IP address should be specified for the device management purposes Secondary DNS server IP address is optional It is used as the fail over in case the primary DNS server will become unresponsive DHCP Fallback IP In case the Bridge is placed in
28. ckbox Tick Untick the checkbox to enable disable the radio Basic Wireless Settings All the basic wireless settings can be configured in this page Operators can change the ESSID regulatory country code wireless profile channel spectrum width frequency of interest data rates transmit power and rate aggressiveness Wireless Mode There are 5 modes available BASIC WIRELESS SETTINGS Wireless Mode Station Local AP ESSID Station wos Access Point Country Code PEE No Country Set Repeater wos ee Wireless Profile Channel Spectrum Width 20 4014 Channel Frequency Auto Data Rate Mbps Auto Transmit Power 117 idBm Access Point This mode can be connected to Station mode and then forwards all the traffic to the network devices connected to the Ethernet devices of the Station Access Point WDS This mode can be connected to Station WDS mode Using WDS protocol it allows a client or station device to bridge wireless traffic transparently Station This is a client mode that can be connected to the Access Point mode It is used to bridge the wireless connection to an Access Point It forwards all the traffic to from the network devices to the Ethernet interface This mode translates all the packets that pass through device to its own MAC address thus resulting in a lack of transparency Station WDS WDS is the acronym of Wireless Distribution System It can be connected to the Access Poin
29. d This device must accept any interference received including interference that may cause undesired operation RF Exposure waming The equipment complies with FCC RF exposure limits set forth for an uncontrolled environment The equipment must not be co located or operating in conjunction with any other antenna or transmitter IC ES 003 Statement This Class B digital apparatus complies with Canadian ICES 003 Declaration of Conformity Compex Inc declaresthe following Product Name Wireless Access Point with PoE Model No MMJ 543 conformsto the following Product Standards This device complies with the Electromagnetic Compatibility Directive 89 336 EEC issued by the Commission of the European Community Compliance with this directive implies conformity to the following European Norms in brackets are the equivalent intemational standards Electomagnetc Interference Conduction and Radiation EN 55022 CISPR 22 Electromagnetic Immunity EN 55024 IEC 61000 4 2 3 4 5 6 8 11 Low Voltage Directive EN 60 950 1992 A1 1993 A2 1993 A3 1995 A4 199644 11 1997 Therefore this product is in conformity with the following regional standards FCC Class B following the provisions of FCC Part 15 directive CE Mark following the provisons of the EC directive Compex Inc also declares that The wireless card in this product complies with the R amp TTE Directive 1999 5 EC issued by the Commission of the European Community Co
30. d be filtered Source IP mask is the source IP of the packet specified within the packet header usually it is the IP of the host system which sends the packets Source Port is the source port of the TCP UDP packet specified within the packet header usually it is the port of the host system application which sends the packets Destination IP mask is the destination IP of the packet specified within the packet header usually it is the IP of the system which the packet is addressed to Destination Port is the destination port of the TCP UDP packet specified within the packet header usually it is the port of the host system application which the packet is addressed to Comments is the informal field for the comment of the particular firewall entry Few words about the particular firewall entry purpose are saved there usually On flag enables or disables the effect of the particular firewall entry All the added firewall entries are saved in system configuration file however only the enabled firewall entries will be active during device operation New entries in Firewall can be saved by activating Apply Setting and Save Changes button or discarded by activating Cancel button in the Firewall configuration window All the active firewall entries are stored in the FIREWALL chain of the iptables filter table while the device is operating in Router mode PPPoE Point to Point Protocol over Ethernet PPPoE is a virtual private and secu
31. dedicated for more technically advanced users who have a sufficient knowledge about wireless LAN technology These settings should not be changed unless you know what effect the changes will have on your device Advanced Wireless Setting The 802 11 data rates include 1 2 5 5 11 Mbps for IEEE 802 11b mode and 6 9 12 18 24 36 48 54Mbps for IEEE 802 11a g mode The Rate Algorithm has a critical impact on performance in outdoor links as generally lower data rates are more immune to noise while higher rates are less immune but are capable of higher throughput Rate Aggressiveness Allows user to reduce or increase transmit rate while still remain in Fully Auto Algorithm There are 2 scenarios that Rate Aggressiveness is useful Environment might be noisy at times Lower the throughput will ensure better stability Rate Aggressiveness allows device to reduce the transmit rate so range or power can be higher Choose a range of value from 3 2 1 Environment might be free of interference But the fully auto algorithm might give low throughput Increase Rate Aggressiveness will increase transmit rate in this case to get higher throughput Choose a range of value from 3 2 1 Noise Immunity option increases the robustness of the device to operate in the presence of noise disturbance which is usually generated by external 802 11 traffic sources channel hopping signals and other interferers RTS Threshold determines the packet si
32. e such as to a switch orto the PC you will use to configure the access point PoE power input Passive PoE range 12V 24V DC Network Connect the power adapter in the PoE kit to the main electncal supply and the power plug into the socket of the injector Now tum on your power supply Notice that the POWER LED has lighted up This indicates that the access point is receiving power through the PoE Injector and that connection between the access point and your network has been established Note Please use the power adapter in the PoE kit Using a power adapter with a different voltage rating will damage this product Main Electrical Suppl Network al A AS Configure the IP Address After setting up the hardware you need to assign an IP addressto yourPC so that it is in the same subnet asthe access point For Windows 95 98 98SE ME NT Step 1 From your desktop nght click the Network Neighborhood icon and select Properties Step 2 Select the network adapter that you are using then nght click and select Properties Step 3 Network 24x Hig h lig ht TC P IPand click on Configuration Identification Access Control The following network components are installed th e Prope ries b utto n El Client for Microsoft Networks if Realtek RTL8139 Family PCI Fast Ethernet Controller ie File and printer sharing for Microsoft Networks Add Remove Properties Primary Network Logon
33. e Channel Spectrum Width to 20M Channel Frequency This is frequency selection you can set for device to operate on The frequency range available depends on the country domain you select in Country Code For 5GHz frequency range some have DFS characteristics earmarked by regulations Selecting one of these frequencies for operation may affect and delay of 2 minutes or more possibly up to 10 minutes in some situations for device to attempt to establish a connection Auto When checked during startup device automatically select the least interfering channels or frequency for the operation Data Rate Data Rates consist of both the legacy rates and the MCS Modulation Coding Scheme Only for 802 11n rates 6 54Mbps are Legacy Rates MCS0O to MCS7 are 802 11n rates which uses only 1 stream MCS8 to MCS15 are 802 11n rates which uses 2 streams Auto The data rate selected will follow an advanced rate algorithm that takes into condition the amount of errors at the data rate and fine tune to the best data rate it can use Transmit Power The maximum transmit power displayed is determined by the country code and the maximum transmit power of the miniPCI that is being used Note on changing channels When the operator changes the channels and if this new frequency have higher power output permitted by regulation the power previously selected low power level will remains unchanged You need to readjust the power level to in order to
34. e mode DMZ Default 1s disabled Check on box to enable DMZ IP Address Input IP address of the local PC to receive the DMZ packets Port Forwarding Default is disabled Check on box to enable For configuration refer to Appendix section Known Server Server Type Private IP Address Public IP From Adding an entry from Known Server Add entry from this box and select an application the list Server Type click to select the application you want to add Private IP Address Enter the local IP of the PC running the application Public IP Address If the application to for any people on the internet to access then select the default All If only specific IP select Single and enter the IP address If only specific range of IP select Range and enter IP address range Custom Server Server Type Protocol Public Port From web server Te E single so Private IP Address Private Port From Public 1P From o o e Adding an entry from Custom Server Entry from Custom Server box lets you enter the other port number service for an application and new applications Custom Server also lets you enter a different public and private port service Server Type Enter a brief name for the application This info helps you track the application for that port number you set Protocol Select TCP or UDP the application use Public Port select Single or Range of ports application use From if single port enter this box only If port range
35. eceives no ACK frame from the AP within set timeout it re sends the frame The performance drops because of the too many data frames are re send thus if the timeout is set too short or too long it will result poor connection and throughput performance Changing the ACK Timeout value will change the Distance to the appropriate distance value for the ACK Timeout Auto Adjust control and enable the ACK Timeout Self Configuration feature If enabled ACK Timeout value will be derived dynamically using an algorithm similar to the Conservative Rate Algorithm described above It is not recommended to use Auto Adjust option for long range links if the signal level is low or the high level of interference is present If two or more stations are located at the considerably different distance from the Access Point the highest ACK Timeout for the farthest station should be set at the AP side It is not recommended to use Auto Adjust option for Point to Multipoint connections as it will not warrant highest network performance in all the use cases Signal Strength LED Settings LED Thresholds Configuration The LED s for signal strength on the device can be made to light on when received signal levels reach the values defined in the following fields This allows a technician to easily deploy a CPE without logging into the unit 1 e for antenna alignment operation Signal LED Thresholds specify the marginal value of Signal Strength dBm which will sw
36. ect the new firmware file The full path to the new firmware file location can be specified there New firmware file is transferred to the system after Upload button is activated Close this window button cancels the new firmware upload process if activated Upgrade button should be activated in order to proceed with firmware upgrade routine new firmware image should be uploaded into the system first Please be patient as the firmware upgrade routine can take 3 7 minutes The based device will be un accessible until the firmware upgrade routine is completed Do not switch off do not reboot and do not disconnect the device from the power supply during the firmware upgrade process as these actions will damage the device It is highly recommended to backup the system configuration and the Support Info file before uploading the new configuration Close this window button closes the firmware upgrade window if activated This action will not cancel the firmware upgrade process Host Name HOST MAME Host Name AP Host Name is the system wide device identifier It is reported by SNMP Agent to authorized management stations Host Name will be represented in popular Router Operating Systems registration screens and discovery tools Host Name specifies the system identity Change button saves the Host Name if activated Administrative and Read only Account ADMINISTRATIVE ACCOUNT Administrator Username Current Password Mew
37. er set a max limited bandwidth to router This function let use share one high speed broadband line with several routers each limited to a maximum limited by its bandwidth control Download Total Rate kbit enter the max bandwidth limit for downloading on this router Upload Total Rate kbit enter the max bandwidth limit for uploading on this router Upload Download limit can also be controlled for each user by IP or MAC address Name enter short name of user Name track the user to rule only Committed Rate kbit enter the average rate for user Ceiling Rate kbit enter the peak rate allowed for user Rule Type select By IP or By MAC IP MAC Address enter the local IP address if rule type is By IP enter the local PC ethernet MAC address if rule type is By MAC ROUTING INFORMATION PROTOCOL RIP SETUP Routing Info Protocol Enabled Routing Info Protocol Yersion RIFWi l Routing Information Protocol Default is disabled Check on box to enable For configuration refer to Appendix section Router Info Protocol version select RIPv1 or RIPv2 Firewall Setup Firewall On Comment Polic IP Type Source IP Mask Src Port Destination IP Mask Des Port 1 M Web server ACCEPT s tcp 0 0 0 0 lso 192 168 168 10 81 2 M Ftp server accert tcr 0 0 0 0 21 192 168 168 11 21 3 M Block 445 port oeny l Tcr 0 0 0 0 445 0 0 0 0 445 4 M Block 135 oeny I upp ff0 0 0 0 135 0 0 0 0 135 5 M Block 136 ACCE
38. gnment The physical environment of the antenna must be examined when aligning the antenna Obstructions available mounting locations and other factors must be considered Many objects such as forests buildings and hills can obstruct the antenna reducing the signal strength The antenna can be installed at a height above such obstructions and aligned so that antennas are directed at each other by taking into account the honzontal angle and the vertical angle of the antenna signal When the antenna is at the optimum alignment there is less possibility of encountenng interference and of causing interference to anyone else and strong signal strength can be maintained NOTE When the antennas are at the same height it is quite simple to align the antennas However when the antennas are at different heights greater care hasto be taken to ensure that the antennas are propeny aligned Installation Direction Front Towards Desired Signal Direction The directional antenna radiates the signal towards the front of the unit The unit should be installed ina position whereby the front of the unit faces the direction you wish to send the signal to Therefore the direction you wish to send the signal to hasto be considered before going on to the next step of starting to set up the access point O00 Front Towards Desired Signal Direction Setup Requirements e CAT5 5e Networking Cable e At least 1 c
39. he ebtables filter table while the device is operating in Bridge mode Click Apply Setting and Save Changes button to save the changes made in the Network page Appendix II Wireless with Router Mode This section provides more details on wireless with router function The role of the LAN and WLAN interface will change accordingly to the Wireless Mode while the device is operating in Router mode e Wireless interface and all the wireless clients connected are considered asthe intemal LAN and the Ethemet interface is dedicated forthe connection to the extemal network while the device is operating in AP AP WDS wireless mode e Wireless interface and all the wireless clients connected is considered as the extemal network and the all the network devices on LAN side as well as the Ethemet interface itself isconsidered asthe intemal network while the device isoperating in Station Station WDS mode Wireless wired clients are routed from the internal network to the external one by default Network Address Translation NAT functionality works the same way AP Router mode Network Settings IP Address This IP addresses represents the LAN or WLAN interface which is connected to the internal network according to the wireless operation mode described above IP will be used for routing in internal network it will be the Gateway IP for all the devices connected on the internal network IP address also will be used for the management purpose of the
40. ic Network Tab BASIC BASIC ADWANCED WIRELESS NETWORK WIRELESS Click BASIC NETWORK from the menu bar to open the page as show below Apply Settings NETRORE INFORMATION Network Mode LOCAL AREA NETWORE LAN Mode O DHCP Client amp Static IP Address 192 168 68 3 etmask 255 255 2550 Gateway IP Primary DNS IP O Secondary DNS IP IA DHCP Mode NONE DHCP Server DHCP Relay DHCP Start IP Address DHCP End IP Address Ee Metmask A DHCP Lease Time 3500 seconds DHCP Server Relay 1P D DHCP Gateway Relay IP Enable DNS Proxy DL Network Modes Bridging and Routing Network Mode Select between Bridge default and Router mode LAN Setup LAN Mode Static default lets you enter a specific IP address for the device Default IP address is 192 168 168 1 DHCP Client when set let device learn the IP address automatically from the network Netmask Let you set the class for the IP address set Default class C and value is 255 255 255 0 Gateway optional Enter the gateway IP address of the network the device 1s connected Primary DNS IP optional Enter the primary DNS IP address nearest to the gateway router Secondary DNS IP optional Enter the secondary DNS IP address nearest to the gateway router DHCP Mode None function disabled DHCP Server Check to enable Device act IP address distribution server automatically issue IP address and other network
41. identity the host Gateway IP This is the IP address of the host router which resides on the external network and provides the point of connection to the next hop towards the internet This can be a DSL modem Cable modem or a WISP gateway router The device will direct all the packets to the gateway 1f the destination host is not within the local network Gateway IP address should be from the same address space on the same network segment as the device s external network interface Wireless interface in the Station case and the LAN interface in the AP case Primary Secondary DNS IP The Domain Name System DNS is an internet phone book which translates domain names to IP addresses These fields identify the server IP addresses where the DNS requests are forwarded by the device Primary DNS server IP is mandatory It is used by the DNS Proxy and for the device management purpose Secondary DNS server IP address is optional It is used as the fail over in case the primary DNS server will become unresponsive Enable NAT Network Address Translation NAT enables packets to be sent from the wired network LAN to the wireless interface IP address and then sub routed to other client devices residing on it s local network while the device is operating in AP AP WDS wireless mode and in the contrariwise direction in Station Station WDS mode NAT is implemented using the masquerade type firewall rules NAT firewall entries are stored in the i
42. information to the DHCP Client request them DHCP Relay check to enable Enter the IP address of the remote DHCP server where the DHCP Client request will be relayed to DHCP Start IP Address Enter the starting IP address to be issue DHCP End IP Address Enter the last IP address the server will issue Netmask Let you set the IP class for the IP address range set for the start and end address Note 1f device 1s also the router then IP class must be same as device IP class DHCP Lease Time default is 3600 seconds or 1hour Enter the new lease time in seconds DHCP Server Relay IP Enter the IP address of the remote DHCP server where the DHCP Client request will be relay to get the IP address DHCP Gateway Relay IP Enter the IP address of the remote gateway where the DHCP Client request will be relay to get the gateway IP address Enable DNS Proxy Check to enable function Device router operation will act as proxy to resolve all DNS requests Basic Wireless Tab Under the tab there is the selection of 4 radios STATUS BASIC BASIC ADVANCED WIRELESS NETDAYORK WIRELESS RADIO 1 RADIO 2 RADIO 3 RADIO 4 Fig 2 1 Basic Wireless Tab Currently device support only one 802 11n radio card Select RADIO 1 to configure Basic Wireless Tab contains all the wireless setup which is necessary for the operator to setup the wireless part of the link Enable the radio Y Enable Radio 1 Fig 2 2 Enable Radio Che
43. int to Point amp Point to MultiPoint Support Point to Point and Point to MultiPoint communication between different buildings enables you to bridge wireless clients that are kilometres apart while unifying the networks Virtual AP Multiple SSID Virtual AP implements mSSID Multi SSID This allows a single wireless card to be set up with multiple virtual AP connections with different SSIDs or BSSID Basic Service Set Identifier and security modes Highly Secured Wireless Network The access point supports the highest available wireless security standard EEE802 111 compliant The access point also supports IEEE 802 1x for secure and centralized user based authentication Wireless clients are thus required to authenticate through highly secure methods like EAP TLS EAP TTLS and EAP PEAP in order to obtain access to the network uConfig Utility The exclusive uConfig utility allows users to access the user friendly Web configuration interface of the access point without having to change the TCP IP setup of the workstation HTTPS The access point supports HTTPS SSL in addition to the standard HTTP HTIPS SSL features additional authentication and encryption for secure communication Telnet Telnet allows a computer to remotely connect to the access point CU Command line Interface for control and monitoring SSH SSH Secure Shell Host establishes a secure host connection to the access point CLI for control and mon
44. itch on LEDs indicating signal strength LED 1 Red will switch on if the Signal Strength reaches the value set in an entry field next to it LED 2 Yellow will switch on if the Signal Strength reaches the value set in an entry field next to it LED 3 Green will switch on if the Signal Strength reaches the value set in an entry field next to it LED 4 Green will switch on if the Signal Strength reaches the value set in an entry field next to it Configuration example if the Signal Strength fluctuates around RSSI 15 30 the LED Thresholds can be adjusted to the RSSI values 15 20 25 30 Appendix IV Services This section provides more details on the system management services Ping WatchDog The ping watchdog sets the device to continuously ping a user defined IP address it can be the internet gateway for example If it is unable to ping under the user defined constraints the device will automatically reboot This option creates a kind of fail proof mechanism Ping Watchdog is dedicated for continuous monitoring of the particular connection to remote host using the Ping tool The Ping works by sending ICMP echo request packets to the target host and listening for ICMP echo response replies If the defined number of replies is not received the tool reboots the device Enable Ping Watchdog control will enable Ping Watchdog Tool IP Address To Ping enter the target host IP address to monitor Ping Interval
45. itoring Operation Modes and Connection Examples Access Point and Access Point WDS Mode The Access Point Mode is the default mode of the device lt enables the bndging of wireless clients to wired network infrastructure and enables transparent accessand communication with each other The illustration below shows a typical resources sharing application example using this device The wireless users are able to access the file server connected to the switch through the access point in Access Point Mode internet Cable ADSL Z Access Poin f File server Access Point WDS Mode This is mode is generally use for point to point or point to multi point connection It is mainly use with Station WDS to build the point and multi point connections Station Mode In Saation mode the device actsasa wireless client When connected to an access point it creates a network link between the Ethemet network connected at this client device and the wireless Ethemet network connected at the access point In this example the workgroup PCson the ethemet network connected to the Station device can access the pnnter across the wireless connection to the access point where the printer is connected _Ant rnet Terminal Cablo ADSL J 4 modem lt gt Switch routor P i Stationmode Printer Access Point Bridge Workgroup of PCs Station WDS Mode Station WDS mode is similarto Station m
46. ked this will disable advertising the SSID of the access point in broadcast messages to wireless stations This option is only available in Access Point Access Point WDS and Repeater WDS mode only Country Code Different countries have different power levels and also frequency selections To ensure device operation follows regulatory compliance rules the operator should make sure that correct country code where device will be used 1s selected The channel list output power limits IEEE 802 11 and Channel Spectrum Width modes will be tuned according to the regulations of the selected country No Country Set Option when checked only the frequency range are available 11n 2 4GHz is 2412 2462MHz 11n 5GHz is 5180 5320MHz and 5745 5825MHz Wireless Profile NA is 11n 5GHz band and represents a mixed of 802 11n and 802 11a mode NG is 11n 2 4GHz band and represents a mixed of 802 11n 802 11g and 802 11b mode Channel Spectrum Width 20M represents the data transmitted at a bandwidth of 20MHz 20 40MH_z represents the data transmitted at either 20MHz or 40MHz In very noisy environment it automatically fall back to 20MHz to be more resilient to the interference In situation when auto fall back did not happened manually changing channel spectrum width to 20MHz will to help reduce interference on the link and improve performance Note 40MHz bandwidth is non standard for 802 11n g mode operation If you experience unstable performance chang
47. matically adjusts the signal noise level for best performance In low noise environment it is recommended to turn off this function Signal Strength Indicator RSSI Signal Strength Indicator R551 LED1 in LED 120 LED3 30 LED4 40 The default values are LED1 Red 10 LED2 Yellow 20 LED3 Green 40 Each LEDs when turn on indicates the RSSI signal strength has hit over the value e g When LED1 and LED light up it indicate the RSSI is greater than 20 When all 4 LEDs light up it indicate RSSI is greater than 40 For long distant installation when signal strength expected to be about 20 30 the values can be adjusted to display over this new range e g the LEDs values can be adjusted as follows LED 1 RSSI value 7 LED2 RSSI value 15 LED3 RSSI value 22 LED4 RSSI value 27 Advanced Network Tab Click Advanced Network tab from menu to open the page below Note This tab will not open when in device is in Bridge node To open page first enabled Router mode in Basic Network STATUS BASIC BASIC ADVANCED ADVANCED SERVICES WIRELESS NETWORK WIRELESS NETVVORK Appl Y Settings SPANNING TREE PROTOCOL STP SETUP Spanning Tree Protocol Enabled Root Priority 32768 Range Dto 65536 Root Hello Time E Range 1 to 10 Root Forward Delay Range 4 to 30 Root Maximum Age Range 6 to 40 NAT SETUP MAT C Enabled DMZ C Enabled DHZ Private IP lo 0 0 0 Port
48. mpliance with this directive implies conformity to the following EMC Standards FCC 47 CFR Part 15 Subpart B 47 CFR Part 15 Subpart C Section 15 247 CE EN 300 328 2 EN 300 826 EN 301 489 17 Therefore this product is in conformity with the following regional standards FCC Class B following the provisions of FCC Part 15 directive CE Mark following the provisons of the EC directive Manual Version 2 0 1 Aug 2009 This manual is written based on Firmware version 2 00 Table of Contents Overview the Product nn io 7 Introducido 7 Features and BD Ne Sos ns 8 Operation Modes and Connection Examples sessssssseececcceeeeeeeecaeaaeessesseseeeeeeeeeseeeeeeaaas 9 Device Panel Views and DeSCTriptiOns scccccccccsssssssssssscccccsssssssssssccccsssssssssceees 14 l sta the HTA WATER 15 Antenna Alignment scnasena a E a E a a iai 16 mstalanonm Die cuota a a iia 177 Mount the Unittona Pole iii 18 Access the Web Interface ads 25 ACCESS WII IC ONT nda did vital Gat teal adesenle ei sah 25 ACCS Mia WO DON iaa 28 NAVISION ais 30 Mat Men o ooo 30 SA A A A EE A e aia 30 Basic NCUWOEK Tabu iii 31 Network Modes Bridging and Routing ooooooooooooonncnnnnnnnnnnnnnnnnonononnnnnnnnnnnncnnnnnnnnnnnnnnnnnonnnnns 31 AS a Beene ren enae Tem eee vat ne Tere Ten Mee net Ta ene Semen ey UNCER CREE eRe Mtr elmer TREN rE aCe eee Tye 31 Basic Wireless Ta Dassis EE EER E 33 Base Wireless SEUNS Sean RA A A AA ESA 33 Acce
49. n Time US Canada Enable NTP Client Iv Custom Time Server Known Time Server WEB SERVER Web server mode HTTPS Port TELNET SERVER Enable Telnet Server Server Port SSH SERVER Enable SSH Server Server Port SYSTEM LOG Enable System Log 192 168 168 1 Logging IP Domain Name Logging Port 514 515 TEM Ping Watchdog PING WATCHDOG Enable Ping Watchdog O IP Address To Ping 192 168 168 1 Ping Interval 5 seconds Startup Delay lao seconds Failure Count To Reboot 5 Enable Ping Watchdog Default is disabled Check on box to enable IP Address To Ping Target IP address do ping test monitor Ping Interval Default is 5 seconds minimum This is Ping test duration Startup Delay Default is 60 seconds minimum One time delay after device startup Failed Count To Reboot Default is 5 This is the number of ping failure count before device kick in the reboot process Auto Reboot AUTO REBOOT Auto Reboot Mode Disabled By Hour By Time Auto Reboot Mode Default is disabled Select By Hour or By Time check This mode lets you preset a timer to automatically force a reboot Timer can in fixed number of hours or at a specified time of day By Hour Enter the number of hours device need to run before kick start reboot process By Time Enter the specific time of day in hh mm 24 hour format to kick start reboots process
50. n and will be incorporated into later versions of the manual The information contained is subject to change without prior notice FCC NOTICE This device has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This device generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this device does cause harmful interference to radio ortelevision reception the user is encouraged to try to correct the interference by one ormore of the following measures e Reonent orrelocate the receiving antenna e Connect the computer to an outlet on a circuit different from that to which the receiver is connected e Increase the separation between the computer and receiver e Consult the dealeroran expenenced radio TV technician for help Caution Any changes or modifications not expressly approved by the grantee of this device could void the users authonty to operate the equipment FCC Compliance Statement This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions This device may not cause ha mful interference an
51. n case the IP settings of the device are unknown they can be retrieved with the help of the UConfig utility and should be started on the administrator PC which resides on the same network segment as the device Port Forwarding Settings Port Forwarding Port forwarding allows specific ports of the hosts residing in the internal network to be forwarded to the external network This is useful for number of applications such as FTP servers gaming etc where different host systems need to be seen using a single common IP address port Port Forwarding rules can be set in Port Forwarding window which 1s opened by enabling the Port Forwarding option and activating the Configure button Port Forwarding entries can be specified by using the following criteria Private IP is the IP of the host which is connected to the internal network and needs to be accessible from the external network Private Port is the TCP UDP port of the application running on the host which is connected to the internal network The specified port will be accessible from the external network Type is the L3 protocol IP type which needs to be forwarded from the internal network Public Port is the TCP UDP port of the based device which will accept and forward the connections from the external network to the host connected to the internal network Comments is the informal field for the comment of the particular port forwarding entry Few words about the particular port forwarding entr
52. nels to be scanned when scanning for an Access Point Then the scanned channels will appear on the Site Survey Wireless Adapter mode This option change device function like a wireless adapter installed in a computer This mode should only be use on one computer like old laptops or computer aided device with only Ethernet port like printer that do not have expansion interface to add wireless interface It work transparently forwarding and receiving packets from wireless to the computer s ethernet port The Ethernet port MAC address of the client computer is cloned and copied on top of this device so the opposite connecting device will register this MAC address of the laptop or PC rather than the intermediate wireless device This option is effective for only one computer connection If the computer device like printer that have not option to do the setup it should first be configured from a PC then connect to the printer The configuration parameters are the same as Station mode as shown above Wireless Security All the wireless security settings are set under this section The operation of the Keys 1s the same for ALL the Wireless modes WPA or WPA2 Authentication LOCAL AP WIRELESS SECURITY Security WPA Authentication PSK Cipher Type auTO WPA Preshared Key aaia Pri Radius Server IP 0 0 0 0 Sec Radius Server IP Authentication Port Accounting Port Radius Secret Key MAC ACL Policy
53. ode The difference is Station WDS must connect to access point configured to Access Point WDS or RootAP mode Station WDS is mainly use for point to point connection between 2 buildings or locationsasfarasseveral kilometer away Point to Point Point to MultiPoint An access point setup asAccess Point WDS An access point setup asAccess Point WDS or ROotAP and other as Station WDS or ROOtAP and several otherdevicesas Transparent Client Station WDS or Transparent Client This mode is generally used for outdoor connections over long distances or for indoor connections between local networks internet Station WDS o or nsparent Client Mode Is i MAC MAC 00 70 37 2ecf de 00 90 59 4dc ff de Router Mode In RouterMode the device also operatesasa router Either the wireless or Ethemet can be setup as WAN connection to a broadband modem Wireless as WAN is known as Station Router mode or Wireless Routing Client mode and Ethemet as WAN is known as AP Router mode or Gateway mode Device supports several types of broadband connections Static IP Dynamic IP and PPPoE For setup details referto the respective section The illustration below showsthe Ethemet port is setup asthe WAN port and the wireless connection asthe LAN Station Router connection example A Wireless is use to connectto the broadband Publie IP i r Ethemet is the local network LAN ace A internet sharing the broadband connection
54. ol if device is setup and connected to internet Otherwise the date and time update from device own inaccurate autonomous clock Version Firmware Version displays current firmware version in operation Loader Version displays current loader version of the device LAN Setting LAN MAC displays the MAC address of the device LAN Ethernet interface LAN Mode displays the mode used either static or DHCP client LAN IP Address displays the current IP address of the LAN Ethernet interface LAN Gateway IP Address displays the IP address of the gateway used in LAN LAN Pri DNS IP displays the Primary DNS IP address of the LAN setting LAN Sec DNS IP displays the Secondary DNS IP address of the LAN setting WAN Setting WAN MAC displays the MAC address of the device WAN interface WAN Mode displays the mode used either DHCP PPPoE or Static IP WAN IP Address displays the current IP address of the WAN interface WAN Gateway IP Address displays the IP address of the gateway used in WAN WAN Pri DNS IP displays the Primary DNS IP address of the WAN setting WAN Sec DNS IP displays the Secondary DNS IP address of the WAN setting Radio Wireless Mode displays the current operating mode of the device Local AP SSID displays the current SSID Service Set Identifier of device when operates in access point mode Frequency displays current operating frequency running in device WLAN MAC displays the MAC address or BSSI
55. omputer installed with a web browser and a wired or wireless network interface adapter e All network nodes installed with TCP IP and propery configured IP address parameters Mount the Unit on a Pole Access point is designed to mount to a pole The mounting method will be descnbed asshown below Note the following guidelines for choosing the best location for your wireless AP e Place the AP as close as possible to the area where users will require accessto the WLAN e Choose an elevated location where trees buildings and large steel structures will not obstruct the antenna signals and which offers maximum line of sight propagation with the users e Select an appropnate antenna to improve range and or coverage and the access point also lets you fine tune parameters such as the transmit power to achieve the best results Prepare Unit to mount to a pole Unpack the 2 cable ties from the box Gen Loop each cable tie through the mounting bracket hole at the top and bottom Wrap them round the pole and tighten the cable ties to secure the unit to the pole Connect one end of an RJ 45 Ethemet cable to the LAN OUT port of the Injectorand the otherend to LAN of the access point Maximum length of the RJ 45 Category 5 cable is 100 meters Up to 200mW radio For higher power radio need upgrade to higher rating power adapter Es Connect the RJ 45 Ethemet cable attached to the PoE Injector to a network devic
56. ptables nat table while the device is operating in Router mode Please refer to the iptables tutorial for detailed description of the NAT functionality in Router mode Static routes should be specified in order the packets should pass through the based device if the NAT is disabled in while operating in Router network mode Enable DHCP Server Dynamic Host Configuration Protocol DHCP Server assigns IP addresses to clients which will associate to the wireless interface while the device is operating in AP AP WDS wireless mode and assigns IP addresses to clients which will connect to the LAN interface while the device is operating in Station Station WDS mode Range Start End This range determines the IP addresses given out by the DHCP server to client devices on the internal network which use dynamic IP configuration Lease Time The IP addresses given out by the DHCP server will only be valid for the duration specified by the lease time Increasing the time ensure client operation without interrupt but could introduce potential conflicts Lowering the lease time will avoid potential address conflicts but might cause more slight interruptions to the client while it will acquire new IP addresses from the DHCP server DHCP Fallback IP In case the external network interface of the Router is placed in Dynamic IP Address mode DHCP and is unable to obtain an IP address from a valid DHCP server it will fall back to the static IP address listed here I
57. r mode Router can act as DHCP server and use Network Address Translation Masquerading feature which is widely used by the Access Points NAT will act as the firewall between LAN and WLAN networks Additional Firewall settings can be configured for Layer 3 packet filtering and access control in Router mode Bridge Mode Bridge Mode Network Settings In bridge mode the device forwards all the network management and data packets from one network interface to the other without any intelligent routing For simple applications this provides efficient and fully transparent network solution WLAN wireless and LAN Ethernet interfaces belong to the same network segment which has the same IP address space WLAN and LAN interfaces form the virtual bridge interface while acting as the bridge ports The bridge has assigned IP settings for management purposes Bridge IP Address The device can be set for static IP or can be set to obtain an IP address from the DHCP server 1t is connected to One of the IP assignment modes must be selected DHCP choose this option to assign the dynamic IP address Gateway and DNS address by the local DHCP server STATIC choose this option to assign the static IP settings for the bridge interface IP Address enter the IP address of the device while Static Bridge IP Address mode is selected This IP will be used for the device management purposes IP Address and Netmask settings should consist with the address spa
58. range on all the supported channels and will allow you to select one for association In case the selected network uses encryption you 1l need to set security parameters in wireless security section Click Scan to re scan the Access Points in range Select the Access Point from the list and click Close this window Site Survey channel scan list can be modified using the Channel Scan List control Remote AP Lock to MAC Enter the MAC address of the remote access point the device is connected to This option will make device only connect to this access point This 1s important when connection 1s Point to Point operation Remote AP Preferred MAC Enter the preferred MAC address of the access point you want device to connect when it first startup Up to max of 4 MAC addresses can be entered Priority is from top to bottom In the event all preferred MAC addresses are not available device will then pick the matching SSID access point with the strongest signal Channel Scan List 5180 MHz 15280 MHz 5540 MHz 5640 MHz 15765 MHz 5200 MHz 5300 MHz 5560 MHz 5660 MHz 5785 MHz 15220 MHz 5320 MHz 5580 MHz 5680 MHz 5805 MHz 15240 MHz 5500 MHz 5600 MHz 5700 MHz 5825 MHz 5260 MHz 5520 MHz 5620 MHz 5745 MHz Select all Apply Close this window Fig 2 5 Channel Scan List In US Country Code According to the availability of channels in the country codes the operator can select which chan
59. re connection between two systems which enables encapsulated data transport It is commonly used as the medium for subscribers to connect to Internet Service Providers Select the IP Address option PPPoE to configure a PPPoE tunnel in order to connect to an ISP Only the external network interface can be configured as PPPoE client as all the traffic will be sent via this tunnel The IP address Default gateway IP and DNS server IP address will be obtained from the PPPoE server after PPPoE connection is established Broadcast address is used for the PPPoE server discovery and tunnel establishment Valid authorization credentials are required for the PPPoE connection PPPoE Username username to connect to the server must match the configured on the PPPoE server Password password to connect to the server must match the configured on the PPPoE server PPPoE MTU MRU the size in bytes of the Maximum Transmission Unit MTU and Maximum Receive Unit MRU used for the data encapsulation while transferring it through the PPP tunnel Enable DMZ The Demilitarized zone DMZ can be enabled and used as a place where services can be placed such as Web Servers Proxy Servers and E mail Servers such that these services can still serve the local network and are at the same time isolated from it for additional security DMZ is commonly used with the NAT functionality as an alternative for the Port Forwarding while makes all the ports of the host ne
60. re the same wireless channel country code channel spectrum width and transmit power Advance Wireless Tab STATUS BASIC BASIC ADVANCED ADVANCED SERVICES WIRELESS WETVWORK WIRELESS NETWORK RADIO 1 RADIOZ RADIOS RADIO 4 Click Advanced Wireless tab from menu and select RADIO 1 to open the page below ADWANCED WIRELESS SETTING RADIO 1 Long Range Parameters Beacon Interval RTS Threshold Fragmentation Threshold Distance lo meters Calculate Slot Time us CA ACK Timeout us j En W Auto Adjust for Slottime ACE Timeout CTS Timeout CTS Timeout us TEN Noise Immunity W Enable Signal Strength Indicator RSSI LED1 a0 LED 20 LED 30 LED4 40 Long Range Parameters Setup Advanced wireless page let you setup outdoor long distant connection parameters Long Range Parameters Check to enable parameters Beacon Interval default is 100 ms Define the time interval in millisecond the beacon to broadcast Recommend to use default RTS Threshold Default is OFF Fragmentation Threshold Default is OFF Distance Enter the distant in meters the device is to connect with the opposite device Then click Calculate The close approximate values for Slot Time ACK Timeout CTS Timeout will be calculated Fine tuning can be further adjusted for the best environment conditions to achieve best performance and better link reliability Noise Immunity Check to enable When enabled it auto
61. ria Interface the interface WLAN or LAN where filtering of the incoming passing through packets is processed IP Type sets which particular L3 protocol type ICMP TCP UDP P2P should be filtered Source P mask is the source IP of the packet specified within the packet header usually it is the IP of the host system which sends the packets Source Port is the source port of the TCP UDP packet specified within the packet header usually it is the port of the host system application which sends the packets Destination IP mask is the destination IP of the packet specified within the packet header usually it is the IP of the system which the packet is addressed to Destination Port is the destination port of the TCP UDP packet specified within the packet header usually it is the port of the host system application which the packet is addressed to Comments is the informal field for the comment of the particular firewall entry Few words about the particular firewall entry purpose are saved there usually On flag enables or disables the effect of the particular firewall entry All the added firewall entries are saved in system configuration file however only the enabled firewall entries will be active during the system operation New Firewall entries can be saved by activating Apply button or discarded by activating Cancel button in the Firewall configuration window All the active firewall entries are stored in the FIREWALL chain of t
62. rise and public access applications Embedded with the Atheros chipset tt boasts network robustness stability and wider network coverage Based on 802 11n Draft 2 0 the access point supports high speed data transmission of up to 300Mbps The access point is capable of operating in different modes which makes it suitable for a wide vanety of wireless applications including long distance deployments Designed with dual polarization high gain antenna it offers a compact mugged design for outdoor insta llation and excellent performance Moreover its integrated Power over Ethemet PoE allows the access point to be used in areas where power outlets are not readily available To protect your security and privacy the access point is armed with many enhanced and latest wireless security features such as IEEE 802 111 standards MAC Address Filtenng IEEE 802 1x Authentication and 64 128 bit WEP Wired Equivalent Pnvacy to ensure privacy forthe heterogeneous mix of users within the sa me wireless network The access point also incorporates a unique set of advanced features such as Virtual AP to deliver multiple services Long Range parameter fine tuning which provide the access point with the ability to auto calculate parameterssuch asslot time ACK time out and CTS time out to achieve a longer range Depending on the model some model will have less hardware features All the software functions are the Same Features and Benefits Po
63. specify time interval in seconds between to send the ICMP echo requests Startup Delay specify initial time delay in seconds from device startup or reboot to start sending first ICMP echo requests Minimum value 1s 60 seconds Failure Count To Reboot specify the number of ICMP echo response replies If the specified number of ICMP echo response packets 1s not received continuously the Ping Watchdog Tool will reboot the device SNMP A gent Simple Network Monitor Protocol SNMP is used in network management systems to monitor network attached devices for conditions that warrant administrative attention Device contains an SNMP agent which allows it to communicate to SNMP manage applications for network provisioning SNMP Agent provides an interface for device monitoring using the Simple Network Management Protocol an application layer protocol that facilitates the exchange of management information between network devices SNMP Agent allows network administrators to monitor network performance find and solve network problems For the purpose of equipment identification it is always a good idea to configure SNMP agents with contact and location information Enable SNMP Agent control will enable SNMP Agent SNMP Community specify SNMP community string It is required to authenticate access to MIB objects and functions as embedded password The device supports a Read only community string that gives read access
64. ss Point Parameters SCUIN GS ya adi saes 35 Stato Rara meters Selina ti A 37 Wireless ECU N A a TEENA 39 NIE A beOCOSS PONG VAP asada id id 44 Advance Wireless La Diada 45 lone Rance Parameters sep alan codiciado 45 Advanced Network Fada 47 SO A A A RID Re CT aT E Tee Cre et Cree 48 NAF Sep ooun ios 48 Dad COM E ee ae E no aca 50 Prev SEUS da 51 SCrViCeS VD Aaa 54 Pine Watcn Oo a oa 55 A REDO O a Mente Tenney mete ETE Me reece ne MoT aren emery eran Tne ners erent raTTT ee Ter eT 55 AA a ne ane acne II OnE TN TAT nO 56 KPE Se UUM rr IAE ctrl 56 Mep LT Security id A A An 56 T TO CeS AA O le haa iat Sarena 57 SSH ACCESS SOU Diada 57 OVERLOT S A a eal uae eepeeri leashes snnatelene 57 System Lab din iiiada 58 e U0 A A II O eee cas 58 HON A ea 59 Administrative and Read only Account ccccccccnnnnnnnnooncnonnnononnnnnnnnnononnnonannnnnnnnnnncnnnnnnnnnnnnnnnnnnns 59 Configuration Mana EME es 60 IBS WAC CeIVI AMI CIN INC taa anio atada TE A TE ee 60 SCALES BAGG Po nn E E EE E 61 Station Connection AUS TO A a 63 DAD secs caussuecscec Caveseessvedsceebeve EEE NETEN 65 Appendix IT Wireless with Router Mode ssssssssccccsssssssssssscccccssccssssscsees 68 Appendix III Advanced Settings ssssssssccccsssssssssssssccccccccsssssssscccssesssssscssees 73 ADDENGIX TV SOLVICES E E T E E T 76 Overview the Product Introduction The high performance Wireless Network Access Point AP is designed for enterp
65. t WDS mode It enables packet forwarding at layer 2 level Unlike Station mode it is fully transparent at layer 2 level Note for Station WDS Access Point WDS Repeater WDS WDS protocol used is not defined as the standard thus compatibility issues between equipment from different vendors might arise Repeater WDS This mode consists of a Station WDS and an Access Point WDS mode The Repeater WDS must first link up with an Access Point WDS and then it can link up with a Station WDS It acts as an extension to the link and can add more Repeater WDS as necessary Note for Repeater WDS ESSID must be the same for the Remote AP and the Local AP The channels used will follow the Access Point WDS that it first linked up to Access Point Parameters Settings BASIC WIRELESS SETTINGS Local AP ESSID Tr_Test Hide SSID Country Code United States of merica No Count Wireless Profile MA hd Channel Spectrum Width 20 40M Channel Frequency 5180m Auto 6 Mbps Data Rate Mbps lransmit Power Rate Aggressiveness Fig 2 3 Basic Wireless Settings Access Point Access Point WDS Local AP ESSID This is the Service Set Identifier used to identify the operator s wireless LAN It should be specified while operating in Access Point or Access Point WDS mode All the client devices within 1ts range will receive broadcast messages from the access point advertising this SSID Hide SSID Once chec
66. te Log enables the syslog remote sending function while System log messages are sent to a remote server specified by the Remote Log IP Address and Remote Log Port Remote Log IP Address is the host IP address where syslog messages should be sent Remote host should be configured properly to receive syslog protocol messages Remote Log Port is the TCP IP port of the host syslog messages should be sent 514 is the default port for the commonly used system message logging utilities Every logged message contains at least a System Time and a Host Name Usually a particular service name which generates the system event is specifies also within the message Messages from different services have different context and different level of the details Usually error warning or informational system services messages are reported The more detailed system messages are reported the greater volume of log messages will be generated
67. the Radius Server Default is 1813 Radius Secret Key Enter the Secret Key of the Radius Server The device use this to authenticate itself into the Radius Server WPA EAP_TES WPA TTES WPA PEAP REMOTE AP WIRELESS SECURITY ined Security WPA PA WPA Authentication AP gt EAP_TTLS Cipher Type Preshared Key Identity anonymous User Name user example com User Password password Fig 2 8 WPA Station Station WDS Repeater WDS This apply to the following modes only when WPA or WPA2 with EAP is selected Station Station WDS Repeater WDS mode Identity Identification credential used by the wpa supplicant for EAP authentication User Name Identification credential used by the wpa supplicant for EAP tunneled authentication in unencrypted form User Password Password credential used by the wpa supplicant for EAP authentication IEEE802 1x Settings The operation of the Keys is the same for ALL the modes LOCAL AP WIRELESS SECURITY Security IEEES02 1 Pri Radius Server IP OO Sec Radius Server IP o000 Authentication Port ETT Accounting Port nea Radius Secret Key private IEFEEBO2 1X Key Rotation 600 IEEE802 1X Key Length 64 bit MAC ACL Enabled Policy Fig 2 8 IEEE802 1X Access Point Access Point WDS Repeater WDS This option apply to the following modes only when WPA EAP or IEEE802 1x Access Point Access Point WDS Repeater WDS
68. to authorized management stations to all the objects in the MIB except the community strings but does not allow write access for device that supports SNMP v1 Contact specify the identity or contact in case an emergency situation arise Location specify the physical location of the device NTP Client Web Telnet SSH Server NTP Client The Network Time Protocol NTP is a protocol for synchronizing the clocks of computer systems over packet switched variable latency data networks It can be used to set the device system time System Time is reported next to the every System Log entry while registering system events if Log option is enabled Web Server the following the device Web Server parameters can be set there Use Secure Connection HTTPS If checked Web server will use secure HTTPS mode HTTP mode is selected by default Secure Server Port Web Server TCP IP port setting while using HTTPS mode Server Port Web Server TCP IP port setting while using HTTP mode Telnet Server the following the device Telnet Server parameters can be set there Enable Telnet Server Enables Telnet access to the device Server Port Telnet service TCP IP port setting SSH Server the following the device SSH Server parameters can be set there Enable SSH Server Enables SSH access to the device Server Port SSH service TCP IP port setting System Log Enable Log option enables the registration routine of the system log messages Enable Remo
69. ture WLAN Local AP Statistics Bytes transmitted received value represents the total amount of data in bytes transmitted and received during the connection WLAN Local AP Errors section displays the counters of 802 11 specific errors which were registered on wireless interface Rx invalid NWID value represents the number of packets received with a different NWID or ESSID packets which were destined for another access point It can help to detect configuration problems or identify the adjacent wireless network existence on the same frequency Rx Invalid Crypt value represents the number of transmitted and received packets which were encrypted with the wrong encryption key and failed the decryption routines It can be used to detect invalid wireless security settings and encryption break attempts Rx Invalid Frag value represents the number of packets missed during transmission and reception These packets were dropped due to re assembling failure as some link layer fragments of the packet were lost Tx Excessive Retries value represents the number of packets which failed to be delivered to the destination Undelivered packet are retransmitted a number of times before an error occurs Missed beacons value represents the number beacons management packets sent at regular intervals by the Access Point which were missed by the client This can indicate that the wireless client 1s out of range Other errors value represents the total number
70. twork device be visible from the external network side DMZ Management Port Web Management Port for the based device TCP IP port 80 by default will be used for the host device if DMZ Management Port option is enabled In this case device will respond to the requests from the external network as if it was the host which is specified with DMZ IP It is recommended to leave Management Port disabled while the based device will become inaccessible from the external network if enabled DMZ IP connected to the internal network host specified with the DMZ IP address will be accessible from the external network With a multicast design applications can send one copy of each packet and address it to the group of computers that want to receive it This technique addresses packets to a group of receivers rather than to a single receiver It depends on the network to forward the packets to the hosts which need to receive them Common Routers isolate all the broadcast thus multicast traffic between the internal and external networks however provides the multicast traffic pass through functionality Click Change button to save the changes made in the Network page Appendix III Advanced Settings This section provides more detail explanation on advanced setting for routing and wireless settings The Advanced options page allows you to manage advanced settings that influence on the device performance and behavior The advanced wireless settings are
71. ucts list and click on the Open Web button To retrieve and display the latest device s in the list click on the Refresh button Description MAC JP Mask Gateway Broadcom wireles OO 1 7 C4 04 43 2D 0 0 0 0 0 0 0 0 Realtek ATLE168 O0 03 25 2F D1 80 192 168 168 171 255 255 255 0 Forward A oute List Maaa E E A EE E i E 127 0 0 0 255 0 0 0 127 0 0 1 A 192 168 168 0 255 255 255 0 192 168 168 11 192 168 168 11 192 168 168 11 255 255 255 255 127 0 0 1 127 0 0 1 1927 188 1AA 255 7RR PAA PAR 7RR 192 1RA1A8 11 19218 1AA 11 Compe Products List Current Selected 1 Product Model MAC 00 20 40 32 34 56 192 165 168 1 Step 5 Do not exit the uConfig program while accessing the web based interface as this will disconnect you from the device Click on the OK button Warning The selected product is on different subnet uConfig will change the system settings to enable access to the product s Web Interface Do not close uConfig while accessing the product s Web Interface doing so will break the connection After finishing the product configuration press the lt ExitUconfig gt link on the product s Web Interface uConfig will then close automatically Step 6 At the login prompt enterthe User Name and Password The default are User Name admin Password password Authentication Required 2 4 username and password are being requested by http 1192 168 66 3 The site says Wireless
72. usually it is the IP of the system which the packet is addressed to Des Port enter the destination port in rule check Is the destination port of the TCP UDP packet specified within the packet header usually 1t is the port of the host system application which the packet is addressed to Click Apply to the rule or Cancel to clear the rule set Outbound Filtering Setup FILTERING SETUP Packet Filtering Enabled URL Filtering Enabled Multicasting Filtering Enabled Filtering Setup Default is disabled Check on box to enable For configuration refer to Appendix section DNS REDIRECTION SETUP DNS Redirection W Enabled DNS Redirection Default is enabled Check on box to disable When enabled router device will act as DNS proxy PC connected to this router device to set their TCPIP DNS IP to router s IP address PC can still setup a valid DNS IP to skip the DNS proxy handling DYNAMIC DNS SETUP Dynamic DNS FT Enabled Domain Name add a E Remove Dynamic DNS Setup Default is disabled Check on box to enable Dynamic DNS let router s WAN dynamic IP address linked and automatically updated to domain server hosting the service each time the IP address is changed These ensured users on the internet can always get access to the hosting service behind the router For configuration refer to Appendix section DNS RELAY SETUP DNS Relay hf Enabled Primary DNS IP Address Ea 120 290 60
73. utton to close all windows Step 6 To venfy that the IP address has been correctly assigned to your PC go to the Start menu Accessones select Command Prompt and type the command ipconfig all cx C WINDOWS system32 cmd exe C Documents and Settings Administrator gt ipconfig all Windows IP Configuration Host Name winxp Grirrt3pj Primary Dns Suffix z Node Type Unknown IP Routing Enabled WINS Proxy Enabled Ethernet adapter Local Area Connection Connection specific DNS Suffix Description Realtek RTL8139 Family PCI Fast Ethe rnet NIC BB 01 8B BE 86 37 No IP Addr 2 168 168 22 Subnet Mask 255 255 060 IP Addr 2 168 88 43 Subnet Mask gt 255 255 255 0 Default Gateway DNS Servers PC isnow setup with a proper IP addressto communicate with the access point Access the Web Interface Access with uConfig The UC onfig utility provides direct accessto the web interface Step 1 Insert the Product CD into your CD ROM drive the CD will autorun Step 2 From the Utlities section select to install the uConfig utility to your ha rd disk Step 3 After installation double click on the uConfig icon and click on the Yes button his uConfig utility should be run only in one to one connection with a uConfig compatible device If your PC is connected to other IP devices in the network uConfig may not work properly Do you want to proceed Step 4 Select the access point from the prod
74. y purpose are saved there usually Enabled flag enables or disables the effect of the particular port forwarding entry All the added firewall entries are saved in system configuration file however only the enabled port forwarding entries will be active during the system operation New entries in port forwarding can be saved by activating Save button or discarded by activating Cancel button in the Port Forwarding configuration window DNS Proxy The DNS Proxy forwards the Domain Name System requests from the hosts which reside in the internal network to the DNS server while device is in operating in Router mode Valid Primary DNS Server IP needs to be specified for DNS Proxy functionality Internal network interface IP of the device should be specified as the DNS server in the host configuration in order DNS Proxy should be able to get the DNS requests and translate domain names to IP addresses afterwards Bridge mode Firewall Configuration Settings Firewall functionality on any router interface can be enabled using the Enable Firewall option Router Firewall rules can be configured enabled or disabled while using Firewall configuration window which is opened with the Configure button Firewall entries can be specified by using the following criteria Interface the interface WLAN LAN or PPP where filtering of the incoming passing through packets 1s processed IP Type sets which particular L3 protocol type ICMP TCP UDP P2P shoul
75. ze of a transmission and through the use of an access point helps control traffic flow The range is 0 2347bytes or word off The default value is 2347 which means that RTS is disabled RTS CTS Request to Send Clear to Send is the mechanism used by the 802 11 wireless networking protocol to reduce frame collisions introduced by the hidden terminal problem RTS CTS packet size threshold is 0 2347 bytes If the packet size the node wants to transmit is larger than the threshold the RTS CTS handshake gets triggered If the packet size 1s equal to or less than threshold the data frame gets sent immediately System uses Request to Send Clear to Send frames for the handshake which provide collision reduction for access point with hidden stations The stations are sending a RTS frame first while data is send only after handshake with an AP is completed Stations respond with the CTS frame to the RTS which provides clear media for the requesting station to send the data CTS collision control management has time interval defined during which all the other stations hold off the transmission and wait until the requesting station will finish transmission Fragmentation Threshold specifies the maximum size for a packet before data is fragmented into multiple packets The range is 256 2346 bytes or word off Setting the Fragmentation Threshold too low may result in poor network performance The use of fragmentation can increase the reliability

Compex Systems 802.11N User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents