Home

TP-LINK EAP120 WLAN access point

1. Network resources can be classified into different types for different users Part of them can be accessed for free by the clients while some specific resources can only be accessed by authorized users What s more you can customize the authentication login page and specify a URL which the newly authenticated client will be redirected to Please refer to Portal Configuration or Free Authentication Policy according to your need Following is the page of Portal 31 TP LINK EAP220 United States v Access Point v Quick Setup Cluster Wireless Monitoring Management System Wireless Settings MAC Filtering Scheduler Rogue AP Detection Portal Configuration Authentication Type No Authentication Authentication Timeout 1 Hours D Redirect Enable Redirect URL Portal Customization Local Web Portal Term of Use Y I accept the Term of Use Save Free Authentication Policy add Destination Policy Name Source IP Range Destination IP Range Source Mac Port Status Settings Figure 7 10 Portal Page NOTE To apply Portal in a wireless network please go to Wireless Wireless Settings SSIDs to enable Portal of a selected SSID 7 2 1 Portal Configuration Three authentication types are available No Authentication Local Password and External RADIUS Server 1 NoAuthentication Users are required to finish only two steps agree with the user protocol and click the Login button 32 2
2. User List Refresh Access Point SNR dB CCO Rate Mbps Down Byte Up Byte Active Time Portal Authenticated Guest Refresh Access Point SNR dB CCO Rate Mbps Down Byte Up Byte Active Time Action Figure 8 11 Client Monitoring 61 8 3 1 User List User List Refresh Access Point SSID SNR dB CCO Rate Mbps Down Byte Up Byte Active Time EAP220 00 0a eb La i i i 14 F4 2A 3B D7 E9 LINK 2 4GHz 16E2 45 76 23 6 1k 474 O days 00 00 04 16 e2 98 98 Figure 8 12 User List MAC Displays the MAC address of the client Access Point Displays the name of the device to which the client is connected SSID Displays the SSID the client is connected to SNR dB Signal to Noise Ratio the power ratio between the received wireless signal strength and the environmental noise strength The bigger the value of SNR the better network performance the device provides CCQ Displays the wireless Client Connection Quality CCQ CCQ refers to the ratio of current effective transmission bandwidth and the theoretically maximum available bandwidth CCQ reflects the actual link condition Rate Mbps Displays the data rate at which the client transmits wireless packets Down Byte Displays the throughput of the downstream data Up Byte Displays the throughput of the upstream data Active Time Displays the amount of time the client has been connected to the device 8 3 2 Portal Authenticated Guest The P
3. Wi Fi Multimedia WMM Y Enable AP EDCA Parameters Arbitration Minimum Maximum Queue Inter Frame Space Contention Window Contention Window Maximum Burst Data O Voice 1 Data 1 Video Data 2 Best Effort Data 3 Background Station EDCA Parameters Arbitration Minimum Maximum Queue Inter Frame Space Contention Window Contention Window TXOP Limit Data O Voice 2 Data 1 Video Data 2 Best Effort Data 3 Background No Acknowledgement _ Enable Unscheduled Automatic Power Save Delivery Y Enable Figure 7 29 QoS Page 2 4GHz 5GHz Select a frequency band Wi Fi Multimedia By default WMM is enabled After WMM is enabled the device has the QoS WMM function to guarantee the transmission of audio and video packets with high priority 7 5 1 AP EDCA Parameters AP Enhanced Distributed Channel Access EDCA parameters affect traffic flowing from the EAP device to the client station 48 AP EDCA Parameters Arbitration Minimum Maximum Inter Frame Space Contention Window Contention Window Queue Data O Voice 1 Data 1 Video Data 2 Best Effort Data 3 Background Queue Arbitration Inter Frame Space Minimum Contention Window Maximum Contention Window Maximum Burst 7 5 2 Station E Maximum Burst 7 Figure 7 30 AP EDCA Parameters Displays the transmission queues Data 0 gt Data 1 gt Data 2 gt Data 3 A wait time for data frames The wait time is
4. SSID Name MAC Group Name TP LINK_2 4GHz_16E290 2 4GHz None TP LINK_5GHz_16E291 Note Deny Deny the access of the stations specified in the MAC group Allow Allow the access of the stations specified in the MAC group Figure 7 22 MAC Filtering Association SSID Name Displays the SSID of the wireless network Band Displays the frequency band the wireless network operates at MAC Group Name Select a MAC group from the drop down list to allow or deny its members to access the wireless network Action e Allow Allow the access of the stations specified in the MAC group e Deny Deny the access of the stations specified in the MAC group 7 4 Scheduler Scheduler allows you to configure rules with specific time interval for radios to operate which automates the enabling or disabling of the radio 43 TP LINK EAP220 United States v Access Point v Quick Setup Cluster Wireless Monitoring Management Wireless Settings Portal MAC Filtering Scheduler Rogue AP Detection Settings Scheduler _ Enable Association Mode Associated with SSID w Scheduler Profile Configuration Create Profiles Scheduler Association SSID Name Profile Name TP LINK_2 4GHz_16E290 Radio Off TP LINK_5GHz_16E291 Radio Off Figure 7 23 Scheduler Page Settings Scheduler Check the box to enable Scheduler Association Mode Select Associated with SSID AP you can perform configurations on the SSIDs APs Th
5. Step 2 Wireless Access 1 Make sure the management host is set to obtain IP address automatically 2 Join the wireless network using the default SSID TP LINK_2 4GHz_XXXXXX or TP LINK_5GHz_XXXXXX where XXXXXX represents the last 6 characters of the EAP s MAC address Password is not required Step 3 Quick Setup 1 Open a web browser and type in http tplinkeap net to access the EAP s web management page Use admin all lowercase for both username and password to login Please note that in Cluster mode the login will be directed to the Master EAP 2 Create a new user name and password 3 Follow the step by step instructions to complete the Quick Setup Any configurations you make on the Master EAP will automatically synchronize to all the other EAPs Congratulations Now you can enjoy the wireless network If you want to perform more configurations please connect to the new SSID Option 2 Wired Login TP LINK TL ER5120 a APA Management Host Switch A p E v u y FI m E Ea E va MB O0 y 7 Master EAP Cluster Figure 3 2 Sample Network Diagram for Wired Login Step 1 Power on Power on the EAPs The EAP with system initialization completed first will be elected as the Master EAP Step 2 Wired Access 1 Make sure the management host is set to obtain IP address automatically 2 Access your DHCP
6. LocalPassword Users are reguired to enter the preset user name and password which are saved in the EAP 3 External RADIUS Server Users are required to enter the preset user name and password which are saved in the database of the RADIUS server The RADIUS server acts as the authentication server which allows you to set different user name and password for different users Refer to the following content to configure Portal based on actual network situations No Authentication Portal Configuration Authentication Type No Authentication v Authentication Timeout 1 Hours v D M Redirect Enable Redirect URL Portal Customization Local Web Portal v Term of Use vi I accept the Term of Use Figure 7 11 Portal Configuration_No Authentication Authentication Select No Authentication Type Authentication After successful verification an authentication session is established Timeout Authentication Timeout decides the active time of the session Within the active time the device keeps the authentication session open with the associated client To reopen the session the client needs to log in the web authentication page and enter the user name and password again once authentication timeout is reached By default authentication timeout is one hour Select Custom from the drop down list to customize the parameter Redirect Disable by default Redirect specifies that the portal should redirect the newly authentic
7. NOTE Clicking Reboot Reset will reboot reset all the EAPs in a cluster 10 4 Backup Restore TP LINK EAP220 United States v Access Point v Quick Setup Cluster Wireless Monitoring Management User Account Time Settings Reboot Reset Backup amp Restore Firmware Upgrade Backup Save a copy of current settings Restore Restore saved settings from a file File Browse Figure 10 9 Backup amp Restore You can save the current configuration of the EAP as a backup file and restore the configuration via a backup file Back up the settings before you upgrade the device or upload a new configuration file can prevent it from being lost Restore function helps you to restore the device to previous settings by uploading a backup file 76 10 5 Firmware Upgrade TP LINK EAP220 United States v Access Point v Quick Setup Cluster Wireless Monitoring Management System User Account Time Settings Reboot Reset Backup amp Restore Firmware Upgrade Firmware Upgrade Device Name Firmware Version EAP220_1 00 0A EB 16 E2 90 EAP220 1 0 0 Build 20140912 Rel 60088 EAP220 00 0a eb 16 e2 98 00 0A EB 16 E2 98 EAP220 1 0 0 Build 20140912 Rel 60088 New Firmware File Browse Figure 10 10 Firmware Upgrade Please log in http www tp link com en to download the latest system file As Figure 10 10 shows firstly select the model and device you are planning to upgrade Then click Bro
8. frequency while for EAP220 the wireless network can work within 2 4GHz and 5GHz frequency Both EAP120 and EAP220 support 802 11b g n 802 11b g and 802 11n standards It is recommended to select 802 11b g n in which way clients supporting 116 11g or 11n mode can access your wireless network Wireless network of EAP220 operating at 5GHz freguency band supports 802 11a n 802 11a and 802 11n standards It is recommended to select 802 11a n in which way your wireless network can be connected by clients supporting 11a or 11n mode Channel Width Select the channel width of this device Options include 20MHz 40MHz and 20 40MHz this device automatically selects 20MHz or 40MHz and 20MHz will be used if 40MHzis not available According to IEEE 802 11n standard using a channel width of 40MHz can increase wireless throughput However users may choose lower bandwidth due to the following reasons 1 To increase the available number of channels within the limited total bandwidth 2 To avoid interference from overlapping channels occupied by other devices in the environment 3 Lower bandwidth can concentrate higher transmit power increasing stability of wireless links over long distances Channel Select the channel used by this device to improve wireless performance 1 2412MHz means the Channel is 1 and the frequency is 2412MHz The channel number varies in different regions By default channel is automatically selected Tx power En
9. 5 Firmware Upgrade System Time Displays the system time of the device If you want to adjust the system time please refer to 10 2 1 Time Settings Uptime Displays the time that has elapsed since the last reboot CPU Displays the CPU occupancy rate which helps you to preliminarily judge whether the device functions properly 56 Memory Displays the memory usage rate which helps you to preliminarily judge whether the device functions properly Wireless Settings Device Information Wireless Settings LAN Information Client LAN Traffic Radio Traffic Region United States Channel Freguency 4 2427MHz Channel Width IEEE802 11 Mode Max TX Rate Transmit Power 2 4GHz 5GHz Region Channel Frequency Channel Width IEEE802 11 Mode Max TX Rate Transmit Power 30dBm 20 40MHz b a n mixed 300 0Mbps Figure 8 4 Wireless Settings Select a frequency band Displays the region you ve selected Displays the channel number and the operating frequency If you want to change them please refer to 5 2 AP List Radio in Cluster mode 7 1 1 Wireless Basic Settings in Standalone mode Displays the spectral width of the radio channel used by the device If you want to change it refer to 5 2 AP List Radio in Cluster mode 7 1 1 Wireless Basic Settings in Standalone mode Displays the radio standard used for operation of your device If you want to change it refer to 5 2 AP List Radi
10. 6 SNMP The device can be configured as an SNMP agent SNMP Simple Network Management Protocol the most widely applied network management protocol provides a management framework to monitor and maintain Internet devices Main functions of SNMP include monitoring network performance detecting and analyzing network error configuring network devices and so on When networks function properly SNMP can perform the functions of statistics configuration and testing When networks have troubles SNMP can detect and restore these troubles An SNMP consists of three key components manager agent and MIB Management Information Base SNMP manager is a client program operating at workstation assisting network administrators to accomplish most network device management tasks An agent is a network management software module that resides on a managed device and responsible for receiving and dealing with data sent by managing device Generally the managed devices are network devices including hosts bridges switches and routers MIB is the collection of managed devices It defines a series of properties of the managed devices Every SNMP agent has its own MIB 69 Once the device has become an SNMP agent it is able to receive and process reguest messages from SNMP manager Following is the page of SNMP TP LINK EAP220 United States v Access Point v Quick Setup Cluster Wireless Monitoring Management System Log Web Server M
11. A wait time for data frames The wait time is measured in slots Valid values for AIFS are 1 through 15 An input to the algorithm that determines the initial random backoff wait time window for retry of a transmission The upper limit in milliseconds for the doubling of the random backoff value The Transmission Opportunity TXOP is an interval of time in milliseconds when a WME client station has the right to initiate transmissions onto the wireless medium towards the EAP device Valid values for TXOP Limit are from 0 to 8192 and should be exactly divided by 32 Select Enable to specify that the EAP device should not acknowledge frames with QosNoAck as the service class value By default it is disabled Select Enable to enable APSD which is a power management method APSD is recommended if VolP phones access the network through the EAP device By default it is enabled 7 6 Rogue AP Detection A Rogue AP is an access point that has been installed on a secure network without explicit authorization from a system administrator The EAP device can scan all channels to detect all APs in the vicinity of the network If rogue APs are detected they are shown on the Detected Rogue AP List If an AP listed as a rogue is legitimate you can add it to the Trusted AP List 50 TP LINK EAP220 United States v Access Point v Quick Setup Cluster Wireless Monitoring Management System Wireless Settings MAC Filtering Sche
12. Celling lamp appearance and easily mounting design with chassis make EAP easy to be installed on a wall or ceiling and blend in with most interior decorations EAP120 and EAP220 support Power over Ethernet PoE to make effortless and flexible deployment for users With two built in omnidirectional antennas EAP120 works within the 2 4GHz freguency band It applies 802 11 standards and 2 2MIMO technology allowing packet transmission at up to 300MHz EAP220 has four built in omnidirectional antennas Wireless network created by EAP220 can operate at both 2 4GHz and 5GHz It applies 802 11n standard and two 2 2MIMO technology allowing packet transmission at up to 600MHz 300MHz per radio Appearance Description 1 2 1 Top View The top view of EAP120 EAP220 is shown as the following figure A IS ystemLED Figure 1 1 Top View of the EAP 1 LED There is a System LED on the top of the EAP The following table explains the indications of different LED colors LED Color Indication Flashing green System initialization is complete Solid green The device is working properly Flashing red System errors RAM flash Ethernet WLAN or firmware may be malfunctioning Flashing yellow Firmware update is in progress Do not disconnect or power off the device Alternating red green yellow twice The device is being reset 1 2 2 Panel Layout RESET CONSOLE ETHERNET ON OFF POWER
13. Information Client LAN Traffic Radio Traffic 2 4GHz 5GHz Rx Packets 10868 Tx Packets 7299 Rx Bytes 1277064 Tx Bytes 181327 Rx Dropped Packets Tx Dropped Packets 0 Rx Errors Tx Errors Figure 8 8 Radio Traffic Rx Tx Packets Displays the total amount of packets received sent by the wireless network Rx Tx Bytes Displays the total amount of data in bytes received sent by the wireless network Rx Tx Dropped Displays the total amount of dropped packets received sent by the wireless Packets network 59 Rx Tx Errors Displays the total amount of error packets received sent by the wireless network 8 2 SSID TP LINK eap220 United States v Access Point Quick Setup Cluster Wireless Monitoring Management Client SSID List Refresh Num of s te sa Isolation Down Byte Up Byte SSID Name VLAN ID clients Broadcast Bad Security Portal Filtering TP 1 LINK_2 4GHz_16E29 0 enable 2 4GHz none disable disable disable 0 TP 2 LINK_5GHz_16E291 0 none disable disable disable 460k Figure 8 9 SSID Monitoring 8 2 1 SSID List In SSID List you can monitor the related parameters of the wireless network SSID List Refr Num of e EH Isolation Down Byte Up Byte SSID Name VLAN ID cata romina Band Security Portal Filtering TP 1 LINK 2 4GHz 16629 0 enable 2 4GHz none disable disable disable 0 TP 2 F oe 2 LINK 5GHz 16E291 0 enable disable disable disable Fi
14. Quick Setup Cluster Wireless Monitoring Management Wireless Settings Portal MAC Filtering Scheduler Rogue AP Detection Settings Enable MAC Filtering Enable Station MAC Group MAC Filtering Association SSID Name MAC Group Name Action TP LINK 2 4GHz 16E290 2 4GHZ TP LINK_5GHz_16E291 None Note Deny Deny the access of the stations specified in the MAC group Allow Allow the access of the stations specified in the MAC group Figure 7 18 MAC Filtering Page e Settings Enable MAC Filtering Check the box to enable MAC Filtering e Station MAC Group Follow the steps below to add MAC groups 41 Step 1 Click create Groups two tables will be shown Station MAC Group o Add a Group Add a Group Member MAC Group Name Modify MAC Address Modify Figure 7 19 Station MAC Group Step 2 Click Add Group and fill in a name for the MAC group Station MAC Group Add a Group Add a Group Member MAC Group Name Modify MAC Address Modify MAC Figure 7 20 Add a Group Step 3 Click Add a Group Member and input the MAC address you want to organize into this group Station MAC Group Add a Group Member MAC Group Name MAC Address Modify ist Floor 2rd Floor Figure 7 21 Add a Group Member Click L4 in Modify column to edit the MAC group name or MAC address Click to delete the MAC group or group member 42 e MAcCFiltering Association MAC Filtering Association
15. Security Mode Portal SSID Isolation Modify TP LINK 2 4GHz 16E290 0 4094 Ois used to disable VLAN 0 s tagging Y Enable None _ Enable _ Enable Figure 7 4 SSIDs Click to add up to 8 wireless networks per radio Enter up to 32 characters as the SSID name Set a VLAN ID ranges from 0 to 4094 for the wireless network VLAN 0 means VLAN function is disabled Wireless networks with the same VLAN ID are grouped to a VLAN Enable this function AP will broadcast its SSID to hosts in the surrounding environment as thus hosts can find the wireless network identified by this SSID If SSID Broadcast is not enabled hosts must enter the AP s SSID manually to connect to this AP Select the security mode of the wireless network For the safety of wireless network you are suggested to encrypt your wireless network This device provides three security modes WPA Enterprise WPA PSK WPA Pre Shared Key and WEP Wired Equivalent Privacy WPA PSK is recommended Settings vary in different security modes as the details are in the following introduction Select None and the hosts can access the wireless network without password Portal provides authentication service for the clients who want to access the wireless local area network For more information refer to 7 2 Portal After Portal is enabled the configurations in 7 2 Portal will be applied 26 SSID Isolation After enabling SSID Isolation the devices connected in the sam
16. and 802 11n standards It is recommended to select 802 11b g n in which way clients supporting 116 11g or 11n mode can access your wireless network Wireless network of EAP220 operating at 5GHz freguency band supports 802 11a 802 11n and 802 11a n standards It is recommended to select 802 11a n in which way your wireless network can be connected by clients supporting11a or 11n mode Channel Width Select the channel width of this device Options include 20MHz 40MHz and 20 40MHz this device automatically selects 20MHz or 40MHz and 20MHz will be used if 40MHz is not available According to IEEE 802 11n standard using a channel width of 40MHz can increase wireless throughput However users may choose lower bandwidth due to the following reasons 1 To increase the available number of channels within the limited total bandwidth 2 To avoid interference from overlapping channels occupied by other devices in the environment 3 Lower bandwidth can concentrate higher transmit power increasing stability of wireless links over long distances 17 Channel Select the channel used by this device to improve wireless performance 1 2412MHz means the Channel is 1 and the frequency is 2412MHz The channel number varies in different regions By default channel is automatically selected Tx Power Enter the transmit power value By default the value is 20 The maximum transmit power may vary among different countries or regions If the
17. cluster Cluster Cluster Name EAPcluster_SZ Note EAP series products factory default Cluster Name is TP LINK Figure 5 2 Modify the Cluster Name 5 2 AP List AP List displays all the EAPs in this cluster Click 4 in the Settings column to configure the private parameters of the selected EAP These private parameters take effect on each EAP separately which helps to optimize the network performance Configurable parameters include Device Name Radio IP Settings Load Balance and SSID Override 14 AP List Refresh Device Name Role Status Clients Settings EAP220_1 EAP220 00 0a eb a8 cc 07 192 168 0 3 Master connected 0 gt EAP220 00 00 00 00 00 00 EAP220 00 Oa eb 16 e2 94 92 168 0 Member connected 0 Figure 5 3 AP List Device Name Displays the name of the device The default format of device name is model MAC address such as EAP220 00 0a eb 16 e2 90 Model Displays the model of the device MAC Displays the MAC address of the device IP Displays the IP address of the EAP By default it is obtained from a DHCP server typically a router Role Displays the role of the EAP in a cluster including Master and Member Status Displays the status of an EAP in a cluster including connected and joining e Connected The EAP has joined a cluster e Joining The EAP is trying to join a cluster Clients Displays the number of wireless devices connected to the EAP Settings Operations h
18. maximum transmit power is set to be larger than local regulation allows the maximum Tx power regulated will be applied in actual situation NOTE In most cases it is unnecessary to select maximum transmit power Selecting larger transmit power than needed may cause interference to neighborhood Also it consumes more power and will reduce longevity of the device Select a certain transmit power is enough to achieve the best performance IP Settings You can allocate the EAP a static IP address or set it to obtain an IP address automatically from a DHCP server By default the EAP is set to obtain IP address automatically thus a DHCP server is reguired in the network AP List Refresh ID Device Name Status Clients Settings 5 Device Name Radio IP Settings Load Balance SSID override Dynamic O Static Fallback IP Vi Enable DHCP Fallback IP 192 168 0 254 DHCP Fallback IP Mask 259 299 2990 DHCP Fallback Gateway Figure 5 7 IP Settings Dynamic Static By default the EAP device receives an IP address from a DHCP server typically a router Select Static to configure IP address manually Fallback IP If the EAP fails to get a dynamic IP address from a DHCP server within ten seconds the fallback IP will work as the IP address of the device 18 DHCP Fallback IP IP Mask DHCP Fallback Gateway Load Balance After that however the device will keep trying to obtain an IP address from the D
19. network to delay their transmitting of data At the same time the AP inform the requesting station to send data The value range is from 1 to 2347 bytes The default value is 2347 which means that RTS is disabled Specify the fragmentation threshold for packets If the size of the packet is larger than the fragmentation threshold the packet will be fragmented into several packets Too low fragmentation threshold may result in poor wireless performance caused by the excessive packets The recommended and default value is 2346 bytes 7 1 4 Load Balance Figure 7 9 is only displayed in Standalone mode Load Balance in Cluster mode is explained in 5 2 AP List By restricting the maximum number of clients accessing the EAPs Load Balance helps to achieve rational use of network resources 30 Load Balance Load Balance Maximum Associated Clients Load Balance Maximum Associated Clients 7 2 Portal Figure 7 9 Load Balance Disable by default Click ON to enable the function After enabling it you can set a number for maximum associated clients to control the wireless access Enter the number of clients to be allowed for connection to the EAP The number ranges from 1 to 99 Portal enhances the network security by providing authentication service to the clients who want to access the wireless local network Portal is also called web authentication The users have to log in a web page to establish verification
20. server and locate the IP address of the EAPs Step 3 Quick Setup 1 Open a web browser in the address field type in any IP address of the EAPs to log in the web server The default user name and password are admin all lowercase In the Cluster mode the login will be directed to the Master EAP 2 Create a new user name and password 3 Follow the step by step instructions to complete Quick Setup Any configurations you make on the Master EAP will automatically synchronize to all the other EAPs Congratulations Now you can enjoy the wireless network 4 1 Chapter 4 Management Mode Wireless N Gigabit Access Point EAP120 EAP220 provides two management modes Cluster and Standalone When user establishes a large scale wireless network the management of every single AP in the network is complex and complicated The Cluster mode is recommended for the centralized management of EAPs in a large wireless network In this mode all the EAPs in this network can work in AP operating mode to provide wireless access service The Standalone mode applies to a relatively small sized wireless network EAPs in the Standalone mode cannot be managed centrally With factory default settings the EAP works in Cluster mode Switch the two management modes of the EAP based on the actual situations Mode Identification How to judge the management mode of the EAP The web management pages of the EAP in the Cluster and Standalone mode are d
21. transmit data Key Selected You can configure four keys in advance and select one as the present valid key Web Key Select the web key format ASCII or Hexadecimal Format e ASCII ASCII format stands for any combination of keyboard characters in the specified length e Hexadecimal Hexadecimal format stands for any combination of hexadecimal digits 0 9 a f A F in the specified length 27 Key Type Select the WEP key length 64 bit or 128 bit or 152 bit for encryption e 64 bit You can enter 10 hexadecimal digits any combination of 0 9 a f A F without null key or 5 ASCII characters e 128 bit You can enter 26 hexadecimal digits any combination of 0 9 a f A F without null key or 13 ASCII characters e 152 bit You can enter 32 hexadecimal digits any combination of 0 9 a f A F without null key or 16 ASCII characters Key Value Enter the key value o WPA Enterprise Based on RADIUS server WPA Enterprise can generate different passwords for different users and it is much safer than WPA PSK However it costs much to maintain and is more suitable for enterprise users At present WPA Enterprise has two versions WPA PSK and WPA2 PSK Security Mode WPA Enterprise T Version m Auto O WPA PSK O WPA2 PSK Encryption Auto TKIP AES Radius Server IP 0 0 0 0 Radius Port 0 1 65535 0 means default port 1812 Radius Password Group Key Update a A M Period seconds 30 8640000 0 m
22. 02 00 First Sunday in November 02 00 e European Last Sunday in March 01 00 Last Sunday in October 01 00 e Australia First Sunday in October 02 00 First Sunday in April 03 00 e New Zealand Last Sunday in September 02 00 First Sunday in April 03 00 74 e Recurring Mode Mode Predefined Mode 8 Recurring Mode O Date Mode Time Offset 60 minutes Start Fourtt w Sun v in Mar v at 01 End Fourtt w Sun v in Oct v at 01 Figure 10 6 Recurring Mode Mode Select Recurring Mode The configuration is recurring in use Time Offset Specify the time adding in minutes when Daylight Saving Time comes Start End Select starting time and ending time of Daylight Saving Time e Date Mode Mode O Predefined Mode Recurring Mode 8 Date Mode Time Offset 60 minutes Start End Figure 10 7 Date Mode Mode Select Date Mode Time Offset Specify the time adding in minutes when Daylight Saving Time comes Start End Select starting time and ending time of Daylight Saving Time 10 3 Reboot Reset TP LINK amp 220 United States v Access Point a Quick Setup Cluster Wireless Monitoring Management System User Account Time Settings Reboot Reset Backup 8 Restore Firmware Upgrade Reboot amp Reset Reboot Device Reset to Factory Default Reset Figure 10 8 Reboot amp Reset Click Reboot to restart the device Click Reset to restore the device to factory default settings 75
23. 1 moO ARROW 1 Figure 1 2 Panel Layout of the EAP The interface panel components of the EAP from left to right are described in the following list Kensington Security Slot Secure the lock not provided into the security slot to prevent the device from being stolen RESET With the device powered on press and hold the RESET button for about 8 seconds until the LED flashes Red Green Yellow alternatively twice then release the button The device will restore to factory default settings CONSOLE This port is used to connect with the serial port of a computer or a terminal to check and monitor system information of the device ETHERNET This port is used to connect to a router to transmit data or to a PSE device such as a switch for both data transmission and Power over Ethernet PoE through Ethernet cabling ON OFF Press this button to turn on off the device Please remember to press it to use the device POWER The power port is used connect the device to an electrical wall outlet via power adapter Please only use the provided power adapter ARROW 1 This arrow is used to align with ARROW 2 on the mounting bracket to lock the EAP into place 1 2 3 Mounting Bracket The following figure describes the structure of the mounting bracket ARROW 2 to align with ARROW 1 under the interface panel Ceiling mounting slot Wall mounting slot Locking clip Figure 1 3 Structure of the Mounting Brack
24. 20 00 0a eb 16 A CPC Se SCOVER with request ip 0 0 0 1970 01 01 00 00 15 EAP220 ippo eb 16 00 0A EB 16 E2 98 DHCPC Send DISCOVER with request ip 0 0 0 0 NOTIC MAE and unicast flag 0 EAP220 00 0a eb 16 1970 01 01 00 00 10 22 98 00 0A EB 16 E2 98 OTHER INFO System started lt 1 2 Figure 9 2 Log List 9 1 2 Log Settings You can choose the way to receive system logs in Log Settings zone where these parameters can be configured Enable Auto Mail Enable Server and Enable Nvram Log Settings Enable Auto Mail Enable Server Enable Nvram Auto Mail Feature _ Enable Server Enable Nvram Figure 9 3 Log Settings Enable Auto Mail If Auto Mail is enabled system logs will be sent to a mailbox The following content will be shown Enable Auto Mail From To SMTP Server Enable Authentication User Name Password Confirm Password Time Mode Fixation Time From To Y Auto Mail Feature _ Enable Authentication Fixation Time gt Period Time 00 vw 00 vw HH MM Figure 9 4 Enable Auto Mail Enter the sender s email address Enter the recipient s email address which will receive the system logs 65 9 2 SMTP Server Enter the IP address of the SMTP server Enable Generally users are reguired to log in to the SMTP server by entering user Authentication name and password e User Name Enter the sender s email address e Passwo
25. ANDA ma m TU 52 LO MUNI N etteeeioae 52 7 6 4 Download Backup Trusted AP LisSt onconononoononinnoninnocinoonocononrororonnarorororrororrororonrororonss 53 Chapter 8 MOOG su 55 8 1 AP ait islandlasi alaalia NA 55 A O 56 o2 1b A O pe Er OP Tree E en rae eee 60 SL bd 60 A O 61 Fo SA io 62 8 3 2 Portal Authenticated Guest sssssssssssecsscssssscscscssssssssssssscsscssscscsecsecsssssesseecscsseseeaes 62 Chapter 9 Mana denme 0 M a aia 64 9 1 ELO A O eae E E ema ee eset 64 IET EOS dt 64 912 LOG SEIMIS in klaas ES 65 9 2 MMED SOU CM MU 66 9 3 Management ACE Sarna ia 67 O 68 D A GRE aE re NE OD Ye ESRI OC YN oT ORE En Pr TCO 68 TO SNMP do 69 Chapter ITO SM 72 TOM USERACCO UN HS EU 72 KOZ TITS SUNN Sree a A 72 19241 TAS EMOS 73 1022 Daylight SAVING aaa 74 103 REDOOt ROSS a eat de ee eis ated 75 10 4 BACKUID CERES CONE iso cede ia AAA a A 105 ErmWarsUbarad taastamata Appendix A Specifications 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 1 1 1 2 Chapter 1 Introduction Overview of the EAP EAP series products provide wireless coverage solutions for small medium business They can either work independently as standalone APs or implement centralized management with cluster function providing a flexible richly functional but easily configured enterprise grade wireless network for small and medium business
26. HCP until it succeeds Enter the fallback IP IP mask Enter the fallback gateway In a network with a great number of wireless clients there may be a great disparity in the number of clients connected to each AP which may waste the network resources and reduce the network performance By restricting the maximum number of the wireless clients connected to an EAP Load Balance helps to reduce the traffic loading and enhance the network performance AP List Device Name Device Name Radio Load Balance IP Settings Refresh Status Clients Settings Load Balance SSID override Enable Maximum Associated Clients 2 4GHz 5GHz Load Balance Maximum Associated Clients SSID Override Figure 5 8 Load Balance Select a frequency band Disable by default Check the box to enable the function Then you can set a number for maximum associated clients to control the wireless access Enter the number of clients to be allowed for connection to the EAP The number ranges from 1 to 99 Customize the wireless network s SSID to distinguish it from the cluster s Service Set Identifier SSID which will help to locate this AP in the wireless network list Meanwhile wireless network can be divided into a specific VLAN based on the SSID In a network with the same SSID clients 19 under the same VLAN can communicate with each other while clients of different VLANs are separated Click the fol
27. P will reboot and search the cluster with the same cluster name to join If there is no device with the same cluster name in the network the EAP will create a new cluster with this name and act as the Master 12 Chapter 5 Cluster Cluster feature provides centralized management and monitoring of the EAPs thus significantly simplifying the wireless network configuration and maintenance By default the EAPs in a same subnet will form a cluster automatically One EAP will be elected as the Master EAP through which you can manage all the EAPs in this cluster centrally while the other EAPs work as Members Master election determines the role of the cluster members Master election is held each time the cluster is newly formed or the former Master works abnormally The Master is elected based on the following rules in the order listed 1 System Uptime The EAP with the longest system uptime becomes the Master Uptime is the time that has elapsed since the last reboot 2 MAC Address The EAP with the highest MAC address becomes the Master In a cluster access to any EAP s IP address in the web browser will be redirected to the Master EAP s management web page Each EAP s private parameters such as Name Radio IP Settings Load Balance and SSID Override can be customized in the AP listin Cluster page while the global configurations including Wireless Monitoring Management and System on the Master EAP will be automatically synchronized
28. SK has two versions WPA PSK and WPA2 PSK Security Mode Version Encryption Wireless Password Group Key lipdate Period Version Encryption Wireless Password Group Key Update Period WPA PSK T Auto WPA PSK WPA2 PSK Auto TKIP AES wpapass1 seconds 30 8640000 0 means no upgrade Figure 7 7 Security Mode_WPA PSK e Auto Select WPA or WPA2 automatically based on the wireless station s capability and reguest e WPA Pre shared key of WPA e WPA2 Pre shared key of WPA2 Select the encryption type including Auto TKIP and AES The default setting is Auto which can select TKIP Temporal Key Integrity Protocol or AES Advanced Encryption Standard automatically based on the wireless station s capability and reguest AES is more secure than TKIP and TKIP is not supported in 802 11n mode It is recommended to select AES as the encryption type Configure the WPA PSK WPA2 PSK password with ASCII or Hexadecimal characters For ASCII the length should be between 8 and 63 characters with combination of numbers letters case sensitive and common punctuations For Hexadecimal the length should be 64 characters case insensitive 0 9 a f A F Specify the group key update period in seconds The value can be either 0 or at least 30 0 means no update 29 7 1 3 Wireless Advanced Settings Wireless Advanced Settings Beacon Interval DTIM Period RTS Threshold Fragmentation Th
29. TP LINK The Reliable Choice User Guide Wireless N Gigabit Access Point EAP120 EAP220 REV1 0 1 1910011120 CONTENTS Chapter 1 MRE OUI alona a r EE E OE N E OEE 1 1 1 Ovemiew ofthe EAP saanu TENO 1 1 2 Appearahce Des CADA NN E AA 1 EZI WOO WAM PR e o a tasehonseateuauanere weetsencaneeoeats 1 122 RANELLVOUE o 2 123 MOUNN Backlund kkk 3 Chapter 2 TN ONG Al TO PODIA 4 Chapter 3 Getting Started with the EAP ns is 5 Optional Wireless LOGI una matata aal ama 5 Option 2 Wired Lodi arura maausu m 7 Chapter 4 Management MO 1 MR A A AAN 9 4 1 Mode ASCO ies 9 42 Mode WII A maaan 11 42 SWITCH to tanda lON O usais idol 11 A o ATE A E A EE T 11 Chapter 5 ALD E PAAT EA A A E AN 13 5 1 CIUS TET Oe Po see csetac apse tae aotszs ats ctu eteauanaue ots ean ceateereuem ae aera 14 D2 ARE ananass aas ama ees 14 Chapter 6 A Ka acdsee enantio cielo anes atau aise 21 6 1 CIS al SON 21 6 2 PA saa aa aaasta A E 22 Chapter 7 aa tds 23 7 1 Wireless SOULE Sra AAA 23 Fail Wireless Basic CUM niisutada 24 ARAK a e A ETE 25 7 1 3 Wireless Advanced SEU usina 30 TL Load Baan E aa EAA NNE a adda ee O 30 749 O 31 721 Portakconfigurallohs muusus E 32 722 eS AUMentca ton PONCY sonans a a a a a 39 7 3 MACETA AAA A 41 TA Ml a nT nr oP TT 43 Za KI ODA keiss ta saaleala saal Vaatad E 47 LN APEC td ee er 48 7 32 MAUONEDEA ALAM ELE Sidi 49 7 6 ROG USAR DAN e 50 FON SMG Saa aal kama t 51 762 Detected Rogue AP LIS AM
30. Transfer Protocol Secure is enabled by default Secure Server Designate a secure server port for web server in HTTPS mode By default the Port port is 443 Server Port Designate a server port for web server in HTTP mode By default the port is 80 Session Set the session timeout time If you do nothing with the web management Timeout page within the timeout time the system will log out automatically Please login again if you want to go back to web management page 9 3 Management Access Management Access Control allows you to configure up to four MAC addresses of the hosts that are allowed to log in to the web management page of the EAP Click Add PC s MAC and the MAC address of the current host will be added to MAC address list Following is the page of Management Access 67 TP LINK amp 4P220 United States v Access Point v Quick Setup Cluster Wireless Monitoring Management System System Log Web Server Management Access LED ON OFF Management Access Control MAC Autherntication _ Enable MACI MAC2 MAC3 MAC4 Figure 9 7 Management Access Page MAC Check the box to enable MAC Authentication After MAC Authentication is Authentication enabled only the PCs in MAC address list can log in the device s web management page By default this function is disabled All PCs in LAN can log in and manage the device MAC1 MAC4 Enter the MAC addresses of the PCs which are authorized to log in the d
31. across the cluster to all Member EAPs NOTE By default EAP works in the Cluster management mode and its operating mode is Access Point You can remove the EAP from the cluster and switch it to Standalone mode if it is no longer planned to be managed by the cluster To form a cluster make sure the following prereguisites or conditions are satisfied 1 Be sure the EAPs forming a cluster are of the same model EAP120 cannot cluster with EAP220 2 Be sure all EAP devices prepared for a cluster are in the same network segment 3 Besurethenumber of EAPs in a cluster is no more than 24 4 Be sure all EAP devices prepared for a cluster have the same cluster name It is recommended to specify a new cluster name to prevent malicious EAPs from joining and even becoming Master of the cluster 13 The Cluster page is shown below TP LINK EAp220 United States Quick Setup Cluster Wireless Monitoring Management System Cluster Cluster Name Note EAP series products factory default Cluster Name is TP LINK Save Refresh Device Name Role Status Clients Settings EAP220_1 EAP220 00 0a eb a8 cc 07 192 168 0 3 Master connected 2 ska i EAP220 00 0a eb 16 e2 94 192 168 0 2 Member connected Figure 5 1 Cluster Page 5 1 Cluster Customize the cluster name in this zone The cluster name will be synchronized automatically across the cluster to all Member EAPs The EAPs have to have the same cluster name to form a
32. anagement Access LED ON OFF SNMP Agent SNMP Agent _ Enable SysContact SysName SysLocation Get Community Get Source Set Community Set Source Figure 9 10 SNMP Page SNMP Agent Enable SNMP Agent and the SNMP Agent will collect the information of this device and respond to information requests from one or more management systems SysContact Enter the textual identification of the contact person for this managed node SysName Enter an administratively assigned name for this managed node SysLocation Enter the physical location of this managed node Get Community Community refers to a host group aiming at network management Get Community only has the read only right of the device s SNMP information The community name can be considered a group password The default setting is public Get Source Defines the IP address for example 10 10 10 1 or subnet for management systems that can serve as Get Community to read the SNMP information of this device The format of subnet is IP address bit such as 10 10 10 0 24 The default is 0 0 0 0 which means all hosts can read the SNMP information of this device Set Community Set Community has the read and write right of the device s SNMP information Enter the community name that allows read write access to the device s SNMP information The community name can be considered a group password The default setting is private 70 Set Source Defines the IP addr
33. ated clients to the configured URL 33 Redirect URL Enter the URL that a newly authenticated client will be directed to Portal Select Local Web Portal the authentication login page will be provided by the Customization built in portal server The page configured below will be presented to users as the login page Words can befilled in Input Box 1 and Input Box 2 EI Term of Use Input Box 2 Y I accept the Term of Use Enter up to 31 characters as the title of the authentication login page in Input Box 1 like Guest Portal of TP LINK Enter the terms presented to users in Input Box 2 The terms can be 1 to 1023 characters long 34 e Local Password Portal Configuration Authentication Type Local Password Username Password Authentication Timeout 1 Hours D Redirect _ Enable Redirect URL Portal Customization Local Web Portal Username Password Term of Use Y I accept the Term of Use Figure 7 12 Portal Configuration_Local Password Authentication Select Local Password Type Username Enter the user name for local authentication Password Enter the password for local authentication Authentication After successful verification an authentication session is established Timeout Authentication Timeout decides the active time of the session Within active time the device keeps the authentication session open with the associated client To reopen the session the client need
34. duler Rogue AP Detection Settings Rogue AP Detection _ Enable Save Detected Rogue AP List a Scan Beacon E Signal Channel Security a Trusted AP List Channel Download Backup Trusted AP List Save Action DownLoad PC to AP O Backup AP to PC Source File Name Browse File Management Replace O Merge Figure 7 32 Rogue AP Detection Page 7 6 1 Settings Settings Rogue AP Detection Enable Figure 7 33 Enable Rogue AP Detection Rogue AP Detection Check the box to enable Rogue AP Detection then click Save 51 7 6 2 Detected Rogue AP List Information about the detected rogue APs is displayed in the list By default the status of the detected rogue AP is unknown You can click Known in Action column to move the AP to the Trusted AP List Detected Rogue AP List a Scan Beacon A Signal Action Band Channel Security Interval F8 1A 67 D3 36 80 TP LINK_9E7YTP 2 ON 100 lll F4 EC 38 22 D3 10 TP LINK_22D310 2 4 sil Figure 7 34 Detected Rogue AP List a Scan Click to scan rogue APs Make sure you have enabled Rogue AP Detection and saved the setting before you click the button Action Click Known to move the AP to the Trusted AP List After the configurations are saved the moved AP will not be displayed in the Detected Rogue AP List MAC The MAC address of the rogue AP SSID The SSID for the rogue AP Band Displays the frequency band which the wireless network of t
35. e SSID cannot communicate with each other Modify Click 4 to open the page to edit the parameters of SSID Click to delete the SSID Following is the detailed introduction of security mode WEP WPA Enterprise and WPA PSK e WEP WEP Wired Eguivalent Privacy based on the IEEE 802 11 standard is less safe than WPA Enterprise or WPA PSK NOTE WEP is not supported in 802 11n mode If WEP is applied in 802 11n mode the clients may not be able to access the wireless network If WEP is applied in 11b g n mode in the 2 4GHz frequency band or 11a n in the 5GHz frequency band the device may work at a low transmission rate Security Mode WEP v Type Auto Open System O Shared Key Key Selected Keyl v Wep Key Format ASCII O Hexadecimal Key Type e 64 Bit 128 Bit 152 Bit Key Value weppw Figure 7 5 Security Mode_WEP Type Select the authentication type for WEP e Auto The default setting is Auto which can select Open System or Shared Key automatically based on the wireless station s capability and request e Open System After you select Open System host in the wireless network can pass the authentication and associate with the wireless network without password However correct password is necessary for data transmission e Shared Key After you select Shared Key host in the wireless network has to input password to pass the authentication or it cannot associate with the wireless network or
36. e below will be presented to users Words can be filled in Input Box 1 and Input Box 2 Username Password Term of Use Input Box 2 Y I accept the Term of Use Enter up to 31 characters as the title of the authentication login page in Input Box 1 like Guest Portal of TP LINK Enter the terms presented to users in Input Box 2 The terms can be 1 to 1023 characters long 2 External Web Portal Portal Configuration Authentication Type External Radius Serve w Radius Server Ip Port Radius Password Authentication Timeout 1 Hours D Redirect _ Enable Redirect URL Portal Customization External Web Portal v External Web Portal URL Figure 7 14 Portal Configuration_External RADIUS Server_External Web Portal 38 Authentication Type RADIUS Server IP Port RADIUS Password Authentication Timeout Redirect Redirect URL Portal Customization External Web Portal URL Select External RADIUS Server Enter the IP address of the RADIUS server Enter the port for authentication service Enter the password to log in to the RADIUS server After successful verification an authentication session is established Authentication Timeout decides the active time of the session Within active time the device keeps the authentication session open with the associated client To reopen the session the client needs to log in the web authentication page and enter the user name and passwo
37. e display of Scheduler Association is based on your option here Scheduler Profile Configuration Follow the steps below to add rules 44 Step 1 Clik Create Profiles two tables will be shown Scheduler Profile Configuration Add a Profile Profile Name Modify Profile Name Figure 7 24 Scheduler Profile Configuration Step 2 Click Add a Profile and input a profile name for the rule Scheduler Profile Configuration Add a Profile Profile Name Modify Profile Name Figure 7 25 Add a Profile Step 3 Click 43 Adda Item and configure the recurring schedule for the rule 45 Add an Item mm End Time Modify Time Add an Item Sap End Time Modify Time Scheduler Profile Configuration Q Add a Profile Add an Item Day of Start Week Time End Time Modify Profile Name Modify Profile Name Weekdays 4 Y Saturday 4 W Day Weekday gt Weekend Every Day Custom Mon Tue Wed Thu Fri M Sat Sun Time _ 24 hours Start Time 15 v End Time 18 v o Figure 7 26 Add a Rule e Scheduler Association This zone will display different contents based on your selection of association mode in Settings 1 Associated with SSID Scheduler Association SSID Name Profile Name Action TP LINK 2 4GHz 16E290 2 4G Radio Off TP LINK_5GHz_16E291 5G Radio Off Figure 7 27 Scheduler Association_Associated with SSID SSID Name Displa
38. eans no upgrade Figure 7 6 Security Mode_WPA Enterprise Version Select one of the following versions e Auto Select WPA PSK or WPA2 PSK automatically based on the wireless station s capability and request e WPA PSK Pre shared key of WPA e WPA2 PSK Pre shared key of WPA2 Encryption Select the encryption type including Auto TKIP and AES The default setting is Auto which can select TKIP Temporal Key Integrity Protocol or AES Advanced Encryption Standard automatically based on the wireless station s capability and request AES is more secure than TKIP and TKIP is not supported in 802 11n mode It is recommended to select AES as the encryption type RADIUS Server Enter the IP address port of the RADIUS server IP Port RADIUS Enter the password to access the RADIUS server Password 28 Group Key Update period NOTE Specify the group key update period in seconds The value can be either 0 or at least 30 0 means no update Encryption type TKIP is not supported in 802 11n mode If TKIP is applied in 802 11n mode the clients may not be able to access the wireless network of the EAP If TKIP is applied in 11b g n mode in the 2 4GHz frequency band or 11a n in the 5GHz frequency band the device may work ata low transmission rate e WPA PSK Based on pre shared key security mode WPA PSK is characterized by high safety and simple configuration which suits for common households and small business WPA P
39. ere are only valid for a specific EAP 4 Click to configure the parameters of the EAP W Click to remove the EAP from the cluster thus the management mode of the removed EAP will switch to Standalone 1 Click to reboot the EAP 15 Click 14 to configure the wireless parameters of a specific EAP The following content will be shown AP List Refresh Device Name Status Clients Settings Device Name Radio IP Settings Load Balance SSID override Device Name EAP220 00 0a eb 16 e2 9 Figure 5 4 Configure the Wireless Parameters Device Name You can rename the EAP like EAP220_1 to distinguish it from others The name can be 1 to 31 characters long Then click OK AP List e Refresh Device Name Status Clients Settings Device Name Radio IP Settings Load Balance SSID override Device Name EAP220 1 Figure 5 5 Rename the Device 16 e Radio Refresh Device Name Status Clients Settings Device Name Radio IP Settings Load Balance SSID override Mode 802 11b g n Channel Width 20 40MHz Channel Auto Tx power 20 dBm 1 30 Figure 5 6 Radio 2 4GHz 5GHz Select a frequency band Mode Choose the protocol standard for the wireless network Wireless network created by EAP120 is able to operate in the 2 4GHz frequency while for EAP220 the wireless network can work within 2 4GHz and 5GHz frequency Both EAP120 and EAP220 support 802 11b g n 802 11b g
40. es products factory default Cluster Name is TP LINK Save Refresh Device Name MAC Status Clients Settings EAP220_1 EAP220 00 0a eb a8 cc 07 192 168 0 3 Master connected 0 4 TT EAP220 00 00 00 00 00 2 EAP220 00 0a eb 16 e2 94 192 168 0 2 Member connected 0 4 NE 7N Figure 4 3 Delete an EAP from a Cluster 1 Select the specified EAP in the AP list and click the icon in the Settings column 2 Ifthe deleted EAP is a Member shown in the Role column in the cluster the mode will switch to Standalone To know how to log in to the Member s web management page refer to Chapter 3 Getting Started with the EAP If the deleted EAP is a Master in the cluster the management mode will switch to Standalone and the login window will pop up NOTE For detailed information of the Master EAP and Member EAP please refer to Chapter 5 Cluster 4 2 2 Switch to Cluster Log in to the web management page click Network in the navigation tab when the EAP works in Standalone mode The following content will be displayed 11 TP LINK Eap220 United States Network Wireless Monitoring Management System Cluster Mode Standalone v Standalone IP Settings Dynamic O Static Fallback IP Y Enable DHCP Fallback IP 192 168 0 254 DHCP Fallback IP MASK 255 255 255 0 DHCP Fallback Gateway Figure 4 4 Join a Cluster 1 Select the Mode as Cluster and enter a cluster name to join the cluster 2 Click Save and the EA
41. ess for example 10 10 10 1 or subnet for management systems that can serve as Set Community to read and write the SNMP information of this device The format of subnet is IP address bit such as 10 10 10 0 24 The default is 0 0 0 0 which means all hosts can read and write the SNMP information of this device NOTE Defining community can allow management systems in the same community to communicate with the SNMP Agent The community name can be seen as the shared password of the network hosts group Thus for the safety we suggest modifying the default community name before enabling the SNMP Agent service If the field of community is blank the SNMP Agent will not respond to any community name 71 10 1 10 2 Chapter 10 System System page is mainly used to configure some basic information like user account and time and realize functions including reboot reset backup restore and upgrade the device User Account You can change the user password to protect your device from unauthorized login We recommend that you change the default user password on the very first system setup TP LINK EAP220 United States v Access Point v Quick Setup Cluster Wireless Monitoring Management User Account Time Settings Reboot Reset Backup amp Restore Firmware Upgrade Account Management Old User Name Old Password New User Name New Password Confirm New Password Figure 10 1 User Account Page Old U
42. et Chapter 2 Typical Topology Typical topology for the EAP is described below Lo LO Liig Member EAP Member EAP E e a ee a el Router Figure 2 1 Typical Topology The EAP120 and EAP220 provide two management modes Cluster and Standalone By default the management mode is Cluster In this mode all EAPs in the same LAN will form a cluster and a Master EAP will be elected among them to manage other EAPs called Member EAPs A DHCP server is reguired in the local network to assign IP addresses to the EAPs A router usually acts as the DHCP server Typically a Power over Ethernet PoE switch can be used to provide power to each EAP otherwise power adapter must be used Chapter 3 Getting Started with the EAP The following content will guide you to guickly set up a wireless network connection with several EAPs and login to the management page to configure the EAPs The management host can be connected to the Master EAP wirelessly or with wires Wireless Login is conveniently recommended Option 1 Wireless Login Member EAP Cluster Management Host Figure 3 1 Sample Network Diagram for Wireless Login Step 1 Power on Power on the EAPs The EAP with system initialization completed first will be elected as the Master EAP
43. evice 9 4 LED ON OFF Following is the page of LED ON OFF By default the LED is on TP LINK EAP220 United States v Access Point v Quick Setup Cluster Wireless Monitoring Management System System Log Web Server Management Access LED ON OFF LED ON OFF LED Y Enable Figure 9 8 LED ON OFF 9 5 SSH This device supports the SSH Server function that allows users to login and manage it through SSH connection on the SSH client software 68 SSH Secure Shell is a security protocol established on application and transport layers SSH encrypted connection is similar to a telnet connection but essentially the old telnet remote management method is not safe because the password and data transmitted with plain text can be easily intercepted SSH can provide information security and powerful authentication when you login this device remotely through an insecure network environment It can encrypt all the transmission data and prevent the information in remote management from being leaked Following is the page of SSH TP LINK Eap220 United States v Access Point v Quick Setup Cluster Wireless Monitoring Management System Log Web Server Management Access LED ON OFF SSH Server Server Port 22 22 1025 65535 SSH Login _ Enable Figure 9 9 SSH Page Server Port Enter the server port By default itis port 22 SSH Login Check the box to enable SSH Server By default it is disabled 9
44. gure 8 10 SSID List SSID Name Displays the SSID name If you want to modify it please refer to 7 1 2 SSIDs VLAN ID Displays the VLAN which the SSID belongs to If you want to change the VLAN ID please refer to 7 1 2 SSIDs Num of Clients Displays the number of clients connected to the SSID If you want to get more information about these clients please refer to 7 1 2 SSIDs SSID Broadcast Displays the enabling or disabling of SSID broadcast If you want to modify it please refer to 7 1 2 SSIDs Band Displays the frequency band the wireless network is operating at 60 Security Displays the security mode the wireless network is applying If you want to modify it please refer to 7 1 2 SSIDs Portal Displays the enabling or disabling of Portal If you want to modify it please refer to 7 1 2 SSIDs MAC Filter Displays the enabling or disabling of MAC Filtering If you want to modify it please refer to 7 1 2 SSIDs Isolation Displays the enabling or disabling of SSID Isolation If you want to modify it please refer to 7 1 2 SSIDs Down Byte Displays the throughput of the downstream data Up Byte Displays the throughput of the upstream data 8 3 Client From User List you can monitor the status of all the clients connected to the clustered EAPs including those who are authenticated TP LINK EAP220 United States v Access Point v Quick Setup Cluster Wireless Monitoring Management System Client
45. he rogue AP operates at Channel The channel on which the rogue AP is currently broadcasting Security Displays the enabling or disabling of the security mode of the wireless network Beacon The beacon interval used by the rogue AP Interval Beacon frames are transmitted by an AP at regular intervals to announce the existence of the wireless network The default behavior is to send a beacon frame once every 100 milliseconds or 10 per second Signal The strength of the radio signal emitting from the rogue AP 7 6 3 Trusted AP List Information about the trusted APs is displayed in the list 52 Trusted AP List Action Action MAC SSID Band Channel Security Band Channel Security 40 16 9F BF 56 12 TP LINK 2 4GHz BF5612 2 4 ON B0 48 7A DB 8A A5 TP LINK_2 4GHz_DB8AA5 Figure 7 35 Trusted AP List Click Unknown to move the AP out of the Trusted AP List The MAC address of the trusted AP The SSID for the trusted AP Displays the frequency band which the wireless network of the trusted AP operates at The channel on which the trusted AP is currently broadcasting Displays the enabling or disabling of the security mode of the wireless network 7 6 4 Download Backup Trusted AP List You can importa list of trusted APs from a saved list which is acquired from another AP or created from a text file The AP whose MAC address is in the Trusted AP List will not be detected as a rogue You can al
46. ifferent In Cluster mode there is a Cluster tab while in Standalone mode there is a Network tab as shown below Cluster The web management page of the EAP in Cluster mode TP LINK EaP220 United States Quick Setup Cluster Cluster Cluster Name Note EAP series products factory default Cluster Name is TP LINK Refresh Device Name Role Status Clients Settings EAP220_1 EAP220 00 0a eb a8 cc 07 192 168 0 3 Master connected 4 W 2 A EAP220 00 Oa eb 16 e2 94 192 168 0 2 Member connected Figure 4 1 Web Management Page in Cluster Mode Standalone The web management page of the EAP in Standalone mode TP LINK amp 220 Network Nirele Monitoring V gement System Cluster Mode Standalone Cluster Name TP LINK IP Settings Dynamic O Static Fallback IP Y Enable DHCP Fallback IP 192 168 0 254 DHCP Fallback IP MASK 25 2 ID 2 IO DHCP Fallback Gateway Figure 4 2 Web Management Page in Standalone Mode 10 4 2 Mode Switching The management mode Cluster and Standalone can be switched with each other on every single EAP The switching operation is shown below 4 2 1 Switch to Standalone Log in tothe web management page click Cluster in the navigation tab when the EAP works in Cluster mode AP List will be displayed as shown below TP LINK EApP220 United States Quick Setup Cluster Wireless Monitoring Management System Cluster Cluster Name Note EAP seri
47. lowing content will be shown AP List Refresh Device Name Status Clients Settings Device Name Radio IP Settings Load Balance SSID override Overrides Action Enable Enable on this AP VLAN 0 4094 SSID Password WPA2 PSK Figure 5 9 SSID Override Enable Check the box to enable SSID Override VLAN Check the box to enable VLAN and set a VLAN ID ranges from 0 to 4094 to the wireless network VLAN 0 means VLAN function is disabled Wireless networks with the same VLAN ID are grouped to a VLAN SSID Enter an easily identified SSID to override the SSID shared with other clustered EAPs Password Set a WPA2 PSK password to access the wireless network Only previous passwords with PSK encryption can be overridden 20 Chapter 6 Network On Network page you can switch the EAP s management mode to Cluster and configure its IP address Network page is only available in Standalone mode TP LINK EAP220 United States Cluster Mode Cluster Name IP Settings Fallback IP DHCP Fallback IP Wireless Monitoring Management System Standalone TP LINK Dynamic O Static Y Enable 192 168 0 254 DHCP Fallback IP MASK 255 255 299 0 DHCP Fallback Gateway 6 1 Cluster Cluster Mode Cluster Name Mode Cluster Name Figure 6 1 Network Page Standalone TP LINK Figure 6 2 Switch to Cluster Mode Select Cluster from the drop do
48. measured in slots Valid values for AIFS are from 1 to 15 An input to the algorithm that determines the initial random backoff wait time window for retry of a transmission The upper limit in milliseconds for the doubling of the random backoff value This parameter applies only to traffic flowing from EAP to the client station This value specifies in milliseconds the maximum burst length allowed for packet bursts on the wireless network A packet burst is a collection of multiple frames transmitted without header information The decreased overhead results in higher throughput and better performance Valid values for Maximum Burst are from 0 to 8192 and should be exactly divided by 32 DCA Parameters Station EDCA parameters affect traffic flowing from the client station to the EAP device Station EDCA Parameters Queue Data O Voice Data 1 Video Data 2 Best Effort Data 3 Background No Acknowledgement Arbitration Minimum Maximum TXOP Limit Inter Frame Space Contention Window Contention Window 2 3 v 7 v 2 Fi 15 15 Ls _ Enable Unscheduled Automatic Power Save Delivery Y Enable Figure 7 31 Station EDCA Parameters 49 Oueue Arbitration Inter Frame Space Minimum Contention Window Maximum Contention Window TXOP Limit No Acknowledgement Unscheduled Automatic Power Save Delivery Displays the transmission queues Data 0 gt Data 1 gt Data 2 gt Data 3
49. nagement and maintenance 9 1 System Log System log records information about hardware software as well as system issues and monitors system events With the help of system log you can get informed of system running status and detect the reasons for failure Following is the page of System Log TP LINK EAP220 United States v Access Point v Quick Setup Cluster Wireless Monitoring Management System Log Web Server Management Access LED ON OFF Log List Refresh Device Name Type Log Content 20 00 0a eb 16 v R from server 192 16 2014 01 01 00 00 15 EAP220 00 0a eb 16 00 0A EB 16 E2 98 DHCP NOTICE DHCPC Recv OFFER from server 192 168 0 1 e2 98 with ip 192 168 0 2 20 6h 16 i Wi A at in 1970 01 01 00 00 15 EAP220 00 Da eb 16 00 0A EB 16 E2 98 DHCP NOTICE DHCPC Send DISCOVER with request ip 0 0 0 0 22 98 and unicast flag 0 220 00 0a eb 16 1970 01 01 00 00 10 age 00 0A EB 16 E2 98 OTHER System started Log Settings Enable Auto Mail Auto Mail Feature Enable Server _ Enable Server Enable Nvram Enable Nvram Figure 9 1 System Log Page 9 1 1 Log List From Log List you can view detailed information about hardware software system issues and so On 64 Log List Refresh Index Device Name Log Content DHCPC Recv OFFER from server 192 168 0 1 with ip 192 168 0 2 EAP220 00 0a eb 16 2014 01 01 00 00 15 27 08 00 0A EB 16 E2 98 NOTICE 2
50. nt System Client AP List Refresh Device Name Num of Clients EAP220_1 00 0A EB 16 E2 90 EAP220 00 0a eb 16 e2 98 00 0A EB 16 E2 98 Device Information Wireless Settings LAN Information Client LAN Traffic Radio Traffic Device Name EAP220_1 Device Model EAP220 Firmware Version 1 0 0 Build 20140910 Rel 58470 System Time 2014 01 01 00 21 31 Uptime O days 00 21 34 CPU Memory Figure 8 1 AP Monitoring 55 8 1 1 AP List AP List Device Name Num of Clients EAP220_1 00 0A EB 16 E2 90 EAP220 00 0a eb 16 e2 98 00 0A EB 16 E2 98 Figure 8 2 AP List Device Name Displays the device name If you want to customize the device name please refer to 5 2 AP List Device Name MAC Displays the MAC address of the EAP Num of Clients Displays the number of clients connected to the EAP e Device Information Device Information Wireless Settings LAN Information Client LAN Traffic Radio Traffic Device Name EAP220_1 Device Model EAP220 Firmware Version 1 0 0 Build 20140822 Rel 42505 System Time 2014 01 01 00 22 03 Uptime O days 00 20 31 CPU Memory Figure 8 3 Device Information Device Name Displays the device name If you want to customize the device name please refer to 5 2 AP List Device Name Device Model Displays the model of the device Firmware Displays the firmware version of the device If you want to upgrade the firmware Version please refer to 10
51. ntication policy Leaving the field empty means all IP addresses can access the specific resources Source IP Range Destination IP Enter the destination IP address and subnet mask for free authentication policy Range Leaving the field empty means all IP addresses can be visited Source MAC Enter the source MAC address of the clients who can enjoy the free authentication policy Leaving the field empty means all MAC addresses can access the specific resources Destination Enter the destination port for free authentication policy Leaving the field Port empty means all ports can be accessed Status Check the box to enable the policy Click the button OK in Figure 7 16 and the policy is successfully added as Figure 7 17 shows Free Authentication Policy Q add Destination Policy Name Source IP Range Destination IP Range Source MAC Status Settings Aw Policy 1 192 168 2 0 24 Enable Figure 7 17 Add Free Authentication Policy 40 Here is the explanation of Figure 7 17 The policy name is Policy 1 Clients with IP address range 192 168 2 0 24 are able to visit IP range 10 10 10 0 24 Policy 1 is enabled Click 4 to edit the policy Click to delete the policy 7 3 MAC Filtering MAC Filtering uses MAC addresses to determine whether one host can access the wireless network or not Thereby it can effectively control the user access in the wireless network TP LINK eAp220 United States v Access Point v
52. o in Cluster mode 7 1 1 Wireless Basic Settings in Standalone mode Displays the maximum data rate at which the device should transmit wireless packets Displays the maximum average transmit power of the device If you want to change it refer to 5 2 AP List Radio in Cluster mode 7 1 1 Wireless Basic Settings in Standalone mode 57 e LAN Information Device Information Wireless Settings LAN Information Client LAN Traffic Radio Traffic MAC Address IP Address Subnet Mask LAN Port MAC Address IP Address Subnet Mask LAN Port e Client 00 04 EB 16 E2 90 192 168 0 4 299 293 2033 0 100Mbps FD Figure 8 5 LAN Information Displays the MAC address of the device Displays the IP address of the device Displays the subnet mask of the device Displays the maximum transmission rate and duplex mode half duplex or full duplex of the port Device Information Wireless Settings LAN Information Client LAN Traffic Radio Traffic SSID SNR dB CCO Rate Mbps Down Byte Up Byte Active Time TP 1 14 F4 2A 3B D7 E9 21 52k 7k O days 00 02 12 MAC SSID SNR dB CCQ Rate Mbps Down Byte Up Byte Active Time Figure 8 6 Client Displays the MAC address of the client of the AP selected in AP List Displays the SSID the client is connected to Signal to Noise Ratio the power ratio between the received wireless signal strength and the environmental noise
53. ortal Authenticated Guest displays information about clients that have set up valid authentication Portal Authenticated Guest e Refresh Access Point SNR dB CCQ Rate Mbps Down k Up k Active Time Action Figure 8 13 Portal Authenticated Guest MAC Displays the MAC address of the authenticated client Access Point Displays the name of the device to which the authenticated client is connected 62 SSID SNR dB CCQ Rate Mbps Down Byte Up Byte Active Time Action Displays the SSID the authenticated client is connected to Signal to Noise Ratio the power ratio between the received wireless signal strength and the environmental noise strength The bigger the value of SNR the better network performance the device provides Displays the Client Connection Quality CCQ of the authenticated client CCQ refers to the ratio of current effective transmission bandwidth and the theoretically maximum available bandwidth CCQ reflects the actual link condition Displays the data rate at which the authenticated client transmits wireless packets Displays the throughput of the downstream data Displays the throughput of the upstream data Displays the amount of time the authenticated client has been connected to the root AP Click Unauthorize to stop giving authorization to the clients connected to the wireless network 63 Chapter 9 Management Management page is mainly used for device ma
54. rd Enter the password of the sender s email address e Confirm Password Enter the password again for confirmation Time Mode System logs can be sent at specific time or time interval e Fixation Time Set a fixed time for example 15 00 The recipient will receive the system logs sent by the device at 15 00 every day e Period Time Set a time interval for example 5 hours The recipient will receive the system logs sent by the device every 5 hours Enable Server System logs can also be sent to a server After Auto Mail Feature is enabled the following content will be shown Enable Server Y Enable Server System Log Server IP 0 0 0 0 System Log Server Port 514 Figure 9 5 Enable Server System Log Server IP Enter the IP address of the remote server System Log Server Port Enter the port of the remote server Enable Nvram By default Nvram is disabled Check the box to enable Nvram system logs will be saved after power supply is cut Web Server You can log in web management interface thereby manage and maintain the device Following is the page of Web Server 66 TP LINK amp 4 220 United States Access Point v Quick Setup Cluster Wireless Monitoring Management System System Log Web Server Management Access LED ON OFF Web Server HTTPS Y Enable Secure Sever Port 443 Server Port 80 Session Timeout 15 minutes Figure 9 6 Web Server Page HTTPS HTTPS Hypertext
55. rd again once authentication timeout is reached By default authentication timeout is one hour Select Custom from the drop down list to customize the parameter Disable by default Redirect specifies that the portal should redirect the newly authenticated clients to the configured URL Enter the URL that a newly authenticated client will be directed to Select External Web Portal Enter the authentication login page s URL which is provided by the remote portal server 7 2 2 Free Authentication Policy Free Authentication Policy allows clients to access network resources for free On the lower part of the Portal page you can configure and view free authentication policies Free Authentication Policy Policy Name add Source IP Range Destination IP Range Source Mac E Status Settings Figure 7 15 Free Authentication Policy 39 Free Authentication Policy Policy Name Policy Name Source IP Range Destination IP Range Source MAC Destination Port Click add to add a new authentication policy and configure its parameters add Destination Source IP Range Destination IP Range Source MAC Status Settings Policy 1 192 168 2 0 24 Optional 10 10 10 0 24 Optional Optional Optional Status Y Enable Figure 7 16 Configure Free Authentication Policy Policy Name Enter a policy name Enter the source IP address and subnet mask of the clients who can enjoy the free authe
56. reshold Beacon Interval DTIM Period RTS Threshold Fragmentation Threshold ms 40 100 1 255 1 2347 256 2346 works only in 11b g mode Figure 7 8 Wireless Advanced Settings Beacons are transmitted periodically by the device to announce the presence ofa wireless network for the clients Beacon Interval value determines the time interval of the beacons sent by the device You can specify a value from 40 to 100 The default value is 100 milliseconds This value indicates the number of beacon intervals between successive Delivery Traffic Indication Messages DTIMs and this number is included in each Beacon frame A DTIM is contained in Beacon frames to indicate whether the access point has buffered broadcast and or multicast data for the client devices Following a Beacon frame containing a DTIM the access point will release the buffered broadcast and or multicast data if any exists You can specify the value between 1 255 Beacon Intervals The default value is 1 indicating the DTIM Period is the same as Beacon Interval An excessive DTIM period may reduce the performance of multicast applications It is recommended to keep it by default When the RTS threshold is activated all the stations and APs follow the Request to Send RTS protocol When the station is to send packets it will send a RTS to AP to inform the AP that it will send data After receiving the RTS the AP notices other stations in the same wireless
57. s to log in the web authentication page and enter the user name and password again once authentication timeout is reached By default authentication timeout is one hour Select Custom from the drop down list to customize the parameter Redirect Disable by default Redirect specifies that the portal should redirect the newly authenticated clients to the configured URL 35 Redirect URL Enter the URL that a newly authenticated client will be directed to Portal Select Local Web Portal the authentication login page will be provided by the Customization built in portal server The page below will be presented to users Words can be filled in Input Box 1 and Input Box 2 Doo Username Password Term of Use Input Box 2 Y I accept the Term of Use Enter up to 31 characters as the title of the authentication login page in Input Box 1 like Guest Portal of TP LINK Enter the terms presented to users in Input Box 2 The terms can be 1 to 1023 characters long External RADIUS Server External RADIUS Server provides two types of portal customization Local Web Portal and External Web Portal The authentication login page of Local Web Portal is provided by the built in portal server of the EAP as Figure 7 13 shown The authentication login page of External Web Portal is provided by external portal server as Figure 7 14 shown 36 1 Local Web Portal Portal Configuration Authentication Type External Radi
58. ser Enter the present user name and password of the admin account to get the Name Password permission of modification New User Enter a new user name and password for the admin account Both values are Name Password case sensitive up to 64 characters and with no space Confirm New Enter the new password again Password Time Settings System time represents the device system s notion of the passing of time System time is the standard time for Scheduler and other time based functions You can manually set the system time configure the system to acquire its time settings from a preconfigured NTP server or synchronize the system time with the PC s clock The device supports DST daylight saving time 72 TP LINK esp220 United States v Access Point v Quick Setup Cluster Wireless Monitoring Management User Account Time Settings Reboot Reset Backup amp Restore Firmware Upgrade Time Settings Time zone GMT 08 00 Beijing Hong Kong Perth Singapore Date 01 01 2014 MM DD YYYY Time 00 vw 39 w 54 w HH MM SS Primary NTP Server optional Secondary NTP Server optional Get GMT Synchronize PC s Clock Daylight Saving Daylight Saving _ Enable Mode Predefine Country European Figure 10 2 Time Settings 10 2 1 Time Settings Time Settings Time zone GMT 08 00 Beijing Hong Kong Perth Singapore Date 01 01 2014 MM DD YYYY Time 00 wi 22 w 55 w HH MM SS Primary NTP Server op
59. so backup a list and save it in your PC Download Backup Trusted AP List Save Action Source File Name File Management DownLoad PC to AP Backup AP to PC Browse Replace Merge Figure 7 36 Download Backup Trusted AP List Save Action Select Download PC to AP to import a trusted AP list to the device Select Backup AP to PC to copy the trusted AP list to your PC Source File Click Browse and choose the path of a saved trusted AP list or to save a Name trusted AP list File Select Replace to import the list and replace the contents of the Trusted AP Management List Select Merge to import the list and add the APs in the imported file to the APs currently shown in the Trusted AP List 53 NOTE EAP device does not have any control over the APs in the Detected Rogue AP List 54 8 1 Chapter 8 Monitoring On Monitoring page you can monitor the network running status and statistics based on APs SSIDs and Clients AP AP List on the Monitoring page displays the numbers of EAP devices in a cluster the MAC address of the EAPs the number of clients or the corresponding parameters of a standalone AP Select an AP in the AP List below which the AP s detailed information will be shown including Device Information Wireless Settings LAN Information Client LAN Traffic and Radio Traffic TP LINK esp220 United States v Access Point v Quick Setup Cluster Wireless Monitoring Manageme
60. strength The bigger the value of SNR the better network performance the device provides Displays the wireless Client Connection Quality CCQ CCQ refers to the ratio of current effective transmission bandwidth and the theoretically maximum available bandwidth CCQ reflects the actual link condition Displays the data rate at which the client transmits wireless packets Displays the throughput of the downstream data Displays the throughput of the upstream data Displays the amount of time the client has been connected to the device 58 e LAN Traffic Click LAN Traffic and you can monitor the data transmission status of the LAN port Device Information Wireless Settings Wireless Signal Quality LAN Information Client Lan Traffic Radio Traffic Rx Packets 21482 Tx Packets 27504 Rx Bytets 9331292 Tx Bytets 91586529 Rx Dropped Tx Dropped Packets Packets Fx Errors Tx Errors Figure 8 7 LAN Traffic Rx Tx Packets Displays the total amount of packets received sent on the LAN port Rx Tx Bytes Displays the total amount of data in bytes received sent on the LAN port Rx Tx Dropped Displays the total amount of dropped packets received sent on the LAN Packets port Rx Tx Errors Displays the total amount of error packets received sent on the LAN port e Radio Traffic Click Radio Traffic and you can monitor the data transmission status of the wireless network Device Information Wireless Settings LAN
61. ter the transmit power value By default the value is 20 The maximum transmit power may vary among different countries or regions If the maximum transmit power is set to be larger than local regulation allows the maximum Tx power regulated will be applied in actual situation NOTE In most cases it is unnecessary to select maximum transmit power Selecting larger transmit power than needed may cause interference to neighborhood Also it consumes more power and will reduce longevity of the device Select a certain transmit power is enough to achieve the best performance 7 1 2 SSIDs SSIDs can work together with switches supporting 802 10 VLAN The EAP can build up to eight virtual wireless networks per radio for users to access At the same time it adds different VLAN 25 tags to the clients which connect to the corresponding wireless network It supports maximum 8 VLANs per radio The clients in different VLAN cannot directly communicate with each other Clients connected communicate with to the device via cable do not belong to any VLAN Thus wired client can all the wireless clients despite the VLAN settings Click 4 in the Modify column the following content will be shown SSID Name SSID Name Wireless VLAN ID SSID Broadcast Security Mode Portal SSID Isolation Add SSID Name Wireless VLAN ID SSID Broadcast Security Mode Portal Add Wireless VLAN ID SSID Broadcast
62. tional Secondary NTP Server optional Get GMT Synchronize PC s Clock Figure 10 3 Time Settings Get GMT Click the button and the device will obtain GMT time from NTP server IP address of the NTP server has to be filled in Click the button your PC s time will be obtained as the device s system time Time zone Select your local time zone from the drop down list Date Set the current date in format MM DD YYYY For example for November 25 2014 enter 11 25 2014 in the field 73 Time Specify the device s time Select the number from the drop down list in time format HH MM SS Primary Secondary If you ve selected Get GMT from an NTP server please input the primary NTP Server NTP sever address and an alternative NTP server address 10 2 2 Daylight Saving Daylight Saving Daylight Saving _ Enable Mode Predefine Country European v Figure 10 4 Daylight Saving Daylight Saving Enable or disable the DST DST is disabled by default Mode Options include Predefined Mode Recurring Mode and Date Mode Please refer to the following content for more information Predefined Mode Mode Predefined Mode O Recurring Mode gt Date Mode Predefine Country USA European Australia New Zealand Figure 10 5 Predefined Mode Mode Select Predefined Mode Predefine Country Select a predefined DST configuration Europe is the predefined country by default e USA Second Sunday in March
63. us Serve w Radius Server Ip Port Radius Password Authentication Timeout 1 Hours D Redirect _ Enable Redirect URL Portal Customization Local Web Portal Username Password Term of Use Vi I accept the Term of Use Figure 7 13 Portal Configuration_External RADIUS Server_Local Web Portal Authentication Type RADIUS Server IP Port RADIUS Password Authentication Timeout Redirect Select External RADIUS Server Enter the IP address of the RADIUS server Enter the port for authentication service Enter the password to log in to the RADIUS server After successful verification an authentication session is established Authentication Timeout decides the active time of the session Within active time the device keeps the authentication session open with the associated client To reopen the session the client needs to log in to the web authentication page and enter the user name and password again once authentication timeout is reached By default authentication timeout is one hour Select Custom from the drop down list to customize the parameter Disable by default Redirect specifies that the portal should redirect the newly authenticated clients to the configured URL 37 Redirect URL Enter the URL that a newly authenticated client will be directed to Portal Select Local Web Portal the authentication login page will be provided Customization by the built in portal server The pag
64. val ms 40 100 DTIM Period 1 255 RTS Threshold 1 2347 Fragmentation Threshold 256 2346 works only in 11b g mode Figure 7 1 Wireless Page 7 1 Wireless Settings Following is the page of Wireless Settings 23 TP LINK amp apP220 United States v Access Point Quick Setup Cluster Wireless Monitoring Management Wireless Settings MAC Filtering Scheduler Rogue AP Detection 2 4GHz 5GHz Wireless Basic Settings 2 4GHz Wireless Radio vj Enable Save dd SSID Name Wireless VLAN ID SSID Broadcast Security Mode Portal SSID Isolation Modify 1 TP LINK 2 4GHz 16E290 Enable Disable Disable 4 VI Wireless Advanced Settings Beacon Interval ms 40 100 DTIM Period 1 255 RTS Threshold 1 2347 Fragmentation Threshold 256 2346 works only in 11b g mode Figure 7 2 Wireless Settings Page 2 4GHz 5GHz Select a frequency band 7 1 1 Wireless Basic Settings In Cluter mode parameters in Figure 7 3 including Wireless Mode Channel Width Channel and Tx Power are not available Wireless Basic Settings 2 4GHz Wireless Radio V Enable Wireless Mode 802 11b g n mixed Channel Width 20 40MHz Channel Auto Tx power 20 Figure 7 3 Wireless Basic Settings 24 2 4GHz Wireless Check the box to enable 2 4GHz Wireless Radio Radio Wireless Mode Select the protocol standard for the wireless network Wireless network created by EAP120 is able to operate in the 2 4GHz
65. wn list and click Save the management mode will be changed to Cluster Enter the name of the cluster the EAP is planned to join 21 6 2 IP Settings IP Settings Dynamic Static Fallback IP M Enable DHCP Fallback IP 192 168 0 254 DHCP Fallback IP MASK Pl PP a n AH DHCP Fallback Gateway Figure 6 3 IP Settings Dynamic Static By default the EAP device obtains an IP address from a DHCP server typically a router Select Static to configure IP address manually Fallback IP If the EAP fails to get a dynamic IP address from a DHCP server within ten seconds the fallback IP will work as the IP address of the device After that however the device will keep trying to obtain an IP address from the DHCP server until it succeeds DHCP Fallback Enter the fallback IP IP mask IP IP MASK DHCP Fallback Enter the fallback gateway Gateway 22 Chapter 7 Wireless Wireless page consisting of Wireless Settings Portal MAC Filtering Scheduler QoS and Rogue AP Detection is shown below TP LINK amp apP220 United States v Access Point v O Quick Setup Cluster Wireless Monitoring Management Wireless Settings Portal MAC Filtering Scheduler Rogue AP Detection 2 4GHz 5GHz Wireless Basic Settings 2 4GHz Wireless Radio v Enable SSID Name Wireless VLAN ID SSID Broadcast Security Mode Portal SSID Isolation 1 TP LINK_2 4GHz_16E290 Enable Disable Disable Wireless Advanced Settings Beacon Inter
66. wse and choose the firmware file Finally click Upgrade to upgrade the devices NOTE 1 Please select the proper software version that matches your hardware to upgrade 2 Toavoid damage please do not turn off the device while upgrading 3 After upgrading the device will reboot automatically 77 Appendix A Specifications HARDWARE FEATURES Interface 10 100 1000Mbps Ethernet port RJ 45 Console port RJ 45 Power connector DC 2 Kensington lock slot Buttons RESET ON OFF for power supply PoE Compatible 802 3af Power Supply PoE 36 57VDC 0 2A PoE 36 57VDC 0 4A Max or Max or External External 12VDC 1 5A Power 12VDC 1A Power Supply Supply Maximum Power Consumption 4 4W 2 4dBi Embedded 4 4dBi Embedded Ceiling Wall mounting kits included Certification CE FCC RoHS Max RF Transmission Power 23dBm 2 4GHz 23dBm 5GHz 20dBm Multiple SSIDs Up to eight per radio WEP Wireless Security WPA WPA2 personal WPA WPA2 enterprise 78
67. ys the SSID of an individual device or a cluster Band Displays the frequency band which the wireless network operates at Profile Name Select a profile name from the drop down list Profile name is configured in Scheduler Profile Configuration Action Select Radio On Off to turn on off the wireless network during the time interval set for the profile 46 2 Associated with AP Scheduler Association Profile Name Action EAP220 1 00 0A EB 16 E2 90 None v Radio off 2 EAP220 00 0a eb 16 e2 98 00 0A EB 16 E2 98 None v Radio off Figure 7 28 Scheduler Association_Associated with AP AP Displays the name of the device If you want to customize the device name please refer to 5 2 AP List Device Name AP MAC Displays the MAC address of the device Profile Name Select a profile name from the drop down list Profile name is configured in Scheduler Profile Configuration Action Select Radio On Off to turn on off the wireless network during the time interval set for the profile 7 5 QoS The EAP supports Quality of Service QoS to prioritize voice and video traffic over other traffic types In normal use the default values for the EAP device and station EDCA should not need to be changed Changing these values affects the QoS provided 47 TP LINK EAP220 United States v Access Point v Quick Setup Cluster Wireless Monitoring Management System Wireless Settings MAC Filtering Scheduler Rogue AP Detection

TP-LINK EAP120 WLAN access point

Contents

Download Pdf Manuals

Related Search

Related Contents