CAP1300 User Manual 03-2021 / v1.
CONTENTS OVERVIEW ...................................................................................... 1 I Product Information ............................................................................. 2 I-1 I-2 I-3 I-4 I-5 I-6 Package Contents ................................................................................... 2 System Requirements ............................................................................. 3 Hardware Overview ........................................................
VI-3 VI-2-1 VI-2-2 VI-2-3 LAN-Side IP Address ............................................................................................40 LAN Port...............................................................................................................42 IGMP Snooping ....................................................................................................43 VI-2-4 VI-2-5 STP Management ................................................................................................
VI-5-5 VI-6 Reboot ...............................................................................................................105 Operation Mode ................................................................................. 106 Edimax Pro NMS .......................................................................... 108 VII Product Information ................................................................... 108 VIII Quick Setup - NMS .........................................................
X-4-6-3 X-5 SSID Overview ...........................................................................................155 NMS Settings ...................................................................................... 156 X-5-1 Access Point.......................................................................................................156 X-5-1-1 Edit Access Point .......................................................................................157 X-5-1-2 Add/Edit Access Point Group ....
X-6-2 2.4GHz 11bgn ....................................................................................................219 X-6-2-1 Basic ...........................................................................................................220 X-6-2-2 Advanced ...................................................................................................223 X-6-2-3 Security ......................................................................................................226 X-6-2-4 WDS .........
X-8-1-1 X-8-1-2 X-8-1-3 XI Appendix ..................................................................................... 285 XI-1 Configuring your IP address ................................................................ 285 XI-1-1 XI-1-2 XI-1-3 XI-1-4 XI-1-5 XI-2 Windows XP ......................................................................................................286 Windows Vista ..................................................................................................
OVERVIEW Your device can function in five different modes. AP Mode is a regular access point for use in your wireless network. This is the default mode of the access point. Repeater Mode is a wireless repeater (also called wireless range extender) that takes an existing signal from a wireless router or wireless access point and rebroadcasts it to create a second network. Managed AP Mode acts as a “slave” AP within the AP array (controlled by the AP Controller “master”).
I Product Information I-1 Package Contents 1 3 2 6 5 4 7 1. 2. 3. 4. 8 CAP1300 Access Point Ceiling Mount Bracket T-Rail Mounting Kit & Screws CD 5. 6. 7. 8.
I-2 System Requirements - Existing cable/DSL modem & router - Computer with web browser for access point configuration I-3 Hardware Overview C B A D A B C D 12V DC IN LAN 1 (PoE) LAN 2 Reset 12V DC port to connect the power adapter LAN port with Power over Ethernet (PoE) IN LAN port Reset the device to factory default settings 3
I-4 LED Status LED Color LED Status On Blue Flashing Slowly Description The device is on. Upgrading firmware. Flashing Quickly Resetting to factory defaults. On Starting up. Amber Flashing Off I-5 Off Error. The device is off. Reset If you experience problems with your device, you can reset it back to its factory settings. This resets all settings back to default. 1. Press and hold the reset button on the device for at least 10 seconds then release the button.
I-6 Safety Information In order to ensure the safe operation of the device and its users, please read and act in accordance with the following safety instructions. 1. The device is designed for indoor use only; do not place it outdoor. 2. Do not place the device in or near hot/humid places, such as in a kitchen or a bathroom. 3. Do not pull any connected cable with force; carefully disconnect it from the device. 4. Handle the device with care. Accidental damage will void the warranty of the device. 5.
II II-1 Hardware Installation Router/PoE Switch 1. If you need to, remove the cap from the underside of the device. This creates extra space for your cables to pass through. 2. Connect a router or a PoE switch to the device’s LAN 1 port using an Ethernet cable. 3.
II-2 Mounting To mount the device to a ceiling, please follow the instructions below and refer to diagram A & B. II-2-1 Wooden Ceiling Please refer to the figure below: 1. By using the holes A on the ceiling bracket, identify and mark correct screw positions of the desired mounting location. 2. Where necessary, drill a hole (of radius smaller than the radius of the provided screws) on each of the marked screw positions. 3.
F A E A F E B B C D C D 8
II-2-2 Other Ceiling Please refer to the figure below: 1. By using the holes A on the ceiling bracket, identify and mark correct screw positions of the desired mounting location. 2. Where necessary, drill a hole on each of the marked screw positions. 3. Insert the anchors G into the holes (use a screw driver where necessary) at the marked screw positions. 4. Fix the ceiling mount bracket to the desired location by inserting the ceiling fixing screws B through the bracket ceiling holes A.
G A G F E A E F B B C D C D 10
II-2-3 T-Rail Mount To mount the device to a T-Rail, please follow the instructions below and refer to the diagrams below. 1. Select the correct size T-Rail bracket included in the package contents. 2. Attach the selected T-Rail brackets A to holes B using bracket fixing screws C. 3. Clip the device onto the T-Rail D using the now attached T-Rail brackets A.
If you need more space between the device and the T-Rail, additional cushion bracket E can be added between T-Rail brackets A and holes B (use the longer screws included).
III Quick Setup & Mode Selection The device can function as a standalone access point (AP Mode), as a repeater (Repeater Mode), as an AP controller (AP Controller Mode), as part of an AP array (Managed AP Mode), or as a client bridge (Client Bridge Mode). Follow the quick setup below before selecting the desired operation mode. For AP Controller Mode, please refer to VIII Quick Setup - NMS. III-1 1. Default Mode: Access Point Mode Set your computer’s IP address to 192.168.2.
6. 7. You will be prompted for a username and password. Enter the default username “admin” and the default password “1234”.
8. By default, the device is in AP Mode. If you do not wish to change the operation mode, switch your computer back to dynamic IP address now. 9. If you wish to change to a different operation mode, go to “Operation Mode” to select the desired operation mode. Follow the steps in the following sections to change the operation mode.
III-2 Repeater Mode From the quick setup above, 1. Select Repeater Mode from the operation mode drop down menu: 2. Press “Apply” and wait for the device to reboot into Repeater Mode: 3. When system page is displayed, go to Wireless Settings Wireless Extender.
4. Click Scan to search for and display available SSIDs 5. Click the circle icon to connect to an available source SSID. SSIDs can be configured independently for each frequency 2.4GHz & 5GHz. 6. Edit the new extended SSID according to your preference and enter the security details for the source SSID (e.g. Pre-shared Key). Click “Connect” to proceed.
Wait for the configuration to take effect: 7. The device (now in Repeater Mode) will establish a connection to the source SSID and repeat the extended SSID. The device will become a DHCP client of the router/root AP. Switch your computer back to dynamic IP address. 8. To access the web user interface, check your router/root AP’s settings to determine the device’s new IP address. Enter the new IP address into the browser for the web user interface.
III-3 Client Bridge Mode From the quick setup above, 1. Select Client Bridge Mode from the operation mode drop down menu: 2. Press “Apply” and wait for the device to reboot into Client Bridge Mode: 3. When system page is displayed, go to Wireless Settings Wireless Extender.
4. Click Scan to search for and display available SSIDs 5. Click the circle icon to connect to an available source SSID. SSIDs can be configured independently for each frequency 2.4GHz & 5GHz. 6. Edit according to your preference and enter the security details for the source SSID (e.g. Pre-shared Key). Click “Connect” to proceed.
Wait for the configuration to take effect: 7. The device (now in Client Bridge Mode) will receive wireless signal and provides it to devices connected to the bridge via Ethernet cable. The device will become a DHCP client of the router/root AP. Switch your computer back to dynamic IP address. 8. To access the web user interface, check your router/root AP’s settings to determine the device’s new IP address. Enter the new IP address into the browser for the web user interface.
III-4 Managed AP Mode From the quick setup above, 1. Select Managed AP Mode from the operation mode drop down menu: 2. Press “Apply” and wait for the device to reboot into Managed AP Mode: For use a Managed AP in an AP array, the access point will automatically switch mode when an AP Controller is configured in the network.
AP, Managed AP, Repeater & Client Bridge Modes The device can function as a standalone access point (AP Mode), as a repeater (Repeater Mode), as an AP controller (AP Controller Mode), as part of an AP array (Managed AP Mode), or as a client bridge (Client Bridge Mode). Please refer to Edimax Pro NMS section for AP Controller Mode setting. For operation mode selection, please follow the quick setup in III Quick Setup & Mode Selection.
IV Basic Settings Basic settings of the access point are: - LAN IP Address; and - 2.4GHz & 5GHz SSID & Security; and - Administrator Name & Password; and - Time & Date It is recommended that these settings are configured before using the access point. Whenever a new setting is applied to the access point, the webpage will reload, as shown below: Instructions below will help you configure these settings: Changing IP Address: 1.
2. Enter the IP address settings you wish to use for your access point. You can use a dynamic (DHCP) or static IP address, depending on your network environment. Click “Apply” to save the changes and wait a few moments for the access point to reload. When you change your access point’s IP address, you need to use the new IP address to access the browser based configuration interface instead of the default IP 192.168.2.2. Changing SSID for 2.4GHz wireless network 1. 2. Go to “Wireless Settings” > “2.
Configuring Security Settings of 2.4GHz wireless network 1. 2. Go to “Wireless Settings” > “2.4GHz 11bgn” > “Security”. Select an “Authentication Method”, enter or select fields where appropriate, and click “Apply”. For more information on authentication method, please refer to VI-3-3-3 on page 55. If multiple SSIDs are used, specify which SSID to configure using the “SSID” drop down menu.
Changing SSID and Configuring Security Setting for 5GHz wireless network Follow the steps outlined in “Changing SSID for 2.4GHz wireless network” and “Configuring Security Setting for 2.4GHz wireless network” but choose the 5GHz option instead. Changing Admin Name and Password 1. Go to “Management” > “Admin” as shown below: 2. Complete the “Administrator Name” and “Administrator Password” fields and click “Apply”.
Changing Date and Time 1. Go to “Management” > “Date and Time”. 2. Set the correct time and time zone for your access point using the drop down menus. The access point also supports NTP (Network Time Protocol) so, alternatively, you can enter the host name or IP address of a time server. Click “Apply” when you are finished. You can use the “Acquire Current Time from your PC” button if you wish to set the device to the same time as your PC. The basic settings of your access point are now configured.
V Wi-Fi Protected Setup (WPS) Wi-Fi Protected Setup is a simple way to establish connections between WPS compatible devices. You can use the configuration webpage to activate the device’s WPS function. 1. Go to “Wireless Settings” > “WPS” on your configuration webpage. 2. Check the checkbox of “Enable” and click “Apply” to turn on WPS function. 3. Within two minutes, activate WPS on your WPS-compatible wireless device.
VI Browser Based Configuration Interface Some functions of the browser based configuration interface are disabled for different mode settings, please refer to the sections applicable for your desired mode. Please use Edimax Pro NMS on your Controller AP to configure your Managed AP(s). The browser-based configuration interface enables you to configure the device’s advanced features.
4. You will arrive at the “System Information” screen shown below. 5. Use the menu across the top and down the left side to navigate. 6. Where applicable, click “Apply” to save changes and reload the access point, or “Cancel” to cancel changes. Please wait a few seconds for the access point to reload after you “Apply” changes. A countdown will be shown as exemplified below. 7. Please refer to the following chapters for full descriptions of the browser based configuration interface.
VI-1 VI-1-1 Information System Information “System Information” page displays basic system information.
System Model Product Name Uptime System Time Boot From Firmware Version MAC Address Management VLAN ID IP Address Default Gateway DNS DHCP Server Displays the model number of the access point. Displays the product name for reference, which consists of “AP” plus the MAC address. Displays the total time since the device was turned on. Displays the system time. Displays information for the booted hardware, booted from internal memory. Displays the firmware version. Displays the access point’s MAC address.
RSSI Received Signal Strength Indicator (RSSI) is a measurement of the power present in a received radio signal. Wireless 2.4GHZ (5GHz) / SSID SSID Displays the SSID name(s) for the specified frequency. Authentication Displays the authentication method for the specified SSID. Method See V I-3 Wireless Settings. Encryption Displays the encryption type for the specified SSID. See VI-3 Type Wireless Settings. VLAN ID Displays the VLAN ID for the specified SSID. See V I-2-5 VLAN.
VI-1-2 Wireless Clients “Wireless Clients” page displays information about all wireless clients connected to the device on the 2.4GHz or 5GHz frequency. Refresh time Auto Refresh Time Manual Refresh Select a time interval for the client table list to automatically refresh. Click refresh to manually refresh the client table. 2.4GHz (5GHz) WLAN Client Table SSID Displays the SSID which the client is connected to. MAC Address Displays the MAC address of the client.
VI-1-3 Wireless Monitor “Wireless Monitor” is a tool built into the device to scan and monitor the surrounding wireless environment. Select a frequency and click “Scan” to display a list of all SSIDs within range along with relevant details for each SSID. Wireless Monitor Site Survey Select which frequency (or both) to scan, and click “Scan” to begin. Channel After a scan is complete, click “Export” to save the results to Survey Result local storage.
VI-1-4 DHCP Clients “DHCP Clients” shows information of DHCP leased clients.
VI-1-5 Log “System log” displays system operation information such as up time and connection processes. This information is useful for network administrators. Older entries will be overwritten when the log is full Save Clear Refresh Click to save the log as a file on your local computer. Clear all log entries. Refresh the current log.
WPS M1 - M8 messages WPS success Change Settings System Boot Displays current model name NTP Client Wired Link LAN Port link status and speed status Proxy ARP Proxy ARP module start & stop Bridge Bridge start & stop. SNMP SNMP server start & stop. HTTP HTTP start & stop. HTTPS HTTPS start & stop. SSH SSH-client server start & stop. Telnet Telnet-client server start or stop. WLAN (2.4G) WLAN (2.
VI-2 VI-2-1 Network Settings LAN-Side IP Address “LAN-side IP address” page allows you to configure your access point on your Local Area Network (LAN). You can enable the access point to dynamically receive an IP address from your router’s DHCP server or you can specify a static IP address for your access point, as well as configure DNS servers. The access point’s default IP address is 192.168.2.2.
address is 8.8.8.8. IP Address Subnet Mask Default Gateway Specify the IP address here. This IP address will be assigned to your access point and will replace the default IP address. Specify a subnet mask. The default value is 255.255.255.0 For DHCP users, select “From DHCP” to get default gateway from your DHCP server or “User-Defined” to enter a gateway manually. For static IP users, the default value is blank. DHCP users can select to get DNS servers’ IP address from DHCP or manually enter a value.
VI-2-2 LAN Port “LAN Port” page allows you to configure the settings for your access point’s two wired LAN (Ethernet) ports. Wired LAN Port Enable Speed & Duplex Identifies LAN port 1 or 2. Flow Control Enable/disable flow control. Flow control can pause new session request until current data processing is complete, in order to avoid device overloads under heavy traffic. Enable/disable 802.3az. 802.3az is an Energy Efficient Ethernet feature which disables unused interfaces to reduce power usage.
VI-2-3 IGMP Snooping IGMP snooping is the process of listening to Internet Group Management Protocol (IGMP) network traffic. The feature allows a network switch to listen in on the IGMP conversation between hosts and routers. By listening to these conversations the switch maintains a map of which links need which IP multicast streams. Multicasts may be filtered from the links which do not need them and thus controls which ports receive specific multicast traffic.
VI-2-4 STP Management When enabled, STP ensures that you do not create loops when you have redundant paths in your network (as loops are deadly to a network). This page allows you to enable / disable STP management. Press “Apply” to confirm the settings.
VI-2-5 VLAN “VLAN” (Virtual Local Area Network) enables you to configure VLAN settings. A VLAN is a local area network which maps workstations virtually instead of physically and allows you to group together or isolate users from each other. VLAN IDs in the range 1 – 4095 are supported. VLAN Interface Wired LAN Identifies LAN port 1 or 2 and wireless SSIDs. Port/Wireless VLAN Mode Select “Tagged Port” or “Untagged Port” for specified LAN interface.
VI-3 VI-3-1 Wireless Settings Wireless Extender This page allows you to scan for available wireless network (both 2.4GHz and 5GHz frequencies) to connect to for repeater / client bridge modes.
Click the circle icon to connect to an available source SSID. SSIDs can be configured independently for each frequency 2.4GHz & 5GHz. Repeater Mode source SSID connection page: Client Bridge Mode source SSID connection page: Edit the connection page according to your preference and enter the security details for the source SSID (e.g. Pre-shared Key). Click “Connect” to connect to the SSID. For more information on setting up Repeater / Client Bridge Modes, please refer to III Quick Setup & Mode Selection.
VI-3-2 Profile List To edit a connection, check the circle icon and press “Edit”. The edit page is shown below: Press “Save” to save the configuration, or “Cancel” to forfeit the changes. If you wish to use a different source SSID connection, check the circle icon (of the source SSID) and press “Connect”.
VI-3-3 2.4GHz 11bgn The “2.4GHz 11bgn” menu allows you to view and configure information for your access point’s 2.4GHz wireless network across five categories: Basic, Advanced, Security, WDS & Guest Network.
VI-3-3-1 Basic The “Basic” screen displays basic settings for your access point’s 2.4GHz Wi-Fi network (s). Wireless Band Enable SSID Number SSID# VLAN ID Auto Channel Enable or disable the access point’s 2.4GHz wireless radio. When disabled, no 2.4GHz SSIDs will be active. Wireless standard used for the access point. Combinations of 802.11b, 802.11g & 802.11n can be selected. Select how many SSIDs to enable for the 2.4GHz frequency from the drop down menu. A maximum of 16 can be enabled.
Auto Channel Range Auto Channel Interval Select a range to which auto channel selection can choose from. Select a time interval for how often the auto channel setting will check/reassign the wireless channel. Check/uncheck the “Change channel even if clients are connected” box according to your preference.
VI-3-3-2 Advanced These settings are for experienced users only. Please do not change any of the values on this page unless you are already familiar with these functions. Changing these settings can adversely affect the performance of your access point. Contention Slot Preamble Type Guard Interval Select “Short” or “Long” – this value is used for contention windows in WMM (see VI-3-8 WMM). Set the wireless radio preamble type. The preamble type in 802.
802.11g Enable/disable 802.11g protection, which increases reliability but Protection reduces bandwidth (clients will send Request to Send (RTS) to access point, and access point will broadcast Clear to Send (CTS), before a packet is sent from client). 802.11n Enable/disable 802.11n protection, which increases reliability Protection but reduces bandwidth (clients will send Request to Send (RTS) to access point, and access point will broadcast Clear to Send (CTS), before a packet is sent from client).
Airtime Fairness Airtime Fairness gives equal amounts of air time (instead of equal number of frames) to each client regardless of its theoretical data rate. Set airtime fairness to “Auto”, “Static” or “Disable”. When “Auto” is selected, the share rate is automatically managed.
VI-3-3-3 Security The access point provides various security options (wireless data encryption). When data is encrypted, information transmitted wirelessly cannot be read by anyone who does not know the correct encryption key. It is essential to configure wireless security in order to prevent unauthorised access to your network.
SSID Selection Select a SSID to configure its security settings. Broadcast SSID Enable or disable SSID broadcast. Enable: the SSID will be visible to clients as an available Wi-Fi network. Disable: the SSID will not be visible as an available Wi-Fi network to clients – clients must manually enter the SSID in order to connect. A hidden (disabled) SSID is typically more secure than a visible (enabled) SSID. Wireless Client Enable or disable wireless client isolation.
Additional wireless authentication methods can be applied to all authentication methods: WPS must be disabled to use additional authentication. See VI-3-5 WPS for WPS settings. MAC Address Filter Restrict wireless clients access based on MAC address specified in the MAC filter table. See VI-3-7 MAC Filter to configure MAC filtering. MAC-RADIUS Authentication Restrict wireless clients access based on MAC address via a RADIUS server, or password authentication via a RADIUS server.
VI-3-3-3-2 WEP WEP (Wired Equivalent Privacy) is a basic encryption type. When selected, a notice will pop-up as exemplified below: Below is a figure showing the configurable fields: Key Length Select 64-bit or 128-bit. 128-bit is more secure than 64-bit and is recommended. Key Type Choose from “ASCII” (any alphanumerical character 0-9, a-z and A-Z) or “Hex” (any characters from 0-9, a-f and A-F). Default Key Select which encryption key (1 – 4 below) is the default key.
VI-3-3-3-4 WPA-PSK WPA-PSK is a secure wireless encryption type with strong data protection and user authentication, utilizing 128-bit encryption keys. Below is a figure showing the configurable fields: Fast Roaming Settings will also be shown: 802.11r Fast Roaming WPA Type Encryption Key Renewal Interval Pre-Shared Key Type Pre-Shared Key When your device roams from one AP to another on the same network, 802.
802.11r Fast Transition Roaming Settings Mobility_dom Specify the mobility domain (2.4GHz or 5GHz) ain Encryption Key Specify the encryption key Over the DS Enable or disable this function. VI-3-3-3-5 WPA-EAP Fast Roaming Settings will also be shown: WPA Type Encryption Type Key Renewal Interval Select from WPA/WPA2 Mixed Mode-EAP, WPA2-EAP or WPA-EAP. Select “TKIP/AES Mixed Mode” or “AES” encryption type. Specify a frequency for key renewal in minutes.
VI-3-3-4 WDS Wireless Distribution System (WDS) can bridge/repeat access points together in an extended network. WDS settings can be configured as shown below. When using WDS, configure the IP address of each access point to be in the same subnet and ensure there is only one active DHCP server among connected access points, preferably on the WAN side. WDS must be configured on each access point, using correct MAC addresses. All access points should use the same wireless channel and encryption method.
2.4GHz WDS Select “WDS with AP” to use WDS with access point or “WDS Functionality Dedicated Mode” to use WDS and also block communication with regular wireless clients. When WDS is used, each access point should be configured with corresponding MAC addresses, wireless channel and wireless encryption method. Local MAC Displays the MAC address of your access point. Address WDS Peer Settings WDS # Enter the MAC address for up to four other WDS devices you wish to connect.
VI-3-3-5 Guest Network Enable / disable guest network to allow clients to connect as guests.
VI-3-4 5GHz 11ac 11an The “5GHz 11ac 11an” menu allows you to view and configure information for your access point’s 5GHz wireless network across five categories: Basic, Advanced, Security, WDS & Guest Network.
VI-3-4-1 Basic The “Basic” screen displays basic settings for your access point’s 5GHz Wi-Fi network (s). Wireless Band Enable SSID Number SSID# VLAN ID Auto Channel Auto Enable or disable the access point’s 5GHz wireless radio. When disabled, no 5GHz SSIDs will be active. Wireless standard used for the access point. Combinations of 802.11a, 802.11n & 802.11ac can be selected. Select how many SSIDs to enable for the 2.4GHz frequency from the drop down menu. A maximum of 16 can be enabled.
Channel Range Auto Channel Interval from. Select a time interval for how often the auto channel setting will check/reassign the wireless channel. Check/uncheck the “Change channel even if clients are connected” box according to your preference. Channel Select the channel bandwidth: Bandwidth 20MHz (lower performance but less interference); or Auto 40/20 MHz; or Auto 80/40/20 MHz (automatically select based on interference level).
VI-3-4-2 Advanced These settings are for experienced users only. Please do not change any of the values on this page unless you are already familiar with these functions. Changing these settings can adversely affect the performance of your access point. Guard Interval 802.11n Protection DTIM Period RTS Threshold Fragment Threshold Set the guard interval. A shorter interval can improve performance. Enable/disable 802.
Multicast Rate Tx Power Set the transfer rate for multicast packets or use the “Auto” setting. Set the power output of the wireless radio. You may not require 100% output power. Setting a lower power output can enhance security since potentially malicious/unknown users in distant areas will not be able to access your signal. Beacon Set the beacon interval of the wireless radio. The default value Interval is 100.
Airtime Fairness Airtime Fairness gives equal amounts of air time (instead of equal number of frames) to each client regardless of its theoretical data rate. Set airtime fairness to “Auto”, “Static” or “Disable”. When “Auto” is selected, the share rate is automatically managed.
VI-3-4-3 Security The access point provides various security options (wireless data encryption). When data is encrypted, information transmitted wirelessly cannot be read by anyone who does not know the correct encryption key. It’s essential to configure wireless security in order to prevent unauthorised access to your network. SSID Selection Select which SSID to configure security settings for. Broadcast SSID Enable or disable SSID broadcast.
Wireless Client Enable or disable wireless client isolation. Wireless client Isolation isolation prevents clients connected to the access point from communicating with each other and improves security. Typically, this function is useful for corporate environments or public hot spots and can prevent brute force attacks on clients’ usernames and passwords. Load Balancing Load balancing limits the number of wireless clients connected to an SSID. Set a load balancing value (maximum 100).
VI-3-4-4 WDS Wireless Distribution System (WDS) can bridge/repeat access points together in an extended network. WDS settings can be configured as shown below. When using WDS, configure the IP address of each access point to be in the same subnet and ensure there is only one active DHCP server among connected access points, preferably on the WAN side. WDS must be configured on each access point, using correct MAC addresses. All access points should use the same wireless channel and encryption method.
5GHz WDS Mode WDS Select “WDS with AP” to use WDS with access point or “WDS Functionality Dedicated Mode” to use WDS and also block communication with regular wireless clients. When WDS is used, each access point should be configured with corresponding MAC addresses, wireless channel and wireless encryption method. Local MAC Displays the MAC address of your access point. Address WDS Peer Settings WDS # Enter the MAC address for up to four other WDA devices you wish to connect.
VI-3-4-5 Guest Network Enable / disable guest network to allow clients to connect as guests.
VI-3-5 WPS Wi-Fi Protected Setup is a simple way to establish connections between WPS compatible devices. WPS can be activated on compatible devices by pushing a WPS button on the compatible device or from within the compatible device’s firmware / configuration interface (known as PBC or “Push Button Configuration”). When WPS is activated in the correct manner and at the correct time for two compatible devices, they will automatically connect.
WPS Product PIN Push-Button WPS WPS by PIN WPS Security WPS Status Displays the WPS PIN code of the device, used for PIN code WPS. You will be required to enter this PIN code into another WPS device for PIN code WPS. Click “Generate PIN” to generate a new WPS PIN code. Click “Start” to activate WPS on the device for approximately 2 minutes. Enter the PIN code of another WPS device and click “Start” to attempt to establish a WPS connection. WPS function will last for approximately 2 minutes.
VI-3-6 RADIUS The RADIUS menu allows you to configure the device’s external RADIUS server settings. A RADIUS server provides user-based authentication to improve security and offer wireless client control – users can be authenticated before gaining access to a network. The device can utilize a primary and a secondary (backup) external RADIUS server for each of its wireless frequencies (2.4GHz & 5GHz).
VI-3-6-1 RADIUS Settings Configure the RADIUS server settings for 2.4GHz and 5GHz. Each frequency can use an internal or external RADIUS server.
RADIUS Type Select “Internal” to use the access point’s built-in RADIUS server or “external” to use an external RADIUS server. RADIUS Server Enter the RADIUS server host IP address. Authentication Set the UDP port used in the authentication protocol of the Port RADIUS server. Value must be between 1 – 65535. Shared Secret Enter a shared secret/password between 1 – 99 characters in length. This should match the “MAC-RADIUS” password used in VI-3-3-3 or VI-3-4-3.
VI-3-6-2 Internal Server The access point features a built-in RADIUS server which can be configured as shown below used when “Internal” is selected for “RADIUS Type” in the “Wireless Settings” “RADIUS” “RADIUS Settings” menu. To use RADIUS servers, go to “Wireless Settings” “Security” and select “MAC RADIUS Authentication” “Additional Authentication” and select “MAC RADIUS Authentication” (see V I-3-3-3 & V I-3-4-3).
Session Timeout Termination Action “MAC-RADIUS” password used in VI-3-3-3 or VI-3-4-3. Set a duration of session timeout in seconds between 0 – 86400. Select a termination-action attribute: Reauthentication: sends a RADIUS request to the access point; or, Not-Reauthentication: sends a default termination-action attribute to the access point; or Not-Send: no termination-action attribute is sent to the access point. Press “Apply” to apply the configuration, or “Cancel” to forfeit the changes.
VI-3-6-3 RADIUS Accounts The internal RADIUS server can authenticate up to 256 user accounts. The “RADIUS Accounts” page allows you to configure and manage users. Enter a username in the box below and click “Add” to add the username.
Select “Edit” to edit the username and password of the RADIUS account: Press “Apply” to apply the configuration, or “Cancel” to forfeit the changes. User Name Add Reset Enter the user names here, separated by commas. Click “Add” to add the user to the user registration list. Clear text from the user name box. Select User Name Password Check the box to select a user. Displays the user name. Displays if specified user name has a password (configured) or not (not configured).
VI-3-7 MAC Filter MAC filtering is a security feature that can help to prevent unauthorized users from connecting to your access point. This function allows you to define a list of network devices permitted to connect to the access point. Devices are each identified by their unique MAC address. If a device which is not on the list of permitted MAC addresses attempts to connect to the access point, it will be denied. To enable MAC filtering, go to “Wireless Settings” “2.
Add MAC Address Add Reset Enter a MAC address of computer or network device manually e.g. ‘aa-bb-cc-dd-ee-ff’ or enter multiple MAC addresses separated with commas, e.g. ‘aa-bb-cc-dd-ee-ff,aa-bb-cc-dd-ee-gg’ Click “Add” to add the MAC address to the MAC address filtering table. Clear all fields. MAC address entries will be listed in the “MAC Address Filtering Table”. Select an entry using the “Select” checkbox. Select Delete selected or all entries from the table.
VI-3-8 WMM Wi-Fi Multimedia (WMM) is a Wi-Fi Alliance interoperability certification based on the IEEE 802.11e standard, which provides Quality of Service (QoS) features to IEE 802.11 networks. WMM prioritizes traffic according to four categories: background, best effort, video and voice. Configuring WMM consists of adjusting parameters on queues for different categories of wireless traffic. Traffic is sent to the following queues: Background Low Priority High throughput, non time sensitive bulk data e.g.
Queues automatically provide minimum transmission delays for video, voice, multimedia and critical applications. The values can be adjusted further manually: CWMin CWMax AIFSN TxOP Minimum Contention Window (milliseconds): This value is input to the initial random backoff wait time algorithm for retry of a data frame transmission. The backoff wait time will be generated between 0 and this value.
VI-3-9 Schedule The schedule feature allows you to automate the wireless network for the specified time ranges. Wireless scheduling can save energy and increase the security of your network. Check/uncheck the box “Enable” and select “Apply” to enable/disable the wireless scheduling function.
1. Select “Add” to add a schedule. 2. Settings page will be shown if “Continue” is selected: Check/uncheck the box of the desired SSID network, day of schedule and select the Start Time and End Time (using the dropdown menu). Select “Apply” to apply the settings, or “Cancel” to forfeit the schedule. Schedules will be shown in the Schedule List as exemplified below: 3.
VI-3-10 Traffic Shaping Traffic shaping is used to optimize or guarantee performance, improve latency, or increase usable bandwidth for some kinds of packets by delaying other kinds. Check the checkbox to enable traffic shaping, specify the down link and up link values, and click “Apply” to apply the configuration, or “Cancel” to forfeit the changes.
91
VI-3-11 Bandsteering Band steering detects clients capable of 5GHz operation and steers them there to make the more crowded 2.4 GHz band available for clients only capable of connecting to 2.4GHz band. This helps improve end user experience by reducing channel utilization, especially in high density environments.
VI-4 Management (Configurable for AP Mode only) VI-4-1 Admin You can change the password used to login to the browser-based configuration interface here. It is advised to do so for security purposes. If you change the administrator password, please make a note of the new password. In the event that you forget this password and are unable to login to the browser based configuration interface, see I-5 Reset for how to reset the access point.
Advanced Settings Product Name Edit the product name according to your preference consisting of 1-32 alphanumeric characters. This name is used for reference purposes. Management Check/uncheck the boxes to enable/disable specified Protocol management interfaces (see below). When SNMP is enabled, complete the SNMP fields below. SNMP Version Select SNMP version appropriate for your SNMP manager. SNMP Get Enter an SNMP Get Community name for verification with the Community SNMP manager for SNMP-GET requests.
SNMP Trap Community SNMP Trap Manager Enter an SNMP Trap Community name for verification with the SNMP manager for SNMP-TRAP requests. Specify the IP address or sever name (2-128 alphanumeric characters) of the SNMP manager. HTTP Internet browser HTTP protocol management interface TELNET Client terminal with telnet protocol management interface SNMP Simple Network Management Protocol. SNMPv1, v2 & v3 protocol supported. SNMPv2 can be used with community based authentication.
VI-4-2 Date and Time Configure the date and time settings of the access point here. The date and time of the device can be configured manually or can be synchronized with a time server. Date and Time Settings Local Time Set the access point’s date and time manually using the drop down menus. Acquire Click “Acquire Current Time from Your PC” to enter the Current Time required values automatically according to your computer’s from your PC current time and date.
NTP Time Server Use NTP The access point also supports NTP (Network Time Protocol) for automatic time and date setup. Server Name Enter the host name or IP address of the time server if you wish. Update Specify a frequency (in hours) for the access point to Interval update/synchronize with the NTP server. Time Zone Time Zone Select the time zone of your country/region. If your country/region is not listed, please select another country/region whose time zone is the same as yours.
VI-4-3 Syslog Server The system log can be sent to a server. Syslog Server Settings Transfer Logs Check the box to enable the use of a syslog server. Enter a host name, domain or IP address for the server, consisting of up to 128 alphanumeric characters. Syslog E-mail Settings E-mail Logs Check the box to enable/disable e-mail logs. E-mail Subject Specify the subject line of log emails. SMTP Server Specify the SMTP server address used to send log emails.
VI-4-4 Ping Test The access point includes a built-in ping test function. Ping is a computer network administration utility used to test whether a particular host is reachable across an IP network and to measure the round-trip time for sent messages. Destination Address Enter the address of the host. Execute Click execute to ping the host.
VI-4-5 I’m Here The access point features a built-in buzzer which can sound on command using the “I’m Here” page. This is useful for network administrators and engineers working in complex network environments to locate the access point. The buzzer is loud! Duration of Sound Sound Buzzer Set the duration for which the buzzer will sound when the “Sound Buzzer” button is clicked. Activate the buzzer sound for a duration specified above.
VI-5 Advanced VI-5-1 LED Settings The access point’s LEDs can be manually enabled or disabled according to your preference. Power LED Diag LED Select on or off. Select on or off.
VI-5-2 Update Firmware The “Firmware” page allows you to update the firmware of the system. Updated firmware versions often offer increased performance and security, as well as bug fixes. Download the latest firmware from the Edimax website. Do not switch off or disconnect the access point during a firmware upgrade, as this could damage the device. Firmware Location Click “Choose File” to upload firmware from your local computer.
VI-5-3 Save / Restore Settings The device’s “Save / Restore Settings” page enables you to save / backup the device’s current settings as a file to your local computer, and restore the device to previously saved settings. Save Settings to PC Save Settings Encryption: If you wish to encrypt the configuration file with a password, check the “Encrypt the configuration file with a password” box and enter a password. Click “Save” to save current settings.
VI-5-4 Factory Default If the access point malfunctions or is not responding, rebooting the device (VI-5-5 Reboot) maybe an option to consider. If rebooting does not work, try resetting the device back to its factory default settings. You can reset the access point back to its default settings using this feature if the reset button is not readily accessible. Factory Default Click “Factory Default” to restore settings to the factory default. A pop-up window will appear and ask you to confirm.
VI-5-5 Reboot If the access point malfunctions or is not responding, rebooting the device may be an option to consider. You can reboot the access point remotely using this feature. Reboot Click “Reboot” to reboot the device. A countdown will indicate the progress of the reboot.
VI-6 Operation Mode The access point can function in five different modes. Set the operation mode of the access point here. 1. AP Mode: The device acts as a standalone access point 2. Repeater Mode: The device acts as a wireless repeater (also called wireless range extender) that takes an existing signal from a wireless router or wireless access point and rebroadcasts it to create a second network. 3. AP controller Mode: The device acts as the designated master of the AP array 4.
In AP Controller Mode the access point will switch to the Edimax Pro NMS user interface. Press “Apply” to apply the configuration, or “Cancel” to forfeit the changes.
Edimax Pro NMS VII Product Information Edimax Pro Network Management Suite (NMS) supports the central management of a group of access points, otherwise known as an AP Array. NMS can be installed on one access point and support up to 16 Edimax Pro access points with no additional wireless controller required, reducing costs and facilitating efficient remote AP management.
VIII Quick Setup - NMS Edimax Pro NMS (AP Controller Mode) is simple to setup. An overview of the system is shown below: One AP (access point) is designated as the AP Controller (master) and other connected Edimax Pro APs are automatically designated as Managed APs (slaves). Using Edimax Pro NMS you can monitor, configure and manage all Managed APs (up to 16) from the single AP Controller.
VIII-1 Hardware Deployment Ensure you have the latest firmware from the Edimax website for your Edimax Pro products. 1. Connect all APs to an Ethernet or PoE switch which is connected to a gateway/router. 2. Ensure all APs are powered on (check their LEDs).
3. Designate one AP as the AP Controller which will manage all other connected APs (up to 16). 4. Connect a computer to the designated AP Controller using an Ethernet cable.
VIII-2 Software Setup 1. Set your computer’s IP address to 192.168.2.x where x is a number in the range 3 – 100. If you are unsure how to do this, please refer XI-1. Please ensure there are no other active network connections on your computer by disabling Wi-Fi and other Ethernet connections. 2. Disconnect the designated AP Controller from the PoE switch and connect it to your computer via Ethernet cable. 3.
6. 7. You will be prompted for a username and password. Enter the default username “admin” and the default password “1234”.
8. By default, the device is in AP Mode. 9. Go to “Operation Mode” to select AP Controller Mode. 10. Once selected, press “Apply” to apply the settings. Wait for the device to reboot. 11. Edimax Pro NMS includes a wizard to quickly setup the SSID & security for Managed APs. Go back to the web user interface, locate and click “Wizard” in the top right corner to begin the wizard.
12. Follow the on-screen instructions to complete Steps 1-6 and click “Finish” to save the settings.
If any of your Managed APs cannot be found, reset it to its factory default settings.
13. Your AP Controller & Managed APs should be fully functional. Use the top menu to navigate around Edimax Pro NMS. Use Dashboard, Zone Plan, NMS Monitor & NMS Settings to configure Managed APs. Use Local Network & Local Settings to configure your AP Controller. Use Toolbox to diagnose network status including Ping, Traceroute, and IP Scan.
IX Webpage Layout - NMS The top menu features 7 panels: Dashboard, Zone Plan, NMS Monitor, NMS Settings, Local Network, Local Settings & Toolbox. Dashboard The Dashboard panel displays an overview of your network and key system information, with quick links to access configuration options for Managed APs and Managed AP groups. Each panel can be refreshed, collapsed or moved according to your preference.
Zone Plan Zone Plan displays a customizable live map of Managed APs for a visual representation of your network coverage. Each AP icon can be moved around the map, and a background image can be uploaded for user-defined location profiles using NMS Settings Zone Edit. Options can be configured using the menu on the right side and signal strength is displayed for each AP.
NMS Monitor The NMS Monitor panel provides more detailed monitoring information about the AP Array than found on the Dashboard, grouped according to categories in the menu down the left side.
NMS Settings NMS Settings provides extensive configuration options for the AP Array. You can manage each access point, assign access points into groups, manage WLAN, RADIUS & guest network settings as well as upgrade firmware across multiple access points. The Zone Plan can also be configured using “Zone Edit”.
Local Network Local Network settings are for your AP Controller. You can configure the IP address and DHCP server of the AP Controller in addition to 2.4GHz & 5Ghz Wi-Fi and security, with WPS, RADIUS server, MAC filtering and WMM settings also available.
Local Settings Local Settings are for your AP Controller. You can set the operation mode and view network settings (clients and logs) specifically for the AP Controller, as well as other management settings such as date/time, admin accounts, firmware and reset.
Toolbox The Toolbox panel provides network diagnostic tools: Ping, Traceroute, and IP Scan.
X NMS Features Descriptions of the functions of each main panel can be found below. When using Edimax NMS, click “Apply” to save changes: X-1 Login, Logout & Restart It is recommended that you login to the AP Controller to make configurations to Managed APs. Login 1. Connect a computer to the designated AP Controller using an Ethernet cable: 2. Open a web browser and enter the AP Controller’s IP address in the address field. The default IP address is 192.168.2.
Your computer’s IP address must be in the same subnet as the AP Controller. Refer to XI-1 Configuring your IP address for more help. If you changed the AP Controller’s IP address, or if your gateway/router uses a DHCP server, ensure you enter the correct IP address. Refer to your gateway/router’s settings. If a DHCP server is used in the network, it is advised to use your DHCP server’s settings to assign the AP Controller a static IP address. 3. Enter the username & password to login.
X-2 Dashboard The dashboard displays an overview of your AP array: Use the blue icons above to refresh or collapse each panel in the dashboard. Click and drag to move a panel to suit your preference.
X-2-1 System Information System Information displays information about the AP Controller: Product Name (model), Host Name, MAC Address, IP Address, Firmware Version, System Time and Uptime (time the access point has been on). X-2-2 Devices Information Devices Information is a summary of the number of all devices in the local network: Access Points, Clients Connected, and Rogue (unidentified) Devices.
X-2-3 Managed AP This page displays information about the Managed APs in the local network: Index (reference number), MAC Address, Device Name, Model, IP Address, 2.4GHz & 5GHz Wireless Channel Number, No. of Clients connected to each access point, and Status (connected, connecting or disconnected). The search function can be used to locate a specific Managed AP.
4. Buzzer The Managed AP’s buzzer will sound temporarily to help identify/locate the access point. 5. Network Connectivity Go to the “Network Connectivity” panel to perform a ping or traceroute. 6. Restart Restarts the Managed AP. Status Icons Icon Color Status Definition Managed AP is disconnected. Please check the network connection and ensure the Grey Disconnected Managed AP is in the same IP subnet as the AP Controller.
X-2-4 Managed AP Group Managed APs can be grouped according to your requirements. Managed AP Group displays information about each Managed AP group in the local network: Group Name, MAC Address, Device Name, Model, IP Address, 2.4GHz & 5GHz Wireless Channel Number, No. of Clients connected to each access point, and Status (connected or disconnected). To edit Managed AP Groups go to NMS Settings Access Point (refer to X-5-1 Access Point).
3. Blink LED The LED of all Managed APs in the group will flash temporarily to help identify & locate the access points. 4. Buzzer The buzzer of all Managed APs in the group will sound temporarily to help identify & locate the access points. 5. Network Connectivity Go to the “Network Connectivity” panel to perform a ping or traceroute. 6. Restart Restarts all Managed APs in the group. Status Icons Icon Color Status Definition Managed AP is disconnected.
Blue Waiting for Approval Managed AP is waiting for approval. Note: Up to sixteen Managed APs are supported. Additional APs will have this status until an existing Managed AP is removed. X-2-5 Active Clients Active Clients displays information about each client in the local network: Index (reference number), Client MAC Address, Device Name, Model, IP Address, 2.4GHz & 5GHz Wireless Channel Number, No. of Clients connected to each access point, and Status (on or off).
X-3 Zone Plan The Zone Plan can be fully customized to match your network environment. You can move the AP icons and select different location images (upload location images in NMS Settings Zone Edit) to create a visual map of your AP array. Use the menu on the left side to make adjustments and mouse-over an AP icon in the zone map to see more information.
X-3-1 Menu Menu allows you to keep track of the access points’ information. Select between Radio Coverage, Channel, Client Numbers, AP Loading, and Online Map. When an option is selected, the zone plan and Control section will change accordingly.
Channel Below is displayed as Channel is selected: Client Numbers Below is displayed as Client Numbers is selected: 136
AP Loading Below is displayed as AP Loading is selected: Online Map When Online Map is selected, the message below is displayed: Click “OK” and the interface will bring you to the page shown below to allow API key entry: 137
X-3-2 Control The Control section will change according to the selection in the Menu section. Map Location Select a pre-defined location from the drop down menu. When you upload a location image in NMS Settings Zone Edit, it will be available for selection here. AP Group You can select an AP Group to display in the zone map. Edit AP Groups in NMS Settings Access Point. Search Use the search box to quickly locate an AP. Radio Use the checkboxes to display APs according to 2.
Click and drag an AP icon to move the icon around the zone map.
X-4 NMS Monitor X-4-1 Access Point X-4-1-1 Managed AP Displays information about each Managed AP in the local network: Index (reference number), MAC Address, Device Name, Model, IP Address, 2.4GHz & 5GHz Wireless Channel Number, No. of Clients connected to each access point, and Status (connected, connecting or disconnected). The search function can be used to locate a specific Managed AP. Type in the search box and the list will update: The Status icon displays the status of each Managed AP.
Or Security). Incompatible NMS Version All access points must have the same firmware version. Please use the AP Controller’s firmware upgrade function (refer to X -5-12 Firmware Upgrade). Please wait while the Managed AP makes Configuring or Orange configurations or while the firmware is Upgrading upgrading. Please wait while Managed AP is Yellow Connecting connecting. Green Connected Blue Waiting for Approval Managed AP is connected. Managed AP is waiting for approval.
5. Network Connectivity Go to the “Network Connectivity” panel to perform a ping or traceroute. 6. Restart Restarts the Managed AP.
X-4-1-2 Managed AP Group Managed APs can be grouped according to your requirements. Managed AP Group displays information about each Managed AP group in the local network: Group Name, MAC Address, Device Name, Model, IP Address, 2.4GHz & 5GHz Wireless Channel Number, No. of Clients connected to each access point, and Status (connected or disconnected). To edit Managed AP Groups go to NMS Settings Access Point (refer to X-5-1 Access Point).
Controller’s firmware upgrade function (refer to X -5-12 Firmware Upgrade). Please wait while the Managed AP makes Configuring or Orange configurations or while the firmware is Upgrading upgrading. Please wait while Managed AP is Yellow Connecting connecting. Green Connected Blue Waiting for Approval Managed AP is connected. Managed AP is waiting for approval. Note: Up to sixteen Managed APs are supported. Additional APs will have this status until an existing Managed AP is removed.
6. Restart Restarts all Managed APs in the group.
X-4-2 WLAN X-4-2-1 Active WLAN Displays information about each SSID in the AP Array: Index (reference number), Name/SSID, VLAN ID, Authentication, Encryption, IP Address and Additional Authentication. To configure encryption and VLANs for Managed APs go to NMS Settings WLAN. The search function can be used to locate a specific SSID.
X-4-2-2 Active WLAN Group WLAN groups can be created according to your preference. Active WLAN Group displays information about WLAN group: Group Name, Name/SSID, VLAN ID, Authentication, Encryption, IP Address and Additional Authentication. The search function can be used to locate a specific Active WLAN Group.
X-4-3 Clients X-4-3-1 Active Clients Displays information about clients currently connected to the AP Array: Index (reference number), Client MAC Address, AP MAC Address, WLAN (SSID), Radio (2.4GHz or 5GHz), Signal Strength received by Client, Connected Time, Idle Time, Tx & Rx (Data transmitted and received by Client in KB), and the Vendor of the client device. You can set or disable the auto-refresh time for the client list or click “Refresh” to manually refresh.
X-4-4 Users X-4-4-1 Active Users Displays information about users currently connected.
X-4-4-2 Users Log Displays the log information about users currently connected.
X-4-5 Rogue Devices Rogue access point detection can identify any unauthorized access points which may have been installed in the network. Click “Start” to scan for rogue devices: Unknown Rogue Devices area displays information about rogue devices discovered during the scan: Index (reference number), Channel, SSID, MAC Address, Security, Signal Strength, Type, Vendor and Action. The search function can be used to locate a known rogue device.
X-4-6 Information X-4-6-1 All Events/Activities Displays a log of time-stamped events for each access point in the Array – use the drop down menu to select an access point and view the log.
X-4-6-2 AP Monitoring Displays graphical monitoring information about access points in the Array for 2.4GHz & 5GHz: Traffic Tx (data transmitted in MB), Traffic Rx (data received in MB), No. of Clients, Wireless Channel, Tx Power (wireless radio power), CPU Usage and Memory Usage. Use the drop down menus to select an access point and date.
154
X-4-6-3 SSID Overview Displays graphical monitoring information about access points in the Array for 2.4GHz & 5GHz.
X-5 NMS Settings X-5-1 Access Point Displays information about each access point and access point group in the local network and allows you to edit access points and edit or add access point groups. The search function can be used to locate an access point or access point group.
individual Managed AP. Refer to the Status Icons in X-2-3 Managed AP for full descriptions. The “Action” icons enable you to allow or disallow an access point: Select an access point or access point group using the check-boxes and click “Edit” to make configurations, or click “Add” to add a new access point group: The Access Point Settings panel can enable or disable Auto Approve for all Managed APs. When enabled, Managed APs will automatically join the AP Array with the Controller AP.
Click “Save” to save the settings. Click “Cancel” to forfeit the changes. Click “Save and Apply” to save and apply the settings. X-5-1-1-1 Edit Basic Settings When “Override Group Setting” is checked, options/fields will turn white to allow adjustments. Basic Settings Name Edit the access point name. The default name is AP + MAC address. Description Enter a description of the access point for reference e.g. 2nd Floor Office. MAC Address Displays MAC address.
You can edit AP Groups from the NMS Settings Access Point page. IP Address Select “DHCP Client” for your access point to be assigned a Assignment dynamic IP address from your router’s DHCP server, or select “Static IP” to manually specify a static/fixed IP address for your access point (below). Check the box “Override Group Setting” if the AP is a member of an AP Group and you wish to use a different setting than the AP Group setting. IP Address Specify the IP address here.
X-5-1-1-3 Edit VLAN Settings When “Override Group Setting” is checked, options/fields will turn white to allow adjustments.
X-5-1-1-4 Edit Radio Settings Radio Settings Wireless Enable or disable the access point’s 2.4GHz or 5GHz wireless radio. When disabled, no SSIDs on that frequency will be active. Band Select the wireless standard used for the access point. Combinations of 802.11b, 802.11g, 802.11n & 802.11ac can be selected. Auto Pilot Enable/disable auto channel selection. Auto channel selection will automatically set the wireless channel for the access point’s 2.
Range Auto Pilot Interval Channel Channel Bandwidth BSS BasicRateSet will choose a channel. Specify a frequency for how often the auto channel setting will check/reassign the wireless channel. Check/uncheck the “Change channel even if clients are connected” box according to your preference. When Auto Pilot is disabled, select a channel (1-11) manually. Set the channel bandwidth or use Auto (automatically select based on interference level).
Fragment Threshold Multicast Rate Tx Power Beacon Interval Station idle timeout WDS Settings WDS Functionality AP Device Name MAC Address WDS VLAN Mode WDS VLAN ID WDS Encryption Set the fragment threshold of the wireless radio. The default value is 2346. Set the transfer rate for multicast packets or use the “Auto” setting. Set the power output of the wireless radio. You may not require 100% output power.
X-5-1-1-5 Edit WMM-EDCA Settings When “Override Group Setting” is checked, options/fields will turn white to allow adjustments. WMM-EDCA Settings: Back Ground Access Category (AC) is Back Ground Best Effort Access Category (AC) is Best Effort Video Access Category (AC) is video Voice Access Category (AC) is voice X-5-1-1-6 Edit BandSteering Settings When “Override Group Setting” is checked, options/fields will turn white to allow adjustments.
X-5-1-1-7 Edit Profile Settings When “Override Group Setting” is checked, options/fields will turn white to allow adjustments. Profile Settings WLAN Group Assign the access point’s 2.4GHz or 5GHz SSID(s) to a WLAN Group. You can edit WLAN groups in NMS Settings WLAN. Guest Assign the access point’s 2.4GHz or 5GHz SSID(s) to a Guest Network Network Group. You can edit Guest Network groups in NMS Group Settings Guest Network. RADIUS Assign the access point’s 2.4GHz SSID(s) to a RADIUS group.
X-5-1-1-8 Events Press “Refresh” to refresh the event log Press “Save” to save the event log as .log file. X-5-1-2 Add/Edit Access Point Group Configure your selected access point group. Access point group settings apply to all access points in the group, unless individually set to override group settings. You can use Profile Group Settings to assign the access point group to WLAN, Guest Network, RADIUS and Access Control groups. Click “Save” to save the settings. Click “Cancel” to forfeit the changes.
to select access point groups and use << and >> arrows to move APs between groups. Basic Group Settings Name Edit the access point group name. Description Enter a description of the access point group for reference e.g. 2nd Floor Office Group. IGMP Enable / Disable the IGMP Snooping function. Snooping IGMP snooping is the process of listening to Internet Group Management Protocol (IGMP) network traffic.
X-5-1-2-4 Edit Radio Group Settings Radio Group Settings Wireless Enable or disable the access point group’s 2.4GHz or 5GHz wireless radio. When disabled, no SSIDs on that frequency will be active. Band Select the wireless standard used for the access point group. Combinations of 802.11b, 802.11g, 802.11n & 802.11ac can be selected. Auto Pilot Enable/disable auto channel selection. Auto channel selection will automatically set the wireless channel for the access point group’s 2.
Auto Pilot Interval Channel Channel Bandwidth BSS BasicRateSet Specify a frequency for how often the auto channel setting will check/reassign the wireless channel. Check/uncheck the “Change channel even if clients are connected” box according to your preference. When Auto Pilot is disabled, select a channel (1-11) manually. Set the channel bandwidth or use Auto (automatically select based on interference level).
Fragment Threshold Multicast Rate Tx Power Beacon Interval Station idle timeout X-5-1-2-5 Set the fragment threshold of the wireless radio. The default value is 2346. Set the transfer rate for multicast packets or use the “Auto” setting. Set the power output of the wireless radio. You may not require 100% output power. Setting a lower power output can enhance security since potentially malicious/unknown users in distant areas will not be able to access your signal.
X-5-1-2-6 Edit BandSteering Settings X-5-1-2-7 Edit Profile Settings Profile Group Settings WLAN Group Assign the access point group’s 2.4GHz or 5GHz SSIDs to a WLAN Group. You can edit WLAN groups in NMS Settings WLAN. Guest Assign the access point group’s 2.4GHz or 5GHz SSIDs to a Network Guest Network Group. You can edit Guest Network groups in Group NMS Settings Guest Network. RADIUS Assign the access point group’s 2.4GHz SSIDs to a RADIUS Group group.
X-5-1-2-8 Edit Group Settings 172
X-5-2 WLAN Displays information about each WLAN and WLAN group in the local network and allows you to add or edit WLANs & WLAN Groups. When you add a WLAN Group, it will be available for selection in NMS Settings Access Point access point Profile Settings & access point group Profile Group Settings (X-5-1). The search function can be used to locate a WLAN or WLAN Group.
X-5-2-1 Add/Edit WLAN WLAN Settings Name/ESSID Edit the WLAN name (SSID). Description Enter a description of the SSID for reference e.g. 2nd Floor Office HR. VLAN ID Specify the VLAN ID. Broadcast SSID Enable or disable SSID broadcast. When enabled, the SSID will be visible to clients as an available Wi-Fi network.
network to clients – clients must manually enter the SSID in order to connect. A hidden (disabled) SSID is typically more secure than a visible (enabled) SSID. Wireless Client Enable or disable wireless client isolation. Wireless client Isolation isolation prevents clients connected to the access point from communicating with each other and improves security.
Select hard-to-guess passwords which include combinations of numbers, letters and symbols, and change your password regularly. WLAN Access Policy Traffic Enable / Disable traffic shaping. Shaping Downlink Set downlink between 1-200Mbps Uplink Set uplink between 1-200Mbps WLAN Advanced Settings Smart Enable or disable Smart Handover. Handover RSSI Set a RSSI Threshold level.
X-5-2-2 Add/Edit WLAN Group When you add a WLAN Group, it will be available for selection in NMS Settings Access Point access point Profile Settings & access point group Profile Group Settings (X-5-1). WLAN Group Settings Name Edit the WLAN Group name. Description Enter a description of the WLAN Group for reference e.g. 2nd Floor Office HR Group. Members Select SSIDs to include in the group using the checkboxes and assign VLAN IDs.
X-5-3 RADIUS Displays information about External & Internal RADIUS Servers, Accounts and Groups and allows you to add or edit RADIUS Servers, Accounts & Groups. When you add a RADIUS Group, it will be available for selection in NMS Settings Access Point access point Profile Settings & access point group Profile Group Settings (X-5-1). The search function can be used to locate a RADIUS Server, Account or Group.
X-5-3-1 Add/Edit External RADIUS Server Name Description RADIUS Server Authentication Port Shared Secret Session Timeout Accounting Accounting Port Enter a name for the RADIUS Server. Enter a description of the RADIUS Server for reference. Enter the RADIUS server host IP address. Set the UDP port used in the authentication protocol of the RADIUS server. Value must be between 1 – 65535. Enter a shared secret/password between 1 – 99 characters in length.
X-5-3-2 Add/Edit Internal RADIUS Server Upload EAP Certificate File EAP Certificate Displays the EAP certificate file format: PKCS#12(*.pfx/*.p12) File Format EAP Certificate Click “Upload” to open a new window and select the location File of an EAP certificate file to use. If no certificate file is uploaded, the internal RADIUS server will use a self-made certificate. Internal RADIUS Server Name Enter a name for the Internal RADIUS Server.
certificate. EAP Internal Select EAP internal authentication type from the drop down Authentication menu. Shared Secret Enter a shared secret/password for use between the internal RADIUS server and RADIUS client. The shared secret should be 1 – 99 characters in length. Session Set a duration of session timeout in seconds between 0 – Timeout 86400.
Add RADIUS Accounts User Name Enter the user names here, separated by commas. Add Click “Add” to add the user to the user registration list. Reset Clear text from the user name box. User Registration List User Name Displays the user name. Password Enter a password. Description Enter a description of the user. Delete Delete the user. Press “Save” to save the above actions, “Cancel” to forfeit the changes, or “Save & Apply” to save and apply the above actions.
Edit Edit User Registration List User Name Existing user name is displayed here and can be edited according to your preference. Password Enter or edit a password for the specified user. Description Displays current description of the user and can be edited. Delete Selected Delete All Delete selected user from the user registration list. Delete all users from the user registration list. Import If you wish to import RADIUS accounts, press “Import”. The following page is displayed below.
X-5-3-4 Add/Edit RADIUS Group When you add a RADIUS Group, it will be available for selection in NMS Settings Access Point access point Profile Settings & access point group Profile Group Settings (X-5-1). RADIUS Group Settings Group Name Edit the RADIUS Group name. Description Enter a description of the RADIUS Group for reference. 2.4GHz Enable/Disable primary & secondary RADIUS servers for RADIUS 2.4GHz. 5GHz Enable/Disable primary & secondary RADIUS servers for 5GHz.
X-5-4 Access Control MAC Access Control is a security feature that can help to prevent unauthorized users from connecting to your access point. This function allows you to define a list of network devices permitted to connect to the access point. Devices are each identified by their unique MAC address. If a device not on the list of permitted MAC addresses attempts to connect to the access point, it will be denied.
Delete Selected Delete All Delete the selected entry(s) from the list. Delete all entries from the table.
X-5-4-1 Add/Edit MAC Access Control Click “Add” to enter the page shown below: Add MAC Address Add Reset Enter a MAC address of computer or network device manually e.g. ‘aa-bb-cc-dd-ee-ff’ or enter multiple MAC addresses separated with commas, e.g. ‘aa-bb-cc-dd-ee-ff,aa-bb-cc-dd-ee-gg’ Click “Add” to add the MAC address to the MAC address filtering table. Clear all fields. MAC address entries will be listed in the “MAC Address Filtering Table”. Select an entry using the “Select” checkbox.
X-5-4-2 Add/Edit/Clone MAC Access Control Group When you add an Access Control Group, it will be available for selection in NMS Settings Access Point access point Profile Settings & access point group Profile Group Settings (X-5-1). Click “Add” to enter the page shown below: MAC Filter Group Settings Group Edit the MAC Access Control Group name. Name Description Enter a description of the MAC Access Control Group for reference.
X-5-5 Guest Network You can setup an additional “Guest” Wi-Fi network so guest users can enjoy Wi-Fi connectivity without accessing your primary networks. The “Guest” screen displays settings for your guest Wi-Fi network. The Guest Network panel displays information about Guest Networks and Guest Network Groups and allows you to add or edit Guest Network and Guest Network Group settings.
X-5-5-1 Add/Edit Guest Network Click “Add” to enter the page shown below: 190
Guest Network Settings Name/ESSID Edit the Guest Network name (SSID). Description Enter a description of the Guest Network for reference e.g. 2nd Floor Office HR. VLAN ID Specify the VLAN ID. Broadcast SSID Enable or disable SSID broadcast. When enabled, the SSID will be visible to clients as an available Wi-Fi network. When disabled, the SSID will not be visible as an available Wi-Fi network to clients – clients must manually enter the SSID in order to connect.
Please refer to X-6-2-3 or X-6-3-3 for more information on authentication and additional authentication types. Guest Access Policy Guest Portal Enable or disable guest portal for the guest network. Traffic Shaping Enable or disable traffic shaping for the guest network. Downlink Enter a downlink limit in MB. Uplink Enter an uplink limit in MB.
X-5-5-2 Add/Edit Guest Network Group When you add a Guest Network Group, it will be available for selection in NMS Settings Access Point access point Profile Settings & access point group Profile Group Settings (X-5-1). Guest Network Group Settings Group Name Edit the Guest Network Group name. Description Enter a description of the Guest Network for reference. Members Add SSIDs to the Guest Network group.
X-5-6 Users User Panel Press “Add” to add a new user, or “Edit” to edit an existing user, or “Clone” to clone an existing user’s settings. For the 3 options specified above, enter the fields below: Press “Save” to save the above actions, or “Cancel” to forfeit the changes. Check the checkbox of the user(s) you wish to delete and press “Delete Selected” to delete (multiple selections possible). Press “Delete All Expired Users” to delete the expired users. Press “Delete All” to delete all users.
Use “Upload List” to upload a user list. Use “Download List” to download existing list for possible future reference. User Group Panel Click “Add” to add a new user group, or “Edit” to edit an existing user group, or “Clone” to clone an existing user group’s settings. For the 3 options specified above, enter the fields below: Press “Save” to save the above actions, or “Cancel” to forfeit the changes.
X-5-7 Guest Portal A guest portal is a web page which is displayed to newly connected users before they are granted broader access to network resources. Check the checkbox of the portal(s) you wish to delete and press “Delete Selected” to delete (multiple selections possible). Press “Delete All” to delete all portals. Guest Portal Settings Idle Timeout Select an idle timeout time from the drop down menu. Login Enter a number (between 1 and 30) for the number of login Password password retry.
X-5-7-1 Free Guest Portal Type Guest Portal Settings Name Enter / edit portal name. Description Enter / edit description of the portal for reference. Landing Page Enter a “Promotion URL”.
X-5-7-2 User Level Agreement Guest Portal Type Guest Portal Settings Name Enter / edit portal name. Description Enter / edit description of the portal for reference. Landing Page Select between “Redirect to the original URL” or “Promotion URL” (enter the promotion URL). Default Choose a default language. Language For Login Portal, click “Edit” and see below to edit the login portal.
X-5-7-3 Static Users Guest Portal Type Guest Portal Settings Name Enter / edit portal name. Description Enter / edit description of the portal for reference. Authentication Select an authentication server. Server Authentication Select an authentication user group.
Landing Page Default Language Select between “Redirect to the original URL” or “Promotion URL” (enter the promotion URL). Choose a default language. For Login Portal, click “Edit” and see below to edit the login portal.
Guest Portal Settings Name Enter / edit portal name. Description Enter / edit description of the portal for reference. Authentication Select an authentication server. Server Authentication Select an authentication user group. User Group Landing Page Select between “Redirect to the original URL” or “Promotion URL” (enter the promotion URL). Default Choose a default language. Language Front Desk Settings User Group Select a user group.
Click “Preview” to preview the printout, “Confirm” to confirm the message, or “Cancel” to cancel the changes. For Login Portal, click “Edit” and see below to edit the login portal. X-5-7-5 External Captive Portal Guest Portal Type Guest Portal Settings Name Enter / edit portal name. Description Enter / edit description of the portal for reference. Landing Page Select between “Use external redirect URL” or “Promotion URL” (enter the promotion URL). External Settings Login URL Enter / edit a login URL.
X-5-7-6 Header Image Logo Image Title Message Background Color Editing “Login Portal” Click “Choose File” to select a file as the header image. Click “Choose File” to select a file as the logo image. (Only for Static and Dynamic users guest portal type) Enter / edit a title message. (Only for Static and Dynamic users guest portal type) Click on the field where color selection will be available. Select a desired color.
Terms of use Enter / edit the terms of use message Click “Preview” to preview the printout, “Confirm” to confirm the message, or “Cancel” to cancel the changes.
X-5-8 Zone Edit Zone Edit displays information about zones for use with the Zone Plan feature and allows you to add or edit zones. The search function can be used to find existing zones. Type in the search box and the list will update: Make a selection using the check-boxes and click “Edit” or click “Add” to add a new zone.
Add/Edit Zone Upload Zone Image Choose File Click to locate an image file to be displayed as a map in the Zone Plan feature. Typically a floor plan image is useful. Member(s) Setting Name/Location Name the location or simply enter the name of the location. Description Enter a description of the zone/location for reference. Members Assign access points to the specified zone/location for use with the Zone Plan feature.
X-5-9 Schedule Setup schedule start time/end time in Active WLAN Schedule Settings or Guest Network Advanced Settings. Check the checkbox of the schedules(s) you wish to delete and press “Delete Selected” to delete (multiple selections possible). Press “Delete All” to delete all schedules. Add / Edit Press “Save” to save the above actions, “Cancel” to forfeit the changes, or “Save & Apply” to save and apply the above actions.
X-5-10 Smart Roaming Smart roaming permits continuous connectivity on wireless devices that are moving. The handoffs from one station to another are fast and secure, and are managed seamlessly. Add / Edit Roaming Group Settings Name Enter / edit the name of roaming group. Description Enter / edit a description for reference. Mobility Enter / edit a mobility domain. Domain Encryption Key Enter / edit an encryption key. Over the DS Check to enable / disable this function. SSID Type Select the SSID type.
X-5-11 Device Monitoring This page monitors the device’s status (alive or not alive) after you set the Device IP. Add / Edit Enter an IP Address(es) and click “Add” to add the device(s). Click “Reset” to clear the field. Press “Apply” to apply the above action or “Cancel” to forfeit the addition.
X-5-12 Firmware Upgrade Firmware Upgrade allows you to upgrade firmware to Access Point Groups. First, upload the firmware file from a local disk or external FTP server: locate the file and click “Upload” or “Check”. The table below will display the Firmware Name, Firmware Version, NMS Version, Model and Size. Then click “Upgrade All” to upgrade all access points in the Array or select Access Point groups from the list using check-boxes and click “Upgrade Selected” to upgrade only selected access points.
X-5-13 Advanced X-5-13-1 System Security Configure the NMS system login name and password. Press “Apply” to apply the settings. X-5-13-2 Date & Time Configure the date & time settings of the AP Array. The date and time of the access points can be configured manually or can be synchronized with a time server.
Date and Time Settings Local Time Set the access point’s date and time manually using the drop down menus. Acquire Click “Acquire Current Time from Your PC” to enter the Current Time required values automatically according to your computer’s from your PC current time and date. NTP Time Server Use NTP The access point also supports NTP (Network Time Protocol) for automatic time and date setup. Server Name Enter the host name or IP address of the time server if you wish.
X-5-13-3 Google Maps Click on the link below the entry field and follow Google’s instructions to obtain an API key. Enter the key into the entry field. Press “Apply” to apply the setting or “Cancel” to forfeit the change.
X-6 Local Network X-6-1 Network Settings X-6-1-1 LAN-Side IP Address The “LAN-side IP address” page allows you to configure your AP Controller on your Local Area Network (LAN). You can enable the access point to dynamically receive an IP address from your router’s DHCP server or you can specify a static IP address for your access point, as well as configure DNS servers. You can also set your AP Controller as a DHCP server to assign IP addresses to other devices on your LAN.
act as a DHCP server and assign IP addresses on your LAN. Static IP Address IP Address Specify the IP address here. This IP address will be assigned to your access point and will replace the default IP address. Subnet Mask Specify a subnet mask. The default value is 255.255.255.0 Default For DHCP users, select “From DHCP” to get default gateway Gateway from your DHCP server or “User-Defined” to enter a gateway manually. For static IP users, the default value is blank.
DHCP Server IP Address Specify the IP address here. This IP address will be assigned to your access point and will replace the default IP address. Subnet Mask Specify a subnet mask. The default value is 255.255.255.0 IP Address Enter the start and end IP address of the IP address range Range which your access point’s DHCP server will assign to devices on the network. Domain Enter a domain name. Name Lease Time Select a lease time from the drop down menu.
DHCP Server Static IP Address MAC Enter the MAC address of the network device to be assigned a Address static IP address. IP Address Specify the IP address to assign the device. Add Click to assign the IP address to the device. X-6-1-2 LAN Port Settings The “LAN Port” page allows you to configure the settings for your AP Controllers wired LAN (Ethernet) ports. Wired LAN Port Enable Speed & Duplex Identifies LAN port 1 or 2. Enable/disable specified LAN port.
X-6-1-3 VLAN “VLAN” (Virtual Local Area Network) enables you to configure VLAN settings. A VLAN is a local area network which maps workstations virtually instead of physically and allows you to group together or isolate users from each other. VLAN IDs in the range 1 – 4095 are supported. VLAN Interface Wired LAN Identifies LAN port 1 or 2 and wireless SSIDs. Port/Wireless VLAN Mode Select “Tagged Port” or “Untagged Port” for specified LAN interface.
X-6-2 2.4GHz 11bgn The “2.4GHz 11bgn” menu allows you to view and configure information for your access point’s 2.4GHz wireless network across five categories: Basic, Advanced, Security, WDS & Guest Network.
X-6-2-1 Basic The “Basic” screen displays basic settings for your access point’s 2.4GHz Wi-Fi network (s). Wireless Band Enable SSID Number SSID# VLAN ID Auto Channel Enable or disable the access point’s 2.4GHz wireless radio. When disabled, no 2.4GHz SSIDs will be active. Wireless standard used for the access point. Combinations of 802.11b, 802.11g & 802.11n can be selected. Select how many SSIDs to enable for the 2.4GHz frequency from the drop down menu. A maximum of 16 can be enabled.
Auto Channel Range Auto Channel Interval Select a range to which auto channel selection can choose from. Select a time interval for how often the auto channel setting will check/reassign the wireless channel. Check/uncheck the “Change channel even if clients are connected” box according to your preference.
BSS Set a Basic Service Set (BSS) rate: this is a series of rates to BasicRateSet control communication frames for wireless clients. Press “Apply” to apply the configuration, or “Cancel” to forfeit the changes.
X-6-2-2 Advanced These settings are for experienced users only. Please do not change any of the values on this page unless you are already familiar with these functions. Changing these settings can adversely affect the performance of your access point. Contention Slot Preamble Type Guard Interval Select “Short” or “Long” – this value is used for contention windows in WMM (see X-6-7 WMM). Set the wireless radio preamble type. The preamble type in 802.
802.11g Enable/disable 802.11g protection, which increases reliability but Protection reduces bandwidth (clients will send Request to Send (RTS) to access point, and access point will broadcast Clear to Send (CTS), before a packet is sent from client). 802.11n Enable/disable 802.11n protection, which increases reliability Protection but reduces bandwidth (clients will send Request to Send (RTS) to access point, and access point will broadcast Clear to Send (CTS), before a packet is sent from client).
Airtime Fairness Airtime Fairness gives equal amounts of air time (instead of equal number of frames) to each client regardless of its theoretical data rate. Set airtime fairness to “Auto”, “Static” or “Disable”. When “Auto” is selected, the share rate is automatically managed.
X-6-2-3 Security The access point provides various security options (wireless data encryption). When data is encrypted, information transmitted wirelessly cannot be read by anyone who does not know the correct encryption key. It is essential to configure wireless security in order to prevent unauthorised access to your network.
SSID Selection Select a SSID to configure its security settings. Broadcast SSID Enable or disable SSID broadcast. Enable: the SSID will be visible to clients as an available Wi-Fi network. Disable: the SSID will not be visible as an available Wi-Fi network to clients – clients must manually enter the SSID in order to connect. A hidden (disabled) SSID is typically more secure than a visible (enabled) SSID. Wireless Client Enable or disable wireless client isolation.
Additional wireless authentication methods can be applied to all authentication methods: WPS must be disabled to use additional authentication. See X-6-4 WPS for WPS settings. MAC Address Filter Restrict wireless clients access based on MAC address specified in the MAC filter table. See X-6-6 MAC Filter to configure MAC filtering. MAC-RADIUS Authentication Restrict wireless clients access based on MAC address via a RADIUS server, or password authentication via a RADIUS server.
X-6-2-3-2 WEP WEP (Wired Equivalent Privacy) is a basic encryption type. When selected, a notice will pop-up as exemplified below: Below is a figure showing the configurable fields: Key Length Select 64-bit or 128-bit. 128-bit is more secure than 64-bit and is recommended. Key Type Choose from “ASCII” (any alphanumerical character 0-9, a-z and A-Z) or “Hex” (any characters from 0-9, a-f and A-F). Default Key Select which encryption key (1 – 4 below) is the default key.
Key Length Select 64-bit or 128-bit. 128-bit is more secure than 64-bit and is recommended. X-6-2-3-4 WPA-PSK WPA-PSK is a secure wireless encryption type with strong data protection and user authentication, utilizing 128-bit encryption keys. Below is a figure showing the configurable fields: Fast Roaming Settings will also be shown: 802.11r Fast Roaming WPA Type Encryption Key Renewal Interval Pre-Shared When your device roams from one AP to another on the same network, 802.
Key Type Pre-Shared Key or “Hex” (up to 64 characters from 0-9, a-f and A-F). Please enter a security key/password according to the format you selected above. 802.11r Fast Transition Roaming Settings Mobility_dom Specify the mobility domain (2.4GHz or 5GHz) ain Encryption Key Specify the encryption key Over the DS Enable or disable this function.
X-6-2-4 WDS Wireless Distribution System (WDS) can bridge/repeat access points together in an extended network. WDS settings can be configured as shown below. When using WDS, configure the IP address of each access point to be in the same subnet and ensure there is only one active DHCP server among connected access points, preferably on the WAN side. WDS must be configured on each access point, using correct MAC addresses. All access points should use the same wireless channel and encryption method.
2.4GHz WDS Select “WDS with AP” to use WDS with access point or “WDS Functionality Dedicated Mode” to use WDS and also block communication with regular wireless clients. When WDS is used, each access point should be configured with corresponding MAC addresses, wireless channel and wireless encryption method. Local MAC Displays the MAC address of your access point. Address WDS Peer Settings WDS # Enter the MAC address for up to four other WDS devices you wish to connect.
X-6-2-5 Guest Network Enable / disable guest network to allow clients to connect as guests.
X-6-3 5GHz 11ac 11an The “5GHz 11ac 11an” menu allows you to view and configure information for your access point’s 5GHz wireless network across five categories: Basic, Advanced, Security, WDS & Guest Network.
X-6-3-1 Basic The “Basic” screen displays basic settings for your access point’s 5GHz Wi-Fi network (s). Wireless Band Enable SSID Number SSID# VLAN ID Auto Channel Auto Enable or disable the access point’s 5GHz wireless radio. When disabled, no 5GHz SSIDs will be active. Wireless standard used for the access point. Combinations of 802.11a, 802.11n & 802.11ac can be selected. Select how many SSIDs to enable for the 2.4GHz frequency from the drop down menu. A maximum of 16 can be enabled.
Channel Range Auto Channel Interval from. Select a time interval for how often the auto channel setting will check/reassign the wireless channel. Check/uncheck the “Change channel even if clients are connected” box according to your preference. Channel Select the channel bandwidth: Bandwidth 20MHz (lower performance but less interference); or Auto 40/20 MHz; or Auto 80/40/20 MHz (automatically select based on interference level).
X-6-3-2 Advanced These settings are for experienced users only. Please do not change any of the values on this page unless you are already familiar with these functions. Changing these settings can adversely affect the performance of your access point. Guard Interval 802.11n Protection DTIM Period RTS Threshold Fragment Threshold Set the guard interval. A shorter interval can improve performance. Enable/disable 802.
Multicast Rate Tx Power Set the transfer rate for multicast packets or use the “Auto” setting. Set the power output of the wireless radio. You may not require 100% output power. Setting a lower power output can enhance security since potentially malicious/unknown users in distant areas will not be able to access your signal. Beacon Set the beacon interval of the wireless radio. The default value Interval is 100.
Airtime Fairness Airtime Fairness gives equal amounts of air time (instead of equal number of frames) to each client regardless of its theoretical data rate. Set airtime fairness to “Auto”, “Static” or “Disable”. When “Auto” is selected, the share rate is automatically managed.
X-6-3-3 Security The access point provides various security options (wireless data encryption). When data is encrypted, information transmitted wirelessly cannot be read by anyone who does not know the correct encryption key. It’s essential to configure wireless security in order to prevent unauthorised access to your network. SSID Selection Select which SSID to configure security settings for. Broadcast SSID Enable or disable SSID broadcast.
Wireless Client Enable or disable wireless client isolation. Wireless client Isolation isolation prevents clients connected to the access point from communicating with each other and improves security. Typically, this function is useful for corporate environments or public hot spots and can prevent brute force attacks on clients’ usernames and passwords. Load Balancing Load balancing limits the number of wireless clients connected to an SSID. Set a load balancing value (maximum 100).
X-6-3-4 WDS Wireless Distribution System (WDS) can bridge/repeat access points together in an extended network. WDS settings can be configured as shown below. When using WDS, configure the IP address of each access point to be in the same subnet and ensure there is only one active DHCP server among connected access points, preferably on the WAN side. WDS must be configured on each access point, using correct MAC addresses. All access points should use the same wireless channel and encryption method.
5GHz WDS Mode WDS Select “WDS with AP” to use WDS with access point or “WDS Functionality Dedicated Mode” to use WDS and also block communication with regular wireless clients. When WDS is used, each access point should be configured with corresponding MAC addresses, wireless channel and wireless encryption method. Local MAC Displays the MAC address of your access point. Address WDS Peer Settings WDS # Enter the MAC address for up to four other WDA devices you wish to connect.
X-6-3-5 Guest Network Enable / disable guest network to allow clients to connect as guests.
X-6-4 WPS Wi-Fi Protected Setup is a simple way to establish connections between WPS compatible devices. WPS can be activated on compatible devices by pushing a WPS button on the compatible device or from within the compatible device’s firmware / configuration interface (known as PBC or “Push Button Configuration”). When WPS is activated in the correct manner and at the correct time for two compatible devices, they will automatically connect.
WPS Product PIN Push-Button WPS WPS by PIN WPS Security WPS Status Displays the WPS PIN code of the device, used for PIN code WPS. You will be required to enter this PIN code into another WPS device for PIN code WPS. Click “Generate PIN” to generate a new WPS PIN code. Click “Start” to activate WPS on the access point for approximately 2 minutes. Enter the PIN code of another WPS device and click “Start” to attempt to establish a WPS connection. WPS function will last for approximately 2 minutes.
X-6-5 RADIUS The RADIUS menu allows you to configure the access point’s external RADIUS server settings. A RADIUS server provides user-based authentication to improve security and offer wireless client control – users can be authenticated before gaining access to a network. The access point can utilize a primary and a secondary (backup) external RADIUS server for each of its wireless frequencies (2.4GHz & 5GHz).
X-6-5-1 RADIUS Settings Configure the RADIUS server settings for 2.4GHz and 5GHz. Each frequency can use an internal or external RADIUS server.
RADIUS Type Select “Internal” to use the access point’s built-in RADIUS server or “external” to use an external RADIUS server. RADIUS Server Enter the RADIUS server host IP address. Authentication Set the UDP port used in the authentication protocol of the Port RADIUS server. Value must be between 1 – 65535. Shared Secret Enter a shared secret/password between 1 – 99 characters in length. This should match the “MAC-RADIUS” password used in X-6-2-3 or X-6-3-3.
X-6-5-2 Internal Server The access point features a built-in RADIUS server which can be configured as shown below used when “Internal” is selected for “RADIUS Type” in the “Wireless Settings” “RADIUS” “RADIUS Settings” menu. To use RADIUS servers, go to “Wireless Settings” “Security” and select “MAC RADIUS Authentication” “Additional Authentication” and select “MAC RADIUS Authentication” (see X -6-2-3 & X -6-3-3).
Session Timeout Termination Action “MAC-RADIUS” password used in X-6-2-3 or X-6-3-3. Set a duration of session timeout in seconds between 0 – 86400. Select a termination-action attribute: Reauthentication: sends a RADIUS request to the access point; or, Not-Reauthentication: sends a default termination-action attribute to the access point; or Not-Send: no termination-action attribute is sent to the access point. Press “Apply” to apply the configuration, or “Cancel” to forfeit the changes.
X-6-5-3 RADIUS Accounts The internal RADIUS server can authenticate up to 256 user accounts. The “RADIUS Accounts” page allows you to configure and manage users. Enter a username in the box below and click “Add” to add the username.
Press “Continue” see the new user registration list. Select “Edit” to edit the username and password of the RADIUS account: Press “Apply” to apply the configuration, or “Cancel” to forfeit the changes. User Name Add Reset Enter the user names here, separated by commas. Click “Add” to add the user to the user registration list. Clear text from the user name box. Select User Name Password Check the box to select a user. Displays the user name.
X-6-6 MAC Filter MAC filtering is a security feature that can help to prevent unauthorized users from connecting to your access point. This function allows you to define a list of network devices permitted to connect to the access point. Devices are each identified by their unique MAC address. If a device which is not on the list of permitted MAC addresses attempts to connect to the access point, it will be denied. To enable MAC filtering, go to “Wireless Settings” “2.
Add MAC Address Add Reset Enter a MAC address of computer or network device manually e.g. ‘aa-bb-cc-dd-ee-ff’ or enter multiple MAC addresses separated with commas, e.g. ‘aa-bb-cc-dd-ee-ff,aa-bb-cc-dd-ee-gg’ Click “Add” to add the MAC address to the MAC address filtering table. Clear all fields. MAC address entries will be listed in the “MAC Address Filtering Table”. Select an entry using the “Select” checkbox. Select Delete selected or all entries from the table.
X-6-7 WMM Wi-Fi Multimedia (WMM) is a Wi-Fi Alliance interoperability certification based on the IEEE 802.11e standard, which provides Quality of Service (QoS) features to IEE 802.11 networks. WMM prioritizes traffic according to four categories: background, best effort, video and voice. Configuring WMM consists of adjusting parameters on queues for different categories of wireless traffic. Traffic is sent to the following queues: Background Low Priority High throughput, non time sensitive bulk data e.g.
Queues automatically provide minimum transmission delays for video, voice, multimedia and critical applications. The values can be adjusted further manually: CWMin CWMax AIFSN TxOP Minimum Contention Window (milliseconds): This value is input to the initial random backoff wait time algorithm for retry of a data frame transmission. The backoff wait time will be generated between 0 and this value.
X-6-8 Schedule The schedule feature allows you to automate the wireless network for the specified time ranges. Wireless scheduling can save energy and increase the security of your network. Check/uncheck the box “Enable” and select “Apply” to enable/disable the wireless scheduling function. 1. Select “Add” to add a schedule.
2. Settings page will be shown if “Continue” is selected: Check/uncheck the box of the desired SSID network, day of schedule and select the Start Time and End Time (using the dropdown menu). Select “Apply” to apply the settings, or “Cancel” to forfeit the schedule. Schedules will be shown in the Schedule List as exemplified below: 3.
X-7 Local Settings X-7-1 Operation Mode The access point can function in five different modes. Set the operation mode of the access point here. 1. AP Mode: The device acts as a standalone access point 2. Repeater Mode: The device acts as a wireless repeater (also called wireless range extender) that takes an existing signal from a wireless router or wireless access point and rebroadcasts it to create a second network. 3. AP controller Mode: The device acts as the designated master of the AP array 4.
In Managed AP mode some functions of the access point will be disabled in this user interface and must be set using Edimax Pro NMS on the AP Controller. In AP Controller Mode the access point will switch to the Edimax Pro NMS user interface. Press “Apply” to apply the configuration, or “Cancel” to forfeit the changes.
X-7-2 Network Settings X-7-2-1 System Information “System Information” page displays basic system information.
System Model Product Name Uptime System Time Boot From Displays the model number of the access point. Displays the product name for reference, which consists of “AP” plus the MAC address. Displays the total time since the device was turned on. Displays the system time. Displays information for the booted hardware, booted from internal memory. Displays the firmware version. Firmware Version MAC Address Displays the access point’s MAC address. Management Displays the management VLAN ID.
the power present in a received radio signal. Wireless 2.4GHZ (5GHz) / SSID SSID Displays the SSID name(s) for the specified frequency. Authentication Displays the authentication method for the specified SSID. Method See X -6-1 Network Settings. Encryption Displays the encryption type for the specified SSID. See X-6-1 Type Network Settings. VLAN ID Displays the VLAN ID for the specified SSID. See X -6-1-3 VLAN. Additional Displays the additional authentication type for the specified Authentication SSID.
X-7-2-2 Wireless Clients “Wireless Clients” page displays information about all wireless clients connected to the access point on the 2.4GHz or 5GHz frequency. Refresh time Auto Refresh Time Manual Refresh Select a time interval for the client table list to automatically refresh. Click refresh to manually refresh the client table. 2.4GHz (5GHz) WLAN Client Table SSID Displays the SSID which the client is connected to. MAC Address Displays the MAC address of the client.
X-7-2-3 Wireless Monitor “Wireless Monitor” is a tool built into the access point to scan and monitor the surrounding wireless environment. Select a frequency and click “Scan” to display a list of all SSIDs within range along with relevant details for each SSID. Wireless Monitor Site Survey Select which frequency (or both) to scan, and click “Scan” to begin. Channel After a scan is complete, click “Export” to save the results to Survey Result local storage.
X-7-2-4 Log “System log” displays system operation information such as up time and connection processes. This information is useful for network administrators. Older entries will be overwritten when the log is full Save Clear Refresh Click to save the log as a file on your local computer. Clear all log entries. Refresh the current log.
WPS M1 - M8 messages WPS success Change Settings System Boot Displays current model name NTP Client Wired Link LAN Port link status and speed status Proxy ARP Proxy ARP module start & stop Bridge Bridge start & stop. SNMP SNMP server start & stop. HTTP HTTP start & stop. HTTPS HTTPS start & stop. SSH SSH-client server start & stop. Telnet Telnet-client server start or stop. WLAN (2.4G) WLAN (2.
X-7-3 Management X-7-3-1 Admin You can change the password used to login to the browser-based configuration interface here. It is advised to do so for security purposes. If you change the administrator password, please make a note of the new password. In the event that you forget this password and are unable to login to the browser based configuration interface, see I-5 Reset for how to reset the access point. Account to Manage This Device Administrator Set the access point’s administrator name.
Advanced Settings Product Name Edit the product name according to your preference consisting of 1-32 alphanumeric characters. This name is used for reference purposes. Management Check/uncheck the boxes to enable/disable specified Protocol management interfaces (see below). When SNMP is enabled, complete the SNMP fields below. SNMP Version Select SNMP version appropriate for your SNMP manager. SNMP Get Enter an SNMP Get Community name for verification with the Community SNMP manager for SNMP-GET requests.
X-7-3-2 Date and Time Configure the date and time settings of the access point here. The date and time of the device can be configured manually or can be synchronized with a time server. Date and Time Settings Local Time Set the access point’s date and time manually using the drop down menus. Acquire Click “Acquire Current Time from Your PC” to enter the Current Time required values automatically according to your computer’s from your PC current time and date.
Time Zone Time Zone Select the time zone of your country/region. If your country/region is not listed, please select another country/region whose time zone is the same as yours. Press “Apply” to apply the configuration, or “Cancel” to forfeit the changes.
X-7-3-3 Syslog Server Settings The system log can be sent to a server. Syslog Server Settings Transfer Logs Check the box to enable the use of a syslog server. Enter a host name, domain or IP address for the server, consisting of up to 128 alphanumeric characters. Press “Apply” to apply the configuration, or “Cancel” to forfeit the changes.
X-7-3-4 Syslog E-mail Settings Syslog E-mail Settings E-mail Logs Check the box to enable/disable e-mail logs. E-mail Subject Specify the subject line of log emails. SMTP Server Specify the SMTP server address used to send log emails. Address SMTP Server Specify the SMTP server port used to send log emails. Port Sender E-mail Specify the sender email address. Receiver Specify the email to receive log emails. E-mail Authentication Disable or select authentication type: SSL or TLS.
X-7-3-5 I’m Here The access point features a built-in buzzer which can sound on command using the “I’m Here” page. This is useful for network administrators and engineers working in complex network environments to locate the access point. The buzzer is loud! Duration of Sound Sound Buzzer Set the duration for which the buzzer will sound when the “Sound Buzzer” button is clicked. Activate the buzzer sound for the above specified duration of time.
X-7-4 Advanced X-7-4-1 LED Settings The access point’s LEDs can be manually enabled or disabled according to your preference. Power LED Diag LED Select on or off. Select on or off.
X-7-4-2 Update Firmware The “Firmware” page allows you to update the firmware of the system. Updated firmware versions often offer increased performance and security, as well as bug fixes. Download the latest firmware from the Edimax website. Do not switch off or disconnect the access point during a firmware upgrade, as this could damage the device. Firmware Location Click “Choose File” to upload firmware from your local computer.
X-7-4-3 Save/Restore Settings The device’s “Save / Restore Settings” page enables you to save / backup the device’s current settings as a file to your local computer, and restore the access point to previously saved settings. Save Settings to PC Save Settings Encryption: If you wish to encrypt the configuration file with a password, check the “Encrypt the configuration file with a password” box and enter a password. Click “Save” to save current settings.
X-7-4-4 Factory Default If the access point malfunctions or is not responding, rebooting the device (VI-5-5 Reboot) maybe an option to consider. If rebooting does not work, try resetting the device back to its factory default settings. You can reset the access point back to its default settings using this feature if the reset button is not accessible. Factory Default Click “Factory Default” to restore settings to the factory default. A pop-up window will appear and ask you to confirm.
X-7-4-5 Reboot If the access point malfunctions or is not responding, rebooting the device may be an option to consider. You can reboot the access point remotely using this feature. Reboot Click “Reboot” to reboot the device. A countdown will indicate the progress of the reboot.
X-8 Toolbox The Toolbox panel provides network diagnostic tools: Ping, Traceroute, and IP Scan. X-8-1 Network Connectivity X-8-1-1 Ping Ping is a computer network administration utility used to test whether a particular host is reachable across an IP network and to measure the round-trip time for sent messages. Destination Enter the address of the host. Address Execute Click “Execute” to ping the host.
X-8-1-2 Trace Route Traceroute is a diagnostic tool for displaying the route (path) and measuring transit delays of packets across an IP network. Destination Enter the address of the host. Address Execute Click “Execute” to execute the traceroute command.
X-8-1-3 IP Scan 284
XI XI-1 Appendix Configuring your IP address The access point uses the default IP address 192.168.2.2. In order to access the browser based configuration interface, you need to modify the IP address of your computer to be in the same IP address subnet e.g. 192.168.2.x (x = 3 – 254). The procedure for modifying your IP address varies across different operating systems; please follow the guide appropriate for your operating system. In the following examples we use the IP address 192.168.2.
XI-1-1 Windows XP 1. Click the “Start” button (it should be located in the lower-left corner of your computer) “Control Panel” “Network and Internet Connections” “Network Connections” “Local Area Connection”. The “Local Area Connection Properties” window will appear, select “Internet Protocol (TCP / IP)”, and click “Properties”.
2. Select “Use the following IP address”, then input the following values: IP address: 192.168.2.10 Subnet Mask: 255.255.255.0 Click ‘OK’ when finished.
XI-1-2 Windows Vista 1. Click the “Start” button (it should be located in the lower-left corner of your computer) “Control Panel” “View Network Status and Tasks” “Manage Network Connections” “Local Area Network” “Properties”. The “Local Area Connection Properties” window will appear, select “Internet Protocol Version 4 (TCP / IPv4)”, and then click “Properties”.
2. Select “Use the following IP address”, then input the following values: IP address: 192.168.2.10 Subnet Mask: 255.255.255.0 Click ‘OK’ when finished.
XI-1-3 Windows 7 1. Click the “Start” button (it should be located in the lower-left corner of your computer), then click “Control Panel”. 2. Under “Network and Internet” click “View network status and tasks”.
3. Click “Local Area Connection”. 4. Click “Properties”.
5. Select “Internet Protocol Version 4 (TCP/IPv4) and then click “Properties”.
6. Select “Use the following IP address”, then input the following values: IP address: 192.168.2.10 Subnet Mask: 255.255.255.0 Click ‘OK’ when finished.
XI-1-4 Windows 8 1. From the Windows 8 Start screen, switch to desktop mode by clicking the “Desktop” box. 2. In desktop mode, click the File Explorer icon in the bottom left of the screen, as shown below.
3. Right click “Network” and select “Properties”. 4. In the window that opens, select “Change adapter settings” from the left side.
5. Right click the connection and select “Properties”. 6. Select “Internet Protocol Version 4 (TCP/IPv4) and then click “Properties”.
7. Select “Use the following IP address”, then input the following values: IP address: 192.168.2.10 Subnet Mask: 255.255.255.0 Click ‘OK’ when finished.
XI-1-5 Mac 1. Have your Macintosh computer operate as usual, and click on “System Preferences” 2. In System Preferences, click on “Network”. 3. Click on “Ethernet” in the left panel.
4. Open the drop-down menu labeled “Configure IPv4” and select “Manually”. 5. Enter the IP address 192.168.2.10 and subnet mask 255.255.255.0. Click on “Apply” to save the changes.
XI-2 Command Line Interface Settings can also be configured using the Command Line Interface using the steps and commands shown below: Edit Mode 1. Log on this product. 2. Enter the “edit start” command. man$ edit start 3. The change of prompt from "man $" to "man [edit] $" indicates that Edit Mode is initiated.
- NA NA Immediate Mode, Edit Mode, Reference Mode CAP1300 # config basic_info show status date&time # config basic_info show status led_settings config buzzer time Set the sound time. config buzzer time (time) - (time) – Buzzer Time.
# config date 12/12/12 15:30 config firmware Update the firmware of this product. config firmware target tftp server (tftp-server) file (filename) - - (tftp-server) – Update the firmware from the TFTP server. (filename) – Set the name of the firmware file. NA Immediate Mode, Edit Mode, Reference Mode CAP1300 # config firmware target tftp server 192.168.2.100 file CAP1300.
- CAP1300 # config led_setting power on # config led_setting diag off config management Settings for the management interface of this product. config management {protocol} {disable|enable} config management snmp version v1/v2 rcom (rcom) rwcom (rwcom) config management snmp version v3 config management snmp trap {disable|enable} trapcom (trapcom) ip (ipaddress) - - - {protocol} http Set http protocol Ssh Set ssh protocol.
config ntp client Set the NTP client function of this product. config ntp client disable config ntp client enable server (ntp-server) interval (ntp-interval) - - (ntp-server) Set the host name or IP address of the NTP server. (ntp-interval) Set the interval time to query the NTP server. (1~24) Invalid Immediate Mode, Edit Mode CAP1300 # config ntp client enable server clock.stdtime.gov.
- Immediate Mode CAP1300 # config reboot # config reboot force config restore Restore the settings from the configuration file of this product. config restore target tftp server (tftp-server) file (filename) [pass (password)] [force] - - tftp Restore configuration from the TFTP server. (tftp-server) Set the host name or IP address of the TFTP server. (filename) Set the name of the configuration file.
config syslog clinet Set the transfer function by the syslog protocol log information. config syslog client enable server (servername) config syslog client disable - (servername) Set the host name or IP address of the syslog server. Invalid Immediate Mode, Edit Mode CAP1300 # config syslog client enable server 192.168.3.
19 | (GMT-03:00) Brasilia 20 | (GMT-03:00) Buenos Aires, Georgetown 21 | (GMT-03:00) Greenland 22 23 24 25 26 27 28 29 30 31 | (GMT-02:00) Mid-Atlantic | (GMT-01:00) Azores | (GMT-01:00) Cape Verde Is.
60 | (GMT+08:00) Taipei, Taiwan 61 | (GMT+09:00) Osaka, Sapporo, Tokyo 62 | (GMT+09:00) Seoul 63 64 65 66 67 68 69 70 71 72 - | (GMT+09:00) Yakutsk | (GMT+09:00) Adelaide | (GMT+09:30) Darwin | (GMT+10:00) Brisbane | (GMT+10:00) Canberra, Melbourne, Sydney | (GMT+10:00) Guam, Port Moresby | (GMT+10:00) Hobart | (GMT+10:00) Vladivostok | (GMT+11:00) Magadan, Solamon, New Caledonia | (GMT+12:00) Auckland, Wllington 73 | (GMT+12:00) Fiji, Kamchatka, Marshall Is.
XI-2-2 LAN lan ether port {pd|pse} 8023az Enable or disable 802.3az for wired ports. lan ether port {pd|pse} 8023az {state} - - pd Set one of wired ports. pse Set two of wired ports. {state} disable Disable the ether port of 802.3az. enable Enable the ether port of 802.3az.
- - - pd Set the one of wired ports. pse Set the two of wired ports. {speed} 10 Set to 10Mbps. 100 Set to 100Mbps. {duplex} full Set to full duplex half Set to half duplex. {state} disable Disable the flow control. enable Enable the flow control.
- NA Immediate Mode, Edit Mode, Reference Mode CAP1300 # lan ether show status lan ip defaultgw Set the default route, or manual setting of the default gateway that has the management subnet. (If you want to remove the default gateway address set, you enter the clear.) lan ip defaultgw {clear|(gateway)} - (gateway) Enter the default gateway address.
- (dnsserver) Enter the IP address of the DNS server. DHCP Immediate Mode, Edit Mode CAP1300 # lan ip dns primary 10.10.1.127 # lan ip dns secondary clear lan ip static Set the DHCP to static IP. lan ip static (ipaddress) subnet_mask (maskip) - - (ipaddress) Set the ip address of the lan. (maskip) Set the subnet-mask of the lan.
lan ip vlan Set the VLAN ID of this product. lan ip vlan (vlanid) - (vlanid) Set the VLAN ID. (1-4094) 1 Immediate Mode, Edit Mode CAP1300 # lan ip vlan 1 XI-2-3 Show show status config admin Show the username and advanced settings.
- CAP1300 # show status config buzzer show status config date&time Show the date and time. show status config date&time. - NA NA Immediate Mode, Edit Mode, Reference Mode CAP1300 # show status config date&time show status config led_settings Show the LED settings.
- CAP1300 # show status config syslog_server show status maclist Show the maclist information. show status maclist - NA NA Immediate Mode, Edit Mode, Reference Mode CAP1300 # show status maclist show status lan ether Show the VLAN information.
- CAP1300 # show status lan ip show status radius Show the radius information. show status radius - NA NA Immediate Mode, Edit Mode, Reference Mode CAP1300 # show status radius show status system_info Show the system information.
- Immediate Mode, Edit Mode, Reference Mode CAP1300 # show status system_info show status wlan {2.4g | 5g} advanced Show the wireless advanced information. show status wlan {2.4g | 5g} advanced - NA NA Immediate Mode, Edit Mode, Reference Mode CAP1300 # show status wlan 2.4g advanced show status wlan {2.4g|5g} basic Show the wireless information.
- NA Immediate Mode, Edit Mode, Reference Mode CAP1300 # show status wlan 2.4g clients show status wlan {2.4g | 5g} security Show the wireless security information. show status wlan {2.4g | 5g} security - NA NA Immediate Mode, Edit Mode, Reference Mode CAP1300 # show status wlan 2.4g security show status wlan {2.
- NA Immediate Mode, Edit Mode, Reference Mode CAP1300 # show status wlan monitor show status wlan wmm Show the status of wireless QoS configuration. show status wlan wmm - NA NA Immediate Mode, Edit Mode, Reference Mode CAP1300 # show status wlan wmm show status wlan wps Show the status of wireless security WPS.
XI-2-4 Wlan wlan {2.4g | 5g} 80211n_protect Set the 802.11n protection. wlan 5g 80211n_protect {state} wlan 2.4g {protect} {state} - - {protect} 80211n_protect Set the 802.11n protection. 80211g_protect Set the 802.11g protection. {state} disable Disable the 802.11n or 802.11g protection. enable Enable the 802.11n or 802.11g protection.
- - {media} 2.4g 5g Set the interval between transmission of 802.11g. Set the interval between transmission of 802.11a. (num) Set the transmission interval. (1~255) 1 Immediate Mode, Edit Mode, Reference Mode CAP1300 # wlan 5g beacon dtim 100 wlan {2.4g | 5g} beacon interval Configure the transmission interval of the beacon. wlan {media} beacon interval (num) - - {media} 2.
wlan {2.4g | 5g} channel checktime Set the channel check time. wlan {media} channel checktime {period} - - {media} 2.4g Set the channel check time on 802.11g. 5g Set the channel check time on 802.11a. {period} half_hr Set the half hour time to check channel. one_hr Set the one hour time to check channel. two_hr Set the two hours time to check channel. half_day Set the half day time to check channel. one_day Set the one day time to check channel.
wlan {2.4g | 5g} fragmentthreshold Set the fragment threshold. wlan {media} fragmentthreshold (num) - {media} 2.4g Enable or disable the wlan of the 802.11g. 5g Enable or disable the wlan of the 802.11a. (num) Set the threshold for the frame size of frame transmission to perform fragmentation. (256~2346) - 2.
{mode} - short Set the guard interval to short. long Set the guard interval to long. short Immediate Mode, Edit Mode CAP1300 # wlan 2.4g gi long wlan {2.4g | 5g} mrate Configure the multicast or broadcast rate. wlan {media} mrate {rate} - - {media} 2.4g Set the multicast / broadcast rate of 802.11g 5g Set the multicast / broadcast rate of 802.11a {rate} Set one of the following rates.
- # wlan 5g rtsthreshold 1800 wlan {2.4g | 5g} ssid addsecurity Configure additional authentication SSID.
- - 5g Create the multi-SSID on 802.11a. (num) Create the number of the SSID.(1~5) 5g ssid number: 1 2.4g ssid number: 1 Immediate Mode, Edit Mode CAP1300 # wlan 2.4g ssid create 5 wlan {2.4g | 5g} ssid {disable | enable} Enable or disable the SSID. wlan {media} ssid {disable | enable} { ssidname (ssid) | ssidnum (ssidnum)} - - {media} 2.4g To enable or disable the SSID on 802.11g.
- Immediate Mode, Edit Mode CAP1300 # wlan 2.4g ssid loadbalance ssidnum 2 limit 20 # wlan 5g ssid loadbalance ssidname edimax5g01-168801 limit 30 wlan {2.4g | 5g} ssid privacy Set the privacy separator feature. wlan {media} ssid privacy { ssidname (ssid) | ssidnum (ssidnum) } { station | ssid | disable } - - {media} 2.4g Set the privacy separator feature on 802.11g. 5g Set the privacy separator feature on 802.11a.
- - Immediate Mode, Edit Mode CAP1300 # wlan 2.4g ssid rename ssidname CAP1300-D6D5A0_G air_station_2.4g_2 # wlan 5g ssid rename ssidnum 2 air_station_5g_2 - wlan {2.4g | 5g} ssid security Set the security of the SSID.
tkip mixed - When security mode choose wpaeap or wpapsk, specify the TKIP encryption method. When security mode choose wpaeap/ wpamixedeap or wpapsk/wpamixedpsk, specify the TKIP and AES encryption method. (num) Specify the period to key renewal. (0~9999 minutes) (psk) Enter the pre-shared key. passphrase (Enter 8 characters) hex (Enter 64 characters) No authenticate Immediate Mode, Edit Mode CAP1300 # wlan 2.
wlan {2.4g | 5g} txpower Configure the wireless transmit power. wlan {media} txpower {power} - - {media} 2.4g Set the 802.11g radio transmit power. 5g Set the 802.11a radio transmit power. {power} In the range of 10-100%, and set the transmission power in 10%, 25%, 50%, 75%, 90%, 100%. (10, 25, 50, 75, 90, 100) 100 Immediate Mode, Edit Mode CAP1300 # wlan 2.4g txpower 50 wlan {2.
wlan {2.4g | 5g} wds mode Set the wds mode. wlan {media} wds mode {mode)} - - {media} 2.4g Set the WDS function on 802.11g. 5g Set the WDS function on 802.11a. {mode} disable Disable the WDS dedicated_wds Set the WDS with WDS. wds_with_ap Set the WDS with AP. disable Immediate Mode, Edit Mode CAP1300 # wlan 5g wds mode disable # wlan 2.4g wds mode wds_with_ap wlan {2.
wlan 2.4g band Set the operating mode of the radio and BasicRateSet on 802.11g, and configure the wireless channel. wlan 2.4g band 11b brs { 2m | all } channel {ch} bandwidth 20m wlan 2.4g band 11b brs { 2m | all } channel {auto-ch} bandwidth 20m wlan 2.4g band { 11g | 11b11g} brs {brs} channel {ch} bandwidth 20m wlan 2.4g band { 11g | 11b11g} brs {brs} channel {auto-ch} bandwidth 20m wlan 2.4g band { 11g11n|11b11g11n} brs {brs} channel {ch} bandwidth {width} wlan 2.
# wlan 2.4g band 11b11g brs 24m channel 13 bandwidth 20m # wlan 2.4g band 11b11g brs 11m channel auto_1-11ch bandwidth 20m # wlan 2.4g band 11b11g11n brs all channel 10 bandwidth 40m+ex_lower_ch wlan 2.4g conslot Set the contention slot of 802.11g . wlan 2.4g conslot {mode} - - {mode} short Set the contention slot to short. long Set the contention slot to long.
{autowidth} - {brs} Select from the following basic rate set 24m Set to 6/12/24 Mbps All Set all rate supported by current band {ch} Set the wireless channel of 802.11a Available channel number: 36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, {autoch} {width} - - 124, 128, 132, 136, 140 Set the wireless auto channel of 802.11a Available channel number: w52, w52+w53, w52+w53+w56 Set the wireless bandwidth of 802.
- (macaddress) Enter the MAC address to be registered in the list. NA Immediate Mode, Edit Mode CAP1300 # wlan maclist add 12:22:33:44:55:66 wlan maclist delete Remove the registration of MAC address restriction list. wlan maclist delete { all | address (macaddress) | num (list-number) } [force] - - (macaddress) Specify the MAC address to be deleted from the list.
wlan wmm {ap | sta} Set the WMM parameters. wlan wmm {ap | sta} {parameter} bk (value) be (value) vi (value) vo (value) - - (parameter) aifsn, cwmax, cwmain, txop (value) Set the parameter values.
wlan wmm qos Enable or disable the wmm qos. wlan wmm qos {disable | enable} - NA disable Immediate Mode, Edit Mode CAP1300 # wlan wmm qos enable wlan wps create pincode Generate the WPS PIN code.
wlan wps release Release the WPS. wlan wps release - NA NA Immediate Mode, Edit Mode CAP1300 # wlan wps release wlan wps show status Show the status of wlan security WPS.
wlan wps start push_button Start the WPS by push the button. wlan wps start push_button - NA NA Immediate Mode CAP1300 # wlan wps start push_button XI-2-5 Radius radius {2.4g | 5g} {primary | secondary} enable server Configure the enable built-in RADIUS server.
- - - 2.4g 5g Set the radius server of 802.11g. Set the radius server of 802.11a. (num) Set the time of the session-time (0~86400 sec) primary session-timeout: 3600 secondary session-timeout: 3600 Immediate Mode, Edit Mode CAP1300 # radius 5g secondary session_time 4800 radius {2.4g | 5g} {primary | secondary} accounting Enable or disable the RADIUS Accounting.
- secondary: 1813 Immediate Mode, Edit Mode CAP1300 # radius 5g secondary accounting_port 1814 # radius 2.4g primary accounting_port 1815 radius {2.4g | 5g} {primary | secondary} accounting_interval Set the Accounting interval. radius {primary | secondary} accounting_interval (interval) - - 2.4g Set the radius server of 802.11g. 5g Set the radius server of 802.11a.
radius admin add Add the radius user accounts. radius admin add (username) (password) - - (username) username of the radius account (password) password of the radius account NA Immediate Mode, Edit Mode, Reference Mode CAP1300 # radius admin add edimax 1234 radius admin delete delete the radius user accounts.
- CAP1300 # radius internal disable # radius internal enable radius internal session_timeout Set the internal RADIUS time to server communication will allow wireless devices.
- Immediate Mode, Edit Mode, Reference Mode CAP1300 # radius internal termination_action not_reauth radius show status Show the radius information. radius show status - NA NA Immediate Mode, Edit Mode, Reference Mode CAP1300 # radius show status XI-2-6 Exit exit Quit the CLI.
XI-2-7 Quit quit Quit the CLI. quit - NA NA Immediate Mode CAP1300 # quit XI-2-8 Command Command Upload the cli command from tftp server Command tftp_server (tftp-server) file (filename) - - (tftp-server) Update the Command from the TFTP server. (filename) Set the name of the Command file.
XI-3 Setting AP via ManageEngine MibBrowser with SNMPv3 - Example XI-3-1 Setting in Web 1. The length of the password needs to be equal or greater than 8. 2.
XI-3-2 Setting Rule If you want to set Basic Wireless Setting via SNMP, the related variables need to be set together. Please refer to the file Edimax-7476HPC_private_MIB_20150715_v1.1, for setting Radio or SSID. Example: Basic Wireless Settings Settings snmpset STRING 192.168.2.2 1.3.6.1.4.1.3822.2000.1.3.3 i 2 Auto Channel Disable snmpset STRING 192.168.2.2 1.3.6.1.4.1.3822.2000.1.2.3 i 3 11b/g/n: band snmpset STRING 192.168.2.2 1.3.6.1.4.1.3822.2000.1.4.3 i 7 7: channel snmpset STRING 192.168.2.
Figure 2 Step 2: Check v3 and click Add Figure 3 Step 3: Enter AP’s IP and Administrator Name (User Name) 348
Figure 4 Step 4: Click OK 2. Load MIB Module Figure 5 Click Load MIB Module and choose the file, edimax_20150728.
3. Add variables Figure 6 Example of setting the variable Step 1.: Select the OID. Step 2-1.: Enter the index of Radio (2.4G). Step 2-2.: Enter the Set Value. Step 3-1.: Click MultiVar. Step 3-2.: Check Multi-Var. Step 4.
4. Set SNMP variables Figure 7 All the variables have been added.
XII Best Practice XII-1 How to Create and Link WLAN & Access Point Groups NMS can be used to create individual SSIDs and group multiple SSIDs together into WLAN groups. You can then assign individual access points to use those WLAN group settings and/or group multiple access points together into access point groups, which you can also assign to use WLAN group settings. Follow the example below to: A. B. C. Create a WLAN group. Create an access point group.
2.
3. The new SSID will be displayed in the WLAN panel. Repeat to add additional SSIDs according to your preference. 4. Click “Add” in the WLAN Groups panel: 5. Enter a name for the SSID group and check the boxes to select which SSIDs to include in the group. Click “Save and Apply” when done.
6. The new WLAN group will be displayed in the WLAN Group panel. Repeat to add additional WLAN groups according to your preference: XII-1-2 Create Access Point Group 1.
2. Enter a Name and then scroll down to the Group Settings panel and use the << button to add selected access points into your group from the box on the right side. Click “Save & Apply” when done. 3. The new group will be displayed in the Access Point Group panel.
XII-1-3 Assign Access Point Group to use the SSID group settings 1. Go to NMS Settings Access Point and select an access point group using the checkboxes in the Access Point Group panel. Click “Edit”: 2. Scroll down to the Profile Group Settings panel and check the “Override Group Settings” box for WLAN Group (2.4GHz and/or 5GHz). Select your WLAN group from the drop-down menu and click “Apply”: 3. Repeat for other access point groups according to your preference.
COPYRIGHT Copyright Edimax Technology Co., Ltd. all rights reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language or computer language, in any form or by any means, electronic, mechanical, magnetic, optical, chemical, manual or otherwise, without the prior written permission from Edimax Technology Co., Ltd. Edimax Technology Co., Ltd.
Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
equipment. All guidelines of this and of the computer manufacture must therefore be allowed at all times to ensure the safe use of the equipment. EU Countries Intended for Use The ETSI version of this device is intended for home and office use in Austria, Belgium, Bulgaria, Cyprus, Czech, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Turkey, and United Kingdom.
EU Declaration of Conformity English: This equipment is in compliance with the essential requirements and other relevant provisions of Directive 2014/53/EU, 2014/35/EU. Français: Cet équipement est conforme aux exigences essentielles et autres dispositions de la directive 2014/53/EU, 2014/35/EU. Čeština: Toto zařízení je v souladu se základními požadavky a ostatními příslušnými ustanoveními směrnic 2014/53/EU, 2014/35/EU.
Declaration of Conformity We, Edimax Technology Co., Ltd., declare under our sole responsibility, that the equipment described below complies with the requirements of the European Radio Equipment Directive. Equipment: AC1300 DBDC Ceiling-mount AP Model No.: CAP1300 The following European standards for essential requirements have been followed: Directives 2014/53/EU Spectrum EMF : EN 300 328 V2.1.1 (2016-11) EN 301 893 V2.1.1 (2017-05) : Draft EN 301 489-1 V2.2.1 (2019-03) Draft EN 301 489-17 V3.2.
Notice According to GNU General Public License Version 2 This product includes software that is subject to the GNU General Public License version 2. The program is free software and distributed without any warranty of the author. We offer, valid for at least three years, to give you, for a charge no more than the costs of physically performing source distribution, a complete machine-readable copy of the corresponding source code.
intact all the notices that refer to this License and to the absence of any warranty; and give any other recipients of the Program a copy of this License along with the Program. You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee. 2.
Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it. 6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions.