OAP1300 User Manual 11-2020 / v1.
CONTENTS OVERVIEW ...................................................................................... 1 I Product Information ................................................................... 2 I-1 I-2 I-3 I-4 I-5 Package Contents............................................................................ 2 System Requirements ..................................................................... 3 Hardware Overview ........................................................................ 3 LED Status .
IV-3-1-2 Advanced .....................................................................................................47 IV-3-1-3 Security ........................................................................................................49 IV-3-1-3-1 No Authentication / Additional Authentication ................................50 IV-3-1-3-2 WEP......................................................................................................52 IV-3-1-3-3 IEEE802.1x/EAP ...................
IV-6 Operation Mode ......................................................................... 100 V Appendix ................................................................................ 101 V-1 Configuring your IP address ........................................................ 101 V-1-1 V-1-2 V-1-3 V-1-4 V-1-5 Windows XP ........................................................................................ 102 Windows Vista .........................................................................
OVERVIEW Your device can function in four different modes. AP Mode is a regular access point for use in your wireless network. This is the default mode of the access point. Repeater Mode is a wireless repeater (also called wireless range extender) that takes an existing signal from a wireless router or wireless access point and rebroadcasts it to create a second network. Managed AP Mode acts as a “slave” AP within an AP array (controlled by the AP Controller “master”).
I Product Information I-1 Package Contents 1. 2. 3. 4. 1 2 3 4 5 6 7 8 OAP1300 Access Point Wall Mount Screw Template Wall Mount Screw Set CD 5. 6. 7. 8.
I-2 System Requirements - Existing cable/DSL modem, PoE Switch & router - Computer with web browser for access point configuration I-3 Hardware Overview Ports and Button C B LAN 1 POE-IN LAN 2 POE-OUT C Reset A B A LAN port with Power over Ethernet (PoE) IN LAN port with PoE OUT Reset Button 3
I-4 LED Status LED 5G (WLAN) 2.4G (WLAN) LAN (PSE) LAN (PD) Status Power LED Status On Off On Off On Flashing Off On Flashing Off On Off On Flashing Off Description Wireless enabled. Wireless disabled. Wireless enabled. Wireless disabled. LAN port connected. Activity (transmitting and receiving). LAN port not connected. LAN port connected. Activity (transmitting and receiving). LAN port not connected. Access point booting up. No occurred error. The access point is on. Upgrading firmware.
I-5 Reset If you experience problems with your access point, you can reset the device back to its factory settings. This resets all settings back to default. 1. Press and hold the reset button on the access point for at least 10 seconds then release the button. You may need to use a pin or similar sharp object to push the reset button. 2. Wait for the access point to restart. The access point is ready for setup when the Power LED is turned on.
II Quick Setup & Mode Selection The unit can function as a standalone access point (AP Mode), as a repeater (Repeater Mode), as part of an AP array (Managed AP Mode), or as a client bridge (Client Bridge Mode). Follow the default mode steps below and select the desired operation mode. II-1 1. Default Mode: Access Point Mode Set your computer’s IP address to 192.168.2.x where x is a number in the range 3 – 100.
5. Enter the device’s default IP address 192.168.2.2 into the URL bar of a web browser. 6. You will be prompted for a username and password. Enter the default username “admin” and the default password “1234”. 7.
8. By default, the device is in AP Mode. If you do not wish to change the operation mode, switch your computer back to dynamic IP address now. 9. If you wish to change to a different operation mode, go to “Operation Mode” tab to select the desired operation mode. Follow the steps in the following sections to change the operation mode.
II-2 Repeater Mode From the default mode above, 1. Select Repeater Mode from the operation mode drop down menu: 2. Press “Apply” and wait for the device to reboot into Repeater Mode: 3. When system page is displayed, go to Wireless Settings Wireless Extender.
4. Click Scan to search for and display available SSIDs 5. Click the circle icon to connect to an available source SSID. SSIDs can be configured independently for each frequency 2.4GHz & 5GHz.
6. Edit the new extended SSID according to your preference and enter the security details for the source SSID (e.g. Pre-shared Key). Click “Connect” to proceed. Wait for the configuration to take effect: 7. The device (now in Repeater Mode) will establish a connection to the source SSID and repeat the extended SSID. The device will become a DHCP client of the router/root AP. Switch your computer back to dynamic IP address. 8.
II-3 Client Bridge Mode From the default mode above, 1. Select Client Bridge Mode from the operation mode drop down menu: 2. Press “Apply” and wait for the device to reboot into Client Bridge Mode: 3. When system page is displayed, go to Wireless Settings Wireless Extender.
4. Click Scan to search for and display available SSIDs 5. Click the circle icon to connect to an available source SSID. SSIDs can be configured independently for each frequency 2.4GHz & 5GHz.
6. Edit according to your preference and enter the security details for the source SSID (e.g. Pre-shared Key). Click “Connect” to proceed. Wait for the configuration to take effect: 7. The device (now in Client Bridge Mode) will receive wireless signal and provides it to devices connected to the bridge via Ethernet cable. The device will become a DHCP client of the router/root AP. Switch your computer back to dynamic IP address. 8.
II-4 Managed AP Mode Scenario: The Unit being managed by an AP Controller The access point can be part of an AP Array by switching to “Managed AP Mode”. An AP Array is a group of access points centrally managed by an AP Controller, where it can monitor, configure and manage all Managed APs. An overview of the system is shown below: By default, the access point will automatically switch mode if an AP Controller is present in the network.
To manually change to “Managed AP Mode”: Ensure you have the latest firmware from the Edimax website for your Edimax Pro products. 1. Connect an AP Controller to the switch currently connected to the access point and computer. 2. From the default mode above, select Managed AP Mode from the operation mode drop down menu: 3. Press “Apply” and wait for the device to reboot into Managed AP Mode: Wait for a few minutes for the settings to sync.
II-5 Basic Settings Basic settings of the access point are: - LAN IP Address; and - 2.4GHz & 5GHz SSID & Security; and - Administrator Name & Password; and - Time & Date It is recommended that these settings are configured before using the access point. Whenever a new setting is applied to the access point, the webpage will reload, as shown below: Instructions below will help you configure these settings: Changing IP Address: 1.
2. Enter the IP address settings you wish to use for your access point. You can use a dynamic (DHCP) or static IP address, depending on your network environment. Click “Apply” to save the changes and wait a few moments for the access point to reload. When you change your access point’s IP address, you need to use the new IP address to access the browser based configuration interface instead of the default IP 192.168.2.2. Changing SSID for 2.4GHz wireless network 1. 2. Go to “Wireless Settings” > “2.
Configuring Security Settings of 2.4GHz wireless network 1. 2. Go to “Wireless Settings” > “2.4GHz 11bgn” > “Security”. Select an “Authentication Method”, enter or select fields where appropriate, and click “Apply”. If multiple SSIDs are used, specify which SSID to configure using the “SSID” drop down menu.
Changing SSID and Configuring Security Setting for 5GHz wireless network Follow the steps outlined in “Changing SSID for 2.4GHz wireless network” and “Configuring Security Setting for 2.4GHz wireless network” but choose the 5GHz option instead. Changing Admin Name and Password 1. Go to “Management” > “Admin” as shown below: 2. Complete the “Administrator Name” and “Administrator Password” fields and click “Apply”.
Changing Date and Time 1. Go to “Management” > “Date and Time”. 2. Set the correct time and time zone for your access point using the drop down menus. The access point also supports NTP (Network Time Protocol) so, alternatively, you can enter the host name or IP address of a time server. Click “Apply” when you are finished. You can use the “Acquire Current Time from your PC” button if you wish to set the access point to the same time as your PC.
II-6 Wi-Fi Protected Setup (WPS) Wi-Fi Protected Setup is a simple way to establish connections between WPS compatible devices. You can use the WPS button or the configuration webpage activate the access point’s WPS function. 1. Go to “Wireless Settings” > “WPS” on your configuration webpage. 2. Check the checkbox of “Enable” and click “Apply”. 3. On the “Push-button WPS” line, click “Start” to activate WPS on the AP for approximately 2 minutes.
III Hardware Installation After finishing the above setup processes, you may relocate the access point to the desired location. III-1 Antenna The antennae must be screwed onto the access point.
III-2 1. Powering on the Access Point Outdoor Remove the cap from the underside of the access point by 1) pulling the hook upwards, and 2) pulling the cap downward, as shown below: Removed Underside Cap 2. Wire an Ethernet cable to the LAN 1 (PoE-In) port of the access point and the PoE switch to power up the access point. LAN 1 (PoE-In) Port 3. The access point will be powered by the PoE switch. Connect another Ethernet cable to LAN 2 where necessary. 4.
5. Let the hook click with the access point and make sure it does not come off easily. The cap serves as a rain-proof design suitable for use in the open.
III-3 Mounting After powering up the access point, mount it according to the desired mounting options: Wall or Pole Mount Wall Mount Attach the mount and access point to a wall using the included wall mount template and wall mount screw sets.
Pole Mount Fix the mount and access point to a pole using the included pole mount straps.
IV Browser Based Configuration Interface Some functions of the browser based configuration interface are disabled for different mode settings, please refer to the sections applicable for your desired mode. The browser-based configuration interface enables you to configure the device’s advanced features. The OAP1300 features a range of advanced functions such as MAC filtering, MAC RADIUS authentication, VLAN configurations, up to 32 SSIDs and many more.
4. You will arrive at the “System Information” screen shown below. 5. Use the menu across the top and down the left side to navigate. 6. Where applicable, click “Apply” to save changes and reload the access point, or “Cancel” to cancel changes. Please wait a few seconds for the access point to reload after you “Apply” changes. A countdown will be shown as exemplified below. 7. Please refer to the following chapters for full descriptions of the browser based configuration interface.
IV-1 IV-1-1 Information System Information “System Information” page displays basic system information.
System Model Product Name Uptime System Time Boot From Firmware Version MAC Address Management VLAN ID IP Address Default Gateway DNS DHCP Server Displays the model number of the access point. Displays the product name for reference, which consists of “AP” plus the MAC address. Displays the total time since the device was turned on. Displays the system time. Displays information for the booted hardware, booted from internal memory. Displays the firmware version. Displays the access point’s MAC address.
of the power present in a received radio signal. Wireless 2.4GHZ (5GHz) / SSID SSID Displays the SSID name(s) for the specified frequency. Authentication Displays the authentication method for the specified SSID. Method See IV-3 Wireless Settings. Encryption Displays the encryption type for the specified SSID. See IV-3 Type Wireless Settings. VLAN ID Displays the VLAN ID for the specified SSID. See IV-2-5 VLAN. Additional Displays the additional authentication type for the specified Authentication SSID.
IV-1-2 Wireless Clients “Wireless Clients” page displays information about all wireless clients connected to the device on the 2.4GHz or 5GHz frequency. Refresh time Auto Refresh Time Manual Refresh Select a time interval for the client table list to automatically refresh. Click refresh to manually refresh the client table. 2.4GHz (5GHz) WLAN Client Table SSID Displays the SSID which the client is connected to. MAC Address Displays the MAC address of the client.
IV-1-3 Wireless Monitor “Wireless Monitor” is a tool built into the device to scan and monitor the surrounding wireless environment. Select a frequency and click “Scan” to display a list of all SSIDs within range along with relevant details for each SSID. Wireless Monitor Site Survey Select which frequency (or both) to scan, and click “Scan” to begin. Channel After a scan is complete, click “Export” to save the results to Survey Result local storage.
IV-1-4 DHCP Clients “DHCP Clients” shows information of DHCP leased clients.
IV-1-5 Log “System log” displays system operation information such as up time and connection processes. This information is useful for network administrators. Older entries will be overwritten when the log is full Save Clear Refresh Click to save the log as a file on your local computer. Clear all log entries. Refresh the current log.
Change Settings System Boot Displays current model name NTP Client Wired Link LAN Port link status and speed status Proxy ARP Proxy ARP module start & stop Bridge Bridge start & stop. SNMP SNMP server start & stop. HTTP HTTP start & stop. HTTPS HTTPS start & stop. SSH SSH-client server start & stop. Telnet Telnet-client server start or stop. WLAN (2.4G) WLAN (2.
IV-2 IV-2-1 Network Settings LAN-Side IP Address “LAN-side IP address” page allows you to configure your access point on your Local Area Network (LAN). You can enable the access point to dynamically receive an IP address from your router’s DHCP server or you can specify a static IP address for your access point, as well as configure DNS servers. The access point’s default IP address is 192.168.2.2.
IP Address Subnet Mask Default Gateway Specify the IP address here. This IP address will be assigned to your access point and will replace the default IP address. Specify a subnet mask. The default value is 255.255.255.0 For DHCP users, select “From DHCP” to get default gateway from your DHCP server or “User-Defined” to enter a gateway manually. For static IP users, the default value is blank. DHCP users can select to get DNS servers’ IP address from DHCP or manually enter a value.
IV-2-2 LAN Port “LAN Port” page allows you to configure the settings for your access point’s two wired LAN (Ethernet) ports. Wired LAN Port Enable Speed & Duplex Identifies LAN port 1 or 2. Flow Control Enable/disable flow control. Flow control can pause new session request until current data processing is complete, in order to avoid device overloads under heavy traffic. Enable/disable 802.3az. 802.3az is an Energy Efficient Ethernet feature which disables unused interfaces to reduce power usage.
IV-2-3 IGMP Snooping IGMP snooping is the process of listening to Internet Group Management Protocol (IGMP) network traffic. The feature allows a network switch to listen in on the IGMP conversation between hosts and routers. By listening to these conversations the switch maintains a map of which links IP multicast streams. Multicasts may be filtered from the links which do not need them and thus controls which ports receive specific multicast traffic. This page allows you to enable/disable this feature.
IV-2-4 STP Management When enabled, STP ensures that you do not create loops when you have redundant paths in your network (as loops are deadly to a network). This page allows you to enable / disable STP management. Press “Apply” to confirm the settings.
IV-2-5 VLAN “VLAN” (Virtual Local Area Network) enables you to configure VLAN settings. A VLAN is a local area network which maps workstations virtually instead of physically and allows you to group together or isolate users from each other. VLAN IDs in the range 1 – 4095 are supported. VLAN Interface Wired LAN Identifies LAN port 1 or 2 and wireless SSIDs. Port/Wireless VLAN Mode Select “Tagged Port” or “Untagged Port” for specified LAN interface.
IV-3 IV-3-1 Wireless Settings 2.4GHz 11bgn The “2.4GHz 11bgn” menu allows you to view and configure information for your access point’s 2.4GHz wireless network across five categories: Basic, Advanced, Security, WDS & Guest Network.
IV-3-1-1 Basic The “Basic” screen displays basic settings for your access point’s 2.4GHz Wi-Fi network (s). Wireless Band Enable SSID Number SSID# VLAN ID Auto Channel Enable or disable the access point’s 2.4GHz wireless radio. When disabled, no 2.4GHz SSIDs will be active. Wireless standard used for the access point. Combinations of 802.11b, 802.11g & 802.11n can be selected. Select how many SSIDs to enable for the 2.4GHz frequency from the drop down menu. A maximum of 16 can be enabled.
Auto Channel Range Auto Channel Interval Select a range to which auto channel selection can choose from. Select a time interval for how often the auto channel setting will check/reassign the wireless channel. Check/uncheck the “Change channel even if clients are connected” box according to your preference.
IV-3-1-2 Advanced These settings are for experienced users only. Please do not change any of the values on this page unless you are already familiar with these functions. Changing these settings can adversely affect the performance of your access point. Contention Slot Preamble Type Guard Interval 802.11g Protection Select “Short” or “Long” – this value is used for contention windows in WMM (see IV-3-6 WMM). Set the wireless radio preamble type. The preamble type in 802.
802.11n Protection Enable/disable 802.11n protection, which increases reliability but reduces bandwidth (clients will send Request to Send (RTS) to access point, and access point will broadcast Clear to Send (CTS), before a packet is sent from client). DTIM Set the DTIM (delivery traffic indication message) period value Period of the wireless radio. The default value is 1. RTS Set the RTS threshold of the wireless radio. The default value is Threshold 2347.
IV-3-1-3 Security The access point provides various security options (wireless data encryption). When data is encrypted, information transmitted wirelessly cannot be read by anyone who does not know the correct encryption key. It is essential to configure wireless security in order to prevent unauthorised access to your network.
SSID Selection Select a SSID to configure its security settings. Broadcast SSID Enable or disable SSID broadcast. Enable: the SSID will be visible to clients as an available Wi-Fi network. Disable: the SSID will not be visible as an available Wi-Fi network to clients – clients must manually enter the SSID in order to connect. A hidden (disabled) SSID is typically more secure than a visible (enabled) SSID. Wireless Client Enable or disable wireless client isolation.
Additional wireless authentication methods can be applied to all authentication methods: WPS must be disabled to use additional authentication. See IV-3-3 WPS for WPS settings. MAC Address Filter Restrict wireless clients access based on MAC address specified in the MAC filter table. See IV-3-5 MAC Filter to configure MAC filtering. MAC-RADIUS Authentication Restrict wireless clients access based on MAC address via a RADIUS server, or password authentication via a RADIUS server.
IV-3-1-3-2 WEP WEP (Wired Equivalent Privacy) is a basic encryption type. When selected, a notice will pop-up as exemplified below: Below is a figure showing the configurable fields: Key Length Select 64-bit or 128-bit. 128-bit is more secure than 64-bit and is recommended. Key Type Choose from “ASCII” (any alphanumerical character 0-9, a-z and A-Z) or “Hex” (any characters from 0-9, a-f and A-F). Default Key Select which encryption key (1 – 4 below) is the default key.
IV-3-1-3-4 WPA-PSK WPA-PSK is a secure wireless encryption type with strong data protection and user authentication, utilizing 128-bit encryption keys. Below is a figure showing the configurable fields: Fast Roaming Settings will also be shown: 802.11r Fast Roaming WPA Type Encryption Key Renewal Interval Pre-Shared Key Type Pre-Shared Key When your device roams from one AP to another on the same network, 802.
802.11r Fast Transition Roaming Settings Mobility_dom Specify the mobility domain (2.4GHz or 5GHz) ain Encryption Key Specify the encryption key Over the DS Enable or disable this function. IV-3-1-3-5 WPA-EAP Fast Roaming Settings will also be shown: WPA Type Encryption Type Key Renewal Interval Select from WPA/WPA2 Mixed Mode-EAP, WPA2-EAP or WPA-EAP. Select “TKIP/AES Mixed Mode” or “AES” encryption type. Specify a frequency for key renewal in minutes.
IV-3-1-4 WDS Wireless Distribution System (WDS) can bridge/repeat access points together in an extended network. WDS settings can be configured as shown below. When using WDS, configure the IP address of each access point to be in the same subnet and ensure there is only one active DHCP server among connected access points, preferably on the WAN side. WDS must be configured on each access point, using correct MAC addresses. All access points should use the same wireless channel and encryption method.
2.4GHz WDS Select “WDS with AP” to use WDS with access point or “WDS Functionality Dedicated Mode” to use WDS and also block communication with regular wireless clients. When WDS is used, each access point should be configured with corresponding MAC addresses, wireless channel and wireless encryption method. Local MAC Displays the MAC address of your access point. Address WDS Peer Settings WDS # Enter the MAC address for up to four other WDS devices you wish to connect.
IV-3-1-5 Guest Network Enable / disable guest network to allow clients to connect as guests.
IV-3-2 5GHz 11ac 11an The “5GHz 11ac 11an” menu allows you to view and configure information for your access point’s 5GHz wireless network across five categories: Basic, Advanced, Security, WDS & Guest Network.
IV-3-2-1 Basic The “Basic” screen displays basic settings for your access point’s 5GHz Wi-Fi network (s). Wireless Band Enable SSID Number SSID# VLAN ID Auto Channel Auto Channel Enable or disable the access point’s 5GHz wireless radio. When disabled, no 5GHz SSIDs will be active. Wireless standard used for the access point. Combinations of 802.11a, 802.11n & 802.11ac can be selected. Select how many SSIDs to enable for the 2.4GHz frequency from the drop down menu. A maximum of 16 can be enabled.
Range Auto Channel Interval Select a time interval for how often the auto channel setting will check/reassign the wireless channel. Check/uncheck the “Change channel even if clients are connected” box according to your preference. Channel Select the channel bandwidth: Bandwidth 20MHz (lower performance but less interference); or Auto 40/20 MHz; or Auto 80/40/20 MHz (automatically select based on interference level).
IV-3-2-2 Advanced These settings are for experienced users only. Please do not change any of the values on this page unless you are already familiar with these functions. Changing these settings can adversely affect the performance of your access point. Guard Interval 802.11n Protection DTIM Period RTS Threshold Fragment Threshold Multicast Rate Set the guard interval. A shorter interval can improve performance. Enable/disable 802.
Tx Power Set the power output of the wireless radio. You may not require 100% output power. Setting a lower power output can enhance security since potentially malicious/unknown users in distant areas will not be able to access your signal. Beacon Set the beacon interval of the wireless radio. The default value Interval is 100. Station idle Set the interval for keepalive messages from the access point timeout to a wireless client to verify if the station is still alive/active.
IV-3-2-3 Security The access point provides various security options (wireless data encryption). When data is encrypted, information transmitted wirelessly cannot be read by anyone who does not know the correct encryption key. It’s essential to configure wireless security in order to prevent unauthorised access to your network. SSID Selection Select which SSID to configure security settings for. Broadcast SSID Enable or disable SSID broadcast.
Wireless Client Enable or disable wireless client isolation. Wireless client Isolation isolation prevents clients connected to the access point from communicating with each other and improves security. Typically, this function is useful for corporate environments or public hot spots and can prevent brute force attacks on clients’ usernames and passwords. Load Balancing Load balancing limits the number of wireless clients connected to an SSID. Set a load balancing value (maximum 100).
IV-3-2-4 WDS Wireless Distribution System (WDS) can bridge/repeat access points together in an extended network. WDS settings can be configured as shown below. When using WDS, configure the IP address of each access point to be in the same subnet and ensure there is only one active DHCP server among connected access points, preferably on the WAN side. WDS must be configured on each access point, using correct MAC addresses. All access points should use the same wireless channel and encryption method.
5GHz WDS Mode WDS Select “WDS with AP” to use WDS with access point or “WDS Functionality Dedicated Mode” to use WDS and also block communication with regular wireless clients. When WDS is used, each access point should be configured with corresponding MAC addresses, wireless channel and wireless encryption method. Local MAC Displays the MAC address of your access point. Address WDS Peer Settings WDS # Enter the MAC address for up to four other WDA devices you wish to connect.
IV-3-2-5 Guest Network Enable / disable guest network to allow clients to connect as guests.
IV-3-3 WPS Wi-Fi Protected Setup is a simple way to establish connections between WPS compatible devices. WPS can be activated on compatible devices by pushing a WPS button on the compatible device or from within the compatible device’s firmware / configuration interface (known as PBC or “Push Button Configuration”). When WPS is activated in the correct manner and at the correct time for two compatible devices, they will automatically connect.
WPS Product PIN Push-Button WPS WPS by PIN WPS Security WPS Status Displays the WPS PIN code of the device, used for PIN code WPS. You will be required to enter this PIN code into another WPS device for PIN code WPS. Click “Generate PIN” to generate a new WPS PIN code. Click “Start” to activate WPS on the device for approximately 2 minutes. Enter the PIN code of another WPS device and click “Start” to attempt to establish a WPS connection. WPS function will last for approximately 2 minutes.
IV-3-4 RADIUS The RADIUS menu allows you to configure the device’s external RADIUS server settings. A RADIUS server provides user-based authentication to improve security and offer wireless client control – users can be authenticated before gaining access to a network. The device can utilize a primary and a secondary (backup) external RADIUS server for each of its wireless frequencies (2.4GHz & 5GHz).
IV-3-4-1 RADIUS Settings Configure the RADIUS server settings for 2.4GHz and 5GHz. Each frequency can use an internal or external RADIUS server.
RADIUS Type Select “Internal” to use the access point’s built-in RADIUS server or “external” to use an external RADIUS server. RADIUS Server Enter the RADIUS server host IP address. Authentication Set the UDP port used in the authentication protocol of the Port RADIUS server. Value must be between 1 – 65535. Shared Secret Enter a shared secret/password between 1 – 99 characters in length. This should match the “MAC-RADIUS” password used in IV-3-1-3 or IV-3-2-3.
IV-3-4-2 Internal Server The access point features a built-in RADIUS server which can be configured as shown below used when “Internal” is selected for “RADIUS Type” in the “Wireless Settings” “RADIUS” “RADIUS Settings” menu. To use RADIUS servers, go to “Wireless Settings” “Security” and select “MAC RADIUS Authentication” “Additional Authentication” and select “MAC RADIUS Authentication” (see IV-3-1-3 & IV-3-2-3).
Session Timeout Termination Action Set a duration of session timeout in seconds between 0 – 86400. Select a termination-action attribute: Reauthentication: sends a RADIUS request to the access point; or, Not-Reauthentication: sends a default termination-action attribute to the access point; or Not-Send: no termination-action attribute is sent to the access point. Press “Apply” to apply the configuration, or “Cancel” to forfeit the changes.
IV-3-4-3 RADIUS Accounts The internal RADIUS server can authenticate up to 256 user accounts. The “RADIUS Accounts” page allows you to configure and manage users. Enter a username in the box below and click “Add” to add the username.
Select “Edit” to edit the username and password of the RADIUS account: Press “Apply” to apply the configuration, or “Cancel” to forfeit the changes. User Name Add Reset Enter the user names here, separated by commas. Click “Add” to add the user to the user registration list. Clear text from the user name box. Select User Name Password Check the box to select a user. Displays the user name. Displays if specified user name has a password (configured) or not (not configured).
IV-3-5 MAC Filter MAC filtering is a security feature that can help to prevent unauthorized users from connecting to your access point. This function allows you to define a list of network devices permitted to connect to the access point. Devices are each identified by their unique MAC address. If a device which is not on the list of permitted MAC addresses attempts to connect to the access point, it will be denied. To enable MAC filtering, go to “Wireless Settings” “2.
Add MAC Address Add Reset Enter a MAC address of computer or network device manually e.g. ‘aa-bb-cc-dd-ee-ff’ or enter multiple MAC addresses separated with commas, e.g. ‘aa-bb-cc-dd-ee-ff,aa-bb-cc-dd-ee-gg’ Click “Add” to add the MAC address to the MAC address filtering table. Clear all fields. MAC address entries will be listed in the “MAC Address Filtering Table”. Select an entry using the “Select” checkbox. Select Delete selected or all entries from the table.
IV-3-6 WMM Wi-Fi Multimedia (WMM) is a Wi-Fi Alliance interoperability certification based on the IEEE 802.11e standard, which provides Quality of Service (QoS) features to IEE 802.11 networks. WMM prioritizes traffic according to four categories: background, best effort, video and voice. Configuring WMM consists of adjusting parameters on queues for different categories of wireless traffic. Traffic is sent to the following queues: Background Low Priority High throughput, non time sensitive bulk data e.
Queues automatically provide minimum transmission delays for video, voice, multimedia and critical applications. The values can be adjusted further manually: CWMin CWMax AIFSN TxOP Minimum Contention Window (milliseconds): This value is input to the initial random backoff wait time algorithm for retry of a data frame transmission. The backoff wait time will be generated between 0 and this value.
IV-3-7 Schedule The schedule feature allows you to automate the wireless network for the specified time ranges. Wireless scheduling can save energy and increase the security of your network. Check/uncheck the box “Enable” and select “Apply” to enable/disable the wireless scheduling function. 1. Select “Add” to add a schedule. 2.
Schedules will be shown in the Schedule List as exemplified below: 3. Select “Add” to add more schedules; or Check the box of currently available schedule, select “Edit” to edit, or select “Delete Selected” to delete; or Select “Delete All” to delete all schedules.
IV-3-8 Traffic Shaping Traffic shaping is used to optimize or guarantee performance, improve latency, or increase usable bandwidth for some kinds of packets by delaying other kinds. Check the checkbox to enable traffic shaping, specify the down link and up link values, and click “Apply” to apply the configuration, or “Cancel” to forfeit the changes.
84
IV-3-9 Bandsteering Band steering detects clients capable of 5GHz operation and steers them there to make the more crowded 2.4 GHz band available for clients only capable of connecting to 2.4GHz band. This helps improve end user experience by reducing channel utilization, especially in high density environments.
IV-4 Management (Configurable for AP Mode only) IV-4-1 Admin You can change the password used to login to the browser-based configuration interface here. It is advised to do so for security purposes. If you change the administrator password, please make a note of the new password. In the event that you forget this password and are unable to login to the browser based configuration interface, see I-5 Reset for how to reset the access point.
Advanced Settings Product Name Edit the product name according to your preference consisting of 1-32 alphanumeric characters. This name is used for reference purposes. Management Check/uncheck the boxes to enable/disable specified Protocol management interfaces (see below). When SNMP is enabled, complete the SNMP fields below. SNMP Version Select SNMP version appropriate for your SNMP manager. SNMP Get Enter an SNMP Get Community name for verification with the Community SNMP manager for SNMP-GET requests.
SNMP Trap Community SNMP Trap Manager Enter an SNMP Trap Community name for verification with the SNMP manager for SNMP-TRAP requests. Specify the IP address or sever name (2-128 alphanumeric characters) of the SNMP manager. HTTP Internet browser HTTP protocol management interface TELNET Client terminal with telnet protocol management interface SNMP Simple Network Management Protocol. SNMPv1, v2 & v3 protocol supported. SNMPv2 can be used with community based authentication.
IV-4-2 Date and Time Configure the date and time settings of the access point here. The date and time of the device can be configured manually or can be synchronized with a time server. Date and Time Settings Local Time Set the access point’s date and time manually using the drop down menus. Acquire Click “Acquire Current Time from Your PC” to enter the Current Time required values automatically according to your computer’s from your PC current time and date.
NTP Time Server Use NTP The access point also supports NTP (Network Time Protocol) for automatic time and date setup. Server Name Enter the host name or IP address of the time server if you wish. Update Specify a frequency (in hours) for the access point to Interval update/synchronize with the NTP server. Time Zone Time Zone Select the time zone of your country/region. If your country/region is not listed, please select another country/region whose time zone is the same as yours.
IV-4-3 Syslog Server The system log can be sent to a server. Syslog Server Settings Transfer Logs Check the box to enable the use of a syslog server. Enter a host name, domain or IP address for the server, consisting of up to 128 alphanumeric characters. Syslog E-mail Settings E-mail Logs Check the box to enable/disable e-mail logs. E-mail Subject Specify the subject line of log emails. SMTP Server Specify the SMTP server address used to send log emails.
IV-4-4 Ping Test The access point includes a built-in ping test function. Ping is a computer network administration utility used to test whether a particular host is reachable across an IP network and to measure the round-trip time for sent messages. Destination Address Enter the address of the host. Execute Click “Execute” to ping the host.
IV-4-5 I’m Here The access point features a built-in buzzer which can sound on command using the “I’m Here” page. This is useful for network administrators and engineers working in complex network environments to locate the access point. The buzzer is loud! Duration of Sound Sound Buzzer Set the duration for which the buzzer will sound when the “Sound Buzzer” button is clicked. Activate the buzzer sound for a duration specified above.
IV-5 Advanced IV-5-1 LED Settings The access point’s LEDs can be manually enabled or disabled according to your preference. Power LED 2.4GHz LED 5GHz LED Diag LED Select on or off. Select on or off. Select on or off. Select on or off.
IV-5-2 Update Firmware The “Firmware” page allows you to update the firmware of the system. Updated firmware versions often offer increased performance and security, as well as bug fixes. Download the latest firmware from the Edimax website. Do not switch off or disconnect the access point during a firmware upgrade, as this could damage the device. Firmware Location: Auto Current Displays current firmware version. Firmware Version Server Displays available firmware version on the server.
Firmware Location: a file on your PC Firmware Click “Choose File” to select firmware from your PC. Update File Update Click to update the firmware.
IV-5-3 Save / Restore Settings The device’s “Save / Restore Settings” page enables you to save / backup the device’s current settings as a file to your local computer, and restore the device to previously saved settings. Save Settings to PC Save Settings Encryption: If you wish to encrypt the configuration file with a password, check the “Encrypt the configuration file with a password” box and enter a password. Click “Save” to save current settings.
IV-5-4 Factory Default If the access point malfunctions or is not responding, rebooting the device (IV-5-5 Reboot) maybe an option to consider. If rebooting does not work, try resetting the device back to its factory default settings. You can reset the access point back to its default settings using this feature if the reset button is not readily accessible. Factory Default Click “Factory Default” to restore settings to the factory default. A pop-up window will appear and ask you to confirm.
IV-5-5 Reboot If the access point malfunctions or is not responding, rebooting the device may be an option to consider. You can reboot the access point remotely using this feature. Reboot Click “Reboot” to reboot the device. A countdown will indicate the progress of the reboot.
IV-6 Operation Mode The access point can function in five different modes. Set the operation mode of the access point here. 1. AP Mode: The device acts as a standalone access point 2. Repeater Mode: The device acts as a wireless repeater (also called wireless range extender) that takes an existing signal from a wireless router or wireless access point and rebroadcasts it to create a second network. 3. Managed AP Mode: The device acts as a slave AP within an AP array. 4.
V V-1 Appendix Configuring your IP address The access point uses the default IP address 192.168.2.2. In order to access the browser based configuration interface, you need to modify the IP address of your computer to be in the same IP address subnet e.g. 192.168.2.x (x = 3 – 254). The procedure for modifying your IP address varies across different operating systems; please follow the guide appropriate for your operating system. In the following examples we use the IP address 192.168.2.
V-1-1 1. Windows XP Click the “Start” button (it should be located in the lower-left corner of your computer) “Control Panel” “Network and Internet Connections” “Network Connections” “Local Area Connection”. The “Local Area Connection Properties” window will appear, select “Internet Protocol (TCP / IP)”, and click “Properties”.
2. Select “Use the following IP address”, then input the following values: IP address: 192.168.2.10 Subnet Mask: 255.255.255.0 Click ‘OK’ when finished.
V-1-2 1. Windows Vista Click the “Start” button (it should be located in the lower-left corner of your computer) “Control Panel” “View Network Status and Tasks” “Manage Network Connections” “Local Area Network” “Properties”. The “Local Area Connection Properties” window will appear, select “Internet Protocol Version 4 (TCP / IPv4)”, and then click “Properties”.
2. Select “Use the following IP address”, then input the following values: IP address: 192.168.2.10 Subnet Mask: 255.255.255.0 Click ‘OK’ when finished.
V-1-3 Windows 7 1. Click the “Start” button (it should be located in the lower-left corner of your computer), then click “Control Panel”. 2. Under “Network and Internet” click “View network status and tasks”.
3. Click “Local Area Connection”. 4. Click “Properties”.
5. Select “Internet Protocol Version 4 (TCP/IPv4) and then click “Properties”.
6. Select “Use the following IP address”, then input the following values: IP address: 192.168.2.10 Subnet Mask: 255.255.255.0 Click ‘OK’ when finished.
V-1-4 Windows 8 1. From the Windows 8 Start screen, switch to desktop mode by clicking the “Desktop” box. 2. In desktop mode, click the File Explorer icon in the bottom left of the screen, as shown below.
3. Right click “Network” and select “Properties”. 4. In the window that opens, select “Change adapter settings” from the left side.
5. Right click the connection and select “Properties”. 6. Select “Internet Protocol Version 4 (TCP/IPv4) and then click “Properties”.
7. Select “Use the following IP address”, then input the following values: IP address: 192.168.2.10 Subnet Mask: 255.255.255.0 Click ‘OK’ when finished.
V-1-5 Mac 1. Have your Macintosh computer operate as usual, and click on “System Preferences” 2. In System Preferences, click on “Network”. 3. Click on “Ethernet” in the left panel.
4. Open the drop-down menu labeled “Configure IPv4” and select “Manually”. 5. Enter the IP address 192.168.2.10 and subnet mask 255.255.255.0. Click on “Apply” to save the changes.
V-2 V-2-1 Setting AP via ManageEngine MibBrowser with SNMPv3 Example Setting in Web 1. The length of the password needs to be equal or greater than 8. 2.
V-2-2 Setting Rule If you want to set Basic Wireless Setting via SNMP, the related variables need to be set together. Please refer to the file Edimax-7476HPC_private_MIB_20150715_v1.1, for setting Radio or SSID. Example: Basic Wireless Settings Settings snmpset STRING 192.168.2.2 1.3.6.1.4.1.3822.2000.1.3.3 i 2 Auto Channel Disable snmpset STRING 192.168.2.2 1.3.6.1.4.1.3822.2000.1.2.3 i 3 11b/g/n: band snmpset STRING 192.168.2.2 1.3.6.1.4.1.3822.2000.1.4.3 i 7 7: channel snmpset STRING 192.168.2.
Figure 2 Step 2: Check v3 and click Add Figure 3 Step 3: Enter AP’s IP and Administrator Name (User Name) 118
Figure 4 Step 4: Click OK 2. Load MIB Module Figure 5 Click Load MIB Module and choose the file, edimax_20150728.
3. Add variables Figure 6 Example of setting the variable Step 1.: Select the OID. Step 2-1.: Enter the index of Radio (2.4G). Step 2-2.: Enter the Set Value. Step 3-1.: Click MultiVar. Step 3-2.: Check Multi-Var. Step 4.: Add this Variable 4. Set SNMP variables Figure 7 All the variables have been added.
VI Best Practice VI-1 How to Create and Link WLAN & Access Point Groups NMS can be used to create individual SSIDs and group multiple SSIDs together into WLAN groups. You can then assign individual access points to use those WLAN group settings and/or group multiple access points together into access point groups, which you can also assign to use WLAN group settings. Follow the example below to: A. B. C. Create a WLAN group. Create an access point group.
2.
3. The new SSID will be displayed in the WLAN panel. Repeat to add additional SSIDs according to your preference. 4. Click “Add” in the WLAN Groups panel: 5. Enter a name for the SSID group and check the boxes to select which SSIDs to include in the group. Click “Save and Apply” when done.
6. The new WLAN group will be displayed in the WLAN Group panel. Repeat to add additional WLAN groups according to your preference: VI-1-2 1.
2. Enter a Name and then scroll down to the Group Settings panel and use the << button to add selected access points into your group from the box on the right side. Click “Save & Apply” when done. 3. The new group will be displayed in the Access Point Group panel.
VI-1-3 Assign Access Point Group to use the SSID group settings 1. Go to NMS Settings Access Point and select an access point group using the checkboxes in the Access Point Group panel. Click “Edit”: 2. Scroll down to the Profile Group Settings panel and check the “Override Group Settings” box for WLAN Group (2.4GHz and/or 5GHz). Select your WLAN group from the drop-down menu and click “Apply”: 3. Repeat for other access point groups according to your preference.
Professional installation warning: This device is point-to-multi-point device. The general user should not attempt to install or change settings, it needs to be installed by a qualified personal who has RF exposure and related rule knowledge or technology. The installation position and output power does not exceed the limit set forth in US Rule CFR 47 part 15 section 15.247 & 15.407. If violate the rule, could lead to serious federal penalty. It is complies with §15.
COPYRIGHT Copyright Edimax Technology Co., Ltd. all rights reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language or computer language, in any form or by any means, electronic, mechanical, magnetic, optical, chemical, manual or otherwise, without the prior written permission from Edimax Technology Co., Ltd. Edimax Technology Co., Ltd.
Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
EU Declaration of Conformity English: This equipment is in compliance with the essential requirements and other relevant provisions of Directive 2014/53/EU, 2014/35/EU. Français: Cet équipement est conforme aux exigences essentielles et autres dispositions de la directive 2014/53/EU, 2014/35/EU. Čeština: Toto zařízení je v souladu se základními požadavky a ostatními příslušnými ustanoveními směrnic 2014/53/EU, 2014/35/EU.
Declaration of Conformity We, Edimax Technology Co., Ltd., declare under our sole responsibility, that the equipment described below complies with the requirements of the European Radio Equipment directives. Equipment: Model No.: AC1300 Outdoor AP OAP1300 The following European standards for essential requirements have been followed: Directives 2014/53/EU Spectrum EMF : EN 300 328 V2.1.1 (2016-11) EN 301 893 V2.1.1 (2017-05) : EN 301 489-1 V2.1.1 (02-2017) Draft EN 301 489-17 V3.2.
Notice According to GNU General Public License Version 2 This product includes software that is subject to the GNU General Public License version 2. The program is free software and distributed without any warranty of the author. We offer, valid for at least three years, to give you, for a charge no more than the costs of physically performing source distribution, a complete machine-readable copy of the corresponding source code.
intact all the notices that refer to this License and to the absence of any warranty; and give any other recipients of the Program a copy of this License along with the Program. You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee. 2.
Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it. 6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions.
