User Guide LAPAC1750 AC1750 Dual Band Access Point
Linksys Table of Contents Table of Contents CHAPTER 1 QUICK START GUIDE . . . . . . . . . . . . . . . . . . 1 Package Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Physical Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Mounting Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 CHAPTER 2 ACCESS POINT SETUP . . . . . . . . . . .
Linksys Table of Contents APPENDIX C PC AND SERVER CONFIGURATION . . . . . . . 40 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 Using WEP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 Using WPA2-PSK . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 Using WPA2-Enterprise . . . . . . . . . . . . . . . . . . . . . . . .
Linksys CHAPTER 1 Quick Start Guide CHAPTER 1 Quick Start Guide Physical Details There is one LED for the device. LED Package Contents • Linksys Wireless Access Point • Quick Start Guide • Ethernet Cable • AC Power Adapter • CD with Documentation • Mounting Bracket • Mounting Kit • Ceiling Mount Back Plate • Drilling Layout Template LED Color Activity Status Green Blinking System is booting. Solid System is normal; no wireless device connected.
Linksys Mounting Guide To avoid overheating, do not install your access point if ambient temperatures exceed 104°F (40°C). Install on a flat, stable surface, near the center of your wireless coverage area making sure not to block vents on the sides of the device enclosure. Wall Installation 1. Position drilling layout template at the desired location. 2. Drill four screw holes on the mounting surface. If your Ethernet cable is routed behind the wall, mark Ethernet cable hole as well.
Linksys CHAPTER 2 Access Point Setup CHAPTER 2 Access Point Setup 3. Type in default username: “admin”, and password: “admin”. 4. Click Log in to launch the browser-based setup and follow the on-screen instructions Overview This chapter describes the setup procedure to connect the wireless access point to your LAN, and configure it as an access point for your wireless stations. Wireless stations may also require configuration. For details, see Appendix C Wireless Station Configuration.
Linksys Setup Wizard The first time you connect to the wireless access point, run the Setup Wizard to configure the device. CHAPTER 2 Access Point Setup 5. On the IPv4 Address screen (Figure 4) configure the IP address of the device then click Next. If you want to configure more than 4 SSIDs, please go to Configuration → Wireless → Basic Settings. The access point supports up to 8 SSIDs per radio. 1. Click the Quick Start link on the main menu Figure 4: Setup Wizard - IPv4 Figure 2: Setup Wizard 6.
Linksys CHAPTER 2 Access Point Setup 9. Click Finish to leave the wizard. Figure 6: Setup Wizard - Wireless Security 8. On the Summary screen, check the data to make sure they are correct and then click Submit to save the changes. Figure 8: Setup Wizard - Finish User Accounts Click User Accounts on the Administration menu to manage user accounts. The access point supports up to five users: one administrator and four normal users.
Linksys CHAPTER 2 Access Point Setup Data - User Accounts Screen User Account Table User Name Time Enter the User Name to connect to the access point’s admin interface. User Name is effective once you save settings. User Name can include up to 63 characters. Special characters are allowed. User Level Only administrator account has Read/Write permission to the access point’s admin interface. All other accounts have Read Only permission.
Linksys Log Settings Screen The logs record various types of activity on the access point. This data is useful for troubleshooting, but enabling all logs will generate a large amount of data and adversely affect performance. CHAPTER 2 Access Point Setup Data - Logs Screen Log Types Log Types Select events to log. Checking all options increase the size of the log, so enable only events you believe are required. Email Alertt Email Alert Enable email alert function.
Linksys Management Access You can use the Management Access page to configure the management methods of the access point. CHAPTER 2 Access Point Setup Data - Management Access Screen Web Access HTTP HTTP (Hyper Text Transfer Protocol) is the standard for transferring files (text, graphic images and other multimedia files) on the World Wide Web. Enable to allow Web access by HTTP protocol. HTTP Port Specify the port for HTTP. It can be 80 (default) or from 1024 to 65535.
Linksys Location CHAPTER 2 Access Point Setup Enter the area or location where the access point resides. The location includes 1 to 32 characters. Special characters are allowed. SSL Certificate This screen can be used to manage SSL certificate used by HTTPS. SNMPv1/v2 Settings Get Community Enter the name of Get Community. Get Community is used to read data from the access point and not for writing data into the access point. Get Community includes 1 to 32 characters. Special characters are allowed.
Linksys CHAPTER 2 Access Point Setup Data - SSL Certificate Screen Data - Network Setup Screen Export/Restore to/from Local PC TCP/IP Export SSL Host Name Assign a host name to this access point. Host name consists of 1 to 15 characters. Valid characters include A-Z, a-z, 0-9 and -. Character cannot be first and last character of hostname and hostname cannot be composed of all digits. VLAN Enables or disables VLAN function. Workgroup Bridge can only be enabled when VLAN function is disabled.
Linksys Advanced Screen Use this screen to configure advanced network settings of the access point. CHAPTER 2 Access Point Setup Data - Advanced Screen Port Settings Auto Negotiation If enabled, Port Speed and Duplex Mode will become grey and cannot be configured. If disabled, Port Speed and Duplex Mode can be configured. Operational Auto Negotiation Current Auto Negotiation mode of the Ethernet port. Port Speed Select the speed of the Ethernet port. Available only when Auto Negotiation is disabled.
Linksys CHAPTER 2 Access Point Setup Discovery Settings Bonjour Enable if administrator wants the access point to be discovered by Bonjour enabled devices automatically. If VLAN is enabled, the discovery packets will be sent out via management VLAN only. The access point supports http and https services. LLDP Enable if administrator wants the access point to be discovered by switch by LLDP protocol.
Linksys CHAPTER 2 Access Point Setup Data - Wireless Basic Settings Screen Isolation Basic Wireless Settings Enable or disable isolation among clients of the SSID. If enabled, wireless clients cannot communicate with others in the same SSID. Wireless Radio Disabled by default. Select the wireless radio from the list. Radio 1 is for 2.4 GHz, and Radio 2 is for 5 GHz. Enable Radio Enable or disable the wireless radio.
Linksys CHAPTER 2 Access Point Setup Security Settings • Use this screen to configure security settings of SSIDs to provide data protection over the wireless network. WPA2-Enterprise - Requires a RADIUS Server on your LAN to provide the client authentication according to the 802.1x standard. Data transmissions are encrypted using the WPA2 standard. If this option is selected: • •• This access point must have a client login on the RADIUS Server. •• Each user must authenticate on the RADIUS Server.
Linksys CHAPTER 2 Access Point Setup Security Settings - WEP Security Settings - WPA2-Personal This is the 802.11b standard. Data is encrypted before transmission, but the encryption system is not very strong. This is a further development of WPA-Personal, and offers even greater security. Figure 18: WEP Wireless Security Screen Data - WEP Screen Authentication Select Open System or Shared Key. All wireless stations must use the same method. Default Transmit Key Select a transmit key.
Linksys CHAPTER 2 Access Point Setup Security Settings - WPA/WPA2-Personal Security Settings - WPA2-Enterprise This method, sometimes called Mixed Mode, allows clients to use either WPAPersonal or WPA2-Personal. This version of WPA2-Enterprise requires a RADIUS Server on your LAN to provide the client authentication. Data transmissions are encrypted using the WPA2 standard.
Linksys CHAPTER 2 Access Point Setup Data - WPA2-Enterprise Screen WPA2-Enterprise Primary Server Enter the IP address of the RADIUS Server on your network. Primary Server Port Enter the port number used for connections to the RADIUS Server. It is a value from 1 to 65534, and default is 1812. Primary Shared Secret Enter the key value to match the RADIUS Server. It consists of 1 to 64 characters.
Linksys CHAPTER 2 Access Point Setup Data - WPA/WPA2-Enterprise Screen WPA/WPA2-Enterprise Primary Server Enter the IP address of the RADIUS Server on your network. Primary Server Port Enter the port number used for connections to the RADIUS Server. It is a value from 1 to 65534, and default is 1812. Primary Secret RADIUS Use RADIUS server for authentication and dynamic WEP key generation for data encryption. Shared Enter the key value to match the RADIUS Server. It consists of 1 to 64 characters.
Linksys Rogue AP Detection Rogue AP detection is used to detect the unexpected or unauthorized access point installed in a secure network environment. CHAPTER 2 Access Point Setup Data - Rogue AP Screen Wireless Radio Select the desired radio from the list. Radio 1 is for 2.4 GHz, and Radio 2 is for 5 GHz. Rogue AP Enable or disable Rogue AP Detection on the selected radio. Detected Rogue AP List Action Click Trust to move the AP to the Trusted AP List. MAC Address The MAC address of the Rogue AP.
Linksys Scheduler Configure a rule with a specific time interval for SSIDs to be operational. Automate enabling or disabling SSIDs based on the profile definition. Support up to 16 profiles and each profile can include four time rules. CHAPTER 2 Access Point Setup Data - Scheduler Screen Wireless Scheduler Enable or disable wireless scheduler. If disabled, even if some SSIDs are associated with profiles, they will be always active.
Linksys CHAPTER 2 Access Point Setup Scheduler Association Connection Control Associate defined scheduler profiles with SSIDs. Exclude or allow only listed client stations to authenticate with the access point. Figure 26: Scheduler Association Screen Data - Scheduler Association Screen Wireless Radio Select the desired radio from the list. Radio 1 is for 2.4 GHz, and Radio 2 is for 5 GHz. Scheduler Association SSID The index of SSID. SSID Name The name of the SSID.
Linksys CHAPTER 2 Access Point Setup Rate Limit Limit downstream and upstream rate of SSIDs. *Maximum Performance derived from IEEE Standard 802.11 specifications (draft specifications for 802.11ac). Actual performance can vary, including lower wireless network capacity, data throughput rate, range and coverage. Performance depends upon many factors, conditions and variables, including products used, interference and other adverse conditions. 802.
Linksys CHAPTER 2 Access Point Setup Data - QoS Screen QoS Setting Wireless Radio Select the desired radio from the list. Radio 1 is for 2.4 GHz, and Radio 2 is for 5 GHz. QoS Settings SSID The index of SSID. SSID Name The name of the SSID. VLAN ID The VLAN ID of the SSID. Priority Select the priority level from the list. VLAN must be enabled in order to set priority. Workgroup Bridge Workgroup Bridge feature enables the access point to extend the accessibility of a remote network.
Linksys CHAPTER 2 Access Point Setup Data - Workgroup Bridge Screen Workgroup Bridge Radio Advanced Settings Configure advanced parameters of the wireless radios. Select the desired radio from the list. Workgroup Bridge Status Status Enable or disable Workgroup Bridge function. Workgroup Bridge can only be enabled when VLAN function is disabled. Before configuring Workgroup Bridge, make sure all devices in Workgroup Bridge have the following identical settings. Radio IEEE 802.
Linksys CHAPTER 2 Access Point Setup Data - Advanced Settings Screen Band Steering Band Steering Enable or disable Band Steering function. Band Steering is a technology that detects whether the wireless client is dual-band capable. If it is, band steering pushes the client to connect to the lesscongested 5 GHz network. It does this by actively blocking the client’s attempts to connect with the 2.4GHz network.
Linksys RTS Threshold CHAPTER 2 Access Point Setup Enter the Request to Send (RTS) Threshold value, an integer from 1 to 2347. The default is 2347 octets. The RTS threshold indicates the number of octets in a Medium Access Control Protocol Data Unit (MPDU) below which an RTS/CTS handshake is not performed. Changing the RTS threshold can help control traffic flow through the access point, especially one with a lot of clients.
Linksys Chapter 3 Operation and Status Operation You may need to perform the following operations on a regular basis. • If using the Access Control feature, update the Trusted AP database as required. (See Access Control in Chapter 2 for details.) • If using 802.1x mode, update the User Login data on the Windows 2000 Server, and configure the client PCs, as required. System Summary Provides system status of the access point.
Linksys Chapter 3 Operation and Status LAN Status Untagged VLAN ID Displays the untagged VLAN ID. Traffic on the VLAN that you specify in this field is not be tagged with a VLAN ID when forwarded to the network. VLAN 1 is the default ID for untagged VLAN. Management VLAN Displays the Management VLAN ID. The VLAN associated with the IP address you use to connect to the access point. Provide a number between 1 and 4094 for the Management VLAN ID. The default is 1.
Linksys Chapter 3 Operation and Status Wireless Status Wireless Status displays settings and status of wireless radios and SSIDs. Status Status of the SSID, enabled or disabled. MAC Address MAC address of the SSID. VLAN ID VLAN ID of the SSID. Priority The 802.1p priority of the SSID. Scheduler State Current scheduler status of the SSID. • N/A No scheduler is enabled on the SSID, or the SSID is disabled by administrator. • Active The SSID is enabled. • Inactive The SSID is disabled.
Linksys Chapter 3 Operation and Status Wireless Clients Statistics Wireless Clients screen displays a list of connected clients based on each wireless interface. Statistics provides real-time transmitted and received statistics data based on each SSID per Radio, and LAN interface. Figure 35: Wireless Clients Screen Figure 36: Statistics Screen Data - Statistics Data - Wireless Clients Wireless Interface Select the desired interface from the list. The interfaces include 8 SSIDs per radio.
Linksys Chapter 3 Operation and Status Log View Log View shows a list of system events that are generated by each single log entry, such as login attempts and configuration changes. Figure 37: Log View Screen Data - Log View Log Messages Log Messages Show the log messages. Buttons Refresh Update the data on screen. Save Save the log to a file on your PC. Clear Delete the existing logs from device.
Linksys Chapter 4 Access Point Management Chapter 4 Access Point Management Overview This chapter covers features available on the wireless access point’s Maintenance menu. • Maintenance • Firmware Upgrade • Configuration Backup/Restore • Factory Default Figure 38: Firmware Upgrade Screen • Reboot • Diagnostics To perform the firmware upgrade from local PC: • Ping Test 1. Click the Browse button and navigate to the location of the upgrade file. • Packet Capture 2. Select the upgrade file.
Linksys Configuration Backup/Restore Configuration backup/restore allows you to download the configuration file from the device to external storage, e.g., your PC, or network storage, or to upload a previously saved configuration file from external storage to the device. It is highly recommended you save one extra copy of the configuration file to external storage after you are done with access point setup.
Linksys Chapter 4 Access Point Management Factory Default It’s highly recommended you save your current configuration file before you restore to factory default settings. To save your current configuration file, click Maintenance → Configuration Backup/Restore. Reboot Reboot power cycles the device. The current configuration file will remain after reboot.
Linksys Chapter 4 Access Point Management Ping Test Packet Capture Ping Test is used to determine the accessibility of a host on the network. Packet Capture is used to capture and store 802.3 packets received and transmitted by the access point based on one specified network interface. The network interface can be radio, SSID or LAN. Figure 42: Ping Test Screen Data - Ping Test Screen General IP Type Enter the IP type of destination address.
Linksys Chapter 4 Access Point Management Diagnostic Log Diagnostic Log provides system detail information, such as configuration file, system status and statistics data, hardware information, operational status. The information is useful in troubleshooting and working with technical support. Figure 44: Diagnostic Screen Data - Diagnostic Screen Download Click to download the device diagnostic log into a local file.
Linksys Appendix A Troubleshooting Appendix A Troubleshooting 3. Check the output of the ping command to determine the IP address of the wireless access point, as shown below. Overview This chapter covers some common problems encountered while using the wireless access point, and some possible solutions to them. If you follow the suggested steps and the wireless access point still does not function properly, contact your dealer for further advice.
Linksys Appendix B About Wireless LANs Appendix B About Wireless LANs SSID/ESSID BSS/SSID Overview Wireless networks have their own terms and jargon. You must understand many of these terms in order to configure and operate a wireless LAN. Wireless LAN Terminology Modes Wireless LANs can work in either of two (2) modes: • Ad-hoc • Infrastructure Ad-hoc Mode Ad-hoc Mode does not require an access point or a wired (Ethernet) LAN. Wireless stations, e.g.
Linksys • • • Appendix B About Wireless LANs When using multiple access points it is better if adjacent access points use different channels to reduce interference. The recommended channel spacing between adjacent access points is five channels, e.g., use Channels 1 and 6, or 6 and 11. If this option is used: In Infrastructure Mode wireless stations normally scan all channels looking for an access point. If more than one access point can be used, the one with the strongest signal is used.
Linksys Appendix C PC And Server Configuration Appendix C PC And Server Configuration Using WPA2-PSK For each of the following items, each wireless station must have the same settings as the wireless access point. Mode On each PC, the mode must be set to Infrastructure. SSID (ESSID) This must match the value used on the wireless access point. Overview The default value is LinksysSMB24G for radio 1 and LinksysSMB5G for radio 2.
Linksys Appendix C PC And Server Configuration Using WPA2-Enterprise 802.1x Server Setup (Windows 2000 Server) This is the most secure and most complex system. WPA-Enterprise mode provides greater security and centralized management, but it is more complex to configure. This section describes using Microsoft Internet Authentication Server as the RADIUS server, since it is the most common RADIUS server available that supports the EAP-TLS authentication method.
Linksys Appendix C PC And Server Configuration Figure 48: CA Screen Figure 46: Components Screen 7. Click Next if you don’t want to change the CA’s configuration data. 4. Click Next. 8. Installation will warn you that Internet Information Services are running, and must be stopped before continuing. Click OK, then Finish. 5. Select the Enterprise root CA, and click Next. DHCP server configuration 1. Click on Start -> Programs -> Administrative Tools -> DHCP 2.
Linksys 3. Click Next when the New Scope Wizard Begins. 4. Enter the name and description for the scope, click Next. 5. Define the IP address range. Change the subnet mask if necessary. Click Next. Figure 50: IP Address Screen 6. Add exclusions in the address fields if required. If no exclusions are required, leave it blank. Click Next. 7. Change the Lease Duration time if preferred. Click Next. 8. Select Yes, I want to configure these options now, and click Next.
Linksys Certificate Authority Setup 1. Select Start -> Programs -> Administrative Tools -> Certification Authority. 2. Right-click Policy Settings, and select New -> Certificate to Issue. Appendix C PC And Server Configuration 4. Select Start -> Programs -> Administrative Tools -> Active Directory Users and Computers. 5. Right-click on your active directory domain, and select Properties. Figure 52: Certificate Authority Screen 3.
Linksys 7. Select Computer Configuration -> Windows Settings -> Security Settings -> Public Key Policies, right-click Automatic Certificate Request Settings -> New -> Automatic Certificate Request. Appendix C PC And Server Configuration 10. Ensure that your Certificate Authority is checked, click Next. 11. Review the policy change information and click Finish. 12. Click Start -> Run, type “cmd” and press enter.
Linksys Appendix C PC And Server Configuration 12. Select No if you don’t want to view the help for EAP. Click Finish. Remote Access Login for Users 1. Select Start -> Programs -> Administrative Tools -> Active Directory Users and Computers. 2. Double click on the user who you want to enable. 3. Select the Dial-in tab, and enable Allow access. Click OK. Figure 59: Attribute Screen 11. Click Edit Profile... and select the Authentication tab.
Linksys Appendix C PC And Server Configuration The following instructions assume that: • You are using Windows XP • You are connecting to a Windows 2000 server for authentication. • You already have a login (User-name and password) on the Windows 2000 server. Client Certificate Setup 1. Connect to a network that doesn’t require port authentication. 2. Start your Web browser. In the Address box, enter the IP address of the Windows 2000 Server, followed by “/certsrv”, e.g, “http://192.168.0.
Linksys 6. Click Submit. Appendix C PC And Server Configuration 8. You will receive a confirmation message. Click Yes. Figure 67: Root Certificate Screen 9. Certificate setup is now complete. 802.1x Authentication Setup 1. Open the properties for the wireless connection, by selecting Start - Control Panel - Network Connections. 2. Right-click on the Wireless Network Connection, and select Properties. Figure 65: Identifying Information Screen 7.
Linksys Encryption Settings The encryption settings must match the access point’s on the wireless network you wish to join. • Windows XP will detect any available wireless networks, and allow you to configure each network independently. • Your network administrator can advise you of the correct settings for each network. 802.1x networks typically use EAP-TLS. This is a dynamic key system, so there is no need to enter key values. Appendix C PC And Server Configuration 2.
Linksys Appendix C PC And Server Configuration Instead, you must enter the WEP key manually, ensuring it matches the WEP key used on the access point. Figure 71: Properties Screen NOTE On some systems, the 64-bit WEP key is shown as 40-bit and the 128-bit WEP key is shown as 104-bit. This difference arises because the key input by the user is 24 bits less than the key size used for encryption.
Visit linksys.com/support for award-winning technical support © 2014 Belkin International, Inc. and/or its affiliates. All rights reserved. BELKIN, LINKSYS and many product names and logos are trademarks of the Belkin group of companies. Third-party trademarks mentioned are the property of their respective owners. LNKPG-00113 Rev.
