User Guide EAP Controller Software REV1.0.
EAP Controller User Guide Contents CONTENTS Chapter 1 System Setup ............................................................................ 1 1.1 System Requirements......................................................................................................................................1 1.2 Network Topology ............................................................................................................................................1 1.3 Software Installation .........
EAP Controller User Guide Contents 4.1.1 Basic Wireless Setting ......................................................................................................................... 21 4.1.2 Advanced Wireless Setting ............................................................................................................... 24 4.2 Wireless Control .............................................................................................................................................. 25 4.
EAP Controller User Guide 5.4 Contents Configuration .................................................................................................................................................. 47 5.4.1 Basic Config ............................................................................................................................................ 47 5.4.2 IP Setting ............................................................................................................................
EAP Controller User Guide Chapter 1 System Setup Chapter 1 System Setup The EAP Controller is a management software specially designed for the TP-LINK EAP devices on a business wireless network. It allows you to centrally manage masses of EAP devices using a web browser on your PC. Moreover, it is particularly worth mentioning that it allows you to configure EAPs in batches. The EAP Controller has sufficient monitoring features.
EAP Controller User Guide Chapter 1 System Setup A DHCP Server To deploy EAPs in your local network, a DHCP server is required to assign IP addresses to the EAP devices and clients. Typically, a router acts as the DHCP server. It’s assumed that the IP address of the LAN of the router is 192.168.0.1. Management Hosts In the LAN, only one management host needs to install the EAP Controller software, called Controller Host.
EAP Controller User Guide Chapter 1 System Setup 3
EAP Controller User Guide Chapter 1 System Setup Step 2: When the InstallShield Wizard window disappears and a shortcut icon of the EAP Controller is created on your desktop, you have succeeded in installing the EAP Controller. 1.4 Quick Setup Perform the following steps to log into the EAP Controller interface: Step 1: Launch the EAP Controller on Controller Host and the following window will pop up. You can click Hide to hide this window into the tray but DO NOT close it.
EAP Controller User Guide Chapter 1 System Setup Step 3: Set an SSID name (wireless network name) and password. The EAP Controller will simultaneously create two wireless networks, a 2.4GHz one and a 5GHz one both encrypted in the WPA2-PSK mode. Click Next. Step 4: Configure an admin name and password for login to the EAP Controller. Specify an email address to receive the notification emails and reset your password if necessary. Click Next to continue. NOTE: Please remember well your password.
EAP Controller User Guide Chapter 1 System Setup Step 5: Review your settings. Once the wizard is finished, the browser will be redirected to the management interface. Step 6: A login screen will appear for the EAP Controller management interface. Enter the admin name and password you created and click Sign In. Then you will successfully log in the management interface.
EAP Controller User Guide Chapter 2 Interface Chapter 2 Interface The EAP Controller software has a web-based interface for easy configuration and management. To access the interface, perform the following steps: Step 1: Double click from your windows desktop and the following screen will pop up. NOTE: Please do not close the EAP Controller window during configuring the EAP Controller and managing your wireless network. Otherwise, the EAP devices cannot be managed.
EAP Controller User Guide Chapter 2 Interface Section A Section A provides two common options: APs and Stations, accessible from all tabs on the EAP Controller interface. The APs option respectively displays the number of the EAPs that are connected, disconnected and pending. You can click the number to go to the corresponding page on the Access Points Tab. The Stations option separately displays the total number of users and guests.
EAP Controller User Guide Chapter 3 Monitor Chapter 3 Monitor 3.1 Map Tab The EAP Controller software allows you to upload custom map images of your location(s) for a visual representation of your wireless network. When you initially launch the EAP Controller application, a default map is displayed. The legend at the bottom of the map shows the scale of the map. The Map Tab can visually monitor the running condition and visual coverage range of each EAP device. 3.1.
EAP Controller User Guide Step 2: Click Step 3: Click Chapter 3 Monitor . Give a map description, select your customized map image, and click Create. to close the window. 3.1.2 Set the Map Scale To set the map scale, perform the following steps: Step 1: Select a map from the drop-down list. Step 2: Use the zoom slider to zoom the map detail in and out.
EAP Controller User Guide Chapter 3 Monitor Step 3: Click . Then draw a line on the map by clicking and dragging the mouse. If you need to redraw the line, just click and draw the mouse again to draw a new line. Once you are satisfied with the line, click Next. Step 4: Enter the distance that the line represents in the Distance field to set the scale of this map. The distance is specified in meters by default but you can switch to feet using the drop-down selection menu on the right. Click Confirm. 3.1.
EAP Controller User Guide Chapter 3 Monitor Reveal Additional Options Click to reveal additional options. Click to lock the selected EAP in the current location on the map. Click to unlock the selected EAP and you can drag it to another location. Click to display the Details window that allows you to view AP’s details and configure the wireless parameters. For more detailed information, please refer to AP Details.
EAP Controller User Guide Chapter 3 Monitor Click Details to display EAP’s name, MAC address, IP address, transmitting/receiving channel, number of connected users, and number of connected guests. Click Coverage to display a visual representation of the wireless range covered by EAPs. NOTE: The visual range covered by EAPs will appear only after you set the map scale. The visual coverage has some differences from the actual situations.
EAP Controller User Guide Chapter 3 Monitor 3.2.1 View the Client Distribution on SSID A visual pie chart represents the client distribution on each SSID. For example, the SSID 2 has 2 clients, which occupies 67% of all the clients. 3.2.2 Quick Look Most Active AP refers to the current connected AP with the maximum traffic. Its MAC address and total amount of data downloaded/uploaded will be displayed. You can click the MAC address to open the AP Details page.
EAP Controller User Guide Chapter 3 Monitor All-Time Top Client refers to the client with the maximum traffic among all the clients that have accessed the EAP network before. Its MAC address, duration and total amount of data downloaded/uploaded will be displayed. You can click the MAC address of to open the connection history page. See Clients for additional information. 3.2.
EAP Controller User Guide Chapter 3 Monitor At the top right of the screen, you can filter the statistics by date and time period. You can also change the duration interval by toggling between 24h (24 hours) and 30d (30 days). The statistics information of Traffic and Client will never be cleared. 3.3 Access Points Tab The EAP Controller software can detect all the EAP devices in the LAN and list them on the Access Points page.
EAP Controller User Guide Chapter 3 Monitor In the Action column, select an icon to execute the corresponding operation: Click to locate the AP on the map. It will redirect to the Map tab. If the AP is not on the map but in the Unplaced APs list, it will be highlighted in red. Click to adopt the pending APs and the following window will pop up. Enter the username and password and click Apply.
EAP Controller User Guide Click Chapter 3 Monitor to upgrade the connected APs and the following window will pop up. Click Browse to locate and choose the upgrade file in your computer, then click Upgrade to install the latest EAP firmware. The Status will appear as Upgrading until the process is complete and the EAP reconnects to the EAP Controller software. You can upgrade the EAP devices in batches on the Batch Upgrade page.
EAP Controller User Guide Chapter 3 Monitor 3.5 Insight Tab The Insight tab displays a list of clients that have connected to the EAPs network during the specified period. Clients Statistics tab and Untrusted/Trusted Rogue APs tab will be introduced separately. 3.5.1 Clients Statistics The Clients Statistics page displays all the previously connected clients and their MAC address, download/upload bytes, duration and the time of last seen. You click the MAC address to get its connection history. 3.5.
EAP Controller User Guide Chapter 3 Monitor Import/Export Trusted AP List You can import a list of trusted APs, a saved list acquired from another AP or created from a text file. If the MAC address of an AP appears in the Trusted AP List, it will not be detected as a rogue. Click to import the trusted AP list and the following window will pop up. Select an import mode: Replace: Select to import the list and replace the contents of the current Trusted AP List.
EAP Controller User Guide Chapter 4 Global Setting Chapter 4 Global Setting This chapter consists of four configuration subpages: Wireless Settings, Wireless Control, System and Admin. The configurations on the first three subpages will be applied to all the EAPs in the LAN. While Admin is used to configure the user account for login to the EAP Controller. 4.1 Wireless Settings Wireless Settings page allows you to add wireless networks and configure wireless parameters.
EAP Controller User Guide Chapter 4 Global Setting Step 2: Specify the SSID name and wireless VLAN ID. Select whether to broadcast this SSID and whether to enable the Portal authentication. If the Portal authentication is enabled, you can configure it on the Portal page. Select whether to enable the SSID Isolation feature. Enabling this feature means that all the clients connecting to this added wireless network cannot communicate with each other. Step 3: Select the security mode of the wireless network.
EAP Controller User Guide Chapter 4 Global Setting Hexadecimal: Hexadecimal format stands for any combination of hexadecimal digits (0-9, a-f, A-F) in the specified length. Key Type: Select the WEP key length (64-Bit, 128-Bit, or 152-Bit) for encryption. 64Bit - Enter 10 hexadecimal digits or 5 ASCII characters. 128Bit - Enter 26 hexadecimal digits or 13 ASCII characters. 152Bit - Enter 32 hexadecimal digits or 16 ASCII characters. Key Value: Enter the WEP keys.
EAP Controller User Guide Chapter 4 Global Setting WPA-PSK: Based on pre-shared key, it is characterized by higher safety and simple settings, which suits for common households and small business. WPA-PSK has two versions: WPA-PSK and WPA2PSK. Please refer to WPA-Enterprise to configure Version, Encryption, and Group Key Update Period. Set your wireless password in the Wireless Password field. Step 4: Click Apply to successfully add the wireless network into the list. 4.1.
EAP Controller User Guide Chapter 4 Global Setting DTIM Period: This value indicates the number of beacon intervals between successive Delivery Traffic Indication Messages (DTIMs) and this number is included in each Beacon frame. A DTIM is contained in Beacon frames to indicate whether the access point has buffered broadcast and/or multicast data for the client devices. Following a Beacon frame containing a DTIM, the access point will release the buffered broadcast and/or multicast data, if any exists.
EAP Controller User Guide Chapter 4 Global Setting No Authentication When this option is selected, clients just need to accept the term of use. Authentication Type: Select No Authentication. Authentication Timeout: Specify a designated period of time for client’s access to the Internet. Options include: 1 Hour, 8 Hours, 24 Hours, 7 Days, and Custom. Custom allows users to define the time in days, hours, and minutes. By default authentication timeout is one hour.
EAP Controller User Guide Chapter 4 Global Setting Local Password When this option is selected, clients are required to enter the local username and password and accept the term of use. Authentication Type: Select Local Password. Username/Password: Specify the username/password for local authentication. Please refer to No Authentication to configure Authentication Timeout, Redirect, Redirect URL, and Portal Customization.
EAP Controller User Guide Chapter 4 Global Setting External Radius Server If you have a Radius Server, select External Radius Server and you can get two types of portal customization: Local Web Portal and External Web Portal. The authentication login page of Local Web Portal is provided by the built-in portal server of the EAP. The External Web Portal is provided by external portal server. Authentication Type: Select External Radius Server.
EAP Controller User Guide Chapter 4 Global Setting Radius Server IP/Port: Enter the IP address/port of Radius Server. Radius Password: Specify the password of Radius Server. Portal Customization: Local Web Portal Configure the Login Page Snapshot. External Web Portal When External Radius Server is configured and External Web Portal is selected, you also need to put the external web portal server to a whitelist of Free Authentication Policy, otherwise clients cannot access it before authenticated.
EAP Controller User Guide Chapter 4 Global Setting Step 2: Specify the policy name. And set either Source IP Range with the subnet/mask of the clients or Source MAC. Then set the Destination IP Range with the destination IP address and subnet mask for free authentication policy. Assign the service port as the Destination Port. Check the Status box to enable the policy.
EAP Controller User Guide Chapter 4 Global Setting Click Apply and the MAC Filter group will be successfully added as the following screen. Step 2: Click and specify a MAC Filter address. Click Apply and the MAC address you specified will be successfully added as the following screen. 4.2.4 MAC Filter Association You can associate the added MAC Filter group with SSID. Check the Enable MAC Filtering box and click Apply to enable the MAC Filtering feature.
EAP Controller User Guide Chapter 4 Global Setting 4.2.5 Scheduler Scheduler allows you to configure rules with specific time interval for EAPs, which automates the enabling or disabling of the EAP or radio. When Associated with SSID is selected, you can configure rules for a certain radio. When Associated with AP is selected, you can configure rules for an EAP device.
EAP Controller User Guide Step 2: Click Chapter 4 Global Setting to add a profile item. Select the day mode and Custom allows you to choose the desired days, such as Mon and Fri. If you select all day-24 hours, Start Time or End Time cannot be specified. Click Apply and the profile item is successfully added in the list. 4.2.6 Scheduler Association You can associate the profile item you added with SSID/AP.
EAP Controller User Guide Chapter 4 Global Setting The list entries will be different according to your selection of association mode. Associated with SSID In the Profile Name column, select a profile name from the drop-down list. Select Radio On/Off to turn on/off the wireless network during the time interval set for the profile. Click Apply to enforce this Scheduler Association entry in the Setting column. Associated with AP In the Profile Name column, select a profile name from the drop-down list.
EAP Controller User Guide Chapter 4 Global Setting Restore to Default Values: Click Restore to restore all the QoS parameters to factory default settings. Wi-Fi Multimedia (WMM): By default enabled. With WMM enabled, the EAP devices have the QoS function to guarantee the transmission of audio and video packets with high priority. Disenabling WMM is not allowed if you set the 802.11n only or 802.11b/g/n mixed mode on the EAPs. If WMM is disenabled, you cannot set the 802.11n only or 802.
EAP Controller User Guide Chapter 4 Global Setting Queue displays the transmission queue: Data 0>Data 1>Data 2>Data 3. Data 0 (Voice)—High priority queue, minimum delay. Time-sensitive data such as VoIP and streaming media are automatically sent to this queue. Data 1 (Video)—High priority queue, minimum delay. Time-sensitive video data is automatically sent to this queue. Data 2 (Best Effort)—Medium priority queue, medium throughput and delay. Most traditional IP data is sent to this queue.
EAP Controller User Guide Chapter 4 Global Setting 4.3 System 4.3.1 Log Setting You can choose the way to receive system logs on Log Setting page. These parameters can be configured: Auto Mail Feature, Enable Server and Enable Nvram. Auto Mail Feature If Auto Mail Feature is enabled, system logs will be sent to a specified mailbox. After checking the Auto Mail Feature box, the following screen will appear. Enter the sender’s mail address, the receipt’s address and the IP address of the SMTP server.
EAP Controller User Guide Chapter 4 Global Setting Period Time: Specify a period time to regularly send the system log mail. For example, 5 indicates that the mail will be sent once every five hours. Enable Server System logs can also be sent to a server. You can enable the system log server and enter its IP address and port. Enable NVRAM NVRAM (Non-volatile Random Access Memory) is a RAM that can still save data even if a device powers off.
EAP Controller User Guide Chapter 4 Global Setting 4.3.3 LED The LED page allows you to turn on/off the LED lights of EAPs. 4.3.4 Backup&Restore You can save the current configuration of the EAPs as a backup file and if necessary, restore the configuration using the backup file. It is recommended to back up the settings before you upgrade the device. NOTE: The format of the restore file is “.cfg”. 4.3.
EAP Controller User Guide Chapter 4 Global Setting NOTE: Please visit http://www.tp-link.com/en/support/download/ to download the latest firmware file of the corresponding model. Please select the proper software version that matches your hardware to upgrade. To avoid damage, please do not turn off the device while upgrading. After upgrading, the device will reboot automatically. 4.3.6 Country/Region On the Country/Region page, you can re-select your country or region.
EAP Controller User Guide Chapter 4 Global Setting 4.4.1 User Settings The User Settings page displays user’s name, email address, role and created time. Add User Step 1: Click and specify the name, email address, role and password for a new user. Click Apply and the new user will successfully be added in the list.
EAP Controller User Guide Step 2: In the Action column, click Chapter 4 Global Setting to edit the user and a window will appear as below. You can specify a new email address for the admin user and change the current password. For the added administrator, operator and observer users, you can also change their roles and even delete them. But the admin user created at the Quick Setup cannot be deleted and even its username/role cannot be changed. 4.4.
EAP Controller User Guide Chapter 4 Global Setting 4.4.3 Controller Settings The Controller Settings page is used for configuring the system settings of the EAP Controller. EAP Controller Controller Hostname/IP: Enter the hostname or IP address of the EAP Controller. NOTE: When you reset the admin password, the Controller will send alert emails to your email box. In every message there is a Controller URL, in which the Controller Hostname/IP will be specified.
EAP Controller User Guide Chapter 4 Global Setting Enable SMTP Server: Select this option to enable emails. Mail Server: Enter the IP address or domain of SMTP Server. Port: The default is 25. If Security Socket Layer (SSL) is enabled, then the port number will automatically change to 465. Enable SSL: You can enable SSL to enhance secure communications over the Internet. Enable Auth: Select this option to enable authentication. Username: Enter the username required by the mail server.
EAP Controller User Guide Chapter 5 AP Details Chapter 5 AP Details Clicking the AP’s name on the Access Points tab or clicking of connected AP on the map will open a window displaying the Details, User, Guest, and Configuration information of the AP. 5.1 Details The Details tab displays the detailed information about the AP. 5.1.
EAP Controller User Guide Chapter 5 AP Details 5.1.3 Radio Click Radio to view the radio information including the frequency band, the wireless mode, the channel width, the channel, and the transmitting power. At 2.4GHz, you can also view parameters of receiving/transmitting data. 5.2 User The User tab displays the information of client connecting to the EAP wireless network, including its MAC address and connected SSID. You can click the MAC address to get its connection history.
EAP Controller User Guide Chapter 5 AP Details 5.3 Guest The Guest tab displays the information of clients connecting to the EAP wireless network with the Portal authentication, including their MAC addresses and connected SSID. You can click authentication for it. to cancel the 5.
EAP Controller User Guide Chapter 5 AP Details 5.4.2 IP Setting You can configure an IP address and subnet mask for this EAP. Select DHCP/Static to set the IP address. DHCP: Select to get a dynamic IP address from the DHCP server.
EAP Controller User Guide Chapter 5 AP Details Fallback IP: Select whether to enable the Fallback IP feature. Fallback IP Address: Configure a fallback IP address for the AP. Fallback IP address is a secondary address. Fallback IP Mask: Set a subnet mask for the fallback IP address. Fallback Gateway: Set a gateway for the fallback IP address. Static: Select to manually configure a static IP address. IP Address: Configure an IP address for the AP.
EAP Controller User Guide Chapter 5 AP Details Select the frequency band (2.4GHz/5GHz) you want to configure. By default, the radio of this AP is enabled. Select the IEEE 802.11 Mode the radio uses. When selecting the frequency of 2.4GHz, three modes are available: 802.11b/g/n mixed: All of 802.11b, 802.11g, and 802.11n clients operating in the 2.4GHz frequency can connect to the EAP device. It is recommended to select the 802.11b/g/n mixed mode. 802.11b/g mixed: Both 802.11b and 802.
EAP Controller User Guide Chapter 5 AP Details Select the Channel used by the EAP device to improve wireless performance. The range of available channels is determined by the radio mode and the country setting. If you select Auto for the channel setting, the EAP device scans available channels and selects a channel where the least amount of traffic is detected. Enter the Tx Power (transmit power) value. The maximum transmit power may vary among different countries and regions. 5.4.
EAP Controller User Guide In the Action column, click Chapter 5 AP Details to configure a new SSID to override the previous one. Enable: Select whether to enable the SSID override feature. VLAN: You can allow the overridden SSID to join a VLAN. Check the User VLAN ID box and specify a VLAN ID. SSID: Specify a new network name. PSK: Specify a password to encrypt the new SSID. Click Apply to save your configurations. 5.4.
EAP Controller User Guide Chapter 5 AP Details 5.4.7 Forget this AP If you no longer want to manage this AP, you may remove it. But all the configurations and history about this AP will be lost. It is recommended to back up the configurations of this AP.
EAP Controller User Guide Chapter 6 Application Example Chapter 6 Application Example 6.1 Map Monitor The distinctive function of the EAP Controller is monitoring the running situation of all the EAPs and vividly presenting it on the map. The following is a simple but typical example. In a small enterprise, the network administrator deploys four EAP devices according to the preceding part of the UG. On the top of the interface apparently displays two devices being disconnected.
EAP Controller User Guide Chapter 6 Application Example Website: www.supermarketa.com, IP of External Radius Server: 192.168.1.103, port: 1812, External Web Portal URL: www.supermarketa.net, IP/subnet mask of External Web Server: 175.20.20.115/32, port: 80. The network administrator can perform the following steps to set the Portal authentication for the EAP network. Step 1: Sign in to the EAP Controller management interface and go to Wireless Settings > Basic Wireless Setting.
EAP Controller User Guide Chapter 6 Application Example It is recommended to select Local Password as shown below. Specify a username and password that will be stored on the EAPs and all users are required to enter the username and password to access the wireless network. You can set a proper authentication timeout that determines how long the users can stay online once they authenticate with the EAPs. Select External Radius Server as shown below.
EAP Controller User Guide Chapter 6 Application Example It is recommended to select Local Web Portal in the Portal Customization list. Then the following page will be shown. The web portal title and Term of Use are customizable. If External Radius Server is configured above, select External Web Portal. Enter External Web Portal URL as shown below.
EAP Controller User Guide Chapter 6 Application Example Specify the policy name and enter the Source IP Range with the subnet and mask of the clients. Then set the IP address and subnet mask of external Web server as Destination IP Range. The default Destination Port is 80. You should assign the service port of external Web server if the port number is not 80. Check the Status box to enable the policy. Click Apply to finish the configuration of policy.
EAP Controller User Guide Chapter 6 Application Example When External Radius Server is configured and External Web Portal is selected, the browser will be directed to the External Web Portal URL. Users can refer to the page to access more resources by an authentication or in other way. The following is a simple example. Click LOGIN and the web browser will be redirected to the Redirect URL. And then users can surf the Internet freely.
