User Guide AC1200/1900 Wireless Dual Band Gigabit Access Point EAP320/EAP330 REV1.0.
CE Mark Warning This is a class B product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures. RF Exposure Information This device meets the EU requirements (1999/519/EC) on the limitation of exposure of the general public to electromagnetic fields by way of health protection. The device complies with RF specifications when the device used at 20 cm from your body.
100 mW e.i.r.p. It is permitted to use SRD for outdoor applications only for purposes of gathering telemetry information for automated monitoring and resources accounting systems or security systems. 2.3. Maximum mean e.i.r.p. density is 10 mW/MHz. Maximum 100 mW e.i.r.p. Indoor applications. Ukraine Limited e.i.r.p. ≤100 mW with built-in antenna with amplification implementation factor up to 6 dBi.
This product can be used in the following countries: AT BG BY CA CZ DE DK EE ES FI FR GB GR HU IE IT LT LV MT NL NO PL PT RO RU SE SG SK TR UA US Explanation of the symbols on the product label Symbol Explanation DC voltage RECYCLING This product bears the selective sorting symbol for Waste electrical and electronic equipment (WEEE).
TP-LINK TECHNOLOGIES CO., LTD DECLARATION OF CONFORMITY For the following equipment: Product Description: Wireless Dual Band Gigabit Access Point Model No.
About this User Guide This User Guide is for EAP320 and EAP330. Chapter 4 to Chapter 8 are only suitable for the EAP in Standalone mode. Refer to the EAP Controller User Guide when the EAP is managed by the EAP Controller software. Convention Unless otherwise noted, the EAP or the device mentioned in this guide stands for AC1200 Wireless Dual Band Access Point EAP320, AC1900 Wireless Dual Band Access Point EAP330.
CONTENTS Chapter 1 Introduction ...................................................................................................................................... 3 1.1 Overview of the EAP ........................................................................................................................... 3 1.2 Hardware Overview ............................................................................................................................ 3 1.2.1 LED ............................
Chapter 6 6.1 Monitoring ...................................................................................................................................... 37 AP ............................................................................................................................................................ 37 6.1.1 6.2 AP List .......................................................................................................................................... 37 SSID .................
Chapter 1 Introduction 1.1 Overview of the EAP EAP series products provide wireless coverage solutions for small-medium business. They can either work independently as standalone APs or be centrally managed by the EAP Controller software, providing a flexible, richly-functional but easily-configured enterprise-grade wireless network for small and medium business.
LED Status Solid green Flashing red Flashing yellow Double-flashing red, green, yellow Indication The device is working properly. System errors. RAM, flash, Ethernet, WLAN or firmware may be malfunctioning. Firmware update is in progress. Do not disconnect or power off the device. The device is being reset to its factory default settings. 1.2.
Chapter 2 Network Topology A typical network topology for the EAP is shown below. Figure 2-1 Typical Topology To deploy an EAP in your local network, a DHCP server is required to assign IP addresses to the EAP and clients. Typically, a router acts as the DHCP server. A computer running the EAP Controller software can locate in the same or different subnet with the EAPs.
Chapter 3 Management Mode AC1200 Wireless Dual Band Access Point EAP320 and AC1900 Wireless Dual Band Access Point EAP330 can either work under the control of the EAP Controller software or work independently as a standalone access point. When user establishes a large-scale wireless network, the management of every single AP in the network is complex and complicated. With the EAP Controller software, you can centrally manage the mass APs simply in a web browser.
Chapter 4 Network On Network page you can configure the IP address of the standalone EAP. Figure 4-1 Network Page Dynamic/Static: By default, the EAP device obtains an IP address from a DHCP server (typically a router). You can also select Static to configure the IP address manually. Fallback IP: If the EAP fails to get a dynamic IP address from a DHCP server within ten seconds, the fallback IP will work as the IP address of the device.
Chapter 5 Wireless Wireless page, consisting of Wireless Settings, Portal, MAC Filtering, Scheduler, QoS and Rogue AP Detection, is shown below.
5.1 Wireless Settings Following is the page of Wireless Settings.
TIPS: Proceed to the following chapter for information on configuring the wireless network of the EAP. The configuring information of 2.4GHz is taken as the example. 5.1.1 Wireless Basic Settings Figure 5-3 Wireless Basic Settings 2.4GHz Wireless Radio/5GHz Wireless Radio: Check the box to enable the Wireless Radio. Wireless Mode: Select the protocol standard for the wireless network. Wireless network created by the EAP is able to operate in the 2.4GHz and 5GHz frequency The EAP supports 802.
Channel: Select the channel used by this device to improve wireless performance. 1/2412MHz means the channel is 1 and the frequency is 2412MHz. Tx power: Enter the transmit power value. By default, the value is 20. If the maximum transmit power is set to be larger than local regulation allows, the maximum Tx power regulated will be applied in actual situation. NOTE: In most cases, it is unnecessary to select maximum transmit power.
SSID Broadcast: Enable this function, AP will broadcast its SSID to hosts in the surrounding environment, as thus hosts can find the wireless network identified by this SSID. If SSID Broadcast is not enabled, hosts must enter the AP’s SSID manually to connect to this AP. Security Mode: Select the security mode of the wireless network. For the security of wireless network, you are suggested to encrypt your wireless network.
Open System: After you select Open System, clients can pass the authentication and associate with the wireless network without password. However, correct password is necessary for data transmission. Shared Key: After you select Shared Key, clients has to input password to pass the authentication, or it cannot associate with the wireless network or transmit data. Key Selected: You can configure four keys in advance and select one as the present valid key.
Encryption: Select the encryption type, including Auto, TKIP, and AES. The default setting is Auto, which can select TKIP (Temporal Key Integrity Protocol) or AES (Advanced Encryption Standard) automatically based on the client device's capability and request. AES is more secure than TKIP and TKIP is not supported in 802.11n mode. It is recommended to select AES as the encryption type. RADIUS Server IP/Port: Enter the IP address/port of the RADIUS server.
Encryption: Select the encryption type, including Auto, TKIP, and AES. The default setting is Auto, which can select TKIP (Temporal Key Integrity Protocol) or AES (Advanced Encryption Standard) automatically based on the wireless station's capability and request. AES is more secure than TKIP and TKIP is not supported in 802.11n mode. It is recommended to select AES as the encryption type. Wireless Password: Configure the WPA-PSK/WPA2-PSK password with ASCII or Hexadecimal characters.
is from 1 to 2347 bytes. The default value is 2347, which means that RTS is disabled. Fragmentation Threshold: Specify the fragmentation threshold for packets. If the size of the packet is larger than the fragmentation threshold, the packet will be fragmented into several packets. Too low fragmentation threshold may result in poor wireless performance caused by the excessive packets. The recommended and default value is 2346 bytes.
Following is the page of Portal. Figure 5-10 Portal Page NOTE: To apply Portal in a wireless network, please go to Wireless→Wireless Settings→SSIDs to enable Portal of a selected SSID. 5.2.1 Portal Configuration Three authentication types are available: No Authentication, Local Password and External RADIUS Server.
No Authentication：Users are required to finish only two steps: agree with the user protocol and click the Login button. Local Password：Users are required to enter the preset password, which are saved in the EAP. External RADIUS Server：Users are required to enter the preset user name and password, which are saved in the database of the RADIUS server. The RADIUS server acts as the authentication server, which allows you to set different usernames and passwords for different users.
Redirect URL: If you enable the Redirect function, please enter the URL that a newly authenticated client will be directed to. Portal Customization: Select Local Web Portal, the authentication login page will be provided by the built-in web server. The page configured below will be presented to users as the login page. Words can be filled in Input Box 1 and Input Box 2. Enter up to 31 characters as the title of the authentication login page in Input Box 1, like “Guest Portal of TP-LINK”.
Local Password Figure 5-12 Portal Configuration_Local Password Authentication Type: Select Local Password. Password: Enter the password for local authentication. Please refer to No Authentication to configure Authentication Timeout, Redirect, Redirect URL, and Portal Customization. External RADIUS Server External RADIUS Server provides two types of portal customization: Local Web Portal and External Web Portal.
1. Local Web Portal Figure 5-13 Portal Configuration_External RADIUS Server_Local Web Portal Authentication Type: Select External RADIUS Server. RADIUS Server IP: Enter the IP address of the RADIUS server. Port: Enter the port for authentication service. RADIUS Password: Enter the shared secret of RADIUS server to log in to the RADIUS server. Please refer to No Authentication to configure Authentication Timeout, Redirect, Redirect URL, and Portal Customization.
2. External Web Portal Figure 5-14 Portal Configuration_External RADIUS Server_External Web Portal Authentication Type: Select External RADIUS Server. RADIUS Server IP: Enter the IP address of the RADIUS server. Port: Enter the port for authentication service. RADIUS Password: Enter the shared secret of RADIUS server to log in to the RADIUS server. Portal Customization: Select External Web Portal.
Click to add a new authentication policy and configure its parameters. Figure 5-16 Configure Free Authentication Policy Policy Name: Enter a policy name. Source IP Range: Enter the source IP address and subnet mask of the clients who can enjoy the free authentication policy. Leaving the field empty means all IP addresses can access the specific resources. Destination IP Range: Enter the destination IP address and subnet mask for free authentication policy.
Click the button OK in Figure 5-16 and the policy is successfully added as Figure 5-17 shows. Figure 5-17 Add Free Authentication Policy Here is the explanation of Figure 5-17: The policy name is Policy 1. Clients with IP address range 192.168.2.0/24 are able to visit IP range 10.10.10.0/24. Policy 1 is enabled. Click to edit the policy. Click to delete the policy. 5.3 MAC Filtering MAC Filtering uses MAC addresses to determine whether one host can access the wireless network.
Settings Enable MAC Filtering: Check the box to enable MAC Filtering. Station MAC Group Follow the steps below to add MAC groups. Step 1: Click , two tables will be shown. Figure 5-19 Station MAC Group Step 2: Click and fill in a name for the MAC group. Figure 5-20 Add a Group Step 3: Select one MAC group, click and input the MAC address you want to organize into this group.
Figure 5-21 Add a Group Member Click in Modify column to edit the MAC group name or MAC address. Click to delete the MAC group or group member. MAC Filtering Association Figure 5-22 MAC Filtering Association SSID Name: Displays the SSID of the wireless network. Band: Displays the frequency band the wireless network operates at. MAC Group Name: Select a MAC group from the drop-down list to allow or deny its members to access the wireless network.
Figure 5-23 Scheduler Page Settings Scheduler: Check the box to enable Scheduler. Association Mode: Select Associated with SSID/AP, you can perform configurations on the SSIDs/AP. The display of Scheduler Association is based on your option here. Scheduler Profile Configuration Follow the steps below to add rules.
Step 1: Click , two tables will be shown. Figure 5-24 Scheduler Profile Configuration Step 2: Click and input a profile name for the rule. Figure 5-25 Add a Profile Step 3: Select one profile, and click and configure the recurring schedule for the rule.
Scheduler Association This zone will display different contents based on your selection of association mode in Settings. 1. Associated with SSID Figure 5-27 Scheduler Association_Associated with SSID SSID Name: Displays the SSID of the standalone AP. Band: Displays the frequency band which the wireless network operates at. Profile Name: Select a profile name from the drop-down list. Profile name is configured in Scheduler Profile Configuration.
5.5 QoS The EAP supports Quality of Service (QoS) to prioritize voice and video traffic over other traffic types. In normal use, we recommend you keep the default values for the EAP devices and station EDCA (Enhanced Distributed Channel Access). Figure 5-29 QoS Page 2.4GHz/5GHz Select the 2.4GHz or 5GHz to show and configure the setting of 2.4GHz or 5GHz. Wi-Fi Multimedia (WMM): By default, WMM is enabled.
5.5.1 AP EDCA Parameters AP Enhanced Distributed Channel Access (EDCA) parameters affect traffic flowing from the EAP device to the client station. Figure 5-30 AP EDCA Parameters Queue: Queue displays the transmission queue. By default, the priority from high to low is Data 0, Data 1, Data 2, and Data 3. The priority may be changed if you reset the EDCA parameters. Data 0 (Voice) — Highest priority queue, minimum delay.
5.5.2 Station EDCA Parameters Station EDCA parameters affect traffic flowing from the client station to the EAP device. Figure 5-31 Station EDCA Parameters Queue： Queue displays the transmission queue. By default, the priority from high to low is Data 0, Data 1, Data 2, and Data 3. The priority may be changed if you reset the EDCA parameters. Data 0 (Voice)—Highest priority queue, minimum delay. Time-sensitive data such as VoIP and streaming media are automatically sent to this queue.
TXOP Limit： The TXOP Limit is a station EDCA parameter and only applies to traffic flowing from the client station to the EAP device. The Transmission Opportunity (TXOP) is an interval of time, in milliseconds, when a WME client station has the right to initiate transmissions onto the wireless medium (WM) towards the EAP device. The valid values are multiples of 32 between 0 and 8192.
Figure 5-32 Rogue AP Detection Page 5.6.1 Settings Figure 5-33 Enable Rogue AP Detection Rogue AP Detection: Check the box to enable Rogue AP Detection, then click Save. 5.6.2 Detected Rogue AP List Information about the detected rogue APs is displayed in the list. By default, the status of the detected rogue AP is unknown. You can click Known in Action column to move the AP to the Trusted AP List.
Figure 5-34 Detected Rogue AP List Click to scan rogue APs. Make sure you have enabled Rogue AP Detection and saved the setting before you click the button. Action: Click Known to move the AP to the Trusted AP List. After the configurations are saved, the moved AP will not be displayed in the Detected Rogue AP List. MAC: The MAC address of the rogue AP. SSID: The SSID of the rogue AP. Band: Displays the frequency band which the wireless network of the rogue AP operates at.
SSID: The SSID of the trusted AP. Band: Displays the frequency band which the wireless network of the trusted AP operates at. Channel: The channel on which the trusted AP is currently broadcasting. Security: Displays the enabling or disabling of the security mode of the wireless network. 5.6.4 Download/Backup Trusted AP List You can import a list of trusted APs from a saved list which is acquired from another AP or created from a text file.
Chapter 6 Monitoring On Monitoring page, you can monitor the network running status and statistics based on AP, SSID and Client. 6.1 AP AP List on the Monitoring page displays the device name, its MAC address and the number of clients. Below the AP List the AP’s detailed information will be shown, including Device Information, Wireless Settings, LAN Information, Client, LAN Traffic and Radio Traffic. Figure 6-1 AP Monitoring 6.1.
Device Name: Displays the device name. MAC: Displays the MAC address of the EAP. Num of Clients: Displays the number of clients connected to the EAP. Device Information Figure 6-3 Device Information Device Name: Displays the device name. Device Model: Displays the model of the device. Firmware Version: Displays the firmware version of the device. If you want to upgrade the firmware, please refer to 8.5 Firmware Upgrade. System Time: Displays the system time of the device.
Wireless Settings Figure 6-4 Wireless Settings 2.4GHz/5GHz Choose one band to view the information about wireless setting. Channel/Frequency: Displays the channel number and the operating frequency. If you want to change them, please refer to 5.1.1 Wireless Basic Settings. Channel Width: Displays the spectral width of the radio channel used by the device. If you want to change it, refer to 5.1.1 Wireless Basic Settings. IEEE802.
Subnet Mask: Displays the subnet mask of the device. LAN Port1/ LAN Port2: Displays the maximum transmission rate and duplex mode (half-duplex or full-duplex) of the port. Client Figure 6-6 Client MAC: Displays the MAC address of the client of the AP selected in AP List. SSID: Displays the SSID the client is connected to. SNR(dB): Signal to Noise Ratio, the power ratio between the received wireless signal strength and the environmental noise strength.
Rx/Tx Packets: Displays the total amount of packets received/sent on the LAN port. Rx/Tx Bytes: Displays the total amount of data (in bytes) received/sent on the LAN port. Rx/Tx Dropped Packets: Displays the total amount of dropped packets received/sent on the LAN port. Rx/Tx Errors: Displays the total amount of error packets received/sent on the LAN port. Radio Traffic Click Radio Traffic and you can monitor the data transmission status of the wireless network. Figure 6-8 Radio Traffic 2.
6.2 SSID Figure 6-9 SSID Monitoring 6.2.1 SSID List In SSID List you can monitor the related parameters of the wireless network. Figure 6-10 SSID List SSID Name: Displays the SSID name. If you want to modify it, please refer to 5.1.2 SSIDs. VLAN ID: Displays the VLAN which the SSID belongs to. If you want to change the VLAN ID, please refer to 5.1.2 SSIDs. Num of Clients: Displays the number of clients connected to the SSID. If you want to get more information about these clients, please refer to 5.
MAC Filtering: Displays the enabling or disabling of MAC Filtering. If you want to modify it, please refer to 5.1.2 SSIDs. Isolation: Displays the enabling or disabling of SSID Isolation. If you want to modify it, please refer to 5.1.2 SSIDs. Down(Byte): Displays the throughput of the downstream data. Up(Byte): Displays the throughput of the upstream data. 6.3 Client From User List, you can monitor the status of all the clients connected to the EAP including those who are authenticated.
Access Point: Displays the name of the device to which the client is connected. SSID: Displays the SSID the client is connected to. SNR(dB): Signal to Noise Ratio, the power ratio between the received wireless signal strength and the environmental noise strength. The bigger the value of SNR, the better network performance the device provides. CCQ(%): Displays the wireless Client Connection Quality (CCQ).
Rate(Mbps): Displays the data rate at which the authenticated client transmits wireless packets. Down(Byte): Displays the throughput of the downstream data. Up(Byte): Displays the throughput of the upstream data. Active Time: Displays the amount of time the client has been authenticated on the root AP. Action: Click Unauthorize to stop giving authorization to the clients connected to the wireless network.
Chapter 7 Management Management page is mainly used for device management and maintenance. 7.1 System Log System log records information about hardware, software as well as system issues and monitors system events. With the help of system log, you can get informed of system running status and detect the reasons for failure. Following is the page of System Log. Figure 7-1 System Log Page 7.1.1 Log List From Log List you can view detailed information about hardware, software, system issues and so on.
Figure 7-2 Log List 7.1.2 Log Settings You can choose the way to receive system logs in Log Settings zone, where these parameters can be configured: Enable Auto Mail, Enable Server and Enable Nvram. Figure 7-3 Log Settings Enable Auto Mail If Auto Mail Feature is enabled, system logs will be sent to a mailbox. The following content will be shown. Figure 7-4 Enable Auto Mail From: Enter the sender’s email address. To: Enter the recipient’s email address, which will receive the system logs.
SMTP Server: Enter the IP address of the SMTP server. Enable Authentication: Generally users are required to log in to the SMTP server by entering user name and password. Time Mode: User Name: Enter the sender’s email address. Password: Enter the password of the sender’s email address. Confirm Password: Enter the password again for confirmation. System logs can be sent at specific time or time interval. Fixation Time: Set a fixed time, for example, 15:00.
Figure 7-6 Backup Log Page 7.2 Web Server You can log in web management interface, thereby manage and maintain the device. Following is the page of Web Server. Figure 7-7 Web Server Page HTTPS: HTTPS (Hypertext Transfer Protocol Secure) is enabled by default. Secure Server Port: Designate a secure server port for web server in HTTPS mode. By default the port is 443. Server Port: Designate a server port for web server in HTTP mode. By default the port is 80.
Following is the page of Management Access. Figure 7-8 Management Access Page MAC Authentication: Check the box to enable MAC Authentication. After MAC Authentication is enabled, only the PCs in MAC address list can log in the device’s web management page. By default this function is disabled. All PCs in LAN can log in and manage the device. MAC1~MAC4: Enter the MAC addresses of the PCs which are authorized to log in the device. 7.4 Trunk TIPS: Only the EAP330 has this function.
Enable: Check the box to enable Trunk. The Trunk function can bundles multiple Ethernet links into a logical link to increase bandwidth, improve reliability, and make load balanced. The EAP330 has two 1000Mbps Ethernet port. If the Trunk function is enabled and the ports are in the speed of 1000Mbps Full Duplex, the whole bandwidth of the Trunk is up to 4Gbps (2000Mbps * 2) because the bandwidth of each member port is 2000Mbps. Mode: Select the applied mode of Trunk Arithmetic.
Following is the page of SSH. Figure 7-11 SSH Page Server Port: Enter the server port. By default, it is port 22. SSH Login: Check the box to enable SSH Server. By default, it is disabled. 7.7 SNMP The device can be configured as an SNMP agent. SNMP (Simple Network Management Protocol), the most widely applied network management protocol, provides a management framework to monitor and maintain Internet devices.
Figure 7-12 SNMP Page SNMP Agent: Enable SNMP Agent and the SNMP Agent will collect the information of this device and respond to information requests from one or more management systems. SysContact: Enter the textual identification of the contact person for this managed node. SysName: Enter an administratively-assigned name for this managed node. SysLocation: Enter the physical location of this managed node. Get Community: Community refers to a host group aiming at network management.
NOTE: Defining community can allow management systems in the same community to communicate with the SNMP Agent. The community name can be seen as the shared password of the network hosts group. Thus, for the security, we suggest modifying the default community name before enabling the SNMP Agent service. If the field of community is blank, the SNMP Agent will not respond to any community name.
Chapter 8 System System page is mainly used to configure some basic information like user account and time, and realize functions including reboot, reset, backup, restore and upgrade the device. 8.1 User Account You can change the username and password to protect your device from unauthorized login. We recommend that you change the default user password on the very first system setup. Figure 8-1 User Account Page 8.
Figure 8-2 Time Settings 8.2.1 Time Settings Figure 8-3 Time Settings Click the button and the device will obtain GMT time from NTP server. IP address of the NTP server has to be filled in. Click the button and save the configuration, your PC’s time will be obtained as the device’s system time. Time zone: Select your local time zone from the drop-down list. Date: Set the current date, in format MM/DD/YYYY. For example, for November 25, 2014, enter 11/25/2014 in the field.
Time: Specify the device’s time. Select the number from the drop-down list in time format HH/MM/SS. Primary/Secondary NTP Server: If you’ve selected Get GMT from an NTP server, please input the primary NTP sever address and an alternative NTP server address. 8.2.2 Daylight Saving Figure 8-4 Daylight Saving Daylight Saving: Enable or disable the DST. DST is disabled by default. Mode: Options include Predefined Mode, Recurring Mode and Date Mode.
Recurring Mode Figure 8-6 Recurring Mode Mode: Select Recurring Mode. The configuration is recurring in use. Time Offset: Specify the time adding in minutes when Daylight Saving Time comes. Start/End: Select starting time and ending time of Daylight Saving Time. Date Mode Figure 8-7 Date Mode 8.3 Mode: Select Date Mode. Time Offset: Specify the time adding in minutes when Daylight Saving Time comes. Start/End: Select starting time and ending time of Daylight Saving Time.
8.4 Backup & Restore Figure 8-9 Backup & Restore You can save the current configuration of the EAP as a backup file and restore the configuration via a backup file. Back up the settings before you upgrade the device or upload a new configuration file can prevent it from being lost. Restore function helps you to restore the device to previous settings by uploading a backup file. 8.5 Firmware Upgrade Figure 8-10 Firmware Upgrade Please log in http://www.tp-link.com/ to download the latest system file.
NOTE: 1. Please select the proper software version that matches your hardware to upgrade. 2. To avoid damage, please do not turn off the device while upgrading. 3. After upgrading, the device will reboot automatically.
Appendix A: Specifications HARDWARE FEATURES Model EAP320 Interface Kensington lock slot RESET button EAP330 ETHERNET: 10/100/1000Mbps Ethernet port (RJ-45) CONSOLE port (RJ-45) ETHERNET1(PoE): 10/100/1000Mbps Ethernet port (RJ-45) ETHERNET2: 10/100/1000Mbps Ethernet port (RJ-45) Power Supply PoE(802.3at-compliant, 36-57VDC, 0.7A Max) or external 12VDC/1.5A power supply PoE (802.3at-compliant, 36-57VDC, 0.7A Max) or external 12VDC/2.5A power supply Antenna 2*5dBi embedded(2.
