User Guide EAP Controller Software 1910012227 REV 2.5.
CONTENTS 1 Quick Start........................................................................................................................ 1 1.1 Determine the Network Topology..........................................................................................................................2 1.1.1 Management in the Same Subnet.................................................................................................................. 2 1.1.2 Management in Different Subnets...................
2.3.2 View the Detailed Information of EAPs..................................................................................................... 19 2.3.3 Manage the EAPs in the Action Column................................................................................................... 19 2.4 Monitor and Manage Clients..................................................................................................................................20 2.4.1 View the Current Information of Clients..........
3.3.8 External Portal Server...................................................................................................................................... 66 3.4 Free Authentication Policy.....................................................................................................................................67 3.5 MAC Filter...................................................................................................................................................................
4.3.7 Rouge AP Detection......................................................................................................................................... 86 4.3.8 Forget this AP..................................................................................................................................................... 87 4.3.9 Local LAN Port VLAN Settings.....................................................................................................................
1 Quick Start The EAP Controller is a management software for the TP-Link EAP devices. It allows you to centrally manage your EAP devices using a web browser. You can configure EAPs in batches and conduct real-time monitoring of each EAP in the network. Follow the steps below to complete the basic settings of the EAP Controller. 1. Determine the Network Topology 2. Install the EAP Controller 3. Inform the EAPs of the Controller Host's Address 4. Start and Log in to the EAP Controller 5.
1.1 Determine the Network Topology There are two kinds of network topologies to centrally manage EAPs via the EAP Controller: ·The EAP Controller and EAPs are in the same subnet. ·The EAP Controller and EAPs are in different subnets. Determine your management method according to your need and refer to the following introductions to build your network toplogy. 1.1.1 Management in the Same Subnet If your EAP Controller and EAPs are in the same subnet, refer to the following network topology.
1.1.2 Management in Different Subnets If your EAP Controller and EAPs are in different subnets, refer to the following topology. A router acts as the gateway of the network. A layer 3 switch acts as a DHCP server to assign IP addresses to EAPs and clients. The Controller Host and the EAPs are connected to the switch's different network segments. To help the EAPs find the Controller Host, EAP Discover Utility should be installed on Host B which is in the same subnet with the EAPs.
Note We recommend that you deploy the EAP controller on a 64-bit operating system to guarantee the software stability. Install the EAP Controller Download the installation file of EAP Controller from the website http://www.tp-link.com/en/ download/EAP-Controller.html. Then follow the instructions to properly install the EAP Controller software. After successful installation, a shortcut icon your desktop. of the EAP Controller will be created on 1.2.
1.3 Inform the EAPs of the Controller Host's Address If your Controller Host and EAPs are in the same network segment, you can skip this section. If your Controller Host and EAPs are in different subnets, you need to install EAP Discovery Utility on a host that is in the same network segment with the EAPs. EAP Discovery Utility can help the EAPs find the Controller Host. System Requirements WinXP/Vista/7/8/8.1/10/Server2008/Server2012 Mac OS X 10.7/10.8/10.9/10.10/10.
4. Enter the hostname or IP address of the Controller Host. 5. Enter the EAP’s username and password (both are admin by default). 6. Click Apply to inform the EAP of the Controller's hostname or IP address. And then the connection can be established between the EAP and the Controller Host. 1.4 Start and Log in to the EAP Controller Launch the software on the Controller Host and follow the instructions to complete the basic configurations, and then you can log in to the management interface. 1.4.
Note ··If your browser does not open automatically, click Launch a Browser to Manage Wireless Network. You can also launch a web browser and enter http://127.0.0.1:8088 in the address bar. ··If your web browser opens but prompts a problem with the website's security certificate, click Continue. Launch EAP Controller on Linux Host To launch EAP Controller on a Linux host, follow the steps below: 1. Start the EAP Controller service using the command: tpeap start. 2.
3. Specify a username and a password to create an administrator account. Specify the email address to receive the notification emails and reset your password if necessary. Click Next. Note After logging into the EAP Controller, please set a mail server so that you can receive the notification emails and reset your password in case that you forget the password. Please refer to Configure Mail Server. 4. Review your settings and click Finish.
1.4.3 Log in to the Management Interface Once the basic configuration is finished, the browser will be redirected to the following page. Log in to the management interface of EAP Controller with the username and password you have set in the basic configuration. Note : In addition to the Controller Host, other hosts in the same LAN can also manage EAP devices via remote access to the Controller Host. For example, when the IP address of the Controller Host is 192.168.0.
3. Click Apply to create the site. 1.5.2 Adopt the EAPs The EAP Controller can discover all EAP devices currently connected in the network and display their connection statuses. All the EAPs are in Pending status when first discovered by the EAP Controller. To manage the EAPs, you need to adopt them. In the quick setup process, the EAP Controller will automatically adopt the selected EAPs using the default username and password (both are admin).
1.6 Monitor and Manage the EAPs When all the configurations above are finished, you can centrally monitor and manage the EAPs via the EAP Controller's management interface. The management interface is mainly divided into three sections as the following screen. Section A In Section A, you can check the status of EAPs and clients in the network. Also, to refresh the current page, click to globally configure the you can click wireless network, and click to sign out from the management interface.
2 Monitor and Manage the Network With the EAP Controller you can monitor the EAP devices and centrally manage your wireless network.
2.1 Monitor the Network with the Map You can upload your local map images and monitor the status and coverage range of each EAP with the map. When you initially launch the EAP Controller, a default map is displayed as the following figure shows. Follow the instructions below to add your own map and manage the EAPs via the map. 2.1.1 Add a Map Prepare a map image in .jpg, .gif, or .png format. And then follow the steps below to add the map to the EAP Controller. 1.
4. Click . Draw a line on the map and enter the distance the line represents. Then the EAP Controller will compute and generate the map scale automatically based on your configuration. 5. Drag the EAPs from the Unplaced APs list to the appropriate locations on the map according to their actual locations. You can click to reveal additional options: Lock the selected EAP in the current location on the map.
Unlock the selected EAP and you can drag it to another location. Display the EAP's details and configure the wireless parameters. Refer to Configure the EAPs Separately. Remove the selected EAP back into the Unplaced APs list. 2.1.2 Monitor the EAPs on the Map Click any of the following options to display EAP Label, Details, and Coverage on the map. Label Display the EAP’s name. The default name is the MAC address of the EAP.
2.2 View the Statistics of the Network The EAP Controller collects all statistics of the managed EAPs and displays the statistical information via graphs, pie charts and tables, providing an overview of your wireless network. 2.2.1 View the Client Distribution on SSID A visual pie chart represents the client distribution on each SSID. For example, the ssid_211 has one client, which occupies 50% of all the clients. 2.2.
Most Active AP The current connected AP with the maximum traffic. Most Active Client The current connected client with the maximum traffic. All-time Top Client The client with the maximum traffic among all the clients that have ever accessed the EAP network. 2.2.3 View Current Usage-Top EAPs This tab lists the hostname, the number of connected clients and the data traffic condition of the ten APs with the most traffic currently. Clients The amount of clients connected to this EAP.
The left ordinate axis indicates the traffic and the right one represents the number of the clients. The abscissa axis shows the selected time period. Traffic indicates a visual graph of the network traffic during the selected time period. Client indicates a visual graph of the number of the connected clients during the selected time period. For example, the statistics information at 10:00 indicates the traffic size and client number from 9:00 to 10:00.
Connected Displays the connected EAPs. Disconnected Displays the disconnected EAPs. Only connected EAPs can be managed. After you adopt a pending EAP, its status will become provisioning and then connected. A connected EAP will turn into a pending one after you forget this EAP. You can refer to Forget this AP to forget a EAP or click Forget All on the page to forget all the connected EAPs. If a connected or pending EAP powers off, it will be disconnected.
Upgrade the EAP. Click Browse to locate and choose the upgrade file in your computer, then click Upgrade to install the latest EAP firmware. The Status will appear as Upgrading until the process is complete and the EAP reconnects to the EAP Controller. Note ··Only managed EAPs can be rebooted or upgraded. ··If you want to login to the EAP's own management interface, you need to forget the EAP before that. 2.
Reconnect the client to the network. Restrict the client's access to the network. If the client is Guest, you can click this icon to cancel the authorization for it. 2.5 View Clients Statistics During the Specified Period The Clients Statistics page under the Insight tab displays the information of clients that have connected to the EAPs network during a specified period. 2.5.1 Select a Specified Period Select a period from the drop-down menu.
All The page will display the history information of all the clients. User The page will display the history information of Users. Guest The page will display the history information of Guests. Blocked The page will display the clients that have been blocked. Users are the clients connected to the EAP wireless network without the Portal Authentication. Guests are the clients connected to the EAP wireless network with the Portal Authentication.
You can execute the corresponding operation to the EAP by clicking an icon in the Action column: Move the untrusted rogue AP to the Trusted Rogue APs list. Delete this record. Delete all records. 2.6.2 Manage the Trusted Rogue APs List The Trusted Rogue APs page displays the detailed information of trusted rogue APs. You can execute the corresponding operation to the EAP by clicking an icon in the Action column: Move the trusted rogue AP to the Untrusted Rogue APs list.
Import a saved Trusted Rogue APs list. If the MAC address of an AP appears in list, it will not be detected as a rogue AP. Please follow the steps below: 1. Select Replace (replace the current Trusted Rogue APs list with the one you import) or Merge (add the APs in the file to the current Trusted Rogue APs list). 2. Click Browse to locate the file and choose it. 3. Click Import to import the Trusted Rogue APs list. 2.
2.9 View Alerts You can see the status change of your EAPs on the Unarchived Alerts page. You can click or As follows, the Archived Alerts page displays the alerts archived by you. You can click to delete the records. or to move unarchived alerts to the Archived Alerts page.
3 Configure the EAPs Globally This chapter introduces the global configurations applied to all the managed EAPs. To configure a specific EAP, please refer to Chapter 4 Configure the EAPs Separately.
3.1 Wireless Network In addition to the wireless network you created in Quick Start, you can add more wireless networks and configure the advanced wireless parameters to improve the quality of the wireless network. 3.1.1 Add Wireless Networks To add wireless networks, follow the steps below. 1. Go to Wireless Settings > Basic Wireless Setting. 2. Select a band frequency and click at the right of to add a WLAN group.
SSID Name Enter an SSID name contains up to 32 characters. Wireless Vlan ID Set a VLAN ID for the wireless network. Wireless networks with the same VLAN ID are grouped to a VLAN. The value ranges from 0 to 4094. 0 means VLAN function is disabled. SSID Broadcast With the option enabled, EAPs will broadcast the SSID to the nearby hosts, so that those hosts can find the wireless network identified by this SSID. If this option is disabled, users must enter the SSID manually to connect to the EAP.
Following is the detailed introduction of WEP, WPA-Enterprise and WPA-PSK. WEP WEP is based on the IEEE 802.11 standard and less safe than WPA-Enterprise and WPA-PSK. Note WEP is not supported in 802.11n mode or 802.11ac mode. If WEP is applied in 802.11n, 802.11 ac or 802.11n/ ac mixed mode, the clients may not be able to access the wireless network. If WEP is applied in 11b/g/n mode (2.4GHz) or 11a/n (5GHz), the EAP device may work at a low transmission rate.
WPA-Enterprise The WPA-Enterprise mode requires a RADIUS server to authenticate clients. Since the WPA- Enterprise can generate different passwords for different clients, it is much safer than WPA-PSK. However, it costs much more to maintain and is usually used by enterprise. Version Select the version of WPA-Enterprise. Auto: The EAP will automatically choose the version used by each client device. WPA/WPA2: Two versions of Wi-Fi Protected Access. Encryption Select the Encryption type.
WPA-PSK Based on a pre-shared key, WPA-PSK is characterized by high safety and simple settings and is mostly used by common households and small businesses. Version Select the version of WPA-PSK. Auto: The EAP will automatically choose the version for each client device. WPA-PSK: Pre-shared key of WPA. WAP2-PSK: Pre-shared key of WPA2. Encryption Select the Encryption type. Auto: The default setting is Auto and the EAP will select TKIP or AES automatically based on the client request.
3.1.2 Configure Advanced Wireless Parameters Proper wireless parameters can improve the network's stability, reliability and communication efficiency. The advanced wireless parameters consist of Beacon Interval, DTIM Period, RTS Threshold, Fragmentation Threshold and Airtime Fairness. To configure the advanced wireless parameters, follow the steps below. 1. Go to Wireless Settings > Advanced Wireless Setting. 2. Select the band frequency . 3. Configure the following parameters.
Fragmentation Threshold The fragmentation function can limit the size of packets transmitted over the network. If a packet exceeds the Fragmentation Threshold, the fragmentation function is activated and the packet will be fragmented into several packets. Fragmentation helps improve network performance if properly configured. However, too low fragmentation threshold may result in poor wireless performance caused by the extra work of dividing up and reassembling of frames and increased message traffic.
Connection Threshold/Difference Threshold When the number of clients on the 5GHz band reaches the value of Connection Threshold and the difference value between the number of clients on the 2.4GHz band and the 5GHz band reaches the value of Difference Threshold, EAPs will refuse the requests of communication on the 5GHz band from other clients and no longer steer other clients to the 5GHz band. The value of Connection Threshold is from 2 to 40, and the default is 20.
Rule Name Specify a name for this rule. Rule Mode Select the mode for this rule. Block: Select this mode to block the rule members to access the network. Allow: Select this mode to allow the rule members to access the network. Rule Memebers Subnets: Clients of the subnet will be controlled by the rule. Enter the subnet for . Up to 16 subnets can be added. this rule in the format X.X.X.X/X and click Except Subnets: Clients of the subnet will be controlled by the rule. Enter the .
Then the following window will pop up: These authentication methods are available: No Authentication, Simple Password, Local User, Voucher, SMS, Facebook, External RADIUS Server and External Portal Server. The following sections introduce how to configure each Portal authentication. 3.3.1 No Authentication With No Authentication configured, clients can access the network without any authentication. Follow the steps below to configure No Authentication: 1.
Redirect If you enable this function, the portal will redirect the newly authenticated clients to the configured URL. Redirect URL If the Redirect function above is enabled, enter the URL that a newly authenticated client will be redirected to. 3. In the Login Page section, configure the login page for the Portal. Configure the following parameters: Background Select the background type. Two types are supported: Solid Color and Picture.
Welcome Information Specify the welcome information. and select your desired text color for the In addtion, you can click welcome information through the color picker or by entering the RGB value manually. Copyright Specify the copyright information. and select your desired text color for Copyright In addtion, you can click information through the color picker or by entering the RGB value manually.
Button Click and configure the button. Button Position: Set the position of the login button. The options include Middle, Upper and Lower. Button Color: Select your desired login button color through the color picker or by entering the RGB value manually. Button Text Color: Select your desired text color for the button through the color picker or by entering the RGB value manually. 4.
Picture Careusel Interval Specify the picture carousel interval. For example, if this value is set as 5 seconds, the first picture will be displayed for 5 seconds, followed by the second picture for 5 seconds, and so on. Allow Users To Skip Advertisement Specify whether to enable this feature. With this feature enabled, the user can click the Skip button to skip the advertisement. 5. Click Apply. 3.3.
Configure the following parameters: Background Select the background type. Two types are supported: Solid Color and Picture. Background Color If Solid Color is selected, configure your desired background color through the color picker or by entering the RGB value manually. Background Picture If Picture is selected, click the Choose button and select a picture from your PC. Drag and scale the clipping region to edit the picture and click Confirm.
Copyright Specify the copyright information. and select your desired text color for Copyright In addtion, you can click information through the color picker or by entering the RGB value manually. Button Click and configure the button. Button Position: Set the position of the login button. The options include Middle, Upper and Lower. Button Color: Select your desired login button color through the color picker or by entering the RGB value manually.
Configure the following parameters: Advertisement Specify whether to enable the Advertisement feature. With this feature enabled, you can add advertisement pictures on the authentication page. These advertisement pictures will be displayed before the login page appears. You can also allow users to skip the advertisement by enabling Allow to Skip Advertisement. Picture Resource Upload advertisement pictures. When several pictures are added, they will be played in a loop.
Configure the following parameters: Portal Name Specify a name for the Portal. SSID Select an SSID for the Portal. Authentication Type Select Local User. User Management You can click this button to configure user accounts for authentication later. Please refer to Create Local User Accounts. Redirect If you enable this function, the portal will redirect the newly authenticated clients to the configured URL.
Welcome Information Specify the welcome information. and select your desired text color for the In addtion, you can click welcome information through the color picker or by entering the RGB value manually. Copyright Specify the copyright information. and select your desired text color for Copyright In addtion, you can click information through the color picker or by entering the RGB value manually.
Button Click and configure the button. Button Position: Set the position of the login button. The options include Middle, Upper and Lower. Button Color: Select your desired login button color through the color picker or by entering the RGB value manually. Button Text Color: Select your desired text color for the button through the color picker or by entering the RGB value manually. 4.
Picture Careusel Interval Specify the picture carousel interval. For example, if this value is set as 5 seconds, the first picture will be displayed for 5 seconds, followed by the second picture for 5 seconds, and so on. Allow Users To Skip Advertisement Specify whether to enable this feature. With this feature enabled, the user can click the Skip button to skip the advertisement. 5. Click Apply. Create Local User Accounts Follow the steps below to create the user accounts for authentication: 1.
Configure the following parameters: Username Specify the username. The username should not be the same as any existing one. Password Specify the password. Users will be required to enter the username and password when they attempt to access the network. Authentication Timeout Specify the authentication timeout for formal users. After the timeout, the users need to log in at the web authentication page again to access the network.
Additionally, you can click to backup all the user account information into a CSV file or XLS file and save the file to your PC. If needed, you can click import the account information to the list. and select the file to Note Using Excel to open the CSV file may cause some numerical format changes, and the number may be displayed incorrectly. If you use Excel to edit the CSV file, please set the cell format as text.
3. Specify the Name, Password and Notes of the Operator account. 4. Choose Site Privileges (more than one options can be chosen) for the Operator account. 5. Click Apply to create an Operator account. Then other users can use this account to enter the hotspot management page. 3.3.4 Voucher With Voucher configured, you can distribute the vouchers automatically generated by the EAP Controller to the clients. Clients can use the vouchers to access the network.
3. In the Login Page section, configure the login page for the Portal. Configure the following parameters: Background Select the background type. Two types are supported: Solid Color and Picture. Background Color If Solid Color is selected, configure your desired background color through the color picker or by entering the RGB value manually. Background Picture If Picture is selected, click the Choose button and select a picture from your PC.
Copyright Specify the copyright information. and select your desired text color for Copyright In addtion, you can click information through the color picker or by entering the RGB value manually. Button Click and configure the button. Button Position: Set the position of the login button. The options include Middle, Upper and Lower. Button Color: Select your desired login button color through the color picker or by entering the RGB value manually.
Configure the following parameters: Advertisement Specify whether to enable the Advertisement feature. With this feature enabled, you can add advertisement pictures on the authentication page. These advertisement pictures will be displayed before the login page appears. You can also allow users to skip the advertisement by enabling Allow to Skip Advertisement. Picture Resource Upload advertisement pictures. When several pictures are added, they will be played in a loop.
Configure the following parameters: Code Length Specify the length of the voucher codes to be created. Amount Enter the voucher amount to be generated. Type Select Single Use or Multi Use. Single Use means one voucher can only be distributed to one client. Multi Use means one voucher can be distributed to several clients, who can use the same voucher to access the network at the same time. If you select Multi Use, enter the value of Max Users.
4. Click or to print and save the vouchers. 5. Distribute the vouchers to clients, and then they can use the codes to pass authentication. 6. When the vouchers are invalid, you can click them. to delete the Voucher or click to delete all of Manage the Guests On the Guest page, you can view the information of clients that have passed the portal authentication and manage the clients.
You can select an icon to execute the corresponding operation: Restrict the client to access the network. Extend the effective time. Create Operator Accounts Operator account can be used to remotely manage the Local User Portal and Voucher Portal. Other users can visit the URL https://EAP Controller Host’s IP Address:8043/hotspot (For example: https://192.168.0.64:8043/hotspot) and use the Operator account to enter the portal management page.
3.3.5 SMS With SMS portal configured, client can get verification codes using their mobile phones and enter the received codes to pass the authentication. Follow the steps below to configure SMS Portal: 1. Go to www.twilio.com/try-twilio and get a Twilo account. Buy the Twilio service for SMS. Then get the account information, including ACCOUNT SID, AUTH TOKEN and Phone number. 2. Go to Wireless Settings > Basic Wireless Settings and create an SSID for the Portal. 3.
Preset Country Code Set the default country code that will be filled automatically on the authentication page. Redirect If you enable this function, the portal will redirect the newly authenticated clients to the configured URL. Redirect URL If the Redirect function above is enabled, enter the URL that a newly authenticated client will be redirected to. 4. In the Login Page section, configure the login page for the Portal. Configure the following parameters: Background Select the background type.
Welcome Information Specify the welcome information. and select your desired text color for the In addtion, you can click welcome information through the color picker or by entering the RGB value manually. Copyright Specify the copyright information. and select your desired text color for Copyright In addtion, you can click information through the color picker or by entering the RGB value manually.
Button Click and configure the button. Button Position: Set the position of the login button. The options include Middle, Upper and Lower. Button Color: Select your desired login button color through the color picker or by entering the RGB value manually. Button Text Color: Select your desired text color for the button through the color picker or by entering the RGB value manually. 5.
Picture Careusel Interval Specify the picture carousel interval. For example, if this value is set as 5 seconds, the first picture will be displayed for 5 seconds, followed by the second picture for 5 seconds, and so on. Allow Users To Skip Advertisement Specify whether to enable this feature. With this feature enabled, the user can click the Skip button to skip the advertisement. 6. Click Apply. For more details about how to configure SMS Portal, you can go to http://www.tp-link.
3.3.7 External RADIUS Server If you have a RADIUS server, you can configure External RADIUS Server Portal. With this type of portal, you can get two types of portal customization: Local Web Portal and External Web Portal. The authentication login page of Local Web Portal is provided by the built-in portal server of the EAP. The External Web Portal is provided by external portal server. Follow the steps below to configure External RADIUS Server Portal: 1.
Redirect URL If the Redirect function above is enabled, enter the URL that a newly authenticated client will be redirected to. Portal Customization Select Local Web Portal or External Web Portal. Local Web Portal: If this option is selected, refer to step 4 to configure the login page and step 5 to configure the advertisement. External Web Portal: If this option is selected, follow the steps below. 1. Configure the external RADIUS server. 2.
Welcome Information Specify the welcome information. and select your desired text color for the In addtion, you can click welcome information through the color picker or by entering the RGB value manually. Copyright Specify the copyright information. and select your desired text color for Copyright In addtion, you can click information through the color picker or by entering the RGB value manually.
Button Click and configure the button. Button Position: Set the position of the login button. The options include Middle, Upper and Lower. Button Color: Select your desired login button color through the color picker or by entering the RGB value manually. Button Text Color: Select your desired text color for the button through the color picker or by entering the RGB value manually. 5.
Picture Careusel Interval Specify the picture carousel interval. For example, if this value is set as 5 seconds, the first picture will be displayed for 5 seconds, followed by the second picture for 5 seconds, and so on. Allow Users To Skip Advertisement Specify whether to enable this feature. With this feature enabled, the user can click the Skip button to skip the advertisement. 6. Click Apply. 3.3.8 External Portal Server The option of External Portal Server is designed for the developers.
3.4 Free Authentication Policy Free Authentication Policy allows some specified clients to access the network resources without authentication. Follow the steps below to add free authentication policy. 1. Go to Wireless Control > Free Authentication Policy. 2. Click and the following window will pop up. 3. Configure the following parameters. When all conditions are met, the client can access the network without authentication. Policy Name Specify a name for the policy.
1. Go to Wireless Control > MAC Filter to add MAC Filter group and group members. 1 ) Click and specify a name for the group. 2 ) Click Apply and the group will be successfully added as shown below. 3 ) Click and enter a MAC address in the format as shown below. 4 ) Click Apply to add the MAC address into the MAC filter group. 2. You can add more groups or members according to your need.
Note You can click needed, you can also click to export the group members to a excel file and save the file on your PC. If to import the group members to the EAP Controller. 3. Go to Wireless Control > MAC Filter Association to associate the added MAC Filter group with SSID. 1 ) Check the box and click Apply to enable MAC Filtering function. 2 ) Select a band frequency (2.4GHz or 5GHz) and a WLAN group.
1 ) Click and specify a name for the profile. 2 ) Click Apply and the profile will be added. 3 ) Click and configure the parameters to specify a period of time. 4 ) Click Apply and the profile is successfully added in the list. 2. Go to Wireless Control > Scheduler Association. 1 ) Check the box to enable Scheduler function.
2 ) Select Associated with SSID (the profile will be applied to the specific SSID on all the EAPs) or Associated with AP (the profile will be applied to all SSIDs on the specific EAP). Then click Apply. 3 ) Select a band frequency (2.GHz or 5GHz) and a WLAN group. 4 ) In the Profile Name column of the specified SSID or AP, select a profile you added before in the drop-down list. Select Radio Off/Radio On to turn on or off the wireless network during the time interval set for the profile.
Wi-Fi Multimedia (WMM) By default enabled. With WMM enabled, the EAP devices have the QoS function to guarantee the high priority of the transmission of audio and video packets. If 802.11n only mode is selected in 2.4GHz (or 802.11n only, 802.11ac only, or 802.11 n/ac mixed mode in 5GHz), the WMM should be enabled. If WMM is disabled, the 802.11n only mode cannot be selected in 2.4GHz (or 802.11n only, 802.11ac only, or 802.11 n/ac mixed mode in 5GHz). NoAcknowledgement By default disabled.
Maximum Contention Window The upper limit (in milliseconds) for the doubling of the random backoff value. This doubling continues until either the data frame is sent or the Maximum Contention Window size is reached. This value must be higher than the value for the Minimum Contention Window. Maximum Burst Maximum Burst specifies the maximum burst length allowed for packet bursts on the wireless network. A packet burst is a collection of multiple frames transmitted without header information.
TXOP Limit The TXOP Limit is a station EDCA parameter and only applies to traffic flowing from the client station to the EAP device. The Transmission Opportunity (TXOP) is an interval of time, in milliseconds, when a WME client station has the right to initiate transmissions onto the wireless medium (WM) towards the EAP device. The valid values are multiples of 32 between 0 and 8192. 5. Click Apply. 3.8 System 3.8.1 Reboot Schedule You can reboot all the EAPs in the network periodically as needed.
2. Check the box to choose the way to receive system logs (you can choose more than one) and click Apply. Three ways are available: Auto Mail Feature, Server and Nvram. Auto Mail Feature If Auto Mail Feature is enabled, system logs will be sent to a specified mailbox. Check the box to enable the feature and configure the parameters. From Address Enter the sender's E-mail address. To Address Enter the receiver's E-mail address. SMTP Server Enter the IP address of the SMTP server.
Nvram Nvram (Non-volatile Random Access Memory) is a RAM that can still save data even if a device is power off. All TP-Link EAPs are equipped with Nvram. With this option enabled, the Nvram feature can help reserve the system logs when an EAP device is power off. 3.8.3 Device Account When the EAP devices are adopted at the first time, their username and password will become the same as those of the EAP Controller which are specified at Basic Configurations.
3.8.5 SSH You can login to the EAP Controller via SSH. Deploy an SSH server on your network and follow the steps below to configure SSH on the EAP Controller: 1. Go to System > SSH. 2. Enter the port number of the SSH server. 3. Check the box to enable SSH Login. 4. Click Apply. 3.8.6 Management VLAN Management VLAN provides a safer way for you to manage the EAP. With Management VLAN enabled, only the hosts in the management VLAN can manage the EAP.
3.8.7 Backup&Restore You can save the current configuration of the EAPs as a backup file and if necessary, and restore the configuration using the backup file. We recommend you back up the settings before upgrading the device. Follow the steps below to backup and restore the configuration. 1. Go to System > Backup&Restore. 2. Click Backup and save the backup file. 3. If necessary, click Browse to locate and choose the backup file. Then click Restore to restore the configuration. 3.8.
4 Configure the EAPs Separately In addition to global configuration, you can configure the EAPs separately and the configuration results will be applied to a specified EAP device. To configure a specified EAP, please click the EAP's name on the Access Points tab or click of connected EAP on the map. Then you can view the EAP's detailed information and configure the EAP on the pop-up window.
4.1 View the Information of the EAP 4.1.1 Overview Click Overview to view the basic information including EAP's MAC address (or name you set), IP address, model, firmware version, the usage rate of CPU and Memory and uptime (indicates how long the EAP has been running without interruption). 4.1.
4.1.3 Radio Click Radio to view the radio information including the frequency band, the wireless mode, the channel width, the channel, and the transmitting power. At 2.4GHz, you can also view parameters of receiving/transmitting data. 4.2 View Clients Connecting to the EAP 4.2.1 User The User page displays the information of clients connecting to the SSID with Portal disabled, including their MAC addresses and connected SSIDs. You can click the client's MAC address to get its connection history.
4.2.2 Guest The Guest page displays the information of clients connecting to the SSID with Portal enabled, including their MAC addresses and connected SSIDs. You can click the client's MAC address to get its connection history. 4.3 Configure the EAP The Configuration page allows you to configure the EAP. All the configurations will only take effect on this device. 4.3.1 Basic Config Here you can change the name of the EAP.
4.3.2 IP Setting You can configure an IP address for this EAP. Two options are provided: DHCP and Static. Get a Dynamic IP Address From the DHCP Server 1. Configure your DHCP server. 2. Select DHCP on the page above. 3. Enable the Fallback IP feature. When the device cannot get a dynamic IP address, the fallback IP address will be used. 4. Set IP address, IP mask and gateway for the fallback address and click Apply. Manually Set a Static IP Address for the EAP 1. Select Static. 2.
Status Enabled by default. If you disable the option, the radio on the frequency band will turn off. Mode Select the IEEE 802.11 mode the radio uses. When the frequency of 2.4GHz is selected, 802.11b/g/n mixed, 802.11b/g mixed, and 802.11n only modes are available: 802.11b/g/n mixed: All of 802.11b, 802.11g, and 802.11n clients operating in the 2.4GHz frequency can connect to the EAP device. We recommend you select the 802.11b/g/n mixed mode. 802.11b/g mixed: Both 802.11b and 802.
4.3.4 Load Balance By setting the maximum number of clients accessing the EAPs, Load Balance helps to achieve rational use of network resources. Select the frequency band (2.4GHz/5GHz) and configure the parameters. Max Associated Clients Enable this function and specify the maximum number of connected clients. While more clients requesting to connect, the EAP will disconnect those with weaker signals.
3. Check the box to enable the feature. 4. You can join the overridden SSID in to a VLAN. Check the Use VLAN ID box and specify a VLAN ID. 5. Specify a new name and password for the SSID. 6. Click Apply to save the configuration. 4.3.6 Trunk Settings Only EAP330 supports this function. The trunk function can bundles multiple Ethernet links into a logical link to increase bandwidth and improve network reliability. Status Enable this function. Mode Select the applied mode of Trunk Arithmetic.
4.3.8 Forget this AP If you no longer want to manage this EAP, you may remove it. All the configurations and history about this EAP will be deleted. It is recommended to back up the configurations of this EAP before you forget it. 4.3.9 Local LAN Port VLAN Settings Only EAP115-Wall supports this function. This feature is used to add the EAP to a specific VLAN. With this feature enabled, the hosts connected to this EAP can only communicate with the devices in the same VLAN. Status Enable this function.
5 Manage the EAP Controller This chapter mainly introduces how to manage the user account and configure system settings. This chapter includes the following contents.
5.1 Information About the Software You can view the EAP Controller's version and copyright information on the About page. 5.2 User Account You can use different user account to log in to the EAP Controller. User has three roles: administrator, operator and observer. The administration authority varies among different roles. Administrator The first administrator account is created in the Basic Configuration process and this account can not be deleted.
3. Specify the username, Email and password of the account. 4. Select the role from the drop-down list. ·If you select operator or observer, you also need to select the Site Privileges. ·If you select administrator, the Site Privileges option will not appear and all sites are available for the administrator user. 5. Click Apply to add the user account. Note You can refer to the Role page to view the user role's type, description information, permission scope and created time. 5.
2. Click Mail Server, check the box to enable SMTP Server, and then the following screen will appear. 3. Configure the following parameters. Mail Server Enter the IP address or domain of SMTP Server. Port The default is 25. Enable Auth Select this option to enable authentication. Username/Password If you enable authentication, enter the username and password required by the mail server. Specify Sender Address Specify the sender's mail address.
6 Application Example A restaurant has a wireless network with three EAPs managed by the EAP Controller. The network administrator wants to : ·Monitor the EAPs with the Map. ·Enable Portal function to drive customers' attention to the ads of the supermarket when customers attempt to access the network. The costumers need to use a simple password to pass the authentication. ·Allow the employees of the restaurant to access the network resources without portal authentication.
6.1 Basic Configuration Follow the steps below to do the basic configuration. 1. Connect the hardware by referring to the following topology. Host A (Controller Host) IP: 192.168.0.100 Switch Router (DHCP Server) LAN IP:192.168.0.1 Internet EAP Controller EAPs 2. Install the EAP Controller on Host A. 3. Launch the software and follow the instructions to complete some initial configurations. 4. Log into the management interface. 5. Adopt the pending EAP devices. 6.
6.2.2 Configure Portal Authentication Follow the steps below to configure Portal function. 1. Go to Basic Wireless Settings and edit the SSID we created in the basic configuration. To make it easier for customers to connect, change the Security Mode from WPA-PSK to None. Customers can connect to the EAPs without password and be redirected to the Portal Authentication where the correct password will be required. 2. Open the global configuration window and go to Portal. Click window will pop up. 3.
1 ) Specify a name for the portal. 2 ) Select an SSID for the portal. 3 ) Select the Authentication Type as Simple Password. Specify a simple password for the guests. 4 ) Select the Authentication Timeout. For example, 1 Hour is suitable for the customers at the restaurant. 5 ) Enable the Redirect to drive the costumers to the restaurant's homepage after successful login. We can put some promotion information on the page. 4. In the Login Page section, configure the login page. 5.
2. Click Add to add a new SSID. Configure the parameters. 1 ) Disable the SSID Broadcast to hide this SSID from the customers. 2 ) Specify the SSID Name, Security Mode and Wireless Password. Let the employees manually enter the SSID name and password, and choose the security mode you set to access the network. 3 ) Click Apply to save the configuration. 6.2.4 Configure Scheduler Follow the steps below to schedule the radio to operate only during the working time (from 8:00 to 22:00). 1.
2. Go to Scheduler Association tab. 1 ) Enable the function and select Associated with SSID. Click Apply. 2 ) In the Profile Name column of both SSIDs, select the profile we just created. 3 ) In the Action column of both SSIDs, select Radio On. 4 ) Click Apply in the Setting column of both SSIDs. 5 ) Select 5GHz and do the same configurations as above.
COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP-Link Technologies Co., Ltd. Other brands and product names are trademarks or registered trademarks of their respective holders. No part of the specifications may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from TP-Link Technologies Co., Ltd. Copyright © 2017 TP-Link Technologies Co., Ltd..
