User Guide For TP-Link Omada Access Points 1910012768 REV4.6.
CONTENTS About This User Guide........................................................................................................ 1 Overview.................................................................................................................................. 3 1 Quick Start........................................................................................................................ 4 1.1 Determine the Management Method..............................................................
2.8 Configure Rogue AP Detection............................................................................................................47 Detect Rogue APs and Move the Rogue APs to the Trusted AP List........................................ 48 Manage the Trusted AP List...................................................................................................................... 50 3 Monitor the Network............................................................................................
5.1 Configure the User Account.................................................................................................................76 5.2 Controller Settings...................................................................................................................................77 Enabling Cloud-Based Controller Management................................................................................ 77 Configuring Controller Inform URL...............................................
About This User Guide When using this guide, notice that features available in the EAP may vary by model and software version. Availability of the EAP may also vary by region or ISP. All images, steps, and descriptions in this guide are only examples and may not reflect your actual experience. Some models featured in this guide may be unavailable in your country or region. For local sales information, visit https://www.tp-link.com . The information in this document is subject to change without notice.
More Info Some models featured in this guide may be unavailable in your country or region. For local sales information, visit https://www.tp-link.com . For technical support, latest software, and management app, visit https://www.tp-link.com/support . The Quick Installation Guide can be found where you find this guide or inside the package of the EAP. The authentication information can be found where you find this guide. Specifications can be found on the product page at https://www.tp-link.com .
Overview Omada series products provide wireless coverage solutions for small-medium business and households. They can either work independently as standalone APs or be centrally managed by Omada Software Controller, Omada Hardware Controller (OC200/OC300), or Omada Cloud-Based Controller, providing a flexible, richly-functional but easily configured wireless network for smallmedium business and households.
1 Quick Start This chapter introduces how to build a wireless network using the EAPs and how to complete the basic settings. Follow the steps below: 1. Determine the Management Method 2. Build the Network Topology 3. Log In to the EAP 4.
1.1 Determine the Management Method Before building your network, choose a proper method to manage your EAP based on your actual network situation. The EAP can support two configuration options: Standalone Mode or Controller Mode. ■■Controller Mode If you want to configure and manage a large-scale network centrally, which consists of mass devices such as access points, switches, and gateways, Controller Mode is recommended.
1.2 Build the Network Topology To manage the EAPs in Standalone mode, refer to the following topology. Router (DHCP Server) LAN: 192.168.0.1 Switch PC IP: 192.168.0.100 EAP Internet EAP Clients • The router is the gateway of the network, and devices in the LAN surf the internet via the router. At the same time, the router acts as a DHCP server to assign dynamic IP addresses to the EAPs and clients. • The Layer 2 switch is connected to the LAN interface of the router.
1.3 Log In to the EAP The following sections introduce how to log in to the EAP via a wireless connection and a wired connection. 1.3.1 Log In via a Wireless Connection To access the management web page via a wireless connection, you can use either the domain name or the IP address of the EAP. We recommend you to log in using the domain name for a wireless connection. In this method, you needn’t know the IP address of the EAP, but you need to prepare a wireless client device, such as a wireless laptop.
3. Make sure that the wireless client has been assigned the IP address and has got the IP address of the DNS server and the gateway. 4. Launch a web browser on the client device and enter http://tplinkeap.net in the address bar to load the login page of the EAP. Use admin for both of the username and password to log in. Tips To facilitate access to the EAP via a wired device, you can set a static IP address for the EAP and remember it well or write it down.
1.3.2 Log In via a Wired Connection For a wired connection, you can only log in to the EAP via its IP address. In this method, you need to know the IP address of the EAP first. Follow the steps below to log in via the IP address of the EAP with a wired client. The method of log in via the IP address wirelessly is similar. 1. Get the IP address of the EAP. There are two methods. • Log in to the router which acts as the DHCP server.
2. Launch a web browser and enter 192.168.0.5 in the address bar to load the login page of the EAP. Use admin for both of the username and password to log in. Tips ••Some EAP models only works with certain software version of Discovery Utility. If your Discovery Utility can’t discover your EAP anyway, try a different software version. ••To facilitate access to the EAP via a wired device, you can set a static IP address for the EAP and remember it well or write it down.
1.4 Do the Basic Configurations After Logging in to EAP, follow the step-by-step instructions to complete the basic configurations. 1. In the pop-up window, configure a new username and a new password for your user account, then click Next. 2. For the dual-band EAP, select at least one radio band between 2.4GHz and 5GHz to configure the SSID and password. For the single-band EAP, configure the SSID and password on the 2.4GHz band. Click Save.
3. The following page will appear. Make sure that your device has connected to the new wireless network and tick the checkbox. Then click Finish. Tips If needed, you can also create more new SSIDs. For detailed instructions about how to create new SSIDs, refer to Configure SSIDs .
1.5 Configure and Manage the EAP After all the steps above are completed, the legal wireless clients can enjoy the internet via the EAP. Additionally, you can configure the advanced functions of the EAP according to your need, and manage it conveniently on the web page. On the top of the page, you can click support website. to log out and click to open the technical There are four tabs: Status, Wireless, Management and System. The following table introduces what you can configure under each tab.
2 Configure the Network This chapter introduces how to configure the network parameters and the advanced features of the EAP, including: ••Configure the Wireless Parameters ••Configure Portal Authentication ••Configure VLAN ••Configure MAC Filtering ••Configure Scheduler ••Configure Band Steering ••Configure QoS ••Configure Rogue AP Detection 14
2.1 Configure the Wireless Parameters To configure the wireless parameters, go to the Wireless > Wireless Settings page. For a dual-band EAP, there are two bands: 2.4GHz and 5GHz. The wireless parameters are separately set on each band. You can click wireless parameters on this band.
Before configuring the wireless parameters on each band, check the box to enable 2.4GHz or 5GHz Wireless Radio. Only when this option is enabled will the wireless radio on 2.4GHz or 5GHz band works. Demonstrated with 2.4GHz, the following sections introduce these contents: Configure SSIDs and Configure Wireless Advanced Settings . 2.1.1 Configure SSIDs SSID (Service Set Identifier) is used as an identifier for a wireless LAN, and is commonly called as the “network name“.
Follow the steps below to create an SSID on the EAP: 1. If your EAP is a dual-band device, click which the new SSID will be created. 2. Click to choose a frequency band on to add a new SSID on the chosen band. Tips You can also click to edit the specific SSID which already exists in the list. And you can click to delete the SSID in the list. 3. Configure the following required parameters for this SSID: SSID Specify a name for the wireless network.
protection for wireless networks. Since WPA-Personal and WPA-Enterprise are much safer than WEP, we recommend that you choose WPA-Personal or WPA-Enterprise if your clients also support them. Note WEP is not supported in 802.11n mode or 802.11ac mode. If WEP is applied in 802.11n, 802.11 ac or 802.11n/ac mixed mode, the clients may not be able to access the wireless network. If WEP is applied in 802.11b/g/n mode (2.4GHz) or 802.11a/n (5GHz), the EAP may work at a low transmission rate.
Key Value Enter the WEP keys. The length and valid characters are determined by the key format and key type. ••WPA-Enterprise WPA-Enterprise (Wi-Fi Protected Access-Enterprise) is a safer encryption method compared with WEP and WPA-Personal. It requires a RADIUS server to authenticate the clients via 802.1X and EAP (Extensible Authentication Protocol). WPA-Enterprise can generate different passwords for different clients, which ensures higher network security.
Encryption Select the Encryption type. Note that some encryption type is only available under certain circumstances. Auto: The default setting is Auto and the EAP will select TKIP or AES automatically based on the client device’s request. TKIP: Temporal Key Integrity Protocol. TKIP is not supported in 802.11n mode, 802.11ac mode or 802.11n/ac mixed mode. If TKIP is applied in 802.11n, 802.11 ac or 802.11n/ac mixed mode, the clients may not be able to access the wireless network.
••WPA-Personal WPA-Personal is based on a pre-shared key. It is characterized by high safety and simple settings, so it is mostly used by common households and small businesses. The following table introduces how to configure each item: Version Select the version of WPA-Personal according to your needs. If you select WPA/WPA2-PSK, the EAP automatically decides whether to use WPA-PSK or WPA2-PSK during the authentication process. Encryption Select the Encryption type.
2.1.2 Configure Wireless Advanced Settings Proper wireless parameters can improve the performance of your wireless network. This section introduces how to configure the advanced wireless parameters of the EAP, including Radio Setting , Load Balance , Airtime Fairness and More Settings. Radio Setting Radio settings directly control the behavior of the radio in the EAP and its interaction with the physical medium; that is, how and what type of signal the EAP emits. Select the frequency band (2.
Channel Width Select the channel width of the EAP. The available options differ among different EAPs. For some EAPs, available options include 20MHz, 40MHz and 20/40MHz. For other EAPs, available options include 20MHz, 40MHz, 80MHz and 20/40/80MHz. When the radio mode includes 802.11n, we recommend you set the channel bandwidth to 20/40 MHz or 20/40/80MHz to improve the transmission speed.
Tx Power (EIRP) Specify the transmit power value. If this value is set to be larger than the maximum transmit power that is allowed by the local regulation, the regulated maximum transmit power will be applied in the actual situation. Note: In most cases, it is unnecessary to use the maximum transmit power. Specifying a larger transmit power than needed may cause interference to the neighborhood. Also it consumes more power and reduces longevity of the device.
Compared with the relatively new client devices, some legacy client devices support slower wireless rate. If they communicate with the same EAP, the slower clients take more time to transmit and receive data compared with the faster clients. As a result, the overall wireless throughput of the network decreases. Therefore we recommend you check the box to enable this function under multi- rate wireless networks.
DTIM Period The DTIM (Delivery Traffic Indication Message) is contained in some Beacon frames. It indicates whether the EAP has buffered data for client devices. The DTIM Period indicates how often the clients served by this EAP should check for buffered data still on the EAP awaiting pickup. You can specify the value between 1-255 Beacon Intervals. The default value is 1, indicating that clients check for buffered data at every beacon.
To configure portal authentication, go to the Wireless > Portal page. Configure Portal Three portal authentication types are available: No Authentication , Local Password and External RADIUS Server . The following sections introduce how to configure each authentication type.
••No Authentication With this authentication type configured, clients can pass the authentication and access the network without providing any login information. They only need to accept the term of use on the authentication page. Follow the steps below to configure No Authentication as the portal authentication type: 1. Select the SSID on which the portal will take effect. 2. Select No Authentication as the authentication type. 3.
Redirect With this function configured, the newly authenticated client will be redirected to the specific URL. Redirect URL With Redirect enabled, you also need to enter the URL in this field. The newly authenticated client will be redirected to this URL. Portal Customization Configure the authentication page. Local Web Portal is the only available option in this authentication type. Enter the title and term of use in the two boxes.
Follow the steps below to configure Local Password as the portal authentication type: 1. Select the SSID on which the portal will take effect. 2. Select Local Password as the authentication type. 3. Configure the relevant parameters as the following table shows: Password Specify a password for authentication. Authentication Timeout Specify the value of authentication timeout.
••External RADIUS Server If you have a RADIUS server on the network to authenticate the clients, you can select External Radius Server. Clients need to provide the correct login information to pass the authentication.
Follow the steps below to configure External Radius Server as the portal authentication type: 1. Select the SSID on which the portal will take effect. 2. Build a RADIUS server on the network and make sure that it is reachable by the EAP. 3. Go to the Portal configuration page on the EAP. Select External Radius Server as the authentication type. 3. Configure the relevant parameters as the following table shows: RADIUS Server IP Enter the IP address of RADIUS server.
Redirect With this function configured, the newly authenticated client will be redirected to the specific URL. Redirect URL With Redirect enabled, you also need to enter the URL in this field. The newly authenticated client will be redirected to this URL. Portal Customization Configure the authentication page. There are two options: Local Web Portal and External Web Portal. ••Local Web Portal Enter the title and term of use in the two boxes.
the clients can visit the login page provided by the web portal server and then pass the subsequent authentication process. Follow the steps below to add free authentication policy. 1. In the Free Authentication Policy section, click to load the following page. 2. Configure the following parameters. When all the configured conditions are met, the client can access the network without authentication. Policy Name Specify a name for the policy.
Destination Port Specify the port number of the service. When using this service, the clients can access the specific resources without authentication. Leaving the field empty means that clients can access the specific resources no matter what service they are using. Status Check the box to enable the policy. Tips When External Web Portal is configured in the portal configuration, you should set the IP address and subnet mask of the external web server as the Destination IP Range.
3. Specify the VLAN ID for the wireless network in the VLAN ID column. Every VLAN ID represents a different VLAN. It supports maximum 8 VLANs per frequency band. The VLAN ID range is 0 to 4094. 0 is used to disable VLAN tagging. 4. Click Save. 2.4 Configure MAC Filtering MAC Filtering is used to allow or block the clients with specific MAC addresses to access the network. With this feature you can effectively control clients’ access to the wireless network according to your needs.
Follow the steps below to configure MAC Filtering on this page: 1. In the Settings section, check the box to enable MAC Filtering, and click Save. 2. In the Station MAC Group section, click appear. and the following page will 1 ) Click and specify a name for the MAC group to be created. Click OK. You can create up to eight MAC groups. 2 ) Select a MAC group in the group list (the color of the selected one will change to blue). Click to add group members to the MAC group.
the MAC address of the host and click OK. In the same way, you can add more MAC addresses to the selected MAC group. 3. In the MAC Filtering Association section, configure the filtering rule. For each SSID, you can select a MAC group in the MAC Group Name column and select the filtering rule (Allow/Deny) in the Action column. Click Save. For example, the following configuration means that the hosts in Group 2 are denied to access the SSID SSID-1 on the 2.
To configure Scheduler, go to the Wireless > Scheduler page. Follow the steps below to configure Scheduler on this page: 1. In the Settings section, check the box to enable Scheduler and select the Association Mode. There are two modes: Associated with SSID (the scheduler profile will be applied to the specific SSID) and Associated with AP (the profile will be applied to all SSIDs on the EAP). Then click Save.
2. In the Scheduler Profile Configuration section, click page will appear. and the following 1 ) Click and specify a name for the profile to be created. Click OK. You can create up to eight profiles. 2 ) Select a profile in the list (the color of the selected one will change to blue). Click to add time range items to the profile. Specify the Day, Start Time and End Time of the time range, and click OK. Tips You can add up to eight time range items for one profile.
3. In the Scheduler Association section, configure the scheduler rule. There are two association modes: Association with SSID and Association with AP . The following sections introduce how to configure each mode. ■■Association with SSID If you select Association with SSID in step 1, the Scheduler Association table will display all the SSIDs on the EAP. For each SSID, you can select a profile in the Profile Name column and select the scheduler rule (Radio On/Radio Off) in the Action column.
diminished. Band Steering can steer dual-band clients to the 5GHz frequency band which supports higher transmission rates and more client devices, and thus to greatly improve the network quality. Note Only the dual-band EAP products support Band Steering. To configure Band Steering, go to the Wireless > Band Steering page. Follow the steps below to configure Band Steering on this page: 1. Check the box to enable Band Steering function. 2.
Connection Threshold/Difference Threshold Connection Threshold defines the maximum number of clients connected to the 5GHz band. The value of Connection Threshold is from 2 to 40, and the default is 20. Difference Threshold defines the maximum difference between the number of clients on the 5GHz band and 2.4GHz band. The value of Difference Threshold is from 1 to 8, and the default is 4.
To configure QoS, go to the Wireless > QoS page. Follow the steps below to configure QoS on this page: 1. Click to choose a frequency band to be configured. 2. Check the box to enable Wi-Fi Multimedia (WMM). With WMM enabled, the EAP uses the QoS function to guarantee the high priority of the transmission of audio and video packets.
Note If 802.11n only mode is selected in 2.4GHz (or 802.11n only, 802.11ac only, or 802.11 n/ac mixed mode selected in 5GHz), the WMM should be enabled. If WMM is disabled, the 802.11n only mode cannot be selected in 2.4GHz (or 802.11n only, 802.11ac only, or 802.11 n/ac mixed mode in 5GHz). 3. In the AP EDCA Parameters section, configure the AP EDCA ((Enhanced Distributed Channel Access) parameters. AP EDCA parameters affect traffic flowing from the EAP to the client station.
Maximum Contention Window The upper limit (in milliseconds) for the doubling of the random backoff value. This doubling continues until either the data frame is sent or the Maximum Contention Window size is reached. This value must be higher than the value of Minimum Contention Window. Maximum Burst Maximum Burst specifies the maximum burst length allowed for packet bursts on the wireless network. A packet burst is a collection of multiple frames transmitted without header information.
Minimum Contention Window A list to the algorithm that determines the initial random backoff wait time (window) for retry of a transmission. Maximum Contention Window The upper limit (in milliseconds) for the doubling of the random backoff value. This doubling continues until either the data frame is sent or the Maximum Contention Window size is reached. This value cannot be higher than the value of Maximum Contention Window. This value must be higher than the value of Minimum Contention Window.
Note The Rogue AP Detection feature is only used for collecting information of the nearby wireless network and does not impact the detected APs, no matter what operations you have executed in this feature. To configure Rogue AP Detection, go to the Wireless > Rogue AP Detection page. Detect Rogue APs and Move the Rogue APs to the Trusted AP List Follow the steps below to detect the nearby APs and move the trusted ones to the Trusted AP list. 1.
2. In the Detected Rogue AP List section, click . 3. Wait for a few seconds without any operation. After detection is finished, the detected APs will be displayed in the list. The following table introduces the displayed information of the APs: MAC Displays the MAC address of the AP. SSID Displays the SSID of the AP. Band Displays the frequency band the AP is working on. Channel Displays the channel the AP is using. Security Displays whether the security mode is enabled on the AP.
5. View the trusted APs in the Trusted AP List section. To move the specific AP back to the Rogue AP list, you can click in the Action column. Manage the Trusted AP List You can download the trusted AP list from your local host to the EAP or backup the current Trusted AP list to your local host. ••Download the Trusted AP List From the Host You can import a trusted AP list which records the MAC addresses of the trusted APs. The AP whose MAC address is in the list will not be detected as a rogue AP.
5. Click Save to import the trusted AP list. ••Backup the Trusted AP List to the Host You can backup the current trusted AP list and save the backup file to the local host. Follow the steps below to backup the current trusted AP list: 1. On this page, check the box to choose Backup (AP to PC). 2. Click Save and the current trusted AP list will be downloaded to your local host as a cfg file.
3 Monitor the Network This chapter introduces how to monitor the running status and statistics of the wireless network, including: ••Monitor the EAP ••Monitor the Wireless Parameters ••Monitor the Clients 52
3.1 Monitor the EAP To monitor the EAP information, go to the Status > Device page. The following device information is displayed: Device Name Displays the name of the EAP. The name consists of the product model followed with the MAC address of the EAP by default. Device Model Displays the product model of the EAP. Firmware Version Displays the current firmware version the EAP. To update the firmware, you can refer to Update the Firmware . Hardware Version Displays the hardware version the EAP.
CPU Utilization Displays the CPU occupancy. If this value is too high, the EAP may work abnormally. Memory Utilization Displays the memory occupancy. 3.2 Monitor the Wireless Parameters You can view the wireless parameters of the EAP, including SSID lists, radio settings, radio traffic and LAN traffic. Tips To change the wireless parameters, you can refer to Configure the Wireless Parameters . To monitor the wireless parameters, go to the Status > Wireless page.
Monitor the SSIDs You can monitor the SSID information of the EAP. The following table introduces the displayed information of the SSID: SSID Name Displays the SSID name. Clients Displays the number of clients currently connected to the SSID. Band Displays the frequency band the SSID is currently using. Security Displays the security mode of the SSID. Portal Displays whether portal function is enabled on the SSID. VLAN ID Displays the VLAN ID of the SSID.
Monitor the Radio Settings You can monitor the radio settings of the EAP. For a dual-band EAP, there are two bands: 2.4GHz and 5GHz. You can click to select a band to view. The following figure posted in the introduction takes 2.4GHz as an example. The following table introduces the displayed information of the EAP. 2.4GHz/5GHz Wireless Radio Displays whether wireless function is enabled on the radio band. Channel Frequency Displays the channel and frequency which are currently used by the EAP.
The following traffic information of the radio is displayed: Rx Packets Displays the total number of the received packets on the 2.4GHz/5GHz band since the EAP starts up. Tx Packets Displays the total number of the sent packets on the 2.4GHz/5GHz band since the EAP starts up. Rx Bytes Displays the total received traffic on the 2.4GHz/5GHz band since the EAP starts up. Tx Bytes Displays the total sent traffic on the 2.4GHz/5GHz band since the EAP starts up.
Rx Dropped Packets Displays the total number of the dropped packets which are received by the EAP since it starts up. Tx Dropped Packets Displays the total number of the dropped packets which are sent by the EAP since it starts up. Rx Errors Displays the total number of the received error packets since the EAP starts up. Tx Errors Displays the total number of the sent error packets since the EAP starts up. 3.3 Monitor the Clients You can monitor the information of the clients connected to the EAP.
View Client Information There are two types of clients: users and portal authenticated guests. Users are the clients that connect to the SSID with portal authentication disabled. Guests are the clients that connect to the SSID with portal authentication enabled. Click the to select the client types to view the information of the EAP. The following figure posted in the introduction takes user as an example. The following client information is displayed: Hostname Displays the hostname of the user.
You can execute the corresponding operation to the EAP by clicking an icon in the Action column. Click the icon to configure the rate limit of the client to balance bandwidth usage. Enter the download limit and upload limit and click OK. You can limit the download and upload rate for each clients by which connect to specific SSIDs when configuring SSIDs, refer to Configure SSIDs to get more details.
4 Manage the EAP The EAP provides powerful functions of device management and maintenance.
4.1 Manage the IP Address of the EAP The IP address of the EAP can be a dynamic IP address assigned by the DHCP server or a static IP address manually specified by yourself. By default, the EAP gets a dynamic IP address from the DHCP server. You can also specify a static IP address according to your needs. Tips For detailed introduction about how to find the dynamic IP address of the EAP, refer to Log In via a Wired Connection .
••Dynamic If you choose Dynamic as the IP address mode, make sure that there is a reachable DHCP server on your network and the DHCP sever is properly configured to assign IP address and the other network parameters to the EAP. For network stability, you can also configure the fallback IP parameters for the EAP: Fallback IP With the fallback IP configured, if the EAP fails to get an IP address from a DHCP server within 10 seconds, the fallback IP will work as the IP address of the EAP.
Configure the IP address and network parameters as the following table shows: IP Address Specify a static IP address for the EAP. IP Mask Specify the network mask. Gateway Specify the network gateway. Primary DNS Specify the primary DNS server. Secondary DNS Specify the secondary DNS server. (Optional) 3. Click Save. 4.2 Manage System Logs System logs record information about hardware, software as well as system issues and monitors system events.
View System Logs In the Log section, you can click to refresh the logs and view them in the table. Configure the Way of Receiving Logs In the Log Settings section, you can configure the ways of receiving system logs. Follow the steps below to configure this feature: 1. Check the corresponding box to enable one or more ways of receiving system logs, and configure the related parameters. Two ways are available: Auto Mail and Server .
The following table introduces how to configure these parameters: From Enter the sender’s E-mail address. To Enter the receiver’s E-mail address. SMTP Server Enter the IP address of the sender’s SMTP server. Note: At present, the domain name of SMTP server is not supported in this field. Enable Authentication If the sender’s mailbox is configured with You can check the box to enable mail server authentication. Enter the sender’s username and password.
4.3 Configure Web Server With the web server, you can log in to the management web page of the EAP. You can configure the web server parameters of the EAP according to your needs. To configure Web Server, go to the Management > Web Server page. Follow the steps below to configure Web Server: 1. Refer to the following table to configure the parameters: Secure Server Port Designate a secure server port for web server in HTTPS mode. By default the port is 443.
4.4 Configure Management Access By default, all hosts in the LAN can log in to the management web page of the EAP with the correct username and password. To control the hosts’ access to the web page of the EAP, you can specify the MAC addresses and management VLAN of the hosts that are allowed to access the web page. To configure Management Access, go to the Management > Management Access page.
Follow the steps below to configure Management Access on this page: 1. Check the box to enable MAC Authentication. 2. Specify one or more MAC addresses in the MAC1/MAC2/MAC3/MAC4 fields. Up to four MAC addresses can be added. 3. Click Save. Tips ••You can click to quickly add the MAC address of your current logged-in host, . ••Verify the MAC addresses carefully. Once the settings are saved, only the hosts in the MAC address list can access the web page of the EAP.
4.5 Configure LED You can turn on or off the LED light of the EAP and flash the LED to locate your device. To configure LED, go to the Management > LED Control page. Check the box to turn on or turn off the LED light of the EAP, and click Save. To flash the LED, click Locate. Then the LED will flash for 10 minutes or until the locate button is clicked again. 4.6 Configure Wi-Fi Control (Only for Certain Devices) Note Wi-Fi Control is only available on certain devices.
Certain devices have an LED/Wi-Fi button on the front panel. With Wi-Fi Control enabled, you can press the button to turn on or off both of the Wi-Fi and LED at the same time. To configure Wi-Fi Control, go to the Management > Wi-Fi Control page. Check the box to enable Wi-Fi Control and click Save. Note You can enable Wi-Fi Control only when the option LED ON/OFF is enabled. 4.7 Configure PoE Out (Only for Certain Devices) Note PoE Out is only available on certain devices.
Check the box to enable PoE Out and click Save. 4.8 Configure SSH If you want to remotely log in to the EAP via SSH, you can deploy an SSH server on your network and configure the SSH feature on the EAP. To configure SSH, go to the Management > SSH page. Follow the steps below to configure SSH on this page: 1. Refer to the following table to configure the parameters: Server Port Designate a server port for SSH. By default the port is 22.
4.9 Configure SNMP The EAP can be configured as an SNMP agent and work together with the SNMP manager. Once the EAP has become an SNMP agent, it is able to receive and process request messages from the SNMP manager. At present, the EAP supports SNMP v1 and v2c. To configure the EAP as an SNMP agent, go to the Management > SNMP page. Follow the steps below to complete the configuration on this page: 1. Check the box to enable SNMP Agent. 2.
Set Community Set Community has the read and write right of the device’s SNMP information. Enter the community name that allows read/write access to the device’s SNMP information. The community name can be considered a group password. The default setting is private. Set Source Defines the IP address (for example, 10.10.10.1) for management systems that can serve as Set Community to read and write the SNMP information of this device. The default is 0.0.0.
5 Configure the System This chapter introduces how to configure the system of the EAP, including: ••Configure the User Account ••Controller Settings ••Configure the System Time ••Reboot and Reset the EAP ••Backup and Restore the Configuration ••Update the Firmware 75
5.1 Configure the User Account Every EAP has a user account, which is used to log in to the management page of the EAP. When you start the EAP at the first time, the username and password of the user account are both admin. After the first login, the system will require you to set a new username and a new password for the user account. And then you can use the new user account to log in to the EAP. Also, you can change your user account as needed. Tips Please remember your user account well.
5.2 Controller Settings To make your controller adopt your EAP, make sure the EAP can be discovered by the controller. Controller Settings enable your EAP to be discovered in either of the following scenarios. • If you are using Omada Cloud-Based Controller, Enable Cloud-Based Controller Management . • If your EAP and controller are located in the same network, LAN and VLAN, the controller can discover and adopt the EAP without any controller settings.
EAP to your Omada Cloud-Based Controller, you can check the connection status on this page.
Configure Controller Inform URL Go to the System > Controller Settings page. In the Controller Inform URL section, inform the EAP of the controller’s URL/IP address, and click Save. Then the EAP make contact with the controller so that the controller can discover the EAP. 5.3 Configure the System Time System time is the standard time for Scheduler and other time-based functions. The EAP supports the basic system time settings and the Daylight Saving Time (DST) feature.
To configure the system time, go to the System > Time Settings page. The following two sections introduce how to configure the basic system time settings and the Daylight Saving Time feature. Configure the System Time In the Time Settings section, you can configure the system time. There are three methods to set the system time: Set the System Time Manually , Acquire the System Time From an NTP Server , and Synchronize the System Time with PC’s Clock .
••Set the System Time Manually To set the system time manually, follow the steps below: 1. Configure the following three options on the page: Time Zone, Date and Time. Time Zone Select your time zone from the drop-down list. Here GMT means Greenwich Mean Time. Date Specify the current date in the format MM/DD/YYYY. MM means month, DD means day and YYYY means year. For example: 06/01/2017. Time Specify the current time in the format HH/MM/SS. HH means hour, MM means minute and SS means second.
4. Click Save. ••Synchronize the System Time with PC’s Clock To synchronize the system time with the clock of your currently logged-in host, follow the steps below: 1. Click the button in the Date and Time fields. and the synchronized system time will be displayed 2. Click Save. Note The system time synchronized with PC’s clock will be lost after the EAP is rebooted.
There are four regions provided: USA, European, Austrilia and New Zealand. The following table introduces the predefined daylight saving time of each region. USA From 2: 00 a.m. on the Second Sunday in March to 2:00 a.m. on the First Sunday in November. European From 1: 00 a.m. on the Last Sunday in March to 1:00 a.m. on the Last Sunday in October. Australia From 2:00 a.m. on the First Sunday in October to 3:00 a.m. on the First Sunday in April. New Zealand From 2: 00 a.m.
■■Date Mode If you select Date Mode, manually specify an absolute time range for the daylight saving time of the EAP. This configuration will be used only once. The following table introduces how to configure the absolute time range. Time Offset Specify the time to set the clock forward by. Start Specify the start time of daylight saving time. The interval between the start time and end time should be more than 1 day and less than 1 year (365 days). End Specify the end time of daylight saving time.
• To reset the EAP, click the button , and the EAP will be reset to the factory defaults automatically. Please wait without any operation. Note After reset, all the current configuration of the EAP will be lost. We recommend that you check whether you have any configuration that needs to be backed up before resetting the EAP. 5.5 Backup and Restore the Configuration You can save the current configuration of the EAP as a backup file and save the file to your host.
To update the firmware, go to the System > Firmware Update page. Follow the steps below to update the firmware of your EAP: 1. Go to our website https://www.tp-link.com and search your EAP model. Download the proper firmware file on the support page of the EAP. 2. Click the button , locate and choose the correct firmware file from your host. 3. Click the button to update the firmware of the EAP. After updated, the EAP will be rebooted automatically. Note The update process takes several minutes.
6 Application Example This chapter provides an application example about how to establish and manage a EAP wireless network: A restaurant wants to provide the wireless internet access for the employees and guests. The restaurant now has a router, a switch, a dual-band EAP and a computer. Follow the steps below to establish the wireless network: 1. Determine the Network Requirements 2. Build the Network Topology 3. Log in to the EAP 4. Configure the EAP 5.
6.1 Determine the Network Requirements Before starting to build the network, we need to first analyze and determine the network requirements. In this restaurant example, the network requirements are as follows: • On both 2.4GHz and 5GHz bands, there are two SSIDs needed: one for the restaurant employees and one for the guests. • In order to advertise the restaurant, the Portal feature needs to be configured on the SSIDs for the guests.
6.3 Log in to the EAP After building the network topology, follow the steps below to log in to the web page of the EAP: 1. On the management host, launch the web browser and enter “192.168.88.1” in the address bar. Then log in to the router and find the IP address of the EAP. As the following figure shows, the IP address of the EAP is 192.168.88.101. 2. Enter “192.168.88.101” in the address bar to load the login page of the EAP.
6.4 Configure the EAP To achieve the network requirements in this application example, we need to Configure SSIDs , Configure Portal Authentication and Configure Scheduler . Configure SSIDs 1. After Logging in to EAP, follow the step-by-step instructions to complete the basic configurations of creating SSIDs. Configure the SSID as “employee_2.4GHz” and “employee_5GHz”, specify the Password as “restaurant123abc“. Click Save. 2. Go to the Wireless > Wireless Settings page. Create SSIDs for guests on 2.
3. The following page will appear. Configure this SSID as “guest_2.4GHz“, keep the Security Mode as “None” and check the box to enable the Portal feature for this SSID. Click OK. 4. Click to enter the configuration page for the 5GHz band. Similarly to the configurations for the 2.4GHz band, configure another SSID for the guests on the 5GHz band. Configure Portal Authentication Follow the steps below to configure portal authentication: 1. Go to the Wireless > Portal page.
2. Configure the portal feature as the following figure shows. 1 ) Select the SSIDs for the guests on which the portal will take effect. 2 ) Select the Authentication Type as “Local Password” and specify the Password as “restaurant123”. 3 ) Configure Authentication Timeout. Here we customize the timeout as 2 hours. It means that guests will be logged out after they have been authenticated for 2 hours.
5 ) Configure the authentication page. Specify the title and the term of use. To access the internet, guests need to enter the correct password in the Password field, accept the Term of Use, and click the Login button. 3. Click Save. Configure Scheduler Follow the steps below to schedule the radio to operate only during the working time (9:00 am to 22:00 pm). 1. Go to the Wireless > Scheduler page. 2.
2 ) Choose the newly added profile “worktime”, and click . Then the item configuraiton page will appear. Specify the time range as everyday 9:00 to 22:00. Click OK. 4. In the Scheduler Association section, select “worktime“ in the Profile Name column and select “Radio On” in the Action column. Click Save. 6.
• To test the SSIDs for the guests, follow the steps below: 1 ) Enable the Wi-Fi feature of the client device. 2 ) Choose the SSID “guest_2.4GHz“ or “guest_5GHz“ among the detected SSIDs. 3 ) The default web browser on the device will pop up and the authentication page will appear. Enter the password “restaurant123”, check the box to accept the term of use, and click the LOGIN button. Tips Generally, the web browser pops up automatically.
4 ) If the network is working normally, we will be redirected to the website of the restaurant: http://www.restaurant1.com.
Appendix: Omada App Omada app is a mobile application designed for Omada series EAP products. It allows you to conveniently manage and monitor your network.
1 Install Omada App on the Mobile Device Omada app runs on iOS and Android devices, such as smart phones and tablets. Launch the Apple App Store (iOS) or Google Play store (Android) and search “TP-Link Omada” or simply scan the QR code to download and install the app.
1. Connect your mobile device to 3. Tap on the EAP appearing on the (format: TP-Link 2.4GHz/5GHz_ password for your login account of the EAP by using the default SSID XXXXXX) printed on the label. page. Set a new username and the EAP. 2. L a u n c h t h e O m a d a a p p , t a p Standalone APs and wait for the EAP to be discovered. 4. Edit the SSID and password to keep your wireless network secure. Tap Next.
5. You can view the name of the EAP and other information including wireless parameters and clients. And you can tap to change the settings of radio, SSID and device account. Tips ••Omada app is designed to help you quickly configure some basic settings. Fo r a d va n c e d f u n c t i o n s , yo u c a n configure them on the web page of the EAP. ••In standalone mode, only one user is allowed to log in to the management page of the EAP at the same time.
COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP-Link Technologies Co., Ltd. Other brands and product names are trademarks or registered trademarks of their respective holders. No part of the specifications may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from TP-Link Technologies Co., Ltd. Copyright © 2020 TP-Link Technologies Co., Ltd..
