Operating System for Ubiquiti® airMAX® ac Series Products Release Version: 7.
airOS®7 User Guide Table of Contents Table of Contents Chapter 1: Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Supported Products. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 airOS v7.1 Network Modes. . . . . . .
airOS®7 User Guide Table of Contents Chapter 5: Services. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 Ping Watchdog. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 SNMP Agent. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30 Telnet Server. . . . . . . . . . . . . . . . . . . . . .
airOS®7 User Guide Chapter 1: Overview Introduction Welcome to airOS®7 – the latest evolution of the airOS Configuration Interface by Ubiquiti Networks.
airOS®7 User Guide System Requirements • Microsoft Windows 7, Windows 8; Linux; or Mac OS X • Web Browser: Mozilla Firefox, Apple Safari, Google Chrome, or Microsoft Internet Explorer 11 (or above) Note: The minimum supported version is Microsoft Internet Explorer 9. For best results, we recommend using version 11 or above.
airOS®7 User Guide Chapter 1: Overview The lower half of the navigation bar contains links to additional tools and information: • “Tools and Information” on page 36 displays a list of network administration and monitoring tools. • “Info” on page 41 displays device information. • “Log” on page 41 displays system log messages.
airOS®7 User Guide Chapter 2: Main The Main page displays a summary of the link status information, current values of the basic configuration settings (depending on the operating mode), network settings and information, and traffic statistics. Device The Device section displays basic identifying and status information on the device. Chapter 2: Main Version Displays the airOS firmware version. Network Mode Displays the network operating mode: Bridge or Router. The default setting is Bridge.
airOS®7 User Guide Interfaces Click Interfaces to display the name, MAC address, MTU, IP address, and traffic information for the device’s interfaces. Chapter 2: Main TX/RX Compression Ratio Displays the compression ratio of transmitted and received data. Refresh To update the information, click Refresh. ARP Table Click ARP Table to list all entries in the Address Resolution Protocol (ARP) table currently recorded on the device. Interface Displays the name of the interface.
airOS®7 User Guide Chapter 2: Main Routes Refresh To update the information, click Refresh. Click Routes to list all the entries in the system routing table. Configure firewall rules on the Network page. See “Firewall” on page 25 (Bridge mode) or “Firewall” on page 25 (Router mode) for additional details. Port Forward (Available if Port Forwarding is enabled in Router mode.) Click Port Forward to list all port forwarding rules.
airOS®7 User Guide Link The Link section displays link information and statistics for the device as well as all access points (APs) or stations to which it is connected. Chapter 2: Main Frequency Displays the actual operating frequency center and operating frequency range (in MHz) which depends on the channel width being used. If “DFS” is displayed next to the frequency, this indicates that the selected channel has DFS (Dynamic Frequency Selection) capabilities.
airOS®7 User Guide Chapter 2: Main Device Model Displays the model of the AP or station. Reconnect To establish the wireless link to the AP or station again, click Reconnect. Device Name Displays the host name of the AP or station. Access Point PTMP Mode Version Displays the firmware version of airOS on the AP or station.
airOS®7 User Guide airTime TX/RX, % Displays the transmit and receive airtime percentage values. The airtime is the percentage of the time the radio resource is utilized in the specified direction (TX/RX). Desired Priority Displays the requested airMAX station priority level that is configured on the Wireless page (for details, see “airMAX Station Priority” on page 15). Priority (Available in Station PTMP mode only.) Displays the current operating priority of the station.
airOS®7 User Guide Chapter 3: Wireless The Wireless page contains everything needed to set up the wireless part of the link, including the wireless mode, SSID, channel and frequency, output power, data rates, and wireless security. Basic Wireless Settings Configure the basic wireless settings. Ubiquiti Networks, Inc. Chapter 3: Wireless Wireless Mode Specify the Wireless Mode of the device. The mode depends on the product model and network topology requirements. airOS v7.
airOS®7 User Guide • Access Point PTMP (Not available for PowerBeam ac and Nanobeam ac models due to their narrowbeamwidth antennas.) If you have a single device to act as an AP in a Point-to-MultiPoint (PtMP) link, configure it as Access Point PTMP mode. The device functions as an AP that connects multiple client devices (client devices must be in Station PTMP mode).
airOS®7 User Guide • Search Enter the keyword to search for the desired AP. • Lock to AP Select the AP from the list. Click Lock to AP to allow the station to always maintain a connection to an AP with a specific MAC address. • Select Select the AP from the list and click Select for association. • Scan Click Scan to refresh the list of available wireless networks. Selected SSIDs must be visible, have compatible channel bandwidth and security settings, and must be compatible with airMAX AC technology.
airOS®7 User Guide Chapter 3: Wireless Frequency, MHz (Available in Access Point PTP or Access Point PTMP mode only.) The default, Auto, allows the device to automatically select the frequency. You can specify a frequency from the drop-down list. If two or more stations are located at considerably different distances from the AP they are associated with, the distance to the farthest station should be set on the AP side.
airOS®7 User Guide WPA Authentication Specify one of the following WPA key selection methods: • PSK Pre-shared Key method (selected by default). • EAP EAP (Extensible Authentication Protocol) IEEE 802.1x authentication method. This method is commonly used in enterprise networks. PSK Chapter 3: Wireless In the second field, enter the UDP port of the RADIUS accounting server. The most commonly used port is 1813, but this may vary depending on the RADIUS server you are using.
airOS®7 User Guide Chapter 3: Wireless Note: The “-” character is outside of the field and should not be used for the signal strength value specification. The following tables list the default threshold values for devices with two, three, four, or six LEDs.
airOS®7 User Guide Chapter 4: Network Chapter 4: Network The following summarizes the differences between Bridge and Router modes: The Network page allows you to configure bridge or routing functionality and IP settings. Bridge mode: Network Role airOS v7.1 supports Bridge and Router modes. Network Mode Select the Network Mode of the device (the mode depends on network topology requirements). Bridge mode is adequate for very small networks.
airOS®7 User Guide Chapter 4: Network • In Advanced view, any interface can be selected as the WAN or the LAN, but typical functionality is as follows: Advanced Displays the advanced configuration settings, in addition to the basic configuration settings: • Station The WLAN functions as the WAN, and the Ethernet port functions as the LAN. • “Management Network Settings” on page 17) (Router mode only) • Access Point The Ethernet port functions as the WAN, and the WLAN functions as the LAN.
airOS®7 User Guide Chapter 4: Network Management VLAN (Available in Simple view.) Select this option to automatically create a management Virtual Local Area Network (VLAN). If this option is enabled, the device will not be accessible from other VLANs, including tagged VLANs. • VLAN ID Enter a unique VLAN ID from 2 to 4094. -- IP Address Enter the IP address of the device. This IP will be used for device management purposes. -- Netmask Enter the netmask of the device.
airOS®7 User Guide The device can use one of the following: • “DHCP” on page 19 • “Static” on page 20 • “PPPoE” on page 21 DHCP The external DHCP server assigns a dynamic IP address, gateway IP address, and DNS address to the device. Chapter 4: Network • DMZ Management Ports The airOS device responds to requests from the external network as if it were the host device that is specified with the DMZ IP address. DMZ Management Ports is disabled by default; the device is accessible from the WAN port.
airOS®7 User Guide Static Assign static IP settings to the device. Note: IP settings should be consistent with the address space of the device’s network segment. Chapter 4: Network • NAT Protocol To disable NAT traversal for the SIP, PPTP, FTP, or RSTP protocols, uncheck the respective box(es). Block management access To block device management from the WAN interface, check this box. This feature makes Router mode more secure if the device has a public IP address.
airOS®7 User Guide PPPoE Point-to-Point Protocol over Ethernet (PPPoE) is a virtual private and secure connection between two systems that enables encapsulated data transport. Subscribers sometimes use PPPoE to connect to Internet Service Providers (ISPs), typically DSL providers. Select PPPoE to configure a PPPoE tunnel. You can configure only the WAN interface as a PPPoE client because all the traffic will be sent via this tunnel.
airOS®7 User Guide Auto IP Aliasing If enabled, automatically generates an IP address for the corresponding WLAN/LAN interface. The generated IP address is a unique Class B IP address from the 169.254.X.Y range (netmask 255.255.0.0), which is intended for use within the same network segment only. The Auto IP always starts with 169.254.X.Y, with X and Y as the last two octets from the MAC address of the device. For example, if the MAC is 00:15:6D:A3:04:FB, then the generated unique Auto IP will be 169.254.4.
airOS®7 User Guide -- DHCP Server IP Enter the IP address of the DHCP server that should get the DHCP messages. -- Agent-ID Enter the identifier of the DHCP relay agent. UPnP Enables Universal Plug-and-Play (UPnP) network protocol for gaming, video, chat, conferencing, and other applications. Add LAN Select an interface, and then click Add. Interfaces (Available in Advanced view.) You can configure a different MTU for any interface. If it is an Ethernet interface, you can also configure the speed.
airOS®7 User Guide • Comment You can enter a brief description of the purpose for the IP alias. Click OK to save changes, or click Cancel to close the window without saving changes. VLAN Network (Available in Advanced view.) You can create multiple Virtual Local Area Networks (VLANs). Click the VLAN Network section to display its contents. Chapter 4: Network Bridge Network (Available in Advanced view.) You can create one or more bridge networks if you need complete Layer 2 transparency.
airOS®7 User Guide • STP Select this option to enable the STP feature. Multiple interconnected bridges create larger networks. Spanning Tree Protocol (STP) eliminates loops from the topology while finding the shortest path within a network. If enabled, the device bridge communicates with other network devices by sending and receiving Bridge Protocol Data Units (BPDU).
airOS®7 User Guide • Source Port Enter the source port of the packet (specified within the packet header). Usually it is the port of the host system application that sends the packets. -- Invert Select this option to invert the Source Port. Select this option to invert the Source Port filtering criterion. For example, if you enable Invert for the specified Source Port 2500, then the filtering criteria will be applied to all the packets sent from any Source Port except 2500.
airOS®7 User Guide Chapter 4: Network Interface Displays the interface to which the port forwarding rule will be applied. • Private IP Enter the IP address of the local host that needs to be accessible from the external network. Private IP Displays the IP address of the local host that needs to be accessible from the external network. • Private Port Enter the TCP or UDP port of the application running on the local host. The specified port will be accessible from the external network.
airOS®7 User Guide Traffic Shaping (Available in Advanced view.) Traffic Shaping controls bandwidth from the perspective of the client. Bursting allows fast downloads when a user downloads small files (for example, viewing different pages of a website), but prevents a user from using excessive bandwidth when downloading large files (for example, streaming a movie). As Layer 3 QoS, you can limit the traffic at the device at the interface level, based on a rate limit you define.
airOS®7 User Guide Chapter 5: Services Chapter 5: Services response replies. If the defined number of replies is not received, the tool reboots the device. The Services page configures system management services: Ping Watchdog, SNMP, servers (web, SSH, Telnet), NTP, DDNS, system log, and device discovery. Ping Watchdog Ping Watchdog sets the device to continuously ping a user-defined IP address (it can be the Internet gateway, for example).
airOS®7 User Guide Ping Watchdog Select this option to enable use of Ping Watchdog. IP Address To Ping Enter the IP address of the target host to be monitored by Ping Watchdog. Chapter 5: Services community string; authorized management stations have read access to all the objects in the MIB except the community strings, but do not have write access. The device supports SNMP v1. The default is public.
airOS®7 User Guide Authorized Keys Click Edit to import a public key file for SSH access to the device instead of using an admin password. The SSH Authorized Keys window opens. Chapter 5: Services NTP Client Network Time Protocol (NTP) is a protocol for synchronizing the clocks of computer systems over packet-switched, variable-latency data networks. You can use it to set the real system time on the device.
airOS®7 User Guide Chapter 5: Services System Log Every logged message contains at least a system time and specific service name that generates the system event. Messages from different services have different contexts and different levels of detail. Usually error, warning, or informational system service messages are reported; however, more detailed debug level messages can also be reported. The more detailed the system messages reported, the greater the volume of log messages generated.
airOS®7 User Guide Chapter 6: System The System page contains administrative options. This page enables the administrator to reboot the device, reset it to factory defaults, upload new firmware, back up or update the configuration, and configure the administrator account. Firmware Update This section manages the firmware maintenance. Chapter 6: System After you click Download, the Ubiquiti Firmware License Agreement window appears. Click Agree to accept the terms of the license agreement.
airOS®7 User Guide The uploaded firmware file is displayed. You have two options: Chapter 6: System Date Settings • Update Click Update to confirm. After the device reboots, the firmware update process will be completed. • Discard Click Discard to cancel. If the firmware update is in process, you can close the firmware update window, but this does not cancel the firmware update. Please be patient, as the firmware update routine can take three to seven minutes.
airOS®7 User Guide • Current Password Enter the current password for the administrator account. This is required to change the Password or Administrator Username. • New Password Enter the new password for the administrator account. airOS 7 will indicate that the password is Too Short if it has fewer than eight characters. As you enter the new password, airOS will indicate its strength: Weak, Normal, or Strong.
airOS®7 User Guide Chapter 7: Tools and Information Each page of the airOS interface contains links to tools and information in the lower half of the navigation bar. Tools Click to display the list of network administration and monitoring tools: • “airView” on page 36 • “Align Antenna” on page 38 Chapter 7: Tools and Information airView The airView® Spectrum Analyzer allows you to identify noise signatures so you can plan your wireless network to optimize RF performance and minimize interference.
airOS®7 User Guide Use the controls in the upper-right corner to maximize or close the airView window. Chapter 7: Tools and Information Waterfall View You can place the cursor at a specific frequency to highlight that frequency across the three spectral views, each of which represents different data. This time-based graph shows the aggregate energy collected since the start of the airView session for each frequency.
airOS®7 User Guide Align Antenna Use this tool to point and optimize the antenna in the direction of maximum link signal. The Antenna Align Tool window reloads every second. Chapter 7: Tools and Information Device Name Displays the hostname or identifier of the device. Radio Mode Displays the technology used by the device, airMAX AC for airMAX ac devices. Encryption Displays the encryption method, WPA2 or NONE. Signal/Noise, dBm Displays the signal strength and noise values.
airOS®7 User Guide Chapter 7: Tools and Information Ping Traceroute You can ping other devices on the network directly from the device. The Ping tool uses Internet Control Message Protocol (ICMP) packets to check the preliminary link quality and packet latency estimation between two network devices. The Traceroute tool traces the hops from the device to a specified destination host name or IP address. Use this tool to find the route taken by ICMP packets across the network to the destination host.
airOS®7 User Guide Speed Test This utility allows you to test the connection speed between two airOS 7 devices that are using firmware version 7.1 or above. You can use the Speed Test tool to estimate a preliminary throughput between two network devices. Chapter 7: Tools and Information The results are displayed on a speedometer dial and in five result categories: Note: If traffic shaping is enabled on either device, then the Speed Test results will be limited accordingly.
airOS®7 User Guide Chapter 7: Tools and Information The results are displayed in the following columns: Status Displays the test result: LINK UP, OPEN, or SHORTED. Distance to Fault, m Displays the number of meters to the fault in the cable pair. If there is no fault, then 0 is displayed. Info Click at the bottom left corner of the page to open the Device Information window, which gives a textual summary of the information displayed on the Main page.
airOS®7 User Guide Appendix A: Contact Information Appendix A: Contact Information Ubiquiti Networks Support Ubiquiti Support Engineers are located around the world and are dedicated to helping customers resolve software, hardware compatibility, or field issues as quickly as possible. We strive to respond to support inquiries within a 24-hour period. Online Resources Support: support.ubnt.com Community: community.ubnt.com Downloads: downloads.ubnt.com 2580 Orchard Parkway San Jose, CA 95131 www.ubnt.