Upload
others
View
4
Download
0
Embed Size (px)
Citation preview
WAP-EN1750W AC1750 Wireless Access Point
User Manual Version 1.1.0, December 2016
2
FCCComplianceThisequipmenthasbeentestedandfoundtocomplywiththelimitsforaClassBDigitalDevice,pursuanttopart15oftheFCCRules.Theselimitsaredesignedtoprovidereasonableprotectionagainstharmfulinterferenceinaresidentialinstallation.Thisequipmentgenerates,usesandcanradiateradiofrequencyenergyand,ifnotinstalledandusedinaccordancewiththeinstruction,maycauseharmfulinterferencetoradiocommunication.However,thereisnoguaranteethatinterferencewillnotoccurinaparticularinstallation.Ifthisequipmentdoescauseharmfulinterferencetoradioortelevisionreception,whichcanbedeterminedbyturningtheequipmentoffandon,theuserisencouragedtotrytocorrecttheinterferencebyoneormoreofthefollowingmeasures:
• Reorientorrelocatethereceivingantenna• Increasetheseparationbetweentheequipmentandreceiver• Connecttheequipmentintoanoutletonacircuitdifferentfromthattowhichthereceiveris
connected• Consultthedealeroranexperiencedradio/TVtechnicianforhelp.
Thechangesormodificationsnotexpresslyapprovedbythepartyresponsibleforcompliancecouldvoidtheuser'sauthoritytooperatetheequipment.TocomplywiththeFCCRFexposurecompliancerequirements,thisdeviceanditsantennamustnotbeco-locatedoroperatingtoconjunctionwithanyotherantennaortransmitter.Thisequipmentshouldbeinstalledandoperatedwithminimumdistance20cmbetweentheradiator&yourbody.
Copyright
Copyright©2016ComtrendCorporation.Allrightsreserved.TheinformationcontainedhereinisproprietarytoComtrendCorporation.Nopartofthisdocumentmaybetranslated,transcribed,reproduced,inanyform,orbyanymeanswithoutthepriorwrittenconsentofComtrendCorporation.Thisprogramisfreesoftware:youcanredistributeitand/ormodifyitunderthetermsoftheGNUGeneralPublicLicenseaspublishedbytheFreeSoftwareFoundation,eitherversion3oftheLicense,or(atyouroption)anylaterversion.
Thisprogramisdistributedinthehopethatitwillbeuseful,butWITHOUTANYWARRANTY;withouteventheimpliedwarrantyofMERCHANTABILITYorFITNESSFORAPARTICULARPURPOSE.SeetheGNUGeneralPublicLicenseformoredetails.
YoushouldhavereceivedacopyoftheGNUGeneralPublicLicensealongwiththisprogram.Ifnot,seehttp://www.gnu.org/licenses/ NOTE: Thisdocumentissubjecttochangewithoutnotice.
3
Protect Our Environment
Thissymbolindicatesthatwhentheequipmenthasreachedtheendofitsusefullife,itmustbetakentoarecyclingcenterandprocessedseparatefromdomesticwaste.
Thecardboardbox,theplasticcontainedinthepackaging,andthepartsthatmakeupthisroutercanberecycledinaccordancewithregionallyestablishedregulations.Neverdisposeofthiselectronicequipmentalongwithyourhouseholdwaste;youmaybesubjecttopenaltiesorsanctionsunderthelaw.
4
CONTENTS
Overview.....................................................................................................6
I. ProductInformation...............................................................................7
I-1. PackageContents.........................................................................................................7I-2. SystemRequirements...................................................................................................8I-3. HardwareOverview......................................................................................................8I-4. LEDStatus.....................................................................................................................9I-5. Reset.............................................................................................................................9I-6. MagneticWallMount.................................................................................................10I-7. SafetyInformation......................................................................................................11
II. QuickSetup..........................................................................................12
II-1. InitialSetup.................................................................................................................12II-2. BasicSettings..............................................................................................................14II-3. Wi-FiProtectedSetup(WPS)......................................................................................18
III.HardwareInstallation............................................................................19
IV. BrowserBasedConfigurationInterface.................................................20
IV-1. Information.................................................................................................................22IV-1-1. SystemInformation....................................................................................................22IV-1-2. WirelessClients..........................................................................................................26IV-1-3. WirelessMonitor........................................................................................................28IV-1-4. Log..............................................................................................................................30IV-2. NetworkSettings........................................................................................................32IV-2-1. LAN-SideIPAddress...................................................................................................32IV-2-2. LANPort.....................................................................................................................35IV-2-3. VLAN...........................................................................................................................36IV-3. WirelessSettings........................................................................................................37IV-3-1. 2.4GHz11bgn.............................................................................................................37IV-3-1-1. Basic............................................................................................................................37IV-3-1-2. Advanced....................................................................................................................40IV-3-1-3. Security.......................................................................................................................42IV-3-1-3-1. NoAuthentication......................................................................................................43IV-3-1-3-2. WEP............................................................................................................................44IV-3-1-3-3. IEEE802.1x/EAP..........................................................................................................44IV-3-1-3-4. WPA-PSK.....................................................................................................................44IV-3-1-3-5. WPA-EAP....................................................................................................................45
5
IV-3-1-3-6. AdditionalAuthentication..........................................................................................45IV-3-1-4. WDS............................................................................................................................46IV-3-1-5. GuestNetwork...........................................................................................................47IV-3-2. 5GHz11ac11an..........................................................................................................49IV-3-2-1. Basic............................................................................................................................49IV-3-2-2. Advanced....................................................................................................................51IV-3-2-3. Security.......................................................................................................................53IV-3-2-4. WDS............................................................................................................................54IV-3-2-5. GuestNetwork...........................................................................................................56IV-3-3. WPS............................................................................................................................56IV-3-4. RADIUS........................................................................................................................59IV-3-4-1. RADIUSSettings..........................................................................................................60IV-3-4-2. InternalServer............................................................................................................62IV-3-4-3. RADIUSAccounts........................................................................................................66IV-3-6. WMM.........................................................................................................................69IV-3-7. Schedule.....................................................................................................................71IV-3-8. TrafficShaping............................................................................................................72IV-4. Management..............................................................................................................73IV-4-1. Admin.........................................................................................................................73IV-4-2. DateandTime............................................................................................................76IV-4-3. SyslogServer...............................................................................................................78IV-4-4. PingTest.....................................................................................................................79IV-4-5. I’mHere......................................................................................................................79IV-4-6. TR-069........................................................................................................................80IV-5. Advanced....................................................................................................................81IV-5-1. LEDSettings................................................................................................................81IV-5-2. UpdateFirmware........................................................................................................82IV-5-3. Save/RestoreSettings.................................................................................................83IV-5-4. FactoryDefault...........................................................................................................84IV-5-5. Reboot........................................................................................................................85IV-5-6. Operation...................................................................................................................85
V. Appendix..............................................................................................86
V-1. ConfiguringyourIPaddress........................................................................................86V-1-1. WindowsXP................................................................................................................87V-1-2. WindowsVista............................................................................................................89V-1-3. Windows7..................................................................................................................91V-1-4. Windows8..................................................................................................................95IV-1-5. Mac.............................................................................................................................99V-1-6. Glossary....................................................................................................................101
6
OverviewYouraccesspointcanfunctioninthreedifferentmodes.Thedefaultmodeforyouraccesspointis“APMode”.APModeisaregularaccesspointforyournetwork.APControllerModeactsasadesignated“Master”foranarrayof“Slave”accesspoints.(Groupoflinkedaccesspoints)ManagedAPModeactslikea“Slave”accesspointinanaccesspointarray.(ControlledbytheAPController“Master”)
Theuserinterfacewillchangedependingonwhichmodeisselected.ThismanualwillcovertheAPModefunctions.
7
I. ProductInformationI-1.PackageContents
1. WAP-EN1750WAccessPoint
2. Antennasx33. MagneticWallMountx2&
Screws
4. CD
5. EthernetCable6. PowerAdapter7. MagneticWallMountScrew
Template
1 2 3
4 5 6
7
8
I-2.SystemRequirements- Existingcable/DSLmodem&router- Computerwithwebbrowserforaccesspointconfiguration
I-3.HardwareOverview
A. 12VDCporttoconnectthepoweradapterB. LANportwithPoweroverEthernet(PoE)INC. LANportwithPoweroverEthernet(PoE)OUTD. USBPortforsystemlogE. EjectanattachedUSBdeviceF. ConnectamanagementconsoleG. ResettheaccesspointtofactorydefaultsettingsH. Wi-FiProtectedSetup(WPS)buttonI. Switchtheaccesspointon/off
A12VDCIN
BLAN1(PoE)
CLAN2 EEject
FConsole
GReset
HWPS
IOn/Off
DUSBPort
9
I-4.LEDStatus
LEDStatus Description
Off Theaccesspointisoff.
Blue Theaccesspointison.
Amber Theaccesspointisstartingup.
FlashingAmber Theaccesspointcannotestablishaconnectiontothenetwork.
FlashingAmberandBlue
Theaccesspointexperiencedaproblemstartingup.Theaccesspointwillrestart.
I-5.ResetIfyouexperienceproblemswithyouraccesspoint,youcanresetthedevicebacktoitsfactorysettings.Thisresetsallsettingsbacktodefault.1. Pressandholdtheresetbuttonontheaccesspointforatleast10seconds.
ReleasethebuttonwhentheLEDisflashingAMBER.
Youmayneedtouseapencilorsimilarsharpobjecttopushtheresetbutton.
2. Waitfortheaccesspointtorestart.Theaccesspointisreadyforsetup
whentheLEDisBLUE.
10
I-6.MagneticWallMountTheaccesspointincludesamagneticwallmount.1. Usetheincludedmagneticwallmountscrewtemplatetoidentifyand
markcorrectscrewpositionsonyourselectedwall.
2. Attachthetwomagneticwallmountstripstoyourwallusingtheincluded
screws,asshownbelow.
3. Pressthebackofyouraccesspointfirmlyagainstthetwowallmounted
magneticstrips,withtheaccesspoint’sComtrendlogointhecorrect,uprightorientationasdisplayedabove.
Ensureyouraccesspointissecurelyattachedtothemagneticstrips.
11
I-7.SafetyInformationInordertoensurethesafeoperationofthedeviceanditsusers,pleasereadandactinaccordancewiththefollowingsafetyinstructions.1.Theaccesspointisdesignedforindooruseonly;donotplacetheaccesspointoutdoors.
2.Donotplacetheaccesspointinornearhot/humidplaces,suchasakitchenorbathroom.
3.Donotpullanyconnectedcablewithforce;carefullydisconnectitfromtheaccesspoint.
4.Handletheaccesspointwithcare.Accidentaldamagewillvoidthewarrantyoftheaccesspoint.
5.Thedevicecontainssmallpartswhichareadangertosmallchildrenunder3yearsold.Pleasekeeptheaccesspointoutofreachofchildren.
6.Donotplacetheaccesspointonpaper,cloth,orotherflammablematerials.Theaccesspointmaybecomehotduringuse.
7.Therearenouser-serviceablepartsinsidetheaccesspoint.Ifyouexperienceproblemswiththeaccesspoint,pleasecontactComtrendCustomerServiceforassistance.
8.Theaccesspointisanelectricaldeviceandassuch,ifitbecomeswetforanyreason,donotattempttotouchitwithoutswitchingthepowersupplyoff.Contactanexperiencedelectricaltechnicianforfurtherhelp.
9.Ifyousmellburningorseesmokecomingfromtheaccesspointorpoweradapter,thendisconnecttheaccesspointandpoweradapterimmediately,asfarasitissafelypossibletodoso.ContactComtrendCustomerServiceforassistance.
12
II. QuickSetup
II-1. InitialSetup1. ConnecttheaccesspointtoacomputerviaEthernetcable.2. Connectthepoweradaptertotheaccesspoint’s12VDCportandplugthe
poweradapterintoapowersupply.
3. Pleasewaitamomentfortheaccesspointtostartup.Theaccesspointis
readywhentheLEDisblue.4. Setyourcomputer’sIPaddressto192.168.2.xwherexisanumberinthe
range3–100.Ifyouareunsurehowtodothis,pleaserefertoAppendixV-1.ConfiguringyourIPaddressformoreinformation.
DHCPisenabledontheaccesspointbydefault. IfnoDHCPServiceisfound,theaccesspointwilldefaulttoIPaddress192.168.2.2.
5. Entertheaccesspoint’sdefaultIPaddress192.168.2.2intotheURLbarof
awebbrowser.
6. Youwillbepromptedforausernameandpassword.Enterthedefaultusername“admin”andthedefaultpassword“1234”.
13
7. Youwillarriveatthe“SystemInformation”screenshownbelow.
8. Next,pleasefollowtheinstructionsbelowinII-2.BasicSettingsto
configuretheaccesspoint’sbasicsettings.
Formoreadvancedconfigurations,pleaserefertoIV.BrowserBasedConfigurationInterface.
14
II-2. BasicSettingsTheinstructionsbelowwillhelpyoutoconfigurethefollowingbasicsettingsoftheaccesspoint:- LANIPAddress- 2.4GHz&5GHzSSID&Security- AdministratorName&Password- Time&Date
Itisrecommendedyouconfigurethesesettingsbeforeusingtheaccesspoint.
1. Tochangetheaccesspoint’sLANIPaddress,goto“NetworkSettings”>
“LAN-sideIPAddress”andyouwillseethescreenbelow.
2. EntertheIPaddresssettingsyouwishtouseforyouraccesspoint.You
canuseadynamic(DHCP)orstaticIPaddress,dependingonyournetworkenvironment.Click“Apply”tosavethechangesandwaitafewmomentsfortheaccesspointtoreload.
Whenyouchangeyouraccesspoint’sIPaddress,youneedtousethenewIPaddresstoaccessthebrowserbasedconfigurationinterfaceinsteadofthedefaultIP192.168.2.2.
3. TochangetheSSIDofyouraccesspoint’s2.4GHzwirelessnetwork(s),go
to“WirelessSetting”>“2.4GHz11bgn”>“Basic”.EnterthenewSSIDforyour2.4GHzwirelessnetworkinthe“SSID1”fieldandclick“Apply”.
15
Toutilizemultiple2.4GHzSSIDs,openthedropdownmenulabelled“EnableSSIDnumber”andselecthowmanySSIDsyourequire.ThenenteranewSSIDinthecorrespondingnumberedfieldsbelow,beforeclicking“Apply”.
4. Toconfigurethesecurityofyouraccesspoint’s2.4GHzwireless
network(s),goto“WirelessSetting”>“2.4GHz11bgn”>“Security”.Selectan“AuthenticationMethod”andentera“Pre-sharedKey”or“EncryptionKey”dependingonyourchoice,thenclick“Apply”.
IfusingmultipleSSIDs,specifywhichSSIDtoconfigureusingthe“SSID”dropdownmenu.
16
5. Goto“WirelessSetting”>“5GHz11ac11an”andrepeatsteps3&4fortheaccesspoint’s5GHzwirelessnetwork.
6. Tochangetheadministratornameandpasswordforthebrowserbased
configurationinterface,goto“Management”>“Admin”.
7. Completethe“AdministratorName”and“AdministratorPassword”fields
andclick“Apply”.8. Tosetthecorrecttimeforyouraccesspoint,goto“Management”>
“DateandTime”.
17
9. Setthecorrecttimeandtimezoneforyouraccesspointusingthedropdownmenus.TheaccesspointalsosupportsNTP(NetworkTimeProtocol)soalternativelyyoucanenterthehostnameorIPaddressofatimeserver.Click“Apply”whenyouarefinished.
Youcanusethe“AcquireCurrentTimefromyourPC”buttonifyouwishtosettheaccesspointtothesametimeasyourPC.
10. Thebasicsettingsofyouraccesspointarenowconfigured.Please
refertoIII.HardwareInstallationforguidanceonconnectingyouraccesspointtoarouterorPoEswitch.
18
II-3. Wi-FiProtectedSetup(WPS)
Wi-FiProtectedSetupisasimplewaytoestablishconnectionsbetweenWPScompatibledevices.YoucanusetheWPSbuttontoestablishaconnectionbetweentheaccesspointandaWPS-compatiblewirelessdevice/client.1. PressandholdtheResetbuttononthefrontoftheaccesspointfor2
seconds.
2. Withintwominutes,activateWPSonyourWPS-compatiblewireless
device.PleasecheckthedocumentationforyourwirelessdeviceforinformationregardingitsWPSfunction.
3. Thedeviceswillestablishaconnection.
19
III.HardwareInstallation1. Connectarouterorswitchtotheaccesspoint’sLAN1portusingan
Ethernetcable.IfpoweringtheaccesspointbyPoE,thePoEswitchesmustbeconnectedtotheaccesspoint’sLAN1port.
2. IfyouarenotusingaPoEswitch,thenconnectthepoweradaptertothe
accesspoint’s12VDCportandplugthepoweradapterintoapoweroutlet.3. IfyouareusingaPoE(Powerover
Ethernet)switchthenitisnotnecessarytousetheincludedpoweradapter,theaccesspointwillbepoweredbythePoEswitch.
DonotusethepoweradapterifyouareusingaPoEswitch.
4. (Optional)Connectalocalnetworkdevicetotheaccesspoint’sLAN2port.
Theaccesspoint’sLAN2portcansupportaPoEPoweredDevice. IfpoweredbyPoE,theLAN2portcanprovide7.5wofPoEPower.Ifpoweredbytheincluded12vDCpoweradapter,afull15.4w(IEEE802.3afstandard)ofPoEPowerisprovided.
20
IV. BrowserBasedConfigurationInterfaceThebrowser-basedconfigurationinterfaceenablesyoutoconfiguretheaccesspoint’sadvancedfeatures.TheWAP-PC1750WfeaturesarangeofadvancedfunctionssuchasMACfiltering,MACRADIUSauthentication,VLANconfigurations,upto16SSIDsandmanymore.Toaccessthebrowserbasedconfigurationinterface:1. ConnectacomputertoyouraccesspointusinganEthernetcable.2. Enteryouraccesspoint’sIPaddressintheURLbarofawebbrowser.The
accesspoint’sdefaultIPaddressis192.169.2.23. Youwillbepromptedforausernameandpassword.Thedefault
usernameis“admin”andthedefaultpasswordis“1234”,thoughitwasrecommendedthatyouchangethepasswordduringsetup(seeII-2.BasicSettings).
Ifyoucannotrememberyourpassword,resettheaccesspointbacktoitsfactorydefaultsettings.RefertosectionI-5.Reset
4. Youwillarriveatthe“SystemInformation”screenshownbelow.
21
5. Usethemenuacrossthetopanddowntheleftsidetonavigate.
6. Click“Apply”tosavechangesandreloadtheaccesspoint,or“Cancel”to
cancelchanges.
Pleasewaitafewsecondsfortheaccesspointtoreloadafteryou“Apply”changes,asshownbelow.
22
IV-1. Information
Screenshotsdisplayedareexamples.Theinformationshownonyourscreenwillvarydependingonyourconfiguration.
IV-1-1.SystemInformation
The“SystemInformation”pagedisplaysbasicsysteminformationabouttheaccesspoint.
23
24
Model Displaysthemodelnumberoftheaccess
point.ProductName Displaystheproductnameforreference,
whichconsistsof“AP”plustheMACaddress.Uptime Displaysthetotaltimesincethedevicewas
turnedon.BootFrom Displaysinformationforthebooted
hardware,bootedfromeitherUSBorinternalmemory.
Version Displaysthesoftwareversionoftheaccesspoint.
MACAddress Displaystheaccesspoint’sMACaddress.ManagementVLANID
DisplaysthemanagementVLANID.
IPAddress DisplaystheIPaddressofthisdevice.Click“Refresh”toupdatethisvalue.
Default Gateway
DisplaystheIPaddressofthedefaultgateway.
DNS IPaddressoftheDNS(DomainNameServer).DHCPServer IPaddressoftheDHCPServer.
WiredLANPort SpecifieswhichLANport(1or2).Status DisplaysthestatusofthespecifiedLANport
(connectedordisconnected).VLANMode/ID DisplaystheVLANmode(taggedoruntagged)
andVLANIDforthespecifiedLANport.SeeIV-2-3.VLAN
Status Displaysthestatusofthe2.4GHzor5GHz
wireless(enabledordisabled).MACAddress Displaystheaccesspoint’sMACaddress.Channel Displaysthechannelnumberthespecified
wirelessfrequencyisusingforbroadcast.TransmitPower Displaysthewirelessradiotransmitpower
levelasapercentage.SSID DisplaystheSSIDname(s)forthespecified
frequency.
25
AuthenticationMethod
DisplaystheauthenticationmethodforthespecifiedSSID.SeeIV-3.WirelessSettings
EncryptionType DisplaystheencryptiontypeforthespecifiedSSID.SeeIV-3.WirelessSettings
VLANID DisplaystheVLANIDforthespecifiedSSID.SeeIV-2-3.VLAN
AdditionalAuthentication
DisplaystheadditionalauthenticationtypeforthespecifiedSSID.SeeIV-3.WirelessSettings
WirelessClientIsolation
DisplayswhetherwirelessclientisolationisinuseforthespecifiedSSID.SeeIV-2-3.VLAN
Refresh Clicktorefreshallinformation.
26
IV-1-2.WirelessClients
The“WirelessClients”pagedisplaysinformationaboutallwirelessclientsconnectedtotheaccesspointonthe2.4GHzor5GHzfrequency.
AutoRefreshTime Selectatimeintervalfortheclienttablelistto
automaticallyrefresh.ManualRefresh Clickrefreshtomanuallyrefreshtheclient
table.SSID DisplaystheSSIDwhichtheclientis
connectedto.MACAddress DisplaystheMACaddressoftheclient.Tx Displaysthetotaldatapacketstransmittedby
thespecifiedclient.Rx Displaysthetotaldatapacketsreceivedby
thespecifiedclient.Signal(%) Displaysthewirelesssignalstrengthforthe
specifiedclient.ConnectedTime Displaysthetotaltimethewirelessclienthas
beenconnectedtotheaccesspoint.
27
IdleTime Clientidletimeisthetimeforwhichtheclienthasnottransmittedanydatapacketsi.e.isidle.
Vendor Thevendoroftheclient’swirelessadapterisdisplayedhere.
28
IV-1-3.WirelessMonitor
WirelessMonitorisatoolbuiltintotheaccesspointtoscanandmonitorthesurroundingwirelessenvironment.Selectafrequencyandclick“Scan”todisplayalistofallSSIDswithinrangealongwithrelevantdetailsforeachSSID.
ChannelSurvey Selectwhichfrequency(orboth)toscan,and
click“Scan”tobegin.ChannelSurveyResult
Afterascaniscomplete,click“Export”tosavetheresultstolocalstorage.
Ch Displaysthechannelnumberusedbythe
specifiedSSID.SSID DisplaystheSSIDidentifiedbythescan.MACAddress DisplaystheMACaddressofthewireless
router/accesspointforthespecifiedSSID.Security Displaystheauthentication/encryptiontype
ofthespecifiedSSID.Signal(%) Displaysthecurrentsignalstrengthofthe
SSID.
29
Type Displaysthe802.11wirelessnetworkingstandard(s)ofthespecifiedSSID.
Vendor Displaysthevendorofthewirelessrouter/accesspointforthespecifiedSSID.
30
IV-1-4.Log
Thesystemlogdisplayssystemoperationinformationsuchasuptimeandconnectionprocesses.Thisinformationisusefulfornetworkadministrators.
Whenthelogisfull,oldentriesareoverwritten.
Save Clicktosavethelogasafileonyourlocalcomputer.
Clear Clearalllogentries.Refresh Refreshthecurrentlog.
31
Thefollowinginformation/eventsarerecordedbythelog:USBMount&unmountWirelessClientConnected&disconnectedKeyexchangesuccess&failAuthenticationAuthenticationfailorsuccessAssociation SuccessorfailWPSM1-M8messagesWPSsuccessChangeSettingsSystemBootDisplayscurrentmodelnameNTPClientWiredLink LANPortlinkstatusandspeedstatusProxyARPProxyARPmodulestart&stopBridgeBridgestart&stopSNMPSNMPserverstart&stopHTTPHTTPstart&stopHTTPSHTTPSstart&stopSSHSSH-clientserverstart&stopTelnetTelnet-clientserverstartorstopWLAN(2.4G)WLAN(2.4G]channelstatusandcountry/regionstatusWLAN(5G)WLAN(5G)channelstatusandcountry/regionstatusADT
32
IV-2. NetworkSettings
Screenshotsdisplayedareexamples.Theinformationshownonyourscreenwillvarydependingonyourconfiguration.
IV-2-1.LAN-SideIPAddress
The“LAN-sideIPaddress”pageallowsyoutoconfigureyouraccesspointonyourLocalAreaNetwork(LAN).YoucanenabletheaccesspointtodynamicallyreceiveanIPaddressfromyourrouter’sDHCPserveroryoucanspecifyastaticIPaddressforyouraccesspoint,aswellasconfigureDNSservers. YoucanalsoconfigureyourAccessPointtofunctionasaDHCPServeronyourLAN,toassignIPaddresstootherdevices.
IfnoIPaddressisprovidedaLANDHCPService,Theaccesspoint’sdefaultIPaddressis192.168.2.2
ItisrecommendedtoDisableotherDHCPserversontheLANifusingtheAPasaDHCPServer.
IPAddressAssignment
Select“DHCPClient”foryouraccesspointtobeassignedadynamicIPaddressfromyourrouter’sDHCPserver,orselect“StaticIP”tomanuallyspecifyastatic/fixedIPaddressforyouraccesspoint(below).
33
IPAddress SpecifytheIPaddresshere.ThisIPaddresswillbeassignedtoyouraccesspointandwillreplacethedefaultIPaddress.
SubnetMask Specifyasubnetmask.Thedefaultvalueis255.255.255.0
DefaultGateway ForDHCPusers,select“FromDHCP”togetdefaultgatewayfromyourDHCPserveror“User-Defined”toenteragatewaymanually.ForstaticIPusers,thedefaultvalueisblank.
DHCPuserscanselecttogetDNSservers’IPaddressfromDHCPor manuallyenteravalue.ForstaticIPusers,thedefaultvalueisblank.
PrimaryAddress DHCPuserscanselect“FromDHCP”togetprimaryDNSserver’sIPaddressfromDHCPor“User-Defined”tomanuallyenteravalue.ForstaticIPusers,thedefaultvalueisblank.
SecondaryAddress DHCPuserscanselect“FromDHCP”togetsecondaryDNSserver’sIPaddressfromDHCPor“User-Defined”tomanuallyenteravalue.ForstaticIPusers,thedefaultvalueisblank.
DHCPClientIPAddress When“DHCPClient”isselectedthisvalue
cannotbemodified.SubnetMask When“DHCPClient”isselectedthisvalue
cannotbemodified.DefaultGateway Select“FromDHCP”orselect“User-Defined”
andenteradefaultgateway.PrimaryDNSAddress
Select“FromDHCP”orselect“User-Defined”andenteraprimaryDNSaddress.
SecondaryDNSAddress
Select“FromDHCP”orselect“User-Defined”andenterasecondaryDNSaddress.
34
DHCPServerIPAddress SpecifytheIPaddresshere.ThisIPaddress
willbeassignedtoyouraccesspointandwillreplacethedefaultIPaddress.
SubnetMask Specifyasubnetmask.Thedefaultvalueis255.255.255.0
IPAddressRange EnterthestartandendIPaddressoftheIPaddressrangewhichyouraccesspoint’sDHCPserverwillassigntodevicesonthenetwork.
DomainName Enteradomainname.LeaseTime Selectaleasetimefromthedropdown
menu.IPaddresseswillbeassignedforthisperiodoftime.
DefaultGateway Enteradefaultgateway.PrimaryDNSAddress
EnteraprimaryDNSaddress.
SecondaryDNSAddress
EnterasecondaryDNSaddress.
Youraccesspoint’sDHCPservercanbeconfiguredtoassignstatic(fixed)IPaddressestospecifiednetworkdevices,identifiedbytheiruniqueMACaddress:
DHCPServerStaticIPAddressMACAddress EntertheMACaddressofthenetworkdevice
tobeassignedastaticIPaddress.IPAddress SpecifytheIPaddresstoassignthedevice.Add ClicktoassigntheIPaddresstothedevice.
35
IV-2-2.LANPort
The“LANPort”pageallowsyoutoconfigurethesettingsforyouraccesspoint’stwowiredLAN(Ethernet)ports.
WiredLANPort IdentifiesLANport1or2.Enable Enable/disablespecifiedLANport.Speed&Duplex Selectaspeed&duplextypeforspecifiedLAN
port,orusethe“Auto”value.LANportscanoperateupto1000Mbpsandfull-duplexenablessimultaneousdatapackettransfer/receive.
FlowControl Enable/disableflowcontrol.Flowcontrolcanpausenewsessionrequestuntilcurrentdataprocessingiscomplete,inordertoavoiddeviceoverloadsunderheavytraffic.
802.3az Enable/disable802.3az.802.3azisanEnergyEfficientEthernetfeaturewhichdisablesunusedinterfacestoreducepowerusage.
36
IV-2-3.VLAN
The“VLAN”(VirtualLocalAreaNetwork)enablesyoutoconfigureVLANsettings.AVLANisalocalareanetworkwhichmapsworkstationsvirtuallyinsteadofphysicallyandallowsyoutogrouptogetherorisolateusersfromeachother.VLANIDs0–4094aresupported.
VLANIDsintherange0–4094aresupported.
WiredLANPort/Wireless
IdentifiesLANport1or2,orwirelessSSIDs(2.4GHzor5GHz).
VLANMode Select“TaggedPort”or“UntaggedPort”forspecifiedLAN/wirelessinterface.
VLANID SetaVLANIDforspecifiedinterface,if“UntaggedPort”isselected.
VLANID SpecifytheVLANIDofthesubnet.Hostsbelongingtothesubnetcanonlycommunicatewithotherhostsonthesamesubnet.
37
IV-3. WirelessSettings
Screenshotsdisplayedareexamples.Theinformationshownonyourscreenwillvarydependingonyourconfiguration.
IV-3-1.2.4GHz11bgn
The“2.4GHz11bgn”menuallowsyoutoviewandconfigureinformationforyouraccesspoint’s2.4GHzwirelessnetworkacrossfour
categories:Basic,Advanced,SecurityandWDS.
IV-3-1-1. Basic
The“Basic”screendisplaysbasicsettingsforyouraccesspoint’s2.4GHzWi-Finetwork(s).
38
Wireless Enableordisabletheaccesspoint’s2.4GHz
wirelessradio.Whendisabled,no2.4GHzSSIDswillbeactive.
Band Selectthewirelessstandardusedfortheaccesspoint.Combinationsof802.11b,802.11g&802.11ncanbeselected.
EnableSSIDNumber SelecthowmanySSIDstoenableforthe2.4GHzfrequencyfromthedropdownmenu.Amaximumof8canbeenabled.
SSID# EntertheSSIDnameforthespecifiedSSID(upto8).TheSSIDcanconsistofanycombinationofupto32alphanumericcharacters.
VLANID SpecifyaVLANIDforeachSSID.AutoChannel Enable/disableautochannelselection.Auto
channelselectionwillautomaticallysetthewirelesschannelfortheaccesspoint’s2.4GHzfrequencybasedonavailabilityandpotentialinterference.Whendisabled,selectachannelmanuallyasshowninthenexttable.
AutoChannelRange Selectarangefromwhichtheautochannelsetting(above)willchooseachannel.
AutoChannelInterval
Specifyafrequencyforhowoftentheautochannelsettingwillcheck/reassignthewirelesschannel.Check/uncheckthe“Changechannelevenifclientsareconnected”boxaccordingtoyourpreference.
ChannelBandwidth Setthechannelbandwidth:20MHz(lowerperformancebutlessinterference),40MHz(higherperformancebutpotentiallyhigherinterference)orAuto(automaticallyselectbasedoninterferencelevel).
BSSBasicRateSet SetaBasicServiceSet(BSS)rate:thisisthetransmissionrateforcontrolcommunicationframesforwirelessclients.
39
Whenautochannelisdisabled,selectawirelesschannelmanually:ChannelInterval Selectawirelesschannelfrom1–13.ChannelBandwidth Setthechannelbandwidth:20MHz(lower
performancebutlessinterference),40MHz(higherperformancebutpotentiallyhigherinterference)orAuto(automaticallyselectbasedoninterferencelevel).
BSSBasicRateSet SetaBasicServiceSet(BSS)rate:thisisthetransmissionrateforcontrolcommunicationframesforwirelessclients.
40
IV-3-1-2. Advanced
Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyofthevaluesonthispageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceofyouraccesspoint.
ContentionSlot Select“Short”or“Long”–thisvalueisusedfor
contentionwindowsinWMM(seeIV-3-6.WMM).
PreambleType Setthewirelessradiopreambletype.Thedefaultvalueis“ShortPreamble”.
GuardInterval Settheguardinterval.802.11gProtection Enable/disable802.11gprotection,which
increasesreliabilitybutreducesbandwidth(clientswillsendRequesttoSend(RTS)toaccesspoint,andaccesspointwillbroadcastCleartoSend(CTS),beforeapacketissentfromclient.)
41
802.11nProtection Enable/disable802.11nprotection,whichincreasesreliabilitybutreducesbandwidth(clientswillsendRequesttoSend(RTS)toaccesspoint,andaccesspointwillbroadcastCleartoSend(CTS),beforeapacketissentfromclient.)
DTIMPeriod SettheDTIM(deliverytrafficindicationmessage)periodvalueofthewirelessradio.Thedefaultvalueis1.
RTSThreshold SettheRTSthresholdofthewirelessradio.Thedefaultvalueis2347.
FragmentThreshold
Setthefragmentthresholdofthewirelessradio.Thedefaultvalueis2346.
MulticastRate Setthetransferrateformulticastpacketsorusethe“Auto”setting.
TxPower Setthepoweroutputofthewirelessradio.Youmaynotrequire100%outputpower.Settingalowerpoweroutputcanenhancesecuritysincepotentiallymalicious/unknownusersindistantareaswillnotbeabletoaccessyoursignal.
BeaconInterval Setthebeaconintervalofthewirelessradio.Thedefaultvalueis100.
Stationidletimeout
SpecifiestheintervaloftheAPtoprobeforWLANstationstoverifyifthestationisstillalive.Thevaluerangesfrom60to3600,inseconds.Thedefaultvalueis60s.
42
IV-3-1-3. Security
Theaccesspointprovidesvarioussecurityoptions(wirelessdataencryption).Whendataisencrypted,informationtransmittedwirelesslycannotbereadbyanyonewhodoesnotknowthecorrectencryptionkey.
Itisessentialtoconfigurewirelesssecurityinordertopreventunauthorisedaccesstoyournetwork.
Foroptimalsecurity,selectahard-to-guesspasswordwhichincludeacombinationofnumbers,lettersandsymbols.
43
SSIDSelection SelectwhichSSIDtoconfiguresecuritysettings
for.BroadcastESSID EnableordisableESSIDbroadcast.When
enabled,theESSIDwillbevisibletoclientsasanavailableWi-Finetwork.Whendisabled,theESSIDwillnotbevisibleasanavailableWi-Finetworktoclients–clientsmustmanuallyentertheESSIDinordertoconnect.Ahidden(disabled)ESSIDistypicallymoresecurethanavisible(enabled)SSID.
WirelessClientIsolation
Enableordisablewirelessclientisolation.Wirelessclientisolationpreventsclientsconnectedtotheaccesspointfromcommunicatingwitheachotherandimprovessecurity.Typically,thisfunctionisusefulforcorporateenvironmentsorpublichotspotsandcanpreventbruteforceattacksonclients’usernamesandpasswords.
LoadBalancing LoadbalancinglimitsthenumberofwirelessclientsconnectedtoanSSID.Setaloadbalancingvalue(maximum50).
AuthenticationMethod
Selectanauthenticationmethodfromthedropdownmenuandrefertotheinformationbelowappropriateforyourmethod.
AdditionalAuthentication
Selectanadditionalauthenticationmethodfromthedropdownmenuandrefertotheinformationbelow(IV-3-1-3-6.)appropriateforyourmethod.
IV-3-1-3-1.NoAuthentication
Authenticationisdisabledandnopassword/keyisrequiredtoconnecttotheaccesspoint.
Disablingwirelessauthenticationisnotrecommended.Whendisabled,anybodywithinrangecanconnecttoyournetwork.
44
IV-3-1-3-2.WEP
WEP(WiredEquivalentPrivacy)isabasicencryptiontype.ForahigherlevelofsecurityconsiderusingWPAencryption.
KeyLength Select64-bitor128-bit.128-bitismoresecurethan64-bitandisrecommended.
KeyType Choosefrom“ASCII”(anyalphanumericalcharacter0-9,a-zandA-Z)or“Hex”(anycharactersfrom0-9,a-fandA-F).
DefaultKey Selectwhichencryptionkey(1–4below)isthedefaultkey.Forsecuritypurposes,youcansetuptofourkeys(below)andchangewhichisthedefaultkey.
EncryptionKey1–4
Enteryourencryptionkey/passwordaccordingtotheformatyouselectedabove.
IV-3-1-3-3.IEEE802.1x/EAP
KeyLength Select64-bitor128-bit.128-bitismoresecurethan64-bitandisrecommended.
IV-3-1-3-4.WPA-PSK
WPA-PSKisasecurewirelessencryptiontypewithstrongdataprotectionanduserauthentication,utilizing128-bitencryptionkeys.
WPAType SelectfromWPA/WPA2MixedMode-PSK,WPA2orWPAonly.WPA2issaferthanWPAonly,butnotsupportedbyallwirelessclients.Pleasemakesureyourwirelessclientsupportsyourselection.
Encryption Select“TKIP/AESMixedMode”or“AES”encryptiontype.
KeyRenewalInterval
Specifyafrequencyforkeyrenewalinminutes.
Pre-SharedKeyType
Choosefrom“Passphrase”(8–63
45
alphanumericcharacters)or“Hex”(upto64charactersfrom0-9,a-fandA-F).
Pre-SharedKey Pleaseenterasecuritykey/passwordaccordingtotheformatyouselectedabove.
IV-3-1-3-5.WPA-EAP
WPAType SelectfromWPA/WPA2MixedMode-EAP,WPA2-EAPorWPA-EAP.
Encryption Select“TKIP/AESMixedMode”or“AES”encryptiontype.
KeyRenewalInterval
Specifyafrequencyforkeyrenewalinminutes.
WPA-EAPmustbedisabledtouseMAC-RADIUSauthentication.
IV-3-1-3-6.AdditionalAuthentication
Additionalwirelessauthenticationmethodscanalsobeused:MACAddressFilterRestrictwirelessclientsaccessbasedonMACaddressspecifiedintheMACfiltertable.
SeeIV-3-5.MACFiltertoconfigureMACfiltering.MACFilter&MAC-RADIUSAuthenticationRestrictwirelessclientsaccessusingbothoftheaboveMACfiltering&RADIUSauthenticationmethods.MAC-RADIUSAuthenticationRestrictwirelessclientsaccessbasedonMACaddressviaaRADIUSserver,orpasswordauthenticationviaaRADIUSserver.
SeeIV-3-4.RADIUStoconfigureRADIUSservers.
WPSmustbedisabledtouseMAC-RADIUSauthentication.SeeIV-3-3.forWPSsettings.
46
MACRADIUSPassword
SelectwhethertouseMACaddressorpasswordauthenticationviaRADIUSserver.Ifyouselect“Usethefollowingpassword”,enterthepasswordinthefieldbelow.Thepasswordshouldmatchthe“SharedSecret”usedinIV-3-4.RADIUS.
IV-3-1-4. WDS
WirelessDistributionSystem(WDS)canbridge/repeataccesspointstogetherinanextendednetwork.WDSsettingscanbeconfiguredasshownbelow.
WhenusingWDS,configuretheIPaddressofeachaccesspointtobeinthesamesubnetandensurethereisonlyoneactiveDHCPserveramongconnectedaccesspoints,preferablyontheWANside.
WDSmustbeconfiguredoneachaccesspoint,usingcorrectMACaddresses.Allaccesspointsshouldusethesamewirelesschannelandencryptionmethod.
47
2.4GHzWDSFunctionality Select“WDSwithAP”touseWDSwithaccess
pointor“WDSDedicatedMode”touseWDSandalsoblockcommunicationwithregularwirelessclients.WhenWDSisused,eachaccesspointshouldbeconfiguredwithcorrespondingMACaddresses,wirelesschannelandwirelessencryptionmethod.
LocalMACAddress DisplaystheMACaddressofyouraccesspoint.
WDSPeerSettingsWDS# EntertheMACaddressforuptofourother
WDSdevicesyouwishtoconnect.
WDSVLANVLANMode SpecifytheWDSVLANmodeto“Untagged
Port”or“TaggedPort”.VLANID SpecifytheWDSVLANIDwhen“Untagged
Port”isselectedabove.
WDSEncryptionmethodEncryption Selectwhethertouse“None”or“AES”
encryptionandenterapre-sharedkeyforAESconsistingof8-63alphanumericcharacters.
IV-3-1-5. GuestNetwork
The“GuestNetwork”pageallowsyoutoconfigureaguestnetworkthatwillhaveaLayer-3IPFilterappliedtoalltrafficpassingthroughthespecificSSID.
WhenusingaGuestNetwork,TrafficShapingandIPFiltersettingswillbeappliedtoalltrafficpassingthroughtheGuestNetworkSSID.
48
GuestNetwork2.4GHzSSID SelecttheSSIDthatyouwanttoapplythe
GuestNetworksettingsto.GuestNetwork EnableorDisableGuestNetworksettings.GuestAccessPolicyTrafficShaping Select“Enable”toapplybandwidthlimitations
onthe“Downlink”and“Uplink”performanceontheGuestNetwork.
FilteringSettings Select“Allow”or“Deny”toapplyIPFilteringtothetrafficontheGuestNetwork. ProvidetheIPandSubnetMaskyouwanttoapplyasafilter. Upto3IPFiltersaresupported.
49
IV-3-2.5GHz11ac11an
The“5GHz11ac11an”menuallowsyoutoviewandconfigureinformationforyouraccesspoint’s
2.4GHzwirelessnetworkacrossfourcategories:Basic,Advanced,SecurityandWDS.
IV-3-2-1. Basic
The“Basic”screendisplaysbasicsettingsforyouraccesspoint’s5GHzWi-Finetwork(s).
Wireless Enableordisabletheaccesspoint’s5GHzwirelessradio.Whendisabled,no5GHzSSIDswillbeactive.
Band Selectthewirelessstandardusedfortheaccesspoint.Combinationsof802.11a,802.11n&802.11accanbeselected.
EnableSSIDNumber SelecthowmanySSIDstoenableforthe5GHzfrequencyfromthedropdownmenu.Amaximumof8canbeenabled.
SSID# EntertheSSIDnameforthespecifiedSSID(upto8).TheSSIDcanconsistofanycombinationofupto32alphanumericcharacters.
50
VLANID SpecifyaVLANIDforeachSSID.AutoChannel Enable/disableautochannelselection.Auto
channelselectionwillautomaticallysetthewirelesschannelfortheaccesspoint’s5GHzfrequencybasedonavailabilityandpotentialinterference.Whendisabled,selectachannelmanuallyasshowninthenexttable.
AutoChannelRange Selectarangefromwhichtheautochannelsetting(above)willchooseachannel.
AutoChannelInterval
Specifyafrequencyforhowoftentheautochannelsettingwillcheck/reassignthewirelesschannel.Check/uncheckthe“Changechannelevenifclientsareconnected”boxaccordingtoyourpreference.
ChannelBandwidth Setthechannelbandwidth:20MHz(lowerperformancebutlessinterference),Auto40/20MHzorAuto80/40/20MHz(automaticallyselectbasedoninterferencelevel).
BSSBasicRateSet SetaBasicServiceSet(BSS)rate:thisisthetransmissionrateforcontrolcommunicationframesforwirelessclients.
Whenautochannelisdisabled,selectawirelesschannelmanually:ChannelInterval Selectawirelesschannel.ChannelBandwidth Setthechannelbandwidth:20MHz(lower
performancebutlessinterference),Auto40/20MHzorAuto80/40/20MHz(automaticallyselectbasedoninterferencelevel).
BSSBasicRateSet SetaBasicServiceSet(BSS)rate:thisisthetransmissionrateforcontrolcommunicationframesforwirelessclients.
51
IV-3-2-2. Advanced
Thesesettingsareforexperiencedusersonly.Pleasedonotchangeanyofthevaluesonthispageunlessyouarealreadyfamiliarwiththesefunctions.
Changingthesesettingscanadverselyaffecttheperformanceofyouraccesspoint.
GuardInterval Settheguardinterval.802.11nProtection Enable/disable802.11nprotection,which
increasesreliabilitybutreducesbandwidth(clientswillsendRequesttoSend(RTS)toaccesspoint,andaccesspointwillbroadcastCleartoSend(CTS),beforeapacketissentfromclient.)
DTIMPeriod SettheDTIM(deliverytrafficindicationmessage)periodvalueofthewirelessradio.Thedefaultvalueis1.
RTSThreshold SettheRTSthresholdofthewirelessradio.Thedefaultvalueis2347.
FragmentThreshold
Setthefragmentthresholdofthewirelessradio.Thedefaultvalueis2346.
MulticastRate Setthetransferrateformulticastpacketsorusethe“Auto”setting.
52
TxPower Setthepoweroutputofthewirelessradio.Youmaynotrequire100%outputpower.Settingalowerpoweroutputcanenhancesecuritysincepotentiallymalicious/unknownusersindistantareaswillnotbeabletoaccessyoursignal.
BeaconInterval Setthebeaconintervalofthewirelessradio.Thedefaultvalueis100.
Stationidletimeout
SpecifiestheintervaloftheAPtoprobeforWLANstationstoverifyifthestationisstillalive.Thevaluerangesfrom60to3600,inseconds.Thedefaultvalueis60s.
53
IV-3-2-3. Security
Theaccesspointprovidesvarioussecurityoptions(wirelessdataencryption).Whendataisencrypted,informationtransmittedwirelesslycannotbereadbyanyonewhodoesnotknowthecorrectencryptionkey.
Itisessentialtoconfigurewirelesssecurityinordertopreventunauthorisedaccesstoyournetwork.
Foroptimalsecurity,selectahard-to-guesspasswordwhichincludeacombinationofnumbers,lettersandsymbols.
SSIDSelection SelectwhichSSIDtoconfiguresecuritysettingsfor.
BroadcastESSID EnableordisableESSIDbroadcast.Whenenabled,theESSIDwillbevisibletoclientsasanavailableWi-Finetwork.Whendisabled,theESSIDwillnotbevisibleasanavailableWi-Finetworktoclients–clientsmustmanuallyentertheESSIDinordertoconnect.Ahidden(disabled)ESSIDistypicallymoresecurethanavisible(enabled)SSID.
54
WirelessClientIsolation
Enableordisablewirelessclientisolation.Wirelessclientisolationpreventsclientsconnectedtotheaccesspointfromcommunicatingwitheachotherandimprovessecurity.Typically,thisfunctionisusefulforcorporateenvironmentsorpublichotspotsandcanpreventbruteforceattacksonclients’usernamesandpasswords.
LoadBalancing LoadbalancinglimitsthenumberofwirelessclientsconnectedtoanSSID.Setaloadbalancingvalue(maximum50).
AuthenticationMethod
Selectanauthenticationmethodfromthedropdownmenuandrefertotheinformationbelowappropriateforyourmethod.
AdditionalAuthentication
Selectanadditionalauthenticationmethodfromthedropdownmenuandrefertotheinformationbelowappropriateforyourmethod.
PleasereferbacktosectionIV-3-1-3.Securityformoreinformationonauthenticationandadditionalauthenticationtypes.
IV-3-2-4. WDS
WirelessDistributionSystem(WDS)canbridge/repeataccesspointstogetherinanextendednetwork.WDSsettingscanbeconfiguredasshownbelow.
WhenusingWDS,configuretheIPaddressofeachaccesspointtobeinthesamesubnetandensurethereisonlyoneactiveDHCPserveramongconnectedaccesspoints,preferablyontheWANside.
WDSmustbeconfiguredoneachaccesspoint,usingcorrectMACaddresses.Allaccesspointsshouldusethesamewirelesschannelandencryptionmethod.
55
5GHzWDSModeWDSFunctionality Select“WDSwithAP”touseWDSwithaccess
pointor“WDSDedicatedMode”touseWDSandalsoblockcommunicationwithregularwirelessclients.WhenWDSisused,eachaccesspointshouldbeconfiguredwithcorrespondingMACaddresses,wirelesschannelandwirelessencryptionmethod.
LocalMACAddress DisplaystheMACaddressofyouraccesspoint.
WDSPeerSettingsWDS# EntertheMACaddressforuptofourother
WDAdevicesyouwishtoconnect.
WDSVLANVLANMode SpecifytheWDSVLANmodeto“Untagged
Port”or“TaggedPort”.VLANID SpecifytheWDSVLANIDwhen“Untagged
Port”isselectedabove.
WDSEncryptionEncryption Selectwhethertouse“None”or“AES”
encryptionandenterapre-sharedkeyforAESwith8-63alphanumericcharacters.
56
IV-3-2-5. GuestNetwork
The“GuestNetwork”pageallowsyoutoconfigureaguestnetworkthatwillhaveaLayer-3IPFilterappliedtoalltrafficpassingthroughthespecificSSID.
WhenusingaGuestNetwork,TrafficShapingandIPFiltersettingswillbeappliedtoalltrafficpassingthroughtheGuestNetworkSSID.
GuestNetwork5GHzSSID SelecttheSSIDthatyouwanttoapplythe
GuestNetworksettingsto.GuestNetwork EnableorDisableGuestNetworksettings.GuestAccessPolicyTrafficShaping Select“Enable”toapplybandwidthlimitations
onthe“Downlink”and“Uplink”performanceontheGuestNetwork.
FilteringSettings Select“Allow”or“Deny”toapplyIPFilteringtothetrafficontheGuestNetwork. ProvidetheIPandSubnetMaskyouwanttoapplyasafilter. Upto3IPFiltersaresupported.
IV-3-3. WPS
57
Wi-FiProtectedSetupisasimplewaytoestablishconnectionsbetweenWPScompatibledevices.WPScanbeactivatedoncompatibledevicesbypushingaWPSbuttononthedeviceorfromwithinthedevice’sfirmware/configurationinterface(knownasPBCor“PushButtonConfiguration”).WhenWPSisactivatedinthecorrectmannerandatthecorrecttimefortwocompatibledevices,theywillautomaticallyconnect.“PINcodeWPS”isavariationofPBCwhichincludestheadditionaluseofaPINcodebetweenthetwodevicesforverification.
Pleaserefertomanufacturer’sinstructionsforyourotherWPSdevice.
58
WPS Check/uncheckthisboxtoenable/disableWPS
functionality.WPSmustbedisabledwhenusingMAC-RADIUSauthentication(seeIV-3-1-3-6&IV-3-4).
ProductPIN DisplaystheWPSPINcodeofthedevice,used
forPINcodeWPS.YouwillberequiredtoenterthisPINcodeintoanotherWPSdeviceforPINcodeWPS.Click“GeneratePIN”togenerateanewWPSPINcode.
Push-ButtonWPS Click“Start”toactivateWPSontheaccesspointforapproximately2minutes.Thishasthesameeffectasphysicallypushingtheaccesspoint’sWPSbutton.
WPSbyPIN EnterthePINcodeofanotherWPSdeviceandclick“Start”toattempttoestablishaWPSconnectionforapproximately2minutes.
WPSStatus WPSsecuritystatusisdisplayedhere.Click
“Release”tocleartheexistingstatus.
59
IV-3-4. RADIUS
TheRADIUSsubmenuallowsyoutoconfiguretheaccesspoint’sRADIUSserversettings,categorizedintothreesubmenus:RADIUSsettings,InternalServerandRADIUSaccounts.ARADIUSserverprovidesuser-basedauthenticationtoimprovesecurityandofferwirelessclientcontrol–userscanbeauthenticatedbeforegainingaccesstoanetwork.Theaccesspointcanutilizebothaprimaryandsecondary(backup)RADIUSserverforeachofitswirelessfrequencies(2.4GHz&5GHz).ExternalRADIUSserverscanbeusedortheaccesspoint’sinternalRADIUSservercanbeused.
TouseRADIUSservers,goto“WirelessSettings”! “Security”andselectthedesiredAuthenticationMethod! “AdditionalAuthentication”andselect“MACRADIUSAuthentication”(seeIV-3-1-3.&IV-3-2-3).The“MACRADIUSAuthentication”featureworkswithanexternalRADIUSServerOnly.
60
IV-3-4-1. RADIUSSettings
ConfiguretheRADIUSserversettingsfor2.4GHz&5GHz.Eachfrequencycanuseaprimaryandsecondary(backup)RADIUSserver.
61
RADIUSType Select“Internal”tousetheaccesspoint’sbuilt-inRADIUSserveror“external”touseanexternalRADIUSserver.
RADIUSServer EntertheRADIUSserverhostIPaddress.
AuthenticationPort
SettheUDPportusedintheauthenticationprotocoloftheRADIUSserver.Valuemustbebetween1–65535.
SharedSecret Enterasharedsecret/passwordbetween1–99charactersinlength.Thisshouldmatchthe“MAC-RADIUS”passwordusedinIV-3-1-3-6orIV-3-2-3.
SessionTimeout Setadurationofsessiontimeoutinsecondsbetween0–86400.
Accounting EnableordisableRADIUSaccounting.
AccountingPort Whenaccountingisenabled(above),settheUDPportusedintheaccountingprotocoloftheRADIUSserver.Valuemustbebetween1–65535.
62
IV-3-4-2. InternalServer
Theaccesspointfeaturesabuilt-inRADIUSserverwhichcanbeconfiguredasshownbelow
TousetheInternalRadiusServerasanadditionalauthentication,configurethe“AuthenticationMethod”in“WirelessSettings/Security”to“IEEE802.1x/EAP”. Leave“AdditionalAuthentication”setto“Noadditionalauthentication”.Click“Apply”tosavesettings.(Exampleimagebelow)
Next,Under“Radius/RadiusSettings”,Select“Internal”forRadiusType. Click“Apply”tosavesettings. (Exampleimagebelow)
Under“Radius/InternalServer”,checkthe“Enable”boxnextto“InternalServer”. Select“PEAP(MS-PEAP)”for“EAPInternalAuthentication”. Enternumbersor
63
charactersinthefield“SharedSecret”. Set“Termination-Action”optionto“Reauthentication(Radius-Request).” Click“Apply”tosavechanges.(Exampleimagebelow)
DothefollowingtoaddRadiusUserNamesandconfigurepasswords. Under“Radius/RadiusAccounts”,entera“UserName”inthewindowandclick“Add”.(Exampleimagebelow)
64
Selectthe“UserName”fromthe“UserRegistrationList”andselect“Edit”.(Exampleimagebelow)
Enterapasswordfortheselected“User”. Click“Apply”tosavechanges.(Exampleimagebelow)
YouraccesspointisnowsetuptoauthenticateUserswiththeInternalRadiusServer.
65
WirelessClientConfigurationforRadiusConnectiononWindows7(Example)Goto“ControlPanel/NetworkandSharingCenter/ManageWirelessNetwork”.Click“Add”onthe“Managewirelessnetworksthseuse(WirelessConnection)”screen.Click“Manuallycreateanetworkprofile”.Enterthe“NetworkName”whichyouwanttoconnectto. TheNetworkNameistheSSIDfortheRadiusconnection. Intheexamplesabove,thenetworknameusedis“Internal-Radius”.Adjustthe“SecurityType”to“802.1x”. Click“Next”.Click“ChangeConnectionSettings”.Clickthe“Security”tabandthen“Settings”.Uncheck“Validateservercertificate”.Click“Configure”nextto“Securedpassword(EAP-MSCHAPv2)”.Uncheck“AutomaticallyusemyWindowsLogonnameandpassword”.Click“OK”tocloseallwindows.SelecttheRadiusNetworkandClick“Connect”.Youwillreceiveapopupmessagestating“Additionalinformationisneededtoconenct“.Clickonthemessagetocontinue.EntertheUsernameandpasswordyoucreatedinthe“WindowsSecurity”window.Click“OK”.YourconnectiontotheSSIDwithRadiusAuthenticationisnow“Connected”.
66
IV-3-4-3. RADIUSAccounts
TheinternalRADIUSservercanauthenticateupto256useraccounts.The“RADIUSAccounts”pageallowsyoutoconfigureandmanageusers. DothefollowingtoaddRadiusUserNamesandconfigurepasswords. Under“Radius/RadiusAccounts”,entera“UserName”inthewindowandclick“Add”. (Exampleimagebelow)
Selectthe“UserName”fromthe“UserRegistrationList”andselect“Edit”.(Exampleimagebelow)
67
Enterapasswordfortheselected“User”. Click“Apply”tosavechanges.(Exampleimagebelow)
IV-3-5.MACFilter
Macfilteringisasecurityfeaturethatcanhelptopreventunauthorizedusersfromconnectingtoyouraccesspoint.Thisfunctionallowsyoutodefinealistofnetworkdevicespermittedtoconnecttotheaccesspoint.DevicesareeachidentifiedbytheiruniqueMACaddress.IfadevicewhichisnotonthelistofpermittedMACaddressesattemptstoconnecttotheaccesspoint,itwillbedenied.
ToenableMACfiltering,goto“WirelessSettings”! “2.4GHz11bgn/5GHz11ac11an”!“Security”!“AdditionalAuthentication”andselect“MACFilter”(seeIV-3-1-3.&IV-3-2-3).
TheMACaddressfilteringtableisdisplayedbelow:
68
AddMACAddress EnteraMACaddressofcomputerornetwork
devicemanuallywithoutdashesorcolonse.g.forMACaddress‘aa-bb-cc-dd-ee-ff’enter‘aabbccddeeff’.
Add Click“Add”toaddtheMACaddresstotheMACaddressfilteringtable.
Reset Clearallfields.MACaddressentrieswillbelistedinthe“MACAddressFilteringTable”.Selectanentryusingthe“Select”checkbox.Select Deleteselectedorallentriesfromthetable.MACAddress TheMACaddressislistedhere.DeleteSelected DeletetheselectedMACaddressfromthe
list.DeleteAll DeleteallentriesfromtheMACaddress
filteringtable.Export Click“Export”tosaveMACaddressfilteringasa
filetoyourlocalcomputer.
69
IV-3-6.WMM
Wi-FiMultimedia(WMM)isaWi-FiAllianceinteroperabilitycertificationbasedontheIEEE802.11estandard,whichprovidesQualityofService(QoS)featurestoIEE802.11networks.WMMprioritizestrafficaccordingtofourcategories:background,besteffort,videoandvoice.
ConfiguringWMMconsistsofadjustingparametersonqueuesfordifferentcategoriesofwirelesstraffic.Trafficissenttothefollowingqueues:Background Low
PriorityHighthroughput,nontimesensitivebulkdatae.g.FTP
BestEffort MediumPriority
TraditionalIPdata,mediumthroughputanddelay.
Video HighPriority
Timesensitivevideodatawithminimumtimedelay.
Voice HighPriority
TimesensitivedatasuchasVoIPandstreamingmediawithminimumtimedelay.
70
Queuesautomaticallyprovideminimumtransmissiondelaysforvideo,voice,multimediaandcriticalapplications.Thevaluescanfurtherbeadjustedmanually:CWMin MinimumContentionWindow(milliseconds):
Thisvalueisinputtotheinitialrandombackoffwaittimealgorithmforretryofadataframetransmission.Thebackoffwaittimewillbegeneratedbetween0andthisvalue.Iftheframeisnotsent,therandombackoffvalueisdoubleduntilthevaluereachesthenumberdefinedbyCWMax(below).Validvaluesare1,3,7,15,31,63,127,255,511or1024.TheCWMinvaluemustbelowerthantheCWMaxvalue.Thecontentionwindowschemehelpstoavoidframecollisionsanddeterminepriorityofframetransmission.Ashorterwindowhasahigherprobability(priority)oftransmission.
CWMax MaximumContentionWindow(milliseconds):Thisvalueistheupperlimittorandombackoffvaluedoubling(seeabove).Validvaluesare1,3,7,15,31,63,127,255,511or1024.
AIFSN ArbitrationInter-FrameSpace(milliseconds):SpecifiesadditionaltimebetweenwhenachannelgoesidleandtheAP/clientsendsdataframes.TrafficwithalowerAIFSNvaluehasahigherpriority.
TxOP TransmissionOpportunity(milliseconds):ThemaximumintervaloftimeanAP/clientcantransmit.Thismakeschannelaccessmoreefficientlyprioritized.Avalueof0meansonlyoneframepertransmission.Agreatervalueeffectshigherpriority.
71
IV-3-7.Schedule
Scheduleallowsanadministratortosetspecifichoursofoperationofthewirelessaccesspoint. Thisfeatureisdesignedtoprovidewirelessserviceduringhoursofoperationanddisablesthewirelessaccesspointserviceduringoffhours. When“Enabled”,thewirelessaccesspointwilloperateinaccordancewiththespecifiedschedule.
Add/EditaschedulebyclickingtheAddorEditbutton. Theschedule/SettingsmenuwillallowyoutoscheduleoperationalhoursforeachSSIDforboththe2.4GHzand5GHzBands.
72
IV-3-8.TrafficShaping
TrafficShapingallowsanadministratortolimitthebandwidthavailabletoeachSSID. Providingavaluebetween0-1024Mbps.Avalueof“0”indicatesunlimitedbandwidth.
73
IV-4. Management
Screenshotsdisplayedareexamples.Theinformationshownonyourscreenwillvarydependingonyourconfiguration.
IV-4-1.Admin
Youcanchangethepasswordusedtologintothebrowser-basedconfigurationinterfacehere.Itisadvisedtodosoforsecuritypurposes.
Ifyouchangetheadministratorpassword,pleasemakeanoteofthenewpassword.Intheeventthatyouforgetthispasswordandareunabletologintothebrowserbasedconfigurationinterface,seesectionI-5.Resetforhowtoresettheaccesspoint.
74
AdministratorName
Settheaccesspoint’sadministratorname.Thisisusedtologintothebrowserbasedconfigurationinterface.
AdministratorPassword
Settheaccesspoint’sadministratorpassword.Thisisusedtologintothebrowserbasedconfigurationinterface.
ProductName Edittheproductnameaccordingtoyour
preference.Thisnameisusedforreferencepurposes.
ManagementProtocol
Check/unchecktheboxestoenable/disablespecifiedmanagementinterfaces(seebelow).WhenSNMPisenabled,completetheSNMPfieldsbelow.
LoginTimeout ChangetheLoginTimeoutfromthe5minutedefault.(Valuesinclude5,10,15,20and30minutes)
SNMPVersion SelectSNMPversionappropriateforyour
75
SNMPmanager.SNMPGetCommunity
EnteranSNMPGetCommunitynameforverificationwiththeSNMPmanagerforSNMP-GETrequests.
SNMPSetCommunity
EnteranSNMPSetCommunitynameforverificationwiththeSNMPmanagerforSNMP-SETrequests.
SNMPTrap EnableordisableSNMPTraptonotifySNMPmanagerofnetworkerrors.
SNMPTrapCommunity
EnteranSNMPTrapCommunitynameforverificationwiththeSNMPmanagerforSNMP-TRAPrequests.
SNMPTrapManager
SpecifytheIPaddressorsevername(maximum128characters)oftheSNMPmanager.
HTTPInternetbrowserHTTPprotocolmanagementinterfaceHTTPSInternetbrowserHTTPSprotocolmanagementinterfaceTELNETClientterminalwithtelnetprotocolmanagementinterfaceSSHClientterminalwithSSHprotocolversion1or2managementinterfaceSNMPNetworkmanagementprotocol.SNMPv1,v2&v3protocolsupported.SNMPv2canbeusedwithcommunitybasedauthentication.SNMPv3usesuser-basedsecuritymodel(UM)architecture.
76
IV-4-2.DateandTime
Youcanconfigurethetimezonesettingsofyouraccess
pointhere.Thedateandtimeofthedevicecanbeconfiguredmanuallyorcanbesynchronizedwithatimeserver.
LocalTime Settheaccesspoint’sdateandtimemanually
usingthedropdownmenus.AcquireCurrentTimefromyourPC
Click“AcquireCurrentTimefromYourPC”toentertherequiredvaluesautomaticallyaccordingtoyourcomputer’scurrenttimeanddate.
UseNTP TheaccesspointalsosupportsNTP(Network
TimeProtocol)forautomatictimeanddatesetup.
ServerName EnterthehostnameorIPaddressofthetimeserverifyouwish.(ex.“time.windows.com”)
UpdateInterval Specifyafrequency(inhours)fortheaccesspointtoupdate/synchronizewiththeNTPserver.
77
TimeZone Selectthetimezoneofyourcountry/region.If
yourcountry/regionisnotlisted,pleaseselectanothercountry/regionwhosetimezoneisthesameasyours.
78
IV-4-3.SyslogServer
Thesystemlogcanbesenttoaserver,attachedtoUSBstorageorsentviaemail.
SyslogServerSettingsTransferLogs Check/unchecktheboxtoenable/disablethe
useofasyslogserver,andenterahostname,domainorIPaddressfortheserver,consistingofupto128alphanumericcharacters.
CopyLogstoAttachedUSBDevice
Check/unchecktheboxtoenable/disablecopyinglogstoattachedUSBstorage.
SyslogEmailSettingsEmailLogs Check/unchecktheboxtoenable/disableemail
logs.Whenenabled,thelogwillbeemailedaccordingtothesettingsbelow.
EmailSubject Enterthesubjectlineoftheemailwhichwillbesentcontainingthelog.
SMTPServerAddress
SpecifytheSMTPserveraddressforthesenderemailaccount.
SMTPServerPort SpecifytheSMTPserverportforthesenderemailaccount.
SenderEmail Enterthesender’semailaddress.ReceiverEmail Specifytheemailrecipientofthelog.
79
Authentication Select“Disable”,“SSL”or“TLS”accordingtoyouremailauthentication.
Account Whenauthenticationisusedabove,entertheaccountname.
Password Whenauthenticationisusedabove,enterthepassword.
IV-4-4.PingTest
Theaccesspointincludesabuilt-inpingtestfeature. PingisacomputernetworkadministrationutilityusedtotestwhetheraparticularhostisreachableacrossanIPnetworkandtomeasuretheround-triptimeforsentmessages.
IV-4-5.I’mHere
Theaccesspointfeaturesabuilt-inbuzzerwhichcansoundoncommandusingthe“I’mHere”page.Thisisusefulfornetworkadministratorsandengineersworkingincomplexnetworkenvironmentstolocatetheaccesspoint.
Thebuzzerisloud!DurationofSound Setthedurationforwhichthebuzzerwill
soundwhenthe“SoundBuzzer”buttonisclicked.
SoundBuzzer Activatethebuzzersoundfortheabovespecifieddurationoftime.
80
IV-4-6.TR-069
TR-069allowsanadministratortoestablishaconnectiontoanexistingACSSystem. ThesesettingsareuniquetoeachACSSystem.
81
IV-5. Advanced
Screenshotsdisplayedareexamples.Theinformationshownonyourscreenwillvarydependingonyourconfiguration.
IV-5-1.LEDSettings
Theaccesspoint’sLEDscanbemanuallyenabledordisabledaccordingtoyourpreference.
PowerLED Selectonoroff.DiagLED Selectonoroff.
82
IV-5-2.UpdateFirmware
The“Firmware”pageallowsyoutoupdatethesystemfirmwaretoamorerecentversion.Updatedfirmwareversionsoftenofferincreasedperformanceandsecurity,aswellasbugfixes.
Donotswitchoffordisconnecttheaccesspointduringafirmwareupgrade,asthiscoulddamagethedevice.
UpdateFirmwareFrom
SelecttouploadfirmwarefromyourlocalcomputerorfromanattachedUSBdevice.
FirmwareUpdateFile Click“Browse”toopenanewwindowtolocateandselectthefirmwarefileinyourcomputer.
Update Click“Update”touploadthespecifiedfirmwarefiletoyouraccesspoint.
83
IV-5-3.Save/RestoreSettings
Theaccesspoint’s“Save/RestoreSettings”pageenablesyoutosave/backuptheaccesspoint’scurrentsettingsasafiletoyourlocalcomputeroraUSBdeviceattachedtotheaccesspoint,andrestoretheaccesspointtopreviouslysavedsettings.
UsingDevice Selecttosavetheaccesspoint’ssettingstoyourlocalcomputerortoanattachedUSBdevice.
SaveSettings Click“Save”tosavesettingsandanewwindow
willopentospecifyalocationtosavethesettingsfile.Ifsavingsettingstoyourcomputer,youcanalsocheckthe“Encrypttheconfigurationfilewithapassword”boxandenterapasswordtoprotectthefileinthefieldunderneath,ifyouwish.
84
RestoreSettings Clickthebrowsebuttontofindapreviouslysavedsettingsfileandthenclick“Restore”toreplaceyourcurrentsettings.Ifyoursettingsfileisencryptedwithapassword,checkthe“Openfilewithpassword”boxandenterthepasswordinthefieldunderneath.
IV-5-4.FactoryDefault
Iftheaccesspointmalfunctionsorisnotresponding,thenitisrecommendedthatyourebootthedevice(seeIV-5.5)orresetthedevicebacktoitsfactorydefaultsettings.Youcanresettheaccesspointbacktoitsdefaultsettingsusingthisfeatureifthelocationoftheaccesspointisnotconvenienttoaccesstheresetbutton.
FactoryDefault Click“FactoryDefault”torestoresettingsto
thefactorydefault.Apop-upwindowwillappearandaskyoutoconfirm.
Afterresettingtofactorydefaults,pleasewaitfortheaccesspointtoresetandrestart.
85
IV-5-5.Reboot
Iftheaccesspointmalfunctionsorisnotresponding,thenitisrecommendedthatyourebootthedeviceorresettheaccesspointbacktoitsfactorydefaultsettings(seeIV-5-4).Youcanreboottheaccesspointremotelyusingthisfeature.
Reboot Click“Reboot”torebootthedevice.A
countdownwillindicatetheprogressofthereboot.
IV-5-6.Operation
Iftheaccesspointmalfunctionsorisnotresponding,thenitisrecommendedthatyourebootthedeviceorresettheaccesspointbacktoitsfactorydefaultsettings(seeIV-5-4).Youcanreboottheaccesspointremotelyusingthisfeature.
86
V. Appendix
V-1. ConfiguringyourIPaddressTheaccesspointusesthedefaultIPaddress192.168.2.2.Inordertoaccessthebrowserbasedconfigurationinterface,youneedtomodifytheIPaddressofyourcomputertobeinthesameIPaddresssubnete.g.192.168.2.x(x=3–254).TheprocedureformodifyingyourIPaddressvariesacrossdifferentoperatingsystems;pleasefollowtheguideappropriateforyouroperatingsystem.InthefollowingexamplesweusetheIPaddress192.168.2.10thoughyoucanuseanyIPaddressintherange192.168.2.x(x=3–254).
87
V-1-1. WindowsXP1. Clickthe“Start”button(itshouldbelocatedinthelower-leftcornerof
yourcomputer),thenclick“ControlPanel”.Double-clickthe“NetworkandInternetConnections”icon,click“NetworkConnections”,andthendouble-click“LocalAreaConnection”.The“LocalAreaConnectionStatus”windowwillthenappear,click“Properties”.
2. Select“UsethefollowingIPaddress”,theninputthefollowingvalues:
IPaddress:192.168.2.10SubnetMask:255.255.255.0Click‘OK’whenfinished.
88
89
V-1-2. WindowsVista1. Clickthe“Start”button(itshouldbelocatedinthelower-leftcornerof
yourcomputer),thenclick“ControlPanel”.Click“ViewNetworkStatusandTasks”,thenclick“ManageNetworkConnections”.Right-click“LocalAreaNetwork”,thenselect“Properties”.The“LocalAreaConnectionProperties”windowwillthenappear,select“InternetProtocolVersion4(TCP/IPv4)”,andthenclick“Properties”.
2. Select“UsethefollowingIPaddress”,theninputthefollowingvalues:
IPaddress:192.168.2.10SubnetMask:255.255.255.0Click‘OK’whenfinished.
90
91
V-1-3. Windows71. Clickthe“Start”button(itshouldbelocatedinthelower-leftcornerof
yourcomputer),thenclick“ControlPanel”.
2. Under“NetworkandInternet”click“Viewnetworkstatusandtasks”.
3. Click“LocalAreaConnection”.
92
4. Click“Properties”.
93
5. Select“InternetProtocolVersion4(TCP/IPv4)andthenclick“Properties”.
6. Select“UsethefollowingIPaddress”,theninputthefollowingvalues:
IPaddress:192.168.2.10SubnetMask:255.255.255.0Click‘OK’whenfinished.
94
95
V-1-4. Windows81. FromtheWindows8Startscreen,youneedtoswitchtodesktopmode.
Moveyourcursertothebottomleftofthescreenandclick.
2. Indesktopmode,clicktheFileExplorericoninthebottomleftofthe
screen,asshownbelow.
96
3. Rightclick“Network”andthenselect“Properties”.
4. Inthewindowthatopens,select“Changeadaptersettings”fromtheleft
side.
97
5.
6. Chooseyourconnectionandrightclick,thenselect“Properties”.
98
7. Select“InternetProtocolVersion4(TCP/IPv4)andthenclick“Properties”.
8. Select“UsethefollowingIPaddress”,theninputthefollowingvalues:
IPaddress:192.168.2.10SubnetMask:255.255.255.0Click‘OK’whenfinished.
99
IV-1-5.Mac1. HaveyourMacintoshcomputeroperateasusual,andclickon“System
Preferences”
2. InSystemPreferences,clickon“Network”.
3. Clickon“Ethernet”intheleftpanel.
4. Openthedrop-downmenulabeled“ConfigureIPv4”andselect
“Manually”.
100
5. EntertheIPaddress192.168.2.10andsubnetmask255.255.255.0.Click
on“Apply”tosavethechanges.
101
V-1-6. GlossaryDefaultGateway(Accesspoint):Everynon-accesspointIPdeviceneedstoconfigureadefaultgateway’sIPaddress.WhenthedevicesendsoutanIPpacket,ifthedestinationisnotonthesamenetwork,thedevicehastosendthepackettoitsdefaultgateway,whichwillthensenditouttowardsthedestination.DHCP:DynamicHostConfigurationProtocol.ThisprotocolautomaticallygiveseverycomputeronyourhomenetworkanIPaddress.DNSServerIPAddress:DNSstandsforDomainNameSystem,whichallowsInternetserverstohaveadomainname(suchaswww.Broadbandaccesspoint.com)andoneormoreIPaddresses(suchas192.34.45.8).ADNSserverkeepsadatabaseofInternetserversandtheirrespectivedomainnamesandIPaddresses,sothatwhenadomainnameisrequested(asintyping"Broadbandaccesspoint.com"intoyourInternetbrowser),theuserissenttotheproperIPaddress.TheDNSserverIPaddressusedbythecomputersonyourhomenetworkisthelocationoftheDNSserveryourISPhasassignedtoyou. DSLModem:DSLstandsforDigitalSubscriberLine.ADSLmodemusesyourexistingphonelinestotransmitdataathighspeeds. Ethernet:Astandardforcomputernetworks.Ethernetnetworksareconnectedbyspecialcablesandhubs,andmovedataaroundatupto10/100millionbitspersecond(Mbps).IPAddressandNetwork(Subnet)Mask:IPstandsforInternetProtocol.AnIPaddressconsistsofaseriesoffournumbersseparatedbyperiodsthatidentifiesasingle,uniqueInternetcomputerhostinanIPnetwork.Example:192.168.2.1.Itconsistsof2portions:theIPnetworkaddress,andthehostidentifier.TheIPaddressisa32-bitbinarypattern,whichcanberepresentedasfourcascadeddecimalnumbersseparatedby“.”:aaa.aaa.aaa.aaa,whereeach“aaa”canbeanythingfrom000to255,orasfourcascadedbinarynumbersseparatedby“.”:bbbbbbbb.bbbbbbbb.bbbbbbbb.bbbbbbbb,whereeach“b”caneitherbe0or1.
102
Anetworkmaskisalsoa32-bitbinarypattern,andconsistsofconsecutiveleading1’sfollowedbyconsecutivetrailing0’s,suchas11111111.11111111.11111111.00000000.Thereforesometimesanetworkmaskcanalsobedescribedsimplyas“x”numberofleading1’s.Whenbotharerepresentedsidebysideintheirbinaryforms,allbitsintheIPaddressthatcorrespondto1’sinthenetworkmaskbecomepartoftheIPnetworkaddress,andtheremainingbitscorrespondtothehostID. Forexample,iftheIPaddressforadeviceis,initsbinaryform,11011001.10110000.10010000.00000111,andifitsnetworkmaskis,11111111.11111111.11110000.00000000Itmeansthedevice’snetworkaddressis11011001.10110000.10010000.00000000,anditshostIDis,00000000.00000000.00000000.00000111.ThisisaconvenientandefficientmethodforaccesspointstorouteIPpacketstotheirdestination.ISPGatewayAddress:(seeISPfordefinition).TheISPGatewayAddressisanIPaddressfortheInternetaccesspointlocatedattheISP'soffice.ISP:InternetServiceProvider.AnISPisabusinessthatprovidesconnectivitytotheInternetforindividualsandotherbusinessesororganizations.LAN:LocalAreaNetwork.ALANisagroupofcomputersanddevicesconnectedtogetherinarelativelysmallarea(suchasahouseoranoffice).YourhomenetworkisconsideredaLAN.MACAddress:MACstandsforMediaAccessControl.AMACaddressisthehardwareaddressofadeviceconnectedtoanetwork.TheMACaddressisauniqueidentifierforadevicewithanEthernetinterface.Itiscomprisedoftwoparts:3bytesofdatathatcorrespondstotheManufacturerID(uniqueforeachmanufacturer),plus3bytesthatareoftenusedastheproduct’sserialnumber.NAT:NetworkAddressTranslation.ThisprocessallowsallofthecomputersonyourhomenetworktouseoneIPaddress.Usingthebroadbandaccesspoint’sNATcapability,youcanaccesstheInternetfromanycomputeronyourhomenetworkwithouthavingtopurchasemoreIPaddressesfromyourISP.
103
Port:NetworkClients(LANPC)usesportnumberstodistinguishonenetworkapplication/protocoloveranother.Belowisalistofcommonapplicationsandprotocol/portnumbers:Application ProtocolPortNumberTelnet TCP 23FTP TCP 21SMTP TCP 25POP3 TCP 110H.323 TCP 1720SNMP UCP 161SNMPTrap UDP 162HTTP TCP 80PPTP TCP 1723PCAnywhereTCP 5631PCAnywhereUDP 5632Accesspoint:AnaccesspointisanintelligentnetworkdevicethatforwardspacketsbetweendifferentnetworksbasedonnetworklayeraddressinformationsuchasIPaddresses.SubnetMask:Asubnetmask,whichmaybeapartoftheTCP/IPinformationprovidedbyyourISP,isasetoffournumbers(e.g.255.255.255.0)configuredlikeanIPaddress.ItisusedtocreateIPaddressnumbersusedonlywithinaparticularnetwork(asopposedtovalidIPaddressnumbersrecognizedbytheInternet,whichmustbeassignedbyInterNIC). TCP/IP,UDP:TransmissionControlProtocol/InternetProtocol(TCP/IP)andUnreliableDatagramProtocol(UDP).TCP/IPisthestandardprotocolfordatatransmissionovertheInternet.BothTCPandUDParetransportlayerprotocol.TCPperformspropererrordetectionanderrorrecovery,andthusisreliable.UDPontheotherhandisnotreliable.TheybothrunontopoftheIP(InternetProtocol),anetworklayerprotocol.WAN:WideAreaNetwork.Anetworkthatconnectscomputerslocatedingeographicallyseparateareas(e.g.differentbuildings,cities,countries).TheInternetisawideareanetwork.
104
Web-basedmanagementGraphicalUserInterface(GUI):Manydevicessupportagraphicaluserinterfacethatisbasedonthewebbrowser.ThismeanstheusercanusethefamiliarNetscapeorMicrosoftInternetExplorertoControl/configureormonitorthedevicebeingmanaged.