4IPNET EAP100, User Manual

Page 1: ...4ipnet EAP100 User s Manual V1 00 ...

Page 2: ...PNET INC does not assume any liability arising out the application or use of any products or software described herein Neither does it convey any license under its parent rights not the parent rights of others 4IPNET further reserves the right to make changes in any products described herein without notice The publication is subject to change without notice Trademarks 4IPNET 4ipnet is a registered...

Page 3: ...19 4 1 System Configuration 20 4 1 1 System Information 20 4 1 2 Network Settings 22 4 1 3 Management Services 23 4 2 AP 24 4 2 1 Virtual AP Overview 24 4 2 2 General Settings 26 4 2 3 VAP Configuration 27 4 2 4 Security Settings 28 4 2 5 Advanced Wireless Settings 30 4 2 6 Access Control Settings 32 4 3 WDS 34 4 3 1 WDS Link Overview 34 4 3 2 WDS Link Settings 35 4 4 Utilities 36 4 4 1 Change Pas...

Page 4: ... 2008 4IPNET INC ii 4ipnet EAP100 User s Manual 4 5 4 Event Log 44 4 6 Online Help 45 ...

Page 5: ...failover function This provides EAP100 with reliable connectivity Its metal case is IP50 anti dust compliant which means that EAP100 is well suited to WLAN deployment in industrial environments EAP100 can function in two modes Access Point AP mode and Wireless Distribution System WDS mode In the AP mode EAP100 supports up to eight Virtual Access Points VAPs and each VAP can define its own rule set...

Page 6: ...e ignored Note Contains related information that corresponds to a topic Indicates that clicking this button will save the changes you made but you must reboot the system upon the completion of all configuration settings for the changes to take effect Indicates that clicking this button on each and every configuration page will allow the changes you made on the current page to take effect immediate...

Page 7: ... Guide x 1 CD ROM x 1 Console Cable x 1 Ethernet Cable x 1 Power Adapter DC 12V x 1 5dBi Antenna x 2 Mounting Kit x 1 Ground Cable x 1 It is recommended to keep the original packing material for possible future shipment when repair or maintenance is required Any returned product should be packed in its original packaging to prevent damage during delivery ...

Page 8: ...DM 64 QAM 16 QAM QPSK BPSK Channels 1 USA Channel 1 11 2 Japan Channel 1 14 3 Europe Channel 1 13 Transmit Power 1 802 11g 16dBm 2 802 11b 20dBm Receiver Sensitivity 68dBm 54Mbps 87dBm 11Mbps Wireless Signal Management Number of ESSIDs Virtual APs 8 Number of associated clients per AP 32 Setting for maximum number of associated clients Network policy based on ESSID QoS WMM DiffServ TOS IEEE 802 1p...

Page 9: ...certification TKIP 802 11i WPA2 PSK CCMP AES 802 11i WPA2 802 1X certification CCMP AES Setting for TKIP CCMP AES key s refreshing period Hidden ESSID support MAC Address filtering MAC ACL MAC authentication with RADIUS servers Maximum number of registered RADIUS servers 2 Built in Servers Client Interfaces to Other Services DHCP client DNS client Syslog client RADIUS client SNMP v1 v2c read write...

Page 10: ...se T Ethernet with IEEE 802 3af PoE Console Port 1 x DB9 LED Indicators 1 Power 2 LAN 1 WLAN Environment Operation Temperature 0 40 C Storage Temperature 20 60 C Operation Humidity 10 80 Non condensing Storage Humidity 5 90 Non condensing Certifications FCC CE RoHS compliant Metal case compliant with IP50 Standard ...

Page 11: ...rts On the front panel there are one POWER socket one RESET button two PoE LAN ports and one CONSOLE port The antennas are installed on the rear panel Front Panel POWER SOCKET Attach the power adapter here RESET Button Press the button to restart the system LAN 1 LAN2 The LAN ports are for connection with wired networks CONSOLE Attach the serial cable here The administrator may also obtain IP addr...

Page 12: ...P100 supports 1 RF interface and 2 SMA connectors for antenna connection Top Panel LED status indication Power Green LED On indicates power on OFF indicates power off LAN1 LAN2 OFF indicates no connection ON indicates connection BLINKING indicates transmitting data WLAN Green LED ON indicates system ready ...

Page 13: ... your existing wired LAN network 3 There are two ways to supply power over to EAP100 1 Connect the DC power adapter to the EAP100 power socket 2 EAP100 LAN ports are capable of transmitting DC currents via its LAN1 or LAN2 PoE ports Connect an IEEE 802 3af compliant PSE device e g a PoE switch to the LAN1 or LAN2 port of EAP100 with the Ethernet cable Now the Hardware Installation is completed Ple...

Page 14: ... the administrator PC to the LAN1 or LAN2 port of EAP100 via an Ethernet cable Then set a static IP address on the same subnet mask as EAP100 in TCP IP of your PC such as the following example Please note that the IP address used shall not be duplicated with the IP address of other devices within the same network IP Address 192 168 1 100 Subnet Mask 255 255 255 0 Launch the web browser on your PC ...

Page 15: ...he Logout button at the upper right hand corner of the interface to return to the Administrator Login Page To logout simply click on the Logout button at the upper right hand corner of the interface to return to the Administrator Login Page For security concern it is strongly recommended to change the administrator s password upon the completion of all configuration settings ...

Page 16: ...stem may require a restart after clicking Apply When a restart message appears the system must be restarted for the settings to take effect or b click Save to save the changes but you must reboot the system upon the completion of all configuration settings for the changes to take effect When clicking Save the following message will appear Some modifications have been saved and will take effect aft...

Page 17: ...only 1 VAP are enabled Configure VAP profile settings a Select the VAP Config tab to configure the settings for each VAP b An administrator can enable or disable specific VAP from the drop down list box of Profile Name Check VAP statusΚ After finishing the above settings the status of enabled Virtual APs shall be reflected on the Virtual AP Overview page ...

Page 18: ...ty tab to configure your preferred security types 1 Choose WEP as its Security Type While WEP is selected provide the desired Authentication key length format index and values 2 Choose 802 1X as its Security Type While 802 1X authentication is selected provide the desired WEP key length and the corresponding settings of RADIUS server ...

Page 19: ...Type While WPA PSK is preferred provide the desired pre shared key and cipher type 4 Choose WPA Radius as its Security Type While WPA Radius is selected provide the cipher type and the corresponding settings of RADIUS server Step 5 Configure WDS Wireless Distribution System Settings ...

Page 20: ...epeat the above mentioned steps with the MAC Address of the primary WDS station for setting WDS link parameters of the peer AP s Step 5 CONT Check WDS Link Status Click on the Status button Select the WDS List tab Check the signal strength of WDS link s Κ Upon the completion of Step 4 there shall be SNR displayed on the WDS Link Overview page If the SNR is shown as N A check if the wiring is prope...

Page 21: ...us OPTION FUNCTION System Information Network Settings System Management Services Virtual AP Overview General Settings VAP Configuration Security Settings Advanced Wireless Settings AP Access Control Settings WDS Link Overview WDS WDS Link Settings Change Password Configuration Save Restore System Upgrade Utilities Reboot System Overview Associated Client Status WDS Link Status Status Event Log No...

Page 22: ...to have different values in each AP Name The system name used to identify this system Description Further information about this installation Location The geographic location Time Synchronize the system time either by using NTP server or by manual setup When NTP server is used the information of at least one NTP server must be provided If FQDN full qualified domain name is used as the IP address o...

Page 23: ...s chosen at least one NTP server s IP address should be provided It is recommended to provide the IP address of both NET Server 1 and 2 in case of any NTP service failure 2 Set Date Time By selecting Set Date Time the administrator can manually set the system date and time Unless the Internet connection is unavailable it is recommended to use NTP server for time synchronization ...

Page 24: ...r can set the parameters manually Enter the IP Address Netmask and Gateway provided by your ISP Primary and Secondary DNS Server If any host information is given in FQDN format full qualified domain name ensure at least one of these DNS Domain Name Service server IP is correct Layer 2 STP When the system is configured to bridge several networks WDS mode this STP Spanning Tree Protocol function mus...

Page 25: ...r can obtain EAP100 s system status Community String Specify the password for Read and Write Trap Enable or Disable the feature When enabled events on Cold Start Interface UP Down and Association Disassociation can be reported to an assigned management station with specified Server IP Address Syslog Configuration By enabling this service specify an external syslog server to accept syslog messages ...

Page 26: ... security settings etc Such VAP capability enables different levels of service to meet actual requirements 4 2 1 Virtual AP Overview An overall status is collected in this page including Enable Disable State Security Type MAC ACL state and Advanced Settings EAP100 has 8 VAPs each has its own settings In this table please click on the hyperlink for further configuration of each VAP respectively Sta...

Page 27: ...link showing security type connects to the screen of Security Settings MAC ACL The hyperlink showing Allow or Disable connects to the screen of Access Control Settings Advanced Settings The hyperlink of advanced settings connects to the screen of Advanced Wireless Settings ...

Page 28: ...Channel 1 11 is available in North America and Channel 1 13 in Europe or choose the default Auto Max Transmit Rate Select transmit rate from Auto 802 11b 802 11g or 802 11b 802 11g Transmit Power Select from the lowest to highest power level or choose Auto The RF settings in this page will be applied to all VAPs Under normal circumstances the available RF configurations are illustrated as below Mo...

Page 29: ...le or disable VAP function Profile Name The profile name of each VAP for identity management purpose ESSID ESSID Extended Service Set ID indicates a unique SSID used by a client device to associate with a specified VAP ESSID determines the service level assigned to a client VLAN ID EAP100 supports tagged VLANs virtual LANs To enable VLAN function each VAP must have a unique VLAN ID valid values ar...

Page 30: ...ncryption methods in each VAP profile Thus the administrator can depend on the need to provide different service levels to clients The security type includes None WEP 802 1X WPA PSK WPA RADIUS None No authentication required This is the default setting as shown in the following figure WEP Support key length of 64 128 152 bits ...

Page 31: ...9 4ipnet EAP100 User s Manual 802 1X Provide RADIUS authentication and enhanced WEP WPA PSK Provide shared key authentication in WPA data encryption WPA RADIUS Authenticate users by RADIUS and provide WPA data encryption ...

Page 32: ...100 or in areas where the clients are far apart and can detect only EAP100 and not each other Fragment Threshold Enter a value between 256 and 2346 The default is 2346 A packet size larger than this threshold will be fragmented sent in several pieces instead of one block before transmission A smaller value results in smaller packets but allows a larger number of packets in transmission A lower Fra...

Page 33: ...MM in this EAP100 You must enable WMM in the wireless adapter in your computer IAPP The default is Disable IAPP Inter Access Point Protocol is a protocol by which access points share information about the stations that are connected to them By enabling this function EAP100 will automatically broadcast information of associated wireless stations to its peer access points This will help wireless sta...

Page 34: ... the specified VAP Access Control Type The selected Access Control Type will be the activated policy while the rest will be omitted The following is a list of the supported methods for MAC ACL control 1 Disable No MAC address check required 2 Allow List Deny all except those in the Allow List When selecting Allow List all wireless connections to the specified VAP will be denied except the MAC addr...

Page 35: ...d in the Deny List denied MAC addresses The administrator can allow any denied MAC address to connect to the VAP temporarily by checking Enable 4 RADIUS ACL Authenticate incoming MAC addresses by RADIUS When selecting RADIUS ACL all incoming MAC addresses will be authenticated by RADIUS Please note that each VAP s MAC ACL and its security type showing on the Security Settings page share the same R...

Page 36: ...at this system 4 3 1 WDS Link Overview The figure provides an overall status of all WDS links Item Corresponding profiles of each WDS interface Status Enable or disable a WDS link MAC Address Remote peer s MAC address Security Choose from Disable or WEP for security type Delete Check the profile you want to remove and click Delete to remove it Edit Click Edit to modify the individual setting of ea...

Page 37: ... drop down list box for configuration WDS Settings Enable or disable the specified WDS link MAC Address of Remote AP For each WDS link type in the MAC address of the remote peer here Path Cost of STP The assigned weighted metric here will determine the best path for data flow Security Choose from WEP or None for security type None No encryption is required to establish this WDS link WEP Establish ...

Page 38: ... is strongly recommended to change the default administrator s password to a secure password Only alpha numeric characters pattern is allowed and it is strongly recommended to take a combination of both numeric and alphabetic characters The administrator can change the password of the system The login account for the administrator is admin and the default admin password of the system is admin The ...

Page 39: ...t settings take effect Backup Settings Click Save to save the current system configurations to a backup file on a local disk It is recommended to make a backup before any configuration changes are made Restore Settings Click Browse to select a configuration file to restore and then press Upload to proceed The configuration file will replace the active configuration file currently running on the sy...

Page 40: ...ation message appearing to notify the administrator to restart the system after a successful firmware upgrade Please restart the system after upgrading the firmware Note It is recommended to check the firmware version number before proceeding further Please make sure you have the correct firmware file Firmware upgrade may sometimes result in loss of some data Please ensure that all necessary setti...

Page 41: ...art the EAP100 safely The process shall take about three minutes Click Reboot to restart the system Please wait for the blinking timer to complete its countdown before accessing the system web management interface again Occasionally it is necessary to reboot EAP100 to ensure parameter changes being submitted ...

Page 42: ...EAP100 User s Manual 4 5 Status This section includes the following functions Overview Clients WDS List and Event Log 4 5 1 System Overview The System Overview page provides an overview of the system status for the administrator ...

Page 43: ...m has been in operation MAC Address The MAC address of LAN Interface IP Address The IP address of the LAN Interface LAN Interface Subnet Mask The Subnet Mask of the LAN Interface MAC Address The MAC address of RF Card Band The RF band b or g used Channel The channel specified RF Card Tx Power Transmit Power level of RF card BSSID Basic Service Set ID ESSID Extended Service Set ID Security Type Sec...

Page 44: ...ator can tune the corresponding parameters or investigate the settings of network devices to improve network communication performance Associated VAP The name of an associated VAP Virtual Access Point ESSID Extended Service Set ID MAC Address The MAC Address of associated clients SNR Signal to Noise Ratio Idle Time Time of no activity of associated clients in seconds Disconnect When clicking Kick ...

Page 45: ...such as Link Status MAC Address SNR dB Tx Rate Tx Count and Tx Errors Link Status Show the WDS link status such as Disconnected Disabled or Connected MAC Address The MAC Address of the WDS peer SNR Single to Noise Ratio Tx Rate The transmit rate Tx Count The number of Transmit Count Tx Errors The number of Transmit Errors ...

Page 46: ...the event happened Hostname Indicate which host records this event Note that all events in this page are local event so the hostname in this field are all the same However in remote syslog service this field will help the administrator identify which event is from this EAP100 Please refer to section 4 1 3 Management Services Process name Indicate the event generated by the running instance Descrip...

Page 47: ...EAP100 User s Manual 4 6 Online Help The Help button is at the upper right hand corner of the display screen Click Help for the Online Help window and then click the hyperlink of the relevant information required P N V10020080124 ...

Page 48: ...e the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interf...