D-Link DAP-3520 - AirPremier N Dual Band Exterior PoE Access Point, User Manual

Page 1: ......

Page 2: ...rademarks of D Link Corporation or its subsidiaries in the United States or other countries All other company or product names mentioned herein are trademarks or registered trademarks of their respective companies Copyright 2009 by D Link Systems Inc All rights reserved This publication may not be reproduced in whole or in part without prior expressed written permission from D Link Systems Inc Rev...

Page 3: ...ode 17 WEP Encryption 20 WPA Personal Authentication 21 WPA Enterprise Authentication 22 LAN 23 Advanced Settings 24 Performance 24 Multi SSID 26 VLAN 29 Port List 30 Add Edit VLAN 31 PVID Setting 32 Intrusion 33 Schedule 34 QoS 35 DHCP Server 37 Dynamic Pool Settings 37 Static Pool Setting 39 Current IP Mapping List 41 Filters 42 Wireless MAC ACL 42 WLAN Partition 43 Status 44 Device Information ...

Page 4: ...tings 56 SNMP Settings 57 Ping Control Setting 58 Firmware and SSL Certification Upload 59 Configuration File 60 Time and Date 61 System 62 System Settings 62 Help 63 Troubleshooting 64 Technical Specifications 67 Warranty 69 Technical Support 75 Registration 76 ...

Page 5: ...ent voltage rating than the one included with the access point will cause damage and void the warranty for this product Package Contents D Link DAP 3520 Access Point Mounting Plate Power Adapter with Power Cord Power over Ethernet Base Unit 4M Ethernet Cable Grounding Wire CD ROM Screws ...

Page 6: ...dows Macintosh or Linux based operating system An installed Ethernet adapter Browser Requirements Internet Explorer 7 0 or later Firefox 3 0 or later Chrome 1 0 154 36 or later Windows Users Make sure you have the latest version of Java installed Visit www java com to download the latest version CD Installation Wizard Requirements Computer with the following Windows XP with Service Pack 2 or Vista...

Page 7: ...th PoE Power over Ethernet With PoE the DAP 3520 shares power and data over the CAT5 cable making the setup of your network less expensive and more convenient An ideal solution for quickly creating and extending a wireless local area network WLAN in offices or other workplaces trade shows and special events the DAP 3520 provides data transfer rates up to 300Mbps The 802 11n standard is backwards c...

Page 8: ...Protected Access to provide a much higher level of security for your data and communications AP Manager II Management Software The real time display of the network s topology and AP s information makes network configuration and management quick and simple SNMP for Management The DAP 3520 is not just fast but also supports SNMP v 3 for better network management Superior wireless AP manager software...

Page 9: ...s Point AP Create a wireless LAN WDS with AP Wirelessly connect multiple networks while still functioning as a wireless AP WDS Wirelessly connect multiple networks See the diagram below Wireless Client AP acts as a wireless network adapter for your Ethernet enabled device Example of a typical setup using WDS mode ...

Page 10: ...Connect one end of an Ethernet cable included with your package to the LAN port on the DAP 3520 and the other end of the Ethernet cable to either your computer or to your PoE switch The AP can be powered on by a PoE switch or by the power adapter shipped with the AP ...

Page 11: ... The device is powering off Red Blinking Red The device is booting up LAN Green Solid Green The link is up Blinking Green Data is being transmitted Light Off The link is down WLAN Green Solid Green Wireless is ready Blinking Green Data is being transmitted Light Off Wireless is off Hardware Overview Connections ...

Page 12: ...roxy server function To disable this function go to Control Panel Internet Options Connections LAN Settings and uncheck the enable box Click OK Configuration This section will show you how to configure your D Link wireless access point using the web based configuration utility If you would like to use the AP Manager II software please refer to the documentation located on the D Link CD Web based C...

Page 13: ...ake sure that the IP addresses of the DAP 3520 and your computer are in the same subnet After the connection is established you will see the user identification window as shown Note If you have changed the default IP address assigned to the DAP 3520 make sure to enter the correct IP address Type admin in the User Name field Leave the Password field blank Click the Login button ...

Page 14: ...ing into the DAP 3520 the following screen will appear When making changes on most of the configuration screens in this section use the Apply button at the bottom of each screen to save your configuration changes Click the Apply button to configure changes ...

Page 15: ...cters and is case sensitive SSID Visibility Select Enable to broadcast the SSID across the network thus making it visible to all network users Select Disable to hide the SSID from wireless users Auto Channel Selection Enabling this feature automatically selects the channel that provides the best wireless performance Enable is set by default The channel selection process only occurs when the AP is ...

Page 16: ... the drop down menu to choose Open System Shared Key WPA Personal or WPA Enterprise Select Open System to communicate the key across the network Select Shared Key to limit communication to only those devices that share the same WEP settings If multi SSID is enabled this option is not available Select WPA Personal to secure your network using a password and dynamic key changes No RADIUS server is r...

Page 17: ...to all network users Select Disable to hide the SSID from wireless users Auto Channel Selection Enabling this feature automatically selects the channel that will provide the best wireless performance This feature is not supported in WDS with AP mode The channel selection process only occurs when the AP is booting up Channel All devices on the network must share the same channel To change the chann...

Page 18: ...s Site Survey Site Survey will display available wireless networks Click on the Scan button to search for available wireless networks then click on the available network that you want to connect with Authentication Use the drop down menu to choose Open System Shared Key or WPA Personal Select Open System to communicate the key across the network Select Shared Key to limit communication to only tho...

Page 19: ... default setting is dlink The SSID can be easily changed to connect to an existing wireless network or to establish a new wireless network SSID Visibility Select Enable to broadcast the SSID across the network thus making it visible to all network users Select Disable to hide the SSID from wireless users Auto Channel Selection Enabling this feature automatically selects the channel that will provi...

Page 20: ...s Site Survey Site Survey will display available wireless networks Click on the Scan button to search for available wireless networks then click on the available network that you want to connect with Authentication Use the drop down menu to choose Open System Shared Key or WPA Personal Select Open System to communicate the key across the network Select Shared Key to limit communication to only tho...

Page 21: ...ork or to establish a new wireless network SSID Visibility This option is unavailable in wireless client mode Auto Channel Selection Enabling this feature automatically selects the channel that will provide the best wireless performance This feature is not supported in Wireless Client mode Channel The channel will be determined by the access point that the DAP 3520 is connected to Channel Width Al...

Page 22: ...allow you to clone a MAC address to the access point If you select Auto from the MAC Source drop down it will copy the first MAC address found in the LAN port Next to MAC Address enter the MAC address you would like to clone Authentication Use the drop down menu to choose Open System or WPA Personal Select Open System to communicate the key across the network Select WPA Personal to secure your net...

Page 23: ...llow you to clone a MAC address to the access point If you select Auto from the MAC Source drop down it will copy the first MAC address found in the LAN port Next to MAC Address enter the MAC address you would like to clone Authentication Use the drop down menu to choose Open System or WPA Personal Select Open System to communicate the key across the network Select WPA Personal to secure your netw...

Page 24: ...rom 0 127 Authentication Select either Open System or Shared Key Encryption Click to Enable or Disable Encryption Key Type Select HEX or ASCII Key Size Select 64 bit or 128 bit Encryption Key Index 1 4 Select the 1st through the 4th key to be the active key Key Input up to four keys for encryption You will select one of these keys in the Key Index drop down menu Network Key Enter the WEP encryptio...

Page 25: ...ithms AUTO WPA or WPA2 allows you to use both WPA and WPA2 Cipher Type When you select WPA Personal you must also select AUTO AES or TKIP from the drop down menu Group Key Update Inverval Select the interval during which the group key will be valid The default value of 1800 is recommended PassPhrase When you select WPA Personal please enter a PassPhrase in the corresponding field Confirm PassPhras...

Page 26: ... a cipher type from the drop down menu Auto AES or TKIP Group Key Update Inverval Select the interval during which the group key will be valid The default value of 1800 is recommended Network Access Protection Enable or disable Microsoft Network Access Protection RADIUS Server Enter the IP address of the primary RADIUS server You must also configure RADIUS port and RADIUS secret In addition to a p...

Page 27: ... a DHCP server in your network or if you wish to assign a static IP address to the DAP 3520 IP Address The default IP address is 192 168 0 50 Assign a static IP address that is within the IP address range of your network Subnet Mask Enter the subnet mask All devices in the network must share the same subnet mask Default Gateway Enter the IP address of the gateway in your network Get IP From Dynami...

Page 28: ...rate of wireless adapters on the wireless LAN The AP will adjust the base transfer rate depending on the base rate of the connected device If there are obstacles or interference the AP will step down the rate This option is enabled in Mixed 802 11g and 802 11b mode for 2 4 GHz and 802 11a only mode for 5 GHz The choices available are Best Up to 54 54 48 36 24 18 12 9 6 for 5 GHz and Best Up to 54 ...

Page 29: ... throughput However be aware that it can also increase the error rate in some installations due to increased sensitivity to radio frequency installations IGMP Snooping Select Enable or Disable Internet Group Management Protocol allows the AP to recognize IGMP queries and reports sent between routers and an IGMP host wireless STA When IGMP snooping is enabled the AP will forward multicast packets t...

Page 30: ...ifier SSID is the name designated for a specific wireless local area network WLAN The SSID s factory default setting is dlink The SSID can be easily changed to connect to an existing wireless network or to establish a new wireless network SSID Visibility Select Enable to broadcast the SSID across the network thus making it visible to all network users Select Disable to hide the SSID from wireless ...

Page 31: ... key to be set as the active key Network Key Enter a network key otherwise known as a password Confirm Key Retype the network key WPA Mode When you select either WPA Personal or WPA Enterprise you must also choose a WPA mode from the drop down menu AUTO WPA or WPA2 WPA2 Only or WPA Only WPA and WPA2 use different algorithms AUTO WPA or WPA2 allows you to use both WPA and WPA2 In addition you must ...

Page 32: ...he PassPhrase entered in the previous item in the corresponding field RADIUS Server When you select WPA Enterprise enter the IP address of the primary RADIUS server You must also configure RADIUS port and RADIUS secret In addition to a primary RADIUS server the AP allows you to set up an optional backup RADIUS server RADIUS Port Enter the RADIUS port RADIUS Secret Enter the RADIUS secret ...

Page 33: ... and WDS connection can be assigned to VLANs as they are physical ports Any packet which enters the DAP 3520 without a VLAN tag will have a VLAN tag inserted with a PVID The VLAN List tab displays the current VLANs VLAN Status Use the radio button to toggle to Enable Next go to the Add Edit VLAN tab to add or modify an item on the VLAN List tab ...

Page 34: ...nfigure a port on the switch for handling VLAN tagged packets as described in the IEEE 802 1Q standard VLAN Status Use the radio button to toggle to Enable Next go to the Add Edit VLAN tab to add or modify an item on the VLAN List tab Port Name The name of the port is displayed in this column Tag VID The Tagged VID is displayed in this column Untag VID The Untagged VID is displayed in this column ...

Page 35: ...to configure VLANs Once you have made the desired changes click the Apply button to let your changes take effect VLAN Status Use the radio button to toggle to Enable VLAN ID VID Provide a number between 1 and 4094 for the Internal VLAN VLAN Name Enter the VLAN to add or modify ...

Page 36: ...he Port VLAN Identifier Auto Assign Status as well as to configure various types of PVID settings Click the Apply button to let your changes take effect VLAN Status Use the radio button to toggle to Enable PVID Auto Assign Status Use the radio button to toggle PVID auto assign status to Enable ...

Page 37: ...ces include All Valid Neighbor Rogue and New Detect Click this button to initiate a scan of the network The Wireless Intrusion Protection window is used to set APs as All Valid Neighborhood Rogue and New Click the Apply button to let your changes take effect ...

Page 38: ...ireless Schedule Select Enable or Disable from the drop down menu Name Enter a name for your schedule rule Day s Select All Week or Select Days s If Select Day s is selected check the specific days you want the rule to be effective on All Days s Check this box to select all days Start Time Enter the start time for the rule End Time Enter the end time for the rule Wireless Select Off and On ...

Page 39: ...that exhibit bulk transfer characteristics such as file transfers while leaving interactive traffic such as gaming or VoIP running at a normal priority Name Enter a name for the new QoS rule in the field provided Priority Use the drop down menu to select the desired priority Background BK Best Effort BE Video VI or Voice VO Quality of Service QoS enhances the experience of using a network by prior...

Page 40: ...ge set here Host 1 Port Range The rule applies to a flow of messages for which host 1 s port number is within the range set here when the Protocol is set to TCP UDP or Both Host 2 IP Range The rule applies to a flow of messages for which the other computer s IP address falls within the range set here Host 2 Port Range The rule applies to a flow of messages for which host 2 s port number is within ...

Page 41: ...HCP server IP Assigned From Input the first IP address available for assignment on your network The Range of Pool 1 254 Enter the number of IP addresses available for assignment IP addresses are increments of the IP address specified in the IP Assigned From field Subnet Mask All devices in the network must have the same subnet mask to communicate Enter the submask for the network here The DHCP add...

Page 42: ...s of a network computer that has a dynamically assigned IP address DNS Enter the IP address of the Domain Name System DNS server The DNS server translates domain names such as www dlink com into IP addresses Domain Name Enter the domain name of the network if applicable An example of a domain name is www dlink com Lease Time 60 31536000 sec The lease time is the period of time before the DHCP serv...

Page 43: ...t up The IP addresses assigned in the Static Pool list must NOT be in the same IP range as the Dynamic Pool After you have assigned a static IP address to a device via its MAC address click Apply the device will appear in the Assigned Static Pool at the bottom of the screen You can edit or delete the device in this list Assigned MAC Address Enter the MAC address of the device requesting associatio...

Page 44: ...INS is a system that determines the IP address of a network computer with a dynamically assigned IP address if applicable DNS Enter the Domain Name System DNS server address for the wireless network The DNS server translates domain names such as www dlink com into IP addresses Domain Name Specify the domain name for the network ...

Page 45: ...ng MAC Address The MAC address of a device on the network that is assigned an IP address from the DHCP dynamic pool Assigned IP Address The current corresponding DHCP assigned IP address of the device Lease Time The length of time that the dynamic IP address will be valid Current DHCP Static Pools These are the IP address pools of the DHCP server assigned through the static pool settings Host Name...

Page 46: ...ol List All other devices not on the list will be rejected Select Reject to reject the devices with MAC addresses on the Access Control List All other devices not on the list will be accepted MAC Address Enter each MAC address that you wish to include in your filter list and click Apply MAC Address List When you enter a MAC address it appears in this list Highlight a MAC address and click Delete t...

Page 47: ...eless devices can still send data to the Ethernet Internal Station Connection The default value is Enable which allows stations to inter communicate by connecting to a target AP When disabled wireless stations cannot exchange data through the AP Guest mode is for creating a hotspot Clients connecting to this SSID will not be able to see other wireless devices on this wireless network They will onl...

Page 48: ... Link DAP 3520 User Manual Status Device Information This read only window displays the configuration settings of the DAP 3520 including the firmware version and the device s MAC address Device Information ...

Page 49: ...formation is available for each client communicating with the DAP 3520 SSID Displays the SSID of the client MAC Displays the MAC address of the client Band Displays the wireless band that the client is connected to Authentication Displays the type of authentication being used Signal Displays the client s signal strength Power Saving Mode Displays the status of the power saving feature ...

Page 50: ...onnected to the DAP 3520 The following information is available for each client communicating with the DAP 3520 Name Displays the name of the client MAC Displays the MAC address of the client Authentication Displays the type of authentication being used Signal Displays the WDS link signal strength Status Displays the status of the power saving feature ...

Page 51: ...47 D Link DAP 3520 User Manual Stats Ethernet Traffic Statistics This page displays transmitted and received count statistics for packets and bytes Ethernet ...

Page 52: ...48 D Link DAP 3520 User Manual WLAN WLAN Traffic Statistics This page displays wireless network statistics for data throughput transmitted and received frames and frame errors ...

Page 53: ... system and network messages including a time stamp and message type The log information includes but is not limited to the following items cold start AP upgrading firmware client associate and disassociate with AP and web login The web page holds up to 500 logs Log View Log ...

Page 54: ...om Email Address Enter the sender s e mail address This field does not require a valid e mail address However if your e mail client is filtering spam make sure you allow this address to be received To Email Address Enter the e mail address you want to send alerts to This address must correspond with the SMTP server configured above Email Server Address Enter the IP address of the server you would ...

Page 55: ...Retype the password for your e mail account Schedule Use the drop down menu to select the number of hours before mail will be sent to the server For example if a value of 2 is selected mail will be sent to the server every two hours However if the log entry is full between 0 and 2 hours mail will also be sent to the server and then the log entry will be automatically cleared ...

Page 56: ...Link DAP 3520 User Manual Administrator Settings Check one or more of the six main categories to display the various hidden administrator parameters and settings displayed on the next five pages Maintenance ...

Page 57: ... provided and then enter the specific VLAN ID that the administrator will be allowed to log in from Limit Administrator IP Check to enable the Limit Administrator IP address IP Range Enter the IP address range that the administrator will be allowed to log in from and then click the Add button ...

Page 58: ...ttings Each of the six main categories display various hidden administrator parameters and settings System Name The name of the device The default name is D Link DAP 3520 Location The physical location of the device e g office System Name Settings ...

Page 59: ...er name The default is admin Old Password When changing your password enter the old password here New Password When changing your password enter the new password here The password is case sensitive A is a different character than a The length should be between 0 and 12 characters Confirm Password Enter the new password a second time for confirmation purposes ...

Page 60: ...es display various hidden administrator parameters and settings Status Status is enabled by default Uncheck the box to disable the console Console Protocol Select the type of protocol you would like to use Telnet or SSH Timeout Set to 1 Min 3 Mins 5 Mins 10 Mins 15 Mins or Never ...

Page 61: ...gories display various hidden administrator parameters and settings Status Check the box to enable the SNMP functions This is enabled by default Public Community String Enter the public SNMP community string Private Community String Enter the private SNMP community string ...

Page 62: ...58 D Link DAP 3520 User Manual Ping Control Setting Each of the six main categories display various hidden administrator parameters and settings Status Check the box to enable Ping control ...

Page 63: ...rthe DAP 3520 from http support dlink com to your local computer use the Browse button to locate the firmware file on your computer Click Upload to update the firmware version Please do not turn the power off while upgrading Upload SSL Certification From Local Hard Drive Click Browse to locate the SSL Certification file on your local computer After selecting and opening the file click Upload to up...

Page 64: ...ing the file click Upload to apply the configuration settings to the DAP 3520 Download Configuration File Click Download to save the current DAP 3520 configuration to your local computer Note that if you save one configuration with the administrator s password now after resetting your DAP 3520 and then updating to this saved configuration file the password will be gone ...

Page 65: ...he correct Daylight Saving offset Daylight Saving Dates Use the drop down menu to select the correct Daylight Saving offset Enable NTP Server Check to enable the AP to get system time from an NTP server NTP Server Enter the NTP server IP address Set the Date and Time Manually You can either manually set the time for your AP here or you can click the Copy Your Computer s Time Settings button to cop...

Page 66: ...k DAP 3520 User Manual System Restart the Device Click Restart to restart the DAP 3520 Restore to Factory Default Settings Click Restore to restore the DAP 3520 back to factory default settings System Settings ...

Page 67: ...63 D Link DAP 3520 User Manual Help Help Scroll down the Help page for topics and explanations ...

Page 68: ...curely inserted Check if the Ethernet adapter is working properly Please see item 3 of this Troubleshooting section to check that the drivers for the network adapters are loaded properly Check if the IP address is in the same range and subnet as the DAP 3520 Note The default IP address of the DAP 3520 is 192 168 0 50 All the computers on the network must have a unique IP address in the same range ...

Page 69: ...ge as the access point and gateway Since the DAP 3520 has an IP address of 192 168 0 50 wireless adapters must have an IP address in the same range e g 192 168 0 x Each device must have a unique IP address there may be no two devices with the same IP address The subnet mask must be the same for all the computers on the network To check the IP address assigned to the wireless adapter double click t...

Page 70: ...nabled encryption on the DAP 3520 you must also enable encryption on all wireless clients in order to establish a wireless connection Make sure that the SSID on the AP and the wireless client are exactly the same If they are not wireless connection cannot be established Move the DAP 3520 and the wireless client into the same room and then test the wireless connection Disable all security settings ...

Page 71: ...802 3af Network Management Web Browser interface HTTP Secure HTTP HTTPS AP Manager II SNMP Support D View Module Private MIB Command Line Interface Telnet Secure SSH Telnet Data Rates For 802 11a 54 48 36 24 18 12 9 and 6 Mbps For 802 11b 11 5 5 2 and 1 Mbps For 802 11g 54 48 36 24 18 12 9 and 6 Mbps For 802 11n draft HT20 HT40 144 4 300 130 270 117 243 104 216 78 162 66 135 58 5 121 5 52 108 39 8...

Page 72: ...ximum Transmit Output Power 17 dBm 2 4 GHz 16 dBm 5 GHz Maximum Effective Isotropic Radiated Power EIRP 28dBm 2 4 GHz 29dBm 5 GHz LEDs Power LAN WLAN Temperature Operating 20 C to 60 C Storing 20 C to 65 C Humidity Operating 10 90 non condensing Storing 5 95 non condensing Certifications FCC Class B CE UL 60950 IC C Tick CSA Wi Fi Ingress Protection Rating IP65 Weight 1 58 lbs 717g Dimensions L 19...

Page 73: ...d by D Link at an Authorized D Link Service Office The replacement hardware need not be new or have an identical make model or part D Link may at its option replace the defective Hardware or any part thereof with any reconditioned product that D Link reasonably determines is substantially equivalent or superior in all material respects to the defective Hardware Repaired or replacement hardware wil...

Page 74: ...product purchased through the inventory clearance or liquidation sale or other sales in which D Link the sellers or the liquidators expressly disclaim their warranty obligation pertaining to the product and in that case the product is being sold As Is without any warranty whatsoever including without limitation the Limited Warranty as described herein notwithstanding anything stated herein to the ...

Page 75: ...tion lack of reasonable care repair or service in any way that is not contemplated in the documentation for the product or if the model or serial number has been altered tampered with defaced or removed Initial installation installation and removal of the product for repair and shipping costs Operational adjustments covered in the operating manual for the product and normal maintenance Damage that...

Page 76: ...S AND REMEDIES ARE EXCLUSIVE AND ARE IN LIEU OF ANY OTHER WARRANTIES OR REMEDIES EXPRESS IMPLIED OR STATUTORY Governing Law This Limited Warranty shall be governed by the laws of the State of California Some states do not allow exclusion or limitation of incidental or consequential damages or limitations on how long an implied warranty lasts so the foregoing limitations and exclusions may not appl...

Page 77: ...p FCC Caution Any changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate this equipment This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference and 2 this device must accept any interference received including interference that...

Page 78: ...that may cause undesired operation IMPORTANT NOTE Radiation Exposure Statement This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment This equipment should be installed and operated with minimum distance 20cm between the radiator your body This device has been designed to operate with an antenna having a maximum gain of 10dBi Antenna having a higher gai...

Page 79: ...l support through our website or by phone Tech Support for customers within the United States D Link Technical Support over the Telephone 877 354 6555 D Link Technical Support over the Internet http support dlink com Tech Support for customers within Canada D Link Technical Support over the Telephone 877 354 6560 D Link Technical Support over the Internet http support dlink com ...

Page 80: ...76 D Link DAP 3520 User Manual Version 1 0 March 6 2009 Product registration is entirely voluntary and failure to complete or return this form will not diminish your warranty rights Registration ...