Page 3
FCC NOTICE This device has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This device generates uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
Page 4
Declaration of Conformity Compex, Inc. declares the following: Product Name: Wireless Access Point with PoE Model No.: WPP543 conforms to the following Product Standards: This device complies with the Electromagnetic Compatibility Directive (89/336/EEC) issued by the Commission of the European Community. Compliance with this directive implies conformity to the following European Norms (in brackets are the equivalent international standards.) Electromagnetic Interference (Conduction and Radiation): EN 55022 (CISPR 22) Electromagnetic Immunity: EN 55024 (IEC61000-4-2, 3,4,5,6,8,11)
Table of Contents OVERVIEW THE PRODUCT .............. 7 Introduction ....................7 Features and Benefits................... 8 When to Use Which Mode................. 10 Access Point Mode................. 10 Access Point Client Mode ..............11 Wireless Routing Client Mode..............12 Gateway Mode..................13 Wireless Adapter Mode................15 Transparent Client Mode ...............
Page 6
Setup your WAN ..................66 Setup Telnet / SSH ..................74 Access the TELNET Command Line Interface........76 Access the Secure Shell Host Command Line Interface ....77 Set the WEB Mode ..................78 Setup SNMP....................79 Setup SNMP Trap..................80 Setup STP ......................
Page 7
Setup WEP ....................134 Setup WPA-Personal ................. 135 Setup 802.1x/RADIUS ................137 Setup WPA Enterprise ................139 CONFIGURE THE SECURITY FEATURES ........141 Use Packet Filtering................... 141 Configure Packet Filtering ..............141 Use URL Filtering..................144 Configure URL Filtering ................. 144 Configure the Firewall ................
Overview the Product Introduction The Wireless Access Point is a high-performance AP designed for enterprise and outdoor users. The access point is compatible with IEEE 802.11n (Draft 2.0) and supports high-speed data transmission of up to 300Mbps. This equips the access point with network robustness, stability and wider network coverage.
Features and Benefits • & • & Point-to-Point Point-to-MultiPoint communication between different buildings enables you to bridge wireless clients that are kilometres apart while unifying the networks. • • Virtual AP implements mSSID (Multi-SSID) This allows a single wireless card to be set up with multiple virtual AP connections with different SSIDs or BSSID (Basic Service Set Identifier) and security modes.
Page 10
• • The access point supports HTTPS (SSL) in addition to the standard HTTP. HTTPS (SSL) features additional authentication encryption for secure communication. • • Telnet allows a computer to remotely connect to the access point CLI (Command Line Interface) for control and monitoring.
When to Use Which Mode Access Point Mode The Access Point Mode is the default mode of the access point and enables the bridging of wireless clients to access the wired network infrastructure and also enables their communication with each other. In this example the wireless users are able to access the file server connected to the switch, through the access point in Access Point Mode.
Access Point Client Mode In Access Point Client Mode the device acts as a wireless client. When connected to an access point, it creates a network link between the Ethernet network connected at this client device, and the wireless Ethernet network connected at the access point. In this mode it can only connect with another access point.
Wireless Routing Client Mode In Wireless Routing Client Mode the Ethernet port of the access point may be used to connect with other devices on the network while Internet access would be provided through wireless communication with a wireless ISP. Page 12...
Gateway Mode In Gateway Mode, the access point supports several types of broadband connections in a wireless network after you have identified the type of broadband Internet access you are subscribed to. Page 13...
Page 15
Broadband Internet Access Type: Static IP Address Use Static IP Address if you have subscribed to a fixed IP address or to a range of fixed IP addresses from your ISP. Dynamic IP Address With Dynamic IP Address the access point requests for, and is automatically assigned an IP address by your ISP, for instance: •...
Wireless Adapter Mode In Wireless Adapter Mode, the access point can communicate wirelessly with another access point to perform transparent bridging between 2 networks, like in the Access Point Client Mode. In this mode, however, the wireless adapter connects to a single workstation only. No client software or drivers are required to use this mode.
Transparent Client Mode In Transparent Client Mode, the access point provides connection with an access point acting as the RootAP. This operation is designed for implementation Point-to-Point Point-to-Multipoint connections. Point-to-Point Point-to-MultiPoint An access point acts as Root AP and An access point acts as Root AP 1 other access point acts as and several other access point Transparent Client.
Page 18
Difference Between other client modes and Transparent Client Mode Other client modes Transparent Client Mode Connectivity with any standard Connectivity with RootAP-supported APs. APs. All devices connected to the Devices connected to the Ethernet Ethernet ports use a common ports flow through freely and MAC address for communications transparently without the MAC with the AP.
Repeater Mode The access point comes with a built-in Repeater Mode to extend the range, and substantially enhance the performance of the wireless network by allowing communications over much greater distances. In Repeater Mode, the access point acts as a relay for network signals on the network by regenerating the signals it receives, and retransmitting them to extend the range of the existing network infrastructure.
Panel Views and Description Features Status and Indications 1 POWER Steady Power is supplied to the device. No power is supplied to the device. 2 RESERVED Reserved for further use. 3 WAN Conn Flashing Data transmission at WAN connection. Wireless interface up rr 4 WLAN LED Steady eady for operation.
Install the Hardware This section will show you how to install the hardware of the access point. • Antenna Alignment The antenna alignment of the access point must first be considered to ensure that the signal is strong. • Installation Direction After considering the antenna alignment, the direction in which the access point is facing must be considered to ensure that the signal is actually being directed to the receiving end.
Antenna Alignment The physical environment of the antenna must be examined when aligning the antenna. Obstructions, available mounting locations, and other factors must be considered. Many objects such as forests, buildings, and hills, can obstruct the antenna, reducing the signal strength.
Installation Direction The directional antenna radiates the signal towards the front of the unit. The unit should be installed in a position whereby the front of the unit faces the direction you wish to send the signal to. Therefore the direction you wish to send the signal to has to be considered before going on to the next step of starting to set up the access point.
Setup Requirements • CAT5/5e Networking Cable. • At least 1 computer installed with a web browser and a wired or wireless network interface adapter. • All network nodes installed with TCP/IP and properly configured IP address parameters. Setting Up You can install your access point on a pole. The mounting method will be described as shown below.
Mount the Unit on a Pole Unpack the 2 cable ties from the box. Loop each cable tie through the mounting bracket hole at the top and bottom. Wrap them round the pole and tighten the cable ties to secure the unit to the pole. Connect one end of an RJ45 Ethernet cable to the LAN OUT port of the Injector and the other end to LAN of the access point.
Page 26
Connect the RJ45 Ethernet cable attached to the PoE Injector to a network device, such as to a switch or to the PC you will use to configure the access point. PoE power input: Passive PoE (range 12V – 24V DC) Connect the power adapter in the PoE kit to the main electrical supply and the power plug into the socket of the injector.
Configure the IP Address After setting up the hardware you need to assign an IP address to your PC so that it is in the same subnet as the access point. For Windows 95/98/98SE/ME/NT From your desktop, right-click the Network Neighborhood icon and select Properties. Select the network adapter that you are using, then right-click and select Properties.
Page 28
To verify that the IP address has been correctly assigned to your PC, go to the Start menu, select Run, and enter the command: winipcfg. Select the Ethernet adapter from the drop-down list and click OK. Your PC is now ready to communicate with the access point. Page 27...
For Windows XP/2000 Go to your desktop, right-click on the My Network Places icon and select Properties. Right-click the network adapter icon and select Properties. Highlight Internet Protocol (TCP/IP) and click on the Properties button. Select the Use the following IP address radio button.
Page 30
To verify that the IP address has been correctly assigned to your PC, go to the Start menu, Accessories, select Command Prompt, and type the command: ipconfig/all Your PC is now ready to communicate with your access point. Page 29...
Access the Web Interface Access with uConfig The UConfig utility provides direct access to the web interface. This utility can be download from our website at www.compex.com.sg From the section, select to install the utility to your hard disk. After installation double-click on the icon and click on the button.
Page 32
Select the access point from the products list and click on the button. To retrieve and display the latest device(s) in the list, click on the button. Do not exit the uConfig program while accessing the web-based interface as this will disconnect you from the device. Click on the button.
Page 33
At the login page, press the button to enter the configuration page. The default password is: password You will then reach the home page of the access point web-based interface. Page 32...
Manual access with Internet Explorer Launch your Web browser and under the tab, select Open the tab and in the section disable all the option boxes. Click on the button to update the changes. Page 33...
Page 35
At the bar type in http://192.168.168.1 and press on your keyboard. At the login page, click on the Button. You will then reach the home page of the access point web interface. Page 34...
Perform Basic Configuration Setup Management Port At the Management Port Setup page, you may: • Set Ethernet Link Speed and duplex settings. • Automatically obtain IP address from DHCP server. The default IP 192.168.168.1 is used until a new IP is obtained. Access Point Clients also allows PCs connected to the Ethernet port to obtain IP from the DHCP server at the access point end network.
Page 37
Follow these steps to automatically obtain the IP address from DHCP server. Click on from from the menu. Select to Select to either and enter the parameters, if any. In the page, refer to the table below to replace the default settings of Access point with appropriate values to suit the needs of your network.
Page 38
If you choose to Use the following DNS server addresses. Click on the button to save your new parameters. This table describes the parameters that can be modified in the Management Port Setup page if you select to Use the following DNS server addresses.
Page 39
Follow these steps to manually define the IP address. Click from from menu. Select to In the page, refer to the table below to replace the default settings of Access point with appropriate values to suit the needs of your network. The parameters are the same in routing mode.
Page 40
This table describes the parameters that can be modified in the Management Port Setup page. Parameters Description IP Address When the DHCP server of the access point is enabled (unless you set a different DHCP Gateway IP Address), this LAN IP Address would be allocated as the Default Gateway of the DHCP client.
To Setup DHCP Server There are 3 DHCP Modes: • NONE By default, DHCP Mode is set to NONE. Leave the selection at this mode if you do not wish to use DHCP. • DHCP Server Select this mode to setup a DHCP server. •...
Page 42
The following will guide you to setup the DHCP Server. Click on from from the menu. , refer to the table below to set the appropriate values to suit the needs of your network. Click on the button. Page 41...
Page 43
This table describes the parameters that can be modified in DHCP Server Setup. Parameters Description The fields DHCP Start IP Address and DHCP End IP Address fields allow you to define the range of IP addresses from which the DHCP Server can assign an IP address to the LAN.
Page 44
DHCP Gateway Though the DHCP server usually also acts as the Address Default Gateway of the DHCP client, the access point allows you to define a different Gateway IP Address which will be allocated as the Default Gateway IP of the DHCP client. The DHCP client will thus receive its dynamic IP address from the access point but will access to the Internet or the other LAN through the...
Page 45
The following will guide you to setup the DHCP Relay. Click on from from the menu. , refer to the table below to set the appropriate values to suit the needs of your network. Click on the button. Page 44...
Page 46
This table describes the parameters that can be modified in DHCP Server Setup. Parameters Description DHCP Server IP This is the IP address of the DHCP server. DHCP Gateway IP Though the DHCP server usually also acts as the Default Gateway of the DHCP client, the access point allows you to define a different Gateway IP Address which will be allocated as the Default Gateway IP of the DHCP client.
View Active DHCP Leases Select from the menu. Go to the section and click on the button. The DHCP Active Leases table displays: • The Host Name of the DHCP client. • The IP Address allocated to the DHCP client. •...
Reserve IP Addresses for Predetermined DHCP Clients A reserved IP address is excluded from the pool of free IP addresses the DHCP server draws on for dynamic IP address allocation. For instance if you set up a publicly accessible FTP or HTTP server within your private LAN, while that server requires a fixed IP address you would still want the DHCP server to dynamically allocate IP addresses to the rest of the PCs on the LAN.
Page 49
Fill in: The host portion of the IP Address to be reserved. The Hardware Address, in pairs of two hexadecimal values. Press the button to effect your new entry. page refreshes to display the currently reserved IP addresses. Page 48...
Setup WLAN Configure the Basic Setup of the Wireless Mode Select from the menu and you will see the sub menus expanded under , select The default operating mode of the access point is the Access Point mode. To change the current mode of the access point click on select the , and click on the button to access...
Page 52
Step 3: Enter the parameters in their respective fields, click on the button and reboot your device to let your changes take effect. Note that the pages for the modes are different. Example: page for Example: page for Example: page for Page 51...
Page 53
WLAN Basic Setup Description page Parameters The Current Mode The default operating mode is the Access Point mode. Operating modes: • Access point • Client Mode • Wireless Routing Client • Gateway • Wireless Adapter • Transparent Client • Repeater You can toggle the modes by clicking on the button.
Page 54
Country Choose the Country where you are located. Channel This option allows you to select a frequency channel for the wireless communication. Default is SmartSelect. It automatically scans and set to the best channel to use during initial device power up. To use a specific channel, click the down arrow at the side-bar for a list of available channels.
Scan for Site Survey (Available in Client and Wireless Routing Client modes) In the page click on the button. provides a list of the neighbouring access points detected, the (channels), (Authentication), (Algorithm) used, and the strength of the received. Page 54...
Page 56
To connect the client to one of the access points detected, select the radio button corresponding to the access point you want to connect Click on the button to effect the change and return to the setup page. Click on the button to update the screen.
View Link Information (Available in Client and Wireless Routing Client modes) To view the connection status when the client is linked to another access point, click on the button. table displays the following data: Page 56...
Page 58
Parameters Viewable from Description Link Information page State Displays whether the State is Scanning or Associated, and MAC address of the access point to which the client is connected. Current Channel Channel presently being used for transmission. Tx Rate Rate of data transmission in Mbps. Signal Strength Intensity of the signal received, in percentage.
Scan for Channel Survey (Available in Access Point and Gateway modes) Channel Survey displays a list of all the channels supported by the access point, shows the relative interference of all the channels, and recommends the least congested channel. In the page, click on the button.
Page 60
To connect the client to one of the channels detected, select the corresponding radio button. Click on the button to effect the change and return to the setup page. Click on the button to update the screen. Page 59...
Page 61
Read-Only Parameters of All Description Channels Viewable from Channel Survey page Freq Frequency of the channel at which your access point is operating. Channel Channel of the access point being used for transmission depending on its origin of country. MyQuality Interference level of the respective channel with this AP.
Align the Antenna Antenna Alignment precisely aligns the antenna over long distances for higher signal strength to improve the connection between the access point and another access point. Select from the menu. You will see the sub-menus expanded under . Click on page can act as a diagnostic tool to check the communication with a remote device.
Page 63
NOTE If no MAC address is entered, the Antenna Alignment tool will make use of the SSID to align the antenna. Please ensure that the correct SSID is entered. If more than one access points share the same SSID, the access point with the strongest signal will be shown.
Configure the Advanced Setup of the Wireless Mode Select from the menu to expand four sub-menus. From here, select Enter the parameters in the page. Click on the button to update the changes. Page 63...
Page 65
Advanced Setup Parameters Description Amount of time between beacon transmissions. This tells the Beacon Interval client when to receive the beacon. A beacon is a guidance (Only in Access Point mode) signal sent by the access point to announce its presence to other devices in the network.
View the Statistics The Statistics feature reveals information on the wireless device connected to the WLAN. Select from the menu. The sub-menus under expand, select Wireless clients that are connected to the WLAN are shown in the WLAN Station List. Click on the button to get the latest information on the availability of wireless clients in the wireless network.
Setup your WAN (Available in Wireless Routing Client and Gateway modes) NOTE: Any changes to the WAN Setup will only take effect after rebooting. Setup your WAN to share Internet connection among the clients of the access point. Setup your WAN for cable internet whereby WAN IP address is dynamically assigned by ISP The access point is pre-configured to support this WAN type.
Page 68
Note: Additional configuration might be required before your ISP will allocate an IP address to the access point. Certain ISPs require authentication through a DHCP Client ID before releasing a public IP address to you. The access point uses the System Name in the System Identity as the DHCP Client ID.
Page 69
Setup your WAN for cable internet whereby fixed WAN IP address is assigned by ISP WAN Setup Parameters Example: • IP Address: 203.120.12.240 • Network Mask: 255.255.255.0 • Gateway IP Address: 203.120.12.2 Step 1: Step 2: Select WAN Type Static IP Address Apply Step 3: Fill in the information provided by your ISP in the...
Page 70
Setup your WAN for ADSL Internet using PPP over Ethernet If you subscribe to an ADSL service using PPP over Ethernet (PPPoE) authentication, you can set up your access point’s WAN type as follows. For example, you may configure an account whose username is ‘guest’...
Page 71
Step 3: Enter your account name assigned by your ISP (Example: guest) in the field for , followed by your account Select if you want your access point to always maintain a connection with the ISP. Otherwise select for the access point to connect to the ISP automatically when it receives Internet requests from the PCs in your network.
Page 72
You can limit the maximum size a packet can be in a network by setting (Maximum Transmissible Unit). Click the Button in has a range of 1 to 1492. Enter the and click Page 71...
Page 73
Setup your WAN for ADSL Internet using Point-to-Point Tunneling Protocol (PPTP) WAN Setup Parameters Example: • IP Address: 203.120.12.47 • Network Mask: 255.255.255.0 • VPN Server: 203.120.12.15 Step 1: CONFIGURATION WAN Setup Step 2: Access the page and select before clicking the button.
Page 74
Step 3: Fill in the information provided by your ISP in the , and fields, and click the button. Select under and click the button to effect the settings setting allows you to specify the value in seconds after the last Internet activity by which the access point will disconnect from the ISP.
Setup Telnet / SSH Telnet allows a computer to remotely connect to the access point CLI (Command Line Interface) for control and monitoring. SSH (Secure Shell Host) establishes a secure host connection to the access point CLI for control and monitoring. Step 1: Select Telnet/SSH Setup...
Page 76
Step 3: To add user: 1. Click the button. 2. In Add User Entry Page, enter the User Name, Password, and specify whether the user is granted permission to Read Only or Read/Write. 3. Click the Apply button. To Delete User: 1.
Access the TELNET Command Line Interface You may connect to the CLI (Command Line Interface) via a TELNET session to the default IP 192.168.168.1 Microsoft TELNET command is shown here but any TELNET client can be used. 1. Enter C:\WINDOWS\TELNET 192.168.168.1 at DOS prompt and the TELNET application will launch and connect.
Access the Secure Shell Host Command Line Interface SSH provides the best remote access security using different forms of encryption ciphers encrypt sessions, providing better authentication facilities and features that increase the security of other protocols. An encrypted connection like SSH is not viewable on the network. The server can still read the information, but only after negotiating the encrypted session with the client.
Set the WEB Mode The access point supports HTTPS (SSL) featuring additional authentication and encryption for secure communication, in addition to the standard HTTP. Step 1: Select Web Management Setup from the CONFIGURATION menu. Step 2: 1. Select whether to set web server to HTTP or HTTPS (SSL) mode. 2.
Setup SNMP The Simple Network Management Protocol (SNMP) is a set of communication protocols that separates the management software architecture from the hardware device architecture. Step 1: Select from the menu. Step 2: Select from the drop-down list. is set to public while the is set to private by default.
Setup SNMP Trap The SNMP Trap saves network resources through eliminating the need for unnecessary SNMP requests by providing notification of significant network events with unsolicited SNMP messages. Step 1: Select from the menu. Step 2: 1. Select whether to SNMP Trap.
Setup STP (Available in Access Point, Transparent Client, and Repeater modes) Spanning Tree Protocol (STP) prevents broadcast storms when there are redundant paths in the network. STP creates a tree that spans all devices in an extended network, forcing redundant paths into a standby state, but establishing the redundant links as backup in case the active link should fail.
Page 83
Scenario #1 – (No STP) With no STP, all clients (Notebook#1, #2, #3, #4) can access one another, resulting in low data security. Due to the redundant paths, broadcast packets will be duplicated and forwarded endlessly, resulting in a broadcast storm. Scenario #2 –...
Page 84
Select from the menu. Select the radio button, fill in the fields, and click on the button to update the changes. Priority: (Default: 32768, Range: 0 – 65535) This is the relative priority. The lowest priority will be elected as the root. Hello Time: (Default: 2, Range: 1 –...
Use MAC Filtering MAC Filtering acts as a security measure by restricting user network access according to MAC address. Each WLAN or radio card supports up to 16 virtual access points and has its own MAC address listing. NOTE MAC Filtering will not filter any MAC address from the Ethernet port.
Add a MAC Address to the MAC Address List Select from The MAC Address Filtering page displays. In this page you may also set the MAC Filtering Status to for access points and set the Policy to either MAC addresses. MAC Filtering set to with Policy to only...
Page 87
MAC Filter Address List page displays. Click the button. The Add MAC Address page displays. Enter the MAC Address of the client in the format xx-xx-xx-xx-xx-xx, where x can take any value from 0 to 9 or a to f. Enter the Comment.
Page 88
MAC Filter Address List page displays with updated MAC Address List. NOTE Please reboot to effect all changes and new MAC address entries. Page 87...
Delete a MAC Address From All Access Points Select from The MAC Address Filtering page displays. Select The MAC Filter Address List page displays. Select the checkbox of the MAC address you wish to delete. Click the button. The MAC Filter Address List page displays with updated MAC Address List. Page 88...
Delete a MAC address from individual access point Select from The MAC Address Filtering page displays. Select for the corresponding access point. The MAC Filter Address List page displays. Select the checkbox of the MAC address you wish to delete. Click the button.
Edit MAC Address from the MAC Address List Select from The MAC Address Filtering page displays. Select MAC Filter Address List page displays. Select the MAC address to edit. Page 90...
Page 92
The Edit MAC Address page displays. Edit the MAC address settings accordingly. Click the button. The MAC Filter Address List page displays with updated MAC Address List. Page 91...
Perform Advanced Configuration Setup Routing (Available in Wireless Routing Client and Gateway modes) The access point allows you to add a static routing entry into its routing table to re-route IP packets to another access point. This is useful if your network has more than one access point.
Configure Static Routing Step 1: Select from command menu. The page displays. Initially the table contains default routing entries of the access point. Step 2: Click on the button, then click button. Step 3: Enter the , and click button. reflects the entry.
Use Routing Information Protocol (Available in Wireless Routing Client and Gateway modes) RIP (Routing Information Protocol) allows information to be exchanged within a set of routers under the same administration. RIPv1 bases the path used to pass traffic between routers on the fewest number of hops between the source and destination IP addresses within a packet.
Use Network Address Translation (Available in Wireless Routing Client and Gateway modes) NAT (Network Address Translation) allows multiple PCs in a private network to share a single public IP address by using different TCP ports to identify requests coming from different PCs, and is enabled by default.
Configure Virtual Servers Based on DMZ Host DMZ (De-Militarized Zone) makes specific PCs in a NAT-enabled network directly accessible from the Internet. With NAT, the access point keeps track of which client is using which port number and forwards Internet replies to the client according to the port number in the reply packet.
Configure Virtual Servers Based on Port Forwarding Virtual Server based on Port Forwarding forwards Internet requests arriving at the access point WAN interface to specific PCs in the private network based on their ports. Step 1: Select from the command menu. Step 2: Click the button in...
Page 99
Step 3: In the page, you can set up a Virtual Server for a type by selecting from a drop-down menu or you can define a Page 98...
Page 100
Known Server Server Type : Select from the drop-down list of known server types: • HTTP • FTP • POP3 • Netmeeting Private IP : Specify the LAN IP address of the server PC running within the Address private network. Public IP : Select All, Single, or Range from the dropdown list.
Page 101
Public IP : Select All, Single, or Range from the dropdown list. From : Enter the beginning of the range. : Enter the end of the range. For example to set up a web server on a PC with IP address 192.168.168.55, set the as HTTP and set the , then click on the button.
Configure Virtual Servers based on IP Forwarding If you are subscribed to more than one IP address from your ISP, virtual servers based on IP forwarding can forward all Internet requests regardless of the port number to defined computers in the private network.
Control the Bandwidth Available (Available in Wireless Routing Client and Gateway modes) You can control the bandwidth available to subscribers to prevent the occurrence of massive data transfer that can slow down the network. Enable Bandwidth Control Step 1: Select from the command menu.
Configure WAN Bandwidth Control The Upload / Download Bandwidth Setting can limit throughput to the defined rates regardless of the number of connections. Step 1: Select from the sub- menu from the command menu. Step 2: Enter the The default values are 0, which indicates that there is no bandwidth limit.
Configure LAN Bandwidth Control Bandwidth Control can also limit LAN users’ throughput. Step 1: Select from the sub- menu from the command menu. Step 2: Click the button to create the bandwidth rule for LAN user. Page 104...
Page 106
Step 3: Click the button to create the rule for LAN user’s bandwidth control. Parameters Description Rule Name You can set a name for the bandwidth control rule. Committed Rate Minimum bandwidth rate of throughput. (kbit) NOTE: The sum of the Committed Rate of all the rules should not exceed the total rate available.
Perform Remote Management (Available in Wireless Routing Client and Gateway modes) You can use the access point web-based interface from the Internet to manage your network remotely. Setup Remote Management Step 1: Select from the command menu. Step 2: To disable Remote Management, set to 0 To enable Remote Management, set to an unused...
Use Parallel Broadband (Available in Gateway mode) Parallel Broadband provides scalable Internet bandwidth with Load Balancing and Fail-Over Redundancy. Load Balancing is provided by balancing the aggregate bandwidth of multiple broadband connections across the traffic demands of your private network. With Parallel Broadband, if a particular broadband connection fails, the access point will use the remaining functional broadband connections, thus providing Fail-Over Redundancy.
Enable Parallel Broadband Begin by verifying that every access point in the network is properly configured to connect to its individual broadband Internet account. Secondly ensure that either: • each access point is connected to an Ethernet port in the network •...
Setup Email Notification This feature notifies you by email if there is a change in the WAN IP address that was supplied to you. Step 1: Select from the command menu. Step 2: Click on the button. Step 3: Select to Email Notification and enter the following details: •...
Page 111
Step 4: Specify whether the SMTP server or not by setting the checkbox accordingly. By default it is not selected. Step 5: Click on the button. Page 110...
Using Static Address Translation (Available in Wireless Routing Client and Gateway modes) If you use a notebook for work in the office, you most probably bring it home to connect to the Internet as well. Since it is most likely that your office network and home network broadband-sharing network subnets are configured differently, you would have the hassle of reconfiguring your TCP/IP settings every time you use the notebook in a different...
Use DNS Redirection (Available in Wireless Routing Client and Gateway modes) When you enter a URL into your Internet browser, it requests for a name- to-IP address translation from the Domain Name System (DNS) servers to locate the web server hosting the desired website. The DNS server searches its local cache for the answer, and if found, returns this cached IP address.
Page 114
NOTE An entry for the DNS Server field in the PC TCP/IP Properties is required for Internet access. If the exact DNS IP address is unavailable, simple key in any valid IP address, for example: 10.10.10.10 Page 113...
Dynamic DNS Setup With Dynamic IP Internet connection, keeping track of your public IP address for Internet communication is complicated as it is changed regularly by the ISP. If you are doing some web hosting on your computer, Internet users will have to keep up with the changing IP address to access your computer.
To Manage Dynamic DNS List Step 1: Select from the command menu. Step 2: If you have created a list earlier, click on the button to update the list. Step 3: To add a new Dynamic DNS, click on the Add button.
Page 118
2 DDNS providers are predefined for you. You need to be connected to the Internet to register your DDNS account. Select 2MyDNS – Dynamic DNS Service Provider as DDNS Service Provider: Step 1: Under the column in list, check the radio button next to –...
Page 119
Optional Step 5: In the Mail Exchanger field, enter Static address of the mail server configured to handle email for your domain. Select to enable this service. Step 6: Click on the Add button. The new domain is added to the Dynamic DNS list table.
Page 120
Select DtDNS as DDNS Service Provider: Step 1: Under the column in list, check the radio button next to entry. Click on the button. Step 2: Enter your Step 3: checkbox is selected by default. field is empty by default. These default settings should be used dynamic...
Use the Wireless Extended Features Set Virtual AP (Multiple SSID) Virtual AP implements mSSID (Multi-SSID) whereby a single wireless card can be setup with up to 16 virtual AP connections with different SSIDs or BSSID (Basic Service Set Identifier) and security modes. Virtual AP delivers multiple services by VLAN segmentation: making the network think there are many SSIDs available and channeling each connection through different VLANs to the respective virtual network...
Page 122
Follow these steps to setup Virtual AP. Virtual AP Click WLAN Setup from CONFIGURATION menu. Select Virtual AP. Virtual AP List page displays. • Click Apply to register changes. • Click Clear to clear Virtual AP List. • Click Back to return to WLAN Basic Setup page.
Set Preferred APs (Available in Client Mode) When there is more than one AP with the same SSID, the Preferred APs function allows you define the MAC address of the APs in order of preference. The MAC address at the top of the Preferred APs list has the highest connection preference, and the MAC address at the bottom has the lowest connection preference.
Get Long Distance Parameters The access point can calculate and display suggested values for certain parameters ensure that efficient wireless communication between physically distant access points. Select from under Click on the button under the section. Select to function. Page 123...
Page 125
Long Distance Description Parameters Outdoor If set to Enable, the Outdoor parameters will be configured for outdoor communication over short or long distances as specified, it is disabled by default. Distance Determines the distance between your access point and the remote access point in meters. Slot Time The amount of time is divided and each unit of time is called one slot time.
Setup Point-to-Point & Point-to- MultiPoint Connection You can implement Point-to-Point connection by simply setting one device as RootAP in Access Point mode and setting the other device as client in Transparent Client mode. By default the device is in Access Point mode. To enable RootAP simply click on the radio button for RootAP to enable the function.
Page 127
Select , click on the button and reboot your device to let your changes take effect. Page 126...
Page 128
Follow these steps to setup Transparent Client/s. Click on from the menu. You will see the sub-menus expanded under . Click on Ensure that is set to To change , please refer to: Common Configuration – WLAN Setup - To Configure the Basic Setup of the Wireless Mode. Select the checkbox.
Setup Repeater A Repeater AP can connect to an AP only if the option Act as RootAP is set or checked in the AP setup. Example: Network diagram with 2 repeater hops. NOTE As bandwidth degrades with every repeater hop it is recommended that a limit of 4 hops is not exceeded.
Page 130
NOTE DO NOT physically connect your PC to the server via Ethernet cable in addition to the wireless connection, as doing so will create a loop that is not prevented by wireless loop preventing feature. Page 129...
Page 131
Follow these settings to setup the root AP. Click on from the menu. You will see the sub-menus expanded under Click on Ensure that is set to To change , please refer to: Common Configuration – WLAN Setup - To Configure the Basic Setup of the Wireless Mode.
Page 132
Follow these settings to setup the repeater. Click on from the menu. You will see the sub-menus expanded under Click on Ensure that is set to To change , please refer to: Common Configuration – WLAN Setup - To Configure the Basic Setup of the Wireless Mode.
Page 133
Options for defining the root AP: • Accept the default (root AP’s SSID) • Enter the • Check and enter the (root AP’s MAC address) Apply Page 132...
Secure your Wireless LAN Step 1: Select from under the menu. Step 2: Make a selection from the drop-down list. The is set to by default. Click on the button. NOTE All nodes in your network must share the same wireless settings in order to communicate.
Setup WEP At the WEP Setup page, Specify the , by selecting either: • • • • Select the from the pull down menu: • • • • • • • • The access point lets you define up to four different transmission keys. It defines a set of shared keys for network security.
Setup WPA-Personal (Available in Access Point mode) Follow these steps if you have activated the WPA-Personal, WPA2- Personal or WPA-Personal-AUTO security modes. At the page, Specify the , by selecting either: • • • • Fill in the pre-shared network key: If you are using the format, your entry can consist of a minimum of 8 alphanumeric characters or a maximum of 63...
Page 137
For WPA-Personal Set the WPA replaces WEP with a strong encryption technology called Temporal Key Integrity Protocol (TKIP) with Message Integrity Check (MIC). For WPA2-Personal Set the Advanced Encryption Standard (AES) is a stronger symmetric 128-bit block data encryption technique. AES is a requirement of WPA2 under the IEEE 802.11i standard.
Setup 802.1x/RADIUS (Available in Access Point mode) At the IEEE 802.1x Setup page, Key in the IP address of the in your WLAN. You can optionally add in the IP address of a , if any. The RADIUS authentication server MUST be in the same subnet as the access point.
Page 139
Select the of each encryption key: • • 10 hexadecimal or 5 ASCII Text • • 26 hexadecimal or 13 ASCII Text Click the button and reboot your system, after which your settings will become effective. Page 138...
Setup WPA Enterprise (Available in Access Point mode) Follow these steps if you have selected the WPA, WPA1-Enterprise, WPA2-Enterprise, or WPA-Enterprise-AUTO security modes. At the page, Key in the IP address of the in your WLAN. You can optionally add in the IP address of a , if any.
Page 141
Select the of each encryption key: • • 10 hexadecimal or 5 ASCII Text • • 26 hexadecimal or 13 ASCII Text For WPA-Enterprise Set the WPA replaces WEP with a strong encryption technology called Temporal Key Integrity Protocol (TKIP) with Message Integrity Check (MIC). For WPA2- Enterprise Set the Advanced Encryption Standard (AES) is a symmetric 128-bit block data...
Configure the Security Features Use Packet Filtering Packet filtering selectively allows /disallows applications from Internet connection. Configure Packet Filtering Step 1: Select from the command menu. Step 2: Select the clicking on the button. Step 3: Select from three choices: , and then click on the button.
Page 143
apply the rule to: Range of IP addresses In this case, you will have to define (From) which address (To) which IP address, your range extends. Single IP address Here, you need only specify the source IP address in the (From) field.
Page 144
In this case, you may skip both the (From) as well as the (To) drop down fields. 4e). At the Time of the Day drop down list, also choose to apply the rule to: Range of time In which case, you have to specify the time in the format HH:MM, where may take...
Use URL Filtering URL Filtering allows you to block objectionable websites from your LAN users. Configure URL Filtering Step 1: Select from the command menu. Step 2: To select the , click button. Step 3: Select to , and then click on the button.
Configure the Firewall Configure SPI Firewall Stateful Packet Inspection (SPI) thwarts common hacker attacks like IP Spoofing, Port Scanning, Ping of Death, and SynFlood by comparing certain key parts of the packet to a database of trusted information before allowing it through. NOTE Firewall security rules should be planned carefully as incorrect configuration may cause improper network function.
Page 147
You may add more firewall rules for specific security purposes. Click on the radio button at the screen shown above, followed by the button. Rule Name : Enter a unique name to identify this firewall rule. Disposition : This parameter determines whether the packets obeying the rule Policy should be accepted or denied by the firewall.
Page 148
which it sends datagrams because of congestion. Redirect Informs the host of a preferred route. Time exceeded Indicates that the Time-to-Live (TTL) of an IP datagram has expired. Parameter Problem Informs that host that there is a problem in one the ICMP parameter. Timestamp Request Information that is from the ICMP data packet.
Page 149
Timestamp – Timestamp RR – Record Route SID – Stream Identifier SSRR – Strict Source Routing RA – Router Alert Check TTL : This parameter would let you screen packets according to their Time-To-Live (TTL) value available options are: 1. Equal 2.
Use the Firewall Log The Firewall Log captures and stores network traffic information such as the type of data traffic, the time, the source and destination address / port, as well as the action taken by the firewall. View Firewall Logs Step 1: Select from the...
Administer the System Use the System Tools Use the Ping Utility (Available in Wireless Routing Client and Gateway modes.) You can check whether the access point can communicate (ping) with another network host with the Ping Utility. Step 1: Select under the command menu.
Use Traceroute Traceroute lets you do a network IP trace from device source IP to the destination IP To start, simply enter the destination IP and click Start to trace. This utility is generally for tracing IP on a different IP network. The device need to first setup a default gateway and connect to a gateway router.
Use Ping Watchdog This function let you monitor the client connection with AP using ping test. When client failed to get a ping respond from AP it will forced the client to reboot. When device is just startup, there will be a delay of 1 minute before it start the ping monitor operation.
Use Auto-Reboot This function lets you set a time period to automatically kick start the Auto-Reboot operation to reboot the device. It support 2 types of time setting, By Time and In Hour In Hour, you simply enter the number of hours the device will run before it kick start the auto-reboot function.
Use Syslog Syslog forwards system log messages in a network to a machine running a Syslog listening application. It is used to help in managing the computer system and increase security on the network. Freeware supporting Syslog is widely available for download from the Internet.
Page 156
Follow these steps to setup Syslog: Step 1: Click on from the menu. Step 2: Select to Syslog. Enter the Enter the Click to make the changes. Page 155...
Page 157
Follow these sample steps to view logged information: Step 1: Search for a Syslog listening application. Step 2: Select a Syslog listening application. Step 3: Download Syslog listening application. Step 4: Install Syslog listening application. Step 5: View logged information on Syslog listening application. Page 156...
Set System Identity You can set the System Identity of the access point to be uniquely identifiable. Select from the menu. Enter a unique . Maximum length is 50 characters. Enter the name of a contact person in the field. Maximum length is 50 characters.
Setup System Clock Step 1: Select from the menu. Step 2: Select the appropriate time zone from the drop-down list. Step 3: the Auto Time Setting (SNTP) radio button. stands for Simple Network Time Protocol and is used to synchronise computer clocks. Step 4: Fill in the field and click on the...
Upgrade the Firmware with UConfig You can check the types and version of your firmware by clicking on About System from the HELP menu. To begin with, ensure that you have the updated firmware available. Select from the menu. Click on the button to locate the file.
Perform Firmware Recovery If the system fails to launch properly, the access point will automatically switch to loader mode and the diagnostic light will remain blinking. The firmware should then be reloaded. Access Point State Diagnostic LED ( ) State Corrupted firmware –...
Page 162
From the Start menu, click Run and type cmd. When the command prompt window appears, type in the following command: C:\recovery\TFTP -i 192.168.168.1 PUT image_name.IMG, where refers to the local drive and image_name.IMG refers to the firmware filename in the Recovery folder. You can monitor the status from the diagnostic light.
Backup or Reset the Settings You may choose to save the current configuration profile, create a backup of it on your hard disk, restore an earlier saved profile, or to reset the access point back to its default settings. Reset your settings Select from the menu.
Page 164
Backup your Settings Select from the menu. To back up the current settings of your access point onto your hard disk drive, click on the button. Save your configuration file to your local disk. Page 163...
Page 165
Restore your Settings Select from the menu. To restore previously saved settings, click on the … button and … select the folder where you saved your configuration file. Click on the button and the system will prompt you to reboot your device.
Reboot the System Most of the changes you make to the system settings require a system reboot before the new parameters can take effect. Select from the menu. Click on the button. Wait for the system to reboot and the login page will be displayed. Page 165...
Change the Password It is recommended that the login password is changed from the factory default password. Select from the menu. Key in the . The password is case-sensitive and defaulted to password Enter the field and then . Maximum length is 31 characters.
Use the HELP menu View About System System Information displays system configuration information that may be required by support technicians for troubleshooting. Select from the menu. page displays information about the access point configuration settings. Page 168...
Get Technical Support This page displays the contact information of technical support centres around the world. If further information unavailable in the manual or data sheet is required, please contact a Technical Support Centre by mail, email, fax or telephone. Click on from the menu.
Additional System Information Tools Click Show ARP to display the current connected list of devices. Click Show Bridge Table to display the active list of MAC addresses in current bridge table Click Show Throughput to display the plot of receive and transmit traffic for the following interfaces, LAN , WLAN and WAN PPP.
Appendix: Virtual AP (Multi-SSID) Q1) What is mSSID? Multi-SSID (mSSID) as the name suggest, allows an access point (AP) with a single radio card to support more than one SSID. Q2) What can you do with mSSID connection? The application of mSSID is to provide better security with multiple network path connections from a single AP, to multiple VLAN network segments of the switch on the local area network.
Page 173
Q3) Can I update my access point to this mSSID firmware? Yes. You can retain your access point configuration when you update to the mSSID firmware if the current firmware running is v1.3x and above. If AP is running the following configuration setup, updating to the mSSID firmware will affect the configuration.
Page 174
Q6) I have Pseudo VLAN for Per Group enabled. Will updating to mSSID firmware still support wireless clients with MAC addresses listed in Per Group? The mSSID firmware replaces Pseudo VLAN and integrates it into VAP (Virtual AP) and MAC Filtering. Thus, Pseudo VLAN with its VLAN ID and MAC listing will be lost after updating to mSSID firmware.
Page 175
Q8) I have 2 of the access point units installed at a site about 2km from each other running PtP modes. Should I update to mSSID firmware? Can I do it from one location to update the firmware like I do with the current single SSID firmware? The setup for PtP and PtMP for mSSID firmware is different the current sSSID firmware.
Appendix: View the Technical Specifications Safety and • FCC Part 15 SubPart B and SubPart C (for wireless Electromagnetic module) Conformance • EN 300 328-2 • EMC CE EN 301 489 (EN300 826) • EN 55022 (CISPR 22)/EN 55024 Class B •...
Page 177
Security • 64 - bit / 128 - bit WEP WPA-Enterprise, WPA-Personal, WPA2-Enterprise, WPA2- Personal, WPA-Auto-Enterprise, WPA-Auto-Personal Tagged VLAN * • (Only packets to ethernet port is tagged. Incoming and outgoing wireless packets are not tagged.) • IEEE 802.1x – TLS, TTLS, PEAP, EAP-SIM Network Interface 1x RJ45 10/100 Mbps auto-negotiating Ethernet port Modulation...
Page 178
IP Addressing All classful/classless subnets Management • Telnet Command Console • HTTP Web Management • SSH • Syslog Built-in DHCP Server DHCP Reservation By MAC address Load Balancing Parallel Broadband (in Gateway mode) Fail-Over Parallel Broadband (in Gateway mode) Redundancy Virtual Server IP and Port Forwarding, De-Militarised Zone IP Packet Filtering...
Technical Support Information The warranty information and registration form are found in the Quick Install Guide. For technical support, you may contact Compex or its subsidiaries. For your convenience, you may also seek technical assistance from the local distributor, or from the authorized dealer/reseller that you have purchased this product from.