ABLE OF ONTENTS ABLE OF ONTENTS Conventions 0-vi Copyright 0-viii Product Overview Package Contents Product Overview Key Features ............1-2 Benefits .
Page 3
ABLE OF ONTENTS Installing the Device Pre-Installation Guidelines ..........2-2 Installing the Device .
Page 4
ABLE OF ONTENTS Configuring Operation Mode Configuring IP Settings 4-10 Configuring Spanning Tree Settings 4-11 Router Setup 4-12 Configuring WAN Settings 4-12 Static IP ............4-12 Dynamic IP.
Page 5
ABLE OF ONTENTS Wired Equivalent Privacy (WEP) ......... 4-28 Wi-Fi Protected Access Pre-Shared Key (WPA-PSK) .
Page 6
ABLE OF ONTENTS Configuring Wi-Fi Schedule 4-47 Add a Schedule Service ..........4-47 Schedule Services Table.
ONVENTIONS Conventions The following conventions are used to give the user additional Example: information about specific procedures or content. It is important Indicates information used to demonstrate or explain an to pay attention to these conventions as they provide informa- associated concept.
ONVENTIONS Typographical Conventions The following typographical conventions are used in this docu- ment: Italics Indicates book titles, directory names, file names, path names, and program/process names. Constant width Indicates computer output shown on a computer screen, includ- ing menus, prompts, responses to input, and error messages. Constant width bold Indicates commands lines as entered on the computer.
VERVIEW RODUCT VERVIEW 1.2 Product Overview Thank you for choosing ENS500. The ENS500 is a long range, Point-to-point and point-to-multipoint wireless connectiv- high performance IEEE 802.11a/n network solution that pro- ity enable data transfers between two or more buildings...
Wireless extensions to Ethernet networks WLANs enable network managers in dynamic environments to The ENS500 is the ideal product around which you can build minimize overhead caused by moves, extensions to networks, your WLAN. The following list summarizes a few key advan- and other changes.
Blink = ENS500 is sending or receiving data (Access Point or Client Bridge Mode) OFF = ENS500 radio is off and the device is not sending or receiving data over the wireless LAN. ON = ENS500 radio is on, and the device is...
Page 16
To reset to factory settings, press button for > Reset Button 10 seconds. To configure the ENS500, connect to an LAN Connector Ethernet adapter in a computer. For more information The PoE interface allows the ENS500 to be PoE LAN Connector powered using the supplied PoE injector...
NSTALLATION YSTEM EQUIREMENTS 2.1 System Requirements To install the ENS500, you need the following: Computer (Windows, Linux, Mac OS X Operating System) Web Browser (Internet Explorer, FireFox, Chrome, Safari) Network Interface equipped: (one of the following) Wired connectivity: Network Interface with an open ...
NSTALLING THE EVICE 2.2 Installing the Device Installing the Device Installing the ENS500 on a pole or wall optimizes the wireless access range. To install the ENS500, use the following procedure to mount the Note: device on a pole and refer to the figure below.
Page 20
6. Turn over the ENS500. Then insert the pole mounting strap through the middle hole of the ENS500. Use a screwdriver to unlock the pole-mounting ring putting it through the ENS500. 7. Mount the ENS500 securely to the pole by locking the strap tightly. This completes the installation procedure.
Enter key. Note: Figure 3-2: Windows Security Login Dialog If you changed the ENS500 LAN IP address, enter the cor- rect IP address. 4. Click Login to continue or Reset to abort the login. You are now ready to use the instructions in the following chap- ters to configure the ENS500.
restore it. Restoring an earlier working configuration can be useful if the ENS500 becomes unstable or crashes. If you forget your password, you will have to reset the ENS500 to its factory default settings and lose any cus- tomized override settings you configured.
ASIC ETWORK ETTINGS YSTEM TATUS 4.1 System Status View the summary of the current system status including system (hardware/software version, date/time), wired network (LAN) and wireless network (WLAN) information. 4.1.1 Using Save/Reload Save and apply the settings shown in the Unsaved changes list, or cancel the unsaved changes and revert to the previous set- tings that were in effect.
ASIC ETWORK ETTINGS IEWING YSTEM NFORMATION 4.1.2 Viewing System Information Displays status information about the current operating mode. System Information shows the general system information such as operating mode, system up time, firmware version, serial number, kernel version, and application version. LAN Settings shows Local Area Network settings such as the LAN IP address, subnet mask, and MAC address.
Page 27
MAC address, connection type, connection status, LAN IP address, subnet mask, primary and secondary DNS. Current Wireless Settings shows wireless information such as frequency and channel. Since the ENS500 supports multiple- SSIDs, information about each SSID, such as its ESSID and security settings, are displayed.
4.1.3 Viewing Wireless Client List Displays a list of clients associated to the ENS500, along with the MAC addresses and signal strength for each client. To remove an SSID client from the list, click the button that appears in the Kick and Ban column.
IEWING YSTEM 4.1.4 Viewing System Log The ENS500 automatically logs events to internal memory. Note: The oldest events are deleted from the log when memory is full. Click the Refresh button to update the client list or the Clear button to remove all events.
ASIC ETWORK ETTINGS IEWING ONNECTION TATUS 4.1.5 Viewing Connection Status Displays the current status of the network. The WLAN information shown includes network type, SSID, BSSID, connection status, wireless mode, current channel, security, data rate, noise level, and signal strength. The WAN information shown includes the MAC address, connection type, connection status, IP address, IP subnet mask, primary DNS and secondary DNS.
IEWING LIENT ABLE 4.1.6 Viewing DHCP Client Table Displays the clients that are associated to the ENS500 through DHCP. The MAC addresses and signal strength for each client are also shown. Click the Refresh button to update the client list.
IEWING 4.1.7 Viewing WDS Link List Displays the clients that are associated to the ENS500 through WDS. The MAC addresses, link status and signal strength for each client are also shown. Click the Refresh button to update the client list.
ETUP 4.2 System Setup The following sections explain the features and functionality of the ENS500 in access point mode, client bridge mode, WDS access point mode, WDS bridge mode, WDS station mode and client router mode. 4.2.1 Configuring Operation Mode Set the primary function of the device.
ETTINGS ONFIGURING ETTINGS 4.2.2 Configuring IP Settings Configure the ENS500 LAN settings for the ENS500 using a static or dynamic IP address. IP Network Setting Configure the network connection type using either a static IP or dynamic IP. IP Address Enter the LAN IP address of the ENS500.
Enable or disable the ENS500 Spanning Tree function. Bridge Hello Time Specify Bridge Hello Time, in seconds. This value determines how often the ENS500 sends hello packets to communicate information about the topology throughout the entire Bridged Local Area Network Bridge Max Age Specify Bridge Max Age, in seconds.
ETUP 4.3 Router Setup 4.3.1 Configuring WAN Settings Configure the WAN settings for the ENS500 using a static or dynamic IP address, PPPoE or PPTP. Static IP Setting a static IP address allows an administrator to set a specific IP address for the router and guar- antees that it can not be assigned a different address.
Discard Ping on WAN Check to Enable to recognize pings on the ENS500 WAN interface or Disable to block pings on the ENS500 WAN interface. Note: Pinging IP addresses is a common method used by hackers to test whether the IP address is valid. Blocking pings provides some extra security from hackers.
Discard Ping on WAN Check to Enable to recognize pings on the ENS500 WAN interface or Disable to block pings on the ENS500 WAN interface. Note: Pinging IP addresses is a common method used by hackers to test whether the IP address is valid. Blocking pings provides some extra security from hackers.
Connect on Demand If you want the ENS500 to end the Internet connection after it has been inactive for a period of time, select this option and enter the number of minutes you want that period of inactivity to last.
Page 40
Discard Ping on WAN Check to Enable to recognize pings on the ENS500 WAN interface or Disable to block pings on the ENS500 WAN interface. Note: Pinging IP addresses is a common method used by hackers to test whether the IP address is valid. Blocking pings provides some extra security from hackers.
Enter the WINS Server IP. Use Router As DHCP Server Check this option to enable the ENS500 internal DHCP server. Starting IP Address Specify the starting IP address range for the pool of allocated for private IP addresses. The starting IP address must be on the same subnet as the ending IP address;...
4.3.3 Configuring VPN Pass-Through VPN Pass-through allows a secure virtual private network (VPN) connection between two computers. Enabling the options on this page opens a VPN port and enables connections to pass through the ENS500 without interruption. PPTP Pass-through Check this option to enable PPTP pass-through mode.
ASIC ETWORK ETTINGS ONFIGURING ORWARDING 4.3.4 Configuring Port Forwarding Port forwarding enables multiple server applications on a LAN to serve clients on a WAN over a single WAN IP address. The router accepts incoming client packets, filters them based on the destination WAN, or public, port and protocol and forwards the packets to the appropriate LAN, or local, port.
Page 44
ASIC ETWORK ETTINGS ONFIGURING ORWARDING Service Name Enter a name for the port forwarding rule. Protocol Select a protocol for the application: Choices are Both, TCP, and UDP. Starting Port Enter a starting port number. Ending Port Enter an ending port number. All ports numbers between the starting and ending ports will forward users to the IP address specified in the IP Address field.
ASIC ETWORK ETTINGS ONFIGURING EMILITARIZED 4.3.5 Configuring Demilitarized Zone Configuring a device on the LAN as a demilitarized zone (DMZ) host allows unrestricted two-way Internet access for Internet applica- tions, such as online video games, to run from behind the NAT firewall. The DMZ function allows the router to redirect all packets going to the WAN port IP address to a particular IP address on the LAN.
Incorrectly changing these settings may cause the device to stop functioning. Do not modify the settings in this section without a thor- ough understanding of the parameters. Access Point Mode The ENS500 supports Access Point Mode. In this mode, users with a wireless client device within range can connect to the ENS500 to access the WLAN. Wireless Mode Wireless mode supports 802.11a/n...
Page 47
ASIC ETWORK ETTINGS CCESS OINT Current Profile Configure up to four different SSIDs. If many client devices will be accessing the network, you can arrange the devices into SSID groups. Click Edit to configure the profile and check whether you want to enable extra SSIDs. Click Accept to confirm the changes or Cancel to cancel and return previous settings.
ASIC ETWORK ETTINGS LIENT RIDGE Client Bridge Mode Client Bridge Mode lets you connect two LAN segments via a wireless link as though they are on the same physical network. Since the computers are on the same subnet, broadcasts reach all machines. As a result, DHCP information generated by the server reach all client computers as though the clients residing on one physical network.
WDS B ASIC ETWORK ETTINGS RIDGE WDS Bridge Mode Unlike traditional bridging. WDS Bridge Mode allows you to create large wireless networks by linking several wireless access points with WDS links. WDS is normally used in large, open areas, where pulling wires is cost prohibitive, restricted or physically impossible. Wireless Mode Wireless mode supports 802.11a/n mixed modes.
Page 50
WDS B ASIC ETWORK ETTINGS RIDGE Security Select the type of WDS security: None, WEP, or AES. WEP Key Enter the WEP key. AES Pass phrase Enter the AES pass phrase. MAC Address Enter the MAC address of the Access Point to which you want to extend wireless connectivity.
In Client Router Mode, you can access the Internet wirelessly with the support of a WISP. In AP Router Mode, the ENS500 can access the Internet via a cable or DSL modem. In this mode, the ENS500 can be configured to turn off the wireless network name (SSID) broadcast, so that only stations that have the SSID can be connected.
IRELESS ECURITY 4.4.2 Configuring Wireless Security The Wireless Security Settings section lets you configure the ENS500’s security modes: WEP, WPA-PSK, WPA2-PSK, WPA-PSK Mixed, WPA, WPA2, and WPA Mixed. We strongly recommend you use WPA2-PSK. Wired Equivalent Privacy (WEP) Security Mode Select WEP from the drop-down list to begin the configuration.
(WPA-PSK) ASIC ETWORK ETTINGS ROTECTED CCESS HARED Wi-Fi Protected Access Pre-Shared Key (WPA-PSK) Security Mode Select WPA-PSK from the drop-down list to begin the configuration. Encryption Select Both, TKIP, or AES as the encryption type. Both = uses TKIP and AES. ...
(WPA2-PSK) ASIC ETWORK ETTINGS ROTECTED CCESS HARED Wi-Fi Protected Access 2 Pre-Shared Key (WPA2-PSK) Security Mode Select WPA2-PSK from the drop-down list to begin the configuration. Encryption Select Both, TKIP, or AES as the encryption type. Both = uses TKIP and AES. ...
(WPA-PSK) M ASIC ETWORK ETTINGS ROTECTED CCESS HARED IXED Wi-Fi Protected Access Pre-Shared Key (WPA-PSK) Mixed Security Mode Select WPA2-PSK Mixed from the drop-down list to begin the configuration. Encryption Select Both, TKIP, or AES as the encryption type. Both = uses TKIP and AES. ...
(WPA) ASIC ETWORK ETTINGS ROTECTED CCESS Wi-Fi Protected Access (WPA) Security Mode Select WPA from the drop-down list to begin the configuration. Encryption Select Both, TKIP, or AES as the encryption type. Both = uses TKIP and AES. TKIP = automatic encryption with WPA-PSK; requires pass- ...
2 (WPA2) ASIC ETWORK ETTINGS ROTECTED CCESS Wi-Fi Protected Access 2 (WPA2) Security Mode Select WPA2 from the drop-down list to begin the configuration. Encryption Select Both, TKIP, or AES as the encryption type. Both = uses TKIP and AES. ...
(WPA) M ASIC ETWORK ETTINGS ROTECTED CCESS IXED Wi-Fi Protected Access (WPA) Mixed Security Mode Select WPA Mixed from the drop-down list to begin the configuration. Encryption Select Both, TKIP, or AES as the encryption type. Both = uses TKIP and AES. ...
Wireless MAC Filters are used to allow or deny network access to wireless clients according to their MAC addresses. You can manu- ally add a MAC address to restrict the permission to access ENS500. The default setting is Disable Wireless MAC Filters.
Note: The Access Point to which you want to extend wireless connectivity must enter the ENS500’s MAC address into its configuration. For more information, refer to the documentation for the Access Point. Not all Access Point supports this feature.
ASIC ETWORK ETTINGS ONFIGURING DVANCED ETWORK ETTINGS 4.4.5 Configuring Advanced Network Settings Configure the advanced wireless settings for your access point using the screens in this section. Leave these settings to their default values if you are not sure what values to enter. Data Rate Select a data rate from the drop-down list.
ASIC ETWORK ETTINGS LIENT IMIT Client Limit Enable Client Limit to specify the number of clients (default: 127, Maximum: 127) allowed to connect to this access point. Click Accept to confirm the changes or Cancel to cancel and return previous settings. 4-38...
4.5.1 Configuring Administrator Account Click the Administration link under the Management menu to change the user name and password used to log on to the ENS500 Web Configurator. The default user name is admin and the default password is admin. Changing these settings protects the ENS500 configuration settings from being accessed by unauthorized users.
Click Accept to confirm the changes or Cancel to cancel and return previous settings. Note: If you reconfigure the Management VLAN ID, you may lose your connection to the ENS500. Verify that the DHCP server supports the reconfigured VLAN ID and then reconnect to the ENS500 using the new IP address.
ONFIGURING 4.5.3 Configuring SNMP SNMP is used in network management systems to monitor network-attached devices for conditions that warrant administrative atten- tion. SNMP Enable or disable the ENS500 SNMP function. Contact Enter the contact details of the device. Location Enter the location of the device.
Page 66
SNMP ASIC ETWORK ETTINGS ONFIGURING Engine ID Specify the engine ID for SNMPv3. Click Save/Apply to apply the changes or Cancel to return previous settings. 4-42...
This feature is particularly convenient administrators who have several ENS500 devices that need to be configured with the same settings. This page also lets you return the ENS500 to its factory default settings. If you perform this procedure, any changes made to the ENS500 default settings will be lost.
ASIC ETWORK ETTINGS ONFIGURING EBOOT ETTINGS 4.5.5 Configuring Auto Reboot Settings Click the Auto Reboot Settings link under the Management menu to enable or disable the Auto Reboot function. This feature is par- ticularly convenient to administrators for the scheduling of auto rebooting on the device. This page also allows you to set the frequency of this function.
Upgrading firmware through a wireless connection is not recommended. Firmware upgrading must be performed while connected to an Ethernet (LAN port) with all other clients disconnected. The firmware upgrade procedure can take several minutes. Do not power off the ENS500 during the firmware upgrade, as it can cause the device to crash or become unusable.
ONFIGURING YSTEM 4.5.7 Configuring System Time Change the system time of the ENS500 by manually entering the information, synchronizing the device with a PC, or setup automatic updates through a network time (NTP) protocol server. Manually Set Date and Time...
ASIC ETWORK ETTINGS ONFIGURING CHEDULE 4.5.8 Configuring Wi-Fi Schedule Use the Wi-Fi schedule function to control the wireless power ON/OFF service that operates on a routine basis. Add a Schedule Service Create a schedule service type and date/time parameters for a specific service. Schedule Name Enter the description of the schedule service.
ENS500 to an NTP server, see Configuring System Time. Schedule Table Displays a list of scheduled services for the ENS500. The properties of each service displayed are: Displays the ID number of the service in the table. Name Displays the description of the service.
4.5.9 Configuring Command Line Interface Most users will configure the ENS500 through the graphical user interface (GUI). However, for those who prefer an alternative method there is the command line interface (CLI). The CLI can be access through a command console, modem or Telnet connec- tion.
4.5.10 Configuring Logging Display a list of events that are triggered on the ENS500 Ethernet and wireless interfaces. You can consult this log if an unknown error occurs on the system or when a report needs to be sent to the technical support department for debugging purposes.
Enter the interval for the speed test. Start Speed Test Click Start Speed Test to begin the speed test operation. IPv4 Port Displays the IPv4 port number of the ENS500. IPv6 Port Displays the IPv6 port number of the ENS500. 4-51...
ASIC ETWORK ETTINGS IEWING EVICE ISCOVERY 4.5.12 Viewing Device Discovery Device Name Displays the name of the devices connected to the network. Operation Mode Displays the operation mode of the devices connected to the network. IP Address Displays the IP address of the devices connected to the network. System MAC Address Displays the system MAC address of the devices connected to the network.
ASIC ETWORK ETTINGS ONFIGURE ENIAL OF ERVICE ROTECTION 4.5.13 Configure Denial of Service Protection Use TCP SYN Cookies Protection Click to enable TCP SYN cookies protection. SYN Flood Attack Protection Click to enable or disable SYN Flood Attack Protection. Match Interval Per Second Enter the allowed number of packets per second.
PPENDIX EDERAL OMMUNICATION OMMISSION NTERFERENCE TATEMENT Appendix A Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
Page 80
PPENDIX EDERAL OMMUNICATION OMMISSION NTERFERENCE TATEMENT Important: This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This device complies with FCC RF Exposure limits set forth for an uncontrolled environment, under 47 CFR 2.1093 paragraph (d)(2). This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.
PPENDIX NDUSTRY ANADA TATEMENT Appendix B Industry Canada Statement This device complies with RSS-210 of the Industry Canada Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.
PPENDIX ORLD ECHNICAL UPPORT Appendix C WorldWide Technical Support REGION COUNTRY OF PURCHASE SERVICE CENTRE SERVICE INFORMATION CANADA web site www.engeniuscanada.com email rma@engeniuscanada.com Toll Free: (+1) 888-397-2788 Canada contact numbers Local: (+1) 905-940-8181 Monday - Friday hours of operation 9:00AM to 5:30PM EST (GMT-5) LOS ANGELES, USA web site www.engeniustech.com...
Page 83
Africa DUBAI, UAE web site www.engenius-me.com Middle East email support@engenius-me.com Russia CIS / Armenia, Azerbaijan, Belarus, Toll Free: Georgia, Kazakhstan, Kyrgyzstan, U.A.E.: 800-EnGenius Moldova, Tajikistan, contact numbers 800-364-364-87 Turkmenistan, Ukraine, General: Uzbekistan (+971) 4357-5599 Turkey Afghanistan Sunday - Thursday Pakistan...
Page 84
PPENDIX ORLD ECHNICAL UPPORT REGION COUNTRY OF PURCHASE SERVICE CENTRE SERVICE INFORMATION Singapore, Cambodia, SINGAPORE web site www.engeniustech.com.sg/e_warranty_form Indonesia, Malaysia, email techsupport@engeniustech.com.sg Thailand, Philippines, Vietnam Toll Free: contact numbers China, Hong Kong, Korea Singapore: 1800-364-3648 India Monday - Friday South Africa hours of operation 9:00 AM - 6:00 PM (GMT+8) Oceania...