ABLE OF ONTENTS ABLE OF ONTENTS Conventions 0-vi Copyright 0-viii Product Overview Package Contents Product Overview Key Features ............1-2 Benefits .
Page 3
ABLE OF ONTENTS Installing the Device Pre-Installation Guidelines ..........2-2 Installing the Device .
Page 4
ABLE OF ONTENTS Configuring IP Settings 4-10 Configuring Spanning Tree Settings 4-11 Router Setup 4-12 Configuring WAN Settings 4-12 Static IP ............4-12 Dynamic IP.
Page 6
ABLE OF ONTENTS Configure Denial of Service Protection 4-55 Logging Out 4-56 Appendix A Federal Communication Commission Interference Statement Appendix B Industry Canada Statement Appendix C WorldWide Technical Support...
ONVENTIONS Conventions The following conventions are used to give the user additional Example: information about specific procedures or content. It is important Indicates information used to demonstrate or explain an to pay attention to these conventions as they provide informa- associated concept.
ONVENTIONS Typographical Conventions The following typographical conventions are used in this docu- ment: Italics Indicates book titles, directory names, file names, path names, and program/process names. Constant width Indicates computer output shown on a computer screen, includ- ing menus, prompts, responses to input, and error messages. Constant width bold Indicates commands lines as entered on the computer.
RODUCT VERVIEW RODUCT VERVIEW 1.2 Product Overview Thank you for choosing ENS200. The ENS200 is a long range, Point-to-point and point-to-multipoint wireless connectiv- high performance IEEE 802.11b/g/n network solution that pro- ity enable data transfers between two or more buildings vides Access Point, Client Bridge, WDS, and Client Router Channel bandwidth selection allows the appropriate band- ...
RODUCT VERVIEW ENEFITS Benefits Wireless extensions to Ethernet networks WLANs enable network managers in dynamic environments to The ENS200 is the ideal product around which you can build minimize overhead caused by moves, extensions to networks, your WLAN. The following list summarizes a few key advan- and other changes.
RODUCT VERVIEW RODUCT AYOUT 1.3 Product Layout BACK PANEL VIEW DESCRIPTION OFF = ENS200 is not receiving power Power LED ON = ENS200 is receiving power OFF = ENS200 is not connected to the network. LAN (2) LEDs ON = ENS200 is connected to the network, but not sending or receiving data Blink = ENS200 is sending or receiving data (Access Point or Client Bridge Mode)
Page 16
RODUCT VERVIEW RODUCT AYOUT BOTTOM VIEW DESCRIPTION To reset to factory settings, press button for > Reset Button 10 seconds. To configure the ENS200, connect to an LAN Connector Ethernet adapter in a computer. For more information The PoE interface allows the ENS200 to be PoE LAN Connector powered using the supplied PoE injector...
NSTALLATION YSTEM EQUIREMENTS 2.1 System Requirements To install the ENS200, you need the following: Computer (Windows, Linux, OSX Operating System) CD-ROM * Web Browser (Internet Explorer, FireFox, Chrome, Safari) Network Interface Card with an open RJ-45 Ethernet Port ...
NSTALLATION NSTALLING THE EVICE 2.2 Installing the Device Installing the Device Installing the ENS200 on a pole or wall optimizes the wireless access range. To install the ENS200, use the following procedure to mount the Note: device on a pole and refer to the figure below. Only experienced installation professionals who are famil- 1.
ONFIGURATION OGGING 3.1 Logging In The ENS200 has a built-in Web Configurator that lets you man- 3. When the Windows Security window appears, enter admin age the unit from any location using a Web browser that sup- for the username in the top field and admin for the password in ports HTTP and has JavaScript installed.
ONFIGURATION RACTICES Best Practices Perform the following procedures regularly to make the ENS200 more secure and manage the ENS200 more effec- tively. Change the default password Use a password that is not easy to guess and that contains different characters, such as numbers and letters.
ASIC ETWORK ETTINGS YSTEM TATUS 4.1 System Status View the summary of the current system status including system (hardware/software version, date/time), wired network (LAN) and wireless network (WLAN) information. 4.1.1 Using Save/Load Save and apply the settings shown in the Unsaved changes list, or cancel the unsaved changes and revert to the previous set- tings that were in effect.
ASIC ETWORK ETTINGS IEWING YSTEM NFORMATION 4.1.2 Viewing System Information Displays status information about the current operating mode. System Information shows the general system information such as operating mode, system up time, firmware version, serial number, kernel version, and application version. LAN Settings shows Local Area Network settings such as the LAN IP address, subnet mask, and MAC address.
Page 27
ASIC ETWORK ETTINGS IEWING YSTEM NFORMATION Current Wireless Settings shows wireless information such as frequency and channel. Since the ENS200 supports multiple- SSIDs, information about each SSID, such as its ESSID and security settings, are displayed.
ASIC ETWORK ETTINGS IEWING IRELESS LIENT 4.1.3 Viewing Wireless Client List Displays a list of clients associated to the ENS200, along with the MAC addresses and signal strength for each client. Click the Refresh button to update the client list.
ASIC ETWORK ETTINGS IEWING YSTEM 4.1.4 Viewing System Log The ENS200 automatically logs events to internal memory. Note: The oldest events are deleted from the log when memory is full. Click the Refresh button to update the client list or the Clear button to remove all events.
ASIC ETWORK ETTINGS IEWING ONNECTION TATUS 4.1.5 Viewing Connection Status Displays the current status of the network. The information shown includes network type, SSID, BSSID, connection status, wireless mode, current channel, security, data rate, noise level, and signal strength. Click the Refresh button to update the client list or the Clear button to remove all events.
DHCP C ASIC ETWORK ETTINGS IEWING LIENT ABLE 4.1.6 Viewing DHCP Client Table Displays the clients that are associated to the ENS200 through DHCP. The MAC addresses and signal strength for each client are also shown. Click the Refresh button to update the client list.
WDS L ASIC ETWORK ETTINGS IEWING 4.1.7 Viewing WDS Link List Displays the clients that are associated to the ENS200 through WDS. The MAC addresses, link status and signal strength for each client are also shown. Click the Refresh button to update the client list.
IP S ASIC ETWORK ETTINGS ONFIGURING ETTINGS 4.2.2 Configuring IP Settings Configure the LAN settings for the ENS200 using a static or dynamic IP address. IP Network Setting Configure the network connection type using either a static IP or dynamic IP. IP Address Enter the LAN IP address of the ENS200.
ASIC ETWORK ETTINGS ONFIGURING PANNING ETTINGS 4.2.3 Configuring Spanning Tree Settings Spanning Tree Status Enable or disable the ENS200 Spanning Tree function. Bridge Hello Time Specify Bridge Hello Time, in seconds. This value determines how often the ENS200 sends hello packets to communicate information about the topology throughout the entire Bridged Local Area Network Bridge Max Age...
ASIC ETWORK ETTINGS OUTER ETUP 4.3 Router Setup 4.3.1 Configuring WAN Settings Configure the WAN settings for the ENS200 using a static or dynamic IP address, PPPoE or PPTP. Static IP Setting a static IP address allows an administrator to set a specific IP address for the router and guarantees that it can not be assigned a different address.
ASIC ETWORK ETTINGS YNAMIC ENS200 WAN interface. Note: Pinging IP addresses is a common method used by hackers to test whether the IP address is valid. Blocking pings provides some extra security from hackers. Click Accept to save the settings or Cancel to discard changes. Dynamic IP Dynamic IP addressing assigns a different IP address each time a device connects to an ISP service provider.
(PPP ASIC ETWORK ETTINGS OINT OINT ROTOCOL OVER THERNET Point-to-Point Protocol over Ethernet (PPPoE) Point-to-Point Protocol over Ethernet (PPPoE) is used mainly by ISPs that provide DSL modems to connect to the Internet. Enter the maximum transmission unit (MTU). The MTU specifies the largest packet size permitted for an internet transmission (PPPoE default: 1492).
Page 39
(PPP ASIC ETWORK ETTINGS OINT OINT ROTOCOL OVER THERNET Get Automatically From ISP Click the radio button to obtain the DNS automatically from the DHCP server. Use These DNS Servers Click the radio button to set up the Primary DNS and Secondary DNS servers manually. Discard Ping on WAN Check to Enable to recognize pings on the ENS200 WAN interface or Disable to block pings on the...
(PPTP) ASIC ETWORK ETTINGS OINT OINT UNNELLING ROTOCOL Point-to-Point Tunnelling Protocol (PPTP) The point-to-point tunnelling protocol (PPTP) is used in association with virtual private networks (VPNs). There a two parts to a PPTP connection: the WAN interface settings and the PPTP settings. Enter the maximum transmission unit (MTU).
Page 41
(PPTP) ASIC ETWORK ETTINGS OINT OINT UNNELLING ROTOCOL Keep Alive If you want the ENS200 to periodically check your Internet connection, select this option. Then specify how often you want the ENS200 to check the Internet connection. If the connection is down, the ENS200 automatically re-establishes your connection Get Automatically From ISP Obtains the DNS automatically...
LAN S ASIC ETWORK ETTINGS ONFIGURING ETTINGS 4.3.2 Configuring LAN Settings IP Address Enter the LAN port IP address. IP Subnet Mask Enter the LAN IP subnet mask. WINS Server IP Enter the WINS Server IP. Use Router As DHCP Server Check this option to enable the ENS200 internal DHCP server.
VPN P ASIC ETWORK ETTINGS ONFIGURING HROUGH 4.3.3 Configuring VPN Pass-Through VPN Pass-through allows a secure virtual private network (VPN) connection between two computers. Enabling the options on this page opens a VPN port and enables connections to pass through the ENS200 without interruption. PPTP Pass-through Check this option to enable PPTP pass-through mode.
ASIC ETWORK ETTINGS ONFIGURING ORWARDING 4.3.4 Configuring Port Forwarding Port forwarding enables multiple server applications on a LAN to serve clients on a WAN over a single WAN IP address. The router accepts incoming client packets, filters them based on the destination WAN, or public, port and protocol and forwards the packets to the appropriate LAN, or local, port.
Page 45
ASIC ETWORK ETTINGS ONFIGURING ORWARDING Service Name Enter a name for the port forwarding rule. Protocol Select a protocol for the application: Choices are Both, TCP, and UDP. Starting Port Enter a starting port number. Ending Port Enter an ending port number. All ports numbers between the starting and ending ports will forward users to the IP address specified in the IP Address field.
ASIC ETWORK ETTINGS ONFIGURING EMILITARIZED 4.3.5 Configuring Demilitarized Zone Configuring a device on the LAN as a demilitarized zone (DMZ) host allows unrestricted two-way Internet access for Internet applica- tions, such as online video games, to run from behind the NAT firewall. The DMZ function allows the router to redirect all packets going to the WAN port IP address to a particular IP address on the LAN.
ASIC ETWORK ETTINGS ONFIGURING IRELESS 4.4 Configuring Wireless LAN 4.4.1 Configuring Wireless Settings Instructions on how to configure the wireless and security settings for each of the possible operating modes. WARNING! Incorrectly changing these settings may cause the device to stop functioning. Do not modify the settings in this section without a thorough understanding of the parameters.
Page 48
ASIC ETWORK ETTINGS CCESS OINT Wireless Mode Wireless mode supports 802.11b/g/n mixed modes. Channel HT Mode default channel bandwidth is 40 MHz. The larger the channel, the better the transmission quality and speed. Extension Channel Select upper or lower channel. Your selection may affect the Auto channel function.
Page 49
ASIC ETWORK ETTINGS CCESS OINT SSID Specify the SSID for the current profile. VLAN ID Specify the VLAN tag for the current profile. Suppressed SSID Check this option to hide the SSID from clients. If checked, the SSID will not appear in the site survey. Station Separation Click the appropriate radio button to allow or prevent communication between client devices.
ASIC ETWORK ETTINGS LIENT RIDGE Client Bridge Mode Client Bridge Mode lets you connect two LAN segments via a wireless link as though they are on the same physical network. Since the computers are on the same subnet, broadcasts reach all machines. As a result, DHCP information generated by the server reach all client computers as though the clients residing on one physical network.
WDS B ASIC ETWORK ETTINGS RIDGE WDS Bridge Mode Unlike traditional bridging. WDS Bridge Mode allows you to create large wireless networks by linking several wireless access points with WDS links. WDS is normally used in large, open areas, where pulling wires is cost prohibitive, restricted or physically impossible. Wireless Mode Wireless mode supports 802.11b/g/n mixed modes.
ASIC ETWORK ETTINGS LIENT OUTER Client Router Mode In Client Router Mode, you can access the Internet wirelessly with the support of a WISP. In AP Router Mode, the ENS200 can access the Internet via a cable or DSL modem. In this mode, the ENS200 can be configured to turn off the wireless network name (SSID) broadcast, so that only stations that have the SSID can be connected.
ASIC ETWORK ETTINGS ONFIGURING IRELESS ECURITY 4.4.2 Configuring Wireless Security The Wireless Security Settings section lets you configure the ENS200’s security modes: WEP, WPA-PSK, WPA2-PSK, WPA-PSK Mixed, WPA, WPA2, and WPA Mixed. We strongly recommend you use WPA2-PSK. Wired Equivalent Privacy (WEP) Security Mode Select WEP from the drop-down list to begin the configuration.
(WPA-PSK) ASIC ETWORK ETTINGS ROTECTED CCESS HARED Wi-Fi Protected Access Pre-Shared Key (WPA-PSK) Security Mode Select WPA-PSK from the drop-down list to begin the configuration. Encryption Select Both, TKIP, or AES as the encryption type. Both = uses TKIP and AES. ...
(WPA2-PSK) ASIC ETWORK ETTINGS ROTECTED CCESS HARED Wi-Fi Protected Access 2 Pre-Shared Key (WPA2-PSK) Security Mode Select WPA2-PSK from the drop-down list to begin the configuration. Encryption Select Both, TKIP, or AES as the encryption type. Both = uses TKIP and AES ...
(WPA-PSK) M ASIC ETWORK ETTINGS ROTECTED CCESS HARED IXED Wi-Fi Protected Access Pre-Shared Key (WPA-PSK) Mixed Security Mode Select WPA2-PSK Mixed from the drop-down list to begin the configuration. Encryption Select Both, TKIP, or AES as the encryption type. Both = uses TKIP and AES ...
(WPA) ASIC ETWORK ETTINGS ROTECTED CCESS Wi-Fi Protected Access (WPA) Security Mode Select WPA from the drop-down list to begin the configuration. Encryption Select Both, TKIP, or AES as the encryption type. Both = uses TKIP and AES TKIP = automatic encryption with WPA-PSK; requires ...
Page 58
(WPA) ASIC ETWORK ETTINGS ROTECTED CCESS Radius Accounting Select to enable or disable RADIUS accounting. Radius Accounting Port Specify the port number that your RADIUS accounting server uses for authentication. Default port is 1812. Radius Accounting Secret Specify RADIUS accounting secret furnished by the RADIUS server.
2 (WPA2) ASIC ETWORK ETTINGS ROTECTED CCESS Wi-Fi Protected Access 2 (WPA2) Security Mode Select WPA from the drop-down list to begin the configuration. Encryption Select Both, TKIP, or AES as the encryption type. Both = uses TKIP and AES ...
Page 60
2 (WPA2) ASIC ETWORK ETTINGS ROTECTED CCESS Radius Accounting Select to enable or disable RADIUS accounting. Radius Accounting Port Specify the port number that your RADIUS accounting server uses for authentication. Default port is 1812. Radius Accounting Secret Specify RADIUS accounting secret furnished by the RADIUS server.
(WPA) M ASIC ETWORK ETTINGS ROTECTED CCESS IXED Wi-Fi Protected Access (WPA) Mixed Security Mode Select WPA from the drop-down list to begin the configuration. Encryption Select Both, TKIP, or AES as the encryption type. Both = uses TKIP and AES ...
Page 62
(WPA) M ASIC ETWORK ETTINGS ROTECTED CCESS IXED Radius Accounting Select to enable or disable RADIUS accounting. Radius Accounting Port Specify the port number that your RADIUS accounting server uses for authentication. Default port is 1812. Radius Accounting Secret Specify RADIUS accounting secret furnished by the RADIUS server.
MAC F ASIC ETWORK ETTINGS ONFIGURING IRELESS ILTER 4.4.3 Configuring Wireless MAC Filter Note: This section applies to Access Point and WDS Access point mode. Wireless MAC Filters are used to allow or deny network access to wireless clients according to their MAC addresses. You can manu- ally add a MAC address to restrict the permission to access ENS200.
WDS L ASIC ETWORK ETTINGS ONFIGURING ETTINGS 4.4.4 Configuring WDS Link Settings Using WDS Link Settings, you can create a wireless backbone link between multiple access points that are part of the same wireless network. This allows a wireless network to be expanded using multiple Access Points without the need for a wired backbone to link them, as is traditionally required.
ASIC ETWORK ETTINGS ONFIGURING DVANCED ETWORK ETTINGS Enable Traffic Shaping Check this option to enable wireless traffic shaping. Traffic shaping regulates the flow of packets leaving an interface to deliver improved Quality of Service. Incoming Traffic Limit Specify the wireless transmission speed used for downloading.
ASIC ETWORK ETTINGS ANAGEMENT ETUP 4.5 Management Setup The Management section lets you configure administration, management VLAN, SNMP settings, backup/restore settings, firmware upgrade, time settings, and log settings. This chapter describes these settings. 4.5.1 Configuring Administrator Account Click the Administration link under the Management menu to change the user name and password used to log on to the ENS200 Web Configurator.
Page 68
ASIC ETWORK ETTINGS ONFIGURING DMINISTRATOR CCOUNT Remote Management Enable or disable remote management. Remote Upgrade Specify whether the ENS200 firmware can be upgraded remotely. Remote Management Port If remote management is enabled, enter the port number to be used for remote management. For example: If you specify the port number 8080, enter http:// <IP address>:8080 to access the ENS200 Web Configurator.
VLAN ASIC ETWORK ETTINGS ONFIGURING ANAGEMENT 4.5.2 Configuring Management VLAN Click the Management VLAN link under the Management menu to assign a VLAN tag to the packets. A VLAN is a group of computers on a network whose software has been configured so that they behave as if they were on a separate Local Area Network (LAN). Computers on VLAN do not have to be physically located next to one another on the LAN Management VLAN ID If your network includes VLANs and if...
SNMP ASIC ETWORK ETTINGS ONFIGURING 4.5.3 Configuring SNMP SNMP is used in network management systems to monitor network-attached devices for conditions that warrant administrative atten- tion. SNMP Enable or disable the ENS200 SNMP function. Contact Enter the contact details of the device. Location Enter the location of the device.
Page 71
SNMP ASIC ETWORK ETTINGS ONFIGURING SNMPv3 User Name Auth Protocol Auth Key (8-32 characters) Priv Protocol Priv Key (8-32 characters) Engine ID Click Save/Apply to apply the changes or Cancel to return previous settings. 4-47...
ASIC ETWORK ETTINGS ONFIGURING ACKUP ESTORE ETTINGS 4.5.4 Configuring Backup/Restore Settings Click the Backup/Restore Setting link under the Management menu to save the ENS200’s current settings in a file on your local disk or load settings onto the device from a local disk. This feature is particularly convenient administrators who have several ENS200 devices that need to be configured with the same settings.
ASIC ETWORK ETTINGS ONFIGURING IRMWARE PGRADE 4.5.5 Configuring Firmware Upgrade Firmware is system software that operates and allows the administrator to interact with the router. WARNING! Upgrading firmware through a wireless connection is not recommended. Firmware upgrading must be performed while connected to an Ethernet (LAN port) with all other clients disconnected.
ASIC ETWORK ETTINGS ONFIGURING YSTEM 4.5.6 Configuring System Time Change the system time of the ENS200 and setup automatic updates through a network time (NTP) protocol server or through a PC. Manually Set Date and Time Manually specify the date and time.
ASIC ETWORK ETTINGS ONFIGURING OMMAND NTERFACE 4.5.7 Configuring Command Line Interface Most users will configure the ENS200 through the graphical user interface (GUI). However, for those who prefer an alternative method there is the command line interface (CLI). The CLI can be access through a command console, modem or Telnet connec- tion.
ASIC ETWORK ETTINGS ONFIGURING OGGING 4.5.8 Configuring Logging Display a list of events that are triggered on the ENS200 Ethernet and wireless interfaces. You can consult this log if an unknown error occurs on the system or when a report needs to be sent to the technical support department for debugging purposes. Syslog Enable or disable the ENS200 syslog function.
ASIC ETWORK ETTINGS ONFIGURING IAGNOSTICS 4.5.9 Configuring Diagnostics The diagnosis feature allow the administrator to verify that another device is available on the network and is accepting request pack- ets. If the ping result returns alive, it means a device is on line. This feature does not work if the target device is behind a firewall or has security software installed.
ASIC ETWORK ETTINGS IEWING EVICE ISCOVERY 4.5.10 Viewing Device Discovery Device Name Displays the name of the devices connected to the network of the ENS200. Operation Mode Displays the operation mode of the devices connected to the network of the ENS200. IP Address Displays the IP address of the devices connected to the network of the ENS200.
Page 79
ASIC ETWORK ETTINGS ONFIGURE ENIAL OF ERVICE ROTECTION 4.5.11 Configure Denial of Service Protection Use TCP SYN Cookies Protection Click to enable TCP SYN cookies protection. SYN Flood Attack Protection Click to enable or disable SYN Flood Attack Protection. Match Interval Per Second Enter the allowed number of packets per second.
PPENDIX EDERAL OMMUNICATION OMMISSION NTERFERENCE TATEMENT Appendix A Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
Page 82
PPENDIX EDERAL OMMUNICATION OMMISSION NTERFERENCE TATEMENT Important: This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This device complies with FCC RF Exposure limits set forth for an uncontrolled environment, under 47 CFR 2.1093 paragraph (d)(2).
PPENDIX NDUSTRY ANADA TATEMENT Appendix B Industry Canada Statement This device complies with RSS-210 of the Industry Canada Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.
Page 84
PPENDIX ORLD ECHNICAL UPPORT Appendix C WorldWide Technical Support REGION COUNTRY OF PURCHASE SERVICE CENTRE SERVICE INFORMATION CANADA web site www.engeniuscanada.com email rma@engeniuscanada.com Toll Free: (+1) 888-397-2788 Canada contact numbers Local: (+1) 905-940-8181 Monday - Friday hours of operation 9:00AM to 5:30PM EST (GMT-5) LOS ANGELES, USA web site www.engeniustech.com...
Page 85
Africa DUBAI, UAE web site www.engenius-me.com Middle East email support@engenius-me.com Russia CIS / Armenia, Azerbaijan, Belarus, Toll Free: Georgia, Kazakhstan, Kyrgyzstan, U.A.E.: 800-EnGenius Moldova, Tajikistan, contact numbers 800-364-364-87 Turkmenistan, Ukraine, General: Uzbekistan (+971) 4357-5599 Turkey Afghanistan Sunday - Thursday Pakistan...
Page 86
PPENDIX ORLD ECHNICAL UPPORT REGION COUNTRY OF PURCHASE SERVICE CENTRE SERVICE INFORMATION Singapore, Cambodia, SINGAPORE web site www.engeniustech.com.sg/e_warranty_form Indonesia, Malaysia, email techsupport@engeniustech.com.sg Thailand, Philippines, Vietnam Toll Free: contact numbers China, Hong Kong, Korea Singapore: 1800-364-3648 India Monday - Friday South Africa hours of operation 9:00 AM - 6:00 PM (GMT+8) Oceania...