TP-Link AC50 Configuration Manual
  1. Manuals
  2. Brands
  3. TP-Link Manuals
  4. Controller
  5. AC50
  6. Configuration manual

TP-Link AC50 Configuration Manual

Wireless controller
Hide thumbs Also See for AC50:
Table of Contents

Advertisement

Quick Links

See also: Installation Manual
Configuration Guide
Wireless Controller
AC50/AC500
1910012220 REV1.0.1
July 2017

Advertisement

Table of Contents
loading

Related Manuals for TP-Link AC50

Summary of Contents for TP-Link AC50

  • Page 1 Configuration Guide Wireless Controller AC50/AC500 1910012220 REV1.0.1 July 2017...

  • Page 2: Table Of Contents

    Content About This Guide ........................1 1 Quick Start ........................2 Determine the Network Topology ......................2 1.1.1 Manage CAPs in the LAN ..........................2 1.1.2 Manage CAPs in Different Network Segment ..................3 Log in to the AC ............................... 3 1.2.1 Preparations ................................3 1.2.2 Log in ..................................4 2 Status ..........................
  • Page 3 3.4.4 Port Config ................................22 3.4.5 Port Status ................................23 4 AP Control ........................24 AP Settings ..............................24 AP Firmware Upgrade ..........................27 AP Database ..............................28 Load Balancing .............................. 29 5 Radio ..........................31 Radio Settings ............................... 31 Rate Settings ..............................34 Band Steering ..............................
  • Page 4 7.5.1 Radius Server ..............................70 7.5.2 Authentication Server Group ........................71 Authentication Config ..........................72 7.6.1 Free Authentication Policy ..........................72 7.6.2 Authentication Parameters .........................75 Applications ..............................75 7.7.1 Application for Web Authentication .......................75 7.7.2 Application for Onekey Online ........................80 7.7.3 Application for Voucher ..........................81 7.7.4 Application for SMS ............................85 7.7.5 Application for Facebook ..........................88 7.7.6 Application for Remote Portal ........................91...

  • Page 5: About This Guide

    About This Guide This Configuration Guide provides information for managing AC500/AC50 Series Wireless Controller. Please read this guide carefully before operation. Intended Readers This Guide is intended for network managers familiar with IT concepts and network terminologies. Conventions When using this guide, please notice that features of the device may vary slightly depending on the model and software version you have.

  • Page 6: Quick Start

    This wireless controller makes it easier to configure and manage dozens or hundreds of CAPs in a large public environment, such as markets, hotels, companies and campuses,etc. AC500 wireless controller supports to manage 500 CAPs at the same time and AC50 wireless controller supports 50 CAPs.

  • Page 7: Manage Caps In Different Network Segment

    1.1.2 Manage CAPs in Different Network Segment If the AC needs to manage CAPs in a different network segment, refer to the following topology. Wireless Controller Switch Router IP: 1.1.1.100/24 192.168.1.1/24 1.1.1.2/24 CAPs Host A IP: 1.1.1.101/24 Clients Note: In this situation, the router acting as the CAPs' DHCP server should support option 60 and option138 in DHCP settings.

  • Page 8: Log In

    1.2.2 Log in 1 Open a web browser and enter 192.168.0.253 in the address field, then press Enter key. Figure 1-1 Enter the IP Address 2 Create a username and a password for subsequent login attempts. Figure 1-2 Create an account...
  • Page 9 3 Use the username and password set above to log in to the webpage. Figure 1-3 Log in to the webpage 4 After a successful login, the main page will appear as in the figure below, and you can configure the function by clicking the setup menu on the left side of the screen. Figure 1-4 Main Page...
  • Page 10 The wireless controller’s configuration files fall into two types: the running configuration file and the start-up configuration file. After you perform configurations on the sub-interfaces and click Save, the modifications will be saved in the running configuration file. However, the configurations will be lost when the device reboots. If you need to keep the configurations even if the device reboots, please use the function to save the configurations in the start-up configuration file.

  • Page 11: Status

    Status 2.1 System Status Choose the menu Status > System Status > System Status to load the following page. Figure 2-1 System Status In the Resource Utilization section, you can monitor the utilization of the memory and CPU. It is recommended that the CPU utilization should be no more than 50%. The CPU utilization above 85% indicates that the AC is under a high load and above 95% means AC is completely loaded.

  • Page 12: Client Status

    2.2 Client Status Choose the menu Status > Client Status > Client Status to load the following page. Figure 2-2 Client Status You can check the information of the connected clients on this page. Select the desired clients by checking the boxes in front of the entries. Click the buttons above the list for additional operations.

  • Page 13: Ap Status

    2.3 AP Status Choose the menu Status > AP Status > AP Status to load the following page. Figure 2-3 AP Status The information of the connected CAPs will be displayed in this section. Select the desired CAPs by checking the boxes in front of the entries. Click the buttons above the list for additional operations.

  • Page 14: Authentication Status

    2.4 Authentication Status 2.4.1 Authentication Status Choose the menu Status > Authentication Status > Authentication Status to load the following page. Figure 2-4 Authentication Status You can check the information of the authentication status on this page. Select the desired users by checking the boxes in front of the entries. Click the buttons above the list for additional operations.

  • Page 15: Non-Sense Authenticated User

    2.4.2 Non-sense Authenticated User A non-sense authenticated user who has passed the authentication can leave the wireless network and then join the wireless network again without any re-authentication operation. Choose the menu Status > Authentication Status > Non-sense Authenticated User to load the following page.

  • Page 16: Network

    Network 3.1 Interface Choose the menu Network > Interface > Interface to load the following page. On this page you can create a logical interface and specify it to a specified VLAN. Please refer to 3.3.1 to set VLANs first. VLAN Figure 3-1 Interface Click...

  • Page 17: Dhcp Server

    Connection Type Select the connection type for the interface. Only static IP is supported at present. IP Address Specify an IP address for the interface. Subnet Mask Specify a subnet mask for the interface. Default Gateway (Optional) Specify a default gateway for the interface. Specify the MTU (Maximum Transmission Unit) for the interface.
  • Page 18 Click to create a DHCP server. The page will be shown as below. Figure 3-4 Add a DHCP Server Interface Select the interface which you want to create the DHCP server for. Refer to to set the interface first. Interface Starting/Ending IP Specify the starting IP address and ending IP address of the DHCP server IP Address pool.

  • Page 19: Dhcp Client List

    3.2.2 DHCP Client List Choose the menu Network > DHCP Server > DHCP Client List to load the following page. The list displays the information such as the IP address, MAC address and lease time of the connected clients. Figure 3-5 DHCP Client List 3.2.3 Address Reservation Choose the menu Network >...

  • Page 20: Vlan

    Click to create an IP address reservation. Figure 3-7 Create an IP Address Reservation Interface Select the interface which the CAP or client requiring the static IP address belongs to. Refer to to set the interface first. 3.1 Interface MAC Address Enter the MAC address of the specified AP or client to which you want to assign the static IP address.
  • Page 21 VLAN (Virtual Local Area Network) is a network technique that solves broadcasting issues in local area networks. A local area network is partitioned into several VLANs, and all VLAN traffic remains within its VLAN. Therefore, you can group and isolate APs and clients to enhance network security.

  • Page 22: Ports

    VLANs. The default egress rule is UNTAG. The PVID can be set as the VID number of any valid VLAN. PVID Enter the VLAN ID of the port. Note: AC50 doesn't include a General port link type.

  • Page 23: Relations

    3.3.3 Relations Choose the menu Network > VLAN > Relations to load the following page. This list displays the relations among ports, link types and VLANs. Figure 3-11 Relations...

  • Page 24: Switch

    3.4 Switch 3.4.1 Statistics Choose the menu Network > Switch > Statistics to load the following page. The statistics list displays the information of data packets received or transmitted by each port. Figure 3-12 Statistics...

  • Page 25: Mirror

    Choose the menu Network > Switch > Rate Control to load the following page. Here you can control the data transfer rate for each port. Check boxes to manually enter the corresponding rates. Note: The data transfer rate ranges from 1 to 100Mpbs for AC50, and from 1 to 1000Mpbs for AC500.

  • Page 26: Port Config

    By default, it is disabled. Negotiation Mode Select the Negotiation Mode for the port including auto and duplex mode. Duplex mode includes 10M Half-duplex, 10M Full-duplex, 100M Half-duplex, 100M Full-duplex and 1000M Full-duplex. Note: The AC50 doesn't support 1000M Full-duplex.

  • Page 27: Port Status

    Link down: The port is enabled but with physical connection. Link up: The Port is enabled and connected normally. Note: The data transfer rate ranges from 1 to 100Mpbs for AC50, and from 1 to 1000Mpbs for AC500. AC50 doesn't support 1000M Full-duplex.

  • Page 28: Ap Control

    AP Control 4.1 AP Settings Choose the menu AP Control > AP Settings > AP Settings to load the following page. Figure 4-1 AP Settings In the global settings, check the Reboot Schedule box and then the Lock to AC Automatically box to enable the corresponding function. Click Save to complete. Reboot Schedule With the reboot schedule enabled, all connected APs will reboot at the specified time.
  • Page 29 Figure 4-2 Add a group In the group list, click the numbers at the Group Statistics Information row. The group information will be shown as below. Click the buttons above the list for additional operations. Figure 4-3 Group statistics information Click this button to return to the group list. Back to Group List Select the corresponding entries and click this button to move them to your Move to Other...
  • Page 30 Click at the Operation row of the list. The following figure will be shown. Figure 4-4 AP Settings Name Specify the AP's name. AP Keep-alive Time Specify the time interval for the AP sending echo packets to the AC. AC can detect whether the AP is online or not by receiving the echo packets.

  • Page 31: Ap Firmware Upgrade

    4.2 AP Firmware Upgrade Choose the menu AP Control > AP Firmware Upgrade > AP Firmware Upgrade to load the following page. With it enabled, import the correct firmwares and set the starting upgrade time. The connected APs will start to upgrade at the specified time. If it is disabled, the APs that haven’t started upgrading will not be upgraded.

  • Page 32: Ap Database

    Click Browse to locate and select the new AP database. Click Upgrade to import it. Download the latest AP Click Download the latest AP database. You will be redirected to the TP-Link database download center to download the AP database files. The download center will...

  • Page 33: Load Balancing

    4.4 Load Balancing Load Balancing is applied in the high density wireless environment. It can balance the APs load and guarantee the reasonable access of the clients to APs. Therefore, the wireless resources and bandwidth of each AP can be used fairly. The following example is used to illustrate the working process of load balancing.
  • Page 34 Choose the menu AP Control > Load Balancing > Load Balancing to load the following page. Figure 4-8 Load Balancing Load Balancing Specify whether to enable load balancing. Mode Load balancing supports session mode only at present. In this mode, each AP will be assigned an average number of clients by the AC.

  • Page 35: Radio

    Radio 5.1 Radio Settings Choose the menu Radio > Radio Settings > Radio Settings to load the following page. Figure 5-1 Radio Settings On this page, you can specify the radio parameters of multiple or individual CAPs. Select the entries and click the buttons above the list to change the radio status or bulk edit the parameters.
  • Page 36 Figure 5-2 Change the Radio Settings AP Name Displays the name of the AP. Radio Frequency Displays the radio frequency of the AP to be modified. Mode Specify the working mode of the wireless network. AP with a frequency band of 2.4GHz supports five wireless modes: 802.11b, 802.11g, 802.11n, 802.11b/g and 802.11b/g/n.
  • Page 37 Transmit Power Specify a transmit power for the wireless network. A larger transmission power than needed may cause interference to other wireless networks. Maximum Users Specify the maximum number of clients that can be connected to the AP. Antenna Specify the antenna type. Only internal antenna is supported at present. Fragment Specify the fragment threshold for transmitting packets.

  • Page 38: Rate Settings

    Weak Signal Specify whether to enable the weak signal discard function. With this function Discard enabled, the AP will discard the client with a signal strength lower than a certain value. Click OK to complete the configuration. Click Default Settings to restore the parameters to the default.
  • Page 39 802.11a Basic Rate: Specify the basic rate set with which the 802.11a clients are allowed to access the network. At least one rate should be selected from the rate set. 6Mbps, 12Mbps and 24Mbps are selected by default. Supported Rate: Specify the supported rate for 802.11a clients. The supported rate set should not overlap with the basic rate set.

  • Page 40: Band Steering

    SSIDs of both 2.4GHz and 5GHz bands are the same. The following example is used to illustrate the process of band steering. Figure 5-4 Band Steering Process Wireless Controller Dual-band CAP 2.4GHz SSID: TP-Link 5GHz SSID: TP-Link Client Number: 36 Client Number: 40 Dual-band Client The 2.4GHz SSID and 5GHz SSID of the dual-band CAP are set the same.

  • Page 41: Wi-Fi Roaming

    But if the client repeatedly requests to connect to the 5GHz, and the rejection exceeds the maximum failure number set in band steering setting, the client will be allowed to connect. Choose the menu Radio > Band Steering > Band Steering to load the following page. Check the Enable radio button to enable the band steering function.
  • Page 42 Choose the menu Radio > Wi-Fi Roaming to load the following page. Configure the two 802.11k options. Figure 5-6 Wi-Fi Roaming Neighbor List Choose to whether enable Wi-Fi roaming feature. With this option enabled, Wi- Fi roaming will take effect on the 2.4GHz band. Neighbor List Dual Choose to whether enable Wi-Fi roaming on both of the 2.4GHz and 5GHz Band...

  • Page 43: Wireless

    Wireless 6.1 Wireless Service Choose the menu Radio > Wireless > Wireless Service to load the following page. Figure 6-1 Wireless Service Specify and view the wireless service on this page. Click to create a new wireless service. Click button, you can go into the radio binding page. Figure 6-2 Add a New Wireless Service Status Specify whether to enable the wireless network.
  • Page 44 Security Specify the security option of the wireless network. If all the clients are allowed to access the wireless network, please select None. For the safety of the wireless network, you are suggested to encrypt your wireless network with password. This device provides three security options: WPA/WPA2 (Wi-Fi Protected Access) and WPA-PSK/WPA2-PSK (WPA Pre-Shared Key).
  • Page 45 Figure 6-4 Security of WPA/WPA2 Authentication Type Select one of the following versions: Auto: Select WPA-PSK or WPA2-PSK automatically based on the wireless station's capability and request. WPA: Wi-Fi Protected Access. WPA2: Version 2 of WPA. Encryption Select the encryption type, including Auto, TKIP, and AES. The default setting is Auto, which can select TKIP (Temporal Key Integrity Protocol) or AES (Advanced Encryption Standard) automatically based on the wireless station's capability and request.
  • Page 46 SSID Displays the current wireless network. Select the Group Select the group to be displayed in the list. VLAN Binding Enter a VLAN ID into the field and Click above the list. The wireless network will be bound to the corresponding VLAN. Select the desired entries and click this button to bind the service to Bound corresponding radios.

  • Page 47: Authentication

    Authentication 7.1 MAC Authentication MAC Authentication is based on VLAN and MAC address. The administrator can preset MAC Authentication entries to allow or deny the clients with specific MAC addresses and in specific VLANs to access the network. The clients do not need to install any client software, nor do any operation during the MAC authentication process.

  • Page 48: Mac Address

    1 Choose the menu Authentication > MAC Authentication > MAC Address to bind the MAC addresses and VLANs of the clients to be authenticated. 2 Choose the menu Authentication > MAC Authentication > MAC Authentication to set MAC authentication rule on the VLANs. 7.1.1 MAC Address Choose the menu Authentication >...

  • Page 49: Mac Authentication

    Figure 7-3  Add a new MAC Address Entry Name Specify the name for the entry. MAC Address Specify the MAC address of the client. VLAN Range Specify the VLAN range. The range is 1 to 4094. Number and range are both supported.

  • Page 50: Portal Authentication

    MAC Authentication Specify or check the name of the MAC authentication entry to make it easier to Name search for and manage. Effective VLAN Range Specify or check the effective VLAN range of the MAC authentication entry. The range is 1 to 4094. Number and range are both supported. The ranges can be seperated by commas.

  • Page 51: Splash Page

    For Web Authentication and Remote Portal, there are two methods to authenticate the clients: using the built-in authentication server of the AC or using the remote authentication server on the network. You can configure the remote authentication server in the Authentication Sever module.
  • Page 52 Figure 7-8 Add a Splash Page Page Name Specify the name of the splash page template. Authenticaiton Type Select the authentication type of the splash page. Options include Web Authentication, Onekey Online, Voucher and SMS. Web Authentication: Clients need to enter a username and password to log in, and can access the network after successful authentication.

  • Page 53: Web Authentication

    Welcome Information Specify the welcome information. Welcome Information Select your desired text color for the welcome information through the color Color picker or by entering the RGB values manually. Copyright Specify the copyright information. Copyright Information Select your desired text color for Copyright information through the color Color picker or by entering the RGB values manually.
  • Page 54 Figure 7-10 Local Authentication Server Page Status Specify the status of the entry. SSID Specify the SSIDs of the Web authentication. Note: The SSIDs abeled "Bound" are being used by other authentication entries. If these SSIDs are selected, the original configuration will be replaced by the current configuration.
  • Page 55 Description Specify a description for the Web authentication entry to make it easier to search for and manage. Note: When Local Authentication Server is selected, you need to add the login information of the allowed users. For detailed configuration, refer to 7.3 Local User Management.
  • Page 56 Authenticaiton Server Specify the server type of the Web authentication. Here we select Remote Type Authentication Server. To configure Radius server, refer to Authentication Server. Authentication Server Select the server group of the Web authentication. Group Free Authentication Set the free online duration for the users. Timeout Note: If the remote authentication server is configured with an online time duration for the users, then the time duration set on the server will take effect...

  • Page 57: Onekey Online

    7.2.3 Onekey Online In Onekey Online Authentication, clients can pass the authentication without entering any parameters on the login page . Choose the menu Authentication > Portal Authentication > Onekey Online to load the following page. Figure 7-12 Onekey Online Here you can view the Onekey Online Authentication information and edit the entries. Click to add a new entry.

  • Page 58: Voucher

    Advertisement Specify whether to enable the Advertisement feature. With this feature enabled, you can add advertisement pictures on the authentication page. These advertisement pictures will be displayed before the login page appears. The required parameters are as follows: Picture Resouce: You can add up to 5 advertisement pictures. When several pictures are added, they will be played in a loop.
  • Page 59 Click to add a new entry. Figure 7-15 Add a New Voucher Entry Configure the related parameters and click OK. Status Specify whether to turn on the Voucher authentication entry. SSID Specify the SSIDs that will be enabled with Voucher authentication. Note: The SSIDs labeled "Bound"...

  • Page 60: Sms

    Advertisement Specify whether to enable the Advertisement feature. With this feature enabled, you can add advertisement pictures on the authentication page. These advertisement pictures will be displayed before the login page appears. The required parameters are as follows: Picture Resouce: You can add up to 5 advertisement pictures. When several pictures are added, they will be played in a loop.
  • Page 61 Figure 7-17 Add a New SMS Entry Configure the following parameters. Note that you need to first go to the Twilio website to register an account and get the following three parameters: Twilio SID, Authentication Token and Phone Number. Status Specify whether to turn on the SMS authentication entry. SSID Specify the SSIDs that will be enabled with SMS authentication.

  • Page 62: Facebook

    Advertisement Specify whether to enable the Advertisement feature. With this feature enabled, you can add advertisement pictures on the authentication page. These advertisement pictures will be displayed before the login page appears. The required parameters are as follows: Picture Resouce: You can add up to 5 advertisement pictures. When several pictures are added, they will be played in a loop.
  • Page 63 Figure 7-19 Add a New Facebook Entry Status Specify whether to turn on the Facebook authentication entry. SSID Specify the SSIDs that will be enabled with Facebook authentication. Note: The SSIDs labeled "Bound" are being used by other authentication entries. If these SSIDs are selected, the original configuration will be replaced by the current configuration.

  • Page 64: Remote Portal

    Figure 7-20 Facebook Configuration Page Facebook Page Select a Facebook Page that has been created in advance. Note that a valid location should be associated with the Facebook Page. Bypass Mode Select bypass mode. There are two options: Skip check-in link: Users can directly skip check-in and access the network without any code.
  • Page 65 Choose the menu Authentication > Portal Authentication > Remote Portal to load the following page. Figure 7-21 Remote Portal Here you can view the Remote Portal Authentication information and edit the entries. Click to add a new entry. There are two authentication server type: Local Authentication Server and Remote Authentication Server.
  • Page 66 SSID Specify the SSID that will be enabled with Remote Portal authentication. Note: The SSIDs labeled "Bound" are being used by other authentication entries. If these SSIDs are selected, the original configuration will be replaced by the current configuration. Remote Portal Address Enter the address of the server used for remote portal authentication.
  • Page 67 Figure 7-23 Remote Authentication Server Page Status Specify whether to turn on the remote portal authentication entry. Splash Page Enter the splash page name of the remote portal authentication. VLAN ID Select the VLAN ID used to remote portal authentication. Remote Portal Address Enter the address of the server used for remote portal authentication.

  • Page 68: Local User Management

    Free Authentication Set the free online duration for the users. Timeout Note: If the remote authentication server is configured with an online time duration for the users, then the time duration set on the server will take effect instead of Free Authentication Timeout set here. Success Redirect URL Specify the redirect URL address after successful authentication.
  • Page 69 1 Save the local user entries as a CSV file with ANSI coding format in the device. You can use the Backup User Information function to obtain a CSV file to view the correct format. 2 Click Browse to select the file path, and then click Restore to restore the file. Note: Using Excel to open the CSV file may cause some numerical format changes, and the number may be displayed incorrectly.
  • Page 70 Authentication Specify the authentication timeout for formal users. After the timeout, the users Timeout need to log in at the web authentication page again to access the network. Authentication Period Specify the authentication period during which the users can log in to the web authentication page.
  • Page 71 Figure 7-26 Add a Free User User Type Specify the user type as free user. Username Specify the username. The username should not be the same as any existing one. Password Specify the password. Users will be required to enter the username and password when they attempt to access the network.

  • Page 72: Voucher Management

    7.4 Voucher Management You can create voucher codes in batch on the Create Voucher page and manage them conveniently on the Manage Voucher page. 7.4.1 Create Voucher Choose the menu Authentication > Voucher Management > Create Voucher to load the following page.

  • Page 73: Manage Voucher

    Description Specify a description for the voucher codes to make them easier to search for and manage. 7.4.2 Manage Voucher Choose the menu Authentication > Voucher Management > Manage Voucher to load the following page. Figure 7-28 Manage Voucher The above table displays the information of the current vouchers. You can print and distribute them to the users.

  • Page 74: Radius Server

    1 Configure the Radius Server. Choose the menu Authentication > Authentication Server > Radius Server. 2 Configure the Server group. Choose the menu Authentication > Authentication Server > Authentication Server Group. 7.5.1 Radius Server Choose the menu Authentication > Authentication Server > Radius Server to load the following page.

  • Page 75: Authentication Server Group

    Billing Port Specify a port for the server to monitor the billing packets. 0 means disable the billing function. Share Key Specify a shared key for the Radius server. Retry Count If no reply is received after the client sends a connect request, it will keep resending the request.

  • Page 76: Authentication Config

    Main Server Select the main server for the group. The main server will have higher priority. Standby Server Select the standby server for the group. If the main server malfunctions, the standby server will come into use. Recovery Time Specify the time interval after the main server malfunctions for reconnection. Description Specify a description for the authentication server group.
  • Page 77 Click to add a new entry. There are two Match Modes, including Five Tuple Type and URL Type.  Five Tuple Type Five Tuple Type is configured based on the IP address range, MAC address, VLAN ID, port and protocol. It is recommended to select Five Tuple Type when there are many parameters to be configured in the free authentication policy.
  • Page 78 Description Specify a description for the free authentication policy entry to make it easier to search for and manage. Status Specify whether to turn on the free authentication policy.  URL Type URL Type is configured based on the URL address, IP address range, MAC address and VLAN ID.

  • Page 79: Authentication Parameters

    • Only when one of the source port or the destination port is configured, can the protocol take effect. 7.6.2 Authentication Parameters Choose the menu Authentication > Portal Authentication > Authentication Parameters to load the following page. Figure 7-36 Authentication Config Here you can configure and view the global parameters for the authentication.
  • Page 80  Network Topology Figure 7-37 Network Topology Internet Router Core Switch PoE Switch PoE Switch Clients  Configuration Steps 1 Create SSID Create an SSID for the clients in the Wireless module. 2 Configure the Splash Page Choose the menu Authentication > Portal Authentication > Splash Page. Click add a new entry.
  • Page 81 Figure 7-38 Splash Page Configurations 3 Configure the Web Authentication Choose the menu Authentication > Portal Authentication > Web Authentication. Click to add a new entry. Enable Web Authentication and set the related parameters.
  • Page 82 Figure 7-39 Web Authentication Configurations 4 Add Authentication Accounts After Web Authentication configuration, we still need to add user accounts to the device. In this example, we create accounts to meet the following requirements: Each room is offered with a free account, and up to three clients are able to use this account to pass the authentication at the same time.
  • Page 83 Choose the menu Authentication > Local User Management > Local User Management. Click to add a new entry. Set the related parameters as shown below. Figure 7-40 Add a Free Account...

  • Page 84: Application For Onekey Online

    7.7.2 Application for Onekey Online Network Requirements A hotel wants to offer customers free internet access. Customers can access the internet without providing any information. In this case, the hotel can use Onekey Online to meet the requirements.  Network Topology Figure 7-41 Network Topology Internet Router...

  • Page 85: Application For Voucher

    Figure 7-42 Splash Page Configurations 3 Configure Onekey Online In this case, we set the free online time as 30 minutes, and the client needs to restart the connection after the time expires. Choose the menu Authentication > Portal Authentication > Onekey Online. Click add a new entry.
  • Page 86  Network Topology Figure 7-44 Network Topology Internet Router Core Switch PoE Switch PoE Switch Clients  Configuration Steps 1 Create SSID Create an SSID for the clients in the Wireless module. 2 Configure the splash page. Choose the menu Authentication > Portal Authentication > Splash Page. Click add a new entry.
  • Page 87 Figure 7-45 Splash Page Configurations 3 Configure Voucher Authentication Choose the menu Authentication > Portal Authentication > Voucher. Click to add a new entry. Turn on the Voucher feature and set the related parameters. Click OK. Figure 7-46 Voucher Configurations...
  • Page 88 4 Create Vouchers Choose the menu Authentication > Portal Authentication > Voucher Management > Create Voucher. Specify the related parameters and click Save. Figure 7-47 Create Vouchers 5 Print Vouchers Choose the menu Authentication > Portal Authentication > Voucher Management > Manage Voucher.

  • Page 89: Application For Sms

    Figure 7-49 Print Vouchers 7.7.4 Application for SMS  Network Requirements A hotel wants to offer customers internet access using the Twilio API service. The customer needs to get authentication code using a mobile phone and access the network with the authentication code. In this case, the hotel can use the SMS feature to authenticate the clients.
  • Page 90  Network Topology Figure 7-50 Network Topology Internet SMS Authentication Server Router Core Switch PoE Switch PoE Switch Clients  Configuration Steps 1 Create SSID Create an SSID for the clients in the Wireless module. 2 Configure the splash page Choose the menu Authentication > Portal Authentication > Splash Page. Click add a new entry.
  • Page 91 Figure 7-51 Splash Page Configurations 3 Register an Twilio account Go to the official website of Twilio and follow the instructions to create an account. Figure 7-52 Register Account 4 Apply for Twilio Service and get the related information After successful login to Twilio, you need to buy the service for SMS according to the instructions on the website.

  • Page 92: Application For Facebook

    Figure 7-53 Account Infromation_SID and Auth Token Figure 7-54 Account Infromation_Phone Number 5 Configure the SMS Authentication Choose the menu Authentication > Portal Authentication > SMS. Click to add a new entry. Figure 7-55 SMS Authentication Page Enable SMS and configure the related parameters. You can directly paste the Twilio account information from the website to this page.
  • Page 93 In this case, the hotel can use the Facebook authentication feature to authenticate the clients.  Network Topology Figure 7-56 Network Topology Internet Facebook Servers Router Core Switch PoE Switch PoE Switch Clients  Configuration Steps 1 Create the Facebook Page Log in to Facebook and create a Facebook Page with advertisements of the hotel.
  • Page 94 Figure 7-57 Facebook Authentication Page Click the Configuration button and specify the Facebook Page and the related parameters. Click Save Settings and close this window. Figure 7-58 Facebook Configurations Verify the configuration result and click OK.

  • Page 95: Application For Remote Portal

    Figure 7-59 Facebook Configuration Result 7.7.6 Application for Remote Portal  Network Requirements A hotel wants to offer customers internet access and use the remote portal server to push hotel advertisement through the login page. The clients can access the network only after pass the authentication.
  • Page 96  Network Topology Figure 7-60 Network Topology Internet Router Remote Portal Server Core Switch PoE Switch PoE Switch Clients  Configuration Steps 1 Build Remote Portal Server Build your remote portal server on the network and make sure the connectivity between the AC and the server.
  • Page 97 Figure 7-61 Web Authentication Configurations...

  • Page 98: Link Backup

    Link Backup 8.1 Dual-link Backup Choose the menu Link Backup > Dual-link Backup > Dual-link Backup to load the following page. Check the option to enable the dual-link backup. Figure 8-1 Dual-link Backup Enble Check this option to enable the dual-link backup function. Priority Specify the priority of the AC.

  • Page 99: Application

    8.2 Application  Scenario The dual-link backup and the standby AC are applied in the scenario that two ACs are used to manage wireless networks together.  Topology Figure 8-2 Topology Internet 192.168.1.253 Priority: 150 Router 192.168.0.253 Priority: 100 Core Switch DHCP Server PoE Switch PoE Switch...
  • Page 100 Enter TP-LINK at the DHCP Option 60 field. Enter the IP addresses of the two ACs into DHCP Option 138 filed, therefore, the CAPs in the network can find the two ACs. Note: • Before configuring the external DHCP server, please disable the DHCP function of the AC to avoid CAPs obtaining IP addresses abnormally.
  • Page 101 Figure 8-3 Working Process Master AC: 192.168.1.253 Master AC: 192.168.1.252 Standby AC:192.168.1.252 Standby AC:192.168.1.253 Core Switch PoE Switch PoE Switch Note: Standby AC should be configured along with the link priority. The AC with higher priority becomes the master AC and the lower one is the standby AC.

  • Page 102: System Tools

    System Tools 9.1 Account There are two types of accounts: Administrator and Operator.  Administrator can configure and view all settings of the AC and configure the Operator account. When you buy a new AC, you will log in to the AC with the default Administrator account.

  • Page 103: Operator Account

    Strength Low, Middle and High indicate the password strength. Tip: Use a combination of letters, digits and symbols to create a strong password. 9.1.2 Operator Account Choose the menu System Tools > Admin Setup > Operator Account to load the following page.

  • Page 104: Administration

    HTTP Server Port Specify the web server port. Port 80 is the default. The port should not be the the same as other service ports. Redirect HTTP to With redirect HTTP to HTTPS enabled, the http website will be redirected to HTTPS https website automatically when you log in to the management web page.

  • Page 105: Reboot

    Figure 9-5 Backup & Restore  Version View the current version.  Backup Click Backup to save a copy of your current settings. Please save your copy in a secure file location. It is recommended to back up the settings before you change the configurations and upgrade the firmware.

  • Page 106: Firmware Upgrade

    Here you can upgrade your firmware. Please back up your configurations before upgrading. Click Browse to locate the firmware file, then click Upgrade to upgrade your firmware. For the latest firmware version, please go to www.tp-link.com Firmware Version Displays the current firmware version.

  • Page 107: Diagnostics

    RX Rate (Kb/s) Displays the rate data frames are received. TX Packet Rate (Pkt/s) Displays the rate data packets are transmitted. Total TX Bytes Displays the total bytes transimitted by the interface. Total RX Bytes Displays the total bytes received by the interface. Total TX Packets Displays the total packets transmitted by the interface.

  • Page 108: Time Settings

    IP Address/Domain Enter the IP address or the domain name of the Ping host or the traceroute Name host. Interface Enter the interface of the Ping host or the traceroute host. Ping Count Specify the ping count. Ping Packet Size Specify the ping packet size.
  • Page 109 Here you can view or set the system time. You can get the system time from the Internet,or set it manually.  Get automatically from the Internet Figure 9-11 Get Automatically from the Internet If the AC can access the Internet, you can get the system time automatically from the Internet.
  • Page 110 AC500 has a built-in RTC (Real-time Clock) chip, the system time won't be restored to the default time setting when the AC is rebooted or powered off. AC50 doesn't have an RTC chip. Please set the time manually or connect to the internet to set the time after the device is rebooted or powered off.

  • Page 111: System Log

    9.6 System Log Choose the menu System Tools > System Log > System Log to load the following page. Figure 9-13 System Log  Log Settings Log Level Filter Displays a list of the most recent activity (events) on the network. You can define the level of logs you want to view in the log level filter dropdown list.
  • Page 112 Module Filter You can define the module of logs you want to view in the module filter dropdown list. ALL Module: Displays all system log modules. System Management: Displays the system's management log, including the account, device management and time settings. Interface Management: Displays the system's interface management log.

This manual is also suitable for:

Ac500

Table of Contents