Amit IWP87DAM-07151 User Manual

Poe ap router

page of 320

/ 320
Contents
Table of Contents
Bookmarks

Table of Contents

Quick Links

Download this manual

PoE AP Router

IWP87DAM‐07151

User Manual

Table of Contents

Need help?

Do you have a question about the IWP87DAM-07151 and is the answer not in the manual?

Questions and answers

Summary of Contents for Amit IWP87DAM-07151

Page 1 PoE AP Router IWP87DAM‐07151 User Manual ...
Page 2: Table Of Contents
PoE AP Router Chapter 1 Introduction ................................7 1.1 Introduction .................................. 7 1.2 Contents List .................................. 8 1.2.1 Package Contents ............................8 1.2.2 Optional Accessories ............................9 1.3 Hardware Configuration............................10 1.4 LED Indication ................................12 1.5 Installation & Maintenance Notice ........................13 ...
Page 3 PoE AP Router 2.2.4 Power over Ethernet ........................... 66 2.3 WiFi ....................................69 2.3.1 WiFi Configuration ............................. 70 2.3.2 Wireless Client List ............................83 2.3.3 Advanced Configuration .......................... 85 2.3.4 Uplink Profile..............................87 2.4 IPv6 ....................................91 2.4.1 IPv6 Configuration ............................91 ...
Page 4 PoE AP Router 3.5.1 Configuration .............................. 144 3.5.2 My Certificate ............................. 147 3.5.3 Trusted Certificate ............................. 154 3.5.4 Issue Certificate............................160 Chapter 4 Field Communication ............................163 4.1 Bus & Protocol ................................ 163 4.1.1 Port Configuration ............................ 163 4.1.2 Virtual COM ..............................165 ...
Page 5 PoE AP Router 6.1.2 TR-069 ................................240 6.1.3 SNMP ................................244 6.1.4 Telnet with CLI ............................254 6.2 System Operation ..............................258 6.2.1 Password & MMI ............................258 6.2.2 System Information ..........................260 6.2.3 System Time ..............................261 6.2.4 System Log ..............................263 ...
Page 6 PoE AP Router 8.2.3 WiFi Status ..............................300 8.2.4 DDNS Status (not supported) ......................303 8.3 Security ..................................304 8.3.1 VPN Status ..............................304 8.3.2 Firewall Status ............................. 307 8.4 Administration ................................ 310 8.4.1 Configure & Manage Status ......................... 310 8.4.2 Log Storage Status ........................... 312 ...
Page 7: Chapter 1 Introduction
PoE AP Router Chapter 1 Introduction 1.1 Introduction Congratulations on your purchase of this outstanding product: Industrial PoE AP Router. For M2M (Machine‐ to‐Machine) applications, AMIT Modbus Cellular Gateway is absolutely the right choice. For wireless M2M (Machine‐to‐Machine) applications, AMIT PoE AP Router is absolutely the right choice. With built‐in 802.11ac/n compliant dual band WiFi modules, you just need to find out an available wireless network (or Access Point), and the PoE AP Router can simply connect to the wireless network and connect your filed devices to the local management center. This IWG874 series product is loaded with luxuriant security features including VPN, firewall, NAT, port forwarding, DHCP server and many other powerful features for outdoor IP surveillance applications. The ...
Page 8: Contents List
PoE AP Router 1.2 Contents List 1.2.1 Package Contents #Standard Package Items Description Contents Quantity IWP87DAM‐07151 1 1pcs PoE AP Router 2 8 pin Terminal Block 1pcs 3 4 pin Terminal Block 1pcs CD 4 1pcs (Manual) 5 DIN‐Rail Bracket 1pcs 6 Mounting Bracket 2pcs ...
Page 9: Optional Accessories
1.2.2 Optional Accessories #Optional parts (these parts are sold separately) Items Description Contents Comments INPUT: 100‐240VAC/1.4A Power Supply 50/60Hz 1 (SDR‐120‐48) OUTPUT: 48V/2.5A Total Watt: 120W INPUT: 100‐240VAC/2.6A Power Supply 50/60Hz 2 (SDR‐240‐48) OUTPUT: 48V/5A Total Watt: 240W These parts are sold separately. If necessary, please contact us sales@amit.com.tw ...
Page 10: Hardware Configuration
PoE AP Router 1.3 Hardware Configuration  Front View LED 2.4G/5GHz 5GHz Indicators WiFi‐1 Ant. WiFi‐2 Ant. Reset Serial Port Button Port Auto MDI/MDIX RJ45 Ports Auto MDI/MDIX RJ45 Port 1x GE Configurable WAN 4x GE LAN (with 802.3at PSE) ...
Page 11 PoE AP Router  Left View DI/DO DC Power Earth Ground Terminal Block Terminal Block Screw...
Page 12: Led Indication
PoE AP Router 1.4 LED Indication LED Color LED Icon Indication Description Power Source 1 Blue Steady ON: Device is powered on by power source 1 Power Source 2 Blue Steady ON: Device is powered on by power source 2 Steady ON: Supply PoE Power through Ethernet Port. OFF: No PoE power is supplied through the Ethernet Port. PSE 1 ~ PSE 4 Blue Note: if the LED flashes slowly, there could be power issue. Please check the Power Supply voltage or the connected devices. Steady ON: Ethernet connection of LAN or WAN is established. LAN 1 ~ LAN 4/WAN Green Flash: Data packets are transfering. OFF: No Ethernet cable attached or Device not linked. Serial Serial Blue Steady ON: If serial device is attached Steady ON: Device is powered on Status Status Blue OFF: Device is powered off OFF: 2.4GHz/5GHz WiFi is disabled WiFi 2.4GHz/5GHz Blue Steady ON: 2.4GHz/5GHz WiFi is enabled OFF: 5GHz WiFi is disabled ...
Page 13: Installation & Maintenance Notice
PoE AP Router 1.5 Installation & Maintenance Notice 1.5.1 SYSTEM REQUIREMENTS  An gigabit Ethernet RJ45 cable Network Requirements  IEEE 802.11 b/g/n/ac wireless clients  10/100/1000 Ethernet adapter on PC Computer with the following:  Windows®, Macintosh, or Linux‐based operating system  An installed Ethernet adapter Web-based Configuration Utility Browser Requirements: Requirements  Internet Explorer 6.0 or higher  Chrome 2.0 or higher  Firefox 3.0 or higher  Safari 3.0 or higher 1.5.2 WARNING Only use the power supply that complys with the power ...
Page 14: Hot Surface Caution
PoE AP Router 1.5.3 HOT SURFACE CAUTION CAUTION: The surface temperature for the metallic enclosure can be very high! Especially after operating for a long time, installed at a close cabinet without air conditioning support, or in a high ambient temperature space. DO NOT touch the hot surface with your fingers while servicing!! ...
Page 15: Hardware Installation
PoE AP Router 1.6 Hardware Installation This chapter describes how to install and configure the hardware 1.6.1 Mount the Unit The IWP87D series product can be mounted on a wall, horizontal plane, or DIN Rail in a cabinet with the mounting accessories (brackets or DIN‐rail kit). The mounting accessories are not screwed on the ...
Page 16: Power Supply Installation
PoE AP Router you may encounter the ambiguous situation that for some times, one on the power is the primary power, and some times if the loading increased, the power control circuit may switch to concurrent mode that PWR1 and PWR2 supplys power at the same time. 1.6.3 Power Supply Installation The power supply is an optional unit, is not included in the standard package. You have to purchase or prepare external power supply unit for providing power to the gateway. Hereunder is an example for the Industrial power supply installation.  AC Power Cable Installation The power supply unit power requirement is 100‐240V AC, 50/60Hz with power input lines. AWG 18 power cable is recommended. The terminal pin number assignment as below Please connect the live line, neutral line and earth line to the corresponding location.  DC Power Terminal Block Installation The Power Supply unit may consist of one set or two sets of DC power output contacts. You ...
Page 17 PoE AP Router Insert DC power wires into the contacts PWR1 or PWR2. The +V connect to PWR and then ‐V connect to GND. After that, pulg in the terminal block to the socket at the side of the gateway. Finally, connect the power plug of the power supply cable to an outlet, then the power supply units will turn on and provide DC power to the connected device. ...
Page 18: Connecting Di/Do Devices
PoE AP Router 1.6.5 Connecting DI/DO Devices There are one DI and one DO ports together with power terminal block. Please refer to following specification to connect DI and DO devices. Mode Specification Trigger Voltage (high) Logic level 1: 5V~30V Digital Input Normal Voltage (low) Logic level 0: 0V~2V Voltage Depends on external device (Relay Mode) maximum voltage is 30V Digital Output Maximum Current 1A Example of Connection Diagram ...
Page 19: Connecting Serial Devices
PoE AP Router 1.6.6 Connecting Serial Devices The IWP87D series products provide 4‐pin Terminal Block serial port for connecting to your serial device. Connect the serial device to the terminal block with the right pin assignments of RS‐232/485 are shown as below. Pin 1 2 3 4 ...
Page 20: Setup By Configuring Web Ui
PoE AP Router 1.6.8 Setup by Configuring WEB UI You can browse web UI to configure the device. Type in the IP Address (http://192.168.123.254) 2 When you see the login page, enter the password ‘admin’ and then click ‘Login’ button. 1 The default LAN IP address of this gateway is 192.168.123.254. If you change it, you need to login by using the new IP address. 2 It’s strongly recommending you to change this login password from default value. ...
Page 21: Wan & Uplink
PoE AP Router 2.1 WAN & Uplink The gateway provides multiple WAN interfaces to let all client hosts in Intranet of the gateway access the the uplink network or Internet. But ISPs in the world apply various connection protocols to let gateways or user's devices dial in ISPs and then link to the Internet via different kinds of transmit media. So, the WAN Connection lets you specify the WAN Physical Interface, and WAN Internet Setup for Intranet to access Internet. For each WAN interface, you must specify its physical interface first and then its Internet setup to connect to uplink network or Internet. ...
Page 22: Physical Interface
PoE AP Router 2.1.1 Physical Interface M2M gateways are usually equipped with various WAN interfacess to support different WAN connection scenario for requirement. You can configure the WAN interface one by one to get proper internet connection setup. Refer to the product specification for the available WAN interfaces in the product you purchased. The first step to configure one WAN interface is to specify which kind of connection media to be used for the WAN connection, as shown in "Physical Interface" page. In "Physical Interface" page, there are two configuration windows, "Physical Interface List" and "Interface Configuration". "Physical Interface List" window shows all the available physical interfaces. After clicking on the ...
Page 23 PoE AP Router Operation Mode: There are three option items “Always on”, “Failover”, and “Disable” for the operation mode setting. Always on: Set this WAN interface to be active all the time. When two or more WAN are established at "Always on" mode, outgoing data will through these WAN connections base on load balance policies. Failover: A failover interface is a backup connection to the primary. That means only when its primary WAN connection ...
Page 24 PoE AP Router Seamless Failover: In addition, there is a "Seamless" option for Failover operation mode. When seamless option is activated by checking on the "Seamless" box in configuration window, both the primary connection and the failover connection are started up after system rebooting. But only the primary connection executes the data transfer, while the failover one just keeps alive of connection line. As soon as the primary connection ...
Page 25 PoE AP Router Physical Interface Setting Go to Basic Network > WAN > Physical Interface tab. The Physical Interface allows user to setup the physical WAN interface and to adjust WAN’s behavior. Note: Numbers of available WAN Interfaces can be different for the purchased gateway. When Edit button is applied, an Interface Configuration screen will appear. WAN‐1 interface is used in this example. Interface Configuration: Interface Configuration Item Value setting Description 1. A Must fill setting Select one expected interface from the available interface dropdown list. It 2. WAN‐1 is the primary can be Etherent or WiFi Module. ...
Page 26 PoE AP Router is a 2.4G/5GHz selectable module, please select one band for uplink connection. Define the operation mode of the interface. Select Always on to make this WAN always active. Select Disable to disable this WAN interface. Select Failover to make this WAN a Failover WAN when the primary or the Operation Mode A Must fill setting secondary WAN link failed. Then select the primary or the existed secondary WAN interface to switch Failover from. (Note: for WAN‐1, only Always on option is available.) Check Enable box to enter tag value provided by your ISP. Otherwise uncheck the box. VLAN Tagging Optional setting Value Range: 1 ~ 4096. Note: This feature is NOT available for 3G/4G WAN connection. ...
Page 27: Internet Setup
PoE AP Router 2.1.2 Internet Setup After specifying the physical interface for each WAN connection, administrator must configure their connection profile to meet the dial in process of ISP, so that all client hosts in the Intranet of the gateway can access the Internet. In "Internet Setup" page, there are some configuration windows: "Internet Connection List", "Internet Connection Configuration", "WAN Type Configuration" and related configuration windows for each WAN type. For the Internet setup of each WAN interface, you must specify its WAN type of physical interface first and then its related parameter configuration for that WAN type. ...
Page 28 PoE AP Router Internet Connection – WFi Uplink WAN If the device connects to Internet through WiFi Uplink, this section will help you to complete WiFi Uplink connection setup. Go to Basic Network > WAN & Uplink > Internet Setup tab. WiFi Uplink interface: The Uplink network is a wireless network, and the gateway can connect to the Uplink network through WiFi connection. If you have the access permission to a certain wireless network, you can setup a WiFi Uplink connection by using the gateway device. This gateway can support 802.11ac/n/g/b data connection, and it can connect to a wireless network (access point) under the regular infrastrature mode. Configure Ethernet WAN Setting When Edit button is applied, Internet Connection Configuration screen will appear. WAN‐1 interface is used in this example. Internet Connection Configuration Item Value setting Description 1. A Must filled setting. From the dropdown box, select Internet connection method for WiFi Uplink 2.
Page 29 PoE AP Router WiFi Uplink WiFi Uplink WAN Type Configuration Item Value setting Description Display the information of AP for connecting. You can Click the Scan button and select a AP for the uplink network. Connect to AP N/A Besides, you can also create uplink profile(s) for ease of connecting to an available Uplink network. Refer to Basic Network > WiFi > Uplink Profile tab. Select the expected network type for the WiFi Uplink connection. It can be NAT Mode, Bridge Mode, or NAT Disable. When NAT Mode is selected, the NAT function is activated on the Wireless Uplink connection; 1. A Must filled setting When Bridge Mode is selected, the bridge function is activated on the Network Type 2. NAT Mode is selected Wireless Uplink connection; The supporting of bridge mode depends on the by default. product specification, if the purchased device doesn’t support the bridge mode, it will be greyed out from selection. When NAT Disable is selected, the NAT function is deactivated on the Wireless Uplink connection, and it can function as a router with manually configured routing setting. Specify the IP mode for the wireless uplink Interface. It can be Dynamic IP or Static IP. When Dynamic IP is selected, the device will request a IP from the Uplink 1. A Must filled setting Network as the IP for the uplink interface ; IP Mode 2. Dynamic IP is selected When Static IP is selected, you have to manually configure the IP address ...
Page 30 PoE AP Router 2. Unchecked by default uplink. If you activate the function, further Signal threshold value has to be specified. The default value is 40% Value Range: 30 ~ 60 %. When the Network Monitoring feature is enabled, the gateway will use DNS Query or ICMP to periodically check Internet connection –connected or disconnected.  Choose either DNS Query or ICMP Checking to detect WAN link. With DNS Query, the system checks the connection by sending DNS Query packets to the destination specified in Target 1 and Target 2. With ICMP Checking, the system will check connection by sending ICMP request packets to the destination specified in Target 1 and Target 2.  Loading Check Enable Loading Check allows the router to ignore unreturned DNS Queries or ICMP requests when WAN bandwidth is fully occupied. This is to prevent false link‐down status.  Check Interval defines the transmitting interval between two DNS Query or ICMP checking packets.  Check Timeout defines the timeout of each DNS query/ICMP.  Latency Threshold defines the tolerance threshold of responding 1. An optional setting Network Monitoring time. 2. Enabled by default.  Fail Threshold specifies the detected disconnection before the router recognize the WAN link down status. Enter a number of detecting disconnection times to be the threshold before disconnection is acknowledged. ...
Page 31 PoE AP Router Internet Connection List ‐ Ethernet WAN WAN Type for Ethernet Interface: Ethernet is the most common WAN and uplink interface for M2M gateways. Usually it is connected with xDSL or cable modem for you to setup the WAN connection. There are various WAN types to connect with ISP. • Static IP: Select this option if ISP provides a fixed IP to you when you subsribe the service. Usually is more expensive but very importat for cooperate requirement. • Dynamic IP: The assigned IP address for the WAN by a DHCP server is different every time. It is cheaper and usually for consumer use. • PPP over Ethernet: As known as PPPoE. This WAN type is widely used for ADSL connection. IP is usually different for every dial up. • PPTP: This WAN type is popular in some countries, like Russia. • L2TP : This WAN type is popular in some countries, like Israel. Configure Ethernet WAN Setting When Edit button is applied, Internet Connection Configuration screen will appear. WAN‐1 interface is used in this example. ...
Page 32 PoE AP Router WAN Type = Dynamic IP When you select it, "Dynamic IP WAN Type Configuration" will appear. Items and setting is explained below Dynamic IP WAN Type Configuration Item Value setting Description An optional setting Enter the host name provided by your Service Provider. Host Name Enter the MAC address that you have registered with your service provider. ISP Registered MAC Or Click the Clone button to clone your PC’s MAC to this field. An optional setting Address Usually this is the PC’s MAC address assigned to allow you to connect to Internet. WAN Type= Static IP When you select it, "Static IP WAN Type Configuration" will appear. Items and setting is explained below ...
Page 33 PoE AP Router Static IP WAN Type Configuration Item Value setting Description WAN IP Address A Must filled setting Enter the WAN IP address given by your Service Provider WAN Subnet Mask A Must filled setting Enter the WAN subnet mask given by your Service Provider WAN Gateway A Must filled setting Enter the WAN gateway IP address given by your Service Provider Primary DNS A Must filled setting Enter the primary WAN DNS IP address given by your Service Provider Secondary DNS An optional setting Enter the secondary WAN DNS IP address given by your Service Provider WAN Type= PPPoE When you select it, "PPPoE WAN Type Configuration" will appear. Items and setting is explained below PPPoE WAN Type Configuration Item Value setting Description PPPoE Account ...
Page 34 PoE AP Router WAN Type= PPTP When you select it, "PPTP WAN Type Configuration" will appear. Items and setting is explained below PPTP WAN Type Configuration Item Value setting Description Select either Static or Dynamic IP address for PPTP Internet connection.  When Static IP Address is selected, you will need to enter the WAN IP Address, WAN Subnet Mask, and WAN Gateway.  WAN IP Address (A Must filled setting): Enter the WAN IP address given by your Service Provider. A Must filled setting IP Mode  WAN Subnet Mask (A Must filled setting): Enter the WAN subnet mask given by your Service Provider.  WAN Gateway (A Must filled setting): Enter the WAN gateway IP address given by your Service Provider.  When Dynamic IP is selected, there are no above settings required. Server IP Enter the PPTP server name or IP Address. A Must filled setting Address/Name PPTP Account A Must filled setting Enter the PPTP username provided by your Service Provider. PPTP Password ...
Page 35 PoE AP Router WAN Type= L2TP When you select it, "L2TP WAN Type Configuration" will appear. Items and setting is explained below L2TP WAN Type Configuration Item Value setting Description Select either Static or Dynamic IP address for L2TP Internet connection.  When Static IP Address is selected, you will need to enter the WAN IP Address, WAN Subnet Mask, and WAN Gateway.  WAN IP Address (A Must filled setting): Enter the WAN IP address given by your Service Provider. A Must filled setting IP Mode  WAN Subnet Mask (A Must filled setting): Enter the WAN subnet mask given by your Service Provider.  WAN Gateway (A Must filled setting): Enter the WAN gateway IP address given by your Service Provider.  When Dynamic IP is selected, there are no above settings required. Server IP Enter the L2TP server name or IP Address. A Must filled setting Address/Name L2TP Account A Must filled setting Enter the L2TP username provided by your Service Provider. L2TP Password ...
Page 36 PoE AP Router Ethernet Connection Common Configuration There are some important parameters to be setup no matter which WAN type is selected. You should follow up the rule to configure. Connection Contro Auto‐reconnect: This gateway will establish Internet connection automatically once it has been booted up, and try to reconnect once the connection is down. It’s recommended to choose this scheme if for mission critical applications to ensure full‐time Internet connection. ...
Page 37 PoE AP Router Manually: This gateway won’t start to establish WAN connection until you press “Connect” button on web UI. After normal data transferring between LAN and WAN sides, this gateway will disconnect WAN connection if idle time reaches value of Maximum Idle Time. Please be noted, if the WAN interface serves as the primary one for another WAN interface in Failover role, the Connection Control parameter will not be available to you to configure as the system must set it to “Auto‐ reconnect (Always on)”. ...
Page 38 PoE AP Router Set up “Ethernet Common Configuration” Ethernet WAN Common Configuration Item Value setting Description There are three connection modes.  Auto‐reconnect enables the router to always keep the Internet connection on.  Connect‐on‐demand enables the router to automatically re‐ establish Internet connection as soon as user attempts to access A Must filled setting Connection Control the Internet. Internet connection will be disconnected when it has been inactive for a specified idle time.  Connect Manually allows user to connect to Internet manually. Internet connection will be inactive after it has been inactive for specified idle time. Specify the maximum Idle time setting to disconnect the internet 1. An Optional setting connection when the connection idle timed out. Maximum Idle Time 2. By default 600 Value Range: 300 ~ 86400. seconds is filled‐in Note: This field is available only when Connect‐on‐demand or Connect Manually is selected as the connection control scheme. 1. A Must filled MTU refers to Maximum Transmission Unit. It specifies the largest packet ...
Page 39 PoE AP Router query/ICMP request.  DNS1: set the primary DNS to be the target.  DNS2: set the secondary DNS to be the target.  Gateway: set the Current gateway to be the target.  Other Host: enter an IP address to be the target.  Target2 (None set by default) specifies the second target of sending DNS query/ICMP request.  None: to disable Target2.  DNS1: set the primary DNS to be the target.  DNS2: set the secondary DNS to be the target.  Gateway: set the Current gateway to be the target.  Other Host: enter an IP address to be the target. Enable IGMP (Internet Group Management Protocol) would enable the 1. A Must filled setting router to listen to IGMP packets to discover which interfaces are connected 2. Disable is set by IGMP to which device. The router uses the interface information generated by default IGMP to reduce bandwidth consumption in a multi‐access network ...
Page 40: Load Balance
PoE AP Router 2.1.3 Load Balance When there aremultiple WAN interfaces, and when the bandwidth of one WAN connection is not enough for the traffic loads from the Intranet to the Internet, the WAN load balance function can be considered to enlarge the total WAN bandwidth. Load Balance Strategy There are three optional strategies for load balance: “By Smart Weight”, “By Specific Weight”, and “By User Policy”. Administrator can select strategy according to application requirement and environment status. The strategies are explained as below. By Smart Weight If based on "By Smart Weight" strategy, gateway will take the line speed settings of all WAN interfaces ...
Page 41 PoE AP Router By Specific Weight When you select "By Specific Weight", you need to set up ratio of WAN‐1/WAN‐2 to decide sessions sent ratio. Total ratio should be 100%. Ratio is usually defined based on practical WAN speed of environment. Gateway's traffic control process will operate routing adequately based on the dedicated weights ratio on all WAN interfaces. ...
Page 42 PoE AP Router If packets no belong to user policy rule, the gateway just routes those packets based on smart weight algorithm. ...
Page 43 PoE AP Router Load Balance Setting Go to Basic Network > WAN & Uplink > Load Balance Tab. . The Load Balance function is used to manage balance bandwidth usage among multiple WAN connections When you choose "By Smart Weight" strategy, system will operate load balance function automatically based on the embedded Smart Weight algorithm. However, when you choose "By Specific Weight" strategy, the further "Weight Definition" configuration window will let you define the ratio of transferred sessions between all WAN interfaces for data transfer. At last, when you choose "By User Policy" strategy, the further "User Policy ...
Page 44 PoE AP Router Weight Definition Item Value setting Description WAN ID NA The Identifier for each available WAN interface.. Enter the weight ratio for each WAN interface. 1. A Must filled setting Initially, the bandwidth ratio of each WAN is set by default. Weight 2. Set with bandwidth ratio Value Range: 1 ~ 99. of each WAN by default. Note: The sum of all weights can’t be greater than 100%. Save NA Click the Save button to save the configuration Click the Undo button to restore what you just configured back to the previous Undo NA setting. When By User Policy is selected, a User Policy List screen will appear. With properly configured your policy rules, system will route traffics through available WAN interface based on user defined rules ...
Page 45 PoE AP Router User Policy Configuration Item Value setting Description There are four options can be selected : Any: No specific Source IP is provided. The traffic may come from any source Subnet: Specify the Subnet for the traffics come from the subnet. Input format Source IP 1. A Must filled setting is : xxx.xxx.xxx.xxx/xx e.g. 192.168.123.0/24. Address 2. Any is selected by default. IP Range: Specify the IP Range for the traffics come from the IPs Single IP: Specify a unique IP Address for the traffics come from the IP. Input format is : xxx.xxx.xxx.xxx e.g. 192.168.123.101. There are five options can be selected : Any: No specific destination IP is provided. The traffic may come to any destination. Subnet: Specify the Subnet for the traffics come to the subnet. Input format is : Destination IP 1. A Must filled setting xxx.xxx.xxx.xxx/xx e.g. 192.168.123.0/24. Address 2. Any is selected by default. IP Range: Specify the IP Range for the traffics come to the IPs Single IP: Specify a unique IP Address for the traffics come to the IP. Input format is : xxx.xxx.xxx.xxx e.g. 192.168.123.101. Domain Name: Specify the domain name for the traffics come to the domain There are four options can be selected : All: No specific destination port is provided. Destination 1. A Must filled setting Port Range: Specify the Destination Port Range for the traffics Port 2. All is selected by default. Single Port: Specify a unique destination Port for the traffics Well‐known Applications: Select the service port of well‐known application defined in dropdown list. 1. A Must filled setting ...
Page 46: Lan & Vlan
PoE AP Router 2.2 LAN & VLAN This section provides the configuration of LAN and VLAN. VLAN is an optional feature, and it depends on the product specification of the purchased gateway. 2.2.1 Ethernet LAN The Local Area Network (LAN) can be used to share data or files among computers attached to a network. Following diagram illustrates the network that wired and interconnects computers. ...
Page 47 PoE AP Router Click the Undo button to restore what you just configured back to the previous Undo N/A setting. Create / Edit Additional IP This gateway provides the LAN IP alias function for some special management consideration. You can add additional LAN IP for this gateway, and access to this gateway with the additional IP. When Add button is applied, Additional IP Configuration screen will appear. Configuration Item Value setting Description Name .1 An Optional Setting Enter the name for the alias IP address. 1. A Must filled setting Interface Specify the Interface type. It can be lo or br0. 2. lo is set by default 1. An Optional setting IP Address 2. 192.168.123.254 is set by Enter the addition IP address for this device. default Select the subnet mask for this gateway from the dropdown list. Subnet mask defines how many clients are allowed in one network or subnet. 1. A Must filled setting The default subnet mask is 255.255.255.0 (/24), and it means maximum 254 IP Subnet Mask 2. 255.255.255.0 (/24) is set addresses are allowed in this subnet. However, one of them is occupied by LAN by default IP address of this gateway, so there are maximum 253 clients allowed in LAN network. Value Range: 255.0.0.0 (/8) ~ 255.255.255.255 (/32). Save NA ...
Page 48: Vlan
PoE AP Router 2.2.2 VLAN VLAN (Virtual LAN) is a logical network under a certain switch or router device to group client hosts with a specific VLAN ID. This gateway supports both Port‐based VLAN and Tag‐based VLAN. These functions allow you to divide local network into different “virtual LANs”. It is common requirement for some application scenario. ...
Page 49 PoE AP Router Staff) with NAT mode and DHCP‐2 server equipped. At last, administrator also configure Data Center segment with VLAN ID 1. The VLAN group includes Port‐1 with NAT mode to WAN interface as shown in following diagram. Above is the general case for 3 Ethernet LAN ports in the gateway. But if the device just has one Ethernet LAN port, there will be only one VLAN group for the device. Under such situation, it still supports both the NAT and Bridge mode for the Port‐based VLAN configuration.  Tag‐based VLAN Tag‐based VLAN function can group Ethernet ports, Port‐1 ~ Port‐4, and WiFi Virtual Access Points, VAP‐1 ~ VAP‐8, together with different VLAN tags for deploying subnets in Intranet. All packet flows can carry with different ...
Page 50 PoE AP Router For example, in a company, administrator schemes out 3 network segments, Lab, Meeting Rooms, and Office. In a Security VPN Gateway, administrator can configure Office segment with VLAN ID 12. The VLAN group is equipped with DHCP‐3 server to construct a 192.168.12.x subnet. He also configure Meeting Rooms segment with VLAN ID 11. The VLAN group is equipped with DHCP‐2 server to construct a 192.168.11.x subnet for Intranet only. That is, any client host in VLAN 11 group can’t access the Internet. At last, he configures Lab segment with VLAN ID 10. The VLAN group is equipped with DHCP‐1 server to construct a 192.168.10.x subnet. ...
Page 51 PoE AP Router  VLAN Groups Access Control Administrator can specify the Internet access permission for all VLAN groups. He can also configure which VLAN groups are allowed to communicate with each other. VLAN Group Internet Access Administrator can specify members of one VLAN group to be able to access Internet or not. Following is an example that VLAN groups of VID is 2 and 3 can access Internet but the one with VID is 1 cannot access Internet. ...
Page 52 PoE AP Router Inter VLAN Group Routing: In Port‐based tagging, administrator can specify member hosts of one VLAN group to be able to communicate with the ones of another VLAN group or not. This is a communication pair, and one VLAN group can join many communication pairs. But communication pair doesn’t have the transitive property. That is, A can communicate with B, and B can communicate with C, it doesn’t imply that A can communicate with C. An example is shown at following diagram. VLAN groups of VID is 1 and 2 can access each other but the ones between VID 1 and VID 3 and between VID 2 and VID 3 can’t. ...
Page 53 PoE AP Router VLAN Setting Go to Basic Network > LAN & VLAN > VLAN Tab. The VLAN function allows you to divide local network into different virtual LANs. There are Port‐based and Tag‐based VLAN types. Select one that applies. Configuration Item Value setting Description VLAN Type Port‐based is selected by Select the VLAN type that you want to adopt for organizing you local subnets. default Port‐based: Port‐based VLAN allows you to add rule for each LAN port, and you can do advanced control with its VLAN ID. Tag‐based: Tag‐based VLAN allows you to add VLAN ID, and select member and DHCP Server for this VLAN ID. Go to Tag‐based VLAN List table. Save NA ...
Page 54 PoE AP Router Port‐based VLAN – Configuration Port‐based VLAN Configuration Item Value setting Description 1. A Must filled setting Define the Name of this rule. It has a default text and cannot be modified. Name 2. String format: already have default texts VLAN ID A Must filled setting Define the VLAN ID number, range is 1~4094. The rule is activated according to VLAN ID and Port Members configuration when Enable is selected. Disable is selected by VLAN Tagging default. The rule is activated according Port Members configuration when Disable is selected. ...
Page 55 PoE AP Router NAT / Bridge NAT is selected by default. Select NAT mode or Bridge mode for the rule. These box is unchecked by Select which LAN port(s) and VAP(s) that you want to add to the rule. Port Members default. Note: The available member list can be different for the purchased product. WAN & WAN All WANs is selected by Select which WAN or All WANs that allow accessing Internet. VID to Join default. Note: If Bridge mode is selected, you need to select a WAN and enter a VID. LAN IP Assign an IP Address for the DHCP Server that the rule used, this IP address is a A Must filled setting Address gateway IP. 255.255.255.0(/24) is Select a Subnet Mask for the DHCP Server. Subnet Mask selected by default. Define the DHCP Server type. There are three types you can select: Server, Relay, and Disable. Relay: Select Relay to enable DHCP Relay function for the VLAN group, and you DHCP Server Server is selected by default. only need to fill the DHCP Server IP Address field. /Relay ...
Page 56 PoE AP Router Besides, you can add some IP rules in the IP Fixed Mapping Rule List if DHCP Server for the VLAN groups is required. When Add button is applied, Mapping Rule Configuration screen will appear. Mapping Rule Configuration Item Value setting Description MAC Address A Must filled setting Define the MAC Address target that the DHCP Server wants to match. Define the IP Address that the DHCP Server will assign. If there is a request from the MAC Address filled in the above field, the DHCP IP Address A Must filled setting Server will assign this IP Address to the client whose MAC Address matched the rule. The box is unchecked by Click Enable box to activate this rule. Enable default. Save NA Click the Save button to save the configuration Note: ensure to always click on Apply button to apply the changes after the web browser refreshed taken you back to the VLAN page. ...
Page 57 PoE AP Router Port‐based VLAN – Inter VLAN Group Routing Click VLAN Group Routing button, the VLAN Group Internet Access Definition and Inter VLAN Group Routing screen will appear. When Edit button is applied, a screen similar to this will appear. Inter VLAN Group Routing Item Value setting Description By default, all boxes are checked means all VLAN ID members are allow to VALN Group access WAN interface. Internet All boxes are checked by If uncheck a certain VLAN ID box, it means the VLAN ID member can’t access Access default. Internet anymore. Definition Note: VLAN ID 1 is available always; it is the default VLAN ID of LAN rule. The other VLAN IDs are available only when they are enabled. Click the expected VLAN IDs box to enable the Inter VLAN access function. By default, members in different VLAN IDs can’t access each other. The gateway Inter VLAN The box is unchecked by supports up to 4 rules for Inter VLAN Group Routing. Group Routing default. For example, if ID_1 and ID_2 are checked, it means members in VLAN ID_1 can access members of VLAN ID_2, and vice versa. Save N/A Click the Save button to save the configuration ...
Page 58 PoE AP Router Tag‐based VLAN – Create/Edit VLAN Rules The Tag‐based VLAN allows you to customize each LAN port according to VLAN ID. There is a default rule shows the configuration of all LAN ports and all VAPs. Also, if your device has a DMZ port, you will see DMZ configuration, too. The router supports up to a maximum of 128 tag‐based VLAN rule sets. When Add button is applied, Tag‐based VLAN Configuration screen will appear. Tag‐based VLAN Configuration Item Value setting Description VALN ID A Must filled setting Define the VLAN ID number, range is 6~4094. Internet ...
Page 59: Dhcp Server
PoE AP Router 2.2.3 DHCP Server  DHCP Server The gateway supports up to 4 DHCP servers to fulfill the DHCP requests from different VLAN groups (please refer to VLAN section for getting more usage details). And there is one default setting for whose LAN IP Address is the same one of gateway LAN interface, with its default Subnet Mask setting as “255.255.255.0”, and its default IP Pool ranges is from “.100” to “.200” as shown at the DHCP Server List page on gateway’s WEB UI. User can add more DHCP server configurations by clicking on the “Add” button behind “DHCP Server List”, or clicking on the “Edit” button at the end of each DHCP Server on list to edit its current settings. Besides, user can select a DHCP Server and delete it by clicking on the “Select” check‐box and the “Delete” button. ...
Page 60 PoE AP Router  Fixed Mapping User can assign fixed IP address to map the specific client MAC address by select them then copy, when targets were already existed in the DHCP Client List, or to add some other Mapping Rules by manually in advance, once the target's MAC address was not ready to connect. ...
Page 61 PoE AP Router DHCP Server Setting Go to Basic Network > LAN & VLAN > DHCP Server Tab. The DHCP Server setting allows user to create and customize DHCP Server policies to assign IP Addresses to . the devices on the local area network (LAN) Create / Edit DHCP Server Policy The gateway allows you to custom your DHCP Server Policy. If multiple LAN ports are available, you can define one policy for each LAN (or VLAN group), and it supports up to a maximum of 4 policy sets. When Add button is applied, DHCP Server Configuration screen will appear. ...
Page 62 PoE AP Router DHCP Server Configuration Item Value setting Description 1. String format can be any DHCP Server text Enter a DHCP Server name. Enter a name that is easy for you to understand. Name 2. A Must filled setting LAN IP 1. IPv4 format. The LAN IP Address of this DHCP Server. Address 2. A Must filled setting 255.0.0.0 (/8) is set by Subnet Mask The Subnet Mask of this DHCP Server. default 1. IPv4 format. The IP Pool of this DHCP Server. It composed of Starting Address entered in this IP Pool 2. A Must filled setting field and Ending Address entered in this field. 1. Numberic string format. The Lease Time of this DHCP Server. Lease Time 2. A Must filled setting Value Range: 300 ~ 604800 seconds. String format can be any Domain Name The Domain Name of this DHCP Server. text Primary DNS IPv4 format The Primary DNS of this DHCP Server. Secondary IPv4 format The Secondary DNS of this DHCP Server. ...
Page 63 PoE AP Router Mapping Rule Configuration Item Value setting Description 1. MAC Address string MAC Address format The MAC Address of this mapping rule. 2. A Must filled setting 1. IPv4 format. IP Address The IP Address of this mapping rule. 2. A Must filled setting The box is unchecked by Rule Click Enable box to activate this rule. default. Save N/A Click the Save button to save the configuration Click the Undo button to restore what you just configured back to the previous Undo N/A setting. When the Back button is clicked the screen will return to the DHCP Server Back N/A Configuration page. View / Copy DHCP Client List When DHCP Client List button is applied, DHCP Client List screen will appear. When the DHCP Client is selected and Copy to Fixed Mapping button is applied. The IP and MAC address of DHCP Client will apply to the Mapping Rule List on specific DHCP Server automatically. ...
Page 64 PoE AP Router Option Meaning 66 TFTP server name [RFC 2132] 72 Default World Wide Web Server [RFC 2132] 114 URL [RFC 3679] Create / Edit DHCP Server Options The gateway supports up to a maximum of 99 option settings. When Add/Edit button is applied, DHCP Server Option Configuration screen will appear. DHCP Server Option Configuration Item Value setting Description 1. String format can be any Enter a DHCP Server Option name. Enter a name that is easy for you to Option Name ...
Page 65 PoE AP Router Each different options has different value types. Single IP Address 66 Dropdown list of DHCP Single FQDN Type server option value’s type 72 IP Addresses List, separated by “,” 114 Single URL Should conform to Type : Type Value 1. IPv4 format 2. FQDN format Single IP Address IPv4 format 66 Value 3. IP list Single FQDN FQDN format 4. URL format 5. A Must filled setting 72 IP Addresses List, separated by “,” IPv4 format, separated by “,” 114 Single URL URL format The box is unchecked by Enable ...
Page 66: Power Over Ethernet
PoE AP Router 2.2.4 Power over Ethernet Power over Ethernet (PoE) describes any of several standardized or ad‐hoc systems which pass electric power along with data on twisted pair Ethernet cabling. This allows a single cable to provide both data connection and electric power to devices such as wireless access points, IP cameras, and VoIP phones. This PoE cellular gateway integrated four‐port PoE switch function, and plays as Power Sourcing Equipment (PSE) role that provides power on the Ethernet cable. The PoE design is compliant to IEEE802.3af/at standard, ...
Page 67 PoE AP Router Power over Ethernet Setting Go to Basic Network > LAN & VLAN > Power over Ethernet Tab. The Power over Ethernet setting allows administrator to control PoE related function, such as Power Budget, Port Power Limit, etc… Define Power Budget Power Configuration Item Value setting Description PoE Power Budget 120Watts by default Specify the PoE Power Budget. It can be 120Watts, 60Watts, or Manual. If you select Manaual, you have to enter the power budget. With specified power budget, the PoE gateway can monitor whether the connected PD devices caused power overflow, and force the connected PD with lowest priority to be off line to prevent power overflow situation. Value Range: 4 ~ 120 Watts. Edit PoE Port Definition Click the Edit button to edit the settings for each PoE port. PoE Port Definition Item Value setting Description Power Limit Auto by default Specify the Power Limit for the PoE port. It can be Auto, 802.3af (4W), 802.af ...
Page 68 PoE AP Router (7W), 802.3af(15.4W), 802.3at(30W), or Manual. If you select Manaual, you have to enter the power limit. Value Range: 1 ~ 30 Watts. Low Priority PD Highest by default Specify the Port Priority. It can be Highest, High, or Low. Knockoff Whenever there is a shortage of total power budget, the port with lowest priority will be disabled automatically to provide required power to the ports with higher priority. If there are more than one ports with the same lowest priority, the port number decide it, Port 1 > Port 2 > Port 3 > Port 4, it means Port 4 has the lowest priority on such case.. PD Ping Check The box is unchecked Check the Enable box to activate PD Ping Check function. In addition to enable (Disable) by default the function, you have to specify a timeout value for timeout check. Value Range: 10 ~ 300 seconds. PD No‐response No Action by default Specify the the action to take when the PD doesn’t reply the Ping check activity. Action (PD No‐response). It could be No Action or Power off/on. Select Power off/on to restart the PD device, if required. PD Power No Action by default Specify the the action to take when the PD Power overflow occurs for a certain Overload port. It can be No Action or Power Long Time Off/On. If the Power overload occurs (PD consumes more power than the value specified ...
Page 69: Wifi
PoE AP Router 2.3 WiFi The gateway provides WiFi interface for mobile devices or BYOD devices to connect for Internet/Intranet accessing. Wi‐Fi function is usually modulized design in a gateway, and there can be single or dual modules within a gateway. The WiFi system in the gateway complies with IEEE 802.11ac/11n/11g/11b standard in 2.4GHz or 5GHz single band or 2.4G/5GHz concurrent dual bands of operation. There are several wireless operation modes provided by this device. They are: “AP Router Mode”, “WDS Only Mode”, and “WDS Hybrid ...
Page 70: Wifi Configuration
PoE AP Router 2.3.1 WiFi Configuration Due to optional module(s) and frequency band, you need to setup module one by one. For each module, you need to specify the operation mode, and then setup the virtual APs for wireless access. In addition, if you configured the WiFi Uplink function in the Basic Network > WAN & Uplink > Physical Interface tab, the WiFi uplink function is activated. However, for the wireless LAN function of the module worked under WiFi uplink operation, it also provide AP Router function for local wireless clients to connect to ...
Page 71 PoE AP Router AP Router Mode This mode allows you to get your wired and wireless devices connected to form the Intranet of the wireless gateway, and the Intranet will link to the Internet with NAT mechanism of the gateway. So, this gateway is working as a WiFi AP, but also a WiFi hotspot for Internet accessing service. It means local WiFi clients can ...
Page 72 PoE AP Router WDS Hybrid Mode WDS hybrid mode includes both WDS and AP Router mode. WDS Hybrid mode can act as an access point for its WiFi Intranet and a WiFi bridge for its wired and WiFi Intranets at the same time. Users can thus use the features to build up a large wireless network in a large space like airports, hotels or campus. The diagram illustrates Gateway 1, Gateway 2 and AP 1 connected by WDS. Each gateway ...
Page 73 PoE AP Router Wi‐Fi Security ‐ Authentication & Encryption Wi‐Fi security provides complete authentication and encryption mechanisms to enhance the data security while your data is transferred wirelessly over the air. The wireless gateway supports Shared, WPA‐PSK / WPA2‐PSK and WPA / WPA2 authentication. You can select one authentication scheme to validate the wireless clients while they are ...
Page 74 PoE AP Router WiFi Configuration Setting The Wi‐Fi configuration allows user to configure 2.4GHz or 5GHz WiFi settings. Go to Basic Network > WiFi > WiFi Module One Tab. If the gateway is equipped with two WiFi modules, there will be another WiFi Module Two. You can do the similar configurations on both WiFi modules. Basic Configuration Basic Configuration Item Value setting Description Specify the intended operation band for the WiFi module. Basically, this setting is fixed and cannot be changed once the module is integrated Operation Band A Must filled setting into the product. However, there is some module with selectable band for user to choose according to his network environment. Under such situation, you can specify which operation band is suitable for the application. WPS N/A Press 2.4G or 5G button will lead user to WiFi Protected Setup page. Configure WiFi Setting Configuring Wi‐Fi Settings Item Value setting Description The box is checked by Check the Enable box to activate Wi‐Fi function. WiFi Module default WiFi Operation Specify the WiFi Operation Mode according to your application. ...
Page 75 PoE AP Router Mode Go to the following table for AP Router Mode, WDS Only Mode, WDS Hybrid Mode, Universal Repeater Mode, AP Only Mode, and Client Mode settings. The available operation modes depend on the product specification. In the following, the specific configuration description for each WiFi operation mode is given. AP Router Mode For the AP Router mode, the device not only supports stations connection but also the router function. The WAN port and the NAT function are enabled. AP Router Mode Item Value setting Description The box is unchecked Check the Enable box to activate Green AP function. Green AP by default. Check the Enable box to activate this function. The box is checked by VAP Isolation By default, the box is checked; it means that stations which associated to different default. VAPs cannot communicate with each other.  Multiple AP Names (VAP) It means multiple SSID feature and the device support up to 8 virtual SSIDs. Select one of VAP to configure its setting at a time.  1. A Must filled setting Enable Multiple AP 2. VAP1 and VAP8 are Check the enable box to activate the selected VAP. ...
Page 76 PoE AP Router (SSID) text The SSID is used for identifying from another AP, and client stations will associate 2. The box is checked with AP according to SSID. If the broadcast SSID option is enabled, it means the by default. SSID will be broadcasted, and the stations can associate with this device by scanning SSID. Check the Enable box to activate this function. The box is checked by STA Isolation By default, the box is checked; it means that stations which associated to the same default. VAP cannot communicate with each other. Select a radio channel for the VAP. Each channel is corresponding to different radio band. The permissible channels depend on the Regulatory Domain. 1. A Must filled setting. There are two available options when Auto is selected:  By AP Numbers Channel 2. Auto is selected be default. The channel will be selected according to AP numbers (The less, the better).  By Less Interference The channel will be selected according to interference. (The lower, the better). Specify the preferred WiFi System. The dropdown list of WiFi system is based on IEEE 802.11 standard. WiFi System A Must filled setting  2.4G Wi‐Fi can select b, g and n only or mixed with each other. ...
Page 77 PoE AP Router It owns the same encryption system as WPA or WPA2. The authentication uses pre‐shared key instead of RADIUS server. When WPA‐PSK / WPA2‐PSK is selected It owns the same setting as WPA‐PSK or WPA2‐PSK. The client stations can associate with this device via WPA‐PSK or WPA2‐PSK. Select a suitable encryption method and enter the required key(s). The available method in the dropdown list depends on the Authentication you selected. None It means that the device is open system without encrypting. WEP Up to 4 WEP keys can be set, and you have to select one as current key. The key type can set to HEX or ASCII. If HEX is selected, the key should consist of (0 to 9) and (A to F). If ASCII is selected, the key should consist of ASCII table. 1. A Must filled setting. TKIP Encryption 2. None is selected be TKIP was proposed instead of WEP without upgrading hardware. Enter a Pre‐ default. shared Key for it. The length of key is from 8 to 63 characters. AES The newest encryption system in WiFi, it also designed for the fast 802.11n high bitrates schemes. Enter a Pre‐shared Key for it. The length of key is from 8 to 63 characters. You are recommended to use AES encryption instead of any others for security. TKIP / AES TKIP / AES mixed mode. It means that the client stations can associate with this device via TKIP or AES. Enter a Pre‐shared Key for it. The length of key is from 8 to 63 characters. Save N/A Click the Save button to save the current configuration. Undo N/A ...
Page 78 PoE AP Router WDS Only Mode Item Value setting Description The box is Check the Enable box to activate Green AP function. Green AP unchecked by default. Select a radio channel for the VAP. Each channel is corresponding to different radio band. The permissible channels depend on the Regulatory Domain. 1. A Must filled There are two available options when Auto is selected: setting.  By AP Numbers Channel 2. Auto is selected The channel will be selected according to AP numbers (The less, the better). be default.  By Less Interference The channel will be selected according to interference. (The lower, the better). For security, there are several authentication methods supported. Client stations should provide the key when associate with this device. When Open is selected The check box named 802.1x shows up next to the dropdown list.  802.1x (The box is unchecked by default) When 802.1x is enabled, it means the client stations will be authenticated by RADIUS server. RADIUS Server IP (The default IP is 0.0.0.0) RADIUS Server Port (The default value is 1812) ...
Page 79 PoE AP Router When WPA‐PSK is selected It owns the same encryption system as WPA. The authentication uses pre‐shared key instead of RADIUS server. When WPA2‐PSK is selected It owns the same encryption system as WPA2. The authentication uses pre‐shared key instead of RADIUS server. Select a suitable encryption method and enter the required key(s). The available method in the dropdown list depends on the Authentication you selected. None It means that the device is open system without encrypting. WEP Up to 4 WEP keys can be set, and you have to select one as current key. The key 1. A Must filled type can set to HEX or ASCII. setting. If HEX is selected, the key should consist of (0 to 9) and (A to F). Encryption 2. None is selected If ASCII is selected, the key should consist of ASCII table. be default. TKIP TKIP was proposed instead of WEP without upgrading hardware. Enter a Pre‐ shared Key for it. The length of key is from 8 to 63 characters. AES The newest encryption system in WiFi, it also designed for the fast 802.11n high bitrates schemes. Enter a Pre‐shared Key for it. The length of key is from 8 to 63 characters. You are recommended to use AES encryption instead of any others for security. Press the Scan button to scan the spatial AP information, and then select one from Scan Remote AP’s N/A the AP list, the MAC of selected AP will be auto filled in the following Remote AP MAC List MAC table. A Must filled ...
Page 80 PoE AP Router WDS Hybrid Mode Item Value setting Description Check the Enable box to activate this function. The box is checked by With the function been enabled, the device can auto‐learn WDS peers without Lazy Mode default. manually entering other AP’s MAC address. But at least one of the APs has to fill remote AP MAC addresses. The box is unchecked Check the Enable box to activate Green AP function. Green AP by default. Check the Enable box to activate this function. The box is checked by VAP Isolation By default, the box is checked; it means that stations which associated to different default. VAPs cannot communicate with each other.  Multiple AP Names (VAP) It means multiple SSID feature and the device support up to 8 virtual SSIDs. Select one of VAP to configure its setting at a time.  Enable 1. A Must filled setting Multiple AP 2. VAP1 and VAP8 are Check the enable box to activate the selected VAP. Names ...
Page 81 PoE AP Router VAP cannot communicate with each other. Select a radio channel for the VAP. Each channel is corresponding to different radio band. The permissible channels depend on the Regulatory Domain. 1. A Must filled setting. There are two available options when Auto is selected:  By AP Numbers Channel 2. Auto is selected be default. The channel will be selected according to AP numbers (The less, the better).  By Less Interference The channel will be selected according to interference. (The lower, the better). Specify the preferred WiFi System. The dropdown list of Wi‐Fi system is based on IEEE 802.11 standard. WiFi System A Must filled setting  2.4G Wi‐Fi can select b, g and n only or mixed with each other.  5G Wi‐Fi can select a, n and ac only or mixed with each other. For security, there are several authentication methods supported. Client stations should provide the key when associate with this device. When Open is selected The check box named 802.1x shows up next to the dropdown list.  802.1x (The box is unchecked by default) When 802.1x is enabled, it means the client stations will be authenticated by RADIUS server. RADIUS Server IP (The default IP is 0.0.0.0) RADIUS Server Port (The default value is 1812) RADIUS Shared Key ...
Page 82 PoE AP Router AES The newest encryption system in WiFi, it also designed for the fast 802.11n high bitrates schemes. Enter a Pre‐shared Key for it. The length of key is from 8 to 63 characters. You are recommended to use AES encryption instead of any others for security. Save N/A Click the Save button to save the current configuration. Undo N/A Click the Undo button to restore configuration to previous setting before saving. Apply N/A Click the Apply button to apply the saved configuration. ...
Page 83: Wireless Client List
PoE AP Router 2.3.2 Wireless Client List The Wireless Client List page shows the information of wireless clients which are associated with this device. Go to Basic Network > WiFi > Wireless Client List Tab. Select Target WiFi Target Configuration Item Value setting Description Select the WiFi module to check the information of connected clients. Module Select A Must filled setting. For those single WiFi module products, this option is hidden. Specify the intended operation band for the WiFi module. Basically, this setting is fixed and cannot be changed once the module is integrated into the product. However, there is some module with selectable Operation Band A Must filled setting. band for user to choose according to his network environment. Under such situation, you can specify which operation band is suitable for the application. 1. A Must filled Specify the VAP to show the associated clients information in the following Client List. By default, All VAP is selected. setting. Multiple AP Names 2. All is selected by default. Show Client List The following Client List shows the information for wireless clients that is associated with the selected VAP(s). Target Configuration Item Value setting ...
Page 84 PoE AP Router MAC Address N/A It shows the MAC address of client. Mode N/A It shows what kind of Wi‐Fi system the client used to associate with this device. Rate N/A It shows the data rate between client and this device. RSSI0, RSSI1 N/A It shows the RX sensitivity (RSSI) value for each radio path. Signal N/A The signal strength between client and this device. Interface N/A It shows the VAP ID that the client associated with. Refresh N/A Click the Refresh button to update the Client List immediately. ...
Page 85: Advanced Configuration
PoE AP Router 2.3.3 Advanced Configuration This device provides advanced wireless configuration for professional user to optimize the wireless performance under the specific installation environment. Please note that if you are not familiar with the WiFi technology, just leave the advanced configuration with its default values, or the connectivity and performance may get worse with improper settings. Go to Basic Network > WiFi > Advanced Configuration Tab. Select Target WiFi Target Configuration Item Value setting Description Select the WiFi module to check the information of connected clients. Module Select A Must filled setting. For those single WiFi module products, this option is hidden. Specify the intended operation band for the WiFi module. Basically, this setting is fixed and cannot be changed once the module is Operation Band A Must filled setting. integrated into the product. However, there is some module with selectable band for user to choose according to his network environment. Setup Advanced Configuration ...
Page 86 PoE AP Router Advanced Configuration Item Value setting Description The default setting is It limits the available radio channel of this device. Regulatory Domain according to where The permissible channels depend on the Regulatory Domain. the product sale to It shows the time interval between each beacon packet broadcasted. Beacon Interval 100 The beacon packet contains SSID, Channel ID and Security setting. A DTIM (Delivery Traffic Indication Message) is a countdown informing clients of the next window for listening to broadcast message. When the DTIM Interval 3 device has buffered broadcast message for associated client, it sends the next DTIM with a DTIM value. RTS (Request to send) Threshold means when the packet size is over the setting value, then active RTS technique. RTS Threshold 2347 RTS/CTS is a collision avoidance technique. It means RTS never activated when the threshold is set to 2347. Wireless frames can be divided into smaller units (fragments) to improve Fragmentation 2346 performance in the presence of RF interference at the limits of RF coverage. The box is checked by WMM (Wi‐Fi Multimedia) can help control latency and jitter when WMM default transmitting multimedia content over a wireless connection. Short GI (Guard Interval) is defined to set the sending interval between each By default 400ns is ...
Page 87: Uplink Profile
PoE AP Router 2.3.4 Uplink Profile This device provides WiFi Uplink function for connecting to a wireless access point just like connected to a wired WAN or cellular WAN connection. It can operate as a NAT gateway and link the devices wirelessly to the uplink network or hosts. To connect to the wireless access point, user has to enable the wireless Uplink function for a certain WiFi Module ...
Page 88 PoE AP Router Create/Edit Uplink Profile The Profile List shows the settings for the created uplink profiles. The information includes Profile Name, SSID, Channel, Authentication, Encryption, MAC Address, Signal Strength, Priority, and Enable. When Add button is applied, Profile Configuration screen will appear. Profile Configuration Item Value setting Description 1. String format can be Enter a profile name for the uplink network specified below. It is a name that is Profile Name any text easy for you to understand. Value Range: 1 ~ 64 characters. 2. A Must filled setting Enter the SSID for the VAP, and decide whether to broadcast the SSID or not. 1. String format : Any The SSID is used for identifying from another AP, and client stations will text Network ID (SSID) associate with AP according to SSID. If the broadcast SSID option is enabled, it 2. The box is checked means the SSID will be broadcasted, and the stations can associate with this by default. device by scanning SSID. Select a radio channel for the VAP. Each channel is corresponding to different radio band. The permissible channels depend on the Regulatory Domain. There are two available options when Auto is selected: 1. A Must filled  By AP Numbers setting. Channel The channel will be selected according to AP numbers (The less, the ...
Page 89 PoE AP Router 2. Open is selected by can be Open, Shared, WPA‐SPK, or WPA2‐PSK. default. When Open is selected, the preshared WEP key could be set for authentication; When Shared is selected, the preshared WEP key should be set for authentication; When WPA‐PSK or WPA2‐PSK is selected, The the TKIP or AES preshared key should be set for authentication; Select a suitable encryption method and enter the required key(s). The available method in the dropdown list depends on the Authentication you selected. None It means that the device is open system without encrypting. WEP Up to 4 WEP keys can be set, and you have to select one as current key. The key 1. A Must filled type can set to HEX or ASCII. setting. If HEX is selected, the key should consist of (0 to 9) and (A to F). Encryption 2. None is selected by If ASCII is selected, the key should consist of ASCII table. default. TKIP TKIP was proposed instead of WEP without upgrading hardware. Enter a Preshared Key for it. The length of key is from 8 to 63 characters. AES The newest encryption system in WiFi, it also designed for the fast 802.11n high bitrates schemes. Enter a Preshared Key for it. The length of key is from 8 to 63 characters. You are recommended to use AES encryption instead of any others for security. 1. MAC Address string Specify the MAC Address of the access point (with the Network ID) to be MAC Address Format connected to. 2. A Must fill setting 1. An Optional filled Specify a priority setting for the uplink profile when the By User‐defined Priority ...
Page 90 PoE AP Router Once you selected an AP from the AP list, the channel, SSID, Authentication, Encryption, and MAC address will be automatically filled into the profile, you just have to enter a key for the uplink connection, if required. ...
Page 91: Ipv6
PoE AP Router 2.4 IPv6 The growth of the Internet has created a need for more addresses than are possible with IPv4. IPv6 (Internet Protocol version 6) is a version of the Internet Protocol (IP) intended to succeed IPv4, which is the protocol currently used to direct almost all Internet traffic. IPv6 also implements additional features not present in IPv4. It simplifies aspects of address assignment (stateless address auto‐configuration), network renumbering and router announcements when changing Internet connectivity providers. 2.4.1 IPv6 Configuration The IPv6 Configuration setting allows user to set the IPv6 connection type to access the IPv6 network. This gateway supports various types of IPv6 connection, including Static IPv6, DHCPv6, PPPoEv6, 6to4, and 6in4 ...
Page 92 PoE AP Router IPv6 WAN Connection Type Static IPv6 Static IPv6 does the same function as static IPv4. The static IPv6 provides manual setting of IPv6 address, IPv6 default gateway address, and IPv6 DNS. Above diagram depicts the IPv6 IP addressing, type in the information provided by your ISP to setup the IPv6 network. DHCPv6 DHCP in IPv6 does the same function as DHCP in IPv4. The DHCP server sends IP address, DNS server addresses and other possible data to the DHCP client to configure automatically. The server also sends a lease time of the address and time to re‐contact the server for IPv6 address renewal. The client has then to resend a request to renew the IPv6 address. ...
Page 93 PoE AP Router Above diagram depicts DHCP IPv6 IP addressing, the DHCPv6 server on the ISP side assigns IPv6 address, IPv6 default gateway address, and IPv6 DNS to client host’s automatically. PPPoEv6 PPPoEv6 in IPv6 does the same function as PPPoE in IPv4. The PPPoEv6 server provides configuration parameters based on PPPoEv6 client request. When PPPoEv6 server gets client request and successfully authenticates it, the server sends IP address, DNS server addresses and other required parameters to ...
Page 94 PoE AP Router In above diagram, the 6to4 means no need to set gateway address "automatic" tunneling solution. The automatic mean have relay server, as defined in RFC 3068 has included segments draw 192.88.99.0/24 used as 6to4 relay of any‐cast address to complete 6in4 setting. 6in4 6in4 is an Internet transition mechanism for Internet IPv4 to IPv6 migration. 6in4 uses tunneling to encapsulate IPv6 traffic over explicitly‐configured IPv4 links. As defined in RFC 4213, the 6in4 traffic is sent over ...
Page 95 PoE AP Router IPv6 Configuration Setting Go to Basic Network > IPv6 > Configuration Tab. The IPv6 Configuration setting allows user to set the IPv6 connection type to access the IPv6 network. IPv6 Configuration Item Value setting Description The box is unchecked IPv6 Check the Enable box to activate the IPv6 function. by default, Define the selected IPv6 WAN Connection Type to establish the IPv6 connectivity. Select Static IPv6 when your ISP provides you with a set IPv6 addresses. Then go 1. Only can be to Static IPv6 WAN Type Configuration. WAN Connection selected when IPv6 Select DHCPv6 when your ISP provides you with DHCPv6 services. Type Enable Select PPPoEv6 when your ISP provides you with PPPoEv6 account settings. 2. A Must filled setting Select 6to4 when you want to user IPv6 connection over IPv4. Select 6in4 when you want to user IPv6 connection over IPv4. Note: For the products just having 3G/4G WAN interface, only 6to4 and 6in4 are supported. Static IPv6 WAN Type Configuration ...
Page 96 PoE AP Router Static IPv6 WAN Type Configuration Item Value setting Description IPv6 Address A Must filled setting Enter the WAN IPv6 Address for the router. Subnet Prefix A Must filled setting Enter the WAN Subnet Prefix Length for the router. Length Default Gateway A Must filled setting Enter the WAN Default Gateway IPv6 address. Primary DNS An optional setting Enter the WAN primary DNS Server. Secondary DNS An optional setting Enter the WAN secondary DNS Server. The box is unchecked MLD Snooping Enable/Disable the MLD Snooping function by default LAN Configuration LAN Configuration Item Value setting Description Global Address A Must filled setting Enter the LAN IPv6 Address for the router.
Page 97 PoE AP Router DHCPv6 WAN Type Configuration DHCPv6 WAN Type Configuration Item Value setting Description The option [From Select the [Specific DNS] option to active Primary DNS and Secondary DNS. Then DNS Server] is selected by fill the DNS information. default Can not modified by Primary DNS Enter the WAN primary DNS Server. default Can not modified by Secondary DNS Enter the WAN secondary DNS Server. default The box is unchecked MLD Enable/Disable the MLD Snooping function by default LAN Configuration LAN Configuration Item Value setting Description Global Address Value auto‐created ...
Page 98 PoE AP Router PPPoEv6 WAN Type Configuration PPPoEv6 WAN Type Configuration Item Value setting Description Enter the Account for setting up PPPoEv6 connection. If you want more Account A Must filled setting information, please contact your ISP. Value Range: 0 ~ 45 characters. Enter the Password for setting up PPPoEv6 connection. If you want more Password A Must filled setting information, please contact your ISP. Enter the Service Name for setting up PPPoEv6 connection. If you want more A Must filled Service Name information, please contact your ISP. setting/Option Value Range: 0 ~ 45 characters. Connection Control Fixed value The value is Auto‐reconnect(Always on). Enter the MTU for setting up PPPoEv6 connection. If you want more MTU A Must filled setting information, please contact your ISP. Value Range: 1280 ~ 1492. The box is unchecked MLD Snooping Enable/Disable the MLD Snooping function by default LAN Configuration ...
Page 99 PoE AP Router If above setting is configured, click the save button to save the configuration and click reboot button to reboot the router. 6to4 WAN Type Configuration 6to4 WAN Type Configuration Item Value setting Description 6to4 Address Value auto‐created IPv6 address for access the IPv6 network. Primary DNS An optional setting Enter the WAN primary DNS Server. Secondary DNS An optional setting Enter the WAN secondary DNS Server. The box is unchecked MLD Enable/Disable the MLD Snooping function by default LAN Configuration LAN Configuration Item Value setting Description Enter the LAN IPv6 Address for the router. Global Address An optional setting Value Range: 0 ~ FFFF. Link‐local Address ...
Page 100 PoE AP Router 6in4 WAN Type Configuration Please go to find IPv6 tunnel brokers to establish 6in4 tunnel. (You can find List of IPv6 tunnel brokers that support 6in4 service from wiki.) Then enter the Local IPv4 address of router into Client IPv4 Address field in IPv6 tunnel broker setting page. 6in4 WAN Type Configuration Item Value setting Description Remote IPv4 A Must filled setting Filled Server IPv4 Address gotten from tunnel broker in this field. Address Local IPv4 Address Value auto‐created IPv4 address of this router. Local IPv6 Address ...
Page 101 PoE AP Router Address Auto‐configuration Address Auto‐configuration Item Value setting Description The box is unchecked Auto‐configuration Check to enable the Auto configuration feature. by default Define the selected IPv6 WAN Connection Type to establish the IPv6 connectivity. Select Stateless to manage the Local Area Network to be SLAAC + RDNSS Router Advertisement Lifetime (A Must filled setting): Enter the Router Advertisement Lifetime (in seconds). 200 is set by default. Value Range: 0 ~ 65535. 1. Only can be Select Stateful to manage the Local Area Network to be Stateful (DHCPv6). selected when Auto‐ IPv6 Address Range (Start) (A Must filled setting): Enter the start IPv6 Address Auto‐configuration configuration enabled for the DHCPv6 range for your local computers. 0100 is set by default. Type 2. Stateless is selected Value Range: 0001 ~ FFFF. by default IPv6 Address Range (End) (A Must filled setting): Enter the end IPv6 Address for the DHCPv6 range for your local computers. 0200 is set by default. Value Range: 0001 ~ FFFF. IPv6 Address Lifetime (A Must filled setting): Enter the DHCPv6 lifetime for your local computers. 36000 is set by default. Value Range: 0 ~ 65535. ...
Page 102: Port Forwarding
PoE AP Router 2.5 Port Forwarding Network address translation (NAT) is a methodology of remapping one IP address space into another by modifying network address information in Internet Protocol (IP) datagram packet headers while they are in transit across a traffic routing device. The technique was originally used for ease of rerouting traffic in IP networks ...
Page 103: Configuration
PoE AP Router 2.5.1 Configuration NAT Loopback This feature allows you to access the WAN global IP address from your inside NAT local network. It is useful when you run a server inside your network. For example, if you set a mail server at LAN side, your local devices can access this mail server through gateway’s global IP address when enable NAT loopback feature. On either side are you in accessing the email server, at the LAN side or at the WAN side, you don’t need to change the IP address of the mail server. Configuration Setting Go to Basic Network > Port Forwarding > Configuration tab. The NAT Loopback allows user to access the WAN IP address from inside your local network. Enable NAT Loopback Configuration Item ...
Page 104: Virtual Server & Virtual Computer
PoE AP Router 2.5.2 Virtual Server & Virtual Computer There are some important Pot Forwarding functions implemented within the gateway, including "Virtual Server", "NAT loopback" and "Virtual Computer". It is necessary for cooperate staffs who travel outside and want to access various servers behind office gateway. You can set up those servers by using "Virtual Server" feature. After trip, if want to access those servers from LAN side by global IP, without change original setting, NAT Loopback can achieve it. ...
Page 105 PoE AP Router Virtual Server & NAT Loopback "Virtual Server" allows you to access servers with the global IP address or FQDN of the gateway as if they are servers existed in the Internet. But in fact, these servers are located in the Intranet and are physically behind the gateway. The gateway serves the service requests by port forwarding the requests to the LAN servers and transfers the replies from LAN servers to the requester on the WAN side. As shown in example, an E‐mail virtual server is defined to be located at a server with IP address 10.0.75.101 in the Intranet of Network‐A, including SMTP ...
Page 106 PoE AP Router Virtual Server & Virtual Computer Setting Go to Basic Network > Port Forwarding > Virtual Server & Virtual Computer tab. Enable Virtual Server and Virtual Computer Configuration Item Value setting Description The box is unchecked by Virtual Server Check the Enable box to activate this port forwarding function default The box is checked by Virtual Computer Check the Enable box to activate this port forwarding function default Save N/A Click the Save button to save the settings. Undo N/A Click the Undo button to cancel the settings. Create / Edit Virtual Server The gateway allows you to custom your Virtual Server rules. It supports up to a maximum of 20 rule‐based Virtual Server sets. ...
Page 107 PoE AP Router Virtual Server Rule Configuration Item Value setting Description Define the selected interface to be the packet‐entering interface of the gateway. If the packets to be filtered are coming from WAN‐x then select WAN‐x for this 1. A Must filled setting field. WAN Interface 2. Default is ALL. Select ALL for packets coming into the gateway from any interface. It can be selected WAN‐x box when WAN‐x enabled. Note: The available check boxes (WAN‐1 ~ WAN‐4) depend on the number of WAN interfaces for the product. This field is to specify the IP address of the interface selected in the WAN Server IP A Must filled setting Interface setting above. When “ICMPv4” is selected It means the option “Protocol” of packet filter rule is ICMPv4. Apply Time Schedule to this rule, otherwise leave it as Always. (refer to Scheduling setting under Object Definition) Then check Enable box to enable this rule. When “TCP” is selected It means the option “Protocol” of packet filter rule is TCP. Public Port selected a predefined port from Well‐known Service, and Private Protocol A Must filled setting Port is the same with Public Port number. Public Port is selected Single Port and specify a port number, and Private Port can be set a Single Port number. Public Port is selected Port Range and specify a port range, and Private Port can be selected Single Port or Port Range. Value Range: 1 ~ 65535 for Public Port, Private Port. When “UDP” is selected ...
Page 108 PoE AP Router Public Port selected a predefined port from Well‐known Service, and Private Port is the same with Public Port number. Public Port is selected Single Port and specify a port number, and Private Port can be set a Single Port number. Public Port is selected Port Range and specify a port range, and Private Port can be selected Single Port or Port Range. Value Range: 1 ~ 65535 for Public Port, Private Port. When “TCP & UDP” is selected It means the option “Protocol” of packet filter rule is TCP and UDP. Public Port selected a predefined port from Well‐known Service, and Private Port is the same with Public Port number. Public Port is selected Single Port and specify a port number, and Private Port can be set a Single Port number. Public Port is selected Port Range and specify a port range, and Private Port can be selected Single Port or Port Range. Value Range: 1 ~ 65535 for Public Port, Private Port. When “GRE” is selected It means the option “Protocol” of packet filter rule is GRE. When “ESP” is selected It means the option “Protocol” of packet filter rule is ESP. When “SCTP” is selected It means the option “Protocol” of packet filter rule is SCTP. When “User‐defined” is selected It means the option “Protocol” of packet filter rule is User‐defined. For Protocol Number, enter a port number. 1. An optional filled setting Apply Time Schedule to this rule; otherwise leave it as (0)Always. (refer to Time Schedule 2. (0)Always Is selected by Scheduling setting under Object Definition) default. 1. An optional filled setting Rule ...
Page 109 PoE AP Router Create / Edit Virtual Computer The gateway allows you to custom your Virtual Computer rules. It supports up to a maximum of 20 rule‐based Virtual Computer sets. When Add button is applied, Virtual Computer Rule Configuration screen will appear. Virtual Computer Rule Configuration Item Value setting Description Global IP A Must filled setting This field is to specify the IP address of the WAN IP. Local IP A Must filled setting This field is to specify the IP address of the LAN IP. Enable N/A Then check Enable box to enable this rule. Save N/A Click the Save button to save the settings. ...
Page 110: Dmz & Pass Through
PoE AP Router 2.5.3 DMZ & Pass Through DMZ (De Militarized Zone) Host is a host that is exposed to the Internet cyberspace but still within the protection of firewall by gateway device. So, the function allows a computer to execute 2‐way communication for Internet games, Video conferencing, Internet telephony and other special applications. In some cases when a specific application is blocked by NAT mechanism, you can indicate that LAN computer as a DMZ host to solve this problem. The DMZ function allows you to ask the gateway pass through all normal packets to the DMZ host behind the ...
Page 111 PoE AP Router VPN Pass through Scenario Since VPN traffic is different from that of TCP or UDP connection, it will be blocked by NAT gateway. To support the pass through function for the VPN connections initiating from VPN clients behind NAT gateway, the gateway must implement some kind of VPN pass through function for such application. The gateway support the pass through function for IPSec, PPTP, and L2TP connections, you just have to check the corresponding checkbox to activate it. DMZ & Pass Through Setting Go to Basic Network > Port Forwarding > DMZ & Pass Through tab. The DMZ host is a host that is exposed to the Internet cyberspace but still within the protection of firewall by gateway device. Enable DMZ and Pass Through Configuration ...
Page 112 PoE AP Router Select ALL for packets coming into the router from any interfaces. It can be selected WAN‐x box when WAN‐x enabled. Note: The available check boxes (WAN‐1 ~ WAN‐4) depend on the number of WAN interfaces for the product. Pass Through Enable The boxes are checked by Check the box to enable the pass through function for the IPSec, PPTP, and default L2TP. With the pass through function enabled, the VPN hosts behind the gateway still can connect to remote VPN servers. Save N/A Click the Save button to save the settings. Undo N/A Click the Undo button to cancel the settings ...
Page 113: Routing
PoE AP Router 2.6 Routing If you have more than one router and subnet, you will need to enable routing function to allow packets to find proper routing path and allow different subnets to communicate with each other. Routing is the process of selecting best paths in a network. It is performed for many kinds of networks, like electronic data networks (such as the Internet), by using packet switching technology. The routing process usually directs forwarding on ...
Page 114: Static Routing
PoE AP Router 2.6.1 Static Routing "Static Routing" function lets you define the routing paths for some dedicated hosts/servers or subnets to store in the routing table of the gateway. The gateway routes incoming packets to different peer gateways based on the routing table. You need to define the static routing information in gateway routing rule list. When the administrator of the gateway wants to specify ...
Page 115 PoE AP Router Static Routing Setting Go to Basic Network > Routing > Static Routing Tab. There are three configuration windows for static routing feature, including "Configuration", "Static Routing Rule List" and "Static Routing Rule Configuration" windows. "Configuration" window lets you activate the global static routing feature. Even there are already routing rules, if you want to disable routing temporarily, just uncheck the Enable box to disable it. "Static Routing Rule List" window lists all your defined static routing rule entries. Using "Add" or "Edit" button to add and create one new static routing rule or to modify an existed one. ...
Page 116 PoE AP Router Add button is applied, Static Routing Rule Configuration screen will appear, while the Edit button at the end of each static routing rule can let you modify the rule. IPv4 Static Routing Item Value setting Description 1. IPv4 Format Destination IP Specify the Destination IP of this static routing rule. 2. A Must filled setting 255.255.255.0 (/24) is set by Subnet Mask Specify the Subnet Mask of this static routing rule. default 1. IPv4 Format Gateway IP Specify the Gateway IP of this static routing rule. 2. A Must filled setting Select the Interface of this static routing rule. It can be Auto, or the available Interface Auto is set by default WAN / LAN interfaces. 1. Numberic String Format The Metric of this static routing rule. Metric 2. A Must filled setting Value Range: 0 ~ 255. The box is unchecked by Rule Click Enable box to activate this rule. default. Save NA Click the Save button to save the configuration Click the Undo button to restore what you just configured back to the previous Undo NA ...
Page 117: Dynamic Routing
PoE AP Router 2.5.2 Dynamic Routing Dynamic Routing, also called adaptive routing, describes the capability of a system, through which routes are characterized by their destination, to alter the path that the route takes through the system in response to a change in network conditions. This gateway supports dynamic routing protocols, including RIPv1/RIPv2 (Routing Information Protocol), OSPF (Open Shortest Path First), and BGP (Border Gateway Protocol), for you to establish routing table automatically. The feature of dynamic routing will be very useful when there are lots of subnets in your network. ...
Page 118 PoE AP Router RIP Scenario The Routing Information Protocol (RIP) is one of the oldest distance‐vector routing protocols, which employs the hop count as a routing metric. RIP prevents routing loops by implementing a limit on the number of hops allowed in a path from the source to a destination. The maximum number of hops allowed for RIP is 15. This hop limit, however, also limits the size of networks that RIP can support. A hop count of ...
Page 119 PoE AP Router BGP Scenario Border Gateway Protocol (BGP) is a standard exterior gateway protocol designed to exchange routing and reachability information between autonomous systems (AS) on the Internet. It usually makes routing decisions based on paths, network policies, or rule‐sets. Most ISPs use BGP to establish routing between one another (especially for multi‐homed). Very large private IP networks also use BGP internally. The major BGP gateway ...
Page 120 PoE AP Router Dynamic Routing Setting Go to Basic Network > Routing > Dynamic Routing Tab. The dynamic routing setting allows user to customize RIP, OSPF, and BGP protocol through the router based on their office setting. In the "Dynamic Routing" page, there are seven configuration windows for dynamic routing feature. They are the "RIP Configuration" window, "OSPF Configuration" window, "OSPF Area List", "OSPF Area Configuration", "BGP Configuration", "BGP Neighbor List" and "BGP Neighbor Configuration" window. RIP, OSPF and BGP protocols can be configured individually. The "RIP Configuration" window lets you choose which version of RIP protocol to be activated or disable it. The "OSPF Configuration" window can let you activate the OSPF dynamic routing protocol and specify its backbone ...
Page 121 PoE AP Router RIP Configuration The RIP configuration setting allows user to customize RIP protocol through the router based on their office . setting RIP Configuration Item Value setting Description Select Disable will disable RIP protocol. RIP Enable Disable is set by default Select RIP v1 will enable RIPv1 protocol. Select RIP v2 will enable RIPv2 protocol. OSPF Configuration The OSPF configuration setting allows user to customize OSPF protocol through the router based on their . office setting ...
Page 122 PoE AP Router Select MD5 will enable MD5 Authentication with entered the ID and Key in these fields on OSPF protocol. 1. Classless Inter Domain Routing (CIDR) Subnet Backbone Mask Notation. (Ex: The Backbone Subnet of this router on OSPF protocol. Subnet 192.168.1.0/24) 2. A Must filled setting Create / Edit OSPF Area Rules The gateway allows you to custom your OSPF Area List rules. It supports up to a maximum of 32 rule sets. When Add button is applied, OSPF Area Rule Configuration screen will appear. OSPF Area Configuration Item Value setting Description 1. Classless Inter Domain Routing (CIDR) Subnet Area Subnet Mask Notation. (Ex: The Area Subnet of this router on OSPF Area List. 192.168.1.0/24) 2. A Must filled setting 1. IPv4 Format Area ID The Area ID of this router on OSPF Area List. 2. A Must filled setting The box is unchecked by Area Click Enable box to activate this rule. default. Save ...
Page 123 PoE AP Router BGP Configuration The BGP configuration setting allows user to customize BGP protocol through the router setting. BGP Network Configuration Item Value setting Description BGP The box is unchecked by Check the Enable box to activate the BGP protocol. default ASN 1. Numberic String Format The ASN Number of this router on BGP protocol. 2. A Must filled setting Value Range: 1 ~ 4294967295. Router ID 1. IPv4 Format The Router ID of this router on BGP protocol. 2. A Must filled setting Create / Edit BGP Network Rules The gateway allows you to custom your BGP Network rules. It supports up to a maximum of 32 rule sets. When Add button is applied, BGP Network Rule Configuration screen will appear. Item Value setting Description Network Subnet 1. IPv4 Format The Network Subnet of this router on BGP Network List. It composes of entered ...
Page 124 PoE AP Router 2. A Must filled setting the IP address in this field and the selected subnet mask. The box is unchecked by Network Click Enable box to activate this rule. default. Save N/A Click the Save button to save the configuration Create / Edit BGP Neighbor Rules The gateway allows you to custom your BGP Neighbor rules. It supports up to a maximum of 32 rule sets. When Add button is applied, BGP Neighbor Rule Configuration screen will appear. BGP Neighbor Configuration Item Value setting Description 1. IPv4 Format Neighbor IP The Neighbor IP of this router on BGP Neighbor List. 2. A Must filled setting 1. Numberic String Format The Remote ASN of this router on BGP Neighbor List. Remote ASN 2. A Must filled setting Value Range: 1 ~ 4294967295. The box is unchecked by Neighbor Click Enable box to activate this rule. default. Save N/A Click the Save button to save the configuration ...
Page 125: Routing Information
PoE AP Router 2.6.3 Routing Information The routing information allows user to view the routing table and policy routing information. Policy Routing Information is only available when the Load Balance function is enabled and the Load Balance Strategy is By . User Policy Go to Basic Network > Routing > Routing Information Tab. Routing Table Item Value setting Description Destination IP N/A Routing record of Destination IP. IPv4 Format. Subnet Mask N/A Routing record of Subnet Mask. IPv4 Format. Gateway IP N/A Routing record of Gateway IP. IPv4 Format. Metric N/A Routing record of Metric. Numeric String Format. Interface N/A Routing record of Interface Type. String Format. Policy Routing Information Item Value setting Description Policy Routing Source N/A Policy Routing of Source. String Format. Source IP ...
Page 126: Dns & Ddns (Not Supported)
PoE AP Router 2.7 DNS & DDNS (not supported) Not supported feature for the purchased product, leave it as blank. ...
Page 127: Qos
To utilize your network throughput completely, administrator must define bandwidth control rules carefully to balance the utilization of network bandwidth for all users to access. It is indeed required that an access gateway satisfies the requirements of latency‐critical applications, minimum access right guarantee, fair bandwidth usage for same subscribed condition and flexible bandwidth management. AMIT Security Gateway provides a Rule‐based QoS to carry out the requirements. 2.8.1 QoS Configuration This gateway provides lots of flexible rules for you to set QoS policies. Basically, you need to know three parts of information before you create your own policies. First, “who” needs to be managed? Second, “what” kind of ...
Page 128 PoE AP Router In above diagram, a QoS rule is organized by the premise part and the conclusion part. In the premise part, you must specify the WAN interface, host group, service type in the packets, packet flow direction to be watched and the sharing method of group control or individual control. However, in the conclusion part, you must make sure which kind of system resource to distribute and the control function based on the chosen system resource for the rule. ...
Page 129 PoE AP Router For bandwidth resource, control functions include guaranteeing bandwidth and limiting bandwidth. For priority queue resource, control function is setting priority. For DSCP resource, control function is DSCP marking. The last resource is Connection Sessions; the related control function is limiting connection sessions. Individual / Group Control One QoS rule can be applied to individual member or whole group in the target group. This feature depends on model. ...
Page 130 PoE AP Router QoS Rule Example #2 – DifferServ Code Points When the administrator of the gateway wants to convert the code point value, "IP Precedence 4(CS4)", in the packets from some client hosts (IP 10.0.75.196~199) to the code value, "AF Class2(High Drop)", he can use the "Rule‐based QoS" function to carry out this rule by defining an QoS rule as shown in above configuration. Under such configuration, all packets from WAN interfaces to LAN IP address 10.0.75.196 ~ 10.0.75.199 which have DiffServ code points with “IP Precedence 4(CS4)” value will be modified by “DSCP Marking” control function with “AF Class 2(High Drop)” value at any time. ...
Page 131 PoE AP Router QoS Configuration Setting Go to Basic Network > QoS > Configuration tab. In "QoS Configuration" page, there are some configuration windows for QoS function. They are the "Configuration" window, “System Resource Configuration” window, "QoS Rule List" window, and "QoS Rule Configuration" window. The "Configuration" window can let you activate the Rule‐based QoS function. In addition, you can also enable the "Flexible Bandwidth Management" (FBM) feature for better utilization of system bandwidth by FBM algorithm. Second, the “System Configuration” window can let you configure the total bandwidth and session ...
Page 132 PoE AP Router Setup System Resource System Resource Configuration Item Value Setting Description Define the system queues that are available for the QoS settings. 1. A Must filled setting. Type of System The supported type of system queues are Bandwidth Queue and Priority 2. Bandwidth Queue, Queue Queues. and 6 are set by default. Value Range: 1 ~ 6. Select the WAN interface and then the following WAN Interface Resource screen will show the related resources for configuration.  Bandwidth of Upstream / Downstream Specify total upload / download bandwidth of the selected WAN. Value Range: WAN‐1 is selected by For Gigabit Ethernet:1~1024000Kbps, or 1~1000Mbps; WAN Interface default. For Fast Ethernet: 1~102400Kbps, or 1~100Mbps; ...
Page 133 PoE AP Router Create / Edit QoS Rules After enabled the QoS function and configured the system resources, you have to further specify some QoS rules for provide better service on the interested traffics. The gateway supports up to a maximum of 128 rule‐ based QoS rule sets. When Add button is applied, QoS Rule Configuration screen will appear. QoS Rule Configuration Item Value setting Description Interface 1. A Must filled Specify the WAN interface to apply the QoS rule. setting. Select All WANs or a certain WAN‐n to filter the packets entering to or leaving 2. All WANs is from the interface(s). selected by default. Group 1. A Must filled Specify the Group category for the QoS rule. It can be Src. MAC Address, IP, or setting. Host Name. 2. Src. MAC Address is selected by default. Select Src. MAC Address to prioritize packets based on MAC; Select IP to prioritize packets based on IP address and Subnet Mask; Select Host Name to prioritize packets based on a group of a pre‐configured group of host from the dropdown list. If the dropdown list is empty, ensure if any ...
Page 134 PoE AP Router QoS checkbox in the Multiple Bound Services field is checked before the Host Group option become available. Refer to Object Definition > Grouping > Host Grouping. Service 1. A Must filled Specify the service type of traffics that have to be applied with the QoS rule. It setting. can be All, DSCP, TOS, User‐defined Service, or Well‐known Service. 2. All is selected by default. Select All for all packets. Select DSCP for DSCP type packets only. Select TOS for TOS type packets only. You have to select a service type (Minimize‐Cost, Maximize‐Reliability, Maximize‐Throughput, or Minimize‐ Delay) from the dropdown list as well. Select User‐defined Service for user‐defined packets only. You have to define the port range and protocol as well. Select Well‐known Service for specific application packets only. You have to select the required service from the dropdown list as well. Resource, and A Must filled setting Specify the Resource Type and corresponding Control function for the QoS rule. Control Function The available Resource options are Bandwidth, Connection Sessions, Priority Queues, and DiffServ Codepoints. Bandwidth: Select Bandwidth as the resource type for the QoS Rule, and you have to assign the min rate, max rate and rate unit as the bandwidth settings in the Control Function / Set MINR & MAXR field. Connection Sessions: Select Connection Sessions as the resource type for the QoS Rule, and you have to assign supported session number in the Control ...
Page 135 PoE AP Router Specify the preferred sharing method for how to apply the QoS rule on the selected group. It can be Individual Control or Group Control. 1. A Must filled setting. Sharing Method Individual Control: If Individual Control is selected, each host in the group will 2. Group Control is have his own QoS service resource as specified in the rule. selected by default. Group Control: If Group Control is selected, all the group hosts share the same QoS service resource. 1. A Must filled Apply Time Schedule to this rule; otherwise leave it as (0) Always. (refer to setting. Object Definition > Scheduling > Configuration settings) Time Schedule 2. (0) Always is selected by default. The box is unchecked Click Enable box to activate this QoS rule. Rule Enable by default. Save N/A Click the Save button to save the settings. ...
Page 136: Chapter 3 Object Definition
PoE AP Router Chapter 3 Object Definition 3.1 Scheduling Scheduling provides ability of adding/deleting time schedule rules, which can be applied to other functionality. 3.1.1 Scheduling Configuration Go to Object Definition > Scheduling > Configuration tab. Button description Item Value setting Description Add N/A Click the Add button to configure time schedule rule Delete N/A Click the Delete button to delete selected rule(s) When Add button is applied, Time Schedule Configuration and Time Period Definition screens will appear. Time Schedule Configuration Item Value Setting Description Rule Name String: any text Set rule name Rule Policy Default Inactivate Inactivate/activate the function been applied to in the time period below ...
Page 137 PoE AP Router Time Period Definition Item Value Setting Description Week Day Select from menu Select everyday or one of weekday Start Time Time format (hh :mm) Start time in selected weekday End Time Time format (hh :mm) End time in selected weekday Click Save to save the settings Save N/A Click Undo to cancel the settings Undo N/A Click the Refresh button to refresh the time schedule list. Refresh ...
Page 138: User (Not Supported)
PoE AP Router 3.2 User (not supported) Not supported feature for the purchased product, leave it as blank. ...
Page 139: Grouping
PoE AP Router 3.3 Grouping The Grouping function allows user to make group for some services. 3.3.1 Host Grouping Go to Object Definition > Grouping > Host Grouping tab. The Host Grouping function allows user to make host group for some services, such as QoS, Firewall, and Communication Bus. The supported service types could be different for the purchased product. When Add button is applied, Host Group Configuration screen will appear. Host Group Configuration Item Value setting Description 1. String format can Group Name be any text ...
Page 140 PoE AP Router 2. A Must filled setting When IP Address‐based is selected, only IP address can be added in Member to Join. When MAC Address‐based is selected, only MAC address can be added in Member to Join. When Host Name‐based is selected, only host name can be added in Member to Join. Add the members to the group in this field. You can enter the member information as specified in the Member Type above, Member to Join N/A and press the Join button to add. Only one member can be add at a time, so you have to add the members to the group one by one. The box is unchecked Check the Enable checkbox to activate the host group rule. So that the group Group by default can be bound to selected service(s) for further configuration. Save N/A Click Save to save the settings Undo N/A Click Undo to cancel the settings ...
Page 141: External Server
PoE AP Router 3.4 External Server Go to Object Definition > External Server > External Server tab. The External Server setting allows user to add external server. Create External Server When Add button is applied, External Server Configuration screen will appear. ...
Page 142 PoE AP Router External Server Configuration Item Value setting Description 1. String format can be Sever Name any text Enter a server name. Enter a name that is easy for you to understand. 2. A Must filled setting Specify the Server Type of the external server, and enter the required settings for the accessing the server. Email Server (A Must filled setting) : When Email Server is selected, User Name, and Password are also required. User Name (String format: any text) Password (String format: any text) RADIUS Server (A Must filled setting) : When RADIUS Server is selected, the following settings are also required. Primary : Shared Key (String format: any text) Authentication Protocol (By default CHAP is selected) Session Timeout (By default 1) The values must be between 1 and 60. Idle Timeout: (By default 1) The values must be between 1 and 15. Secondary : Shared Key (String format: any text) Authentication Protocol (By default CHAP is selected) Session Timeout (By default 1) Server Type A Must filled setting The values must be between 1 and 60. Idle Timeout: (By default 1) The values must be between 1 and 15. Active Directory Server (A Must filled setting) : When Active Directory Server is selected, Domain setting is also required. Domain (String format: any text) LDAP Server (A Must filled setting) : When LDAP Server is selected, the following settings are also required. Base DN (String format: any text) ...
Page 143 PoE AP Router TACACS+ Server (A Must filled setting) : When TACACS+ Server is selected, the following settings are also required. Shared Key (String format: any text) Session Timeout (String format: any number) The values must be between 1 and 60. SCEP Server (A Must filled setting) : When SCEP Server is selected, the following settings are also required. Path (String format: any text, By default cgi‐bin is filled) Application (String format: any text, By default pkiclient.exe is filled) FTP(SFTP) Server (A Must filled setting) : When FTP(SFTP) Server is selected, the following settings are also required. User Name (String format: any text) Password (String format: any text) Protocol (Select FTP or SFTP) Encryprion (Select Plain, Explicit FTPS or Implicit FTPS) Transfer mode (Select Passive or Active) Server IP/FQDN A Must filled setting Specify the IP address or FQDN used for the external server. Specify the Port used for the external server. If you selected a certain server type, the default server port number will be set. For Email Server 25 will be set by default; For Syslog Server, port 514 will be set by default; For RADIUS Server, port 1812 will be set by default; For Active Directory Server, port 389 will be set by default; Server Port A Must filled setting For LDAP Server, port 389 will be set by default; For UAM Server, port 80 will be set by default; For TACACS+ Server, port 49 will be set by default; For SCEP Server, port 80 will be set by default; For FTP(SFTP) Server, port 21 will be set by default; Value Range: 1 ~ 65535. Specify the accounting port used if you selected external RADIUS server. 1. A Must filled setting Account Port 2. 1813 is set by default Value Range: 1 ~ 65535. The box is checked by ...
Page 144: Certificate
PoE AP Router 3.5 Certificate In cryptography, a public key certificate (also known as a digital certificate or identity certificate) is an electronic document used to prove ownership of a public key. The certificate includes information about the key, information about its owner's identity, and the digital signature of an entity that has verified the certificate's contents are genuine. If the signature is valid, and the person examining the certificate trusts the ...
Page 145 PoE AP Router Root CA Certificate Configuration Item Value setting Description 1. String format can be any Name text Enter a Root CA Certificate name. It will be a certificate file name 2. A Must filled setting This field is to specify the key attribute of certificate. Key Type to set public‐key cryptosystems. It only supports RSA now. Key Length to set s the size measured in bits of the key used in a cryptographic Key A Must filled setting algorithm. Digest Algorithm to set identifier in the signature algorithm identifier of certificates This field is to specify the information of certificate. Country(C) is the two‐letter ISO code for the country where your organization is located. State(ST) is the state where your organization is located. Subject Name A Must filled setting Location(L) is the location where your organization is located. Organization(O) is the name of your organization. Organization Unit(OU) is the name of your organization unit. Common Name(CN) is the name of your organization. Email is the email of your organization. It has to be email address style. Validity Period A Must filled setting This field is to specify the validity period of certificate. ...
Page 146 PoE AP Router Setup SCEP SCEP Configuration Item Value setting Description The box is unchecked by SCEP Check the Enable box to activate SCEP function. default When SCEP is activated, check the Enable box to activate this function. Automatically The box is unchecked by re‐enroll aging It will be automatically check which certificate is aging. If certificate is aging, it default certificates will activate SCEP function to re‐enroll automatically. Save N/A Click Save to save the settings Undo N/A Click Undo to cancel the settings ...
Page 147: My Certificate
PoE AP Router 3.5.2 My Certificate My Certificate includes a Local Certificate List. Local Certificate List shows all generated certificates by the root CA for the gateway. And it also stores the generated Certificate Signing Requests (CSR) which will be signed by other external CAs. The signed certificates can be imported as the local ones of the gateway. Self‐signed Certificate Usage Scenario Scenario Application Timing When the enterprise gateway owns the root CA and VPN tunneling function, it can generate its own local certificates by being signed by itself or import any local certificates that are signed by other external CAs. Also import the trusted certificates for other CAs and Clients. In addition, since it has the root CA, it also can sign Certificate Signing Requests (CSR) to form corresponding certificates for others. These certificates can be used for two remote peers to make sure their identity during establishing a VPN tunnel. Scenario Description Gateway 1 generates the root CA and a local certificate (HQCRT) signed by itself. Import a trusted certificate (BranchCRT) –a BranchCSR certificate of Gateway 2 signed by root CA of Gateway 1. Gateway ...
Page 148 Following tables list the parameter configuration as an example for the "My Certificate" function used in the user authentication of IPSec VPN tunnel establishing, as shown in above diagram. The configuration example must be combined with the ones in following two sections to complete the whole user scenario. Use default value for those parameters that are not mentioned in the tables. Configuration Path [My Certificate]‐[Root CA Certificate Configuration] HQRootCA Name Key Type: RSA Key Length: 1024‐bits Key Country(C): TW State(ST): Taiwan Location(L): Tainan Subject Name Organization(O): AMITHQ Organization Unit(OU): HQRD Common Name(CN): HQRootCA E‐mail: hqrootca@amit.com.tw Configuration Path [My Certificate]‐[Local Certificate Configuration] HQCRT Self‐signed: ■ Name Key Type: RSA Key Length: 1024‐bits Key Country(C): TW State(ST): Taiwan Location(L): Tainan Subject Name Organization(O): AMITHQ Organization Unit(OU): HQRD Common Name(CN): HQCRT E‐mail: hqcrt@amit.com.tw Configuration Path [IPSec]‐[Configuration] ■...
Page 149 Following tables list the parameter configuration as an example for the "My Certificate" function used in the user authentication of IPSec VPN tunnel establishing, as shown in above diagram. The configuration example must be combined with the ones in following two sections to complete the whole user scenario. Use default value for those parameters that are not mentioned in the tables. [My Certificate]‐[Local Certificate Configuration] Configuration Path BranchCRT Self‐signed: □ Name Key Type: RSA Key Length: 1024‐bits Key Country(C): TW State(ST): Taiwan Location(L): Tainan Subject Name Organization(O): AMITBranch Organization Unit(OU): BranchRD Common Name(CN): BranchCRT E‐mail: branchcrt@amit.com.tw [IPSec]‐[Configuration] Configuration Path ■ Enable IPSec Configuration Path [IPSec]‐[Tunnel Configuration] ■ Enable Tunnel s2s‐102 Tunnel Name WAN 1 Interface ...
Page 150 PoE AP Router 255.255.255.0 Remote Netmask 203.95.80.22 Remote Gateway [IPSec]‐[Authentication] Configuration Path IKE+X.509 Local Certificate: BranchCRT Remote Certificate: HQCRT Key Management User Name Network‐B Local ID User Name Network‐A Remote ID Configuration Path [IPSec]‐[IKE Phase] Negotiation Mode Main Mode None X‐Auth Scenario Operation Procedure In above diagram, "Gateway 1" is the gateway of Network‐A in headquarters and the subnet of its Intranet is 10.0.76.0/24. It has the IP address of 10.0.76.2 for LAN interface and 203.95.80.22 for WAN‐1 interface. "Gateway 2" is the gateway of Network‐B in branch office and the subnet of its ...
Page 151 PoE AP Router My Certificate Setting Go to Object Definition > Certificate > My Certificate tab. The My Certificate setting allows user to create local certificates. In "My Certificate" page, there are two configuration windows for the "My Certificate" function. The "Local Certificate List" window shows the stored certificates or CSRs for representing the gateway. The "Local Certificate Configuration" window can let you fill required information necessary for corresponding certificate to be generated by itself, or corresponding CSR to be signed by other CAs. Create Local Certificate When Add button is applied, Local Certificate Configuration screen will appear. The required information to be filled for the certificate or CSR includes the name, key and subject name. It is a certificate if the "Self-signed"...
Page 152 PoE AP Router Local Certificate Configuration Item Value setting Description Name 1. String format can be any Enter a certificate name. It will be a certificate file name text If Self‐signed is checked, it will be signed by root CA. If Self‐signed is not 2. A Must filled setting checked, it will generate a certificate signing request (CSR). Key A Must filled setting This field is to specify the key attributes of certificate. Key Type to set public‐key cryptosystems. Currently, only RSA is supported. Key Length to set the length in bits of the key used in a cryptographic algorithm. It can be 512/768/1024/1536/2048. Digest Algorithm to set identifier in the signature algorithm identifier of certificates. It can be MD5/SHA‐1. Subject Name A Must filled setting This field is to specify the information of certificate. Country(C) is the two‐letter ISO code for the country where your organization is located. State(ST) is the state where your organization is located. Location(L) is the location where your organization is located. Organization(O) is the name of your organization. Organization Unit(OU) is the name of your organization unit. Common Name(CN) is the name of your organization. Email is the email of your organization. It has to be email address setting only. Extra Attributes A Must filled setting This field is to specify the extra information for generating a certificate. Challenge Password for the password you can use to request certificate revocation in the future. ...
Page 153 PoE AP Router Import Item Value setting Description Import A Must filled setting Select a certificate file from user’s computer, and click the Apply button to import the specified certificate file to the gateway. PEM Encoded 1. String format can be any This is an alternative approach to import a certificate. text You can directly fill in (Copy and Paste) the PEM encoded certificate string, and 2. A Must filled setting click the Apply button to import the specified certificate to the gateway. Apply N/A Click the Apply button to import the certificate. Cancel N/A Click the Cancel button to discard the import operation and the screen will return to the My Certificates page. ...
Page 154: Trusted Certificate
PoE AP Router 3.5.3 Trusted Certificate Trusted Certificate includes Trusted CA Certificate List, Trusted Client Certificate List, and Trusted Client Key List. The Trusted CA Certificate List places the certificates of external trusted CAs. The Trusted Client Certificate List places the others' certificates what you trust. And the Trusted Client Key List places the others’ keys what you trusted. Self‐signed Certificate Usage Scenario Scenario Application Timing (same as the one described in "My Certificate" section) When the enterprise gateway owns the root CA and VPN tunneling function, it can generate its own local certificates by being signed by itself. Also imports the trusted certificates for other CAs and Clients. ...
Page 155 PoE AP Router For Network‐A at HQ Following tables list the parameter configuration as an example for the "Trusted Certificate" function used in the user authentication of IPSec VPN tunnel establishing, as shown in above diagram. The configuration example must be combined with the ones in "My Certificate" and "Issue Certificate" sections to complete the setup for the whole user scenario. [Trusted Certificate]‐[Trusted Client Certificate List] Configuration Path Import Command Button [Trusted Certificate]‐[Trusted Client Certificate Import from a File] Configuration Path ...
Page 156 PoE AP Router Gateway 1 into the "Trusted CA Certificate List" and "Trusted Client Certificate List" of Gateway 2. Import the obtained BranchCRT certificate (the derived BranchCSR certificate after Gateway 1’s root CA signature) into the "Trusted Client Certificate List" of the Gateway 1 and the "Local Certificate List" of the Gateway 2. For more details, refer to the Network‐B operation procedure in "My Certificate" section of this manual. Gateway 2 can establish an IPSec VPN tunnel with "Site to Site" scenario and IKE and X.509 protocols to Gateway 1. ...
Page 157 PoE AP Router Trusted Certificate Setting Go to Object Definition > Certificate > Trusted Certificate tab. The Trusted Certificate setting allows user to import trusted certificates and keys. Import Trusted CA Certificate When Import button is applied, a Trusted CA import screen will appear. You can import a Trusted CA certificate from an existed certificate file, or directly paste a PEM encoded string as the certificate. Trusted CA Certificate List Item Value setting Description Import from a A Must filled setting Select a CA certificate file from user’s computer, and click the Apply button to File import the specified CA certificate file to the gateway. Import from a ...
Page 158 PoE AP Router Get CA Configuration Item Value setting Description SCEP Server A Must filled setting Select a SCEP Server to identify the SCEP server for use. The server detailed information could be specified in External Servers. Refer to Object Definition > External Server > External Server. You may click Add Object button to generate. CA Identifier 1. String format can be any Fill in optional CA Identifier to identify which CA could be used for signing text certificates. Save N/A Click Save to save the settings. Close N/A Click the Close button to return to the Trusted Certificates page. Import Trusted Client Certificate When Import button is applied, a Trusted Client Certificate Import screen will appear. You can import a Trusted ...
Page 159 PoE AP Router Trusted Client Certificate List Item Value setting Description Import from a A Must filled setting Select a certificate file from user’s computer, and click the Apply button to import the specified certificate file to the gateway. File Import from a 1. String format can be any This is an alternative approach to import a certificate. You can directly fill in (Copy and Paste) the PEM encoded certificate string, and click the PEM text Apply button to import the specified certificate to the gateway. 2. A Must filled setting Apply N/A Click the Apply button to import certificate. Cancel N/A Click the Cancel button to discard the import operation and the screen will return to the Trusted Certificates page. Import Trusted Client Key When Import button is applied, a Trusted Client Key Import screen will appear. You can import a Trusted Client Key from an existed file, or directly paste a PEM encoded string as the key. ...
Page 160: Issue Certificate
PoE AP Router 3.5.4 Issue Certificate When you have a Certificate Signing Request (CSR) that needs to be certificated by the root CA of the device, you can issue the request here and let Root CA sign it. There are two approaches to issue a certificate. One is from a CSR file importing from the managing PC and another is copy‐paste the CSR codes in gateway’s web‐ based utility, and then click on the "Sign" button. If the gateway signs a CSR successfully, the "Signed Certificate View" window will show the resulted certificate contents. In addition, a "Download" button is available for you to download the certificate to a file in the managing PC. Self‐signed Certificate Usage Scenario Scenario Application Timing (same as the one described in "My Certificate" section) When the enterprise gateway owns the root CA and VPN tunneling function, it can generate its own local certificates by being signed by itself. Also imports the trusted certificates for other CAs and Clients. ...
Page 161 PoE AP Router also imports the certificates of the root CA of the Gateway 1 into the Gateway 2 as the trusted ones. (Please also refer to "My Certificate" and "Trusted Certificate" sections). Establish an IPSec VPN tunnel with IKE and X.509 protocols by starting from either peer, so that all client hosts in these both subnets can communicate with each other. Parameter Setup Example (same as the one described in "My Certificate" section) For Network‐A at HQ Following tables list the parameter configuration as an example for the "Issue Certificate" function used in the user authentication of IPSec VPN tunnel establishing, as shown in above diagram. The configuration example must be combined with the ones in "My Certificate" and "Trusted Certificate" sections to complete the setup for whole user scenario. [Issue Certificate]‐[Certificate Signing Request Import from a File] Configuration Path C:/BranchCSR Browse Sign Command Button Configuration Path [Issue Certificate]‐[Signed Certificate View] Download (default name is "issued.crt") Command Button Scenario Operation Procedure (same as the one described in "My Certificate" section) In above diagram, the "Gateway 1" is the gateway of Network‐A in headquarters and the subnet of its Intranet is 10.0.76.0/24. It has the IP address of 10.0.76.2 for LAN interface and 203.95.80.22 for WAN‐1 interface. The "Gateway 2" is the gateway of Network‐B in branch office and the subnet of ...
Page 162 PoE AP Router Issue Certificate Setting Go to Object Definition > Certificate > Issue Certificate tab. The Issue Certificate setting allows user to import Certificate Signing Request (CSR) to be signed by root CA. Import and Issue Certificate Certificate Signing Request (CSR) Import from a File Item Value setting Description Certificate Signing Select a certificate signing request file you’re your Request (CSR) Import A Must filled setting computer for importing to the gateway. from a File Certificate Signing 1. String format can be any text Enter (copy‐paste) the certificate signing request PEM Request (CSR) Import 2. A Must filled setting encoded certificate to the gateway. from a PEM When root CA is exist, click the Sign button sign and Sign N/A issue the imported certificate by root CA. ...
Page 163: Chapter 4 Field Communication
PoE AP Router Chapter 4 Field Communication 4.1 Bus & Protocol The gateway may equip a serial port for various serial communication use through connecting the RS‐232 or RS‐485 serial device to an IP‐based Ethernet LAN. These communication protocols make user access serial devices anywhere over a local LAN or the Internet easily. They can be "Virtual COM" and "Modbus". 4.1.1 Port Configuration Before using the supported field communication function, like Virtual COM or Modbus, you need to configure the physical communication port first. The port configuration screen allows user to configure the operation mode and physical layer settings for each serial interface, and also can quick switch from one communication protocol to another for the serial port. The number of ports and type of the supported protocols could be different for the purchased gateway model. ...
Page 164 PoE AP Router Port Configuration Setting Go to Field Communication > Bus & Protocol > Port Configuration tab. In "Port Configuration" page, there is only one configuration window for the serial port settings. The "Configuration" window can let you specify serial port parameters including the operation mode being "Virtual COM", "Modbus" or disabled, the interface being "RS‐232" or "RS‐485", the baud rate, the data bit length, the stop bit length, the flow control being "RTS/CTS", "DTS/DSR" or "None", and the parity. ...
Page 165: Virtual Com
PoE AP Router 4.1.2 Virtual COM Create a virtual COM port on user’s PC/Host to provide access to serial device connected to the serial port on gateway. Therefore, users can access, control, and manage the connected serial device through Internet (fixed line, or cellular network) anywhere. This application is also known as Ethernet pass‐through communication. Virtual COM setting screen enables user to connect a Virtual COM port based device to the Internet. It allows user to access serial data remotely. There are TCP Client, TCP Server, UDP, and RFC2217 modes for remote accessing the connected serial device. These operation modes are illustrated as below. TCP Client Mode When the administrator expects the gateway to actively establish a TCP connection to a pre‐defined host ...
Page 166 PoE AP Router TCP Server Mode When the administrator expects the gateway to wait passively for the serial data requests from the Host Device (usually we use a computer to play as a Host), and the Host will establish a TCP connection to get data from the serial device, the operation mode for the "Virtual COM" function is required to be "TCP Server". In this mode, the gateway provides a unique ...
Page 167 PoE AP Router RFC‐2217 Mode RFC‐2217 defines general COM port control options based on telnet protocol. A host computer with RFC‐2217 driver installed can monitor and manage the remote serial device attached to the gateway’s serial port, as though they were connected to the local serial port. When a virtual serial port on the local serial ...
Page 168 PoE AP Router Virtual COM Setting Virtual COM setting screen enables user to connect a Virtual COM port based device to the Internet. It allows user to access serial data remotely. There are TCP Client, TCP Server, UDP, and RFC2217 modes for remote accessing the connected serial device. To use the Virtual COM function, you have to specify the operation mode for the multi‐function serial port first. Go to Field Communication > Bus & Protocol > Port Configuration tab, select the Virtual COM as expected operation mode, and finish the related port configuration as well. After that, go to Field Communication > Bus & Protocol > Virtual COM tab for detailed configuration of Virtual COM setting. ...
Page 169 PoE AP Router Specify Remote TCP Server Specify TCP Server Window Item Value setting Description To Remote Host A Must filled setting Press Edit button to enter IP address or FQDN of the remote TCP server to transmit serial data. Remote Port 1.A Must filled setting Enter the TCP port number. This is the listen port of the remote TCP server. 2.Default value is 4001 Value Range: 1 ~ 65535. Serial Port SPort‐0 is set by default Apply the TCP server connection for a selected serial port. Up to 4 TCP servers can be configured at the same time for each serial port. Definition The box is unchecked by Check the Enable box to enable the TCP server configuration. Enable default Save N/A Click the Save button to save the configuration ...
Page 170 PoE AP Router Enable TCP Server Mode Configure the gateway as the TCP (Transmission Control Protocol) Server. The TCP Server waits for connections to be initiated by a remote TCP client device to receive serial data. The setting allows user to specify specific TCP clients or allow any to send serial data for serial data transmission bandwidth control and access control. The TCP Server supports up to 4 simultaneous connections to receive serial data from multiple TCP clients. Enable TCP Server Mode Window Item Value setting Description Operation Mode A Must filled setting Select TCP Server mode. Listen Port 4001 is set by default Indicate the listening port of TCP connection. Value Range: 1 ~ 65535. Trust Type Allow All is set by Choose Allow All to allow any TCP clients to connect. Otherwise choose default Specific IP to limit certain TCP clients. Max Connection 1. Max. 4 connections Set the maximum number of concurrent TCP connections. Up to 4 2. 1 is set by default simultaneous TCP connections can be established. Value Range: 1 ~ 4. Connection Idle 0 is set by default Enter the idle timeout in minutes. Timeout The idle timeout is used to disconnect the TCP connection when idle time elapsed . Idle timeout is only available when On‐Demand is selected in the Connection ...
Page 171 PoE AP Router Specify TCP Clients for TCP Server Access If you selected Specific IPs as the trust Type, the Trusted IP Definition window appears. The settings are valid for both TCP Server and RFC‐2217 modes. Specify TCP Clients Window Item Value setting Description Host A Must filled setting Enter the IP address range of allowed TCP clients. Serial Port The box is unchecked by Check the box to specify the rule for selected Serial Port. default Definition The box is unchecked by Check the Enable box to enable the rule. Enable default Save N/A Click Save to save the settings Undo N/A Click Undo to cancel the settings Enable UDP Mode UDP (User Datagram Protocol) enables applications using UDP socket programs to communicate with the serial ports on the serial server. T he UDP mode provides connectionless communications, which enable you to multicast data from the serial device to multiple host computers, and vice versa, making this mode ideal for message display applications. ...
Page 172 PoE AP Router Enable UDP Mode Window Item Value setting Description Operation Mode A Must filled setting Select UDP mode. Listen Port 4001 is set by default Indicate the listening port of UDP connection. Value Range: 1 ~ 65535 Enable The box is unchecked by Check the Enable box to activate the corresponding serial port in specified default. operation mode. Save N/A Click Save to save the settings Undo N/A Click Undo to cancel the settings Specify Remote UDP Specify Remote UDP hosts Window Item Value setting Description Host A Must filled setting Press Edit button to enter IP address range of remote UDP hosts. Remote Port ...
Page 173 PoE AP Router Enable RFC‐2217 Mode RFC‐2217 defines general COM port control options based on telnet protocol. With the RFC‐2217 mode, remote host can monitor and manage remote serially attached devices, as though they were connected to the local serial port. When a virtual serial port on the local serial device is being created, it is required to specify the IP‐address of the remote hosts to establish connection with. Enable RFC‐2217 Mode Window Item Value setting Description Operation Mode A Must filled setting Select RFC‐2217 mode. Listen Port 4001 is set by default Indicate the listening port of RFC‐2217 connection. Value Range: 1 ~ 65535 Trust Type Allow All is set by Choose Allow All to allow any clients to connect. Otherwise choose Specific IP default ...
Page 174 PoE AP Router Specify Remote Host for Access If you selected Specific IPs as the trust Type, the Trusted IP Definition window appears. The settings are valid for both TCP Server and RFC‐2217 modes. Specify RFC‐2217 Clients for Access Window Item Value setting Description Host A Must filled setting Enter the IP address range of allowed clients. Serial Port The box is unchecked by Check the box to specify the rule for selected Serial Port. default Definition The box is unchecked by Check the Enable box to enable the rule. Enable default Save N/A Click Save to save the settings Undo N/A Click Undo to cancel the settings ...
Page 175: Modbus
PoE AP Router 4.1.3 Modbus Modbus is one of the most popular automation protocols in the world, supporting traditional RS‐232/422/485 devices and recently developed Ethernet devices. Many industrial devices, such as PLCs, DCSs, HMIs, instruments, and smart meters, use Modbus protocol as the communication standard. It is used to establish master‐slave communication between intelligent devices. However, the Ethernet‐based Modbus protocol is so different from the original serial‐based protocols. In order to integrate Modbus networks, the IoT Gateway, including one or more serial ports that support RS‐232 and RS‐485 communication interface, can automatically and intelligently translate between Modbus TCP (Ethernet) and Modbus RTU/ASCII (serial) protocols, allowing Ethernet‐based PLCs to control instruments over RS‐485 without additional programming or effort. NOTE: When Modbus devices are connected to/under the same serial port of IoT Modbus Gateway, those Modbus devices must use the same protocol with the same configuration (i.e., either Modbus RTU or Modbus ...
Page 176 PoE AP Router Modbus Slave Scenario In addition to behave as a Modbus Gateway, there is an integrated Modus Slave option for providing some device status, like Cellular Network Status, device DI/DO status, to remote Modbus Master via Modbus communication. With the Slave option enabled, the Modbus Master device can request the information or sending control commands ...
Page 177 PoE AP Router Modbus Setting Go to Field Communication > Bus & Protocol > Modbus tab. The Modbus setting page enables user to configure the gateway to operate as a Modbus gateway, and allow access among Modbus TCP devices (which are connected to Ethernet network) and Modbus RTU/ASCII devices (which are connected to the Serial Port of the gateway). Once completed the Modbus settings in this section, ensure to select Modbus Operation Mode in Port Configuration screen to enable Modbus communication on the serial port. Enable Modbus Gateway Gateway Configuration Item Value setting Description Modbus Gateway The box is checked by Check the Enable box to enable Modbus gateway function. default. Response Timeout 1000 ms is set by This sets the response timeout of the slave after master request sent. default If the slave does not response within the specified time, data would be discarded. This applies to the serially attached Master sent request over to the remote Slave or requests send from the remote Master sent to the serially attached Slave. Value Range: 1 ~ 65535. ...
Page 178 PoE AP Router Timeout Retries 0 is set by default If the slave does not respond to the Master’s request, the gateway will resend the request stored in the buffer. If Timeout retries is set to null (value zero), the gateway would not buffer Master requests. If a value other than zero is specified, the gateway would store the Master request in the buffer and retries to send the request in a number of specified times. Once the retries are exhausted, the gateway will send a Modbus error message to the Master. However, if the 0Bh exception box is checked (see below), a 0Bh hex code based‐error message will be send instead. Value Range: 0 ~ 5. 0Bh Exception The box is unchecked Check the Enable box to enable gateway to send a 0Bh exception code message by default. to Modbus Master to indicate that the slave device does not respond within the timeout interval. Tx Delay The box is unchecked Check the Enable box to activate to the minimum amount of time after receiving by default. a response before the next message can be sent out. When Tx Delay is enabled the Gateway would insert a Tx delay between Master requests. The delay gives sufficient time for the slave devices to turn their transmitters off and their receivers back on. Setup TCP/IP Connection for Receiving Modbus Master Request The following Modbus TCP Configuration items allow user to set up the TCP connection settings so that the remote Modbus Master can access to the Modbus gateway. Besides, it also allows user to specify authorized masters on the TCP network. Item Value setting Description Enter the idle timeout in seconds. If the gateway does not receive another TCP TCP Connection 1. 300 is set by default request before the idle timeout elapsed, the TCP session will be terminated ...
Page 179 PoE AP Router Item Value setting Description Source IP A Must fill setting Select Specific IP Address to only allow an IP address of the allowed Master to access the attached Slave(s). Select IP Range to only allow a set range of IP addresses of the allowed Master to access the attached Slave(s). Select IP Address‐based Group to only allow pre‐defined group of IP address of the allowed Master to access the attached Slave(s). Note: group must be pre‐defined before this selection become available. Refer to Object Definition > Grouping > Host grouping. You may also access to create a group by the Add Rule shortcut button. Setting done through the Add Rule button will also appear in the Host grouping setting screen. Then check Enable box to enable this rule. Serial Port Unchecked by default Check the Enable box to enable the rule in chosen Serial Port. Enable Unchecked by default Check the Enable box to enable this rule. Enable Integrated Modbus Slave for the Gateway This setting can setup the Gateway as a standalone Modbus Slave Device. Local SCADA Management System can treat the Gateway as a Slave device, and hence is able to read its information for device monitoring. Item Value setting Description The box is unchecked by Check the Enable box to activate the integrated Modbus Salve function, default. ...
Page 180 PoE AP Router Currently, the integrated Modbus Slave device supports the following commands for accessing the 3G/4G Modem Status of the Gateway. Function Code: 0x03(/Read). 0x06(/Write) Address: 0 ~ 7 Register Register Name R / W Register Range / Description Address 0 3G/4G_PHYSICAL_INTERFACE R 1=3G/4G 0 ~ 6, 0=Disconnected, 1=Connecting…, 1 3G/4G_LINK_STATUS R 2=Connected, 3=Disconnecting…, 5=Wait for Traffic…, 6=Diconnected 2 3G/4G_SIGNAL_STRENGTH R 0 ~ 100 0 ~ 7, 0=2G, 1=none, 2=3G, 3=3.5G, ...
Page 181 PoE AP Router requests to prioritize request queue to transmit to Slave based on Master’s IP address if requests are coming from remote Master, or based on remote Slave ID if requests are coming from serially attached Master, or based on Function Code. Modbus Priority N/A A Priority List for setting the priority of specified Modbus identity. Modbus Priority 1 ~ Modbus Priority 4. Priority Base IP Address by Default User can specify a Modbus identity with IP Address, Slave ID, or Function Code. The buffered Modbus message that matched the specified identity will be handled with given priority. The Modbus Master requests can be buffered to a certain priority queue according to the Master’s IP address if requests are coming from remote Master, or the remote Slave’s device ID if requests are coming from serially attached Master, or the specific Function Code that issued by Master. Enable Unchecked by default Check the Enable box to enable the priority settings. Save N/A Click the Save button to save the settings. Specify the definition of attached serial device(s) Press Edit Button to select serial mode and other configuration in the following setting. Modbus Serial Definition Item Value setting Description Serial Port N/A It displays the name of the serial port used. E.g. SPort‐0. ...
Page 182 PoE AP Router Specify Modbus TCP Slave device(s) If there is a Modbus Master device is attached to the serial port of the Modbus Gateway, user has to further specify the Modbus TCP Slave device(s) to send requests to from the attached Modbus RTU/ASCII Master device. When the Add button is applied, a Modbus TCP Slave Configuration screen will appear. Modbus Remote Slave Configuration Item Value setting Description IP A Must fill setting Enter the IP address of the remote Modbus TCP Slave device. Port 1. A Must fill setting Enter the TCP port on which the remote Modbus TCP Slave device listens 2. Range 1 to 65535 (to the TCP client session request). Value Range: 1 ~ 65535. ID Range Range 1 to 247 Enter the Modbus ID range for the Modbus TCP Slave(s) that will respond ...
Page 183: Data Logging
PoE AP Router 4.2 Data Logging Data logging is the process of collecting and storing data over a period of time in order to analyze specific trends or record the data‐based events/actions of a system, or connected devices. Data logging function is a very useful and also important feature for SCADA telemetry; it makes the monitoring and analyzing tasks easier by checking the status and historical data during whole data acquisition period. Even facing the network connection problems with remote NOC/SCADA side, you can also enable the data logging proxy function provided by the purchased gateway and keep doing the data acquisition and storing the ...
Page 184 PoE AP Router among the Master and Slave sides or not. However, if there is any network connection problem between the Modbus gateway and remote NOC/SCADA, the remote Modbus server can’t reach the Slave devices attached to the Modbus gateway, and consequently, nothing can be monitored and stored under such situation. With the Proxy mode option enabled, when the Modbus gateway lost the connection with specified Modbus server, it will take over the data acquisition task and keep collecting the required data from Slave devices automatically. Once the connection is recovered, the Modbus gateway may stop the data log proxy function. Remote Modbus server can keep its data acquisition process, and if required, the administrator can also get the stored data log files to tell if everything goes well or not. Under the Data Logging Proxy mode, user has to create some data acquisition rules via “Proxy Mode Rule Configuration” ...
Page 185 PoE AP Router IP: 172.16.99.160 As illustrated, when the connection to a remote Modbus Master broken, the Modbus Gateway will activate the data logging proxy function and execute the pre‐defined data acquisition task by itself.  The Modbus request issued by the Modbus Gateway (Data Logging Proxy).  The response (data) that sent out from the polled Slave device (ID=3) Repeat above data acquisition and data logging activities on every 5 sec interval until the connection recovered. ...
Page 186: Data Logging Configuration
PoE AP Router 4.2.1 Data Logging Configuration Data Logging is commonly used in monitoring systems to collect and analyze the field data. With proper configuration, the Gateway will record Modbus messages according to the specified rule list. Go to Field Communication > Data Logging > Configuration tab. Enable Data Logging Configuration Item Value setting Description Data Logging The box is unchecked Check the Enable box to activate to data logging function. by default. Storage Device External is set by Choose the sotrage device to store the log files. It can be External or Internal, default ...
Page 187 PoE AP Router Modbus Proxy Rule Configuration Item Value setting Description Name A Must filled setting. Specify a name as the identifier of the Modbus proxy rule. Value Range: 1 ~ 32 characters. Modbus Slave Type IP Address :Port is Specify the Modbus Slave devices to apply with the Modbus proxy rule. It can be selected by default. IP Address:Port for Modbus TCP slaves or Local Serial Port for local attached Modbus RTU/ASCII slaves. Value Range: 1 ~ 65535 for port number Slave ID 1. A Must filled setting. Specify the ID range for the slave device(s) to apply with the Modbus proxy rule. 2. Range 1 to 247 Value Range: 1 ~ 247. Function Code Read Coils (0x01) is Specify a certain read function for the Data Logging Proxy to issue and record the seelected by default. responses from device(s). Start Address 1. A Must filled setting. Specify the Start Address of registers to apply with the specified function code. 2. Range 0 to 65535 Value Range: 0 ~ 65535. Number of 1. A Must filled setting. Specify the number of coils/registers to apply with the specified function code. Coils/Registers 2. Range 1 to 125 Value Range: 1 ~ 125. ...
Page 188: Scheme Setup
PoE AP Router 4.2.2 Scheme Setup There are five data logging schemes to meet different management requirements. They are the Sniffer Mode, Offline Proxy Mode, Full-Time Proxy Mode, and the mixed modes for sniffer and proxy combinations. User has to configure the required data logging rules with selected scheme in this Scheme Setup page.
Page 189 PoE AP Router Sniffer & Off‐Line Proxy: This is a mixed mode for both Sniffer and Off‐Line Proxy modes. Sniffer & Full‐Time Proxy: This is a mixed mode for both Sniffer and Full‐Time Proxy modes. Master Type IP Address is selected Specify the Modbus master device to apply with the data logging rule. It can be by default. IP Address for Modbus TCP master, or Local Serial Port for local attached Modbus RTU/ASCII master. Master Query 1. An Optional setting. Specify the timeout value for querying Modbus Master. If no response from the Timeout (sec.) 2. 60 sec is set by master for the specified timeout setting, selected proxy rule will be triggered default and applied with the data logging rule. 3. Range 1 to 99999 Note: If Off‐Line proxy scheme is selected, the timeout setting will be used to check. Otherwise, it is a don’t care value. Proxy Rules An Optional setting. Select the Proxy rule to be applied with the data logging rule. Note: If any proxy scheme is selected, please create the required Proxy rules in advance, and select from the list. Enable The box is unchecked Check the box to activate the data logging rule. by default. Save N/A Click the Save button to save the settings. Undo N/A Click the Undo button to cancel the changes. ...
Page 190: Log File Management
PoE AP Router 4.2.3 Log File Management There are five data logging schemes to meet different management requirements. They are the Sniffer Mode, Off‐Line Proxy Mode, Full‐Time Proxy Mode, and the mixed modes for sniffer and proxy combinations. User has to configure the required data logging rules with selected scheme in this Scheme Setup page. Go to Field Communication > Data Logging > Log File Management tab. If user had created data log rules in the Field Communication > Data Logging > Scheme Setup tab, there will be a log file list shown in the following Log File list screen. The default Log File management settings will be applied if user didn’t change it via the Edit button. When the Edit button is applied, Log File Configuration screen will appear. Log File Configuration Item Value setting Description Name N/A The name of corresponding data log rule will be displayed. The default log file name will be named as ‘ Name_yyyyMMddHHmmSS.csv ‘. File Content Raw Data is selected by ...
Page 191 PoE AP Router Value Range: 1 ~ 99999. Auto Upload 1. An Optional filled Check the Enable box to activate the auto upload function for logged files. setting Once been enabled, user has to specify an external FTP server from the 2. The box is unchecked dropdown list for auto uploading the log files to the server. Refer to Object by default. Definition > External Server > External Server tab, or create the FTP server with the Add Object button. Log File 1. An Optional filled If Auto Upload is activated, user can further specify whether to compress the log Compression setting file prior it is uploaded or not. 2. The box is unchecked Check the Enable button to activate the Log File Compression function... by default Delete File After 1. An Optional filled If Auto Upload is activated, user can further specify whether to delete the Upload setting transferred log from the gateway storage or not. 2. The box is unchecked Check the Enable button to activate the function. by default When Storage Remove the Oldest is Specify the operation to take when the storage is full. Full selected by default It can be Remove the Oldest log file, or Stop Recording. When Remove the Oldest is selected, the gateway will delete the oldest file once ...
Page 192: Chapter 5 Security
PoE AP Router Chapter 5 Security 5.1 VPN A virtual private network (VPN) extends a private network across a public network, such as the Internet. It enables a computer to send and receive data across shared or public networks as if it were directly connected to the private network, while benefitting from the functionality, security and management policies of the private network. This is done by establishing a virtual point‐to‐point connection through the use of dedicated ...
Page 193: Ipsec
PoE AP Router 5.1.1 IPSec Internet Protocol Security (IPSec) is a protocol suite for securing Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPSec includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session. ...
Page 194 PoE AP Router Site to Host: Site to Host is suitable for tunneling between clients in a subnet and an application server (host). As in the diagram, the clients behind the M2M gateway can access to the host "Host‐DC" located in the control center through Site to Host VPN tunnel. Host to Site: On the contrast, for a single host (or mobile user to) to access the resources located in an intranet, the Host to Site scenario can be applied. ...
Page 195 PoE AP Router ...
Page 196 PoE AP Router Dynamic VPN Server Scenario Dynamic VPN Server Scenario is an efficient way to build multiple tunnels with remote sites, especially for mobile clients with dynamic IP. In this scenario, gateway can only be role of server (responder), and it must have a “Static IP” or “FQDN”. It can allow many ...
Page 197 PoE AP Router IPSec Setting Go to Security > VPN > IPSec tab. The IPSec Setting allows user to create and configure IPSec tunnels. Enable IPSec Configuration Window Item Value setting Description IPsec Unchecked by default Click the Enable box to enable IPSec function. NetBIOS over IPSec Unchecked by default Click the Enable box to enable NetBIOS over IPSec function. NAT Traversal Checked by default Click the Enable box to enable NAT Traversal function. Max. Concurrent Depends on Product The specified value will limit the maximum number of simultaneous IPSec IPSec Tunnels specification. tunnel connection. The default value can be different for the purchased model. Save N/A Click Save to save the settings Undo N/A Click Undo to cancel the settings Create/Edit IPSec tunnel Ensure that the IPSec enable box is checked to enable before further configuring the IPSec tunnel settings. ...
Page 198 PoE AP Router Tunnel Configuration Window Item Value setting Description Tunnel Unchecked by default Check the Enable box to activate the IPSec tunnel 1. A Must fill setting Enter a tunnel name. Enter a name that is easy for you to identify. Tunnel Name 2. String format can be Value Range: 1 ~ 19 characters. any text 1. A Must fill setting Select the interface on which IPSec tunnel is to be established. It can be the Interface 2. WAN 1 is selected available WAN and LAN interfaces. by default Select an IPSec tunneling scenario from the dropdown box for your application. Select Site‐to‐Site, Site‐to‐Host, Host‐to‐Site, or Host‐to‐Host. If LAN interface 1. A Must fill setting is selected, only Host‐to‐Host scenario is available. 2. Site to site is Tunnel Scenario selected by default With Site‐to‐Site or Site‐to‐Host or Host‐to‐Site, IPSec operates in tunnel mode. The difference among them is the number of subnets. With Host‐to‐Host, IPSec operates in transport mode. Select from the dropdown box to setup your gateway for Hub‐and‐Spoke IPSec VPN Deployments. 1. An optional setting Select None if your deployments will not support Hub or Spoke encryption. Hub and Spoke 2. None is set by ...
Page 199 PoE AP Router Protocol 2. ESP is selected by Available encapsulations are ESP and AH. default Check the Enable box to enable Keep alive function. Select Ping IP to keep live and enter the IP address to ping. 1. Unchecked by Enter the ping time interval in seconds. Keep alive default Value Range: 30 ~ 999 seconds. 2. 30s is set by default Note: Keep alive option is not available for Dynamic VPN specified in Tunnel Scenario. Local & Remote Configuration Window Item Value setting Description Specify the Local Subnet IP address and Subnet Mask. Click the Add or Delete button to add or delete a Local Subnet. Note_1: When Dynamic VPN option in Tunnel Scenario is selected, there will be A Must fill setting Local Subnet List only one subnet available. Note_2: When Host‐to‐Site or Host‐to‐Host option in Tunnel Scenario is selected, Local Subnet will not be available. Note_3: When Hub and Spoke option in Hub and Spoke is selected, there will be only one subnet available. Click Enable box to enable Full Tunnel. Full Tunnel Unchecked by default Note: Full tunnel is available only for Site‐to‐Site specified in Tunnel Scenario. Specify the Remote Subnet IP address and Subnet Mask. Remote Subnet List ...
Page 200 PoE AP Router Authentication Configuration Window Item Value setting Description Select Key Management from the dropdown box for this IPSec tunnel. IKE+Pre‐shared Key: user needs to set a key (8 ~ 32 characters). 1. A Must fill setting IKE+X.509: user needs Certificate to authenticate. IKE+X.509 will be available Key Management 2. Pre‐shared Key 8 to only when Certificate has been configured properly. Refer to Certificate section 32 characters. of this manual and also Object Definition > Certificate in web‐based utility. Manually: user needs to enter key ID to authenticate. Manual key configuration will be explained in the following Manual Key Management section. Specify the Local ID for this IPSec tunnel to authenticate. Select User Name for Local ID and enter the username. The username may include but can’t be all numbers. Local ID An optional setting Select FQDN for Local ID and enter the FQDN. Select User@FQDN for Local ID and enter the User@FQDN. Select Key ID for Local ID and enter the Key ID (English alphabet or number). Specify the Remote ID for this IPSec tunnel to authenticate. Select User Name for Remote ID and enter the username. The username may include but can’t be all numbers. Select FQDN for Local ID and enter the FQDN. Remote ID An optional setting Select User@FQDN for Remote ID and enter the User@FQDN. Select Key ID for Remote ID and enter the Key ID (English alphabet or number). Note: Remote ID will be not available when Dynamic VPN option in Tunnel Scenario is selected. ...
Page 201 PoE AP Router IKE Phase Window Item Value setting Description 1. A must fill setting Specify the IKE version for this IPSec tunnel. Select v1 or v2 IKE Version 2. v1 is selected by Note: IKE versions will not be available when Dynamic VPN option in Tunnel default Scenario is selected, or AH option in Encapsulation Protocol is selected. Main Mode is set by Specify the Negotiation Mode for this IPSec tunnel. Select Main Mode or Negotiation Mode default default Aggressive Mode. Specify the X‐Auth role for this IPSec tunnel. Select Server, Client, or None. Selected None no X‐Auth authentication is required. Selected Server this gateway will be an X‐Auth server. Click on the X‐Auth None is selected by Account button to create remote X‐Auth client account. X‐Auth default Selected Client this gateway will be an X‐Auth client. Enter User name and Password to be authenticated by the X‐Auth server gateway. Note: X‐Auth Client will not be available for Dynamic VPN option selected in Tunnel Scenario. 1. Checked by default Click Enable box to enable DPD function. Specify the Timeout and Delay time in Dead Peer Detection 2. Default Timeout seconds. (DPD) 180s and Delay 30s Value Range: 0 ~ 999 seconds for Timeout and Delay. 1. A Must fill setting Phase1 Key Life ...
Page 202 PoE AP Router IKE Proposal Definition Window Item Value setting Description Specify the Phase 1 Encryption method. It can be DES / 3DES / AES‐auto / AES‐ 128 / AES‐192 / AES‐256. Specify the Authentication method. It can be None / MD5 / SHA1 / SHA2‐256. IKE Proposal A Must fill setting Definition Specify the DH Group. It can be None / Group1 / Group2 / Group5 / Group14 / Group15 / Group16 / Group17 / Group18. Check Enable box to enable this setting IPSec Phase Window Item Value setting Description 1. A Must fill setting 2. 28800s is set by Specify the Phase2 Key Life Time in second. Phase2 Key Life Time default Value Range: 30 ~ 86400. 3. Max. 86400s ...
Page 203 PoE AP Router IPSec Proposal Definition Window Item Value setting Description Specify the Encryption method. It can be None / DES / 3DES / AES‐auto / AES‐ 128 / AES‐192 / AES‐256. Note: None is available only when Encapsulation Protocol is set as AH; it is not available for ESP Encapsulation. Specify the Authentication method. It can be None / MD5 / SHA1 / SHA2‐256. IPSec Proposal A Must fill setting Note: None and SHA2‐256 are available only when Encapsulation Protocol is set Definition as ESP; they are not available for AH Encapsulation. Specify the PFS Group. It can be None / Group1 / Group2 / Group5 / Group14 / Group15 / Group16 / Group17 / Group18. Click Enable to enable this setting Save N/A Click Save to save the settings Undo N/A Click Undo to cancel the settings Back N/A Click Back to return to the previous page. Manual Key Management When the Manually option is selected for Key Management as described in Authentication Configuration Window, ...
Page 204 PoE AP Router Item Value setting Description Select Key Management from the dropdown box for this IPSec tunnel. Key Management A Must fill setting In this section Manually is the option selected. Specify the Local ID for this IPSec tunnel to authenticate. Local ID An optional setting Select the Key ID for Local ID and enter the Key ID (English alphabet or number). Specify the Remote ID for this IPSec tunnel to authenticate. Remote ID An optional setting Select Key ID for Remote ID and enter the Key ID (English alphabet or number). Local & Remote Configuration Window Item Value setting Description Local Subnet A Must fill setting Specify the Local Subnet IP address and Subnet Mask. Local Netmask A Must fill setting Specify the Local Subnet Mask. Remote Subnet A Must fill setting Specify the Remote Subnet IP address Remote Netmask A Must fill setting Specify the Remote Subnet Mask. 1. A Must fill setting Remote Gateway 2. An IPv4 address or Specify the Remote Gateway. The Remote Gateway FQDN format ...
Page 205 PoE AP Router Specify the Outbound SPI for this IPSec tunnel. Outbound SPI Hexadecimal format Value Range: 0 ~ FFFF. Specify the Inbound SPI for this IPSec tunnel. Inbound SPI Hexadecimal format Value Range: 0 ~ FFFF. Specify the Encryption Method and Encryption key. Available encryption methods are DES/3DES/AES‐128/AES‐192/AES‐256. 1. A Must fill setting The key length for DES is 16, 3DES is 48, AES‐128 is 32, AES‐192 is 48, and AES‐ Encryption 2. Hexadecimal format 256 is 64. Note: When AH option in Encapsulation is selected, encryption will not be available. Specify the Authentication Method and Authentication key. Available encryptions are None/MD5/SHA1/SHA2‐256. 1. A Must fill setting Authentication The key length for MD5 is 32, SHA1 is 40, and SHA2‐256 is 64. 2. Hexadecimal format Note: When AH option in Encapsulation Protocol is selected, None option in Authentication will not be available. Save N/A Click Save to save the settings Undo N/A Click Undo to cancel the settings Back N/A Click Back to return to the previous page. Create/Edit Dynamic VPN Server List ...
Page 206 PoE AP Router Tunnel Configuration Window Item Value setting Description Tunnel Unchecked by default Check the Enable box to activate the Dynamic IPSec VPN tunnel. 1. A Must fill setting Enter a tunnel name. Enter a name that is easy for you to identify. Tunnel Name 2. String format can be Value Range: 1 ~ 19 characters. any text 1. A Must fill setting Interface 2. WAN 1 is selected Select WAN interface on which IPSec tunnel is to be established. by default 1. A Must fill setting Tunnel Scenario 2. Dynamic VPN is The IPSec tunneling scenario is fixed to Dynamic VPN. selected by default 1. A Must fill setting The available operation mode is Always On. Failover option is not available for Operation Mode 2. Alway on is selected the Dynamic IPSec scenario. by default 1. A Must fill setting Encapsulation Select the Encapsulation Protocol from the dropdown box for this IPSec tunnel. 2. ESP is selected by Protocol Available encapsulations are ESP and AH. default ...
Page 207 PoE AP Router 1. A Must fill setting Select Key Management from the dropdown box for this IPSec tunnel. Key Management 2. Pre‐shared Key 8 to IKE+Pre‐shared Key: user needs to set a key (8 ~ 32 characters). 32 characters. Specify the Local ID for this IPSec tunnel to authenticate. Select User Name for Local ID and enter the username. The username may include but can’t be all numbers. Local ID An optional setting Select FQDN for Local ID and enter the FQDN. Select User@FQDN for Local ID and enter the User@FQDN. Select Key ID for Local ID and enter the Key ID (English alphabet or number). Specify the Remote ID for this IPSec tunnel to authenticate. Select User Name for Remote ID and enter the username. The username may include but can’t be all numbers. Select FQDN for Local ID and enter the FQDN. Remote ID An optional setting Select User@FQDN for Remote ID and enter the User@FQDN. Select Key ID for Remote ID and enter the Key ID (English alphabet or number). Note: Remote ID will be not available when Dynamic VPN option in Tunnel Scenario is selected. For the rest IKE Phase, IKE Proposal Definition, IPSec Phase, and IPSec Proposal Definition settings, they are the same as that of creating an IPSec Tunnel described in previous section. Please refer to the related description. ...
Page 208: Openvpn
PoE AP Router 5.1.2 OpenVPN OpenVPN is an application that implements virtual private network (VPN) techniques for creating secure point‐to‐point or site‐to‐site connections in routed or bridged configurations and remote access facilities. It uses a custom security protocol that utilizes SSL/TLS for key exchange. It is capable of traversing network address translators (NATs) and firewalls. ...
Page 209 PoE AP Router OpenVPN UN Server. Once the OpenVPN TUN connection is established, the connected TUN client will be assigned a virtual IP (10.8.0.2) which is belong to a virtual subnet that is different to the local subnet in Control Center. With such connection, the local networked devices will get a virtual IP 10.8.0.x if its traffic goes through the OpenVPN TUN connection when Redirect Internet Traffic settings is enabled; Besides, the SCADA Server in Control Center can access remote attached serial device(s) with the virtual IP address (10.8.0.2). OpenVPN TAP Scenario ...
Page 210 PoE AP Router Open VPN Setting Go to Security > VPN > OpenVPN tab. The OpenVPN setting allows user to create and configure OpenVPN tunnels. Enable OpenVPN Enable OpenVPN and select an expected configuration, either server or client, for the gateway to operate. Configuration Item Value setting Description OpenVPN The box is unchecked by Check the Enable box to activate the OpenVPN function. default Server/ Server Configuration is When Server is selected, as the name indicated, server configuration will be Client selected by default. displayed below for further setup. When Client is selected, you can specify the client settings in another client configuration window. ...
Page 211 PoE AP Router As an OpenVPN Server If Server is selected, an OpenVPN Server Configuration screen will appear. OpenVPN Server Configuration window can let you enable the OpenVPN server function, specify the virtual IP address of OpenVPN server, when remote OpenVPN clients dial in, and the authentication protocol. OpenVPN Server Configuration Item Value setting Description OpenVPN Server ...
Page 212 PoE AP Router default. Protocol 1. A Must filled setting Define the selected Protocol for connecting to the OpenVPN Server.  Select TCP , or UDP 2. By default TCP is selected. ‐> The TCP protocol will be used to access the OpenVPN Server, and Port will be set as 4430 automatically.  Select UDP ‐> The UDP protocol will be used to access the OpenVPN Server, and Port will be set as 1194 automatically. Port 1. A Must filled setting Specify the Port for connecting to the OpenVPN Server. 2. By default 4430 is set. Value Range: 1 ~ 65535. Tunnel Scenario 1. A Must filled setting Specify the type of Tunnel Scenario for connecting to the OpenVPN Server. It 2.
Page 213 PoE AP Router Note: Gateway will be available only when TAP is chosen in Tunnel Device, and DHCP‐Proxy Mode is unchecked (disabled). Netmask By default ‐ select one ‐ is Specify the Netmask setting for the OpenVPN server. It will be assigned to the selected. connected OpenVPN clients. Value Range: 255.255.255.0/24 (only support class C) Note_1: Netmask will be available when TAP is chosen in Tunnel Device, and DHCP‐Proxy Mode is unchecked (disabled). Note_2: Netmask will also be available when TUN is chosen in Tunnel Device. Redirect Default 1. An Optional setting. Check the Enable box to activate the Redirect Default Gateway function. Gateway 2. The box is unchecked by default. Encryption 1. A Must filled setting. Specify the Encryption Cipher from the dropdown list. Cipher ...
Page 214 PoE AP Router When Advanced Configuration is selected, an OpenVPN Server Advanced Configuration screen will appear. OpenVPN Server Advanced Configuration Item Value setting Description TLS Cipher 1. A Must filled setting. Specify the TLS Cipher from the dropdown list. 2. TLS‐RSA‐WITH‐AES128‐ It can be None / TLS‐RSA‐WITH‐RC4‐MD5 / TLS‐RSA‐WITH‐AES128‐SHA / TLS‐ SHA is selected by default RSA‐WITH‐AES256‐SHA / TLS‐DHE‐DSS‐AES128‐SHA / TLS‐DHE‐DSS‐AES256‐ SHA. Note: TLS Cipher will be available only when TLS is chosen in Authorization Mode. ...
Page 215 PoE AP Router default Note: Tunnel UDP Fragment will be available only when UDP is chosen in Protocol. Tunnel UDP 1. An Optional setting. Check the Enable box to activate the Tunnel UDP MSS‐Fix Function. MSS‐Fix 2. The box is unchecked by Note: Tunnel UDP MSS‐Fix will be available only when UDP is chosen in default. Protocol. CCD‐Dir Default ...
Page 216 PoE AP Router As an OpenVPN Client If Client is selected, an OpenVPN Client List screen will appear. When Add button is applied, OpenVPN Client Configuration screen will appear. OpenVPN Client Configuration window let you specify the required parameters for an OpenVPN VPN client, such as "OpenVPN Client Name", "Interface", "Protocol", "Tunnel Scenario", "Remote IP/FQDN", "Remote Subnet", "Authorization Mode", "Encryption Cipher", "Hash Algorithm" and tunnel activation. ...
Page 217 PoE AP Router OpenVPN Client Configuration Item Value setting Description OpenVPN Client A Must filled setting The OpenVPN Client Name will be used to identify the client in the tunnel list. Name Value Range: 1 ~ 32 characters. Interface 1. A Must filled setting Define the physical interface to be used for this OpenVPN Client tunnel. 2. By default WAN‐1 is selected. Protocol 1. A Must filled setting Define the Protocol for the OpenVPN Client.  Select TCP 2. By default TCP is selected. ‐>The OpenVPN will use TCP protocol, and Port will be set as 443 automatically.  Select UDP ‐> The OpenVPN will use UDP protocol, and Port will be set as 1194 automatically. Port 1. A Must filled setting Specify the Port for the OpenVPN Client to use. Value Range: 1 ~ 65535. 2. By default 443 is ...
Page 218 PoE AP Router Remote Endpoint IP A Must filled setting Specify the virtual Remote Endpoint IP Address of the peer OpenVPN gateway. Address Value Range: The IP format is 10.8.0.x, the range of x is 1~254. Note: Remote Endpoint IP Address will be available only when Static Key is chosen in Authorization Mode. Static Key A Must filled setting Specify the Static Key. Note: Static Key will be available only when Static Key is chosen in Authorization Mode. Encryption Cipher By default Blowfish is Specify the Encryption Cipher. selected. It can be Blowfish/AES‐256/AES‐192/AES‐128/None. Hash Algorithm By default SHA‐1 is Specify the Hash Algorithm. selected. It can be SHA‐1/MD5/MD4/SHA2‐256/SHA2‐512/None/Disable. LZO Compression By default Adaptive is Specify the LZO Compression scheme.
Page 219 PoE AP Router When Advanced Configuration is selected, an OpenVPN Client Advanced Configuration screen will appear. OpenVPN Advanced Client Configuration Item Value setting Description TLS Cipher 1. A Must filled setting. Specify the TLS Cipher from the dropdown list. 2. TLS‐RSA‐WITH‐ It can be None / TLS‐RSA‐WITH‐RC4‐MD5 / TLS‐RSA‐WITH‐AES128‐SHA / TLS‐ AES128‐SHA is selected RSA‐WITH‐AES256‐SHA / TLS‐DHE‐DSS‐AES128‐SHA / TLS‐DHE‐DSS‐AES256‐ by default SHA. Note: TLS Cipher will be available only when TLS is chosen in Authorization Mode. TLS Auth. Key 1. An Optional setting. ...
Page 220 PoE AP Router Note: User Name will be available only when TLS is chosen in Authorization Mode. Bridge TAP to By default VLAN 1 is Specify the setting of “Bridge TAP to” to bridge the TAP interface to a certain selected local network interface or VLAN. Note: Bridge TAP to will be available only when TAP is chosen in Tunnel Scenario and NAT is unchecked. Firewall Protection The box is unchecked by Check the box to activate the Firewall Protection function. ...
Page 221: Firewall
PoE AP Router 5.2 Firewall The firewall functions include Packet Filter, URL Blocking, Content Filter, MAC Control, Application Filter, IPS and some firewall options. The supported function can be different for the purchased gateway. 5.2.1 Packet Filter (not supported) Not supported feature for the purchased product, leave it as blank. ...
Page 222: Url Blocking (Not Supported)
PoE AP Router 5.2.2 URL Blocking (not supported) Not supported feature for the purchased product, leave it as blank. ...
Page 223: Mac Control
PoE AP Router 5.2.3 MAC Control "MAC Control" function allows you to assign the accessibility to the gateway for different users based on device’s MAC address. When the administrator wants to reject the traffics from some client hosts with specific MAC addresses, he can use the "MAC Control" function to reject with the black list configuration. ...
Page 224 PoE AP Router MAC Control Setting Go to Security > Firewall > MAC Control Tab. The MAC control setting allows user to create and customize MAC address policies to allow or reject packets with specific source MAC address. Enable MAC Control Configuration Window Item Value setting Description The box is unchecked by MAC Control Check the Enable box to activate the MAC filter function default When Deny MAC Address Below is selected, as the name suggest, packets Black List / Deny MAC Address Below specified in the rules will be blocked –black listed. In contrast, with Allow MAC White List is set by default Address Below, you can specifically white list the packets to pass and the rest will be blocked. The box is unchecked by Log Alert Check the Enable box to activate to activate Event Log. default Known MAC Select a MAC Address from LAN Client List. Click the Copy to to copy the N/A from LAN PC List selected MAC Address to the filter rule. Save N/A Click Save to save the settings Undo ...
Page 225 PoE AP Router Create/Edit MAC Control Rules The gateway supports up to a maximum of 20 filter rule sets. Ensure that the MAC Control is enabled before we can create control rules. When Add button is applied, Filter Rule Configuration screen will appear. MAC Control Rule Configuration Item Value setting Description 1. String format can be any Rule Name text Enter a MAC Control rule name. Enter a name that is easy for you to remember. 2. A Must fill setting 1. MAC Address string MAC Address (Use: to Format Specify the Source MAC Address to filter rule. Compose) 2. A Must fill setting Apply Time Schedule to this rule; otherwise leave it as (0) Always. Time Schedule A Must fill setting If the dropdown list is empty, ensure Time Schedule is pre‐configured. Refer to Object Definition > Scheduling > Configuration tab The box is unchecked by Enable Click Enable box to activate this rule, and then save the settings. default. Save N/A Click Save to save the settings Undo N/A ...
Page 226: Content Filter (Not Supported)
PoE AP Router 5.2.4 Content Filter (not supported) Not supported feature for the purchased product, leave it as blank. ...
Page 227: Application Filter (Not Supported)
PoE AP Router 5.2.5 Application Filter (not supported) Not supported feature for the purchased product, leave it as blank.
Page 228: Ips
PoE AP Router 5.2.6 IPS To provide application servers in the Internet, administrator may need to open specific ports for the services. However, there are some risks to always open service ports in the Internet. In order to avoid such attack risks, it is important to enable IPS functions. Intrusion Prevention System (IPS) is network security appliances that monitor network and/or system activities for malicious activity. The main functions of IPS are to identify malicious activity, log information about this activity, attempt to block/stop it and report it. You can enable the IPS function and check the listed intrusion activities when needed. You can also enable the log alerting so that system will record Intrusion events when corresponding intrusions are detected. ...
Page 229 PoE AP Router IPS Setting Go to Security > Firewall > IPS Tab. The Intrusion Prevention System (IPS) setting allows user to customize intrusion prevention rules to prevent malicious packets. Enable IPS Firewall Configuration Window Item Value setting Description The box is unchecked by IPS Check the Enable box to activate IPS function default The box is unchecked by Log Alert Check the Enable box to activate to activate Event Log. default Save N/A Click Save to save the settings Undo N/A Click Undo to cancel the settings Setup Intrusion Prevention Rules The router allows you to select intrusion prevention rules you may want to enable. Ensure that the IPS is enabled before we can enable the defense function. ...
Page 230 PoE AP Router Setup Intrusion Prevention Rules Item Name Value setting Description SYN Flood Click Enable box to activate this intrusion prevention rule and Defense enter the traffic threshold in this field. 1. A Must filled setting UDP Flood 2. The box is unchecked by default. Click Enable box to activate this intrusion prevention rule and Defense 3. Traffic threshold is set to 300 by default enter the traffic threshold in this field. 4. The value range can be from 10 to Click Enable box to activate this intrusion prevention rule and ICMP Flood 10000. enter the traffic threshold in this field. Defense Value Range: 10 ~ 10000. 1. A Must filled setting 2. The box is unchecked by default. Click Enable box to activate this intrusion prevention rule and Port Scan Defection 3. Traffic threshold is set to 200 by default enter the traffic threshold in this field. 4. The value range can be from 10 to Value Range: 10 ~ 10000. 10000. Block Land Attack Block Ping of Death ...
Page 231 PoE AP Router Block Traceroute Block Fraggle Attack 1. A Must filled setting 2. The box is unchecked by default. Click Enable box to activate this intrusion prevention rule and ARP Spoofing 3. Traffic threshold is set to 300 by default enter the traffic threshold in this field. Defence 4. The value range can be from 10 to Value Range: 10 ~ 10000. 10000. Save NA Click Save to save the settings Undo NA Click Undo to cancel the settings ...
Page 232: Options
PoE AP Router 5.2.7 Options There are some additional useful firewall options in this page. “Stealth Mode” lets gateway not to respond to port scans from the WAN so that makes it less susceptible to discovery and attacks on the Internet. ”SPI” enables gateway to record the packet information like IP address, port address, ACK, SEQ number and so on while they pass through the gateway, and the gateway checks every incoming packet to detect if this packet is valid. “Discard Ping from WAN” makes any host on the WAN side can`t ping this gateway. And finally, “Remote Administrator Hosts” enables you to perform administration task from a remote host. If this feature is enabled, only specified IP address(es) can perform remote administration. ...
Page 233 PoE AP Router Enable SPI Scenario As shown in the diagram, Gateway has the IP address of 118.18.81.200 for WAN interface and 192.168.1.253 for LAN interface. It serves as a NAT gateway. Users in Network‐A initiate to access cloud server through the gateway. Sometimes, unknown users will simulate the packets but use different ...
Page 234 PoE AP Router Firewall Options Item Value setting Description The box is unchecked by Stealth Mode Check the Enable box to activate the Stealth Mode function default The box is checked by SPI Check the Enable box to activate the SPI function default Discard Ping The box is unchecked by Check the Enable box to activate the Discard Ping from WAN function from WAN default Define Remote Administrator Host The router allows network administrator to manage router remotely. The network administrator can assign specific IP address and service port to allow accessing the router. Remote Administrator Host Definition Item ...
Page 235 PoE AP Router 1. 80 for HTTP by default This field is to specify a Service Port to HTTP or HTTPS connection. Service Port 2. 443 for HTTPS by Value Range: 1 ~ 65535. default Enabling the The box is unchecked by Click Enable box to activate this rule. rule default. Save N/A Click Enable box to activate this rule then save the settings. Undo N/A Click Undo to cancel the settings ...
Page 236: Chapter 6 Administration
PoE AP Router Chapter 6 Administration 6.1 Configure & Manage Configure & Manage refers to enterprise‐wide administration of distributed systems including (and commonly in practice) computer systems. Centralized management has a time and effort trade‐off that is related to the size of the company, the expertise of the IT staff, and the amount of technology being used. This device supports many system management protocols, such as Command Script, TR‐069, SNMP, and Telnet with CLI. You can setup those configurations in the "Configure & Manage" section. ...
Page 237: Command Script
PoE AP Router 6.1.1 Command Script Command script configuration is the application that allows administrator to setup the pre‐defined configuration in plain text style and apply configuration on startup. Go to Administration > Command Script > Configuration Tab. Enable Command Script Configuration Configuration Item Value setting Description The box is unchecked by Configuration Check the Enable box to activate the Command Script function. default Edit/Backup Plain Text Command Script You can edit the plain text configuration settings in the configuration screen as above. Plain Text Configuration Item Value setting Description ...
Page 238 PoE AP Router Configuration Content Key Value setting Description OPENVPN_ENABLED 1 : enable Enable or disable OpenVPN Client function. 0 : disable OPENVPN_DESCRIPTION A Must filled Specify the tunnel name for the OpenVPN Client connection. Setting OPENVPN_PROTO udp Define the Protocol for the OpenVPN Client.  Select TCP or TCP /UDP tcp ‐>The OpenVPN will use TCP protocol, and Port will be set as 443 automatically.  Select UDP ‐> The OpenVPN will use UDP protocol, and Port will be set as 1194 automatically. OPENVPN_PORT A Must filled Specify the Port for the OpenVPN Client to use. Setting OPENVPN_REMOTE_IPADDR IP or FQDN Specify the Remote IP/FQDN of the peer OpenVPN Server for this OpenVPN Client tunnel. Fill in the IP address or FQDN. OPENVPN_PING_INTVL seconds ...
Page 239 PoE AP Router Plain Text System Configuration with Telnet In addition to the web‐style plain text configuration as mentioned above, the gateway system also allow the configuration via Telnet CLI. Administrator can use the proprietary telnet command “txtConfig” and related action items to perform the plain system configuration. The command format is: txtConfig (action) [option] Action Option Description clone Output file Duplicate the configuration content from database and stored as a configuration file. (ex: txtConfig clone /tmp/config) The contents in the configuration file are the same as the plain text commands mentioned above. This action is exactly the same as performing the “Backup” plain text configuration. commit a existing file Commit the configuration content to database. (ex: txtConfig commit /tmp/config) enable NA Enable plain text system config. (ex: txtConfig enable) disable NA Disable plain text system config. (ex: txtConfig disable) run_immediately NA Apply the configuration content that has been committed in database. (ex: txtConfig run_immediately) ...
Page 240: Tr-069
PoE AP Router 6.1.2 TR‐069 TR‐069 (Technical Report 069) is a Broadband Forum technical specification entitled CPE WAN Management Protocol (CWMP). It defines an application layer protocol for remote management of end‐user devices, like this gateway device. As a bidirectional SOAP/HTTP‐based protocol, it provides the communication between customer‐premises equipment (CPE) and Auto Configuration Servers (ACS). The Security Gateway is such CPE. TR‐069 is a customized feature for ISP. It is not recommend that you change the configuration for this. If you have any problem in using this feature for device management, please contact with your ISP or the ACS provider for help. At the right upper corner of TR‐069 Setting screen, one “[Help]” command let you see the ...
Page 241 PoE AP Router Parameter Setup Example Following tables list the parameter configuration as an example for the Gateway 1 in above diagram with "TR‐069" enabling. Use default value for those parameters that are not mentioned in the tables. Configuration Path [TR‐069]‐[Configuration] ■ Enable TR‐069 ACS URL http://qaamit.acslite.com/cpe.php ACS User Name ACSUserName ACSPassword ACS Password 8099 ConnectionRequest Port ConnReqUserName ConnectionRequest User Name ConnReqPassword ConnectionRequest Password ■ Enable Interval 900 Inform Scenario Operation Procedure In above diagram, the ACS server can manage multiple gateways in the Internet. The "Gateway 1" is one of them and has 118.18.81.33 IP address for its WAN‐1 interface. When all remote gateways have booted up, they will try to connect to the ACS server. Once the connections are established successfully, the ACS server can configure, upgrade with latest FW and monitor these gateways. Remote gateways inquire the ACS server for jobs to do in each time period. If the ACS server needs some urgent jobs to be done by the gateways, it will issue the "Connection Request" command to those gateways. And those gateways make immediate connections in response to the ACS server’s immediate connection request for executing the urgent jobs. ...
Page 242 PoE AP Router TR‐069 Setting Go to Administration > Configure & Manage > TR‐069 tab. In "TR‐069" page, there is only one configuration window for TR‐069 function. In the window, you must specify the related information for your security gateway to connect to the ACS. Drive the function to work by specifying the URL of the ACS server, the account information to login the ACS server, the service port and the account information for connection requesting from the ACS server, and the time interval for job inquiry. Except the inquiry time, there are no activities between the ACS server and the gateways until the next inquiry ...
Page 243 PoE AP Router When you finish set basic network WAN‐1 ~ WAN‐n, you can choose WAN‐1 ~ WAN‐n WAN‐1 is selected by Interface When you finish set Security > VPN > IPSec/OpenVPN/PPTP/L2TP/GRE, you default. can choose IPSec/OpenVPN/PPTP/L2TP/GRE tunnel, the interface just like “IPSec #1” Select the TR‐069 dat model for the remote management. Standard : the ACS Server is a standard one, which is fully comply with TR‐ Standard is selected by Data Model 069. default. AMIT’s ACS Data Model : Select this data model if you intend to use AMIT’s Cloud ACS Server to managing the deployed gateways. ACS URL A Must filled setting You can ask ACS manager provide ACS URL and manually set ACS Username A Must filled setting You can ask ACS manager provide ACS username and manually set ACS Password A Must filled setting You can ask ACS manager provide ACS password and manually set You can ask ACS manager provide ACS ConnectionRequest Port and manually ConnectionRequest 1. A Must filled setting. set Port 2. By default 8099 is set. Value Range: 0 ~ 65535. ConnectionRequest You can ask ACS manager provide ACS ConnectionRequest Username and A Must filled setting UserName manually set ConnectionRequest ...
Page 244: Snmp
(such as type and description of the variable), are described by Management Information Bases (MIBs). The device supports several public MIBs and one private MIB for the SNMP agent. The supported MIBs are as follow: MIB-II (RFC 1213, Include IPv6), IF-MIB, IP-MIB, TCP-MIB, UDP-MIB, SMIv1 and SMIv2, SNMPv2- TM and SNMPv2-MIB, and AMIB (AMIT Private MIB) SNMP Management Scenario Scenario Application Timing ...
Page 245 PoE AP Router the Intranet and manage all devices that support SNMP protocol in the Intranet. Another one is the Remote NMS to manage some devices whose WAN interfaces are connected together by using a switch or a router with UDP forwarding. If you want to manage some devices and they all have supported SNMP protocol, use either one application scenario, especially the management of devices ...
Page 246 PoE AP Router LAN interface and 118.18.81.33 for WAN‐1 interface. It serves as a NAT router. At first stage, the NMS manager prepares related information for all managed devices and records them in the NMS system. Then NMS system gets the status of all managed devices by using SNMP get commands. When the manager wants to configure the managed devices, the NMS system allows him to do that by using SNMP set commands. The "UserName1" account is used if the manager uses SNMPv3 protocol for configuring the "Gateway 1". Only the "UserName1" account can let the "Gateway 1" accept the configuration from the NMS since the authority of the account is "Read/Write". Once a managed device has an urgent event to send, the device will issue a trap to the Trap Event Receivers. The NMS itself could be one among them. ...
Page 247 PoE AP Router SNMP Setting Go to Administration > Configure & Manage > SNMP tab. The SNMP allows user to configure SNMP relevant setting which includes interface, version, access control and trap receiver. Enable SNMP SNMP Item Value setting Description Select the interface for the SNMP and enable SNMP functions. When Check the LAN box, it will activate SNMP functions and you can access 1.The boxes are SNMP Enable SNMP from LAN side; unchecked by default When Check the WAN box, it will activate SNMP functions and you can access SNMP from WAN side. Select the version for the SNMP When Check the v1 box. 1.The v1 box is It means you can access SNMP by version 1. ...
Page 248 PoE AP Router Create/Edit Multiple Community The SNMP allows you to custom your access control for version 1 and version 2 user. The router supports up to a maximum of 10 community sets. When Add button is applied, Multiple Community Rule Configuration screen will appear. Multiple Community Rule Configuration Item Value setting Description 1. Read Only is Specify this version 1 or version v2c user’s community that will be allowed Read selected by default Only (GET and GETNEXT) or Read‐Write (GET, GETNEXT and SET) access Community 2. A Must filled setting respectively. 3. String format: any The maximum length of the community is 32. text 1.The box is checked Enable Click Enable to enable this version 1 or version v2c user. by default Click the Save button to save the configuration. But it does not apply to SNMP Save N/A functions. When you return to the SNMP main page. It will show “Click on save button to apply your changes” remind user to click main page Save button. Undo N/A Click the Undo button to cancel the settings. Back N/A Click the Back button to return to last page. ...
Page 249 PoE AP Router Create/Edit User Privacy The SNMP allows you to custom your access control for version 3 user. The router supports up to a maximum of 128 User Privacy sets. When Add button is applied, User Privacy Rule Configuration screen will appear. User Privacy Rule Configuration Item Value setting Description User Name 1. A Must filled setting Specify the User Name for this version 3 user. 2. String format: any Value Range: 1 ~ 32 characters. text Password 1. String format: any When your Privacy Mode is authNoPriv or authPriv, you must specify the text Password for this version 3 user. Value Range: 8 ~ 64 characters. Authentication 1. None is selected by When your Privacy Mode is authNoPriv or authPriv, you must specify the default Authentication types for this version 3 user. Selected the authentication types MD5/ SHA‐1 to use. Encryption 1. None is selected by When your Privacy Mode is authPriv, you must specify the Encryption default protocols for this version 3 user. Selected the encryption protocols DES / AES to use. Privacy Mode 1. noAuthNoPriv is ...
Page 250 PoE AP Router selected by default Selected the noAuthNoPriv. You do not use any authentication types and encryption protocols. Selected the authNoPriv. You must specify the Authentication and Password. Selected the authPriv. You must specify the Authentication, Password, Encryption and Privacy Key. Privacy Key 1. String format: any When your Privacy Mode is authPriv, you must specify the Privacy Key (8 ~ 64 text characters) for this version 3 user. Authority 1. Read is selected by Specify this version 3 user’s Authority that will be allowed Read Only (GET and default GETNEXT) or Read‐Write (GET, GETNEXT and SET) access respectively. OID Filter Prefix 1. The default value is The OID Filter Prefix restricts access for this version 3 user to the sub‐tree 1 rooted at the given OID. 2. A Must filled setting Value Range: 1 ~2080768. 3. String format: any legal OID Enable 1.The box is checked Click Enable to enable this version 3 user. by default Save N/A Click the Save button to save the configuration. But it does not apply to SNMP functions. When you return to the SNMP main page. It will show “Click on save button to apply your changes” remind user to click main page Save button. Undo N/A Click the Undo button to cancel the settings Back ...
Page 251 PoE AP Router When you selected v2c, the configuration screen is exactly the same as that of v1, except the version. When you selected v3, the configuration screen will provide more setting items for the version 3 Trap. Trap Event Receiver Rule Configuration Item Value setting Description 1. A Must filled setting Specify the trap Server IP. Server IP 2. String format: any The DUT will send trap to the server IP. Ipv4 address 1. String format: any Specify the trap Server Port. port number You can fill in any port number. But you must ensure the port number is not to Server Port 2. The default SNMP be used. trap port is 162 Value Range: 1 ~ 65535. 3. A Must filled setting SNMP Version 1. v1 is selected by Select the version for the trap ...
Page 252 PoE AP Router default Selected the v1. The configuration screen will provide the version 1 must filled items. Selected the v2c. The configuration screen will provide the version 2c must filled items. Selected the v3. The configuration screen will provide the version 3 must filled items. 1. A v1 and v2c Must filled setting Specify the Community Name for this version 1 or version v2c trap. Community Name 2. String format: any Value Range: 1 ~ 32 characters. text 1. A v3 Must filled setting Specify the User Name for this version 3 trap. User Name 2. String format: any Value Range: 1 ~ 32 characters. text 1. A v3 Must filled When your Privacy Mode is authNoPriv or authPriv, you must specify the setting Password Password for this version 3 trap. 2. String format: any Value Range: 8 ~ 64 characters. text Specify the Privacy Mode for this version 3 trap. Selected the noAuthNoPriv. 1. A v3 Must filled You do not use any authentication types and encryption protocols. setting Privacy Mode Selected the authNoPriv. 2. noAuthNoPriv is You must specify the Authentication and Password. selected by default ...
Page 253 PoE AP Router Edit SNMP Options If you use some particular private MIB, you must fill the enterprise name, number and OID. Options Item Value setting Description 1. The default value is AMIT Specify the Enterprise Name for the particular private MIB. Enterprise Name 2. A Must filled setting Value Range: 1 ~ 10 characters, and only string with A~Z, a~z, 0~9, ’–‘, ‘_’. 3. String format: any text The default value is 12823 (AMIT Enterprise Specify the Enterprise Number for the particular private MIB. Enterprise Number Number) Value Range: 1 ~2080768. 2. A Must filled setting 3. String format: any number 1. The default value is 1.3.6.1.4.1.12823.4.4.9 Specify the Enterprise OID for the particular private MIB. (AMIT Enterprise OID) The range of the each OID number is 1‐2080768. Enterprise OID 2. A Must filled setting The maximum length of the enterprise OID is 31. 3. String format: any The seventh number must be identical with the enterprise number. ...
Page 254: Telnet With Cli
PoE AP Router 6.1.4 Telnet with CLI A command‐line interface (CLI), also known as command‐line user interface, and console user interface are means of interacting with a computer program where the user (or client) issues commands to the program in the form of successive lines of text (command lines). The interface is usually implemented with a command line shell, which is a program that accepts commands as text input and converts commands to appropriate operating system functions. Programs with command‐line interfaces are generally easier to automate via scripting. ...
Page 255 PoE AP Router Parameter Setup Example Following table lists the parameter configuration as an example for the Gateway in above diagram with "Telnet with CLI" enabling at LAN and WAN interfaces. Use default value for those parameters that are not mentioned in the table. [Telnet with CLI]‐[Configuration] Configuration Path LAN: ■ Enable WAN: ■ Enable Telnet with CLI Connection Type Telnet: Service Port 23 ■ Enable SSH: Service Port 22 ■ Enable Scenario Operation Procedure In above diagram, "Local Admin" or "Remote Admin" can manage the "Gateway" in the Intranet or Internet. The "Gateway" is the gateway of Network‐A, and the subnet of its Intranet is 10.0.75.0/24. It ...
Page 256 PoE AP Router Telnet with CLI Setting Go to Administration > Configure & Manage > Telnet with CLI tab. The Telnet with CLI setting allows administrator to access this device through the traditional Telnet program. Before you can telnet (login) to the device, please configure the related settings and password with care. The password management part allows you to set root password for logging telnet and SSH. Configuration Item Value setting Description Telnet with CLI 1. The LAN Enable box is Check the Enable box to activate the Telnet with CLI function for connecting from WAN/LAN interfaces. checked by default. 2. The WAN Enable box is unchecked by default. Connection Type 1. The Telnet Enable box Check the Telnet Enable box to activate telnet service. Check the SSH Enable box to activate SSH service. You can set which number of Service Port you want to provide for ...
Page 257 PoE AP Router Configuration Item Value setting Description root 1. String: any text but no Type old password and specify new password to change root password. Note: You are highly recommended to change the default telnet password with yours blank character before the device is deployed. 2. The default password for telnet is ‘m2mamit’. Save N/A Click Save to save the settings Undo N/A Click Undo to cancel the settings ...
Page 258: System Operation
PoE AP Router 6.2 System Operation System Operation allows the network administrator to manage system, settings such as web‐based utility access password change, system information, system time, system log, firmware/configuration backup & restore, and reset & reboot. 6.2.1 Password & MMI Go to Administration > System Operation > Password & MMI tab. Change Password Change password screen allows network administrator to change the web‐based MMI login password to access gateway. ...
Page 259 PoE AP Router setting allows administrator to enable automatic logout and set the logout idle time. When the login timeout is disabled, the system won’t logout the administrator automatically. Web UI Item Value Setting Description Enter the login trial counting value. Value Range: 3 ~ 10. If someone tried to login the web GUI with incorrect password for more than Login 3 times is set by default the counting value, an warning message “Already reaching maximum Password‐Guessing times, please wait a few seconds!” will be displayed and ignore the following login trials. Check the Enable box to activate the auto logout function, and specify the The Enable box is Login Timeout maximum idle time as well. unchecked by default Value Range: 30 ~ 65535. GUI Access http/https is selected by Select the protocol that will be used for GUI access. It can be http/https, http Protocol default. only, or https only. Save N/A Click Save button to save the settings Undo N/A Click Undo button to cancel the settings ...
Page 260: System Information
The display also shows the current System time. It is particularly useful when firmware has been upgraded and system configuration file has been loaded. Go to Administration > System Operation > System Information tab. System Name Item Value Setting Description 1. an optional item Enter the system name for identification purpose. System Name 2. AMIT is set by default. It can be the manufacture, or any name for a device deployment. System Information Item Value Setting Description WAN Type N/A It displays the WAN Type of WAN‐1 Interface Internet connection configured. Display Time N/A ...
Page 261: System Time
PoE AP Router 6.2.3 System Time The gateway provides manually setup and auto‐synchronized approaches for the administrator to setup the system time for the gateway. Go to Administration > System Operation > System Time tab. System Time Information Item Value Setting Description 1. It is an optional item. Select a time zone where this device locates. Time Zone 2. GMT+00 :00 is selected by default. Check the Enable button to activate the time auto‐synchronization function with 1. Checked by default. a certain NTP server. Auto‐ 2. Auto is selected by You can enter the IP or FQDN for the NTP server you expected, or leave it as synchronization default. auto mode so that the available server will be used for time synchronization one by one. Check the Enable button to activate the daylight saving function. Daylight Saving 1. It is an optional item. When you enabled this function, you have to specify the start date and Time ...
Page 262 PoE AP Router The first one is “Sync with Timer Server”. Based on your selection of time zone and time server in above time information configuration window, system will communicate with time server by NTP Protocol to get system date and time after you click on the Sync with Timer Server button. Note: Remember to select a correct time zone for the device, otherwise, you will just get the UTC (Coordinated Universal Time) time, not the local time for the device. The second one is “Sync with my PC”. Click on the Sync with my PC button to let system synchronize its date and time to the time of the administration PC. ...
Page 263: System Log
PoE AP Router 6.2.4 System Log System Log screen contains various event log tools facilitating network administrator to perform local event logging and remote reporting. Go to Administration > System Operation > System Log tab. View & Email Log History View button is provided for network administrator to view log history on the gateway. Email Now button enables administrator to send instant Email for analysis. View & Email Log History Item Value setting Description View button N/A Click the View button to view Log History in Web Log List Window. Email Now ...
Page 264 PoE AP Router button Web Log List Window Item Value Setting Description Time column N/A It displays event time stamps Log column N/A It displays Log messages Web Log List Button Description Item Value setting Description Previous N/A Click the Previous button to move to the previous page. Next N/A Click the Next button to move to the next page. First N/A Click the First button to jump to the first page. Last N/A Click the Last button to jump to the last page. Download N/A Click the Download button to download log to your PC in tar file format. Clear N/A Click the Clear button to clear all log. Back N/A ...
Page 265 PoE AP Router Web Log Type Category Setting Window Item Value Setting Description System Checked by default Check to log system events and to display in the Web Log List window. Attacks Checked by default Check to log attack events and to display in the Web Log List window. Drop Checked by default Check to log packet drop events and to display in the Web Log List window. Login message Checked by default Check to log system login events and to display in the Web Log List window. Debug Un‐checked by default Check to log debug events and to display in the Web Log List window. Email Alert Email Alert screen allows network administrator to select the type of event to log and be sent to the destined Email account. Email Alert Setting Window Item Value Setting Description Check Enable box to enable sending event log messages to destined Email Enable Un‐checked by default account defined in the E‐mail Addresses blank space. Select one email server from the Server dropdown box to send Email. If none has been available, click the Add Object button to create an outgoing Email Server N/A ...
Page 266 PoE AP Router Syslogd Syslogd screen allows network administrator to select the type of event to log and be sent to the designated Syslog server. Syslogd Setting Window Item Value Setting Description Enable Un‐checked by default Check Enable box to activate the Syslogd function, and send event logs to a syslog server Select one syslog server from the Server dropdown box to sent event log to. If none has been available, click the Add Object button to create a system log server. Server N/A You may also add an system log server from the Object Definition > External Server > External Server tab. Log type Select the type of event to log and be sent to the destined syslog server. Available Un‐checked by default category events are System, Attacks, Drop, Login message, and Debug. ...
Page 267: Backup & Restore
PoE AP Router 6.2.5 Backup & Restore In the Backup & Restore window, you can upgrade the device firmware when new firmware is available and also backup / restore the device configuration. In addition to the factory default settings, you can also customize a special configuration setting as a customized default value. With this customized default value, you can reset the device to the expected default setting if needed. Go to Administration > System Operation > Backup & Restore tab. FW Backup & Restore Item Value Setting Description If new firmware is available, click the FW Upgrade button to upgrade the device firmware via Web UI, or Via Storage. Via Web UI is selected by After clicking on the “FW Upgrade” command button, you need to specify the FW Upgrade default file name of new firmware by using “Browse” button, and then click “Upgrade” button to start the FW upgrading process on this device. If you want to upgrade ...
Page 268: Reboot & Reset
PoE AP Router 6.2.6 Reboot & Reset For some special reason or situation, you may need to reboot the gateway or reset the device configuration to its default value. In addition to perform these operations through the Power ON/OFF, or pressing the reset button on the device panel, you can do it through the web GUI too. Go to Administration > System Operation > Reboot & Reset tab. In the Reboot & Reset window, you can reboot this device by clicking the “Reboot” button, and reset this device to default settings by clicking the “Reset” button. System Operation Window Item Value Setting Description Chick the Reboot button to reboot the gateway immediately or on a pre‐defined ...
Page 269: Ftp
PoE AP Router 6.3 FTP The File Transfer Protocol (FTP) is a standard network protocol used to transfer computer files between a client and server on a computer network. FTP is built on a client‐server model architecture and uses separate control and data connections between the client and the server. FTP users may authenticate themselves with a clear‐text sign‐in protocol, normally in the form of a username and password, but can connect anonymously if the server is configured to allow it. For secure transmission that protects the username and password, and encrypts the content, FTP is often secured with SSL/TLS (FTPS). Besides, SSH File Transfer Protocol (SFTP) is sometimes also used instead, but is technologically different. ...
Page 270: Server Configuration
PoE AP Router 6.3.1 Server Configuration This section allows user to setup the embedded FTP and SFTP server for retrieving the interested fog files. Go to Administration > FTP > Server Configuration tab. Enable FTP Server Configuration Item Value setting Description Check Enable box to activate the embedded FTP Server function. With the FTP Server enabled, you can retrieve or delete the stored log files via The box is unchecked by FTP FTP connection. default. Note: The embedded FTP Server is only for log downloading, so no any write permission is implemented for user file upload to the storage. Specify a port number for FTP connection. The gateway will listen for incoming FTP Port Port 21 is set by default FTP connections on the specified port. Value Range: 1 ~ 65535. 300 seconds is set by Specify the maximum timeout interval for the FTP connection. Supported range Timeout default. is 60 to 7200 seconds. Max. Specify the maximum number of clients from the same IP address for the FTP 2 Clients are set by Connections per ...
Page 271 PoE AP Router default. is supported. Check the Enable box to activate the support of PASV mode for a FTP PASV Mode Optional setting connection from FTP clients. Port Range of Port 50000 ~ 50031 is set Specify the port range to allocate for PASV style data connection. PASV Mode by default. Value Range: 1024 ~ 65535. Auto Report Check the Enable box to activate the support of overriding the IP address External IP in Optional setting advertising in response to the PASV command. PASV Mode ASCII Transfer Check the Enable box to activate the support of ASCII mode data transfers. Optional setting Mode Binary mode is supported by default. FTPS (FTP over Check the Enable box to activate the support of secure connections via SSL/TLS. Optional setting SSL/TLS) Enable SFTP Server ...
Page 272: User Account
PoE AP Router 6.3.2 User Account This section allows user to setup user accounts for logging to the embedded FTP and SFTP server to retrieve the interested fog files. Go to Administration > FTP > User Account tab. Create/Edit FTP User Accounts When Add button is applied, User Account Configuration screen will appear. Configuration Item Value setting Description User Name String : non‐blank string Enter the user account for login to the FTP server. Value Range: 1 ~ 15 characters. Password String : no blank Enter the user password for login to the FTP server. Directory N/A Select a root directory after user login. Permission Read/Write is selected by Select the Read/write permission. default. Note: The embedded FTP Server is only for log downloading, so no any write permission is implemented for user file upload to the storage, even Read/Write option is selected. Enable The box is checked by Check the box to activate the FTP user account. ...
Page 273: Diagnostic
PoE AP Router 6.4 Diagnostic This gateway supports simple network diagnosis tools for the administrator to troubleshoot and find the root cause of the abnormal behavior or traffics passing through the gateway. There can be a Packet Analyzer to help record the packets for a designated interface or specific source/destination host, and another Ping and Tracert tools for testing the network connectivity issues. 6.4.1 Diagnostic Tools The Diagnostic Tools provide some frequently used network connectivity diagnostic tools (approaches) for the network administrator to check the device connectivity. Go to Administration > Diagnostic > Diagnostic Tools tab. Diagnostic Tools Item Value setting Description This allows you to specify an IP / FQDN and the test interface (LAN, WAN, or Ping Test Optional Setting Auto), so system will try to ping the specified device to test whether it is alive after clicking on the Ping button. A test result window will appear beneath it. command is a network diagnostic tool for displaying the Trace route (tracert) route (path) and measuring transit delays of packets across an IP network. Trace route proceeds until all (three) sent packets are lost for more than twice, then the connection is lost and the route cannot be evaluated. Tracert Test Optional setting First, you need to specify an IP / FQDN, the test interface (LAN, WAN, or Auto) and the protocol (UDP or ICMP), and by default, it is UDP. Then, system will try to trace the specified host to test whether it is alive after clicking on Tracert button. A test result window will appear beneath it. Wake on LAN (WOL) is an Ethernet networking standard that allows a computer to be turned on or awakened by a network message. You can Wake on LAN ...
Page 274: Packet Analyzer
PoE AP Router 6.4.2 Packet Analyzer The Packet Analyzer can capture packets depend on user settings. User can specify interfaces to capture packets and filter by setting rule. Ensure the log storage is available (either embedded SD‐Card or external USB Storage), otherwise Packet Analyzer cannot be enabled. Go to Administration > Diagnostic > Packet Analyzer tab. Configuration Item Value setting Description Check Enable box to activate the Packet Analyzer function. The box is unchecked by If you cannot enable the checkbox, please check if the storage is available Packet Analyzer default. or not. Plug in the USB storage and then enable the Package Analyzer function. 1. An optional setting Enter the file name to save the captured packets in log storage. 2. Blank is set by default, and ...
Page 275 PoE AP Router  VAP: This means the virtual AP. When WiFi and VAP are enabled, it can be selected here. Save N/A Click the Save button to save the configuration. Click the Undo button to restore what you just configured back to the Undo N/A previous setting. Once you enabled the Packet Analyzer function on specific Interface(s), you can further specify some filter rules to capture the packets which matched the rules. Capture Fitters Item Value setting Description Filter Optional setting Check Enable box to activate the Capture Filter function. Source MACs ...
Page 276 PoE AP Router Source IPs Optional setting Define the filter rule with Source IPs, which means the source IP address of packets. Packets which match the rule will be captured. Up to 10 IPs are supported, but they must be separated with “;”, e.g. 192.168.1.1; 192.168.1.2 The packets will be captured when match any one IP in the rule. Source Ports Optional setting Define the filter rule with Source Ports, which means the source port of packets. The packets will be captured when match any port in the rule. Up to 10 ports are supported, but they must be separated with “;”, e.g. 80; 53 Value Range: 1 ~ 65535. Destination MACs Optional setting Define the filter rule with Destination MACs, which means the destination MAC address of packets. Packets which match the rule will be captured. Up to 10 MACs are supported, but they must be separated with “;”, e.g. AA:BB:CC:DD:EE:FF; 11:22:33:44:55:66 The packets will be captured when match any one MAC in the rule. Destination IPs Optional setting Define the filter rule with Destination IPs, which means the destination IP address of packets. Packets which match the rule will be captured. Up to 10 IPs are supported, but they must be separated with “;”, e.g. 192.168.1.1; 192.168.1.2 The packets will be captured when match any one IP in the rule. Destination Ports Optional setting Define the filter rule with Destination Ports, which means the destination port of ...
Page 277: Chapter 7 Service
PoE AP Router Chapter 7 Service 7.1 Cellular Toolkit (not supported) Not supported feature for the purchased product, leave it as blank. ...
Page 278: Event Handling
PoE AP Router 7.2 Event Handling Event handling is the application that allows administrator to setup the pre‐defined events, handlers, or response behavior with individual profiles. With properly configuring the event handling function, administrator can easily and remotely obtain the status and information via the purchased gateway. Moreover, he can also handle and manage some important system related functions, even the field bus devices and D/O devices which are already well connected to. The supported events are categorized into two groups: the managing events and notifying events. The managing events are the events that are used to manage the gateway or change the setting / status of the specific functionality of the gateway. On receiving the managing event, the gateway will take action to change the functionality, collect the required status for administration, and also change the status of a certain connected field bus device simultaneously. ...
Page 279 PoE AP Router field bus device status monitoring, digital sensors detection controlling, and so on. All of such management and notification function can be realized effectively via the Event Handling feature. The following is the summary lists for the provided profiles, and events: (Note: The available profiles and events could be different for the purchased product.)  Profiles (Rules): • SMS Configuration and Accounts • Email Accounts Digital Input (DI) profiles • Digital Output (DO) profiles • • Modbus Managing Event profiles Modbus Notifying Event profiles •  Managing Events: • Trigger Type: SMS, SNMP Trap, and Digital Input (DI). Actions: ...
Page 280: Configuration
PoE AP Router 7.2.1 Configuration Go to Service > Event Handling > Configuration Tab. Event handling is the service that allows administrator to setup the pre‐defined events, handlers, or response behavior with individual profiles. Enable Event Management Configuration Item Value setting Description Event The box is unchecked by Check the Enable box to activate the Event Management function. Management default Enable SMS Management To use the SMS management function, you have to configure some important settings first. SMS Configuration Item Value setting Description Message Prefix The box is unchecked Click the Enable box to enable the SMS prefix for validating the received SMS. by default Once the function is enabled, you have to enter the prefix behind the checkbox. The received managing events SMS must have the designated prefix as an initial identifier, then corresponding handlers will become effective for further ...
Page 281 PoE AP Router Physical Interface Choose a cellular interface (3G/4G‐1 or 3G/4G‐2) to configure the SMS The box is 3G/4G‐1 by management setting. default. Note: 3G/4G‐2 is only available for for the product with dual cellular module. SIM Status N/A Show the connected cellular service (identified with SIM_A or SIM_B). Delete Managed The box is unchecked Check the Enable box to delete the received managing event SMS after it has SMS after by default been processed. Processing Create / Edit SMS Account Setup the SMS Account for managing the gateway through the SMS. It supports up to a maximum of 5 accounts. ...
Page 282 PoE AP Router Create / Edit Email Service Account Setup the Email Service Account for event notification. It supports up to a maximum of 5 accounts. You can click the Add / Edit button to configure the Email account. Email Service Configuration Item Value setting Description Email Server ‐‐‐ Option ‐‐‐ Select an Email Server profile from External Server setting for the email account setting. Email 1. Internet E‐mail address Specify the Destination Email Addresses. Addresses format 2. A Must filled setting Enable The box is unchecked by Click Enable box to activate this account. default. Save NA Click the Save button to save the configuration ...
Page 283 PoE AP Router Create / Edit Digital Input (DI) Profile Rule (DI/DO support required) Setup the Digital Input (DI) Profile rules. It supports up to a maximum of 10 profiles. When Add button is applied, the Digital Input (DI) Profile Configuration screen will appear. Digital Input (DI) Profile Configuration Item Value setting Description DI Profile 1. String format Specify the DI Profile Name. Name 2. A Must filled setting Value Range: ‐1 ~ 32 characters. Description 1. Any text Specify a brief description for the profile. 2. An Optional setting DI Source ID1 by default Specify the DI Source. It could be ID1 or ID2. The number of available DI source could be different for the purchased product. Normal Level Low by default Specify the Normal Level. It could be Low or High. Signal Active 1. Numberic String format Specify the Signal Active Time. It could be from 1 to 10 seconds. Time 2. A Must filled setting Value Range: 1 ~ 10 seconds. ...
Page 284 PoE AP Router Create / Edit Digital Output (DO) Profile Rule (DI/DO support required) Setup the Digital Output (DO) Profile rules. It supports up to a maximum of 10 profiles. When Add button is applied, the Digital Output (DO) Profile Configuration screen will appear. Digital Output (DO) Profile Configuration Item Value setting Description DO Profile 1. String format Specify the DO Profile Name. Name 2. A Must filled setting Value Range: ‐1 ~ 32 characters. Description 1. Any text Specify a brief description for the profile. 2. An Optional setting DO Source ID1 by default Specify the DO Source. It could be ID1. Normal Level Low by default Specify the Normal Level. It could be Low or High. Total Signal 1. Numberic String format Specify the Total Signal Period. Period 2. A Must filled setting Value Range: 10 ~ 10000 ms. Repeat & The box is unchecked by Check the Enable box to activate the repeated Digital Output, and specify the ...
Page 285 PoE AP Router Create / Edit Modbus Notifying Events Profile (Modbus support required) Setup the Modbus Notifying Events Profile. It supports up to a maximum of 10 profiles. You can click the Add / Edit button to configure the profile. Modbus Notifying Events Profile Item Value setting Description Modbus Name 1. String format Specify the Modbus profile name. 2. A Must filled setting Value Range: ‐1 ~ 32 characters. Description 1. Any text Specify a brief description for the profile. 2. An Optional setting Read Function Read Holding Registers by Specify the Read Function for Notifying Events. default ...
Page 286 PoE AP Router Modbus Mode Serial by default Specify the Modbus Mode. It could be Serial or TCP. IP 1. NA for Serial on Modbus Specify the IP for TCP on Modbus Mode. IPv4 Format. Mode. 2. A Must filled setting for TCP on Modbus Mode. Port 1. NA for Serial on Modbus Specify the Port for TCP on Modbus Mode. Mode. Value Range: 1 ~ 65535. 2. A Must filled setting for TCP on Modbus Mode. Device ID 1. Numberic String format Specify the Device ID of the modbus device. It could be from 1 to 247. 2. A Must filled setting Register 1. Numberic String format Specify the Register number of the modbus device. 2. A Must filled setting Value Range: 0 ~ 65535. Logic Logic Comparator ‘>’ by Specify the Logic Comparator for Notifying Events. It could be ‘>’, ‘<’, ‘=’, ‘>=’, or Comparator default. ‘<=’. Value 1. Numberic String format Specify the Value. 2. A Must filled setting Value Range: 0 ~ 65535. Enable The box is unchecked by ...
Page 287 PoE AP Router Create / Edit Modbus Managing Events Profile (Modbus support required) Setup the Modbus Managing Events Profile. It supports up to a maximum of 10 profiles. You can click the Add / Edit button to configure the profile. Modbus Managing Events Profile Item Value setting Description Modbus Name 1. String format Specify the Modbus profile name. 2. A Must filled setting Value Range: ‐1 ~ 32 characters. Description 1. Any text Specify a brief description for the profile. 2. An Optional setting Write Write Single Registers by Specify the Write Function for Managing Events. Function default Modbus Mode Serial by default Specify the Modbus Mode. It could be Serial or TCP. IP 1. NA for Serial on Modbus Specify the IP for TCP on Modbus Mode. IPv4 Format. ...
Page 288 PoE AP Router Mode. 2. A Must filled setting for TCP on Modbus Mode. Port 1. NA for Serial on Modbus Specify the Port for TCP on Modbus Mode. Mode. Value Range: 1 ~ 65535. 2. A Must filled setting for TCP on Modbus Mode. Device ID 1. Numberic String format Specify the Device ID of the modbus device. 2. A Must filled setting Value Range: 1 ~ 247. Register 1. Numberic String format Specify the Register number of the modbus device. 2. A Must filled setting Value Range: 0 ~ 65535. Value 1. Numberic String format Specify the Value. 2. A Must filled setting Value Range: 0 ~ 65535. Enable The box is unchecked by Click Enable box to activate this profile setting. default. Save NA Click the Save button to save the configuration Undo NA Click the Undo button to restore what you just configured back to the previous setting. ...
Page 289: Managing Events
PoE AP Router 7.2.2 Managing Events Managing Events allow administrator to define the relationship (rule) among event trigger, handlers and response. Go to Service > Event Handling > Managing Events Tab. Enable Managing Events Configuration Item Value setting Description Managing The box is unchecked by Check the Enable box to activate the Managing Events function. Events default Create / Edit Managing Event Rules Setup the Managing Event rules. It supports up to a maximum of 128 rules. When Add button is applied, the Managing Event Configuration screen will appear. Managing Event Configuration Item ...
Page 290 PoE AP Router Digital Input: Select Digital Input and a DI profile you defined to specify a certain Digital Input Event; Note: The available Event Type could be different for the purchased product. Description String format : any text. Enter a brief description for the Managing Event. Action All box is unchecked by Specify Network Status, or at least one rest action to take when the expected default. event is triggered. Network Status: Select Network Status Checkbox to get the network status as the action for the event; LAN&VLAN: Select LAN&VLAN Checkbox and the interested sub‐items (Port link On/Off), the gateway will change the settings as the action for the event; WiFi: Select WiFi Checkbox and the interested sub‐items (WiFi radio On/Off), the gateway will change the settings as the action for the event; NAT: Select NAT Checkbox and the interested sub‐items (Virtual Server Rule On/Off, DMZ On/Off), the gateway will change the settings as the action for the event; Firewall: Select Firewall Checkbox and the interested sub‐items (Remote Administrator Host ID On/Off), the gateway will change the settings as the action for the event; VPN: Select VPN Checkbox and the interested sub‐items (IPSec Tunnel ON/Off, PPTP Client On/Off, L2TP Client On/Off, OpenVPN Client On/Off), the gateway will change the settings as the action for the event; GRE: Select GRE Checkbox and the interested sub‐items (GRE Tunnel On/Off), the gateway will change the settings as the action for the event; System Manage: Select System Manage Checkbox and the interested sub‐items (WAN SSH Service On/Off, TR‐069 On/Off), the gateway will change the settings as the action for the event; Administration: Select Administration Checkbox and the interested sub‐items (Backup Config, Restore Config, Reboot, Save Current Setting as Default), the gateway will change the settings as the action for the event; Digital Output: Select Digital Output checkbox and a DO profile you defined as the action for the event; Modbus: Select Modbus checkbox and a Modbus Managing Event profile you ...
Page 291: Notifying Events
PoE AP Router 7.2.3 Notifying Events Go to Service > Event Handling > Notifying Events Tab. Notifying Events Setting allows administrator to define the relationship (rule) between event trigger and handlers. Enable Notifying Events Configuration Item Value setting Description Notifying Events The box is unchecked by Check the Enable box to activate the Notifying Events function. default Create / Edit Notifying Event Rules Setup your Notifying Event rules. It supports up to a maximum of 128 rules. When Add button is applied, the Notifying Event Configuration screen will appear. ...
Page 292 PoE AP Router Notifying Event Configuration Item Value setting Description Event Digital Input (or WAN) by Specify the Event type and corresponding event configuration. The supported default Event Type could be: Digital Input: Select Digital Input and a DI profile you defined to specify a certain Digital Input Event; WAN: Select WAN and a trigger condition to specify a certain WAN Event; LAN&VLAN: Select LAN&VLAN and a trigger condition to specify a certain LAN&VLAN Event; WiFi: Select WiFi and a trigger condition to specify a certain WiFi Event; DDNS: Select DDNS and a trigger condition to specify a certain DDNS Event; Administration: Select Administration and a trigger condition to specify a certain Administration Event; Modbus: Select Modbus and a Modbus Notifying Event profile you defined to specify a certain Modbus Event; Data Usage: Select Data Usage, the SIM Card (Cellular Service) and a trigger condition to specify a certain Data Usage Event; Note: The available Event Type could be different for the purchased product. Description String format : any text. Enter a brief description for the Notifying Event. Action All box is unchecked by Specify at least one action to take when the expected event is triggered. default. Digital Output: Select Digital Output checkbox and a DO profile you defined as the action for the event; SMS: Select SMS, and the gateway will send out a SMS to all the defined SMS accounts as the action for the event; Syslog: Select Syslog and select/unselect the Enable Checkbox to as the action for the event; ...
Page 293: Chapter 8 Status
PoE AP Router Chapter 8 Status 8.1 Dashboard 8.1.1 Device Dashboard The Device Dashboard window shows the current status in graph or tables for quickly understanding the operation status for the gateway. They are the System Information, System Information History, and Network Interface Status. The display will be refreshed once per second. From the menu on the left, select Status > Dashboard > Device Dashboard tab. System Information Status The System Information screen shows the device Up‐time and the resource utilization for the CPU, Memory, and Connection Sessions. ...
Page 294 PoE AP Router System Information History The System Information History screen shows the statistic graphs for the CPU and memory. Network Interface Status The Network Interface Status screen shows the statistic information for each network interface of the gateway. The statistic information includes the Interface Type, Upload Traffic, Download Traffic, and Current Upload / Download Traffic. ...
Page 295: Basic Network
PoE AP Router 8.2 Basic Network 8.2.1 WAN & Uplink Status Go to Status > Basic Network > WAN & Uplink tab. The WAN & Uplink Status window shows the current status for different network type, including network configuration, connecting information, modem status and traffic statistics. The display will be refreshed on every five seconds. WAN interface IPv4 Network Status ...
Page 296 PoE AP Router It displays the connection status of the device to your ISP. Conn. Status N/A Status are Connected or disconnected. This area provides functional buttons. Renew button allows user to force the device to request an IP address from the DHCP server. Note: Renew button is available when DHCP WAN Type is used and WAN connection is disconnected. Release button allows user to force the device to clear its IP address setting to disconnect from DHCP server. Note: Release button is available when DHCP WAN Type is used and WAN connection is connected. Action N/A Connect button allows user to manually connect the device to the Internet. Note: Connect button is available when Connection Control in WAN Type setting is set to Connect Manually (Refer to Edit button in Basic Network > WAN & Uplink > Internet Setup) and WAN connection status is disconnected. Disconnect button allows user to manually disconnect the device from the Internet. Note: Connect button is available when Connection Control in WAN Type setting is set to Connect Manually (Refer to Edit button in Basic Network > WAN & Uplink > Internet Setup) and WAN connection status is connected. WAN interface IPv6 Network Status WAN interface IPv6 Network Status screen shows status information for IPv6 network. WAN interface IPv6 Network Status Item Value setting Description ID N/A ...
Page 297 PoE AP Router This area provides functional buttons. Action N/A Edit Button when pressed, web‐based utility will take you to the IPv6 configuration page. (Basic Network > IPv6 > Configuration.) LAN Interface Network Status LAN Interface Network Status screen shows IPv4 and IPv6 information of LAN network. LAN Interface Network Status Item Value setting Description It displays the current IPv4 IP Address of the gateway IPv4 Address N/A This is also the IP Address user use to access Router’s Web‐based Utility. IPv4 Subnet Mask N/A It displays the current mask of the subnet. IPv6 Link‐local It displays the current LAN IPv6 Link‐Local address. N/A Address This is also the IPv6 IP Address user use to access Router’s Web‐based Utility. It displays the current IPv6 global IP address assigned by your ISP for your IPv6 Global Address N/A Internet connection. This area provides functional buttons. Edit IPv4 Button when press, web‐based utility will take you to the Ethernet Action N/A LAN configuration page. (Basic Network > LAN & VLAN > Ethernet LAN tab). Edit IPv6 Button when press, web‐based utility will take you to the IPv6 configuration page. (Basic Network > IPv6 > Configuration.) ...
Page 298 PoE AP Router Item Value setting Description ID N/A It displays corresponding WAN interface WAN IDs. It displays the type of WAN physical interface. Interface N/A Depending on the model purchased, it can be Ethernet, 3G/4G, etc... Received Packets N/A It displays the downstream packets. It is reset when the device is rebooted. Transmitted Packets N/A It displays the upstream packets. It is reset when the device is rebooted. ...
Page 299: Lan & Vlan Status
PoE AP Router 8.2.2 LAN & VLAN Status Go to Status > Basic Network > LAN & VLAN tab. Client List The Client List shows you the LAN Interface, IP address, Host Name, MAC Address, and Remaining Lease Time of each device that is connected to this gateway. LAN Client List Item Value setting Description LAN Interface N/A Client record of LAN Interface. String Format. Client record of IP Address Type and the IP Address. Type is String Format and IP Address N/A the IP Address is IPv4 Format. Host Name N/A Client record of Host Name. String Format. MAC Address N/A Client record of MAC Address. MAC Address Format. Remaining Lease N/A Client record of Remaining Lease Time. Time Format. Time ...
Page 300: Wifi Status
PoE AP Router 8.2.3 WiFi Status Go to Status > Basic Network > WiFi tab. The WiFi Status window shows the overall statistics of WiFi VAP entries. WiFi Virtual AP List The WiFi Virtual AP List shows all of the virtual AP information. The Edit button allows for quick configuration changes. WiFi Virtual AP List Item Value setting Description Op. Band N/A It displays the Wi‐Fi Operation Band (2.4G or 5G) of VAP. ID N/A It displays the ID of VAP. WiFi Enable N/A It displays whether the VAP wireless signal is enabled or disabled. The Wi‐Fi Operation Mode of VAP. Depends of device model, modes are AP Op. Mode N/A Router, WDS Only and WDS Hybrid, Universal Repeater and Client. SSID N/A It displays the network ID of VAP. Channel N/A It displays the wireless channel used. WiFi System N/A The WiFi System of VAP. Auth. & Security ...
Page 301 PoE AP Router WiFi Uplink Status The WiFi Uplink Status shows all information of connected WiFi uplink network. WiFi IDS Status Item Value setting Description SSID N/A It displays the network ID of VAP. BSSID N/A It displays the theBSSID for the connected wireless network. Channel N/A It displays the wireless channel used. It displays the authentication and encryption setting for the WiFi uplink Security N/A connection. RSSI0, RSSI1 N/A It displays the Rx sensitivity on each radio path.. Rate N/A It displays the link rate for the WiFi uplink connection. Click the Edit button to make a quick access to the WiFi uplink configuration page. Action ...
Page 302 PoE AP Router Action N/A Click the Reset button to clear the entire statistic and reset counter to 0. Ensure WIDS function is enabled Go to Basic Network > WiFi > Advanced Configuration tab Note that the WIDS of 2.4G or 5G should be configured separately. WiFi Traffic Statistic The WiFi Traffic Statistic shows all the received and transmitted packets on WiFi network. WiFi Traffic Statistic Item Value setting Description Op. Band N/A It displays the Wi‐Fi Operation Band (2.4G or 5G) of VAP. ID N/A It displays the VAP ID. Received Packets N/A It displays the number of reveived packets. Transmitted Packet N/A It displays the number of transmitted packets. Action N/A Click the Reset button to clear individual VAP statistics. Refresh Button N/A Click the Refresh button to update the entire VAP Traffic Statistic instantly. ...
Page 303: Ddns Status (Not Supported)
PoE AP Router 8.2.4 DDNS Status (not supported) Not supported feature for the purchased product, leave it as blank. ...
Page 304: Security
PoE AP Router 8.3 Security 8.3.1 VPN Status Go to Status > Security > VPN tab. The VPN Status widow shows the overall VPN tunnel status. The display will be refreshed on every five seconds. IPSec Tunnel Status IPSec Tunnel Status windows show the configuration for establishing IPSec VPN connection and current connection status. ...
Page 305 PoE AP Router Connected, Disconnected, Wait for traffic, and Connecting. Click on Edit Button to change IPSec setting, web‐based utility will take you Edit Button N/A to the IPSec configuration page. (Security > VPN > IPSec tab) OpenVPN Server Status According to OpenVPN configuration, the OpenVPN Server/Client Status shows the status and statistics for the OpenVPN connection from the server side or client side. OpenVPN Server Status Item Value setting Description User Name It displays the Client name you have entered for identification. Remote It displays the public IP address (the WAN IP address) of the connected IP/FQDN OpenVPN Client Virtual IP/MAC It displays the virtual IP/MAC address assigned to the connected OpenVPN client. ...
Page 306 PoE AP Router ...
Page 307: Firewall Status
PoE AP Router 8.3.2 Firewall Status Go to Status > Security > Firewall Status Tab. The Firewall Status provides user a quick view of the firewall status and current firewall settings. It also keeps the log history of the dropped packets by the firewall rule policies, and includes the administrator remote login settings specified in the Firewall Options. The display will be refreshed on every five seconds. By clicking the icon [+], the status table will be expanded to display log history. Clicking the Edit button the screen will be switched to the configuration page. Packet Filter Status Packet Filter Status Item Value setting Description Activated Filter N/A This is the Packet Filter Rule name. Rule ...
Page 308 PoE AP Router Blocked MAC N/A This is the MAC address of the logged packet. Addresses IP N/A The Source IP (IPv4) of the logged packet. The Date and Time stamp of the logged packet. Date & time format. ("Month" Time N/A "Day" "Hours":"Minutes":"Seconds") Note: Ensure MAC Control Log Alert is enabled. Refer to Security > Firewall > MAC Control tab. Check Log Alert and save the setting. IPS Status IPS Firewall Status Item Value setting Description Detected N/A This is the intrusion type of the packets being blocked. Intrusion IP N/A The Source IP (IPv4) of the logged packet. The Date and Time stamp of the logged packet. Date & time format. ("Month" "Day" Time N/A "Hours":"Minutes":"Seconds") Note: Ensure IPS Log Alert is enabled. Refer to Security > Firewall > IPS tab. Check Log Alert and save the setting. Firewall Options Status ...
Page 309 PoE AP Router administrator’s source IP address and login user name and the login time. Format: IP : "Source IP", User Name: "Login User Name", Time: "Date time" Example: IP: 192.168.127.39, User Name: admin, Time: Mar 3 01:34:13 Note: Ensure Firewall Options Log Alert is enabled. Refer to Security > Firewall > Options tab. Check Log Alert and save the setting. ...
Page 310: Administration
PoE AP Router 8.4 Administration 8.4.1 Configure & Manage Status Go to Status > Administration > Configure & Manage tab. The Configure & Manage Status window shows the status for managing remote network devices. The type of management available in your device is depended on the device model purchased. The commonly used ones are the SNMP, TR‐069, and UPnP. The display will be refreshed on every five seconds. SNMP Linking Status SNMP Link Status screen shows the status of current active SNMP connections. SNMP Link Status Item Value setting Description It displays the user name for authentication. This is only available for SNMP User Name N/A version 3. IP Address N/A It displays the IP address of SNMP manager. It displays the port number used to maintain connection with the SNMP Port N/A manager. Community N/A It displays the community for SNMP version 1 or version 2c only. Auth. Mode N/A It displays the authentication method for SNMP version 3 only. Privacy Mode N/A It displays the privacy mode for version 3 only. SNMP Version ...
Page 311 PoE AP Router TR‐069 Status TR‐069 Status screen shows the current connection status with the TR‐068 server. TR‐069 Status Item Value setting Description It displays the current connection status with the TR‐068 server. The connection Link Status N/A status is either On when the device is connected with the TR‐068 server or Off when disconnected. ...
Page 312: Log Storage Status
PoE AP Router 8.4.2 Log Storage Status Go to Status > Administration > Log Storage tab. The Log Storage Status screen shows the status for selected device storage. Log Storage Status Log Storage Status screen shows the status of current the selected device storage. The status includes Device Select, Device Description, Usage, File System, Speed, and status . ...
Page 313: Statistics & Report
PoE AP Router 8.5 Statistics & Report 8.5.1 Connection Session Go to Status > Statistics & Reports > Connection Session tab. Internet Surfing Statistic shows the connection tracks on this router. Internet Surfing Statistic Item Value setting Description Previous N/A Click the Previous button; you will see the previous page of track list. Next N/A Click the Next button; you will see the next page of track list. First N/A Click the First button; you will see the first page of track list. Last N/A Click the Last button; you will see the last page of track list. Export (.xml) N/A Click the Export (.xml) button to export the list to xml file. Export (.csv) N/A Click the Export (.csv) button to export the list to csv file. Refresh N/A Click the Refresh button to refresh the list. ...
Page 314: Network Traffic
PoE AP Router 8.5.2 Network Traffic Go to Status > Statistics & Reports > Network Traffic tab. Network Traffic Statistics screen shows the historical graph for the selected network interface. You can change the interface drop list and select the interface you want to monitor. . ...
Page 315: Device Administration
PoE AP Router 8.5.3 Device Administration Go to Status > Statistics & Reports > Device Administration tab. Device Administration shows the login information. Device Manager Login Statistic Item Value setting Description Previous N/A Click the Previous button; you will see the previous page of login statistics. Next N/A Click the Next button; you will see the next page of login statistics. First N/A Click the First button; you will see the first page of login statistics. Last N/A Click the Last button; you will see the last page of login statistics. Export (.xml) N/A Click the Export (.xml) button to export the login statistics to xml file. Export (.csv) N/A Click the Export (.csv) button to export the login statistics to csv file. Refresh N/A Click the Refresh button to refresh the login statistics. ...
Page 316: Appendix A Gpl Written Offer
PoE AP Router Appendix A GPL WRITTEN OFFER This product incorporates open source software components covered by the terms of third party copyright notices and license agreements contained below. GPSBabel Version 1.4.4 Copyright (C) 2002-2005 Robert Lipe<robertlipe@usa.net> GPL License: https://www.gpsbabel.org/ Curl Version 7.19.6 Copyright (c) 1996-2009, Daniel Stenberg, <daniel@haxx.se>. MIT/X derivate License: https://curl.haxx.se/ OpenSSL...
Page 317 PoE AP Router version:4.5.x Copyright (c) 1996-2014 by Alexander V. Lukyanov (lav@yars.free.net) dnsmasq - A lightweight DHCP and caching DNS server. Simon Kelley <simon@thekelleys.org.uk> version:2.72 dnsmasq is Copyright (c) 2000-2014 Simon Kelley socat - Multipurpose relay Version: 2.0.0-b8 GPLv2 http://www.dest-unreach.org/socat/ LibModbus Version: 3.0.3 LGPL v2 http://libmodbus.org/news/...
Page 318 PoE AP Router additional details. OpenNHRP embeds libev. libev is dual licensed with 2-clause BSD and GPLv2+ licenses. See libev/LICENSE for additional details. OpenNHRP links to c-ares. c-ares is licensed under the MIT License. https://sourceforge.net/projects/opennhrp/ IPSec-tools Version: v0.8 No GPL be written http://ipsec-tools.sourceforge.net/ PPTP Version: pptp-1.7.1...
Page 319 PoE AP Router http://www.xelerance.com/software/xl2tpd/ Mpstat: from sysstat, system performance tools for Linux Version: 10.1.6 Copyright: (C) 1999-2013 by Sebastien Godard (sysstat <at> orange.fr) SSHD: dropbear, a SSH2 server Version: 0.53.1 Copyright: (c) 2002-2008 Matt Johnston Libncurses: The ncurses (new curses) library is a free software emulation of curses in System V Release 4.0 (SVr4), and more.
Page 320 PoE AP Router NTPClient: an NTP (RFC-1305, RFC-4330) client for unix-alike computers Version: 2007_365 Copyright: 1997, 1999, 2000, 2003, 2006, 2007 Larry Doolittle exFAT: FUSE-based exFAT implementation Version: 0.9.8 Copyright: (C) 2010-2012 Andrew Nayenko ONTFS_3G: The NTFS-3G driver is an open source, freely available read/write NTFS driver for Linux, FreeBSD, Mac OS X, NetBSD, Solaris and Haiku.

Amit IWP87DAM-07151 User Manual

Chapter 1 Introduction

Chapter 3 Object Definition

Chapter 4 Field Communication

Chapter 5 Security

Chapter 6 Administration

Chapter 7 Service

Chapter 8 Status

Appendix A GPL WRITTEN OFFER

Quick Links

Need help?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Amit IWP87DAM-07151

Summary of Contents for Amit IWP87DAM-07151

Table of Contents