BROWAN reserves the right to change specifications without prior notice. While the information in this document has been compiled with great care, it may not be deemed an assurance of product characteristics. BROWAN shall be liable only to the degree specified in the terms of sale and delivery.
BW1253s User Guide v1.0 Nov. 2013 Federal Communication Commission Interference Statement This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.
BW1253s User Guide v1.0 Nov. 2013 Contents Copyright ............................. 1 Notice ..............................1 Trademarks ............................1 Federal Communication Commission Interference Statement ............2 CONTENTS ............................3 ABOUT THIS GUIDE ..........................6 Purpose ............................... 6 ...
Page 5
BW1253s User Guide v1.0 Nov. 2013 Services | Time ..........................62 Services | NTP ..........................62 Services | Watchdog ........................65 System ............................... 66 System | Administrator ........................66 System | System Log ........................67 ...
Page 6
FAQ ..............................171 APPENDIX ............................172 A) Specification ..........................172 B) Factory Defaults for the BW1253s ....................173 Network Interface Configuration Settings ..................173 User Settings ..........................175 System Settings ........................... 175 ...
Purpose This document provides information and procedures on hardware installation, setup, configuration, and management of the high performance Indoor Access Point BW1253s. Prerequisite Skills and Knowledge To use this document effectively, you should have a working knowledge of Local Area Networking (LAN) concepts and wireless Internet access infrastructures.
The BW1253s is fully compliant to 802.11a/b/g/n standard and provides the flexibility of different kinds of 802.11n, 802.11a, 802.11g or 802.11b clients access to the BW1253s. With the high speed data rate(Max. 300Mbps) and security, feature rich software functionality, it provides the high performance wireless connection for the SMB, enterprise, and hotspot of public area.
Power option includes an integrated IEEE 802.3af Power-over-Ethernet port enables effortless deployment in various environments. Easy and Secure Remote Management BW1253s supports secure remote management through HTTPS, CLISH, SNMP and TR-069(DMS) management. Secure management via HTTPs, CLISH, SNMP Support TR-069 protocol...
Nov. 2013 Chapter 2 - Installation This chapter provides installation instructions for the hardware and software components of the Access Point BW1253s. It also includes the procedures for the following tasks: Hardware Introduction (LEDs, Connectors) Connecting the Access Point Software Installation...
Page 11
Amber : network speed of 10/100Mbps Off : Ethernet link is unavailable WiFi 1 Amber : the radio is operating Off : radio disable STATUS/WiFi2 table 1 – BW1253s led definition The rear panel of BW1253s: ANT2 Console ETH/PoE DC/12V ANT1 Figure 3 –...
Use the enclosed 2 screws mounting the Access Point to the wall. Step 2 Connect DC 48V power supply to PoE injector DC jack. Step 3 Connect the Ethernet cable from the BW1253s to PoE injector “P+data” out port. Page 11 of 180...
Configure your PC with a static IP address on the 192.168.2.x subnet with mask 255.255.255.0. Connect the BW1253s in to the same physical network as your PC. Open the Web browser and type the default IP address of the BW1253s: https://192.168.2.2/a.rg...
Page 14
Figure 6 – Security alert Figure 7 – login page Step 3 After successful administrator log on you will see the main page of the BW1253s Web interface: Figure 8 – Web interface Management Menu Now you are enabled to perform your configuration.
Nov. 2013 Chapter 3 – Reference Manual----AP Mode This chapter describes the configuration of the BW1253s which works in AP mode using the Web Interface. The BW1253s Web Interface in AP mode is different from that in AP-Router mode. To change your BW1253s to AP-Router mode, please refer to System | System Mode .
System Log – check the system log locally or specify address where to send system log file System Mode – specify whether the BW1253s works in AP mode or in AP router mode System Info – specify some device related information for BW1253s Configuration –...
Page 17
Free System Memory – indicate the memory currently available in the BW1253s Total System Memory – indicate the total memory in the BW1253s LAN Mode – indicate static IP or DHCP client is used for BW1253s LAN IP address LAN MAC – display the Ethernet MAC address LAN IP –...
Radio1 –wireless interfaces Channel – indicate which channel is in use. Domain – indicate regulatory domain set on the BW1253s.[ The country code selection is for non US models only] Mode – AP or Bridge mode is be used for this wireless interface Band –...
Page 19
BW1253s User Guide v1.0 Nov. 2013 Output Packets – show the packets number transmitted out of the network interface. Output Errors – show the packets number which contain errors preventing them from being transmitted out correctly. Refresh – get the updated network interface information.
Page 20
Apply Changes – save all changes in the interface table at once. Discard Changes – restore all previous values. For such change of settings, the BW1253s needs to be restarted to apply all settings changes when clicking Apply Changes. Request for reboot server appears:...
Page 21
Specify STP(spanning tree protocol) status of 802.1d bridge here. Figure18– 802.1d bridge STP settings STP Status – Enable or disable the 802.1d STP for BW1253s Clicking Edit, the follow UI will be appear: Figure 19 – Edit bridge settings...
Page 22
Reboot button to restart and take effect for all settings. Network | Attack Countermeasure To protect BW1253s from outside attack, anti-attack polices can be set here based on network needs. Figure 21– Attack Countermeasure settings Anti-DOS Status –...
BW1253s User Guide v1.0 Nov. 2013 Network | RADIUS Server Up to 32 different RADIUS servers can be configured in the RADIUS servers menu. By default, one RADIUS server is specified for the system: Figure 22 – RADIUS Servers Settings Details –...
Page 24
BW1253s User Guide v1.0 Nov. 2013 Authentication Secret – show the shared secret string that is used to make sure the integrity of data frames used for the Authentication RADIUS server Accounting IP – show the IP address of Accounting RADIUS server If the Accounting IP address is 0.0.0.0, it means that the Accounting service is...
Page 25
BW1253s User Guide v1.0 Nov. 2013 Figure 25 – Add a new RADIUS Server's profile Name – specify the new RADIUS server name which is used for selecting RADIUS server Default – specify this RADIUS profile as default or not. When selected, the profile will be used as default Authentication IP –...
Page 26
BW1253s User Guide v1.0 Nov. 2013 Figure 26 – Apply or Discard RADIUS Server Changes Details – show the detail information of this RADIUS Server profile Edit – edit the selected RADIUS Server entry you want to configure Delete – delete the selected RADIUS Server entry. The last entry can not be deleted Add –...
BW1253s User Guide v1.0 Nov. 2013 Network | RADIUS Properties General RADIUS settings are configured using the RADIUS Properties menu under the network: Figure 28 – RADIUS Properties settings RADIUS Retries – retry count of sending RADIUS packets before giving up [0-99] RADIUS Timeout (seconds) –...
Discard Changes – restore all previous values Network | DHCP In AP mode, BW1253s can act as DHCP server. The DHCP (Dynamic Host Configuration Protocol) service is supported on layer 2 interfaces. DHCP server and DHCP relay are disabled by default.
Page 29
BW1253s User Guide v1.0 Nov. 2013 Status – select status from the drop-down menu. Disabled – disable the DHCP server service. DHCP Server – enable the DHCP server service. Choose DHCP Server to enable DHCP server service. DHCP Server This DHCP server service enables clients on the LAN to request configuration information, such as IP address, from a server.
Page 30
The Gateway of DHCP server settings must be same with the Gateway of BW1253s For each change of settings, the BW1253s needs to be restarted to apply all settings changes when clicking Apply Changes. Request for reboot server appears: Page 29 of 180...
Page 31
When BW1253s network Interface uses DHCP to get IP address dynamically, DHCP server service cannot be enabled. When BW1253s uses DHCP to get IP address, the similar WEB UI will be appeared: Figure 35 – Warning information Page 30 of 180...
Status – Enable or disable the feature of Link Integrity Target IP1 to Target IP5 – IP addresses for BW1253s detecting if its Ethernet interface can access network. The AP will ping every IP address 15 times in sequence. As long as one ping is successful it will consider the network is no problem.
Page 33
Apply Changes – save all changes in the interface table at once. Discard Changes – restore all previous values. Maximum 5 target IP can be siecified. The BW1253s needs to be restarted to apply all settings changes when clicking Apply Changes. Request for reboot server appears: Figure 40 – Reboot Server Reboot –...
VOIP-phones for the end users. The TR-069 standard was developed for automatic configuration of these devices with Auto Configuration Servers(ACS). configure the remote management through TR069 ACS server(eg:BROWAN DMS server) Figure 41 – TR-069 settings Click Edit button and the similar page will be appeared.
Page 35
BW1253s User Guide v1.0 Nov. 2013 Contact the ACS server administrator to get the user name and password for Connection Request UserName and Connection Request Password otherwise the AP will not accept the task pulling by ACS server. After enter all field click save and apply changes button to take effect.
BW1253s User Guide v1.0 Nov. 2013 Wireless Wireless | Basic Use the Wireless | Basic menu to configure wireless settings such as regulatory domain, channel, band, and power, layer 2 isolation. Click the edit button on the setting you need to change: The country code selection is for non US models only Figure 44 –...
Page 37
DCA threshold – specify the value (in minutes) of DCA threshold. This threshold is been used to judge if there is no wireless users connected during this time. And if yes, BW1253s will monitor the environment and adjust channel for the best operational one.
Page 38
BW1253s User Guide v1.0 Nov. 2013 Wireless users’ will be kicked off when DCA is processing (new operational frequency channel takes effect). DCA optional channel – show the channels only in which auto channel selection (DCA) will be processed to reduce interference.
Page 39
Nov. 2013 Figure 47 – Edit Basic Wireless Settings with DCA enabled Radio Name – specify wireless interface of BW1253s is shown Mode – configure the radio operation mode. [AP mode or Dynamic Bridge mode]. There will be different configuration for the two mode within Wireless | Advanced menu. Please refer to corresponding chapter.
Page 40
DCA threshold – specify the value (in minutes) of DCA threshold. This threshold is been used to judge if there is no wireless users connected during this time. And if yes, BW1253s will monitor the environment and adjust channel for the best operational one.
Page 41
Change status or leave in the default state if no editing is necessary and click the Save button. Figure 49 – Apply or Discard dynamicbridge setting For such change of settings, the BW1253s needs to be restarted to apply all settings changes when clicking Apply Changes. Request for reboot server appears:...
Reboot button to restart and take effect for all settings. Wireless | Advanced BW1253s supports Multiple BSSID (MBSSID) function. You can configure up to 16 BSSIDs on BW1253s and assign different configuration settings to each BSSID. For wireless users, they can think BW1253s as single AP with multi service supporting, including different security policy, different VLAN ID, different authentication etc.
Page 43
Nov. 2013 Figure 51 – Advanced Wireless Setting (AP Mode) Radio – specify wireless interface to be configured.[only one radio for BW1253s] Mode – show the current operation mode of this radio (AP or Bridge) Interface – display the interface which corresponding to the SSID. Each Interface maps to a BSSID SSID –...
Page 44
BW1253s User Guide v1.0 Nov. 2013 Interface – show the current sub-interface. Mode – show the operation mode of current radio. SSID – a unique ID for your wireless network. It is case sensitive and must not exceed 32 characters.
Page 45
WMM –BW1253s support WMM wireless clients and implement WMM QoS with the WMM clients. [enable] ESS in Tunnel – Settings for ESS in tunnel. When enabled, BW1253s setup tunnel with remote AC for passing through layer3 network. Remote Server IP – IP address of remote AC product that setup tunnel with BW1253s Figure 54 –...
Page 46
BW1253s User Guide v1.0 Nov. 2013 WEP Key Index – select the default key Index to make it the Default key and encrypt the data before being transmitted. All stations, including this MSSID Entry, always transmit data encrypted using this Default Key. The key number (1, 2, 3, 4) is also transmitted. The receiving station will use the key number to determine which key to use for decryption.
Page 47
Group Key MAC Auth – when selected, the MAC address of wireless client will be passed to RADIUS server for PAP authentication when it connects with BW1253s. The MAC address of wireless client acts as username and password RADIUS Server Profile –...
Page 48
Change status or leave in the default state if no editing is necessary and click the Save button. Figure 57 –Apply or Discard the advanced Settings in AP mode For each change of settings, the BW1253s needs to be restarted to apply all settings changes when clicking Apply Changes. Request for reboot server appears: Figure 58 –...
Page 49
DynamicBridge is smart, high efficiency, high performance, easy deployment and easy configuration for point to multi-point bridge link. It enables BW1253s to automatically seek and associate nearby root AP and dynamically self-configure for wireless bridge connection. Whenever a bridge link is broken, the network will auto re-configure route to minimize the lost of WLAN operation.
Click Save button to save the change of settings or Cancel button to discard the change Figure 61 –Apply or Discard the advanced Settings in Bridge mode For each change of settings, the BW1253s needs to be restarted to apply all settings changes when clicking Apply Changes. Request for reboot server appears: Figure 62 –...
Page 51
BW1253s User Guide v1.0 Nov. 2013 Figure 63 – WEP Settings Radio –show the wireless interface. Click Edit to edit the existing wepkey1 to wepkey4. By default, four WEP keys are all set to “aaaaa” (ascii characters) or “6161616161” (hexadecimal characters). They can be modified according to requirement.
Page 52
BW1253s User Guide v1.0 Nov. 2013 Figure 65 –Apply or Discard WEP Configuration For each change of settings, the BW1253s needs to be restarted to apply all settings changes when clicking Apply Changes. Request for reboot server appears: Figure 66 – Reboot information Reboot –...
Nov. 2013 Wireless | MAC ACL Use the MAC ACL service to control the default access to the wireless interface of the BW1253s or define special access rules for mobile clients. Configure the ACL using the Wireless | MAC ACL menu: Figure 67 –...
Page 54
Apply Changes – to save all changes made in the interface table at once Discard Changes – restore all previous values For such change of settings, the BW1253s needs to be restarted to apply all settings changes when clicking Apply Changes. Request for reboot server appears: Figure 71 –...
Page 55
BW1253s User Guide v1.0 Nov. 2013 Reboot – click the button to restart the server and apply the changes If there is no other settings needed to be modified, click the Reboot button to apply all changes. If there are any other settings need to be changed, continuously to finish and apply all changes and then click Reboot button to restart and take effect for all settings.
Page 56
Save – click the button to save the new Allowed MAC List entry Cancel – discard change and restore all previous values For such change of settings, the BW1253s needs to be restarted to apply all settings changes when clicking Apply Changes. Request for reboot server appears: Figure 76 –Save Allowed MAC List Changes...
Page 57
BW1253s User Guide v1.0 Nov. 2013 Figure 77 –apply changes Reboot – click the button to restart the server and apply the changes If there is no other settings needed to be modified, click the Reboot button to apply all changes.
BW1253s User Guide v1.0 Nov. 2013 User User | Users The User | Users menu shows the statistics of connected users. The user can be monitored and managed such as drop from the network. Figure 78 – User’s statistics User – show the connected client’s MAC address Interface –...
Page 59
BW1253s User Guide v1.0 Nov. 2013 Figure 79 – User’s Details MAC address – hardware address of the network device from which the user is connected L2 Auth – show layer2 authentication status, including all supported EAP type of 802.1x auth and MAC auth WISP –...
The Station Supervision function is used to monitor the connected host station availability. This monitoring is performed with ping. If the specified number of ping failures is reached (failure count), the user is logged out from the BW1253s. Figure 80 – Station Supervision To adjust the ping interval/failure count, click the Edit button.
BW1253s User Guide v1.0 Nov. 2013 For such change of settings, the BW1253s needs to be restarted to apply all settings changes when clicking Apply Changes. Request for reboot server appears: Figure 83 – Reboot Server Reboot – click the button to restart the server and apply the changes If there is no other settings needed to be modified, click the Reboot button to apply all changes.
Page 62
BW1253s User Guide v1.0 Nov. 2013 Services | SNMP SNMP is the standard protocol that regulates network management over the Internet. To communicate with SNMP manager you must set up the same SNMP communities and identifiers on both ends: manager and agent.
Thus the modified time will be taken effect at once. No reboot is needed. If NTP is enabled, the local time cannot be modified. Since BW1253s hasn’t RTC (real-time clock), the system time will back to 1970/01/01 00:00 when reboot.
Page 64
BW1253s User Guide v1.0 Nov. 2013 Figure 89 – NTP Settings NTP Status – specify enable or disable this NTP service Time Zone – specify the time zone for NTP service Delete – delete the existed NTP server Edit – edit the settings of the existed NTP server Add –...
Page 65
Click Save button to save new Time Zone setting. Figure 93 – Apply or Discard Time Zone/NTP status Changes For each change of settings, the BW1253s needs to be restarted to apply all settings changes when clicking Apply Changes. Request for reboot server appears: Figure 94 –...
BW1253s User Guide v1.0 Nov. 2013 Services | Watchdog BW1253s supports watchdog function for the reliability. Use Services | Watchdog to enable/disable watchdog service. Figure 95 – Watchdog settings Click Edit button to edit software watchdog settings. The UI will appear as below: Figure 96 –...
The System | Administrator menu is for changing the administrator’s settings: username and password: Figure 98 – system security settings User Name – administrator username for access to BW1253s (e.g. web interface, CLI mode) [1-32 symbols, spaces not allowed] Old Password – old password New Password –...
Do not output “debug” log unless there are important issue needs to be clarified. Debug log will output all of the information so that it will severely drop down the network performance. BW1253s support standard sys. log server. Save – save changes Cancel – restore the previous values...
In this page, you can select the system mode of your BW1253s. Figure 104 – System Mode Settings Mode – select whether the system mode of BW1253s is AP mode or AP Router mode AP – The Ethernet interface and wireless interface will bridge into the same interface working as transparent access point.
Apply and Reboot – click the button to restart the device and apply all setting changes The BW1253s Web Interface in AP mode is different from that in AP-Router mode. For the detailed configuration of BW1253s working in AP-Router mode, please refer to the next chapter: Chapter 4 –...
A configuration file name will be required when you download/save the configuration file. And please remember or re-name the file if needed. The configuration file name should only include characters or numbers. Otherwise, this configuration file will not upload to BW1253s. Page 70 of 180...
BW1253s User Guide v1.0 Nov. 2013 You can upload saved configuration file any time you want to restore this configuration to the device by using the Browse button. Select the configuration file and upload it on the device: Figure 111 – Configuration Upload/Restore - 1 Click Upload for upload the specified configuration and then the similar UI appears Figure 112 –...
Click the Upload and then click the browse button to specify the full path of the new firmware image and click the Upload button: Figure 118 – Firmware Upgrade Click the Upgrade button to flash and upgrade the firmware. Please make sure the firmware is correct for BW1253s. Otherwise the upgrade will be failed. Page 72 of 180...
BW1253s User Guide v1.0 Nov. 2013 Figure 119 – upgrade firmware Do not turn off the BW1253s during the firmware update process because the device could be damaged. It recommend to use the Ethernet connection (not wireless) for the firmware update process.
BW1253s User Guide v1.0 Nov. 2013 Please make sure the firmware is correct for BW1253s. Otherwise the upgrade will be failed. Do not turn off the BW1253s during the firmware update process because the device could be damaged. It recommend to use the Ethernet connection (not wireless) for the firmware update process.
The BW1253s Web Interface in AP-Router mode is different from that in AP mode. To change your BW1253s to AP mode, please refer to System | System Mode . For the detailed configuration of BW1253s working in AP mode, please refer to: Chapter 3 –...
Page 77
System Log – check the system log locally or specify address where to send system log file System Mode – specify whether the BW1253s works in AP mode or in AP router mode System Info – specify some device related information for BW1253s Configuration –...
Free System Memory – indicate the memory currently available in the BW1253s Total System Memory – indicate the total memory in the BW1253s WAN Mode – indicate static IP or DHCP client is used for BW1253s WAN IP address WAN IP – show the WAN IP address of BW1253s WAN Mask –...
Radio1 – show the wireless interface. Channel – indicate which channel is in use. Domain – indicate regulatory domain set on the BW1253s.[ The country code selection is for non US models only] Mode – AP or Bridge mode is be used for this wireless interface Band –...
Page 80
BW1253s User Guide v1.0 Nov. 2013 Output Bytes (KB) – show the total number of bytes transmitted out of the network interface. The bytes number is displayed in KB. Output Packets – show the packets number transmitted out of the network interface.
BW1253s User Guide v1.0 Nov. 2013 Network Network | Interface The AP-Router contains two kinds of network interfaces: eth1 is worked as wide area network (WAN) interface for Access Points; each BSS interface is worked as local area network (LAN) interface which bridge into the br0 interface.
Page 82
Apply Changes – save all changes in the interface table at once. Discard Changes – restore all previous values. For such change of settings, the BW1253s needs to be restarted to apply all settings changes when clicking Apply Changes. Request for reboot server appears:...
BW1253s User Guide v1.0 Nov. 2013 Figure 132 – Reboot Server Reboot – click the button to restart the server and apply the changes. If there is no other settings needed to be modified, click the Reboot button to apply all changes.
BW1253s User Guide v1.0 Nov. 2013 Figure 135 – edit PPPoE service Default WAN gateway specified in Network | Interface page will not be used, because all Internet traffic will be sent/received via the specified PPPoE server (tunnel). Click Save and Apply Changes button to take effect the changes.
Page 85
BW1253s User Guide v1.0 Nov. 2013 Click Edit button to enable or disable the service. Figure 138 – L2TP services Name – service name Status – change status for this service.[disable/enable] Server IP – enter the server IP address. [in digits and dots notation, e.g. 192.168.2.2] Username –...
BW1253s User Guide v1.0 Nov. 2013 Figure 141 – reboot and take effect the changes If there is no other settings needed to be modified, click the Reboot button to apply all changes. If there are any other settings need to be changed, continuously to finish and apply all changes and then click Reboot button to restart and take effect for all settings.
Page 87
BW1253s User Guide v1.0 Nov. 2013 Figure 143 – Detail for Radius Server profile Name – the new RADIUS server name which is used for selecting RADIUS server If a “(default)” appears on the right side of the Name entry, it means this RADIUS server profile is the default profile.
Page 88
BW1253s User Guide v1.0 Nov. 2013 Figure 144 – Edit the RADIUS Server’s profile Figure 145 – Add a new RADIUS Server's profile Name – specify the new RADIUS server name which is used for selecting RADIUS server Default – specify this RADIUS profile as default or not. When selected, the profile will be used as default Authentication IP –...
Page 89
BW1253s User Guide v1.0 Nov. 2013 Accounting Port –specify the network port used to communicate with the Accounting RADIUS server [1-65535] Accounting Secret – shared secret string that is used to make sure the integrity of data frames used for the Accounting RADIUS server The default port value for authentication is 1812.
BW1253s User Guide v1.0 Nov. 2013 Figure 147 – Reboot Server Reboot – restart the access point to make applied changes work. If there is no other settings needed to be modified, click the Reboot button to apply all changes. If there are any other settings need to be changed, continuously to finish and apply all changes and then click Reboot button to restart and take effect for all settings.
Page 91
BW1253s User Guide v1.0 Nov. 2013 User Session Timeout (seconds) – amount of time from the user side (no network carrier) before closing the connect [1-999999999] User Accounting Update Interval (Seconds) – period after which server should update accounting information [60-999999999] User Accounting Update Retry (seconds) –...
Discard Changes – restore all previous values Network | DNS DNS (Domain Name Service) service allows BW1253s subscribers to enter URLs instead of IP addresses into their browser to reach the desired web site. You can enter the DNS server settings under the Network | DNS menu.
Change status or leave in the default state if no editing is necessary and click the Save button. Figure 153 – Apply or Discard DNS server Settings For each change of settings, the BW1253s needs to be restarted to apply all settings changes when clicking Apply Changes. Request for reboot server appears: Figure 154 –...
Page 94
BW1253s User Guide v1.0 Nov. 2013 Interface Name – select which LAN interface to be configured.[only br0 interface in BW1253s] Select the interface, and then click Edit button, a similar screen will appear as below: Figure 156 – Set DHCP Mode Mode –...
Page 95
BW1253s User Guide v1.0 Nov. 2013 Figure 158 – Apply or Discard DHCP server Settings The DHCP server settings will be automatically adjusted to match the network interface settings. If all of the DHCP settings are correct, click Apply Changes, request for reboot server appears: Figure 159 –...
BW1253s User Guide v1.0 Nov. 2013 Network | DHCP Lease This page display the DHCP lease information of wireless client which connect to the AP when DHCP server enable. Figure 160 – DHCP lease information Host Name – the host name of wireless client which associate to the access point.
Figure 163 – Save New Route Static route will take effect immediately after click save button. Network | Attack Countermeasure To protect BW1253s from outside attack, anti-attack polices can be set here based on network needs. Figure 164– Attack Countermeasure settings Anti-DOS Status –...
Page 98
Status – Enable or disable the feature of Link Integrity Target IP1 to Target IP5 – IP addresses for BW1253s detecting if its Ethernet interface can access network. The AP will ping every IP address 15 times in sequence. As long as one ping is success it will consider the network is reachable.
VOIP-phones for the end users. The TR-069 standard was developed for automatic configuration of these devices with Auto Configuration Servers(ACS). configure the remote management through TR069 ACS server(eg:BROWAN DMS server) Figure 169 – TR-069 settings Click Edit button and the similar page will be appeared.
Page 100
BW1253s User Guide v1.0 Nov. 2013 Figure 170 – edit TR-069 settings Status – enable or disable TR-069 setting.[enable/disable] ACS URL – enter the ACS server URL. ACS UserName – the user name for AP register to ACS server. ACS UserPassword – the password for AP register to ACS server.
Page 101
BW1253s User Guide v1.0 Nov. 2013 Reboot – click the button to restart the server and apply the changes. Figure 172 – reboot device If there is no other settings needed to be modified, click the Reboot button to apply all changes.
BW1253s User Guide v1.0 Nov. 2013 Wireless Wireless | Basic Use the Wireless | Basic menu to configure wireless settings such as regulatory domain, channel, band, and power, layer 2 isolation. Click the edit button on the setting you need to change: The country code selection is for non US models only Figure 173 –...
Page 103
DCA threshold – specify the value (in minutes) of DCA threshold. This threshold is been used to judge if there is no wireless users connected during this time. And if yes, BW1253s will monitor the environment and adjust channel for the best operational one.
Page 104
BW1253s User Guide v1.0 Nov. 2013 Wireless users’ will be kicked off when DCA is processing (new operational frequency channel takes effect). DCA optional channel – show the channels only in which auto channel selection (DCA) will be processed to reduce interference.
Page 105
Nov. 2013 Figure 176 – Edit Basic Wireless Settings with DCA enabled Radio Name – specify wireless interface of BW1253s is shown Mode – configure the radio operation mode. In AP-Router mode, the radio only support AP mode for wireless client connection.
Page 106
DCA threshold – specify the value (in minutes) of DCA threshold. This threshold is been used to judge if there is no wireless users connected during this time. And if yes, BW1253s will monitor the environment and adjust channel for the best operational one.
Page 107
Figure 177 – Apply or Discard Basic Wireless Settings with Static Channel selection Figure 178 – Apply or Discard Basic Wireless Settings with DCA enabled For such change of settings, the BW1253s needs to be restarted to apply all settings changes when clicking Apply Changes. Request for reboot server appears:...
Reboot button to restart and take effect for all settings. Wireless | Advanced BW1253s supports Multiple BSSID (MBSSID) function. You can configure up to 16 BSSIDs on BW1253s and assign different configuration settings to each BSSID. For wireless users, they can think BW1253s as single AP with multi service supporting, including different security policy, different VLAN ID, different authentication etc.
Page 109
If you configure AP mode, the page will be shown as below in Wireless | Advanced menu. Figure 180 – Advanced Wireless Setting (AP Mode) Radio – specify wireless interface to be configured.[only one radio for BW1253s] Mode – show the current operation mode of this radio (AP or Bridge) Interface –...
Page 110
BW1253s User Guide v1.0 Nov. 2013 Figure 181 – BSSID Setting -1 Radio – show the wireless interface is being configured. Interface – show the current sub-interface. Mode – show the operation mode of current radio. SSID – a unique ID for your wireless network. It is case sensitive and must not exceed 32 characters.
Page 111
WMM –BW1253s support WMM wireless clients and implement WMM QoS with the WMM clients. [enable] ESS in Tunnel – Settings for ESS in tunnel. When enabled, BW1253s setup tunnel with remote AC for passing through layer3 network. Remote Server IP – IP address of remote AC product that setup tunnel with BW1253s...
Page 112
BW1253s User Guide v1.0 Nov. 2013 Figure 183 – Multiple BSSID Setting – 3 Security – specify the security policy WEP – Wired Equivalent Privacy(WEP) is a security algorithm for IEEE 802.11 wireless networks. WEP Key Index – select the default key Index to make it the Default key and encrypt the data before being transmitted.
Page 113
Group Key MAC Auth – when selected, the MAC address of wireless client will be passed to RADIUS server for PAP authentication when it connects with BW1253s. The MAC address of wireless client acts as username and password RADIUS Server Profile –...
Page 114
Change status or leave in the default state if no editing is necessary and click the Save button. Figure 186 –Apply or Discard the advanced Settings in AP mode For each change of settings, the BW1253s needs to be restarted to apply all settings changes when clicking Apply Changes. Request for reboot server appears:...
BW1253s User Guide v1.0 Nov. 2013 Figure 187 – Reboot information Reboot – click the button to restart the server and apply the changes. If there is no other settings needed to be modified, click the Reboot button to apply all changes.
Page 116
Change status or leave in the default state if no editing is necessary and click the Save button. Figure 190 –Apply or Discard WEP Configuration For each change of settings, the BW1253s needs to be restarted to apply all settings changes when clicking Apply Changes. Request for reboot server appears:...
Reboot button to restart and take effect for all settings. Wireless | MAC ACL Use the MAC ACL service to control the default access to the wireless interface of the BW1253s or define special access rules for mobile clients. Configure the ACL using the Wireless | MAC ACL menu: Figure 192 –...
Page 118
BW1253s User Guide v1.0 Nov. 2013 Select Allow means only the wireless clients whose MAC are listed in the MAC List would be permitted to access this AP. Other wireless client cannot access this AP. Select Deny means only the wireless clients whose MAC are listed in the MAC List would be prevented from accessing.
Page 119
BW1253s User Guide v1.0 Nov. 2013 Discard Changes – restore all previous values For such change of settings, the BW1253s needs to be restarted to apply all settings changes when clicking Apply Changes. Request for reboot server appears: Figure 196 – Reboot Server Reboot –...
BW1253s User Guide v1.0 Nov. 2013 User User | Users The User | Users menu shows the statistics of connected users. The user can be monitored and managed such as drop from the network. Figure 197 – User’s statistics User – show the connected client’s MAC address Interface –...
Page 121
BW1253s User Guide v1.0 Nov. 2013 Figure 198 – User’s Details User – login user name interface – the interface that wireless client associated. User IP – the IP address of wireless client. MAC address – hardware address of the network device from which the user is connected WEB Auth/L2 Auth –...
The Station Supervision function is used to monitor the connected host station availability. This monitoring is performed with ping. If the specified number of ping failures is reached (failure count), the user is logged out from the BW1253s. Figure 199 – Station Supervision To adjust the ping interval/failure count, click the Edit button.
Apply Changes – to save all changes at once Discard Changes – restore all previous values For such change of settings, the BW1253s needs to be restarted to apply all settings changes when clicking Apply Changes. Request for reboot server appears: Figure 202 –...
Page 124
BW1253s User Guide v1.0 Nov. 2013 First step select the rule policy [drop/accept/masquerade] to deal with packet and the packet type [all/TCP/UDP/ICMP] and which interface the rule will act on. Policy – define the policy of client through the access point. It supports three types of rules: DROP, ACCEPT and MASQUERADE.
Discard Changes – restore all previous values Please be careful to use the DROP policy. For example, if DROP tcp for any source IP, BW1253s web UI will not be accessed. User | Walled Garden The walled garden is an environment that controls the user's access to Web content and services. It is to define a free, restricted service set for a user do not logged into the system.
User | WISP menu: Figure 215 – WISP Menu Domain policy means BW1253s use which policy to fetch WISP name from user name then to judge user belong which domain. Page 125 of 180...
Page 127
Save – click the button to save the new WISP Cancel – restore all previous values Figure 218 – Apply or Discard Changes of WISP settings BW1253s needs to be restarted to apply all settings changes when clicking Apply Changes. Request for reboot server appears: Page 126 of 180...
BW1253s User Guide v1.0 Nov. 2013 Figure 219 – Reboot information Reboot – click the button to restart the server and apply the changes. If there is no other settings needed to be modified, click the Reboot button to apply all changes.
BW1253s support internal and external customized UAM. Internal means user can upload their html login and logout page to BW1253s. External means BW1253s will go to an external web server to fetch login and logout page the local and push to web login client.
Page 130
First is Customized UAM status configuration: Pop Logout Page – after user successful web login, if this item is enabled, BW1253s will pop out a logout page for user. In default this setting is enabled if customized page is enabled Logout Page’s Dimension –...
Page 131
Don’t forget fill out the Logout page’s dimension, or logon user maybe can only see part of your logout page. After select the file you want, press upload button and the files will upload to BW1253s. after successful upload files, you can see the page below:...
Page 132
BW1253s User Guide v1.0 Nov. 2013 Figure 227 – Flash upload files OK After successful flash the files, uploaded files will appear in uploaded file list. Next is an example for customized login and logout page. Figure 228 – Example login and logout page For external page, enabled the “Use External Page”...
External page example will be found in the links under the last line. In External page mode, BW1253s will only fetch the login and logout html page to local, the picture or the CSS file which link on the customized login/logout page will not be fetch.
Page 134
BW1253s User Guide v1.0 Nov. 2013 Figure 230 – Available User Pages for Configuration Login/Logout/Help/Unauthorized pages settings detailed description is given in the Chapter 5 – User Pages. Only Welcome page settings reference is provided here. Welcome – first page the user gets when he/she opens its browser and enters the URL.
How to upload user pages see in the Chapter 5 – User Pages. User | HTTP Headers System administrator can set HTML headers encoding and language settings for BW1253s web management interface and new uploaded user pages. Select User | HTTP Headers menu: Figure 234 –...
Shared Secret – enter password for WAS to communicate with AC [sting (4-32), no spaces allowed]. The shared secret must match that configured on the WAS. This shared secret allows the WAS to initiate a secure (SSL) command session with the BW1253s to pass login commands.
Nov. 2013 Services Services | Telnet Use Services | Telnet menu to manage the telnet/SSH service of your BW1253s. Figure 238 – System Configuration settings Telnet Service – Enable or disable telnet service of BW1253s SSH Service – Enable or disable SSH service of BW1253s The default of these two services are all Enabled.
BW1253s User Guide v1.0 Nov. 2013 HeartBeat Trap Interval – define the interval that AP send trap information to the server.[in seconds] Trap Configuration Table: You can configure your SNMP agent to send SNMP Traps (and/or inform notifications) under the defined host (SNMP manager) and community name (optional).
Page 139
BW1253s User Guide v1.0 Nov. 2013 NTP Status – specify enable or disable this NTP service Time Zone – specify the time zone for NTP service Delete – delete the existed NTP server Edit – edit the settings of the existed NTP server Add –...
Page 140
Click Save button to save new Time Zone setting. Figure 246 – Apply or Discard Time Zone/NTP status Changes For each change of settings, the BW1253s needs to be restarted to apply all settings changes when clicking Apply Changes. Request for reboot server appears: Figure 247 –...
Since BW1253s hasn’t RTC (real-time clock), the system time will back to 1970/01/01 00:00 when reboot. Services | Watchdog BW1253s supply watchdog function for the reliability. Use Services | Watchdog to enable/disable watchdog service. Figure 250 – Watchdog settings Page 140 of 180...
Page 142
BW1253s User Guide v1.0 Nov. 2013 Click Edit button to edit watchdog settings. The similar UI will be appeared like below: Figure 251 – edit Software Watchdog settings Status – Enable or Disable software watchdog Check Interval – the periodical time that software watchdog checks the whole file system of BW1253s.
The System | Administrator menu is for changing the administrator’s settings: username and password: Figure 253 – system security settings User Name – administrator username for access to BW1253s (e.g. web interface, CLI mode) [1-32 symbols, spaces not allowed] Old Password – old password value New Password –...
Do not output “debug” log unless there are important issue needs to be clarified. Debug log will output all of the information so that it will severely drop down the network performance. BW1253s support standard sys. log server. Save – save changes Cancel – restore the previous values...
Refresh – get the updated log messages Return – back to System Log page System | System Mode In this page, you can select the system mode of your BW1253s. Figure 259 – System Mode Settings Page 144 of 180...
BW1253s User Guide v1.0 Nov. 2013 Mode – select whether the system mode of BW1253s is AP mode or AP Router mode IP – specify the IP address of current interface [dots and digits] Netmask – specify the subnet mask of current interface [dots and digits] Gateway –...
A configuration file name will be required when you download/save the configuration file. And please remember or re-name the file if needed. The configuration file name should only include characters or numbers. Otherwise, this configuration file will not upload to BW1253s. Page 146 of 180...
BW1253s User Guide v1.0 Nov. 2013 You can upload saved configuration file any time you want to restore this configuration to the device by using the Browse button. Select the configuration file and upload it on the device: Figure 266 – Configuration Upload/Restore - 1 Click Upload for upload the specified configuration and then the similar UI appears Figure 267 –...
Click the Upload and then click the browse button to specify the full path of the new firmware image and click the Upload button: Figure 273 – Firmware Upgrade Click the Upgrade button to flash and upgrade the firmware. Please make sure the firmware is correct for BW1253s. Otherwise the upgrade will be failed. Page 148 of 180...
BW1253s User Guide v1.0 Nov. 2013 Figure 274 – upgrade firmware Do not turn off the BW1253s during the firmware update process because the device could be damaged. It recommend to use the Ethernet connection (not wireless) for the firmware update process.
BW1253s User Guide v1.0 Nov. 2013 Please make sure the firmware is correct for BW1253s. Otherwise the upgrade will be failed. Do not turn off the BW1253s during the firmware update process because the device could be damaged. It recommend to use the Ethernet connection (not wireless) for the firmware update process.
The subscriber gets to the login page after clicking the link on the welcome page. The login page is loaded from the BW1253s. To get access to the network, the user should enter his authentication settings: login name and password and click the login button:...
BW1253s User Guide v1.0 Nov. 2013 Figure 280 – Simple Login Page The login name and password can be obtained from your Hotspot Operator. The login page also displays subscriber’s logical and physical network addresses (IP and MAC). Once authenticated, a start page appears. In addition, a smaller logout window (page) pops up.
BW1253s User Guide v1.0 Nov. 2013 Logout button – click the button to logout from the network. The log-out pop-up window closes. Bill button – display subscriber’s billing information (not include current session). Passwd button – click the button to change subscriber’s password.
The following image formats are supported for new templates. Other formats are not accepted: The following examples demonstrate the use of internal and external user pages. Contact with BROWAN if you need the User Pages templates samples. Example for External Pages...
Page 156
BW1253s User Guide v1.0 Nov. 2013 Figure 285 - configure external pages Step 3 Choose the external option under the use column: Figure 286 - configure external pages Step 4 Specify the new user page location in the location field (http://servername/filelocation): Figure 287 - configure external pages Do not to upload different type of formats.
Page 157
BW1253s User Guide v1.0 Nov. 2013 Figure 288 - configure external pages Step 6 Check for new uploaded user page (e.g. login): Figure 289 - login page If at anytime you wish to restore factory default user pages, click the reset button under the system | reset &...
We will use the user pages templates to show the example how to upload the internal pages. Follow the steps below: Contact with BROWAN if you need the User Pages templates samples. Step 1 Ensure that internal option is selected for all user pages you want to change. By...
Page 159
BW1253s User Guide v1.0 Nov. 2013 Figure 292 - upload template files Step 4 Click the upload button to upload specified templates and files. You do not need to upload all additional files at once. You can repeat the upload process a number of times until all necessary images are uploaded.
Page 160
BW1253s User Guide v1.0 Nov. 2013 Figure 294 - customize login page If at anytime you wish to restore the factory default user pages, click the reset button under the system | reset & reboot menu. Page 159 of 180...
BW1253s User Guide v1.0 Nov. 2013 Extended UAM The Extensions feature (User menu) allows an external Web Application Server (WAS) to intercept/take part in the user authentication process externally log on and log off the user as necessary. It provides means to query user session information as well.
Page 162
BW1253s User Guide v1.0 Nov. 2013 When the Web Application server has all needed data from the client, it must try to authenticate (6) the client. Authentication is done by the RADIUS server but through the AC. At this step the shared secret is used to make the connection between the WAS and the AC.
BW1253s User Guide v1.0 Nov. 2013 Parameters Sent to WAS Parameters that are send to the external server (WAS) using the remote user authentication method (UAM). Parameter Description Comments nasid NAS server ID value Can be specified under the Network | RADIUS Properties...
Page 164
BW1253s User Guide v1.0 Nov. 2013 Disabled Remote authentication is disabled. Bad secret Incorrect shared secret supplied. No password No user password. User already logged on. Failed to authorize Failed to authorize user. Bad password Incorrect username or/and password. Network failed Network connection failed.
Page 165
BW1253s User Guide v1.0 Nov. 2013 found. No user by IP User with supplied IP address and username not found. No user by IP and MAC User with supplied IP, MAC addresses and username not found. Failed to logoff Failed to logoff user.
Step1. Configure and Upload Customized Login/Logout Page files Login BW1253s as super administrator and go to User | Customized UAM. In order to configure BW1253s using the customized login/logout page, Customize Page status must be set to enable. To enable Customized Page, edit the Customize page status(User | Customized UAM) and set to Enabled.
Page 168
BW1253s User Guide v1.0 Nov. 2013 Figure 299 – upload files Enter the physical path and filename of the coffee template files, or click the “browse” button to search the coffee template files are located. The first two items are for login.html and logout.html files only. Additional files are for CSS and image files, such as jpg, gif, png and etc.
Page 169
Nov. 2013 Figure 300 – upload login.html After entering all the template files, press upload button to start the uploading files to BW1253s. Only ten Additional files can be uploaded at one time. To upload more additional file, repeat the same upload process in step 2-4, but please be aware of the first two items are only for login.html and logout.html files.
Page 170
Figure 303 – set the pixels of logout window Step3. Everything is ready Now, any users that access the internet via the BW1253s will see the new personalized login and logout pages. Let’s look at the new appearance of login and logout page based on the coffee bar template.
Page 171
BW1253s User Guide v1.0 Nov. 2013 Figure 304 – example of coffee bar login page Figure 305 – example of coffee bar logout page Page 170 of 180...
3. Question: If I don’t want the logout window to pop-up to users, how could I do? Answer: Please login BW1253s and go to User | Customized UAM to disable “pop logout page.” 4. Question: If I close the logout window, how can I logout? Answer: 1.
BG-6020G/G-4200 Public Access Controller Access Points: BW1254 dual radio 802.11a/b/g/n BW2251 dual radio 802.11a/b/g/n hotspot indoor access point hotspot outdoor access point B) Factory Defaults for the BW1253s Network Interface Configuration Settings Operation Mode Mode Network | Interface AP Mode (Default)
Page 175
BW1253s User Guide v1.0 Nov. 2013 IP Address 0.0.0.0 Port 1812 Secret password (case sensitive) Type Accounting IP Address 0.0.0.0 Port 1813 Secret secret (case sensitive) User Password Md5sum Secret disabled Network | DHCP Server DHCP Server Status Disabled IP Address from 192.168.3.3...
BW1253s User Guide v1.0 Nov. 2013 Wireless | WEP Status Disabled Key1 to Key4 aaaaa Wireless |MAC ACL ACL Policy Disabled User Settings User | Customized UAM (Only for AP router mode) Use SSL Disabled Customize Page Disabled User | Station Supervision...
BW1253s User Guide v1.0 Nov. 2013 Host IP 192.168.2.1 Log Level info Local Log Status Enabled Log Limit(bytes) 102400 Log Level info C) Location ID and ISO Country Codes This list states the country names (official short names in English) in alphabetical order as given in ISO 3166-1 and the corresponding ISO 3166-1-alpha-2 code elements.
Page 178
BW1253s User Guide v1.0 Nov. 2013 Bolivia Namibia Bosnia and Herzegovina Nauru Botswana Nepal Bouvet island Netherlands Brazil Netherlands Antilles British Indian ocean territory New Caledonia Brunei Darussalam New Zealand Bulgaria Nicaragua Burkina Faso Niger Burundi Nigeria Cambodia Niue Cameroon...
Page 179
BW1253s User Guide v1.0 Nov. 2013 Estonia Senegal Ethiopia Seychelles Falkland islands (malvinas) Sierra Leone Faroe islands Singapore Fiji Slovakia Finland Slovenia France Solomon islands French Guiana Somalia French Polynesia South Africa French southern territories South Georgia and the south...
Page 180
BW1253s User Guide v1.0 Nov. 2013 Jordan Vanuatu Kazakhstan Vatican city state see holy see Kenya Venezuela Kiribati Viet nam Korea, democratic people's republic Virgin islands, British Korea, republic of Virgin islands, u.s. Kuwait Wallis and Futuna Kyrgyzstan Western Sahara...
Need help?
Do you have a question about the BW1253S and is the answer not in the manual?
Questions and answers