4IPNET EAP210 User Manual
  1. Manuals
  2. Brands
  3. 4IPNET Manuals
  4. Wireless Access Point
  5. EAP210
  6. User manual

4IPNET EAP210 User Manual

Enterprise access point indoor eap / outdoor owl series
Hide thumbs Also See for EAP210:
Table of Contents

Advertisement

Quick Links

Enterprise Access Point
Indoor EAP Series/
Outdoor OWL Series

Advertisement

Table of Contents
loading

Related Manuals for 4IPNET EAP210

Summary of Contents for 4IPNET EAP210

  • Page 1 Enterprise Access Point Indoor EAP Series/ Outdoor OWL Series...
  • Page 2 4IPNET, INC. Disclaimer 4IPNET, INC. does not assume any liability arising out the application or use of any products, or software described herein. Neither does it convey any license under its parent rights not the parent rights of others.

  • Page 3: Table Of Contents

    1.2 Document Conventions ........................6 1.3 Package Content ..........................7 System Overview and Getting Started ................... 11 2.1 Introduction of 4ipnet Access Points ................... 11 2.2 Hardware Description ........................12 2.3 Hardware Installation ........................36 2.4 Access Web Management Interface ..................... 49 Connect your AP to your Network ....................
  • Page 4 7.5.2 Interfaces ........................124 7.5.3 Associated Clients ......................125 7.5.4 WDS Link Status ......................127 7.5.5 Event Log ........................128 7.5.6 Monitor ......................... 129 CPE Mode Configuration (OWL530/EAP210) ................130 System ............................132 8.1.1 System Information ....................132 8.1.2 Operating Mode ..................... 134 8.1.3...
  • Page 5 User’s Manual Enterprise Access Point ENGLISH 8.5.6 UPnP Status ......................162 Console Interface Configuration ....................163 Copyright © 4IPNET, INC.

  • Page 6: Before You Start

    Up to software version 2.40 EAP757 EAP760 Up to software version 1.20 EAP767 Up to software version 1.20 OWL530 Up to software version 1.40 OWL620 Up to software version 1.70 OWL630 Up to software version 1.20 Copyright © 4IPNET, INC.

  • Page 7: Document Conventions

    Indicates that clicking this button will save the changes you made, but you must reboot the system for the changes to take effect. Indicates that clicking this button will clear what you have set before the settings are applied. Copyright © 4IPNET, INC.

  • Page 8: Package Content

    User’s Manual Enterprise Access Point ENGLISH 1.3 Package Content The standard package of EAP210 includes:  4ipnet EAP210  Quick Installation Guide (QIG)  Console Cable  Power Adaptor (12V)  Detachable Antenna The standard package of EAP220 includes: ...
  • Page 9  Power Adaptor (12V) (Optional)  Detachable Antenna The standard package of EAP717 includes:  4ipnet EAP717  Quick Installation Guide (QIG)  Ethernet Cable  Console Cable  Mounting Kit  Power Adaptor (5V) (Optional) Copyright © 4IPNET, INC.
  • Page 10 Wall Mount Kit  Ceiling Mount Kit  Power Adaptor (12V) (Optional) The standard package of OWL530 includes:  4ipnet OWL530  Quick Installation Guide (QIG)  Ground Wire  Mounting Kit  Power Sourcing Equipment (Optional) Copyright © 4IPNET, INC.
  • Page 11 Power Sourcing Equipment (Optional) It is recommended to keep the original packing materials for possible future shipment when repair or maintenance is required. Any returned product should be packed in its original packaging to prevent damage during delivery. Copyright © 4IPNET, INC.

  • Page 12: System Overview And Getting Started

    2. System Overview and Getting Started 2.1 Introduction of 4ipnet Access Points Indoor – EAP210 / EAP220 / EAP320 / EAP330 / EAP701 / EAP705 / EAP706 / EAP717 / EAP727 / EAP757 / EAP760 / EAP767 The 4ipnet’s Enterprise Access Point EAP Series are embedded with 802.11 a/b/g/n/ac MIMO technology, designed for seamless wireless connectivity in enterprise or industrial environments of all dimensions.

  • Page 13: Hardware Description

    5 Restart Button Press to restart the system 6 LED Indicators Power On indicates power on. Status On indicates the system is ready. WLAN On indicates wireless network interface is ready for service. Copyright © 4IPNET, INC. All rights reserved.
  • Page 14 BLINKING SLOWLY BLINKING RAPIDLY WES Negotiate (Green) (Green) WES Success LED (Green) ON LED (Green) ON WES Fail/Timeout LED (Green) OFF LED (Green) OFF 7 Console Port To access EAP210 via the console interface Copyright © 4IPNET, INC. All rights reserved.
  • Page 15 User’s Manual Enterprise Access Point ENGLISH EAP220 Front Panel 1 2 3 EAP220 Front Panel Copyright © 4IPNET, INC. All rights reserved.
  • Page 16 LAN 1~4 Ports The ports for connections with LAN side devices. Uplink Port (PoE) The port for uplink connection to another gateway or device. PoE (802.3at) is supported. Power Socket for the power adaptor Copyright © 4IPNET, INC. All rights reserved.
  • Page 17 Primary antenna connector (Ant1) for RF Card A A (2) Secondary antenna connector (Ant2) for RF Card A B (1) Primary antenna connector (Ant1) for RF Card B B (2) Secondary antenna connector (Ant2) for RF Card B Copyright © 4IPNET, INC. All rights reserved.
  • Page 18 The port for uplink connection to another gateway or device. PoE is supported. LAN Ports 1~2 The ports for connections with LAN side devices. Console Port To access EAP320 via the console interface. Copyright © 4IPNET, INC. All rights reserved.
  • Page 19 2 LED Indicators 4 LED lights. Representation is listed at the top of the panel. 3 WES Button WDS Easy Setup. Press the button to build up a WDS link with another peer. Copyright © 4IPNET, INC. All rights reserved.
  • Page 20 1 110 Punchdown Block Copper wire punch down for in-wall application 2 Uplink (PoE) Port For Uplink connection. This port can be used to connect to a controller, gateway, or directly to the internet. PoE is supported. Copyright © 4IPNET, INC. All rights reserved.
  • Page 21 2 LED Indicators 4 LED lights. Representation is listed at the top of the panel. 3 WES Button WDS Easy Setup. Press the button to build up a WDS link with another peer. Copyright © 4IPNET, INC. All rights reserved.
  • Page 22 Copper wire punch down for wiring bypass. (Pass-through) 3 110 Punchdown Block Copper wire punch down for Uplink connection. This can be used to (Uplink PoE) connect to a controller, gateway, or directly to the internet. PoE is supported. Copyright © 4IPNET, INC. All rights reserved.
  • Page 23 2 LED Indicators 4 LED lights. Representation is listed at the top of the panel. 3 WES Button WDS Easy Setup. Press the button to build up a WDS link with another peer. Copyright © 4IPNET, INC. All rights reserved.
  • Page 24 4a SMA Connectors (2.4GHz) Connect external antennas for RF Card A here. (1) is the primary antenna connector while (2) is the secondary connector. 4b SMA Connectors (5GHz) Connect external antennas for RF Card B here. (1) is the primary antenna connector while (2) is the secondary connector. Copyright © 4IPNET, INC. All rights reserved.
  • Page 25 4 LED lights. Representation is listed at the top of the panel. 4 Phone Jack A telephone can bypass to a connected phone line in the back of the AP when connected to the socket. 5 5V Attach the power adaptor here. Copyright © 4IPNET, INC. All rights reserved.
  • Page 26 2 Restart / Reset Button Press once to restart the system; Press and hold for more than 5 seconds to reset to factory default. 3 Console Port To access EAP717 via the console interface. Copyright © 4IPNET, INC. All rights reserved.
  • Page 27 Internet. 802.3af PoE is also supported Restart / Reset Press once to restart the system; to reset the system to factory default settings, hold for more than 5 seconds. Copyright © 4IPNET, INC. All rights reserved.
  • Page 28 For Uplink connection. This port can be used to connect to a controller, gateway, or directly to the internet. PoE is supported. 6 LAN 1 – 2 Ports Attach Ethernet cables here to connect to the wired local network. Copyright © 4IPNET, INC. All rights reserved.
  • Page 29 1 External Antenna External antennas via SMA connectors. 1a, 1b and 1c corresponds to Ant1, Ant2 and Ant3 of the system. 2 LED Indicator An LED indicator is available to show the uplink status. Copyright © 4IPNET, INC. All rights reserved.
  • Page 30 6 Restart / Reset Press once to restart the system; to reset the system to factory default settings, hold for more than 5 seconds. 7 Console Port To access EAP760 via the console interface. Copyright © 4IPNET, INC. All rights reserved.
  • Page 31 Attach power adaptor here 2.5 A Uplink (PoE) Port Offers uplink connection. This port can be used to connect to a controller, gateway, or directly to the Internet. 802.3at PoE is also supported Copyright © 4IPNET, INC. All rights reserved.
  • Page 32 For connecting to the Power Sourcing Equipment (PSE). N-type Connector x 2 For connecting to an antenna 4 (1) is the primary antenna connector and 4 (2) is the secondary. Utilize both connectors for 802.11n MIMO optimized performance. Copyright © 4IPNET, INC. All rights reserved.
  • Page 33 User’s Manual Enterprise Access Point ENGLISH OWL620 OWL620 / OWL610 Copyright © 4IPNET, INC. All rights reserved.
  • Page 34 For connecting to an antenna (OWL620: RF Card A x 2, RF Card B x 2). A1/B1 is the primary antenna connector and A2/B2 is the secondary. Utilize both connectors for 802.11n MIMO optimized performance. Copyright © 4IPNET, INC. All rights reserved.
  • Page 35 Connector marked –1 is for the primary antenna when the AP is not in 802.11n or 802.11ac mode. Utilize all connectors for optimized MIMO performance. Back Ground Connector For connecting the ground wire Copyright © 4IPNET, INC. All rights reserved.
  • Page 36 Attach Ethernet cables here for connecting to the wired local network Console The system can be configured via a serial console port. The administrator can use a terminal emulation program such as Microsoft’s Hyper Terminal for troubleshooting purposes. Copyright © 4IPNET, INC. All rights reserved.

  • Page 37: Hardware Installation

    Please follow the steps mentioned below to install the hardware of EAP210 / EAP220 / EAP320 / EAP330: Step 1. Place the EAP210 / EAP220 / EAP320 / EAP330 at the best location. The best location is usually at the center of your intended wireless network.
  • Page 38 Step 2. Connect one end of the Ethernet cable to the Uplink port and the other end of the cable to a switch, a router, or a hub; Or use the 110 punchdown block as your uplink connection. The 110 punchdown block may be connected with the following pin assignment: Copyright © 4IPNET, INC. All rights reserved.
  • Page 39 Use a standard 110 punchdown tool to punch copper wires onto the punchdown block (pin assignment 568A) Step 4. Fasten the Access Point to the mounting plate a) Align the Access Point to the mounting plate using the arrow printed on the back of the Access Point. Copyright © 4IPNET, INC. All rights reserved.
  • Page 40 Access Point towards the unfastening tool:  Punch down tools may vary by country. Please contact the 4ipnet Support Team for recommendations if needed.  Please use only the power adapter supplied with the package. Using a different power adapter may damage this system.
  • Page 41 Drill holes in the marked points and insert the plastic anchors. Use the supplied screws to attach the mounting bracket to the wall/ceiling Attach the Access Point to the mounting bracket (After Steps 2 and 3) Copyright © 4IPNET, INC. All rights reserved.
  • Page 42 Connect the DC power adaptor to the EAP727 power jack socket. b) The EAP727 Uplink port is capable of receiving DC currents. Connect a (IEEE 802.3af- compliant) PSE device (e.g. a PoE-switch) to the Uplink port of EAP727 with the Ethernet cable. Copyright © 4IPNET, INC. All rights reserved.
  • Page 43 Connect the DC power adaptor to the power jack socket. e) The Uplink port is capable of receiving PoE. Connect an IEEE 802.3af/at-compliant PSE device (e.g. a PoE-switch) to the Uplink port of EAP717 / EAP757 with the Ethernet cable. Copyright © 4IPNET, INC. All rights reserved.
  • Page 44 1. Place the EAP760 at the best location. The best location for EAP760 is usually at the center of your intended wireless network. Mounting Use the dimensions below to identify and mark correct screw positions on the selected location. Copyright © 4IPNET, INC. All rights reserved.
  • Page 45 EAP760 Uplink port is capable of receiving DC currents. Connect an IEEE 802.3at-compliant PSE device (e.g. a PoE-switch) to the Uplink port of EAP760 with the Ethernet cable. Connect a 12V/2.5A adaptor (optional) to the DC power jack. Copyright © 4IPNET, INC. All rights reserved.
  • Page 46 Step 1. Place the EAP767 at the best location. The best location is usually at the center of your intended wireless network. Wall Mounting Secure wall-mount bracket on wall Attach the Access Point to the dedicated slots on the mounting bracket Turn the Access Point clockwise as illustrated to fasten AP Copyright © 4IPNET, INC. All rights reserved.
  • Page 47 Enterprise Access Point ENGLISH Ceiling Mount Secure ceiling-mount bracket on ceiling Attach the Access Point to the dedicated slots on the mounting bracket Turn the Access Point clockwise as illustrated to fasten AP Copyright © 4IPNET, INC. All rights reserved.
  • Page 48 Connect the DC power adaptor to the power jack socket. b) The Uplink port is capable of receiving PoE. Connect an IEEE 802.3at-compliant PSE device (e.g. a PoE-switch) to the Uplink port of EAP767 with the Ethernet cable. Copyright © 4IPNET, INC. All rights reserved.
  • Page 49  To verify the wired connection between the AP and your switch / router / hub, please also check the LED status indicator of the respective network devices. Copyright © 4IPNET, INC. All rights reserved.

  • Page 50: Access Web Management Interface

    Enterprise Access Point ENGLISH 2.4 Access Web Management Interface 4ipnet Access Points support web-based configuration. When hardware installation is complete, the AP can be configured through a PC by using a web browser. The default values of the AP’s LAN IP Address and Subnet Mask are: IP Address: 192.168.1.1...
  • Page 51 To logout, simply click on the Logout button at the upper right hand corner of the interface to return to the Administrator Login Page. Click OK to logout. Logout Prompt For security reasons, it is strongly recommended to change the administrator’s password upon the completion of all configuration settings Copyright © 4IPNET, INC. All rights reserved.
  • Page 52  Enter the old password and then a new password with a length of up to 32 characters, and retype it in the Re-enter New Password field. Congratulation! Now, the 4ipnet Access Point is installed and configured successfully.  It is strongly recommended to make a backup copy of your configuration settings.

  • Page 53: Connect Your Ap To Your Network

    From here, click on the System icon to get to the following page. On this Page you can make entries to the Name, Description, and Location fields as well as set the device’s time. Copyright © 4IPNET, INC. All rights reserved.
  • Page 54 NTP servers. Simply enter a local NTP server’s IP Address (if available) or search online for an NTP server nearest to you. Set the time zone and click SAVE. NTP Setup Copyright © 4IPNET, INC. All rights reserved.
  • Page 55 Step 3: Configure the AP’s Wireless General Settings Click on the Wireless icon followed by the General tab. On this page we need to choose the Band and Channel that we wish to use. Copyright © 4IPNET, INC. All rights reserved.
  • Page 56 Cards A and B. •For EAP330 / EAP705 / EAP706/ EAP727 / EAP760 / EAP767 / OWL630, the RF Card A supports only 2.4GHz bands (b/g/n) and RF Card B supports only 5GHz bands (a/n/ac). Copyright © 4IPNET, INC. All rights reserved.
  • Page 57 VAP-1). Click on the Overview tab to proceed. Virtual AP Overview Page On this page click the hyperlink in the row and column that corresponds with VAP-1’s State. This will bring up the following page. Copyright © 4IPNET, INC. All rights reserved.
  • Page 58 VAP will be used for; otherwise, leave it as default. VLAN ID can be chosen at another time. Click SAVE to save all changes up to this point and Reboot the system to apply these revised settings. Congratulations! After reboot, the AP can start to operate with these revised settings. Copyright © 4IPNET, INC. All rights reserved.

  • Page 59: Adding Virtual Access Points

    VAP Overview Page To proceed with specific VAP configuration, click on the corresponding cell in the State column and row of the VAP; the particular VAP’s Configuration page will then appear for further configuration. Copyright © 4IPNET, INC. All rights reserved.
  • Page 60 A VLAN ID can be provided to indicate the traffic through this particular VAP. It may allow further management/control (e.g. access rights and Internet usage, etc) of each VAP with a management gateway. Click SAVE and then Reboot for the changes to take effect. Copyright © 4IPNET, INC. All rights reserved.

  • Page 61: Securing The Ap

    On the VAP Overview page, check the table to confirm the VAP State. If it is Enabled, skip to Step 2. If not, click on to proceed with VAP Configuration for that particular VAP. Copyright © 4IPNET, INC. All rights reserved.
  • Page 62 MAC addresses is desired, skip to Step3. MAC restriction can be coupled with wireless security to provide extra protection. First, click on the corresponding cell in the column labeled Security Type. This hyperlink will direct the user to the following Security Settings page. Copyright © 4IPNET, INC. All rights reserved.
  • Page 63 802.11n band does not support WEP nor WPA-PSK running TKIP. When the Security Type is set as such, the wireless link is only able to run at maximum 54Mbps.  802.1X option is not available on RF Card B of EAP760 and EAP767 Copyright © 4IPNET, INC. All rights reserved.
  • Page 64  802.11 Authentication: Select from Open System, Shared Key, or Auto.  WEP Key Length: Select a key length from 64-bit, 128-bit, 152-bit.  WEP Key Format: Select from ASCII or Hex format for the WEP key. Copyright © 4IPNET, INC. All rights reserved.
  • Page 65  RADIUS Server Settings (A redundant server can also be added to the system): Host: Enter the IP address or domain name of the RADIUS server. Authentication Port: The port number used by the RADIUS server. Specify a port number or Copyright © 4IPNET, INC. All rights reserved.
  • Page 66  Pre-shared Key: Enter the key value for the pre-shared key; the format of the key value depends on the key type selected.  Group Key Update Period: The time interval for the Group Key to be renewed; the time unit is in seconds. Copyright © 4IPNET, INC. All rights reserved.
  • Page 67 Secret Key: The secret key for the system to communicate with the RADIUS server. Accounting Service: Enabling this option allows accounting of login and logouts through the RADIUS server. Accounting Port: The port number used by the RADIUS server for accounting purposes. Copyright © 4IPNET, INC. All rights reserved.
  • Page 68 Allow List (“allowed MAC addresses”) are granted with access to the system. The administrator can temporarily block any allowed MAC address by checking Disable, until the administrator renews the listed MAC. Copyright © 4IPNET, INC. All rights reserved.
  • Page 69 MAC ACL Deny List: This means that all client devices are granted with access to the system except those listed in the Deny List (“denied MAC addresses”). The administrator can allow any denied MAC address to connect to the system temporarily by checking Enable. Copyright © 4IPNET, INC. All rights reserved.
  • Page 70 ACL is selected, all incoming MAC addresses will be authenticated by an external RADIUS server. Please note that each VAP MAC ACL and its security type (shown on the Security Settings page) share the same RADIUS configuration. Copyright © 4IPNET, INC. All rights reserved.
  • Page 71 User’s Manual Enterprise Access Point ENGLISH RADIUS ACL Click SAVE and Reboot upon completing the related configurations to take effect. Copyright © 4IPNET, INC. All rights reserved.

  • Page 72: Creating A Wds Bridge Between Two Aps

    In order to create a valid WDS link, the two APs must be configured to use the same channel and band for their wireless settings. Click the Wireless icon and then General tab to go to the following page. Wireless General Settings Page Copyright © 4IPNET, INC. All rights reserved.
  • Page 73 Step 3: Building the WDS Link To extend the wireless coverage, each RF card supports up to 8 WDS links for connecting wirelessly to other WDS-capable APs (peer APs). By default, all WDS profiles are disabled. Copyright © 4IPNET, INC. All rights reserved.
  • Page 74 AP MAC Address. Enter the MAC Address (peer AP) and then Click SAVE. If you are using another 4ipnet APs as the peer AP, simply repeat the above-mentioned steps to configure another peer AP(s). - To support traffic with unlimited VLAN tags via WDS, EAP220 has to be set to Tag-Based Mode.

  • Page 75: Web Management Interface Configuration

    This chapter will guide the user through the AP’s detailed settings. The following table shows all the User Interface (UI) functions of 4ipnet’s Enterprise Access Points. The Web Management Interface (WMI) is the page where the status is displayed, control is issued and parameters are configured. In the Web Management Interface;...
  • Page 76 After clicking SAVE,  Note: the following message will appear: “Some modification has been saved and will take effect after Reboot.” All online users will be disconnected during reboot or restart. Copyright © 4IPNET, INC. All rights reserved.

  • Page 77: System

     Device Time: Display the current time of the system.  Time Zone: Select an appropriate time zone from the drop-down list box.  Time: Synchronize the system time by reachable NTP servers or manual setup. Copyright © 4IPNET, INC. All rights reserved.
  • Page 78 Set Time: Select the appropriate Hour, Min, and Sec from the drop-down menu. Unless Internet connection or NTP becomes unavailable, it is recommended to use NTP server for time synchronization because system time needs to be reconfigured upon reboot. Copyright © 4IPNET, INC. All rights reserved.

  • Page 79: Network Interface

    The internal switch forwards traffic only to those ports that request multicast traffic. Adversely, without IGMP snooping, multicast traffic is treated like broadcast traffic, with packets forwarded to all ports causing network inefficiencies. Copyright © 4IPNET, INC. All rights reserved.
  • Page 80 Layer 2 STP can lower such undesired occurrence and derive the best available data path for network communication. The AP also supports RSTP Operation. Configurable parameters include Bridge Priority, Hello Time, Max Age, and Forward Delay. Please refer to IEEE standards for recommended parameter values. Copyright © 4IPNET, INC. All rights reserved.

  • Page 81: Port

    *Applicable to EAP220 only. When Port-Based is selected and VLAN IDs are set on physical ports, the uplink traffic recognizes ONLY the VLANs set, all other VLAN tags will be dropped (such as traffic from an Access Point linked via WDS). Copyright © 4IPNET, INC. All rights reserved.

  • Page 82: Management

    VLAN ID such as connecting to a specific VAP with the same VLAN ID. Enter a value between 1 and 4094 for the VLAN ID if the option is enabled.  Note: Management is done without the utilization of VLAN IDs on selected AP models. Copyright © 4IPNET, INC. All rights reserved.
  • Page 83  Trap: When enabled, events on Cold Start, Interface UP & Down, and Association & Disassociation can be reported to an assigned server. Enable/ Disable: Enable or Disable this function. Server IP Address: Enter the IP address of the assigned server that will receive the trap report. Copyright © 4IPNET, INC. All rights reserved.
  • Page 84  SYSLOG Level: Select the desired level of received events from the drop-down menu.  LED: To turn On / Off the LED on the AP.  Note: Only EAP330 / EAP705 / EAP706 / EAP727 / EAP760 support this feature. Copyright © 4IPNET, INC. All rights reserved.

  • Page 85: Capwap

    Static Discovery: Using Static approach to discover access controller.  AC Address: The IP address of the access controller. If it can not discover the first AC, it will try to discover the second AC. Copyright © 4IPNET, INC. All rights reserved.

  • Page 86: Ipv6

    Enterprise Access Point ENGLISH 7.1.6 IPv6 The 4ipnet Access Point supports IPv6 and IPv4 dual stack addressing capability. IPv6 by default is disabled but it can be enabled on this tab page. Mode: There are two options for acquiring an IPv6 address for this device.

  • Page 87: Wireless

    This section includes the following functions: VAP Overview, General, VAP Configuration, Security, Repeater, Advanced, Access Control and Hotspot 2.0. The 4ipnet Access Point supports up to sixteen Virtual Access Points (VAPs) per RF card. Each VAP can have its own settings (e.g. ESSID, VLAN ID, security settings, etc.).
  • Page 88 State: The hyperlink showing Enable or Disable links to the VAP Configuration page. VAP – State Page  Security Type: The hyperlink showing the security type links to the Security Settings Page. VAP – Security Type Page Copyright © 4IPNET, INC. All rights reserved.
  • Page 89 MAC ACL: The hyperlink showing Allow or Disable links to the Access Control Settings Page. VAP – MAC ACL Page  Advanced Settings: The advanced settings hyperlink links to the Advanced Wireless Settings Page. VAP – Advanced Settings Page Copyright © 4IPNET, INC. All rights reserved.

  • Page 90: General

    802.11g, 802.11b+802.11g, 802.11g+802.11n. The protocol is dependent or the Band of the RF Card.  Pure 11n: Enable 802.11n network only.  Short Preamble: The short preamble with a 56-bit synchronization field can improve WLAN Copyright © 4IPNET, INC. All rights reserved.
  • Page 91 Idle Timeout (s): Client disconnects when inactivity reaches the configured amount of time in seconds, where default = 300s.  Band Steering: When enabled, clients with 5GHz connectivity will be steered towards the 5GHz band Copyright © 4IPNET, INC. All rights reserved.
  • Page 92 This ensures high connection speed for all associated clients. Features such as Short Preamble, Fragment Threshold, ACK Timeout, and Interference  Note: Detection may be limited on RF Card B for selected AP models. Copyright © 4IPNET, INC. All rights reserved.
  • Page 93 36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 802.11ac MCS7-9 116, 132, 136, 140, 149, 153, 157, 161, 165 *Please note that available values above will vary depending on the regulation of different countries. Copyright © 4IPNET, INC. All rights reserved.

  • Page 94: Vap Configuration

    VAP. It can be coupled with different service levels like a variety of wireless security types.  VLAN ID: The 4ipnet Access Point supports tagged VLANs (virtual LANs). To enable VLAN function, each VAP shall be given a unique VLAN ID with valid values ranging from 1 to 4094. Once VLAN is Enabled, QoS is supported on the VAP.
  • Page 95  For support Split Tunnel model: This option will be configured by AC (AP Controller), if this AP is managed by controller.  Note: Downlink 802.1P AC Mapping may be limited on RF Card B for selected models. Copyright © 4IPNET, INC. All rights reserved.

  • Page 96: Security

    This is the default setting as shown in the following figure. Security Settings: Open  WEP: WEP (Wired Equivalent Privacy) is a data encryption mechanism based on a 64-bit, 128-bit, or 152-bit shared key algorithm. Security Settings: WEP Copyright © 4IPNET, INC. All rights reserved.
  • Page 97 WEP keys for encryption. WEP Key Length: Select a key length from 64-bit or 128-bit. Re-keying Period: The time interval for the dynamic WEP key to be updated; the time unit is in seconds. Copyright © 4IPNET, INC. All rights reserved.
  • Page 98  Protected Management Frames: Select Disable, Optional or Mandatory.  Roaming Target AP List (when 802.11r is enabled) - Protected Management Frames may be limited on selected AP models.  Note: - 802.11r roaming may be limited on selected AP models. Copyright © 4IPNET, INC. All rights reserved.
  • Page 99  Group Key Update Period: The time interval for the Group Key to be renewed; the time unit is in seconds.  WPA-Enterprise: If this option is selected, the RADIUS authentication and data encryption will both be enabled. Security Settings: WPA-Enterprise Copyright © 4IPNET, INC. All rights reserved.
  • Page 100 Accounting Port: The port number used by the RADIUS server for accounting purposes. Specify a port number or use the default, 1813. Accounting Interim Update Interval: The system will update accounting information to the RADIUS server every interval period. Copyright © 4IPNET, INC. All rights reserved.

  • Page 101: Repeater

    Enterprise Access Point ENGLISH 7.2.5 Repeater 4ipnet Access Points are capable of utilizing WDS or Universal Repeater (EAP210 and OWL530 only) to extend wireless network coverage. If WDS is enabled, the AP can support up to 8 WDS links to its peer APs per radio. Security Type (None, WEP, or WPA/PSK) can be configured to decide which encryption is to be used for WDS connections respectively.
  • Page 102 Enterprise Access Point ENGLISH  When the Repeater Type is set to Universal Repeater (EAP210 and OWL530 only), enter the SSID of upper-bound AP for uplink connection. Security Type (None, WEP, or WPA-PSK) can be configured for this Repeater connection, but note that the security type configured here needs to be the same as upper-bound AP.

  • Page 103: Advanced

    When transmission retries fails for the set number of times, the Access Point kicks the client to optimize performance for other connected clients. Copyright © 4IPNET, INC. All rights reserved.
  • Page 104 Receiving RSSI Threshold: To ensure connected stations have quality connection speeds, a station will not be able to associate to the network unless its receiving sensitivity meets the configured threshold.  Note: TX STBC may be limited on selected AP models. Copyright © 4IPNET, INC. All rights reserved.

  • Page 105: Access Control

     Maximum Number of Clients The 4ipnet Access Point supports various methods of authenticating clients for wireless LAN access. The default policy is unlimited access without any authentication requirement. To restrict the station number of wireless connections, simply change the Maximum Number of Stations to a desired number.
  • Page 106 MAC Allow List An empty Allow List means that there is no allowed MAC address. Make sure at least the  Note: MAC of the management system is included (e.g. network administrator’s computer) Copyright © 4IPNET, INC. All rights reserved.
  • Page 107 MAC ACL Deny List: When selecting MAC ACL Deny List, all client devices are granted access to the system except those listed in the Deny List (“denied MAC addresses”). The administrator can allow any denied MAC address to connect to the system temporarily by checking Disable. Deny List Copyright © 4IPNET, INC. All rights reserved.
  • Page 108 Please note that each VAP’s MAC ACL and its security type (shown on the Security Settings page) share the same RADIUS configuration. RADIUS ACL  Note: RADIUS ACL may be limited on selected AP models. Copyright © 4IPNET, INC. All rights reserved.

  • Page 109: Hotspot 2.0

    User’s Manual Enterprise Access Point ENGLISH 7.2.8 Hotspot 2.0 Hotspot 2.0 is also known as WiFi Certified Passpoint initiated by the WiFi Alliance to provide better bandwidth and services for public WiFi subscribers. Copyright © 4IPNET, INC. All rights reserved.
  • Page 110 AP. Specifically, this field identifies the Public Land Mobile Network (PLMN) ID, comprised of the Mobile Country Code (MCC) and Mobile Network Code (MNC) of the mobile operator.  Note: Hotspot 2.0 may be limited on selected AP models. Copyright © 4IPNET, INC. All rights reserved.

  • Page 111: Firewall

    Remark: Shows the note of this rule.  Setting: 4 actions are available; Del denotes to delete the rule, Ed denotes to edit the rule, In denotes to insert a rule, and Mv denotes to move the rule. Copyright © 4IPNET, INC. All rights reserved.
  • Page 112 (when EtherType is IPv4); ARP IP/MAC & MASK indicate the ARP payload fields.  Destination: MAC Address/Mask indicates the destination MAC; IP Address/Mask indicates the destination IP address (when EtherType is IPv4); ARP IP/MAC & MASK indicate the ARP payload fields. Copyright © 4IPNET, INC. All rights reserved.
  • Page 113 After the SAVE button is clicked and system is rebooted, the order of rules will be updated. Please make sure all desired rules (state of rule) are checked and saved in the overview page; the rules will be enforced upon system reboot. Copyright © 4IPNET, INC. All rights reserved.

  • Page 114: Service

    There are 28 firewall services available in default settings; these default services cannot be deleted but can be disabled. If changes are made, please click SAVE to save the settings before leaving this page. Firewall Service Page Copyright © 4IPNET, INC. All rights reserved.

  • Page 115: Advanced

    If any settings are changed, please click SAVE to save the configuration before leaving this page. RF Isolation (between RFs) may be limited on selected AP models.  Note: VAP Isolation (within RF) may be limited on selected AP model. Copyright © 4IPNET, INC. All rights reserved.

  • Page 116: Utilities

    The “user” account will not be able to reboot AP, change wireless settings or enable the Channel Analysis function. This account is typically issued by IT staff for employees to monitor AP statuses. Copyright © 4IPNET, INC. All rights reserved.

  • Page 117: Backup & Restore

    COM Port connection - Should the administrator forget the AP’s IP address, with the right baud rate and a termination simulation program such as PuTTy or Hyper Terminal, a login prompt should be seen as such: Copyright © 4IPNET, INC. All rights reserved.
  • Page 118 Console connection via SSH - the IP address of the AP can be retrieved with an IP Discovery Utility provided by 4ipnet. Simply connect via an Ethernet cable and run the Discovery Utility. Note that the laptop/PC connecting to the AP must run in Windows XP compatible mode and a static IP must be set.

  • Page 119: System Upgrade

    The EAP Access Point supports two methods of firmware upgrade: from the web management interface or through TFTP. The administrator can download the latest firmware from the 4ipnet Support Team and save it on the administrator’s PC. To upgrade the system firmware, click Browse to choose the new firmware file you downloaded onto your PC and then click Upload to execute the process.

  • Page 120: Upload Certificate

    Certificate for a means of security verification for CAPWAP or other security needs to ensure the authenticity of this AP to other network entities.  Use Default Certificate: Click Use Default Certificate to use the default certificate and key. Copyright © 4IPNET, INC. All rights reserved.

  • Page 121: Channel Analysis

     The system allows only 1 operator to use this function at one time.  Channel Analysis only runs on 5GHz Band for selected AP Models only. Copyright © 4IPNET, INC. All rights reserved.

  • Page 122: Background Scan

    The Scan Whole Channel button triggers the AP to scan all channels in the configured band. Note that the Radio is only capable of scanning in its configured band.  Note: Background Scan may be limited on selected AP models. Copyright © 4IPNET, INC. All rights reserved.

  • Page 123: Status

    This page is used to view the current condition and state of the system and it includes the following functions: Overview, Interfaces, Associated Clients, WDS Link Status, Event Log and Monitor. 7.5.1 Overview The System Overview page provides an overview of the system status for the administrator. System Overview Page Copyright © 4IPNET, INC. All rights reserved.
  • Page 124 Extended Service Set ID. AP Status Security Type Security type of the Virtual AP. Online Clients The number of online clients. Tunnel The status of the used Tunnel. IPv6 Status Enabled/ Disabled. CAPWAP Status Enabled/ Disabled. Copyright © 4IPNET, INC. All rights reserved.

  • Page 125: Interfaces

    Double click to return the plot to its original scale. 7.5.2 Interfaces Traffic information is available per interface. Recorded data includes Packets In, Packets Out, Traffic In (kb), and Traffic Out (kb). Copyright © 4IPNET, INC. All rights reserved.

  • Page 126: Associated Clients

    The administrator can remotely oversee the status of all associated clients on this page. When a low SNR is found here, the administrator can tune the corresponding parameters or investigate the settings of associated clients to improve network communication performance. Associated Client Status Page Copyright © 4IPNET, INC. All rights reserved.
  • Page 127 Left click on the mouse to zoom in on desired regions. Double click to return the plot to its original scale.  Disconnect: Upon clicking Kick, the client will be disconnected from the system. Copyright © 4IPNET, INC. All rights reserved.

  • Page 128: Wds Link Status

    Enterprise Access Point ENGLISH 7.5.4 WDS Link Status The administrator can review detailed information of the repeater function at Status > WDS Link Status. Information of WDS status, traffic statistics, encryption and other details are provided. Copyright © 4IPNET, INC. All rights reserved.

  • Page 129: Event Log

    Voice hint may also be enabled for convenience during antenna adjustment. 7.5.5 Event Log The Event Log provides a record of system activities. The administrator can monitor the system status by checking this log. Event Log Page Copyright © 4IPNET, INC. All rights reserved.

  • Page 130: Monitor

    The begin and end time for the RRD graph can be selected for filtering data. Left click on the mouse to zoom in on desired regions. Double click to return the plot to its original scale. Copyright © 4IPNET, INC. All rights reserved.

  • Page 131: Cpe Mode Configuration (Owl530/Eap210)

    Enterprise Access Point ENGLISH 8. CPE Mode Configuration (OWL530/EAP210) The OWL530 and EAP210 support CPE mode, which acts as a gateway where it connects to the WAN wirelessly and provides Ethernet connection to users via wired LAN. This chapter will guide you through setting up the CPE mode with graphical illustrations.
  • Page 132 User’s Manual Enterprise Access Point ENGLISH CPE Mode Main Page Copyright © 4IPNET, INC. All rights reserved.

  • Page 133: System

    For maintenance purpose, it is recommended to have the following information stated as clearly as possible. Fields Name, Description, and Location are used for mnemonic purpose. It is recommended to have different values in each wireless device.  Name: The system name used to identify this system Copyright © 4IPNET, INC. All rights reserved.
  • Page 134 By selecting Manually set up, the administrator can manually set the system date and time. ▬ Set Date: Select the appropriate Year, Month, and Day from the drop-down list box. ▬ Set Time: Select the appropriate Hour, Min, and Sec from the drop-down list box. Copyright © 4IPNET, INC. All rights reserved.

  • Page 135: Operating Mode

    User’s Manual Enterprise Access Point ENGLISH 8.1.2 Operating Mode OWL530 / EAP210 supports two operation modes: CPE mode and AP mode. The administrator can set the desired mode on this page, and then configure the system according to deployment needs. ...

  • Page 136: Network Settings

    User’s Manual Enterprise Access Point ENGLISH 8.1.3 Network Settings WAN and LAN settings can be configured on this page. Copyright © 4IPNET, INC. All rights reserved.
  • Page 137 Alternate DNS Server: Enter the IP address of a secondary DNS server; this is optional. WINS Server IP: Enter the IP address of a WINS (Windows Internet Name Service) server; this is optional. Domain Name: Enter the domain name for this network. Copyright © 4IPNET, INC. All rights reserved.
  • Page 138 User’s Manual Enterprise Access Point ENGLISH Lease Time: It can be chosen from the drop-down list to renew Leased LAN IP. Copyright © 4IPNET, INC. All rights reserved.

  • Page 139: Management

    Enable/ Disable: Select Enable to activate this function or Disable to inactivate it. Server IP Address: Enter the IP address of the assigned server for receiving the trap report. Copyright © 4IPNET, INC. All rights reserved.
  • Page 140 WAN or LAN.  UPnP Configuration: This option can be enabled if UPnP service is required by LAN device.  Enable/ Disable: Select Enable to activate this function or Disable to inactivate it. Copyright © 4IPNET, INC. All rights reserved.

  • Page 141: Wireless

    Level 1 is the actual highest power, Level 2 is the highest power minus 1dBm, so on and so forth.  ACK Timeout: When packet loss is increasing over longer distance, ACK Timeout can be used to alleviate this issue. Copyright © 4IPNET, INC. All rights reserved.

  • Page 142: Advanced Wireless Settings

    AP begins scanning for higher RSSI signals to associate to.  Choose Scan and Connect Channels: This allows the administrator to manually select and filter undesired channels. DFS channels are highlighted in red. Copyright © 4IPNET, INC. All rights reserved.

  • Page 143: Security Settings

    WEP Key Index: Select a key index from 1 through 4. The WEP key index is a number that specifies which WEP key to use for the encryption of wireless frames during data transmission.  WEP Keys: Provide WEP key value; the system supports up to 4 sets of WEP keys. Copyright © 4IPNET, INC. All rights reserved.
  • Page 144 Pre-shared Key: Enter the key value for the pre-shared key; the format of the key value depends on the key type selected.  Group Key Update Period: The time interval for the Group Key to be renewed. Enter the time length required; the time unit is in second. Copyright © 4IPNET, INC. All rights reserved.

  • Page 145: Site Survey

    SSID: The SSID (Service Set ID) of the AP found in the system’s coverage area.  MAC Address: The MAC address of the respective AP.  Channel: The channel number currently used by the respective AP. Copyright © 4IPNET, INC. All rights reserved.
  • Page 146 WPA-PSK: Click Setup to configure the WPA-PSK setting for associating with the target AP. The following configuration box will then appear at the bottom of the screen. For more information on the WPA-PSK security settings, please refer to Section 8.2.3 Security Settings. Copyright © 4IPNET, INC. All rights reserved.
  • Page 147 User’s Manual Enterprise Access Point ENGLISH Copyright © 4IPNET, INC. All rights reserved.

  • Page 148: Firewall

    Protocol: Forwarding traffic protocol can be selected from drop-down list to be TCP/ UCP, TCP or UDP.  Add: Click Add to activate the new service.  IP/ Port Forwarding: Details of current services available. Click Delete to remove the specified service. Click Edit to configure the current setting. Copyright © 4IPNET, INC. All rights reserved.

  • Page 149: Demilitarized Zone

    Enable: Select Enable to activate this function or Disable to deactivate it.  Internal IP Address: Fill in the internal IP address to allow system forwarding traffic other than those specifically listed in IP/Port Forwarding. Copyright © 4IPNET, INC. All rights reserved.

  • Page 150: Utilities

    In addition to the admin account, there is a “user” account capable of accessing the web management interface with configuration limitations. The “user” account will not be able to reboot AP or change wireless settings. This account is typically issued by IT staff for employees to monitor AP statuses. Copyright © 4IPNET, INC. All rights reserved.

  • Page 151: Backup & Restore

    Restore Settings: Click Browse to search for a previously saved backup file, and then click Upload to restore the settings. The backup file will replace the active configuration file currently running on the system. Copyright © 4IPNET, INC. All rights reserved.

  • Page 152: System Upgrade

    To prevent data loss during firmware upgrade, please back up the current settings before proceeding further.  Note:  Please restart the system after the upgrade. Do not interrupt the system, i.e. power on/off, during the upgrade or restart process as this may damage the system. Copyright © 4IPNET, INC. All rights reserved.

  • Page 153: Reboot

    A warning message as displayed below will appear during the reboot period. The system power must be turned on before the completion of the reboot process. The System Overview page will appear upon the completion of reboot. Copyright © 4IPNET, INC. All rights reserved.

  • Page 154: Upload Certificate

    8.4.5 Upload Certificate In CPE mode, a certificate can be uploaded for HTTPS protected login. Click Browse to select the desired certificate and the matching Private Key. Uploading a certificate allows encrypted content transfer. Copyright © 4IPNET, INC. All rights reserved.

  • Page 155: Status

    This section displays the status of System Overview, Interfaces, Event Log, Monitor, DHCP Lease and UPnP. 8.5.1 System Overview The System Overview page provides an overview of the system status for the administrator. Copyright © 4IPNET, INC. All rights reserved.
  • Page 156 The Time Axis is configurable with the following options: 1 minute, 2 minutes, 5 minutes, or 10 minutes. Left click on the mouse to zoom in on desired regions. Double click to return the plot to its original scale. Copyright © 4IPNET, INC. All rights reserved.

  • Page 157: Interfaces

    (kb), and Traffic Out (kb). The Time Axis is configurable with the following options: 1 minute, 2 minutes, 5 minutes, or 10 minutes. Left click on the mouse to zoom in on desired regions. Double click to return the plot to its original scale. Copyright © 4IPNET, INC. All rights reserved.
  • Page 158 User’s Manual Enterprise Access Point ENGLISH Copyright © 4IPNET, INC. All rights reserved.
  • Page 159 User’s Manual Enterprise Access Point ENGLISH Copyright © 4IPNET, INC. All rights reserved.

  • Page 160: Event Log

    For more information, please refer to Section 8.1.4 Management Services.  Process name (with square brackets): Indicate which process with the specific event is associated.  Description: Description of the event. Copyright © 4IPNET, INC. All rights reserved.

  • Page 161: Monitor

    The begin and end time for the RRD graph can be selected for filtering data. Left click on the mouse to zoom in on desired regions. Double click to return the plot to its original scale. Copyright © 4IPNET, INC. All rights reserved.

  • Page 162: Dhcp Leases

    IP: The IP address assigned by DHCP server to a specific LAN device.  MAC Address: The MAC address of the LAN device.  Expires in: The expiration time of the leased IP address. Copyright © 4IPNET, INC. All rights reserved.
  • Page 163 Protocol: The Protocol used by the UPnP device.  Internal Port: The internal port number of the UPnP device.  External Port: The mapped external port number of the system.  IP Address: The IP address of the UPnP device. Copyright © 4IPNET, INC. All rights reserved.
  • Page 164 Via the console port, administrators are able to enter the console interface to reset the access point to its factory default settings. In order to connect to the console port of a 4ipnet access point, a console, modem cable, and a terminal simulation program, such as PuTTy are needed. There are 2 ways to access the console interface: 1.
  • Page 165 User’s Manual Enterprise Access Point ENGLISH 2. Remote Connection The system supports access to the console interface via SSH. Typically SSH utilizes Port 22 and would require the WAN IP address for access. Copyright © 4IPNET, INC. All rights reserved.
  • Page 166 If the console connection is not readily available, the IP address of the AP can be retrieved with an IP Discovery Utility provided by 4ipnet. Simply connect via an Ethernet cable and run the Discovery Utility. Note that the laptop/PC connecting to the AP must run in Windows XP compatible mode and a static IP must be set.

This manual is also suitable for:

Eap220Eap705Eap320Eap706Eap717Eap727 ... Show all

Table of Contents