Table of Contents PART 1 WEB LOGIN ............................2 ..................................2 OGIN .................................. 3 OGOUT UI ..............................4 AYOUT OF Fit AP Management ..............................4 Fat AP Management ..............................5 Tip ....................................6 ............................... 6 OGIN CCOUNT UI ............................... 7 LEMENTS OF ..................................
Page 3
Configuration Guide ..............................16 Configuration Step ..............................16 Verify the Configuration ............................. 18 PART 4 APPLICATION OF AP FORWARDING MODE ................ 20 ................................20 VERVIEW Centralized Forwarding Mode ............................ 21 Distributed Forwarding Mode ............................ 22 Application Example ..............................22 ............................23 ONFIGURATION UIDE Centralized Forwarding Mode ............................
Page 4
Configuration Guide Overview AC3000 provides abundant functions and flexible configurations. This Configuration Guide tries to help you configure the AC by several applications. Also you have many other choices for your particular use case. The configuration guide consists of the following parts.
Part 1 Web Login 1.1 Login AC3000 provides Web UI to help you manage and maintain this device. When you use AC3000 for the first time, you can log in to the AC’s Web UI via a browser with default login information.
Web Login Then you can manage the AC through the Web UI. For better compatibility, it is recommended to use the following browsers: Google Chrome 26.0 or higher version Internet Explorer 9.0 or higher version Mozilla Firefox 20.0 or higher version ...
1.3 Layout of Web UI AC3000 provides two Web UIs to manage fit AP and fat AP at the same time. To distinguish the two Web UIs, we might call them first Web UI and second Web UI respectively in some circumstances.
Web Login Fat AP Management AC3000 also provides a Web UI for fat AP management. To get into this Web UI, go to System Tool > Old Firmware AP of the first Web UI, and click Login to Web UI.
It can’t be modified because you configure some incompatible parameters. This release version of AC3000 does not support it and it may be developed in the next version. 1.4 Login Account AC3000 provides three levels of login account: Super Administrator, Administrator and Guest. If a lower level account can modify a setting, the higher level account also has the permission to modify it.
Web Login 1.5 Elements of Web UI The following table shows the commonly used buttons of the Web UI. Button Description Click the button to create a policy or a rule. Click the button to apply your settings. Click the button to cancel or clear the settings you are editing. Click the button to export the current page’s information to an appropriate directory.
Part 2 Switch Fat AP to Fit AP Most IP-COM APs are in fat AP mode when you purchase them. To easily manage your APs, switch them from fat AP mode to fit AP mode. Through this part, you can achieve that: ...
By default the AC can manage only one AP. You need to obtain a license to authorize your AC and manage more APs. To Authorize Your AC: 1. Contact IP-COM technical support engineer to obtain your license.(Each AC has a unique license.) (Go to our website http://www.ip-com.com.cn to contact us.)
Switch Fat AP to Fit AP Step 3: Switch Fat AP Mode to Fit AP Mode Most IP-COM APs are in fat AP mode when you purchase them. To easily manage your APs, switch them from fat AP mode to fit AP mode.
Discover AC in Different Network Part 3 Discover AC in Different Network Different network deployment requires different configurations. If AC and fit APs are in the same network, skip to Discover AC in Local Network. If AC and fit APs are in different network, skip to Discover Cross-network ...
Discover AC in Different Network Network Topology Configuration Guide 1. Manually configure AP1 to discover AC. 2. When AP1 is managed by AC successfully, AP1 will broadcast AC’s IP address to other APs. You don’t need to configure other APs. 3.
Page 16
Discover AC in Different Network Destination Network: Enter the AP’s network 192.168.12.0. Subnet Mask: Enter the AP’s subnet mask 255.255.255.0. Next Hop: Enter the gateway of this route. In this example, it is Layer 3 switch’s port 1 IP address 192.168.10.2.
Discover AC in Different Network 4. Go to System Tools > Reboot Device and click Reboot to make above configurations take effect. 5. After you finish configuring AP1, connect other APs to PoE switch if necessary. Verify the Configuration 1. After you configure AC and AP1, log in to AC’s Web UI and go to AP Management > Modify AP. Click Refresh and you will see AP1 (AP325) is online and managed by AC.
Discover AC in Different Network 2. After you connect all APs to PoE switch, you will see all APs will gradually be online on AC’s AP Management > Modify AP page. 3.3 Discover Cross-Internet AC If AC and fit APs are cross Internet, you need to: ...
Discover AC in Different Network Network Topology Configuration Guide 1. Manually configure AP1 to discover AC. 2. When AP1 is managed by AC successfully, AP1 will broadcast AC’s IP address to other APs. You don’t need to configure other APs. 3.
Page 20
Discover AC in Different Network Primary DNS: Enter 192.168.10.254 in this example. Click Save to apply your settings. After finishing above configuration, you can go to System Tool > Diagnosis Tool and use Ping tool to check whether AC is reachable to 192.168.10.254. Configure Router Configure Virtual Server function on Gateway_1 (gateway_1 is the AC’s gateway).
Discover AC in Different Network 4. Go to System Tools > Reboot Device and click Reboot to make above configurations take effect. 5. After you finish configuring AP1, connect other APs to PoE switch if necessary. Verify the Configuration 1. After you configure AC and AP1, log in to AC’s Web UI and go to AP Management > Modify AP. Click Refresh and you will see AP1 (AP325) is online and managed by AC.
Page 22
Discover AC in Different Network 2. After you connect all APs to PoE switch, you will see all APs will gradually be online on AC’s AP Management > Modify AP page. -Page 19-...
Part 4 Application of AP Forwarding Mode 4.1 Overview IP-COM AC/fit AP wireless network solution supports centralized forwarding mode, distributed forwarding mode, and mixed forwarding mode. Among them, mixed forwarding mode includes both centralized forwarding mode and distributed forwarding mode.
Application of AP Forwarding Mode Centralized Forwarding Mode In this mode, AC and AP establish two tunnels: control tunnel and data tunnel. In control tunnel, AC and AP communicate with each other by management packets and control packets. The AC can control and deliver configurations to AP.
Application of AP Forwarding Mode Distributed Forwarding Mode In this mode, AC and AP only establish one tunnel: control tunnel. In control tunnel, AC and AP communicate with each other by management packets and control packets. The AC can control and deliver configurations to AP. After a user connects to an AP’s SSID, the following procedure occurs: 1.
Application of AP Forwarding Mode Scenario 2: Enterprise Network In this scenario, the fit AP is always set to distributed forwarding mode. Scenario 3: Campus WLAN Network In this scenario, it is recommended to use mixed forwarding mode. Some fit APs are set to centralized forwarding mode to forward the Internet service data, and the other fit APs are set to distributed forwarding mode to forward the internal service data.
Application of AP Forwarding Mode Distributed Forwarding Mode 4.3 Application Example Centralized Forwarding Mode Application Networking Requirement An enterprise needs to establish a wireless network. For guests, the requirements are described below: Guests connected to the WiFi can only access the Internet. ...
Page 28
Application of AP Forwarding Mode Network Topology Assumption By default, the AP has no management VLAN and is managed by the AC. By default, all switches have enabled IEEE 802.1Q VLAN feature and all ports are in VLAN 1. ...
Page 29
Application of AP Forwarding Mode Configuration Step Configure AC Step 1: Configure VLAN Interface To configure VLAN interface: 1. Log in to AC’s Web UI and go to Network Setting > Network Setting > VLAN Interface Settings. 2. Click Add to create a VLAN interface. This VLAN interface is used by centralized forwarding mode. ...
Page 30
Application of AP Forwarding Mode Step 2: Configure SSID Policy To Configure SSID Policy: 1. Log in to AC’s Web UI and go to Policy Management > SSID Policy. 2. Click Add to create a SSID policy. Policy: Enter a policy name for the SSID policy. Here we enter Guest. ...
Page 31
Application of AP Forwarding Mode Step 4: Configure AP Group For better management of all policies (including SSID group, RF policy, RF Optimization, AP Maintain, and so on), add the policies into an AP group. In this way, you can deliver an AP group to APs instead of delivering policies one by one.
Page 32
Application of AP Forwarding Mode Step 5: Deliver AP Group to APs To Deliver AP Group to APs: 1. Log in to AC’s Web UI and go to AP Management > Modify AP. 2. Select all APs. 3. Click Batch Group. 4.
Application of AP Forwarding Mode Distributed Forwarding Mode Application Networking Requirement An enterprise needs to establish a wireless network. For employees, the requirements are described below: Employees can only access the enterprise’s server. The wireless network is encrypted with WPA2-PSK/AES security mode. ...
Page 34
Application of AP Forwarding Mode Configuration Step Configure AC Step 1: Configure SSID Policy To Configure SSID Policy: 1. Log in to AC’s Web UI and go to Policy Management > SSID Policy. 2. Click Add to create a SSID policy. ...
Page 35
Application of AP Forwarding Mode Step 2: Configure SSID Group For better management of SSID-related policies (such as SSID policy, SSID Scheduler, MAC Filter, and so on), add all the SSID-related policies into a SSID group. In this way, you don’t need to deliver policies one by one. Besides, you can add several SSID policies into one SSID group and all the added SSID policies will be delivered to APs.
Page 36
Application of AP Forwarding Mode Step 3: Configure AP Group For better management of all policies (including SSID group, RF policy, RF Optimization, AP Maintain, and so on), add the policies into an AP group. In this way, you can deliver an AP group to APs instead of delivering policies one by one.
Page 37
Application of AP Forwarding Mode Configure Core Switch Set up the switch’s VLAN value. The corresponding port is set as follows: The port connects to VLAN ID Port Mode PVID PoE Switch Trunk Access Server Access Please keep other ports’ VLAN value default. For configuration details, refer to the switch’s user guide Configure PoE Switch Set up the switch’s VLAN value.
Application of AP Forwarding Mode Mixed Forwarding Mode Application 1 Networking Requirement An enterprise needs to establish a wireless network. For guests, the requirements are described below: Guests connected to the WiFi can only access the Internet. WiFi password is not required when the guests connect to the WiFi. ...
Page 39
Application of AP Forwarding Mode Assumption The AP works at 2.4G band. By default, the AP has no management VLAN and is managed by the AC. By default, all switches have enabled IEEE 802.1Q VLAN feature and all ports are in VLAN 1.In this example, the SSID for guests is Internet.
Page 40
Application of AP Forwarding Mode Step 1: Configure VLAN Interface To configure VLAN interface: 1. Log in to AC’s Web UI and go to Network Setting > Network Setting > VLAN Interface Settings. 2. Click Add to create a VLAN interface. This VLAN interface is used by centralized forwarding mode. ...
Page 41
Application of AP Forwarding Mode Step 2: Configure IP and DHCP Server Settings In this example, employees obtain IP addresses from AC so that we need to create a DHCP server for employees. To Configure IP and DHCP Server Settings: 1.
Page 42
Application of AP Forwarding Mode Step 3: Configure SSID Policy To Configure SSID Policy: 1. Log in to AC’s Web UI and go to Policy Management > SSID Policy. 2. Click Add to create a SSID policy. Policy: Enter a policy name for the SSID policy. Here we enter Guest. ...
Page 43
Application of AP Forwarding Mode Step 4: Configure SSID Group For better management of SSID-related policies (such as SSID policy, SSID Scheduler, MAC Filter, and so on), add all the SSID-related policies into a SSID group. In this way, you don’t need to deliver policies one by one. Besides, you can add several SSID policies into one SSID group and all the added SSID policies will be delivered to APs.
Page 44
Application of AP Forwarding Mode Step 5: Configure AP Group For better management of all policies (including SSID group, RF policy, RF Optimization, AP Maintain, and so on), add the policies into an AP group. In this way, you can deliver an AP group to APs instead of delivering policies one by one.
Page 45
Application of AP Forwarding Mode Step 6: Deliver AP Group to APs To Deliver AP Group to APs: 1. Log in to AC’s Web UI and go to AP Management > Modify AP. 2. Select all APs. 3. Click Batch Group. 4.
Page 46
Application of AP Forwarding Mode Verify the Configuration After guests connect to the SSID Internet successfully, they can surf the Internet but can’t access the enterprise’s server. After employees connect to the SSID Internal successfully, they can access the server but can’t surf the Internet. -Page 43-...
A core switch and several PoE switches A server An IP-COM AC3000 Several IP-COM fit APs Among them, the gateway and server don’t support IEEE 802.1Q VLAN but both have a build-in DHCP server which can assign IP address for user. The PoE switch supports IEEE 802.1Q VLAN.
Page 48
Application of AP Forwarding Mode Network Topology Assumption By default, the connected ports of all switches are in VLAN 1 and the port mode is access. The DNS server address used to surf the Internet is 8.8.8.8. APs obtain IP address on IP setment 192.168.80.0/24 from AC.
Page 49
Application of AP Forwarding Mode Configuration Step Configure AC Step 1: Configure VLAN Interface In order to manage AP, communicate with internal server, communicate with gateway, and be used for centralized forwarding by the manager’s SSID, you need to add four VLAN interfaces respectively. To Configure VLAN Interface: 1.
Page 50
Application of AP Forwarding Mode 4. Click Add to create a VLAN interface. This VLAN interface is used to communicate with the gateway. VLAN Interface: Enter Gateway. Physical Port: Select LAN1. VLAN ID: Enter 20. Click Save to apply your settings. 5.
Page 51
Application of AP Forwarding Mode Step 2: Configure IP and DHCP Server Settings In this example, we need to create four IP and DHCP server settings: One is to communicate with AP and assign IP address to AP. One is to communicate with internal server.
Page 52
Application of AP Forwarding Mode 3. Click Add to create an IP and DHCP Server rule. This rule is used to communicate with internal server. VLAN Interface: Select Server. IP Address: Enter an IP address on the same IP segment with server’s IP address. Here we enter 192.168.110.2.
Page 53
Application of AP Forwarding Mode 4. Click Add to create an IP and DHCP Server rule. This rule is used to communicate with gateway. VLAN Interface: Select Gateway. IP Address: Enter an IP address on the same IP segment of gateway’s LAN IP address. Here we enter 192.168.20.2.
Page 54
Application of AP Forwarding Mode After finishing the above configuration, you can go to Network Setting > IP Routing to view the default IP route. Step 4: Configure SSID Policy In this example, we need to create three SSID policies: ...
Page 55
Application of AP Forwarding Mode 3. Click Add to create a SSID policy. The SSID in this policy is for guests. Policy: Enter a policy name for the SSID policy. Here we enter Guest. SSID: Enter a SSID name. Here we enter Internet. ...
Page 56
Application of AP Forwarding Mode 4. Click Add to create a SSID policy. The SSID in this policy is for managers. Policy: Enter a policy name for the SSID policy. Here we enter Manager. SSID: Enter a SSID name. Here we enter VIP. ...
Page 57
Application of AP Forwarding Mode Step 6: Configure AP Group For better management of all policies (including SSID group, RF policy, RF Optimization, AP Maintain, and so on), add the policies into an AP group. In this way, you can deliver an AP group to APs instead of delivering policies one by one.
Page 58
Application of AP Forwarding Mode Step 7: Deliver AP Group to APs To Deliver AP Group to APs: 1. Log in to AC’s Web UI and go to AP Management > Modify AP. 2. Select all APs. 3. Click Batch Group. 4.
Page 59
Application of AP Forwarding Mode Configure Gateway The following configuration is just a guideline. For configuration details, please refer to the device’s user guide. Step 1: Configure NAT On the gateway’s Web UI, create a NAT rule to ensure that managers can surf the Internet. The rule description is as follows: ...
Page 60
Application of AP Forwarding Mode Step 2: Configure DHCP Server On the server’s Web UI, enable DHCP server to assign IP address to employees. The DHCP server is configured as follows: DHCP server’s start IP and end IP: Both are on the IP segment 192.168.110.0/24. ...
Application of Network Settings Part 5 Application of Network Settings By configuring network settings, you can: Manage cross-VLAN APs and users by creating multiple VLAN interfaces. Communicate with other devices by setting up IP address on appropriate VLAN interfaces. ...
Application of Network Settings Network Topology Assumption By default, AC’s LAN1 port is in VLAN 0 and AC’s IP address is 192.168.10.1. By default, Administrator can manage AC with a manually configured IP address 192.168.10.X/24 (X is between 2~254). ...
Application of Network Settings Configuration Step Manage AP in VLAN 5 To Manage AP in VLAN 5: Restore all APs to factory default. Wait for 2~3 minutes, all APs will be managed by AC. Configure AP’s “Management VLAN”. Log in to AC’s Web UI and go to AP Management > Modify AP. Select all APs and click Advanced Setting.
Page 64
Remark: Enter a name for this setting, such as Manage_AP. Primary DNS: Enter a valid DNS address. In this example, enter 192.168.4.100. Note: AC3000 is not a DNS proxy. Please enter an effective DNS address. Start IP: Enter a start IP address, such as 192.168.5.100.
Page 65
Go to Network Setting > Network Setting > IP and DHCP Server Settings. Click Add to create an IP and DHCP setting as follows. Note: AC3000 is not a DNS proxy. Please enter an effective DNS address. VLAN Interface IP Address...
Page 66
Application of Network Settings Configure SSID Group Go to AP Management > SSID Group. Click Add to create a SSID group as follows. SSID Group SSID Policy Other Parameters Manage_User Manage_User Keep the default value. Configure AP Group Go to AP Management > AP Group. Click Add to create an AP group as follows.
Page 67
Application of Network Settings Configure AC Route To Configure AC Route: Configure VLAN Interface Log in to AC’s Web UI and go to Network Setting > Network Setting > VLAN Interface Settings. Click Add to create two VLAN interfaces as follows. VLAN Interface Physical Port VLAN ID...
Application of Network Settings Verify the Configuration After you finish all configurations above, both AC and users can access the Internet and server at the same time. In Sum: All settings on Each Device After finishing all configurations above, you can check corresponding settings on each device, shown as follows. All Settings on AC VLAN interface and IP/DHCP setttings: VLAN Interface...
Page 69
All Settings on Switch VLAN information on each port is configured as follows. Port No. The port connects to VLAN ID Port Mode PVID Router 1 Access Administrator Access Trunk Router 2 Access Trunk Trunk AC3000 1,3,4,5 Trunk -Page 66-...
By creating advertisements and deliver them to your customers, you can promote your products. And to enhance wireless network’s security, you can set up authorization method for customers. AC3000 English version supports three authorization methods: No Password, Portal and Facebook. This part shows: ...
Page 71
Application of Advertising Network Topology Configuration Step Step 1: Create and deliver SSID to fit AP (Optional) If you have delivered a SSID to fit AP, please directly skip to Step 2: Create Advertisement. To Create and deliver SSID to fit AP: 1.
Page 72
Application of Advertising 3. Go to AP Management > SSID Group and click Add to create a SSID group. SSID Group: Enter xx_hotel. Remark: Enter xx_hotel. SSID Policy: Select xx_hotel. Click Save to apply your settings. 4.
Page 73
Application of Advertising 5. Go to AP Management > Modify AP, select all fit APs and click Batch Group. Group: Select xx_hotel. Click Save to apply your settings. After finishing above settings, you can connect to SSID xx_hotel successfully. Step 2: Create Advertisement To Create Advertisement: 1.
Page 74
Application of Advertising Basic Info Ad Name: Enter a name for this advertisement, such as xx_hotel. Redirect Page: Enter a valid URL, such as www.google.com. Users will be redirected to this page after they are authorized successfully. ...
Page 75
Application of Advertising Set Up Slide Image: Click the image on the left and configure the image on the right. Click Add Image to add a new slide image. Remark: Enter a name for the current image. ...
Application of Advertising Verify the Configuration After you connect to SSID xx_hotel and launch a browser, the xx_hotel advertisement will appear. Wait until the countdown finishes, then click Click to Access Internet to surf the Internet. 6.2 Application of Portal Authorization Networking Requirement A hotel needs to establish a wireless network and has the following expectations: ...
Page 77
Application of Advertising Network Topology Configuration Step Step 1: Create and deliver SSID to fit AP (Optional) If you have delivered a SSID to fit AP, please directly skip to Step 2: Create Advertisement. To Create and deliver SSID to fit AP: 1.
Page 78
Application of Advertising 5. Go to AP Management > Modify AP, select fit APs and click Batch Group. Group: Select Room_606. Click Save to apply your settings. After finishing above settings, you can connect to SSID Room_606 successfully. Step 2: Create Advertisement To Create Advertisement: 1.
Page 79
Application of Advertising Set Up Navigation: Click the navigation bar on the left and configure the navigation on the right. Click Add Navigation to add a new navigation item. Remark: Enter a name for the current navigation item. ...
Page 80
Application of Advertising Set up Authorization Method (Template 1 and template 2 support Portal and Facebook authorizations. Template 3 supports no password authorization.) Slide down the mouse and click Other Methods. On the pop-up page on the right, select Portal. ...
Page 81
Application of Advertising Click Save to apply your settings. Step 3: Create Portal Account If you select Facebook authorization, please ignore this step. To Create Portal Account: 1. Log in to AC’s Web UI and go to Captive Portal > Create Ads > Create Portal Account. 2.
Page 82
Application of Advertising Step 4: Deliver Advertisement To Deliver Advertisement: 1. Log in to AC’s Web UI and go to Captive Portal > Create Ads > Ad Push. 2. Click Add to deliver the above advertisement to terminals. SSID Policy: Select Room_606. ...
Application of Advertising Verify the Configuration After you connect to SSID Room_606 and launch a browser, the xx_hotel advertisement will appear. Enter the portal account to surf the Internet. 6.3 Application of Facebook Authorization Networking Requirement A hotel needs to establish a wireless network and has the following expectations: ...
Page 84
Application of Advertising 1. Log in to AC’s Web UI and go to Policy Management > SSID Policy. 2. Click Add to create a SSID policy. Policy: Enter Room_606. SSID: Enter Room_606. Click Save to apply your settings. 3.
Page 85
Application of Advertising 3. Click Website, on the pop-up page click Skip and Create App ID. 4. After you enter Display Name and Contact Email and select a Category, click Create App ID, and then follow onscreen instructions to create an App ID. -Page 82-...
Page 86
Application of Advertising 5. Click Settings > Basic, and then click Add Platform. 6. On the pop-up window, select Website. -Page 83-...
Page 87
Application of Advertising 7. On the website box, enter http://wifi.ip-com.com.cn/, which is used for advertising of AC3000. 8. Click Save Changes and note down APP ID. This APP ID will be used when you set up Facebook authrization, refer to Set up Authorization Method.
Page 88
Application of Advertising Basic Info Ad Name: Enter a name for this advertisement, such as xx_hotel. Redirect Page: Enter a valid URL, such as www.google.com. Users will be redirected to this page after they are authorized successfully. ...
Page 89
Application of Advertising Set Up Navigation: Click the navigation bar on the left and configure the navigation on the right. Click Add Navigation to add a new navigation item. Remark: Enter a name for the current navigation item. ...
Page 90
Application of Advertising Set up Authorization Method (Template 1 and template 2 support Portal and Facebook authorizations. Template 3 supports no password authorization.) Slide down the mouse and click Other Methods. On the pop-up page on the right, select Facebook and enter Facebook APP ID: 470886993109897. ...
Page 91
Application of Advertising Click Save to apply your settings. Step 4: Deliver Advertisement To Deliver Advertisement: 3. Log in to AC’s Web UI and go to Captive Portal > Create Ads > Ad Push. 4. Click Add to deliver the above advertisement to terminals. ...
Page 92
Application of Advertising Verify the Configuration After you connect to SSID Room_606 and launch a browser, the xx_hotel advertisement will appear. Click on the Facebook icons and then enter Facebook account to surf the Internet. -Page 89-...
Need help?
Do you have a question about the AC3000 and is the answer not in the manual?
Questions and answers