Table of Contents

Advertisement

Quick Links

CAX1800
User Manual
11-2019 / v1.0

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the CAX1800 and is the answer not in the manual?

Questions and answers

Summary of Contents for Edimax CAX1800

  • Page 1 CAX1800 User Manual 11-2019 / v1.0...
  • Page 2: Table Of Contents

    IV-4. Changing Security Setting for 5GHz wireless network ..21 IV-5. Changing Admin Name and Password ......... 22 IV-6. Changing Date and Time ............. 22 CAX1800 Settings .........23 V-1. Information ................. 23 i. System Information ............. 24 ii. Wireless Clients ..............27...
  • Page 3 iv. DHCP Clients ................ 29 v. Log ..................29 V-2. Network Settings ..............31 i. LAN-side IP Address ............. 31 ii. LAN Port ................34 iii. IGMP Snooping ..............35 iv. STP Management ..............35 v. VLAN ................... 36 V-3. Wireless Settings ..............37 i.
  • Page 4 Save / Restore Settings ............73 iv. Factory Default ..............74 v. Reboot ................75 V-6. Operation Mode ..............76 VI. Edimax Pro NMS ..........77 VI-1. Quick Setup – NMS ............78 VI-2. Webpage Layout - NMS ............85 VI-3.
  • Page 5 i. System Information ............. 95 ii. Devices Information ............95 iii. Managed AP................ 96 iv. Managed AP Group ............. 98 v. Active Clients ..............101 vi. Active Users ............... 101 VI-5. Zone Plan ................102 ii. Control ................106 VI-6. NMS Monitor ..............108 i.
  • Page 6 v. Guest Network ..............156 vi. Users ................. 160 vii. Guest Portal ..............161 viii. Zone Edit ..............171 ix. Schedule ................173 x. Smart Roaming ..............174 xi. Device Monitoring ............. 175 xii. Firmware Upgrade ............176 xiii. Advanced ..............177 VI-8.
  • Page 7 iv. Advanced ................235 VI-10. Toolbox ................240 i. Network Connectivity ............240 VII. WPS ............242 VIII. Reset ............244...
  • Page 8: Product Information

    I. Product Information The CAX1800 with the latest emerging IEEE 802.11ax Wi-Fi 6 technology effortlessly create a reliable internet connection. Place the CAX1800 between the router and the location where you need better wireless coverage and enjoy high-speed wireless connection throughout your home or office.
  • Page 9: Package Contents

    I-1. Package Contents Ceiling Mount Bracket Ethernet Cable CAX1800 Manual T-Rail Mounting Kit & Screws Ceiling Mount Screw Template...
  • Page 10 Screws Size:...
  • Page 11: System Requirements

    I-2. System Requirements - Existing cable/DSL modem & router - Computer with web browser for AP configuration I-3. Hardware Overview...
  • Page 12: Led Status

    Description Ethernet Port (PoE) Power Jack (12V/1.5A) Reset Button I-4. LED Status Color Status Description Power is on. Blue Flashing Slowly Upgrading firmware. Flashing Quickly Resetting to factory defaults. Starting up. Flashing Error. Power is off.
  • Page 13: Ii. Hardware Installation

    II. Hardware Installation This section will guide you through the steps to set up your CAX1800. Router or Switch: Connect the AP to a router or a PoE switch using an Ethernet cable.
  • Page 14 II-1. Connect AP to a router If router is used, connect the power adapter to the AP and plug the power adapter into a power supply. Please wait a moment for the AP to start up. The AP is ready when the LED is Blue.
  • Page 15 II-2. Connect AP to a switch If PoE switch is used, make sure the Ethernet cable is connected to Ethernet port from the PoE switch. The AP will be powered by the switch. Please wait a moment for the AP to start up. The AP is ready when the LED is Blue.
  • Page 16 Fix the ceiling mount bracket to the desired location by inserting the ceiling fixing screws B through the bracket ceiling holes A. Tighten the ceiling fixing screws B to the marked screw position using a screw driver to fix the bracket in place. Fix the bracket rail screws C into the holes D on the device using a screw driver.
  • Page 17 Other Ceiling: Please refer to the figure below: By using the holes A on the ceiling bracket, identify and mark correct screw positions of the desired mounting location. Where necessary, drill a hole on each of the marked screw positions. Insert the anchors G into the holes (use a screw driver where necessary) at the marked screw positions.
  • Page 19 T-Rail Mount: To mount the device to a T-Rail, please follow the instructions below and refer to the diagrams below. Select the correct size T-Rail bracket included in the package contents. Attach the selected T-Rail brackets A to holes B using bracket fixing screws C.
  • Page 20 If you need more space between the device and the T-Rail, additional cushion bracket E can be added between T-Rail brackets A and holes B (use the longer screws included).
  • Page 21: Quick Setup (Ap Mode)

    III. Quick Setup (AP Mode) This quick installation section will help you setup your AP in its default AP mode and configure its basic settings. Please follow the steps below: 1. Enter the AP’s default IP address “192.168.2.2” into the URL bar of a web browser.
  • Page 22 Home screen will be shown.
  • Page 23: Basic Settings

    Basic Settings In our recommendation, please check each of the settings that listed below before using the AP. - LAN IP Address - 2.4GHz & 5GHz SSID & Security - Administrator Name & Password - Time & Date Please note that whenever a new setting is applied to the AP, the webpage will reload, as shown below: Please follow the instructions below for the basic settings.
  • Page 24: Iv-1. Changing Ip Address

    IV-1. Changing IP Address 1. Go to “Network Settings” and tap “LAN-side IP Address”. 2. Enter the IP address settings you wish to use for your AP. You can use a dynamic (DHCP) or static IP address, depending on your network environment.
  • Page 25: Iv-2. Changing Ssid For 2.4Ghz Wireless Networ

    IV-2. Changing SSID For 2.4GHz Wireless Network Go to “Wireless Settings”. Tap “2.4GHz 11bgn”. Tap “Basic”. Enter the new SSID for your 2.4GHz wireless network in the “SSID1” field and click “Apply”. To utilize multiple 2.4GHz SSIDs, open the drop down menu labelled “Enable SSID number”...
  • Page 26: Iv-3. Configuring Security Settings Of 2.4Ghz Wireless Network

    IV-3. Configuring Security Settings of 2.4GHz wireless network Go to “Wireless Settings”. Tap “2.4GHz 11bgn”. Tap “Security”. Select an “Authentication Method”, enter or select fields where appropriate, and click “Apply”.
  • Page 27 If multiple SSIDs are used, specify which SSID to configure using the “SSID” drop down menu.
  • Page 28: Iv-4. Changing Security Setting For 5Ghz Wireless Network

    IV-4. Changing Security Setting for 5GHz wireless network Follow the steps outlined in “Changing SSID for 2.4GHz wireless network” and “Configuring Security Setting for 2.4GHz wireless network” but choose the 5GHz option instead.
  • Page 29: Iv-5. Changing Admin Name And Password

    IV-5. Changing Admin Name and Password Go to “Management”. Tap “Admin”. Complete the “Administrator Name” and “Administrator Password” fields and click “Apply”. IV-6. Changing Date and Time Go to “Management”. Tap “Date and Time”.
  • Page 30: Cax1800 Settings

    Congrats! The basic settings of your AP are now configured and your AP is up and running! V. CAX1800 Settings The CAX1800 features a range of advanced functions. Please open a browser and enter the CAX1800 default IP address “192.168.2.2” to access the AP configuration webpage.
  • Page 31: System Information

    System Information “System Information” page displays basic system information.
  • Page 32 System Model Displays the model number of the AP. Product Name Displays the product name for reference, which consists of “AP” plus the MAC address. Uptime Displays the total time since the device was turned on. System Time Displays the system time. Boot From Displays information for the booted hardware, booted from internal memory.
  • Page 33 Wireless 2.4GHz (5GHz) Status Displays the status of the 2.4GHz or 5GHz wireless. (Enabled or disabled) MAC Address Displays the AP MAC address. Channel Displays the channel number the specified wireless frequency is using for broadcast. Transmit Displays the wireless radio transmit power level as a Power percentage.
  • Page 34: Wireless Clients

    Wireless Clients “Wireless Clients” page displays information about all wireless clients connected to the device on the 2.4GHz or 5GHz frequency. Refresh time Auto Refresh Select a time interval for the client table list to automatically Time refresh. Manual Click refresh to manually refresh the client table. Refresh 2.4GHz (5GHz) WLAN Client Table SSID...
  • Page 35: Wireless Monitor

    iii. Wireless Monitor “Wireless Monitor” is a tool built into the device to scan and monitor the surrounding wireless environment. Select a frequency and click “Scan” to display a list of all SSIDs within range along with relevant details for each SSID. Wireless Monitor Site Survey Select which frequency (or both) to scan, and click “Scan”...
  • Page 36: Dhcp Clients

    DHCP Clients “DHCP Clients” shows information of DHCP leased clients. “System log” displays system operation information such as up time and connection processes. This information is useful for administrators. Older entries will be overwritten when the log is full.
  • Page 37 The following information/events are recorded by the log: Log (Category) Mount & un-mount Wireless Client Connected & disconnected Key exchange success & fail Authentication Authentication fail or successful Association Success or fail M1 - M8 messages WPS success Change Displays the total time the wireless client has been Settings connected to the AP System Boot...
  • Page 38: V-2. Network Settings

    V-2. Network Settings LAN-side IP Address “LAN-side IP address” allows users to configure your AP on your LAN. You can enable the AP to dynamically receive an IP address from your router’s DHCP server or you can specify a static IP address for your AP, as well as configure DNS servers.
  • Page 39 LAN-side IP Address IP Address Select “DHCP Client” for your AP to be assigned a dynamic IP Assignment address from your router’s DHCP server. Select “Static IP” to manually specify a static/fixed IP address for your AP. Select “DHCP Server” for your AP to assign a dynamic IP address to your PC.
  • Page 40 Primary DNS DHCP users can select “From DHCP” to get primary DNS Address server’s IP address from DHCP or “User-Defined” to manually enter a value. For static IP users, the default value is blank. Secondary Users can manually enter a value when DNS server’s primary DNS Address address is set to “User-Defined”.
  • Page 41: Lan Port

    LAN Port “LAN Port” allows users to configure the settings for LAN port. Wired LAN Identifies LAN port 1. Port Enable Enable/disable specified LAN port. Speed & Select a speed & duplex type for specified LAN port, or use Duplex the “Auto”...
  • Page 42: Igmp Snooping

    iii. IGMP Snooping IGMP snooping is the process of listening to Internet Group Management Protocol (IGMP) network traffic. The feature allows a network switch to listen in on the IGMP conversation between hosts and routers. By listening to these conversations the switch maintains a map of which links need which IP multicast streams.
  • Page 43: Vlan

    VLAN VLAN is a local area network which maps workstations virtually instead of physically and allows you to group together or isolate users from each other. VLAN Interface Wired LAN Identifies LAN port 1 and wireless SSIDs. Port/Wireless VLAN Mode Select “Tagged Port”...
  • Page 44: V-3. Wireless Settings

    V-3. Wireless Settings...
  • Page 45: Basic (2.4Ghz 11Bgn)

    Basic (2.4GHz 11bgn) You can set up basic settings for AP 2.4GHz Wi-Fi network.
  • Page 46 Wireless Enable or disable the AP 2.4GHz wireless radio. When disabled, no 2.4GHz SSIDs will be active. Band Wireless standard used for the AP. Combinations of 802.11b, 802.11g & 802.11n can be selected. Enable SSID Number Select how many SSIDs to enable for the 2.4GHz frequency from the drop down menu.
  • Page 47 When auto channel is disabled, configurable fields will change. Select a wireless channel manually: Channel Select a wireless channel from 1 – 11. Channel Set the channel bandwidth: Bandwidth - 20MHz (lower performance but less interference). - 40MHz (higher performance but potentially higher interference) - Auto (automatically select based on interference level).
  • Page 48: Advanced (2.4Ghz 11Bgn)

    Advanced (2.4GHz 11bgn) In our recomandations, these settings are for experienced users only. Please do not change any of the values on this page unless you are already familiar with these functions. Changing these settings can adversely affect the performance of your...
  • Page 49 Contention Select “Short” or “Long” – this value is used for contention Slot windows in WMM. Preamble Set the wireless radio preamble type. The preamble type in Type 802.11 based wireless communications defines the length of the CRC (Cyclic Redundancy Check) block for communication between the AP and roaming wireless adapters.
  • Page 50 Airtime Airtime Fairness gives equal amounts of air time (instead of Fairness equal number of frames) to each client regardless of its theoretical data rate. Set airtime fairness to “Auto”, “Static” or “Disable”. When “Auto” is selected, the share rate is automatically managed.
  • Page 51: Security (2.4Ghz 11Bgn)

    iii. Security (2.4GHz 11bgn) The AP provides various security options (wireless data encryption). When data is encrypted, information transmitted wirelessly cannot be read by anyone who does not know the correct encryption key. It is essential to configure wireless security in order to prevent unauthorised access to your network.
  • Page 52 SSID Selection Select a SSID to configure its security settings. Broadcast SSID Enable or disable SSID broadcast. Enable: the SSID will be visible to clients as an available Wi-Fi network. Disable: the SSID will not be visible as an available Wi-Fi network to clients –...
  • Page 53: Wds (2.4Ghz 11Bgn)

    WDS (2.4GHz 11bgn) WDS can bridge/repeat AP together in an extended network and must be configured on each AP, using correct MAC addresses. All APs should use the same wireless channel and encryption method. When using WDS, configure the IP address of each AP to be in the same subnet and ensure there is only one active DHCP server among connected APs, preferably on the WAN side.
  • Page 54 WDS settings can be configured as shown below: 2.4GHz Select “WDS with AP” to use WDS with AP or “WDS Dedicated Functionality Mode” to use WDS and also block communication with regular wireless clients. When WDS is used, each AP should be configured with corresponding MAC addresses, wireless channel and wireless encryption method.
  • Page 55: Guest Network (2.4Ghz 11Bgn)

    Guest Network (2.4GHz 11bgn) Enable or disable guest network to allow clients to connect as guests. 5GHz 11ac 11an The “5GHz 11ac 11an” menu allows you to configure your AP 5GHz wireless network across five categories: Basic, Advanced, Security, WDS & Guest 2.4GHz 11bgn section for how to set up.
  • Page 56: Wps

    vii. Please refer to PG.246 for more details. viii. RADIUS (RADIUS Settings) The RADIUS allows users to configure the device’s external RADIUS server settings. A RADIUS server provides user-based authentication to improve security and offer wireless client control – users can be authenticated before gaining access to a network.
  • Page 57 RADIUS Type Select “Internal” to use the AP built-in RADIUS server or “external” to use an external RADIUS server. RADIUS Server Enter the RADIUS server host IP address. Authentication Set the UDP port used in the authentication protocol of the Port RADIUS server.
  • Page 58: Internal Server

    Internal Server The AP features a built-in RADIUS server which can be configured as shown below used when “Internal” is selected for “RADIUS Type”.
  • Page 59 Internal Server Check/uncheck to enable/disable the AP’s internal RADIUS server. EAP Internal Select EAP internal authentication type from the drop down Authentication menu. EAP Certificate Displays the EAP certificate file format: PCK#12(*.pfx/*.p12) File Format EAP Certificate Click “Upload” to open a new window and select the location File of an EAP certificate file to use.
  • Page 60: Radius Accounts

    RADIUS Accounts The internal RADIUS server allows you to configure and manage users and can authenticate up to 256 user accounts. Enter a username in the box below and click “Add” to add the username.
  • Page 61 Select “Edit” to edit the username and password of the RADIUS account: User Name Enter the user names here, separated by commas. Click “Add” to add the user to the user registration list. Reset Clear text from the user name box. Select Check the box to select a user.
  • Page 62: Mac Filter

    MAC Filter MAC filtering is a security feature that can help to prevent unauthorized users from connecting to your AP. This function allows users to define a list of network devices permitted to connect to the AP. Devices are each identified by their unique MAC address. If a device which is not on the list of permitted MAC addresses attempts to connect to the AP, it will be denied.
  • Page 63 Add MAC Enter a MAC address of computer or network device manually Address e.g. ‘aa-bb-cc-dd-ee-ff’. Or enter multiple MAC addresses separated with commas, e.g. ‘aa-bb-cc-dd-ee-ff,aa-bb-cc-dd-ee-gg’. Click “Add” to add the MAC address to the MAC address filtering table. Reset Clear all fields. MAC address entries will be listed in the “MAC Address Filtering Table”.
  • Page 64: Wmm

    xii. WMM is a Wi-Fi Alliance interoperability certification based on the IEEE 802.11e standard, which provides Quality of Service (QoS) features to IEE 802.11 networks. WMM prioritizes traffic according to four categories: background, best effort, video and voice.
  • Page 65 Configuring WMM consists of adjusting parameters on queues for different categories of wireless traffic. Traffic is sent to the following queues: Background Low Priority High throughput, non time sensitive bulk data e.g. Best Effort Medium Traditional IP data, medium throughput and delay. Priority Video High Priority Time sensitive video data with minimum time...
  • Page 66: Schedule

    xiii. Schedule The schedule feature allows users to automate the wireless network for the specified time ranges. Wireless scheduling can save energy and increase the security of your network.
  • Page 67 Please follow the steps below for how to set up schedule, Select “Add” to add a schedule. Settings page will be shown if “Continue” is selected. Check the box of the desired SSID network, day of schedule and select the Start Time and End Time.
  • Page 68: Traffic Shaping

    xiv. Traffic Shaping Traffic shaping is used to optimize or guarantee performance, improve latency, or increase usable bandwidth for some kinds of packets by delaying other kinds.
  • Page 69: Bandsteering

    Bandsteering Bandsteering detects clients capable of 5GHz operation and steers them there to make the more crowded 2.4 GHz band available for clients only capable of connecting to 2.4GHz band. This helps improve end user experience by reducing channel utilization, especially in high density environments.
  • Page 70: V-4. Management

    V-4. Management...
  • Page 71: Admin

    Admin You can change the admin name/password and configure the “Advanced Settings” in here. It is advised to do so for security purposes. Account to Manage This Device Administrator Set the AP administrator name. (Must be between 4-16 Name alphanumeric characters) Administrator Set the AP administrator password.
  • Page 72 Advanced Settings Product Name Edit the product name according to your preference consisting of 1-32 alphanumeric characters. This name is used for reference purposes. Management Check/uncheck the boxes to enable/disable specified Protocol management interfaces. SNMP Version Select SNMP version appropriate for your SNMP manager. SNMP Get Enter an SNMP Get Community name for verification with the Community...
  • Page 73: Date And Time

    Date and Time Users can configure the date and time settings of the AP here. The date and time of the device can be configured manually or can be synchronized with a time server. Date and Time Settings Local Time Set the AP date and time manually using the drop down menus.
  • Page 74: Syslog Server

    NTP Time Server Use NTP The AP also supports NTP (Network Time Protocol) for automatic time and date setup. Server Name Enter the host name or IP address of the time server if you wish. Update Specify a frequency (in hours) for the AP to Interval update/synchronize with the NTP server.
  • Page 75 Syslog Server Settings Transfer Logs Check the box to enable the use of a syslog server. Enter a host name, domain or IP address for the server, consisting of up to 128 alphanumeric characters. Syslog E-mail Settings E-mail Logs Check the box to enable/disable e-mail logs. E-mail Subject Specify the subject line of log emails.
  • Page 76: Ping Test

    Ping Test The AP includes a built-in ping test function. Destination Address Enter the address of the host. Execute Click the “Execute” button to ping the host.
  • Page 77: Traceroute Test

    Traceroute Test Traceroute is a diagnostic tool for displaying the route and measuring transit delays of packets across an IP network. Destination Enter the address of the host. Address Execute Click the “Execute” button to execute the traceroute command.
  • Page 78: V-5. Advanced

    V-5. Advanced LED Settings The AP LEDs can be manually enabled or disabled according to your preference. Power LED Select on or off. Diag LED Select on or off.
  • Page 79: Update Firmware

    Update Firmware The “Firmware” page allows users to update the firmware of the system. Do not switch off or disconnect the AP during a firmware upgrade, as this could damage the device. Firmware Click “Choose File” to upload firmware from your local computer. Location...
  • Page 80: Save / Restore Settings

    iii. Save / Restore Settings Users can save / backup the device’s current settings as a file to your local computer, and restore the device to previously saved settings. Save Settings to PC Save Settings Encryption: If you wish to encrypt the configuration file with a password, check the “Encrypt the configuration file with a password”...
  • Page 81: Factory Default

    Factory Default If the AP malfunction or is not responding, rebooting the device maybe an option to consider. If rebooting does not work, try resetting the device back to its factory default settings. Factory Click “Factory Default” to restore settings to the factory Default default.
  • Page 82: Reboot

    Reboot If the AP malfunctions or is not responding, rebooting the device may be an option to consider. Reboot Click “Reboot” to reboot the device. A countdown will indicate the progress of the reboot.
  • Page 83: V-6. Operation Mode

    3. Managed AP Mode: The device acts as a slave AP within the AP array. In Managed AP mode some functions of the AP will be disabled in this user interface and must be set using Edimax Pro NMS on the AP Controller.
  • Page 84: Edimax Pro Nms

    Edimax Pro Network Management Suite (NMS) supports the central management of a group of APs, otherwise known as an AP Array. NMS can be installed on one AP and support up to 16 Edimax Pro APs with no additional wireless controller required, reducing costs and facilitating efficient remote AP management.
  • Page 85: Vi-1. Quick Setup - Nms

    Edimax Network Management System (NMS) supports the central management of a group of APs, otherwise known as an AP Array. NMS can be installed on one AP and support up to 16 Edimax APs with no additional wireless controller required, reducing costs and facilitating efficient remote AP management.
  • Page 86 Please follow the steps below for how to setup: 1. Connect all APs to a switch which is connected to a router. 2. Ensure all APs are powered on and check their LEDs.
  • Page 87 Designate one AP as the AP Controller which will manage all other connected APs (up to 16). Connect a computer to the designated AP Controller using an Ethernet cable. Ensure you have the latest firmware from the Edimax website for your Edimax Pro products.
  • Page 88 Open a web browser and enter the AP Controller’s IP address in the address field. (The default IP address is 192.168.2.2) Your computer’s IP address must be in the same subnet as the AP Controller. Refer to the user manual for help. If you changed the AP Controller’s IP address, or if your router uses a DHCP server, ensure you enter the correct IP address.
  • Page 89 Enter the default Username / Password to login. (admin / 1234) You will arrive at the Edimax Pro NMS Dashboard. Follow the steps below to change the operation Mode, Go to “Management”. Tap “Operation Mode”. iii. Select “AP Controller Mode” from the drop down menu.
  • Page 90 Edimax Pro NMS includes a wizard to quickly setup the SSID & security for Managed APs. Click “Wizard” in the top right corner to begin. Follow instructions on-screen to complete Steps 1-6 and click “Finish” to save the settings.
  • Page 91 If any of your Managed APs cannot be found, reset it to its factory default settings.
  • Page 92: Vi-2. Webpage Layout - Nms

    Your AP Controller & Managed APs should be fully functional. Use the top menu to navigate around Edimax Pro NMS. Use Dashboard, Zone Plan, NMS Monitor & NMS Settings to configure Managed APs. Use Local Network & Local Settings to configure your AP Controller.
  • Page 93 Zone Plan: Zone Plan displays a customizable live map of Managed APs for a visual representation of your network coverage. Each AP icon can be moved around the map, and a background image can be uploaded for user-defined location profiles using NMS Settings  Zone Edit. Options can be configured using the menu on the right side and signal strength is displayed for each AP.
  • Page 94 NMS Monitor: The NMS Monitor panel provides more detailed monitoring information about the AP Array than found on the Dashboard, grouped according to categories in the menu down the left side.
  • Page 95 NMS Settings: NMS Settings provides extensive configuration options for the AP Array. You can manage each AP, assign APs into groups, manage WLAN, RADIUS & guest network settings as well as upgrade firmware across multiple APs. The Zone Plan can also be configured using “Zone Edit”.
  • Page 96 Local Network: Local Network settings are for your AP Controller. You can configure the IP address and DHCP server of the AP Controller in addition to 2.4GHz & 5Ghz Wi-Fi and security, with WPS, RADIUS server, MAC filtering and WMM settings also available.
  • Page 97 Local Settings: Local Settings are for your AP Controller. You can set the operation mode and view network settings (clients and logs) specifically for the AP Controller, as well as other management settings such as date/time, admin accounts, firmware and reset.
  • Page 98 Toolbox: The Toolbox panel provides network diagnostic tools: Ping, Traceroute, and IP Scan.
  • Page 99: Vi-3. Nms Features

    VI-3. NMS Features Descriptions of the functions of each main panel can be found below. When using Edimax NMS, click “Apply” to save changes: It is recommended that you login to the AP Controller to make configurations to Managed APs.
  • Page 100 To logout from Edimax NMS, click “Logout” in the top right corner: Restart: You can restart your AP Controller or any Managed AP using Edimax NMS. To restart your AP Controller go to Local Settings  Advanced  Reboot and click “Reboot”.
  • Page 101: Vi-4. Dashboard

    VI-4. Dashboard The dashboard displays an overview of your AP array: Use the blue icons above to refresh or collapse each panel in the dashboard. Click and drag to move a panel to suit your preference. You can set the dashboard to auto-refresh every 1 minute, 30 seconds or disable auto-refresh:...
  • Page 102: System Information

    System Information System Information displays information about the AP Controller: Product Name (model), Host Name, MAC Address, IP Address, Firmware Version, System Time and Uptime (time the AP has been on). Devices Information Devices Information is a summary of the number of all devices in the local network: APs, Clients Connected, and Rogue (unidentified) Devices.
  • Page 103: Managed Ap

    iii. Managed AP This page displays information about the Managed APs in the local network: Index (reference number), MAC Address, Device Name, Model, IP Address, 2.4GHz & 5GHz Wireless Channel Number, No. of Clients connected to each AP, and Status (connected, connecting or disconnected). The search function can be used to locate a specific Managed AP.
  • Page 104 4. Buzzer The Managed AP’s buzzer will sound temporarily to help identify/locate the AP. 5. Network Connectivity Go to the “Network Connectivity” panel to perform a ping or traceroute. 6. Restart Restarts the Managed AP. Status Icons Icon Color Status Definition Managed AP is disconnected.
  • Page 105: Managed Ap Group

    Managed AP Group Managed APs can be grouped according to your requirements. Managed AP Group displays information about each Managed AP group in the local network: Group Name, MAC Address, Device Name, Model, IP Address, 2.4GHz & 5GHz Wireless Channel Number, No. of Clients connected to each AP, and Status (connected or disconnected).
  • Page 106 1. Disallow Remove the Managed AP Group from the AP array and disable connectivity. 2. Edit Edit various settings for the Managed AP Group. 3. Blink LED The LED of all Managed APs in the group will flash temporarily to help identify &...
  • Page 107 Status Icons Icon Color Status Definition Managed AP is disconnected. Please check the network connection and ensure the Grey Disconnected Managed AP is in the same IP subnet as the AP Controller. Authentication System security must be the same for all Failed APs in the AP array.
  • Page 108: Active Clients

    Active Clients Active Clients displays information about each client in the local network: Index (reference number), Client MAC Address, Device Name, Model, IP Address, 2.4GHz & 5GHz Wireless Channel Number, No. of Clients connected to each AP, and Status (on or off). The search function can be used to locate a specific client.
  • Page 109: Vi-5. Zone Plan

    VI-5. Zone Plan The Zone Plan can be fully customized to match your network environment. You can move the AP icons and select different location images (upload location images in NMS Settings  Zone Edit) to create a visual map of your AP array.
  • Page 110 Menu Menu allows you to keep track of the APs’ information. Select between Radio Coverage, Channel, Client Numbers, AP Loading, and Online Map. When an option is selected, the zone plan and Control section will change accordingly. Radio Coverage: Below is displayed as Radio Coverage is selected:...
  • Page 111 Channel: Below is displayed as Channel is selected: Client Numbers: Below is displayed as Client Numbers is selected:...
  • Page 112 AP Loading: Below is displayed as AP Loading is selected: Online Map: When Online Map is selected, the message below is displayed: Click “OK” and the interface will bring you to the page shown below to allow API key entry:...
  • Page 113: Control

    Control The Control section will change according to the selection in the Menu section. Map Location Select a pre-defined location from the drop down menu. When you upload a location image in NMS Settings  Zone Edit, it will be available for selection here. AP Group You can select an AP Group to display in the zone map.
  • Page 114 Click and drag an AP icon to move the icon around the zone map. The signal strength for each AP is displayed according to the “Signal” key in the menu on the right side:...
  • Page 115: Vi-6. Nms Monitor

    VI-6. NMS Monitor Managed AP: Displays information about each Managed AP in the local network: Index (reference number), MAC Address, Device Name, Model, IP Address, 2.4GHz & 5GHz Wireless Channel Number, No. of Clients connected to each AP, and Status (connected, connecting or disconnected). The search function can be used to locate a specific Managed AP.
  • Page 116 Status Icons Icon Color Status Definition Managed AP is disconnected. Please check the network connection and ensure the Grey Disconnected Managed AP is in the same IP subnet as the AP Controller. Authentication System security must be the same for all Failed APs in the AP array.
  • Page 117 1. Disallow Remove the Managed AP from the AP array and disable connectivity. 2. Edit Edit various settings for the Managed AP. 3. Blink LED The Managed AP’s LED will flash temporarily to help identify & locate APs. 4. Buzzer The Managed AP’s buzzer will sound temporarily to help identify &...
  • Page 118: Managed Ap Group

    Managed AP Group Managed APs can be grouped according to your requirements. Managed AP Group displays information about each Managed AP group in the local network: Group Name, MAC Address, Device Name, Model, IP Address, 2.4GHz & 5GHz Wireless Channel Number, No. of Clients connected to each AP, and Status (connected or disconnected).
  • Page 119 Status Icons Icon Color Status Definition Managed AP is disconnected. Please check the network connection and ensure the Grey Disconnected Managed AP is in the same IP subnet as the AP Controller. Authentication System security must be the same for all Failed APs in the AP array.
  • Page 120 1. Disallow Remove the Managed AP Group from the AP array and disable connectivity. 2. Edit Edit various settings for the Managed AP Group. 3. Blink LED The LED of all Managed APs in the group will flash temporarily to help identify &...
  • Page 121: Wlan

    iii. WLAN Active WLAN: Displays information about each SSID in the AP Array: Index (reference number), Name/SSID, VLAN ID, Authentication, Encryption, IP Address and Additional Authentication. To configure encryption and VLANs for Managed APs go to NMS Settings  WLAN. The search function can be used to locate a specific SSID.
  • Page 122 Active WLAN Group: WLAN groups can be created according to your preference. Active WLAN Group displays information about WLAN group: Group Name, Name/SSID, VLAN ID, Authentication, Encryption, IP Address and Additional Authentication. The search function can be used to locate a specific Active WLAN Group. Type in the search box and the list will update:...
  • Page 123: Clients

    Clients Active Clients: Displays information about clients currently connected to the AP Array: Index (reference number), Client MAC Address, AP MAC Address, WLAN (SSID), Radio (2.4GHz or 5GHz), Signal Strength received by Client, Connected Time, Idle Time, Tx & Rx (Data transmitted and received by Client in KB), and the Vendor of the client device.
  • Page 124: Users

    Users Active Users: Displays information about users currently connected. Users Log: Displays the log information about users currently connected.
  • Page 125: Rogue Devices

    Rogue Devices Rogue AP detection can identify any unauthorized APs which may have been installed in the network. Click “Start” to scan for rogue devices: Unknown Rogue Devices area displays information about rogue devices discovered during the scan: Index (reference number), Channel, SSID, MAC Address, Security, Signal Strength, Type, Vendor and Action.
  • Page 126: Information

    vii. Information All Events/Activities: Displays a log of time-stamped events for each AP in the Array – use the drop down menu to select an AP and view the log.
  • Page 127 AP Monitoring: Displays graphical monitoring information about APs in the Array for 2.4GHz & 5GHz: Traffic Tx (data transmitted in MB), Traffic Rx (data received in MB), No. of Clients, Wireless Channel, Tx Power (wireless radio power), CPU Usage and Memory Usage.
  • Page 129 SSID Overview: Displays graphical monitoring information about APs in the Array for 2.4GHz & 5GHz.
  • Page 130: Vi-7. Nms Settings

    VI-7. NMS Settings Access Point Displays information about each AP and AP group in the local network and allows you to edit APs and edit or add AP groups. The search function can be used to locate an AP or AP group. Type in the search box and the list will update:...
  • Page 131 The Status icon displays grey (disconnected), red (authentication failed/incompatible NMS version), orange (upgrading firmware), yellow (connecting), green (connected) or blue (waiting for approval) for each individual Managed AP. The “Action” icons enable you to allow or disallow an AP: Select an AP or AP group using the check-boxes and click “Edit” to make configurations, or click “Add”...
  • Page 132 Edit Basic Settings: When “Override Group Setting” is checked, options/fields will turn white to allow adjustments. Basic Settings Name Edit the AP name. The default name is AP + MAC address. Description Enter a description of the AP for reference e.g. 2 Floor Office.
  • Page 133 your AP and will replace the default IP address. Subnet Mask Specify a subnet mask. The default value is 255.255.255.0 Default For DHCP users, select “From DHCP” to get default gateway Gateway from your DHCP server or “User-Defined” to enter a gateway manually.
  • Page 134 Edit Radio Settings: Radio Settings Wireless Enable or disable the AP’s 2.4GHz or 5GHz wireless radio. When disabled, no SSIDs on that frequency will be active. Band Select the wireless standard used for the AP. Combinations of 802.11b, 802.11g, 802.11n & 802.11ac can be selected. Auto Pilot Enable/disable auto channel selection.
  • Page 135 to your preference. Channel When Auto Pilot is disabled, select a channel (1-11) manually. Channel Set the channel bandwidth or use Auto (automatically select Bandwidth based on interference level). Set a Basic Service Set (BSS) rate: this is a series of rates to BasicRateSet control communication frames for wireless clients.
  • Page 136 Multicast Set the transfer rate for multicast packets or use the “Auto” Rate setting. Tx Power Set the power output of the wireless radio. You may not require 100% output power. Setting a lower power output can enhance security since potentially malicious/unknown users in distant areas will not be able to access your signal.
  • Page 137 Edit WMM-EDCA Settings: When “Override Group Setting” is checked, options/fields will turn white to allow adjustments. WMM-EDCA Settings: Back Ground Access Category (AC) is Back Ground Best Effort Access Category (AC) is Best Effort Video Access Category (AC) is video Voice Access Category (AC) is voice Edit BandSteering Settings:...
  • Page 138 Edit Profile Settings: When “Override Group Setting” is checked, options/fields will turn white to allow adjustments. Profile Settings WLAN Group Assign the AP’s 2.4GHz or 5GHz SSID(s) to a WLAN Group. Guest Assign the AP’s 2.4GHz or 5GHz SSID(s) to a Guest Network Network Group.
  • Page 139 Events: Press “Refresh” to refresh the event log Press “Save” to save the event log as .log file. Add/Edit AP Group: Configure your selected AP group. AP group settings apply to all APs in the group, unless individually set to override group settings. You can use Profile Group Settings to assign the AP group to WLAN, Guest Network, RADIUS and Access Control groups.
  • Page 140 Basic Group Settings Name Edit the AP group name. Description Enter a description of the AP group for reference e.g. 2 Floor Office Group. IGMP Enable / Disable the IGMP Snooping function. Snooping IGMP snooping is the process of listening to Internet Group Management Protocol (IGMP) network traffic.
  • Page 141 Edit Radio Group Settings:...
  • Page 142 Radio Group Settings Wireless Enable or disable the AP group’s 2.4GHz or 5GHz wireless radio. When disabled, no SSIDs on that frequency will be active. Band Select the wireless standard used for the AP group. Combinations of 802.11b, 802.11g, 802.11n & 802.11ac can be selected.
  • Page 143 Advanced Settings Contention Select “Short” or “Long” – this value is used for contention Slot windows in WMM. Preamble Set the wireless radio preamble type. The preamble type in Type 802.11 based wireless communication defines the length of the CRC (Cyclic Redundancy Check) block for communication between the AP and roaming wireless adapters.
  • Page 144 Edit WMM-EDCA Settings: Edit BandSteering Settings:...
  • Page 145 Edit Profile Settings: Profile Group Settings WLAN Group Assign the AP group’s 2.4GHz or 5GHz SSIDs to a WLAN Group. Guest Assign the AP group’s 2.4GHz or 5GHz SSIDs to a Guest Network Network Group. Group RADIUS Assign the AP group’s 2.4GHz SSIDs to a RADIUS group. You can edit RADIUS groups in NMS Settings ...
  • Page 146 Edit Group Settings:...
  • Page 147: Wlan

    WLAN Displays information about each WLAN and WLAN group in the local network and allows you to add or edit WLANs & WLAN Groups. The search function can be used to locate a WLAN or WLAN Group. Type in the search box and the list will update: Select a WLAN or WLAN Group using the check-boxes and click “Edit”...
  • Page 148 Add/Edit WLAN:...
  • Page 149 WLAN Settings Name/ESSID Edit the WLAN name (SSID). Description Enter a description of the SSID for reference e.g. 2 Floor Office HR. VLAN ID Specify the VLAN ID. Broadcast SSID Enable or disable SSID broadcast. When enabled, the SSID will be visible to clients as an available Wi-Fi network. When disabled, the SSID will not be visible as an available Wi-Fi network to clients –...
  • Page 150 Various security options (wireless data encryption) are available. When data is encrypted, information transmitted wirelessly cannot be read by anyone who does not know the correct encryption key. It is essential to configure wireless security in order to prevent unauthorised access to your network. Select hard-to-guess passwords which include combinations of numbers, letters and symbols, and change your password regularly.
  • Page 151 Add/Edit WLAN Group: WLAN Group Settings Name Edit the WLAN Group name. Description Enter a description of the WLAN Group for reference e.g. 2 Floor Office HR Group. Members Select SSIDs to include in the group using the checkboxes and assign VLAN IDs.
  • Page 152: Radius

    iii. RADIUS Displays information about External & Internal RADIUS Servers, Accounts and Groups and allows you to add or edit RADIUS Servers, Accounts & Groups. The search function can be used to locate a RADIUS Server, Account or Group. Type in the search box and the list will update: Make a selection using the check-boxes and click “Edit”...
  • Page 153 Add/Edit External RADIUS Server: Name Enter a name for the RADIUS Server. Description Enter a description of the RADIUS Server for reference. RADIUS Server Enter the RADIUS server host IP address. Authentication Set the UDP port used in the authentication protocol of the Port RADIUS server.
  • Page 154 Add/Edit Internal RADIUS Server: Upload EAP Certificate File EAP Certificate Displays the EAP certificate file format: PKCS#12(*.pfx/*.p12) File Format EAP Certificate Click “Upload” to open a new window and select the location File of an EAP certificate file to use. If no certificate file is uploaded, the internal RADIUS server will use a self-made certificate.
  • Page 155 Internal RADIUS Server Name Enter a name for the Internal RADIUS Server. Description Enter a description of the Internal RADIUS Server for reference. EAP Certificate Displays the EAP certificate file format: PCK#12(*.pfx/*.p12) File Format EAP Certificate Click “Upload” to open a new window and select the location File of an EAP certificate file to use.
  • Page 157 RADIUS Accounts User Name Enter the user names here, separated by commas. Click “Add” to add the user to the user registration list. Reset Clear text from the user name box. User Registration List User Name Displays the user name. Password Enter a password.
  • Page 158 Import: If you wish to import RADIUS accounts, press “Import”. The following page is displayed below. Choose a file from a file and press “Upload” to import RADIUS accounts. Export: If you wish to export your current list of RADIUS accounts, press “Export”. Your list will be saved in a format similar to the one below:...
  • Page 159 Add/Edit RADIUS Group: RADIUS Group Settings Group Name Edit the RADIUS Group name. Description Enter a description of the RADIUS Group for reference. 2.4GHz Enable/Disable primary & secondary RADIUS servers for RADIUS 2.4GHz. 5GHz Enable/Disable primary & secondary RADIUS servers for 5GHz. RADIUS Members Add RADIUS user accounts to the RADIUS group.
  • Page 160: Access Control

    Access Control MAC Access Control is a security feature that can help to prevent unauthorized users from connecting to your AP. This function allows you to define a list of network devices permitted to connect to the AP. Devices are each identified by their unique MAC address. If a device not on the list of permitted MAC addresses attempts to connect to the AP, it will be denied.
  • Page 161 Delete Delete the selected entry(s) from the list. Selected Delete All Delete all entries from the table. Add/Edit MAC Access Control: Click “Add” to enter the page shown below: Add MAC Enter a MAC address of computer or network device manually Address e.g.
  • Page 162 MAC address entries will be listed in the “MAC Address Filtering Table”. Select an entry using the “Select” checkbox. Add/Edit/Clone MAC Access Control Group: Click “Add” to enter the page shown below: MAC Filter Group Settings Group Edit the MAC Access Control Group name. Name Description Enter a description of the MAC Access Control Group for reference.
  • Page 163: Guest Network

    Guest Network You can setup an additional “Guest” Wi-Fi network so guest users can enjoy Wi-Fi connectivity without accessing your primary networks. The “Guest” screen displays settings for your guest Wi-Fi network. The Guest Network panel displays information about Guest Networks and Guest Network Groups and allows you to add or edit Guest Network and Guest Network Group settings.
  • Page 164 Add/Edit Guest Network: Click “Add” to enter the page shown below:...
  • Page 165 Guest Network Settings Name/ESSID Edit the Guest Network name (SSID). Description Enter a description of the Guest Network for reference e.g. Floor Office HR. VLAN ID Specify the VLAN ID. Broadcast SSID Enable or disable SSID broadcast. When enabled, the SSID will be visible to clients as an available Wi-Fi network.
  • Page 166 Guest Access Policy Guest Portal Enable or disable guest portal for the guest network. Traffic Shaping Enable or disable traffic shaping for the guest network. Downlink Enter a downlink limit in MB. Uplink Enter an uplink limit in MB. Rules Enter IP addresses to be filtered according to the drop down menu: “Allow all by Default”, “Deny all by Default”, “Internet Only”...
  • Page 167: Users

    Users User Panel: Press “Add” to add a new user, or “Edit” to edit an existing user, or “Clone” to clone an existing user’s settings. For the 3 options specified above, enter the fields below:...
  • Page 168: Guest Portal

    User Group Panel: Click “Add” to add a new user group, or “Edit” to edit an existing user group, or “Clone” to clone an existing user group’s settings. For the 3 options specified above, enter the fields below: vii. Guest Portal A guest portal is a web page which is displayed to newly connected users before they are granted broader access to network resources.
  • Page 169 Guest Portal Settings Idle Timeout Select an idle timeout time from the drop down menu. Login Enter a number (between 1 and 30) for the number of login Password password retry. If login password has been entered Retry Lockout incorrectly for the number entered here, it will be locked. Add / Edit: Enter the fields according to the selected “Guest Portal Type”...
  • Page 170 Free Guest Portal Type: Guest Portal Settings Name Enter / edit portal name. Description Enter / edit description of the portal for reference. Landing Page Enter a “Promotion URL”.
  • Page 171 User Level Agreement Guest Portal Type: Guest Portal Settings Name Enter / edit portal name. Description Enter / edit description of the portal for reference. Landing Page Select between “Redirect to the original URL” or “Promotion URL” (enter the promotion URL). Default Choose a default language.
  • Page 172 Static Users Guest Portal Type:...
  • Page 173 Guest Portal Settings Name Enter / edit portal name. Description Enter / edit description of the portal for reference. Authentication Select an authentication server. Server Authentication Select an authentication user group. User Group Landing Page Select between “Redirect to the original URL” or “Promotion URL”...
  • Page 174 Guest Portal Settings Name Enter / edit portal name. Description Enter / edit description of the portal for reference. Authentication Select an authentication server. Server Authentication Select an authentication user group. User Group Landing Page Select between “Redirect to the original URL” or “Promotion URL”...
  • Page 175 Click “Preview” to preview the printout, “Confirm” to confirm the message, or “Cancel” to cancel the changes. For Login Portal, click “Edit” and see below to edit the login portal.
  • Page 176 External Captive Portal Guest Portal Type: Guest Portal Settings Name Enter / edit portal name. Description Enter / edit description of the portal for reference. Landing Page Select between “Use external redirect URL” or “Promotion URL” (enter the promotion URL). External Settings Login URL Enter / edit a login URL.
  • Page 177 Editing “Login Portal”: Header Image Click “Choose File” to select a file as the header image. Logo Image Click “Choose File” to select a file as the logo image. (Only for Static and Dynamic users guest portal type) Title Message Enter / edit a title message.
  • Page 178: Zone Edit

    Click “Preview” to preview the printout, “Confirm” to confirm the message, or “Cancel” to cancel the changes. viii. Zone Edit Zone Edit displays information about zones for use with the Zone Plan feature and allows you to add or edit zones. The search function can be used to find existing zones.
  • Page 179 Add/Edit Zone: Upload Zone Image Choose File Click to locate an image file to be displayed as a map in the Zone Plan feature. Typically a floor plan image is useful. Member(s) Setting Name/Location Name the location or simply enter the name of the location. Description Enter a description of the zone/location for reference.
  • Page 180: Schedule

    Schedule Setup schedule start time/end time in Active WLAN Schedule Settings or Guest Network Advanced Settings. Add / Edit:...
  • Page 181: Smart Roaming

    Smart Roaming Smart roaming permits continuous connectivity on wireless devices that are moving. The handoffs from one station to another are fast and secure, and are managed seamlessly. Add / Edit: Roaming Group Settings Name Enter / edit the name of roaming group. Description Enter / edit a description for reference.
  • Page 182: Device Monitoring

    Device Monitoring This page monitors the device’s status (alive or not alive) after you set the Device IP. Add / Edit: Enter an IP Address and click “Add” to add the device(s). Click “Reset” to clear the field.
  • Page 183: Firmware Upgrade

    xii. Firmware Upgrade Firmware Upgrade allows you to upgrade firmware to AP Groups. First, upload the firmware file from a local disk or external FTP server: locate the file and click “Upload” or “Check”. The table below will display the Firmware Name, Firmware Version, NMS Version, Model and Size.
  • Page 184: Advanced

    xiii. Advanced System Security: Configure the NMS system login name and password. Date & Time: Configure the date & time settings of the AP Array. The date and time of the APs can be configured manually or can be synchronized with a time server.
  • Page 185 Date and Time Settings Local Time Set the AP’s date and time manually using the drop down menus. Acquire Click “Acquire Current Time from Your PC” to enter the Current Time required values automatically according to your computer’s from your PC current time and date.
  • Page 186: Vi-8. Local Network

    VI-8. Local Network Network Settings LAN-Side IP Address: The “LAN-side IP address” page allows you to configure your AP Controller on your Local Area Network (LAN). You can enable the AP to dynamically receive an IP address from your router’s DHCP server or you can specify a static IP address for your AP, as well as configure DNS servers.
  • Page 187 LAN-side IP Address IP Address Select “Static IP” to manually specify a static/fixed IP address Assignment for your AP. Select “DHCP Client” for your AP to be assigned a dynamic IP address from your router’s DHCP server, or select “DHCP Server” for your AP to act as a DHCP server and assign IP addresses on your LAN.
  • Page 188 DHCP Server IP Address Specify the IP address here. This IP address will be assigned to your AP and will replace the default IP address. Subnet Mask Specify a subnet mask. The default value is 255.255.255.0 IP Address Enter the start and end IP address of the IP address range Range which your AP’s DHCP server will assign to devices on the network.
  • Page 189 DHCP Server Static IP Address Enter the MAC address of the network device to be assigned a Address static IP address. IP Address Specify the IP address to assign the device. Click to assign the IP address to the device. LAN Port Settings: The “LAN Port”...
  • Page 190 VLAN: “VLAN” (Virtual Local Area Network) enables you to configure VLAN settings. A VLAN is a local area network which maps workstations virtually instead of physically and allows you to group together or isolate users from each other. VLAN IDs in the range 1 – 4095 are supported. VLAN Interface Wired LAN Identifies LAN port 1 and wireless SSIDs.
  • Page 191: 2.4Ghz 11Bgn

    2.4GHz 11bgn The “2.4GHz 11bgn” menu allows you to view and configure information for your AP’s 2.4GHz wireless network across five categories: Basic, Advanced, Security, WDS & Guest Network. Basic: The “Basic” screen displays basic settings for your AP’s 2.4GHz Wi-Fi network. Wireless Enable or disable the AP’s 2.4GHz wireless radio.
  • Page 192 VLAN ID Specify a VLAN ID for each SSID. Auto Enable/disable auto channel selection. Channel Enable: Auto channel selection will automatically set the wireless channel for the AP’s 2.4GHz frequency based on availability and potential interference. Disable: Select a channel manually as shown in the next table. Auto Select a range to which auto channel selection can choose Channel...
  • Page 193 Channel Select a wireless channel from 1 – 11. Channel Set the channel bandwidth: Bandwidth 20MHz (lower performance but less interference); or 40MHz (higher performance but potentially higher interference); or Auto (automatically select based on interference level). Set a Basic Service Set (BSS) rate: this is a series of rates to BasicRateSet control communication frames for wireless clients.
  • Page 194 Advanced: These settings are for experienced users only. Please do not change any of the values on this page unless you are already familiar with these functions. Changing these settings can adversely affect the performance of your AP.
  • Page 195 Contention Select “Short” or “Long” – this value is used for contention Slot windows in WMM. Preamble Set the wireless radio preamble type. The preamble type in Type 802.11 based wireless communications defines the length of the CRC (Cyclic Redundancy Check) block for communication between the AP and roaming wireless adapters.
  • Page 196 Airtime Airtime Fairness gives equal amounts of air time (instead of Fairness equal number of frames) to each client regardless of its theoretical data rate. Set airtime fairness to “Auto”, “Static” or “Disable”. When “Auto” is selected, the share rate is automatically managed.
  • Page 197 Security: The AP provides various security options (wireless data encryption). When data is encrypted, information transmitted wirelessly cannot be read by anyone who does not know the correct encryption key. It is essential to configure wireless security in order to prevent unauthorised access to your network.
  • Page 198 SSID Selection Select a SSID to configure its security settings. Broadcast SSID Enable or disable SSID broadcast. Enable: the SSID will be visible to clients as an available Wi-Fi network. Disable: the SSID will not be visible as an available Wi-Fi network to clients –...
  • Page 199 WPS must be disabled to use additional authentication. MAC Address Filter: Restrict wireless clients access based on MAC address specified in the MAC filter table. MAC-RADIUS Authentication: Restrict wireless clients access based on MAC address via a RADIUS server, or password authentication via a RADIUS server.
  • Page 200 WEP: WEP (Wired Equivalent Privacy) is a basic encryption type. When selected, a notice will pop-up as exemplified below: Below is a figure showing the configurable fields: Key Length Select 64-bit or 128-bit. 128-bit is more secure than 64-bit and is recommended. Key Type Choose from “ASCII”...
  • Page 201 WPA-PSK: WPA-PSK is a secure wireless encryption type with strong data protection and user authentication, utilizing 128-bit encryption keys. Below is a figure showing the configurable fields: Fast Roaming Settings will also be shown:...
  • Page 202 802.11r Fast When your device roams from one AP to another on the Roaming same network, 802.11r uses a feature called Fast Basic Service Set Transition (FT) to authenticate more quickly. FT works with both preshared key (PSK) and 802.1X authentication methods.
  • Page 203 WPA Type Select from WPA/WPA2 Mixed Mode-EAP, WPA2-EAP or WPA-EAP. Encryption Select “TKIP/AES Mixed Mode” or “AES” encryption type. Type Key Renewal Specify a frequency for key renewal in minutes. Interval WPA-EAP must be disabled to use MAC-RADIUS authentication. 802.11r Fast Transition Roaming Settings Mobility_dom Specify the mobility domain (2.4GHz or 5GHz) Encryption Key Specify the encryption key...
  • Page 205 2.4GHz Select “WDS with AP” to use WDS with AP or “WDS Dedicated Functionality Mode” to use WDS and also block communication with regular wireless clients. When WDS is used, each AP should be configured with corresponding MAC addresses, wireless channel and wireless encryption method.
  • Page 206: 5Ghz 11Ac 11An

    Guest Network: Enable / disable guest network to allow clients to connect as guests. iii. 5GHz 11ac 11an The “5GHz 11ac 11an” menu allows you to view and configure information for your AP’s 5GHz wireless network across five categories: Basic, Advanced, Security, WDS &...
  • Page 207 Wireless Enable or disable the AP’s 5GHz wireless radio. When disabled, no 5GHz SSIDs will be active. Band Wireless standard used for the AP. Combinations of 802.11a, 802.11n & 802.11ac can be selected. Enable SSID Select how many SSIDs to enable for the 2.4GHz frequency Number from the drop down menu.
  • Page 208 When auto channel is disabled, configurable fields will change. Select a wireless channel manually: Channel Select a wireless channel. Channel Select the channel bandwidth: Bandwidth - 20MHz (lower performance but less interference) - Auto 40/20 MHz - Auto 80/40/20 MHz (automatically select based on interference level) Set a Basic Service Set (BSS) rate: this is a series of rates to BasicRateSet...
  • Page 209 Advanced: These settings are for experienced users only. Please do not change any of the values on this page unless you are already familiar with these functions. Changing these settings can adversely affect the performance of your AP. Guard Set the guard interval. A shorter interval can improve Interval performance.
  • Page 210 Multicast Set the transfer rate for multicast packets or use the “Auto” Rate setting. Tx Power Set the power output of the wireless radio. You may not require 100% output power. Setting a lower power output can enhance security since potentially malicious/unknown users in distant areas will not be able to access your signal.
  • Page 211 Airtime Airtime Fairness gives equal amounts of air time (instead of Fairness equal number of frames) to each client regardless of its theoretical data rate. Set airtime fairness to “Auto”, “Static” or “Disable”. When “Auto” is selected, the share rate is automatically managed.
  • Page 212 Security: The AP provides various security options (wireless data encryption). When data is encrypted, information transmitted wirelessly cannot be read by anyone who does not know the correct encryption key. It’s essential to configure wireless security in order to prevent unauthorised access to your network.
  • Page 213 SSID Selection Select which SSID to configure security settings for. Broadcast SSID Enable or disable SSID broadcast. When enabled, the SSID will be visible to clients as an available Wi-Fi network. When disabled, the SSID will not be visible as an available Wi-Fi network to clients –...
  • Page 214 5GHz WDS Mode Select “WDS with AP” to use WDS with AP or “WDS Dedicated Functionality Mode” to use WDS and also block communication with regular wireless clients. When WDS is used, each AP should be configured with corresponding MAC addresses, wireless channel and wireless encryption method.
  • Page 215 WDS VLAN VLAN Mode Specify the WDS VLAN mode to “Untagged Port” or “Tagged Port”. VLAN ID Specify the WDS VLAN ID when “Untagged Port” is selected above. WDS Encryption Encryption Select whether to use “None” or “AES” encryption and enter a pre-shared key for AES with 8-63 alphanumeric characters.
  • Page 216: Wps

    Wi-Fi Protected Setup is a simple way to establish connections between WPS compatible devices. WPS can be activated on compatible devices by pushing a WPS button on the compatible device or from within the compatible device’s firmware / configuration interface (known as PBC or “Push Button Configuration”).
  • Page 217 Check/uncheck this box to enable/disable WPS functionality. WPS must be disabled when using MAC-RADIUS authentication. Product PIN Displays the WPS PIN code of the device, used for PIN code WPS. You will be required to enter this PIN code into another WPS device for PIN code WPS.
  • Page 218: Radius

    RADIUS The RADIUS menu allows you to configure the AP’s external RADIUS server settings. A RADIUS server provides user-based authentication to improve security and offer wireless client control – users can be authenticated before gaining access to a network. The AP can utilize a primary and a secondary (backup) external RADIUS server for each of its wireless frequencies (2.4GHz &...
  • Page 219 RADIUS Type Select “Internal” to use the AP’s built-in RADIUS server or “external” to use an external RADIUS server. RADIUS Server Enter the RADIUS server host IP address. Authentication Set the UDP port used in the authentication protocol of the Port RADIUS server.
  • Page 220 Internal Server: The AP features a built-in RADIUS server which can be configured as shown below. Internal Server Check/uncheck to enable/disable the AP’s internal RADIUS server. EAP Internal Select EAP internal authentication type from the drop down Authentication menu. EAP Certificate Displays the EAP certificate file format: PCK#12(*.pfx/*.p12) File Format EAP Certificate...
  • Page 221 RADIUS Accounts: The internal RADIUS server can authenticate up to 256 user accounts. The “RADIUS Accounts” page allows you to configure and manage users. Enter a username in the box below and click “Add” to add the username. The webpage will display the message below:...
  • Page 222 If you choose to apply the settings (by clicking “Apply”), your system will restart the system with a message shown below: Press “Continue” to see the new user registration list. Select “Edit” to edit the username and password of the RADIUS account: User Name Enter the user names here, separated by commas.
  • Page 223: Mac Filter

    Delete Delete selected user from the user registration list. Selected Delete All Delete all users from the user registration list. MAC Filter MAC filtering is a security feature that can help to prevent unauthorized users from connecting to your AP. This function allows you to define a list of network devices permitted to connect to the AP.
  • Page 224 Add MAC Enter a MAC address of computer or network device manually Address e.g. ‘aa-bb-cc-dd-ee-ff’ or enter multiple MAC addresses separated with commas, e.g. ‘aa-bb-cc-dd-ee-ff,aa-bb-cc-dd-ee-gg’ Click “Add” to add the MAC address to the MAC address filtering table. Reset Clear all fields. MAC address entries will be listed in the “MAC Address Filtering Table”.
  • Page 225: Wmm

    vii. Wi-Fi Multimedia (WMM) is a Wi-Fi Alliance interoperability certification based on the IEEE 802.11e standard, which provides Quality of Service (QoS) features to IEE 802.11 networks. WMM prioritizes traffic according to four categories: background, best effort, video and voice. Configuring WMM consists of adjusting parameters on queues for different categories of wireless traffic.
  • Page 226 Queues automatically provide minimum transmission delays for video, voice, multimedia and critical applications. The values can be adjusted further manually: CWMin Minimum Contention Window (milliseconds): This value is input to the initial random backoff wait time algorithm for retry of a data frame transmission.
  • Page 227: Schedule

    viii. Schedule The schedule feature allows you to automate the wireless network for the specified time ranges. Wireless scheduling can save energy and increase the security of your network. Select “Add” to add a schedule. The webpage will display the message below: If you choose to apply the settings (by clicking “Apply”), your system will restart the system with a message shown below:...
  • Page 228 Settings page will be shown if “Continue” is selected: Check/uncheck the box of the desired SSID network, day of schedule and select the Start Time and End Time (using the dropdown menu). Select “Apply” to apply the settings, or “Cancel” to forfeit the schedule. Schedules will be shown in the Schedule List as exemplified below:...
  • Page 229: Vi-9. Local Settings

    3. Managed AP Mode: The device acts as a slave AP within the AP array. In Managed AP mode some functions of the AP will be disabled in this user interface and must be set using Edimax Pro NMS on the AP Controller.
  • Page 230 System Information: “System Information” page displays basic system information.
  • Page 231 System Model Displays the model number of the AP. Product Displays the product name for reference, which consists of Name “AP” plus the MAC address. Uptime Displays the total time since the device was turned on. System Time Displays the system time. Boot From Displays information for the booted hardware, booted from internal memory.
  • Page 232 Wireless 2.4GHz (5GHz) Status Displays the status of the 2.4GHz or 5GHz wireless (enabled or disabled). MAC Address Displays the AP’s MAC address. Channel Displays the channel number the specified wireless frequency is using for broadcast. Transmit Displays the wireless radio transmit power level as a Power percentage.
  • Page 233 Wireless Clients: “Wireless Clients” page displays information about all wireless clients connected to the AP on the 2.4GHz or 5GHz frequency. Refresh time Auto Refresh Select a time interval for the client table list to automatically Time refresh. Manual Click refresh to manually refresh the client table. Refresh 2.4GHz (5GHz) WLAN Client Table SSID...
  • Page 234 Wireless Monitor: “Wireless Monitor” is a tool built into the AP to scan and monitor the surrounding wireless environment. Select a frequency and click “Scan” to display a list of all SSIDs within range along with relevant details for each SSID. Wireless Monitor Site Survey Select which frequency (or both) to scan, and click “Scan”...
  • Page 235 Log: “System log” displays system operation information such as up time and connection processes. This information is useful for network administrators. Older entries will be overwritten when the log is full Save Click to save the log as a file on your local computer. Clear Clear all log entries.
  • Page 236 The following information/events are recorded by the log: Log (Category) Mount & un-mount Wireless Client Connected & disconnected Key exchange success & fail Authentication Authentication fail or successful Association Success or fail M1 - M8 messages WPS success Change Displays the total time the wireless client has been Settings connected to the AP System Boot...
  • Page 237: Management

    Management Admin: You can change the password used to login to the browser-based configuration interface here. It is advised to do so for security purposes. If you change the administrator password, please make a note of the new password. In the event that you forget this password and are unable to login to the browser based configuration interface.
  • Page 238 Advanced Settings Product Name Edit the product name according to your preference consisting of 1-32 alphanumeric characters. This name is used for reference purposes. Management Check/uncheck the boxes to enable/disable specified Protocol management interfaces (see below). When SNMP is enabled, complete the SNMP fields below.
  • Page 239 Date and Time: Configure the date and time settings of the AP here. The date and time of the device can be configured manually or can be synchronized with a time server. Date and Time Settings Local Time Set the AP’s date and time manually using the drop down menus.
  • Page 240 Time Zone Time Zone Select the time zone of your country/region. If your country/region is not listed, please select another country/region whose time zone is the same as yours. Press “Apply” to apply the configuration, or “Cancel” to forfeit the changes. Syslog Server Settings: The system log can be sent to a server.
  • Page 241 Syslog E-mail Settings: Syslog E-mail Settings E-mail Logs Check the box to enable/disable e-mail logs. E-mail Subject Specify the subject line of log emails. SMTP Server Specify the SMTP server address used to send log emails. Address SMTP Server Specify the SMTP server port used to send log emails. Port Sender E-mail Specify the sender email address.
  • Page 242: Advanced

    Advanced LED Settings: The AP’s LEDs can be manually enabled or disabled according to your preference. Power LED Select on or off. Diag LED Select on or off.
  • Page 243 The “Firmware” page allows you to update the firmware of the system. Updated firmware versions often offer increased performance and security, as well as bug fixes. Download the latest firmware from the Edimax website. Do not switch off or disconnect the AP during a firmware upgrade, as this could damage the device.
  • Page 244 Save/Restore Settings: The device’s “Save / Restore Settings” page enables you to save / backup the device’s current settings as a file to your local computer, and restore the AP to previously saved settings. Save Settings to PC Save Settings Encryption: If you wish to encrypt the configuration file with a password, check the “Encrypt the configuration file with a password”...
  • Page 245 Factory Default: If the AP malfunctions or is not responding, rebooting the device maybe an option to consider. If rebooting does not work, try resetting the device back to its factory default settings. You can reset the AP back to its default settings using this feature if the reset button is not accessible.
  • Page 246 Reboot: If the AP malfunctions or is not responding, rebooting the device may be an option to consider. You can reboot the AP remotely using this feature. Reboot Click “Reboot” to reboot the device. A countdown will indicate the progress of the reboot.
  • Page 247: Vi-10. Toolbox

    VI-10. Toolbox The Toolbox panel provides network diagnostic tools: Ping, Traceroute, and IP Scan. Network Connectivity Ping: Ping is a computer network administration utility used to test whether a particular host is reachable across an IP network and to measure the round-trip time for sent messages.
  • Page 248 Trace Route: Traceroute is a diagnostic tool for displaying the route (path) and measuring transit delays of packets across an IP network. Destination Enter the address of the host. Address Execute Click “Execute” to execute the traceroute command. IP Scan:...
  • Page 249: Vii. Wps

    VII. WPS WPS is a simple way to establish connections between WPS compatible devices. You can use the WPS button on CAX1800 webpage to activate the AP’s WPS function. 1. Go to “Wireless Settings”. 2. Tap “WPS”. 3. Check the checkbox of “Enable” and click “Apply” to turn on WPS function.
  • Page 250 5. Within two minutes, press the WPS button to activate WPS on your WPS-compatible wireless device.
  • Page 251: Viii. Reset

    VIII. Reset If you experience problems with your AP, you can reset the device back to its factory settings. 1. Press and hold the reset button on the AP for at least 10 seconds then release the button. You may need to use a pin or similar sharp object to push the reset button.
  • Page 252 COPYRIGHT Copyright  Edimax Technology Co., Ltd. all rights reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language or computer language, in any form or by any means, electronic, mechanical, magnetic, optical, chemical, manual or otherwise, without the prior written permission from Edimax Technology Co., Ltd.
  • Page 253 19.95 5150-5250 22.84 A simplified DoC shall be provided as follows: Article 10(9) Hereby, Edimax Technology Co., Ltd. declares that the radio equipment type AX1800 Dual-Band Ceiling Mount PoE AP is in compliance with Directive 2014/53/EU The full text of the EU declaration of conformity is available at the following internet address: http://www.edimax.com/edimax/global/...
  • Page 254 Safety This equipment is designed with the utmost care for the safety of those who install and use it. However, special attention must be paid to the dangers of electric shock and static electricity when working with electrical equipment. All guidelines of this and of the computer manufacture must therefore be allowed at all times to ensure the safe use of the equipment.
  • Page 255 EU Declaration of Conformity English: This equipment is in compliance with the essential requirements and other relevant provisions of Directive 2014/53/EU, 2014/35/EU. Français: Cet équipement est conforme aux exigences essentielles et autres dispositions de la directive 2014/53/EU, 2014/35/EU. Čeština: Toto zařízení je v souladu se základními požadavky a ostatními příslušnými ustanoveními směrnic 2014/53/EU, 2014/35/EU.
  • Page 256 Declaration of Conformity We, Edimax Technology Co., Ltd., declare under our sole responsibility, that the equipment described below complies with the requirements of the European Radio Equipment Directive. Equipment: AX1800 Dual-Band Ceiling Mount PoE AP Model No.: CAX1800 The following European standards for essential requirements have been followed:...
  • Page 257 Notice According to GNU General Public License Version 2 This product includes software that is subject to the GNU General Public License version 2. The program is free software and distributed without any warranty of the author. We offer, valid for at least three years, to give you, for a charge no more than the costs of physically performing source distribution, a complete machine-readable copy of the corresponding source code.
  • Page 258 intact all the notices that refer to this License and to the absence of any warranty; and give any other recipients of the Program a copy of this License along with the Program. You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee.
  • Page 259 Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it. 6.

Table of Contents