Page 1 Disclaimer User Guide AC2600 Enterprise Mesh Wi-Fi System...
Page 2 Copyright of the whole product as integration, including its accessories and software, belongs to IP-COM Networks Co., Ltd. No part of this publication can be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the prior written permission of IP-COM Networks Co., Ltd.
Page 3: Preface
Preface Thank you for choosing IP-COM. Please read this user guide before you start with AC1200 Enterprise Mesh WiFi System. Conventions The typographical elements that may be found in this document are defined as follows. Item Presentation Example Cascading menus >...
Page 4 Technical Support If you need more help, contact us by any of the following means. We will be glad to assist you as soon as possible. info@ip-com.com.cn www.ip-com.com.cn +86-755-27653089...
Page 5: Table Of Contents
Contents Preface ..................................ii Contents ..................................iv 1 Login ..................................1 1.1 Log in to the web UI ..............................1 1.1.1 Log in to the Cable-Free (Router Mode) device....................1 1.1.2 Log in to the Cable-Free (AP Mode) device ....................... 5 1.2 Log out of the web UI ...............................
Page 6 3.7.1 Overview................................68 3.7.2 Configure address reservation ......................... 70 3.7.3 Export/import your address reservation configuration ................... 74 3.8 Bandwidth control ..............................76 3.8.1 Overview................................76 3.8.2 Maunal................................77 3.8.3 Limit by group ..............................78 3.8.4 Example of configuring group-based control rules ..................81 3.9 Filter management ..............................
Page 7 4.1.1 Add secondary node devices ......................... 189 4.1.2 Check the device info ............................ 191 4.1.3 Manage the online devices ..........................192 4.1.4 Check the RF status ............................193 4.2 Wireless ................................194 4.2.1 Wireless settings ............................194 4.2.2 Max rate & isolation ............................195 4.2.3 MAC filters ..............................
Page 8: Login
Login Log in to the web UI For initial use of this device, you can refer to quick installation guide to complete the setup before entering the web. wizard If the device has been configured, please refer to the steps as follows. 1.1.1 Log in to the Cable-Free (Router Mode) device T ip...
Page 9 ----End T ip If the above page does not appear, try the following solutions to solve the problem: Ensure that the device is powered successfully. Ensure that your computer is connected to the LAN port of the device, and set the computer to obtain IP address and DNS server address automatically.
Page 10 Log in with your smart phone/ipad ◼ Take smart phones for example. Connect your smart phone to the WiFi network of the device. Start a browser on the phone, and visit www.ipcwifi.com. Enter the login password, and click Login. Chapter 1 Login...
Page 11 T ip If the above page does not appear, please try the following solution: Ensure that your smart phone is connected to the WiFi network. Ensure that you disable the mobile data. Reset the device and log in again. How to rest the device: After the system has started, press the RESET button with a sharp object for about 8 seconds.
Page 12: Log In To The Cable-Free (Ap Mode) Device
1.1.2 Log in to the Cable-Free (AP Mode) device T ip In Cable-Free (AP Mode), the PoE WAN/LAN1 port of the device is a LAN port. Log in with your computer ◼ Connect the computer to the LAN port of the device with an Ethernet cable. Set the Ethernet IP address of the computer to the same segment of the device.
Page 13 T ip If the above page does not appear, please try the following solution: Ensure the device is powered successfully. Ensure that the computer is connected to the LAN port of the device and that the Ethernet IP address of the computer is set to the same network segment as the IP address of the device. ----End Log in to the web UI successfully.
Page 14 T ip If the above page does not appear, please try the following solution: Ensure your phone has connected to the WiFi network of the device successfully. Ensure that you have disabled the mobile data. ----End Log in to the web UI successfully. See the following figure. Chapter 1 Login...
Page 15 Chapter 1 Login...
Page 16: Log Out Of The Web Ui
Log out of the web UI If you log in to the web UI of the device and perform no operation within 20 minutes, the device logs you out automatically. You can log out by clicking Logout on the upper right corner of the web UI as well. Chapter 1 Login...
Page 17: Web Ui
Web UI Web UI layout The web UI of the device consists of three sections, including the level-1, and level-2 navigation bar, and the configuration area. See the following figure. T ip Features and parameters in gray indicate that they are not available or cannot be changed under the current conditions.
Page 18: Frequently-Used Elements
Frequently-used elements The following table describes the frequently-used buttons available on the web UI of the device. Button Description It is used to save the configuration on the current page and enable the Save configuration to take effect. Cancel It is used to cancel the changes you did before. Refresh It is used to refresh the current page to see the latest configuration.
Page 19: Cable-Free (Router Mode)
Cable-Free (Router Mode) Overview In this mode, the device serves as a device, and provides internet access to form a separate cable-free network with other cable-free devices. Internet primary node: Cable-Free Cable-Free (Router Mode) Mesh Cable-Free secondary node Cable-Free secondary node Chapter 3 Cable-Free (Router Mode)
Page 20: System Status
System status In this section, you can: Check the physical connections. ◼ Add Mesh devices. ◼ Check device info. ◼ Manage online devices. ◼ Monitor traffic. ◼ 3.2.1 Check physical connections and device info You can check if the physical connections of the Cable-Free (Router Mode) node are proper, and the basic information of each node in the cable-free network.
Page 21 Check the information of cable-free primary node On the System Status page, click the icon . You can check the basic device info, operating state, LAN port state and WAN port state of cable-free primary node. Device info Parameter description Parameter Description It specifies the location information of the node, which helps you locate the node...
Page 22 Parameter Description Firmware Version It specifies the current version of the node. Operating status Parameter description Parameter Description Device Name It specifies the name of your node. It specifies the current working mode of the node. − Cable-Free Primary Node: The node serves as a primary node in the cable-free network, which is connected to wired network.
Page 23 LAN port status Parameter description Parameter Description It specifies the IP address of the LAN port of the node and also the management IP address of the node, which is 192.168.5.1 by default. LAN users can access this IP address to log into the management page of the LAN IP Address node.
Page 24 Parameter description Parameter Description Connection Type It specifies the internet connection type of the node’s WAN port. It specifies whether or not the node’s WAN port is plugged. If Unplugged appears, Status please check its physical connection. IP Address It specifies the IP address of the node’s WAN port. Subnet Mask It specifies the subnet mask of the node’s WAN port.
Page 25: Add Secondary Nodes
Cable-free link Parameter description Parameter Description It specifies the physical address of the interface used to form the Mesh link by Upstream Node MAC the Mesh AD hoc network link superior node. Cable-Free Link Quality It specifies the connection quality of cable-free links. It specifies the networking mode between this node and the upstream node/the Uplink Type/Strength signal strength of the upstream node received by this node.
Page 26: Monitor Traffic
Enter the SN (on the bottom label) of the Mesh device to be added. Click Save. ----End Wait until it is saved. The new-added Mesh device appears in the map, and you can click its icon to configure it. 3.2.3 Monitor traffic You can view the real-time upload and download bandwidth of the WAN port, and check the Chapter 3...
Page 27 basic information of a client, such as upload/download bandwidth, uptime and so on. Click System Status to enter the page, and click More Statistics. Parameter description Parameter Description It displays the name, IP address, and MAC address of clients connected to the device.
Page 28: Manage Online Devices
Parameter Description control their maximum upload/download bandwidth manually, refer to Manage Download Bandwidth online devices. Total Download It specifies the total download traffic utilized by each client. Uptime It specifies the connection time of each client. 3.2.4 Manage online devices You can edit the name of connected clients, control the upload and/or download bandwidth separately or in batch, and block a device from accessing your network.
Page 29 Control bandwidth of the connected clients Control bandwidth of online devices To limit the upload and/or download bandwidth of one or several devices, select a pre-defined value from the drop-down list menu of Upload Limit and/or Download Limit, or select Manual to specify a value manually.
Page 30 Chapter 3 Cable-Free (Router Mode)
Page 31: Internet Settings
Internet settings 3.3.1 Overview In this section, you can configure or change the internet settings to enable the device to access the internet. For the initial use of the device, or after resetting the device to factory settings, you can follow the quick setup wizard to complete the internet settings.
Page 32 Parameter description Parameter Description It specifies the way in which the device is connected to the internet. Connection Type The device supports PPPoE, Static IP, Dynamic IP, PPPoE Russia, PPTP/PPTP Russia, and L2TP/L2TP Russia. Refer to the table Choose your connection type for details.
Page 33 Parameter Description IP Address Subnet Mask These parameters are required only when your internet connection type is Static IP or when you set Obtain an IP address to Manual after the connection type is set to Default Gateway PPPoE Russia, PPTP/PPTP Russia, or L2TP/L2TP Russia. The Secondary DNS parameter is optional.
Page 34: Set Up Internet Connection
3.3.2 Set up internet connection T ip The parameters for accessing the internet are all provided by your ISP. Choose your connection type according to the table below: Available parameters Connection type PPPoE user name, PPPoE password, service name, and server name. PPPoE IP address, subnet mask, default gateway, primary DNS, and secondary DNS Static IP...
Page 35 ----End The device connects to the internet successfully when the Status shows Authenticated successfully. T ip If you fail to access the internet: − Check whether the parameters you entered are correct. − Try changing the parameters. Chapter 3 Cable-Free (Router Mode)
Page 36 Static IP Click Internet Settings to enter the page. Select Connection Type to Static IP. Enter the IP Address, Subnet Mask, Default Gateway, Primary DNS, and Secondary DNS (optional) provided by your ISP. Click Save at the bottom of the page. ----End The device connects to the internet successfully when the Status shows Connected.
Page 37 T ip If you fail to access the internet: − Check whether the parameters you entered are correct. − Try changing parameters. Dynamic IP Click Internet Settings to enter the page. Select Connection Type to Dynamic IP. Click Save at the bottom of the page. ----End The device connects to the internet successfully when the Status shows Connected.
Page 38 T ip If you fail to access the internet: − Check whether the connection type you selected is correct. − Try changing parameters. PPPoE Russia Click Internet Settings to enter the page. Select Connection Type to PPPoE Russia. Enter the PPPoE Username, PPPoE Password provided by your ISP. If the Server Name, Service Name, IP address and related parameters are also provided, enter them in the corresponding input box as well.
Page 39 ----End The device connects to the internet successfully when the Status shows Connected. Chapter 3 Cable-Free (Router Mode)
Page 40 T ip If you fail to access the internet: − Check whether the parameters you entered are correct. − Try changing the parameters. PPTP/PPTP Russia Click Internet Settings to enter the page. Select Connection Type to PPTP/PPTP Russia. Enter the PPTP Server Address, User Name, and Password provided by your ISP. If the IP address and related parameters are also provided, enter them in the corresponding input box as well.
Page 41 T ip If you fail to access the internet: − Check whether the parameters you entered are correct. − Try changing the parameters. L2TP/L2TP Russia Click Internet Settings to enter the page. Select Connection Type to L2TP/L2TP Russia. Enter the L2TP Server Address, User Name, and Password provided by your ISP. If the IP address and related parameters are also provided, enter them in the corresponding input box as well.
Page 42 ----End Wait for the device to complete rebooting. The device connects to the internet successfully when the Status shows Connected. Chapter 3 Cable-Free (Router Mode)
Page 43 T ip If you fail to access the internet: − Check whether the parameters you entered are correct. − Try changing the parameters. Chapter 3 Cable-Free (Router Mode)
Page 44: Wireless
Wireless 3.4.1 Wireless settings The device supports WiFi networks of three bands at most. By default, the device wirelessly establishes a cable-free network. One 5 GHz wireless band is dedicated to establishing a cable-free link. The 2.4 GHz wireless band and another 5 GHz wireless band are used for terminal device access.
Page 45: Max Rate & Isolation
Parameter Description It is used to unify SSIDs for 2.4 GHz and 5 GHz WiFi networks. When this function is enabled, the 5 GHz SSID and password will be synchronized with the 2.4 GHz SSID and password, and cannot be changed. When users’ devices connect to the WiFi network, they will automatically connect to the WiFi with the best network quality.
Page 46: Mac Filters
Parameter description Parameter Description SSID WiFi name of the corresponding WiFi network. With this function enabled, clients connected to the corresponding WiFi network cannot communicate with clients connected to other networks of this Isolate this network device, leading to higher WiFi network security. By default, this function is disabled.
Page 47 Parameter description Parameter Description It specifies all WiFi networks already enabled by the node. SSID T ip If you unify the SSIDs of 2.4 GHz and 5 GHz bands, the corresponding WiFi networks only display one SSID here. MAC Address It specifies the WiFi network’s MAC filter modes.
Page 48 Parameter Description Parameter MAC Filters List It specifies the wireless filtering rules you configured. It specifies the MAC address of the client to which the rule MAC Address applies. It specifies the brief description you set for the corresponding Remark MAC address.
Page 49 Click Add. The Add configuration window appears. Configure the following settings on the Add window. Enter the MAC address of the wireless client to be controlled in MAC Address input ⚫ box. (Optional) Specify a description for the client in Remark input box. ⚫...
Page 50 Chapter 3 Cable-Free (Router Mode)
Page 51 Example of configuring MAC filters Network requirement An enterprise uses EW12 to set up a LAN to meet the following requirement: Only the purchasing staff is allowed to connect to the WiFi network (Purchase) to access the internet. Assume that the MAC address of the purchasing staff’s computer is CC:3A:61:71:1B:6E and the SSID is Purchasing.
Page 52 Set the following parameters. Enter CC:3A:61:71:1B:6E in the MAC Address input box. ⚫ Enter Purchasing staff in the Remark input box. ⚫ Select Purchase from the drop-down list menu of the Effective Network. ⚫ Click Save. ----End Verification Only the computer with the MAC address of CC:3A:61:71:1B:6E can connect to the WiFi network (Purchase), and other devices are blocked.
Page 53: Advanced
3.4.4 Advanced In this section, you can configure the advanced parameters such as transmit power, network mode, deployment mode, and air interface scheduling. Click Wireless > Advanced to enter the page. Parameter description Parameter Description It is used to enable or disable the Advanced settings for 2.4 GHz WiFi 2.4 GHz WiFi Network network.
Page 54 Parameter Description It specifies the transmit power of this device. Transmit Power A higher value leads to wider WiFi coverage. However, decreasing the value properly increases performance and security of the WiFi network. It specifies the WiFi network mode (also called 802.11 mode, radio mode, or wireless mode) of the node.
Page 55 Parameter Description It specifies the channel in which this device operates. Select an idle channel in the ambient environment to prevent interference. Channel Auto indicates that this device automatically switches to a channel rarely used in the ambient environment to prevent interference. It cannot be modified when the device works in Cable-Free (Router mode).
Page 56: Guest Network
Parameter Description Mandatory Rate It specifies the basic rate sets for normal operation of the device. You can adjust the mandatory rates to restrict low-rate clients accessing the WiFi network and improve the internet experience of other clients. − Mandatory Rate: The clients can connect to the node only when they Optional Rate meet the mandatory rate required by the node.
Page 57 Parameter description Parameter Description Enable Guest It is used to enable or disable the guest network. Network It is used to unify SSIDs for 2.4 GHz and 5 GHz guest WiFi networks. − Enable: The wireless name of the node’s guest network of 2.4 GHz Unify 2.4&5 and 5 GHz is the same, only one WiFi network name is displayed.
Page 58: Node Management
Node management 3.5.1 Overview In this section, you can centrally manage other IP-COM branded cable-free devices in the same network. The network application topology is shown below. Internet Cable-Free primary node: Cable-Free (Router Mode) Mesh Mesh Internet Mesh Cable-Free secondary node...
Page 59: Wireless Policy
Enable node management ◼ This function is enabled by default. To modify the function state, navigate to Node Management > Wireless Policy to enter this page. 3.5.2 Wireless policy In this section, you are allowed to configure SSID policy, RF policy, optimization policy and maintenance policy.
Page 60 Parameter description Parameter Description It specifies the name of SSID policies. Policy Name Note The SSID policy name cannot be duplicated. SSID It specifies a WiFi network name. A maximum of 31 bytes is supported. It specifies the maximum number of wireless clients allowed to connect to the WiFi network.
Page 61 Chapter 3 Cable-Free (Router Mode)
Page 62 Parameter description Parameter Description It specifies the name of a RF policy. Policy Name Note the RF policy names cannot be duplicated. It is used to enable or disable the wireless function at the corresponding band. The available network modes for a 2.4 GHz WiFi network include 11b, 11g, 11b/g, 11b/g/n and 11n+256 QAM.
Page 63 Parameter Description It is used to select a channel, Auto or Not Configured for a node. Not Configured indicates that the channel configuration is not delivered to nodes, and nodes use their own channel configurations. Please select a less-used channel in the ambient Channel environment to reduce interference.
Page 64 Parameter description Parameter Description It specifies the name of an optimization policy. Policy Name Note The optimization policy names cannot be duplicated. With the function enabled, a node assigns downlink transmission time equally, enabling the high-speed users and low-speed users to obtain the same downlink Airtime Fairness transmission time which helps high-speed users transmit more data.
Page 65: Node Group
Parameter description Parameter Description It specifies the name of a maintenance policy. Policy Name Note The maintenance policy names cannot be duplicated. − Reboot Schedule: It specifies the reboot schedule function of nodes. You can configure the reboot time and date. Maintenance Type −...
Page 66 Set the parameters and click Save. ----End Parameter description Parameter Description It specifies the name of group policies. Policy Name Note The group policy names cannot be duplicated. No. of SSIDs It is used to select the number of SSIDs. Range: 1 to 4. The default is 1. It is used to select an SSID policy to be involved.
Page 67: Maintenance
3.5.4 Maintenance Parameter description Parameter Description It is used to divide nodes into a node group and reference the same Group configuration to improve the management efficiency. It is used to delete nodes from the node group. Nodes which are not in the Ungroup group will resynchronize the configuration of the Cable-Free (Router Mode) node’s wireless module.
Page 68 Parameter Description Policy Delivery indicates that the operating channel policy is delivered based on the node group policy. It specifies the number of wireless clients that connect to the corresponding Online User band of the WiFi network of a node. Status It displays the current status of a node.
Page 69 Parameter` Description It specifies the bandwidth of a node's wireless channel. With high channel bandwidth, it is easier to obtain a higher transmission rate, but the transmission is less penetrating and the transmission distance is shorter. − 20 MHz: Nodes can only use 20 MHz channel bandwidth. −...
Page 70: Smart Optimization
Smart optimization The Smart Optimization function is used to optimize the entire mesh network. Click Smart Optimization to enter this page. 3.6.1 Wired networking Overview The cable-free device supports two networking modes: cable-free networking and wired networking. Cable-free networking is adopted by default. Cable-free networking ◼...
Page 71 Internet Cable-free primary node Switch Cable-free secondary node Cable-free secondary node Cable-free networking is simpler and faster. Network wiring of a wired network should meet some requirements. There are still some advantages as follows. The mesh links are more stable with higher speed and longer transmission distance. −...
Page 72 Internet Cable-free primary node Switch Wired mesh link 5 GHz Mesh link Cable-free secondary node Cable-free secondary node Cable-free secondary node Configure wired networking T ip When the wired networking is enabled, the wireless networking function will be disabled automatically. Cable-free device that has connected to the network wirelessly will be disconnected.
Page 73: Wireless Optimization
Parameter description Parameter Description Model It specifies the model and version of the node. It specifies the remark for nodes. You can change it in the Node Remark Management > Maintenance page. IP Address It specifies the IP address of the node. MAC Address It specifies the physical address of the node.
Page 74 Parameter Description With this function enabled, the node leads a client to connect to the WiFi network at the frequency band with better quality (strong signal strength and low channel occupation Band Steering ratio) when the current 5 GHz or 2.4 GHz connection quality of the client is poor (week signal strength and high channel occupation ratio).
Page 75: Address Reservation
Address reservation 3.7.1 Overview The address reservation function always allows a host, such as a computer, on LAN to receive the same IP address each time when they connect to the DHCP server. It ensures that the static IP address-based functions take effect normally, such as: Bandwidth control >...
Page 76 Parameter description Parameter Description It is used to reserve the corresponding IP addresses for the selected Reserve hosts. Quick Host Name It specifies the name of the corresponding host. Address Reservation IP Address It specifies the IP address of the corresponding host. MAC Address It specifies the MAC address of the corresponding host.
Page 77: Configure Address Reservation
Parameter Description Quick Click Reserve to reserve the corresponding IP address for the host. Address Reservation Status After the reservation, it displays Reserved. Reservation It specifies the name of the corresponding host, or the description of Host Name the host. IP Address It specifies the IP address reserved for the specified host.
Page 78 Locate the host you want to reserve a static IP address, which is Test1 in this example, and click Reserve next to it. ----End The Reservation Status of host named Test1 is changed into Reserved, and displayed on the lower part of the page. See the following figure. Chapter 3 Cable-Free (Router Mode)
Page 79 Method 2 ◼ Choose Address Reservation to enter the page. Select hosts you want to reserve a static IP address, and click the Reserve button. Or if you want to select all hosts on the list, check the checkbox next to Host Name. ----End The Reservation Status of hosts are changed into Reserved, and displayed on the lower part of the page.
Page 80 T ip If you reserve an easy-to-remember IP address for an online host, the client gets the reserved IP addresses after being reconnected. Configuration procedure Click Address Reservation, and move to the Manual Address Reservation configuration area. Click Add. The Add configuration window appears. Enter the IP Address and MAC Address, which is 192.168.5.100/00:23:24:E8:14:6B in this example.
Page 81: Export/Import Your Address Reservation Configuration
----End The Reservation Status of hosts are changed into Reserved, and displayed on the lower part of the page. See the following figure. 3.7.3 Export/import your address reservation configuration This function allows you to export the address reservation configuration you set to your local computer for backup, and import the configuration file you backed up to the device, relieving you from repeated laborious efforts for configuration.
Page 82 ----End A file named staicIP.csv is exported to the default download folder on your local computer. Import configuration file to your device Click Browse, and upload the address reservation configuration file you have backed up to your local computer. Click the Import button. ----End When Imported successfully appears, your address reservation configurations have been imported to your device.
Page 83: Bandwidth Control
Bandwidth control 3.8.1 Overview The bandwidth control function allows you to assign proper bandwidth to connected clients, ensuring that the limited bandwidth is used to effectively access resources over the internet. Choose Bandwidth Control to enter the page. See the following figure. Parameter description Parameter Description...
Page 84: Maunal
3.8.2 Maunal Set the Control Mode to Manual. See the following figure. Parameter description Parameter Description It specifies the basic information about the user's device, including the device name reported by the device, how to connect to the cable-free network, IP address and MAC address.
Page 85: Limit By Group
Unit: KB/s to specify a value manually. To control upload and download rate of online/offline devices in batch Click Limit All, specify the maximum upload/download rate for both Online Devices and Offline Devices on the configuration window, and click Save to apply your settings. 3.8.3 Limit by group This function allows users within the IP group to share or have exclusive access to the...
Page 86 Click Bandwidth Control, and move to the Control Mode configuration area. Set Control Mode to Limit By Group, the following configuration area appears. Click Save at the bottom of the page. Click +Add to add a bandwidth control policy. Set required parameters. Click Save.
Page 87 Parameter description Parameter Description It specifies the IP group used by the rule to which the rule applies. This IP group IP Group should be configured on the Filter Management > IP Group/Time Group page (IP Address Group) first. It specifies the time group used by the rule on which the rule takes effect. This Time Group Time group should be configured on the Filter Management >...
Page 88: Example Of Configuring Group-Based Control Rules
3.8.4 Example of configuring group-based control rules Networking requirement An enterprise uses EW12 to set up a LAN to meet the following requirement: During business hours (08:30 to 18:00 every workday), each computer with an IP address ranging from 192.168.5.14 to 192.168.5.100 is allocated to 1 Mbps (1 Mbps = 128 KB/s) upload and 1 Mbps download bandwidth.
Page 89 Set an IP address group. Navigate to Filter Management > IP Group/Time Group. Set the IP address group shown in the following figure. Set a bandwidth control rule. On the Bandwidth Control page, set Control Mode to Limit By Group. Click Save at the bottom of the page.
Page 90 Click +Add. The Add configuration window appears. Configure the following parameters: IP Group: Click the drop-down list to select the IP group that the rule applies to, which is Purchasing in this example. Time Group: Click the drop-down list to select the time group in which the rule will be applied, which is workday in this example.
Page 91 ----End The rule is added successfully. See the following figure. Verification During business hours from 08:30 to 18:00 every weekday, each computer with an IP address ranging from 192.168.5.2 to 192.168.5.100 is allocated 1 Mbps (128 KB/s) uploading and downloading bandwidth, while the bandwidth allocated to the computers with an IP address ranging from 192.168.5.101 to 192.168.5.254 is not limited.
Page 92: Filter Management
Filter management This function allows you to configure MAC address-based, IP address-based, and URL-based filter rules to control what clients can or cannot access what websites. 3.9.1 IP group/time group Some functions, such as MAC address filter, IP address filter, URL filter, Limit by group in bandwidth control and Custom multi-WAN policy, need to take effect based on IP group or time group.
Page 93 Navigate to Filter Management > IP Group/Time Group, and locate the Time Group Settings configuration area. Click Add. The Add configuration window appears. Set the required parameters. T ip Duplicate group names are disallowed. 00:00~00:00 indicates a whole day. Click Save. ----End The rule is added successfully.
Page 94 Add IP groups Navigate to Filter Management > IP Group/Time Group, and locate the IP Group Settings configuration area. Click Add. The Add configuration window appears. Set the required parameters. T ip Duplicate group names are disallowed. Click Save. ----End The rule is added successfully.
Page 95: Mac Address Filter
T ip An IP address group that has been referenced cannot be deleted. 3.9.2 MAC address filter Overview You can create MAC address-based rules to decide whether clients can access the internet through the node on specific time. Both Blacklist (Forbid access to the internet) and Whitelist (Allow access to the internet) based on MAC addresses are supported.
Page 96 Parameter description Parameter Description MAC Address Filter It specifies whether to enable this function. It specifies MAC address filter types. − Whitelist: Clients with this filter type will be added in the Whitelist, indicating that they can only access the internet during the specified period. Filter Type −...
Page 97 Create a MAC address filter rule. Navigate to Filter Management > MAC Address Filter, enable the function and click Save. Click +Add. The configuration window appears. Select a filter type. Select the Time Group you added. Enter the MAC address of a device to which this rule applies. (Optional) Specify a description for the rule in the Remark input box.
Page 98 ----End Example of adding MAC address filter rule(s) Network requirement An enterprise uses EW12 to set up a LAN to meet the following requirement: During business hours (08:30 to 18:00 on workday), only one purchasing department staff is allowed to access the internet. Assume that the MAC address of the purchaser’s computer is CC:3A:61:71:1B:6E.
Page 99 Create a MAC address filter rule. Navigate to Filter Management > MAC Address Filter, enable the function and click Save. Click +Add. The configuration window appears. Select Whitelist. Select workday from the Time Group drop-down list. Enter CC:3A:61:71:1B:6E in the MAC Address input box. Enter Purchaser in the Remark input box.
Page 100 Click Save at the bottom of the page to apply your settings. ----End The rule is added successfully. See the following figure. Chapter 3 Cable-Free (Router Mode)
Page 101: Ip Address Filter
Verification During 08:30 to 18:00 on workdays, only the computer’s MAC address is CC:3A:61:71:1B:6E can access the internet. 3.9.3 IP address filter Overview You can create IP address-based rules to decide whether clients can access the internet through the node on what time. Both Blacklist (Forbid access to the internet) and Whitelist (Allow access to the internet) based on IP addresses are supported.
Page 102 Parameter Description IP Address It specifies the IP addresses corresponding to the devices. It is used to select a time group for the rule. Time Group It should be configured on the Filter Management > IP Group/Time Group page. It is used to select a time group for the rule. IP Group It should be configured on the Filter Management >...
Page 103 Set an IP group. Navigate to Filter Management > IP Group/Time Group. Click +Add on the IP Group Settings part, and add an IP group. Create an IP address filter rule. Navigate to Filter Management > IP Address Filter, enable the function and click Save. Click +Add.
Page 104 Click Save at the bottom of the page to apply your settings. ----End The rule is added successfully. See the following figure. Chapter 3 Cable-Free (Router Mode)
Page 105 Example of configuring IP address filter rule(s) Network requirement An enterprise uses EW12 to set up a LAN to meet the following requirement: During business hours (08:30 to 18:00 on workday), the finance department is not allowed to access the internet. Assume that the IP addresses of the financial department’s computer is from 192.168.5.2 to 192.168.5.100.
Page 106 Add an IP group. Navigate to Filter Management > IP Group/Time Group. Add an IP group shown in the following figure. Create an IP address filter rule. Navigate to Filter Management > IP Address Filter, enable the function and click Save. Click +Add.
Page 107 Select workday from the Time Group drop-down list. Select Finance from the IP Group drop-down list. Enter Finance in the Remark input box. Click Save. Click Save at the bottom of the page to apply your settings. ----End The rule is added successfully. See the following figure. Chapter 3 Cable-Free (Router Mode)
Page 108: Port Filter
Verification During 08:30 to 18:00 on workdays, the financial department’s computers cannot access the internet. 3.9.4 Port filter Overview The application protocols involved in many services on the internet have specific port numbers, which range from 0 to 1023 and are generally assigned to specific services. Navigate to Filter Management >...
Page 109 Parameter Description It specifies the rules can be operated as follows: : Click it to edit the rule. Operation : Click it to delete the rule. Create a port filter rule Add a time group Add an IP group Create a port filter rule Add a time group.
Page 110 Add a port filter rule. Select an IP group. Select a time group. Enter the port range. Select the protocols type. Click Save. Click Save at the bottom of the page to apply your settings. ----End Chapter 3 Cable-Free (Router Mode)
Page 111 Example of configuring port filter Networking requirement An enterprise uses EW12 to set up a LAN to meet the following requirement: During business hours (08:30 to 18:00 on workday), finance department is not allowed to browse websites (the default port number for web services is 80). Solutions The port filter combined with IP address reservation can meet this requirement.
Page 112 Add an IP group. Navigate to Filter Management > IP Group/Time Group. Add an IP group as shown in the following figure. Add a port filter rule. Navigate to Filter Management > Port Filter, enable the function and click Save. Click +Add.
Page 113 Select Finance from the IP Group drop-down list. Enter 80 to 80 in the Ports input box. Select All from the Protocols drop-down list. Click Save. Click Save at the bottom of the page to apply your settings. ----End The rule is added successfully. See the following figure. Chapter 3 Cable-Free (Router Mode)
Page 114: Url Filter
Verification During 08:30 to 18:00 on workdays, computers whose IP addresses range from 192.168.5.2 to 192.168.5.100 cannot access the internet. 3.9.5 URL filter Overview The URL filter prevents LAN users from accessing specified types of website for controlling internet accessibility of LAN users so that they will not spend time on websites irrelevant to their duties.
Page 115 Parameter Description IP Address It specifies the IP addresses corresponding to the devices. It is used to select a time group for the rule. Time Group It should be configured on the Filter Management > IP Group/Time Group page. It is used to select a time group for the rule. IP Group It should be configured on the Filter Management >...
Page 116 Add an IP group. Navigate to Filter Management > IP Group/Time Group. Click +Add on the IP Group Settings part, and add an IP group. Add a URL group. Click the URL Management button, The URL Management configuration page appears. Click New.
Page 117 (Optional) Specify a brief description in the Remark input box. − Click Save. − Create a URL filter rule. Click +Add. The configuration window appears. Select a Filter Type. − Select the IP Group you add. − Select the Time Group you add. −...
Page 118 Click Save. − ----End The rule is added successfully. See the following figure. Chapter 3 Cable-Free (Router Mode)
Page 119 To remove an added URL category, move the cursor to the name of the group, click , and click OK on the pop-up window. The category in use cannot be removed. Example of configuring URL filter Networking requirement An enterprise uses EW12 to set up a LAN to meet the following requirement: During business hours (08:30 to 18:00 on workday), staff are disallowed to access social medias including Facebook, YouTube, and Tumblr.
Page 120 Add an IP group. Navigate to Filter Management > IP Group/Time Group. Add an IP group as shown in the following figure. Add a URL rule. Navigate to Filter Management > URL Filter, enable the function and click Save. Click the URL Management button. The URL Management configuration page appears. Click New.
Page 121 Create a URL filter rule. Click +Add. The configuration window appears. Select Block access only. − Select the IP Group, which is Finance in this example. − Select the Time Group, which is workday in this example. − (Optional) Specify a description for the rule in the Remark input box. −...
Page 122 ----End The rule is added successfully. See the following figure. Chapter 3 Cable-Free (Router Mode)
Page 123 Verification During 08:30 to 18:00 on workdays, clients with the IP address ranging from 192.168.5.2 to 192.168.5.100 cannot access Facebook, YouTube, and Tumblr. Chapter 3 Cable-Free (Router Mode)
Page 124: More
3.10 More 3.10.1 LAN settings You can view and modify the LAN IP address of the node, and configure DHCP server here. Navigate to More > LAN Settings to enter this page. The LAN IP address is also the login IP address of the node. The default LAN IP address is 192.168.5.1.
Page 125 Confirm the message in the pop-up window, and click Save. ----End Wait until the progress bar completes. You will be redirected to the login page. Use the new LAN IP address or domain name (www.ipcwifi.com) log in to the web UI of node later.
Page 126: Wan Parameters
Click Save. ----End Parameter description Parameter Description Start IP It specifies the start/end IP address of the IP address pool of the DHCP server. End IP It specifies the validity period of an IP address assigned by the DHCP server to a client. When half of the lease time has elapsed, the client sends a DHCP request to the DHCP server to renew the lease time.
Page 127 WAN speed By default, the cable-free node uses Auto Negotiation, which is appropriate for almost all cases. If the node’s WAN port is correctly connected to the Ethernet cable and the Ethernet cable works normally, but the corresponding WAN port indicator is not on. Or after being connected to the Ethernet cable, the WAN port lights on after a while (more than 5 seconds).
Page 128 Some websites are inaccessible, or secure websites cannot be displayed properly, such as ◼ online banking websites, or PayPal. Email service suspends, or servers, such as FTP/POP servers, are inaccessible. ◼ Commonly-used MTU value in different scenarios: MTU (Bytes) Scenario 1500 It is the most common value for non-PPPoE connections and non-VPN connections.
Page 129 MAC address If the node still cannot connect to the internet when the network is set up, it is possible that the ISP has tied the internet account information to a MAC address (physical address). You can try to solve the problem with MAC address cloning (method 1 or method 2). Method 1: Use the computer which can access the internet for cloning Connect the computer which can access the internet with an Ethernet cable.
Page 130: Static Routing
Method 2: Use another computer for cloning Check the MAC address of the computer that can access the internet, which is C8:9C:DC:60:54:69 in this example, and note it down. Connect a computer to the node. Start a web browser on the computer, and visit 192.168.5.1. Log in to the web UI, and navigate to More >...
Page 131 Parameter description Parameter Description It specifies the IP address of the destination network. The default is 0.0.0.0. 0.0.0.0 indicates the default route. Destination Network T ip If the destination address of a packet cannot be found in the route table, the node uses the default route to forward the packet.
Page 132 Configure static routing T ip If a static route conflicts with a user-defined multi-WAN policy, the static route takes preference over the policy. Navigate to More > Static Routing to enter the page. Click +Add. The configuration page appears. Set the parameters and click Save. ----End Example of configuring static routing Network requirement...
Page 133 Internet Intranet 172.16.100.0/24 Enterprise LAN gateway Internet WAN gateway IP address: 192.168. 0.100 IP address: 192.168.0.200 Switch 192.168.0.150 EW12 Configuration procedure Navigate to More > Static Routing, and click +Add. Set the parameters in the Add window as follows. Enter the Destination Network, which is 172.16.100.0 in this example. Enter the Subnet Mask, which is 255.255.255.0 in this example.
Page 134: Port Mirroring
Select the Interface, which is WAN1 in this example. and click Save. ----End The rule is added successfully. See the following figure. Veification Computers in the LAN can access the internet and the intranet simultaneously. 3.10.4 Port mirroring Overview Port mirroring enables data from the node WAN port (mirrored port) to be copied to the specified port (mirroring port).
Page 135: Remote Web Management
Configure port mirroring Navigate to More > Port Mirroring to access the configuration page. Set Port Mirroring to Choose Mirroring Port and Mirrored Port as required. Click Save to apply your settings. ----End 3.10.5 Remote WEB management Overview Generally, the web UI of the node can only be accessed on devices that are connected to the node in wired or wireless manner.
Page 136 Parameter description Parameter Description Remote WEB MGMT It specifies whether or not to enable the remote WEB MGMT function. It specifies the IP address of the remote host which is allowed to access the web UI of the node. − Any IP: It indicates that all internet users can access the web UI of the node.
Page 137 Select Specific IP in the Remote IP bar. Enter the IP address of the technician’s computer, which is 202.105.88.77 in this example. Select Remote Access Type to Domain Name. Click Save to apply your settings. Click Copy and send the Remote Access Address to the IP-COM technician. Chapter 3 Cable-Free (Router Mode)
Page 138: Ddns
----End Verification IP-COM technician with a computer IP address 202.105.88.77 can use http://cxdea66w.web.ip-com.com.cn:8080 to access the web UI of the node remotely. 3.10.6 DDNS Overview DDNS is short for Dynamic Domain Name Server. It detects when your IP address changes and maps your dynamic IP address to a static domain name.
Page 139 Parameter description Parameter Description DDNS It specifies whether or not to enable the DDNS function. DDNS Provider It specifies the DDNS provider. The node supports noip, dyndns, oray, and gnway. It specifies the user name used to log in to a DDNS provider. It is registered on the User Name website of the provider.
Page 140 ----End Example of configuring DDNS Networking requirement An enterprise uses EW12 to deploy its WLAN network. The node is connected to the internet. Now the enterprise establishes a web server and wants to be accessed by internet users. Thus, when employees are not in the enterprise, they can also access the web server. Assume that the external port is 80.
Page 141 WAN1 Internet user Cable-free (Router Mode) node Web server Computer Smart phone Configuration procedure Reserve an IP address for the host of the web server. Click Address Reservation to reserve the IP address. Refer to Address reservation for detailed configuration procedures. Configure port forwarding.
Page 142 Configure DDNS. Register a domain name. Select the DDNS provider from the drop-down list menu, which is noip in this example, and click Register next to the menu to register a domain name. Set the DDNS-related parameters. Log in to the web UI of the node, navigate to More > DDNS, and enable this DDNS function.
Page 143 Users on the internet can successfully access the Intranet server by using Intranet Service Application Layer Protocol Name://WAN port domain name: extranet port, which is http://cxdea66w.web.ip-com.com.cn:8080 in this example. If the outer network port is remained default when users configure port forwarding, the access address does not have to add the outer network port number.
Page 144 T ip If you cannot access the web server after configuration, try the following methods to resolve the problem: Make sure the node’s WAN port gets the public network IP address. The commonly used address categories of IPV4 include A, B and C. The private network addresses of A are 10.0.0.0-10.255.255.255. The private network address of class B address is 172.16.0.0-172.31.255.255;...
Page 145: Port Forwarding
3.10.7 Port forwarding Overview By default, internet users cannot access any service on any of your local hosts. If you want to enable internet users to access a particular service on a local host, enable this function and specify the IP address and service port of the local host. This can also prevent local network from being attacked.
Page 146 Configure port forwarding T ip A dynamic IP address will disable the port forwarding rule. To use this function and make the rule always effective, set a reserved IP address for the specified local host. Some programs, such as firewall, antivirus software, and security guard, may hinder internet users to access the local service.
Page 147 Example of configuring a port forwarding rule Networking requirement An enterprise uses EW12 to deploy its WLAN network. The node is connected to the internet. Now the enterprise establishes a web server and wants to enable its employees to access the web server through the internet.
Page 148 Configuration procedure Reserve the IP address to the host. Navigate to Address Reservation to reserve the IP address. Refer to Address reservation detailed configuration procedures. Configuring port forwarding. Navigate to More > Port Forwarding to enter the configuration page. Click +Add. The Add configuration window appears. Set the Internal Server IP to 192.168.5.100.
Page 149 The rule is added successfully. See the following figure. Verification Internet users can use http://202.105.11.22:80 to access the web server. http indicates intranet service protocol name. ◼ 202.105.11.22 is the IP address of the WAN1 port. ◼ 80 is the external port number. ◼...
Page 150: Dmz Host
T ip If you cannot access the web server after configuration, try the following methods to resolve the problem: − Make sure the router WAN port gets the public network IP address. The commonly used address categories of IPV4 include A, B and C. The private network addresses of A are 10.0.0.0-10.255.255.255. The private network address of class B address is 172.16.0.0-172.31.255.255;...
Page 151 Parameter description Parameter Description DMZ Host It specifies whether to enable the DMZ function. IP address of DMZ It specifies the IP address of the DMZ host. Host It is used to specify whether to filter the VPN port if DMZ is enabled for a host. By default, it is disabled.
Page 152 Solutions You can use the DMZ host and address reservation to meet this requirement. Assume that the related information is shown as below: IP address of the web server: 192.168.5.100 − MAC address of the host that runs the web server: C8:9C:DC:60:54:69 −...
Page 153 Configure DMZ host. Navigate to More > DMZ Host, and enable this function of the corresponding WAN port. Enter the IP address of the DMZ host, which is 192.168.5.100 in this example. Enable Filter VPN Port. Click Save to apply your settings. ----End Verification Internet users can use...
Page 154 T ip If you cannot access the web server after configuration, try the following methods to resolve the problem: − Make sure the device’s WAN port gets the public network IP address. The commonly used address categories of IPV4 include A, B and C. The private network addresses of A are 10.0.0.0-10.255.255.255. The private network address of class B address is 172.16.0.0-172.31.255.255;...
Page 155: Upnp
3.10.9 UPnP This function enables the cable-free node to implement automatic port forwarding by automatically detecting UPnP-based application programs and enabling ports on the router for the applications. Navigate to More > UPnP to enter the page. By default, this function is enabled. See the following figure.
Page 156: Security Settings
3.10.10 Security settings The Cable-Free (Router Mode) supports ARP Defense, DDoS Defense, IP Attack Defense, and Block WAN Ping. ARP Defense: This function can identify the ARP spoofing in the local network, and record ◼ the MAC addresses of the attack. DDoS Defense: DDoS attack, that is Distributed Denial of Service Attack, makes network ◼...
Page 157 Chapter 3 Cable-Free (Router Mode)
Page 158 Parameter description Parameter Description ARP Defense It specifies whether to enable the ARP defense function. ARP Defense ARP Broadcast It specifies the interval for sending ARP inquiry messages. Interval It specifies that if ICMP request packets from a same host in LAN ICMP Flood received by the node exceed the threshold within 1 second, the Threshold...
Page 159: Vpn Server
3.10.11 VPN server Overview The Cable-Free (Router Mode) node supports PPTP server and L2TP server. To enter the configuration page, navigate to More > VPN Server and enable this function. Parameter description Parameter Description It is used to enable or disable the PPTP/L2TP VPN server function. VPN Server It specifies the VPN server type that the Cable-Free (Router Mode) node supports, including:...
Page 160 Parameter Description It specifies the WAN port of the node for setting up a VPN connection. It specifies whether to enable 128-bit data encryption. This parameter only appears when PPTP is selected. Encryption The value of this parameter must be consistent with that of the client. Otherwise, the client is unable to communicate with the server.
Page 161 T ip The peer VPN client should use the same type. Select the egress WAN port of the tunnel between a PPTP/L2TP server and PPTP/L2TP clients. T ip If the egress WAN port you selected is set to a DMZ host, enable the port’s Filter VPN Port first by navigating to More >...
Page 162 ----End Added successfully. See the following figure. Chapter 3 Cable-Free (Router Mode)
Page 163 Parameter description Parameter Description It specifies whether the PPTP/L2TP server of the device is Server Status enabled. It specifies the VPN server type of the node. PPTP and L2TP are Type supported. It specifies the WAN port of the node for setting up a VPN WAN Port connection.
Page 164: Vpn Client
3.10.12 VPN client Overview To enter the configuration page, navigate to More > VPN Client. By default, this function is disabled. After you enable the function, the following page appears. Parameter description Parameter Description Client Type It specifies VPN server type of the node. PPTP and L2TP are supported. It specifies WAN port of the PPTP/L2TP client for setting up a connection with the PPTP/L2TP server.
Page 165 Parameter Description It specifies password for the corresponding PPTP/L2TP account. It is Password assigned by the VPN server to be connected. It specifies whether to enable 128-bit data encryption. The value of this parameter must be consistent with that of the server. Otherwise, Encryption the client is unable to communicate with the server.
Page 166: Ipsec
Set required parameters. T ip − Client Type, WAN, and Encryption should be identical with its peer VPN server. − Click on the upper-right corner on the page to get the detailed explanation to the parameters here. Click Save to apply your settings. ----End 3.10.13 IPSec...
Page 167 features: A triplet {SPI, Destination IP address, Security protocol identifier} is used as a unique − An SA specifies the protocol, algorithm, and key for processing packets. − Each IPsec SA is unidirectional with a life cycle. − An SA can be created manually or generated automatically using internet Key −...
Page 168 Parameters Description It specifies the WAN port IP address or domain name of the remote gateway of the IPSec tunnel. Remote Gateway T ip When it is set to be a domain name, DDNS should be configured on the remote gateway so that the IPSec tunnel is not affected when the WAN port IP address of the remote gateway changes.
Page 169 ----End Parameter description Parameters Description IPSec It specifies whether to enable the IPSec function. It specifies the local WAN port assigned to the IPSec function. The IP address of the WAN port must be set as the value of Remote Gateway of the IPSec peer. It specifies the encapsulation mode for IPSec data.
Page 170 Parameters Description It specifies the tunnel protocol of the IPSec rule. By default, it is ESP. − ESP: It indicates the Encapsulating Security Payload (ESP) protocol for verifying data integrity and encrypting data. If a packet processed using this protocol is intercepted during transmission, it is difficult for the intercepting party to obtain the real information contained in the packet.
Page 171 Management Protocol), SKEME and Oakley protocols. ISAKMP: ISAKMP (Internet Security Association and Key Management Protocol) is a − key exchange architecture or framework used within IPSec, which manages the exchange of keys between both endpoints. SKEME: A secure and versatile key exchange protocol for key management over −...
Page 172 Parameter description Parameters Description It displays Shared key, indicating that IPSec peers negotiated a key string shared Authentication Type between them. It specifies a pre-shared key used for negotiation. The key consists of a maximum Pre-shared Key of 128 characters and must be the same as that specified on the peer gateway. It specifies whether to enable the DPD Detection.
Page 173 Parameter description Parameters Description It used to select the exchange mode in IKE phase I, which should be the same as that of peer gateway. Main: In this mode, the Phase 1 parameters are exchanged in multiple rounds with encrypted authentication information Aggressive: In Aggressive mode, the Phase 1 parameters are exchanged in a single message with unencrypted authentication information.
Page 174 Key Negotiation: Manual ◼ When the Key Negotiation is set to Manual, you can see the following page. Parameter description Parameters Description When the Tunnel Protocol is set to ESP, the ESP encryption algorithm is required. The device supports the following algorithms: −...
Page 175 Parameters Description ESP/AH When the Tunnel Protocol is set to ESP or AH, the corresponding authentication key is Authentication required. Both IPSec communication parties should have the same key. SPI (Security Parameter Index) is used to identify an IPSec SA with the IP address and security protocol of the remote gateway.
Page 176 Network topology Branch Router1 Router2 Switch Switch Internal server Configuration procedure T ip During the configuration, if you need to modify advanced settings for IPSec connections, keep the settings of the two routers consistent. When the Key Negotiation Method is set to Manual Setup, the encryption algorithms, encryption keys, and authentication algorithms at IPSec peers must be the same.
Page 177 Set the related parameters, and click Save. Select an encapsulation mode, which is Tunnel in this example. − Enter a tunnel name, which is IPSec_1 in this example. − Enter the remote gateway IP address, which is 202.105.88.77 in this example. −...
Page 178 It is added successfully. See the following figure. Set the Router2. Navigate to More > IPSec to enter the page. Click +Add. The configuration area appears. Set the related parameters, and click Save. Select an encapsulation mode, which is Tunnel in this example. −...
Page 179 ----End It is added successfully. See the following figure. Verification After the preceding configuration, employees at the branch and HQ can remotely access resources on the branch and HQ LAN resources through the internet in a secure manner. Chapter 3 Cable-Free (Router Mode)
Page 180: Maintenance
3.11 Maintenance 3.11.1 Reboot If a parameter does not take effect or the device does not work properly, you can try rebooting the device to resolve the problem. Navigate to Maintenance > Reboot. The prompt window appears. Confirm the message and click Reboot.
Page 181 When upgrading, do not power off the device. Download the upgrade file to your local computer. Visit www.ip-com.com.cn, and search the product model in the searching bar to enter the product details page. Locate the latest firmware, download it to your computer, and unzip it.
Page 182 ----End After the progress bar completes, you can login in again and check the current software version number of the device on the Upgrade or System Status page to confirm whether the upgrade is successful. Upgrade the device online When the device is connected to the internet, it checks whether there is a later firmware version, and displays the detected information on the page.
Page 183: Reset
3.11.3 Reset Overview If the internet is inaccessible for unknown reasons, or you forget the login password, you can reset the device to resolve the problems. The device supports two resetting methods: Reset the device using web UI ◼ Reset the device using the Reset button ◼...
Page 184: Password Manager
With the LED indicator blinking, hold down the Reset button using a paper clip (or something with a pointed end) for about 8 seconds, then release it when the LED indicator lights solid on. The device is reset to the factory settings successfully when the LED indicator blinks again. 3.11.4 Password manager Overview...
Page 185: Custom Reboot
administrator account you set just now, and click Login to log in to the device. 3.11.5 Custom reboot Overview This device allows you to reboot it on schedule to maintain its performance. Navigate to Maintenance > Custom Reboot to enter the page. Parameter description Parameters Description...
Page 186: Backup/Restore
Set the time and date when the device performs rebooting. Click Save to apply your settings. ----End The device performs rebooting regularly on the time and date you set here. 3.11.6 Backup/Restore Overview The Backup function is used to export the current configuration of the device to your computer. The Restore function is used to import a configuration file to the device.
Page 187: System Log
Back up your current configuration Navigate to Maintenance > Backup/Restore to enter the configuration page. Click Backup. The system exports a RouterCfm.cfg file to your local computer. ----End Restore your previous configuraiton Navigate to Maintenance > Backup/Restore to enter the configuration page. Click Browse, and upload the configuration file ending with .cfg.
Page 188 View system log T ip System logs will be cleared each time the device reboots or resets. A maximum of 300 logs will be recorded. The system only keeps 300 logs that are generated the most recently. The device records three log types: System Log, Attack Log, and Error Log. You can view all logs or filter the logs to view as needed.
Page 189: Diagnostic Tool
Export system log Click Export Log, the log file will be downloaded to your local computer. 3.11.8 Diagnostic tool Overview You can execute Ping/Traceroute command on this page. Ping: Used to check whether the connection is correct and the connection quality. ◼...
Page 190 Execut Ping command to detect connection quality Assume that you need to detect the connectivity between the device and the Bing website. Navigate to Maintenance > Diagnosis Tool to enter the configuration page. Select Ping from the drop-down list menu of the Tools. Enter the IP address or domain name of the ping target, which is cn.bing.com in this example.
Page 191 Enter the IP address or domain name of the traceroute target, which is cn.bing.com in this example. Click Start. ----End Wait a moment. The traceroute result will be displayed in the result box. See the following figure. Click Stop to end the process as required. Chapter 3 Cable-Free (Router Mode)
Page 192: System Time
3.11.9 System time Overview This function is used to set the system time of your device. To make the time-related functions effective, ensure that the system time of the device is set correctly. The device supports: Synchronize with internet time (default) ◼...
Page 193 Parameters Description Time Zone It specifies the time zone where the device is deployed. After configuration, navigate to the System status page to check whether it is synchronized. Set system time manually In this method, you can manually specify a system time for the device. When Manual option is selected, the related parameters are shown as follows.
Page 194: Function Center
3.11.10 Function center The function center groups all functions of the device into Enabled Function and Disabled Function, giving you a clearly insight into the functions that are enabled or disabled. In addition, move the mouse pointer to a specific function and click it, you will be directed to the corresponding configuration page.
Page 195: Cable-Free (Ap Mode)
Cable-free (AP mode) When working in Cable-free (AP mode), the device serves as an AP. It can provide Mesh wireless network coverage with other cable-free devices. See the following topology. Internet Router Switch Cable-free primary node Cable-Free (AP mode) Mesh Mesh Mesh Cable-free secondary node...
Page 196: System Status
System status In this section, you can: Add secondary node devices. ◼ Check device info. ◼ Manage online devices. ◼ Check the RF status. ◼ Click System Status to enter this page. 4.1.1 Add secondary node devices The cable-free primary node can detect the secondary node devices in factory settings automatically.
Page 197 Wait a moment. The secondary node device is added to the mesh network successfully. Chapter 4 Cable-Free (AP Mode)
Page 198: Check The Device Info
4.1.2 Check the device info On the System Status page, click the icon , the Device Info window pops up. The Device Info window consists of two parts: device information and operating status. Device info Parameter description Parameter Description Device Name It specifies the name of your device.
Page 199: Manage The Online Devices
Operating status Parameter description Parameter Description Uptime It specifies the time that has elapsed since the device was started last time. Operating Mode It specifies the current working mode of the device. Connected Devices It specifies the number of devices connected to the device currently. It specifies the IP address of the AP, which is managed IP address as well.
Page 200: Check The Rf Status
4.1.4 Check the RF status In this section, you can check the name, MAC address, and network enabled status of each WiFi network on the node. Chapter 4 Cable-Free (AP Mode)
Page 201: Wireless
Wireless In this module, you are allowed to view and edit SSIDs (WiFi names) and WiFi passwords, configure other settings of 2.4 GHz and 5 GHz WiFi networks separately, hide your WiFi networks so that nearby wireless clients cannot detect them, and specify how many wireless clients can connect to a WiFi network.
Page 202: Max Rate & Isolation
Parameter description Parameter Description Enable WiFi It is used to enable/disable the corresponding WiFi network of the device. Network1/2/3 SSID It specifies the WiFi name of the corresponding WiFi network. It specifies the password for wireless internet connection. You are recommended to use the combination of digits, letters and special characters for higher security.
Page 203: Mac Filters
Parameter description Parameter Description SSID It specifies the WiFi name of the corresponding WiFi network. With this function enabled, clients connected to different WiFi networks of this device cannot communicate with each other, leading to higher WiFi Isolate this network network security.
Page 204 Parameter description Parameter Description It lists all the WiFi networks that the device supports. SSID T ip If you unify the SSIDs of 2.4 GHz and 5 GHz bands, the corresponding WiFi networks only display one SSID here. MAC Address It specifies the modes you can perform on the corresponding Filter WiFi network.
Page 205 Create a MAC filter rule. Click Add. The Add configuration window appears. Set up the following parameters. Enter the MAC address of the client in MAC Address input box. ⚫ Specify a description for the client in Remark input box. ⚫...
Page 206 ----End After it is saved successfully, you can see it in the MAC Filters List. Example of configuring MAC filters Network requirement An enterprise uses EW12 to set up a LAN to meet the following requirement: Only the purchasing staff is allowed to connect to the WiFi network (Purchase) to access the internet.
Page 207 Create a MAC filter rule. Click Add. The Add configuration window appears. Set the following parameters. Enter CC:3A:61:71:1B:6E in the MAC Address input box. − Enter Purchase in the Remark input box. − Select Purchase from the drop-down list menu of the Effective Network. −...
Page 208: Advanced
----End After the rule is saved, you can see it in the MAC Filters List. Verification Only the computer with the MAC address of CC:3A:61:71:1B:6E can connect to the WiFi network (Purchase), and other devices are blocked. 4.2.4 Advanced This page allows you to configure the advanced parameters such as transmit power, network mode, deployment mode, and air interface scheduling.
Page 209 Parameter description Parameter Description It specifies transmit power of this device. Unit: dBm. Transmit Power A higher value leads to wider WiFi coverage. However, decreasing the value properly increases performance and security of the WiFi network. It specifies country or region where this device is located. Select your country Country/Region or region to ensure that this device complies with the channel regulations.
Page 210 Parameter Description It specifies the WiFi network mode (also called 802.11 mode, radio mode, or wireless mode) of the node. A proper network mode enables the clients to get the maximum transmission rate and compatibility. Available options for 2.4 GHz band: −...
Page 211 Parameter Description It specifies the channel in which this device operates. Select one idle channel in the ambient environment to prevent interference. Auto indicates that this Channel device automatically changes to a channel rarely used in the ambient environment to prevent interference. It is used to select the channel bandwidth to accommodate higher transmission speed.
Page 212: Spectrum Analysis
4.2.5 Spectrum analysis In this section, you can check the number of WiFi networks and channel utilization of each channel, and select a channel with low utilization as the working channel of the node to improve the wireless transmission efficiency. A channel utilization under green paint indicates an idle channel.
Page 213: Smart Optimization
Smart optimization The Smart Optimization function is used to optimize the entire mesh network. Click Smart Optimization to enter this page. 4.3.1 Wired networking Overview The cable-free device supports two networking modes: cable-free networking and wired networking. Cable-free networking is adopted by default. Cable-free networking ◼...
Page 214 Internet Cable-free primary node Switch Cable-free secondary node Cable-free secondary node Cable-free networking is simpler and faster. Network wiring of a wired network should meet some requirements. There are still some advantages as follows. The mesh links are more stable with higher speed and longer transmission distance. −...
Page 215 Internet Switch Cable-free primary node Wired mesh link 5 GHz Mesh link Cable-free secondary node Cable-free secondary node Cable-free secondary node Configure wired networking T ip When the wired networking is enabled, the wireless networking function will be disabled automatically. Cable-free device that has connected to the network wirelessly will be disconnected.
Page 216: Wireless Optimization
Parameter description Parameter Description Model It specifies the model and version of the node. It specifies the remark for nodes. You can change it in the Node Management > Remark Maintenance page. IP Address It specifies the IP address of the node. MAC Address It specifies the physical address of the node.
Page 217 Parameter Description With this function enabled, the node leads a client to connect to the WiFi network at the frequency band with better quality (strong signal strength and low channel occupation Band Steering ratio) when the current 5 GHz or 2.4 GHz connection quality of the client is poor (week signal strength and high channel occupation ratio).
Page 218: More
More This chapter describes how to configure LAN settings and QVLAN. 4.4.1 LAN settings LAN IP In this section, you can configure LAN settings. Parameter description Parameter Description It specifies the IP address of the LAN port of the device. LAN IP Address If you change this IP address, you can log in again only with the new IP address.
Page 219 When the DHCP server is enabled, the page appears as follows. Parameter description Parameter Description It specifies the switch of the function. DHCP Server specifies to enable the function, specifies to disable the function. Start IP It specifies the range of IP addresses that a DHCP server can assign. The start IP address is 192.168.5.100 and the end IP address is 192.168.5.200 by default.
Page 220: Remote Web Management
Parameter Description It specifies the primary DNS server address for the node. If the exit node has DNS Primary DNS proxy function, enter the LAN port IP address of the exit node here. Otherwise, enter the IP address of the correct DNS server. It specifies the secondary DNS server address for the node.
Page 221: Qvlan
Parameter Description It specifies the effective time the DHCP server assigns IP addresses to LAN devices, which is 30 minutes by default. When the IP address expires: − If the device is still connected to the cable-free network, the device Lease Time will automatically renew and continue to occupy the IP address.
Page 222 Parameter description Parameter Description QVLAN It is used to enable or disable the VLAN function. PVID It specifies the VLAN ID of a trunk port by default, which is 1 here. It specifies the management VLAN ID of the node. The default value is 1 in here. Management VLAN After the management VLAN is modified, your computer is required to be connected to the new management VLAN to manage the node.
Page 223 Parameter Description It is used to select the Ethernet port (wired LAN port) that will be the trunk port of the node, which is POE/LAN1 and LAN2 by default. The trunk port allows all VLANs to pass through it. Trunk Port Note When you want to enable the QVLAN, select at least one LAN port as the trunk port.
Page 224 Internet Router • Internal server PoE Switch PoE WAN/LAN Cable-free primary node Guests’ WiFi network: internet VLAN2 Cable-Free(AP Mode) Employees’ WiFi network: oa VLAN3 Manager's WiFi network: VIP VLAN4 Configuration procedure Configure cable-free devices. Log into the web UI of cable-free devices, navigate to More > QVLAN to enter this page. Switch Modify the VLAN ID of each WiFi network in 2.4 GHz band.
Page 225 Configure the switch. Divide IEEE 802.1q VLANs through the switch. Port connected to VLAN ID Port Properties PVID Cable-free primary node 1,2,3,4 Trunk Internal server Trunk Router Trunk Any other ports not mentioned can be left at the default settings. Please refer to the operation instruction of the switch for the specific configuration method.
Page 226 Internal server: Port connected to VLAN ID Port Properties PVID Switch Trunk Please refer to the operation instructions of the corresponding equipment for specific configuration methods. ----End Verication Users connected to the Internet can only access the internet. Users connected to oa can only access the Intranet.
Page 227: Maintenance
Maintenance This chapter describes how to reboot, reset, and upgrade the device, how to modify the login password, how to back up your current configuration and restore the device to previous configuration, how to view the system logs and functions that are enabled or disabled, how to set up system time, and how to use the Ping and Traceroute commands.
Page 228 When upgrading, do not power off the device. Download the upgrade file to your local computer. Visit www.ip-com.com.cn, and search the product model in the searching bar to enter the product details page. Locate the latest firmware, download it to your computer, and unzip it.
Page 229 ----End Upgrade the rotuer online When the device is connected to the internet, it checks whether there is a later firmware version, and displays the detected information on the page. You can choose whether to upgrade. If you want to upgrade the firmware, click Upgrade. Chapter 4 Cable-Free (AP Mode)
Page 230: Reset
4.5.3 Reset Overview If the internet is inaccessible for unknown reasons, or you forget the login password, you can reset the cable-free device to resolve the problems. The device supports two resetting methods: Reset the using web UI ◼ device by Reset the using the Reset button ◼...
Page 231: Password Manager
With the LED indicator blinking, hold down the Reset button using a paper clip (or something with a pointed end) for about 8 seconds, then release it when the LED indicator lights solid on. The device is reset to the factory settings successfully when the LED indicator blinks again. 4.5.4 Password manager Overview...
Page 232: Custom Reboot
4.5.5 Custom reboot Overview This device will reboot on schedule automatically to maintain its performance. Navigate to Maintenance > Custom Reboot to enter the page. Parameter description Parameters Description Custom Reboot It specifies whether to enable the Custom Schedule function. Maintenance Type It specifies the method of rebooting the device.
Page 233: Backup/Restore
Click Save to apply your settings. ----End Reboot the device on cyclic Navigate to Maintenance > Custom Reboot to enter the configuration page. Set the cyclic when the device performs rebooting. Click Save to apply your settings. ----End The device performs rebooting regularly on the time and date you set here. 4.5.6 Backup/Restore Overview...
Page 234 performance of your device decreases because of an improper configuration, or after you restore the device to factory settings, you can use this function to restore the configuration that has been backed up. Navigate to Maintenance > Backup/Restore to enter the configuration page. Back up your current configuration Navigate to Maintenance >...
Page 235: System Log
4.5.7 System log System logs record information about system running status and the operation you performed on it. When system malfunctions occur, you can use system log for troubleshooting. Navigate to Maintenance > System Log to enter the page. View system log T ip −...
Page 236: Diagnostic Tool
Export system log Click Export Log, the log file will be downloaded to your local computer. 4.5.8 Diagnostic tool Overview You can execute Ping/Traceroute command on this page. Ping: It is used to check whether the connection is correct and the connection −...
Page 237 Execut Ping command to detect connection quality Assume that you need to detect the connectivity between the device and the Bing website. Navigate to Maintenance > Diagnosis Tool to enter the configuration page. Select Ping from the drop-down list menu of the Tools. Enter the IP address or domain name of the ping target, which is cn.bing.com in this example.
Page 238 Wait a moment. The ping result will be displayed in the result box. See the following figure. Execut Traceroute command to detect the route selection Assume that you need to detect the path from the device to Bing website. Navigate to Maintenance > Diagnosis Tool to enter the configuration page. Select Traceroute from the drop-down list menu of the Tools menu.
Page 239: System Time
Click Stop to end the process as required. 4.5.9 System time Overview This function is used to set the system time of your device. To make the time-related functions effective, ensure that the system time of the device is set correctly. The device supports: Synchroniz with internet time (default) ◼...
Page 240 After configuration, navigate to the System status to check whether it is synchronized. Parameter description Parameters Description It specifies an interval at which the device synchronizes its system time with Sync Interval the time server on the internet. By default, the device performs synchronization every 0.5 hours.
Page 241 Parameter description Parameters Description Date Manually enter the date and time as needed. Time It allows you to synchronize the system time of the device with the system time of the management computer. Sync with Local PC Time Click this button, the device auto-fills the system time of your management computer.
Page 242: Appendix
Appendix Default parameters Parameters Default Login IP address 192.168.5.1 Login Administrator password admin Working mode Cable-free (Router Mode) IP address 192.168.5.1 settings Subnet mask 255.255.255.0 DHCP server Enable Start IP address 192.168.5.31 DHCP End IP address 192.168.5.254 server Lease time 0.5 hrs Primary DNS 192.168.5.1...
Page 243 Parameters Default Capacity-oriented mode Enable Fast roaming Disable System time Sync with internet time Appendix Default parameters...
Page 244 Acronyms and abbreviations Acronym or Abbreviation Full Spelling Advanced Encryption Standard APSD Automatic Power Save Delivery Address Resolution Protocol Data Encryption Standard DHCP Dynamic Host Configuration Protocol Domain Name System DDNS Dynamic Domain Name Server DDoS Distributed Denial of Service Dead Peer Detection Greenwich Mean Time HTTP...
Page 245 Acronym or Abbreviation Full Spelling Transmission Control Protocol User Datagram Protocol Uniform Resource Locator UPnP Universal Plug and Play Wide Area Network Wi-Fi multi-media Appendix Acronyms and abbreviations...

IP-COM AC2600 User Manual

Quick Links

Need help?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for IP-COM AC2600

Summary of Contents for IP-COM AC2600

Table of Contents