Page 1
User Guide AX3000 Wi-Fi 6 In-Wall Access Point Pro-6-IW iiiii iiiiiiiiiiiiiiiiiiiiiii iiiiiiiiiiiiiii V1.0...
Page 2
IP-COM does not assume any liability that may occur due to the use or application of the product or circuit layout(s) described herein. Every effort has been made in the...
Page 3
Preface Thank you for choosing IP-COM! This user guide walks you through all functions on the Web UI of AX3000 Wi-Fi 6 In-Wall Access Point. All the screenshots herein, unless otherwise specified, are taken from Pro-6-IW. Conventions The typographical elements that may be found in this document are defined as follows.
Page 4
+86-755-27653089 info@ip-com.com.cn www.ip-com.com.cn Revision History IP-COM is constantly searching for ways to improve its products and documentation. The following table indicates any changes that might have been made since the user guide was released. Version Date Description V1.0...
Contents 1 Log in to the Web UI ........................ 1 1.1 Login ............................1 1.2 Logout ............................3 2 Web UI ............................ 4 2.1 Layout ............................4 2.2 Common Buttons ........................5 3 Quick Setup ..........................6 3.1 AP Working Mode ........................6 3.1.1 Overview ..........................
Version V1.0 Log in to the Web UI Login Use an Ethernet cable to connect the computer to the Access Point or the switch connected to the AP. Configure the IP address of the computer to one in a same network segment with the AP. For example, if IP address of the AP is 192.168.0.254, then the IP address of the computer can be Set to 192.168.0.X (X ranges from 2 to 253 and is not occupied by other devices) and subnet mask can be set to 255.255.255.0.
Page 9
Version V1.0 Start a browser on the computer and visit the IP address of the AP (192.168.0.254 by default). Enter the login user name and password, and click Login. ---End If the above page does not appear, try the following solutions: Ensure that all your Ethernet cables are properly connected.
Version V1.0 Logout After you log in to the web UI of the AP, if no operations are performed during the login timeout interval, the system will log out automatically. In addition, you can click Logout on the upper right corner to safely exit from the web UI.
Version V1.0 Web UI Layout The web UI is composed of four parts: first-level navigation bar, second-level navigation bar, tab, and configuration area, as shown below. Functions or parameters displayed in gray on the web UI are not supported yet or cannot be modified under the current configurations.
Version V1.0 Common Buttons Buttons commonly used on the web UI are illustrated as below. Common button Description Refresh the current page. Save configurations on the current page and make the configurations take effect. Cancel the unsaved configurations on the current page and restore to previous configurations.
Version V1.0 Quick Setup In the Quick Setup module, you can set up the AP in a quick way to enable internet access for your wireless devices such as smartphones and tablets. The AP supports working modes of and Client+AP. AP Working Mode 3.1.1 Overview...
Version V1.0 3.1.2 Quick Setup Before configuration, ensure that the upstream router has been connected to the internet. Click Quick Setup. Choose the Radio Band you wish to configure, for example, 2.4GHz. Set Working Mode to AP. Set SSID (Primary SSID).
Version V1.0 Client+AP Working Mode 3.2.1 Overview In this mode, the AP is wirelessly bridged to an upstream device (such as a wireless router or AP) to extend the wireless network coverage of the upstream device. See the following topology. Router Internet PoE switch...
Page 16
Version V1.0 Select the wireless network to be extended from the wireless network list that appears. If no wireless network is found, choose Wireless > RF Settings, ensure that Wireless Network is − selected, and try scanning wireless network again. After a wireless network to be extended is selected, the SSID, security mode, and channel of the −...
Page 17
Version V1.0 ---End After the configuration, you can select the SSID on your wireless devices such as smartphones and enter your wireless network password to connect to the wireless network of the AP and access the internet through the AP. If you do not know the SSID and key of the AP, you can check the SSID and key of the AP on the Wireless >...
Version V1.0 Status System Status To access the page, choose Status > System Status. The page displays the system and LAN port status of the AP.
Page 19
Version V1.0 Parameter description Parameter Description It specifies the name of the AP. Device Name A unique AP name helps quickly identify the AP. You can change the AP name on the LAN Setup page. It specifies the time that has elapsed since the AP was Uptime started last time.
Version V1.0 Wireless Status To access the page, choose Status > Wireless Status. This page displays general radio status and SSID status of the AP. By default, the page displays the information of 2.4 GHz wireless status. To view the wireless status of 5 GHz, click 5 GHz. Parameter description Parameter Description...
Version V1.0 Traffic Statistics To access the page, choose Status > Traffic Statistics. This page displays the statistics about historical packets of the wireless networks of the AP. By default, the page displays the traffic statistics information of 2.4 GHz. To view information about 5 GHz, click 5 GHz.
Version V1.0 Client List To access the page, choose Status > Client List. This page displays information about the wireless clients connected to the wireless networks of the AP. You can also block certain connected clients. Parameter description Parameter Description Select the SSID from the drop-down list menu to view client information SSID connected to it.
Version V1.0 Internet Settings To access the page, choose Internet Settings > LAN Setup. This page enables you to view the MAC address of the LAN port of the AP and set the name, Ethernet Mode, IP obtaining method, and other related parameters of the AP. Parameter description Parameter Description...
Page 24
Version V1.0 Parameter Description APs are required in the network. If Address Type is set to DHCP (Dynamic IP Address), you can log in to the web UI of the AP only with the IP address assigned to the AP by the DHCP server. The IP address is specified on the client list of the DHCP server.
Version V1.0 Wireless SSID settings 6.1.1 Overview To access the page, choose Internet Settings > LAN Setup. This module enables you to set SSID-related parameters of the AP. Parameter description Parameter Description It specifies the SSID to be configured. APs of this series support 8 SSIDs for the 2.4 GHz radio band and 8 SSIDs for SSID the 5 GHz radio band.
Page 26
Version V1.0 Parameter Description It specifies the status of the selected SSID. Status Primary SSID is enabled by default while other SSIDs are disabled by default. You can enable them as needed. It specifies the broadcast status of the SSID you selected. When this parameter is set to Disable, the AP does not broadcast the SSID and nearby wireless clients cannot detect the SSID.
Page 27
Version V1.0 Security Mode A wireless network uses radio, which is open to the public, as its data transmission medium. If the wireless network is not protected by necessary measures, any client can connect to the network to use the resources of the network or access unprotected data over the network. To ensure communication security, transmission links of wireless networks must be encrypted for protection.
Page 28
Version V1.0 Parameter description Parameter Description It specifies the authentication type for the WEP security mode. The options include Open, Shared. The options share the same encryption process. − Open: It specifies that authentication is not required and data exchanged is encrypted with WEP.
Page 29
Version V1.0 Parameter description Parameter Description It specifies the personal or pre-shared key security mode. − WPA-PSK: It indicates that the wireless network corresponding to the selected SSID is encrypted with WPA-PSK. − WPA2-PSK: It indicates that the wireless network corresponding to the Security Mode selected SSID is encrypted with WPA2-PSK.
Page 30
Version V1.0 Parameter description Parameter Description The WPA and WPA2 options are available for network protection with a RADIUS server. − WPA: It indicates that the wireless network corresponding to the selected Security Mode SSID is encrypted with WPA. − WPA2: It indicates that the wireless network corresponding to the selected SSID is encrypted with WPA2.
Page 31
Version V1.0 WPA2-PSK&WPA3-SAE ◼ It indicates that the AP is compatible with both WPA3-SAE and WPA2-PSK security modes. WPA2 is still widely used currently. To allow wireless devices that do not support WPA3 to access the WPA3 network, the AP supports the WPA3-SAE transition mode, which means that the mixed encryption mode of WPA2-PSK and WPA3-SAE is adopted to ensure both compatibility and security.
Version V1.0 6.1.2 Example of Setting up an Open Wireless Network Networking requirement In a hotel lounge, guests can connect to the wireless network without a password and access the internet through the WiFi network. Router Internet PoE switch SSID: FREE...
Page 33
Version V1.0 Configuration procedure Assume that the second SSID of the 2.4 GHz radio band of the AP is to be configured. Choose Wireless > SSID. Select the second SSID from the SSID drop-down list box. Set Status to Enable. Change the value of SSID to FREE.
Version V1.0 6.1.3 Example of Setting up a Wireless Network Encrypted with Networking requirement A hotel wireless network with a certain level of security must be set up through a simple procedure. In this case, WPA-PSK, WPA2-PSK or Mixed WPA/WPA2-PSK security mode is recommended. See the following figure.
Page 35
Version V1.0 Click Save. ---End Verification Wireless devices can connect to the hotel wireless network with the password qtW7J5cA.
Version V1.0 6.1.4 Example of Setting up a Wireless Network Encrypted with WPA or WPA2 Networking requirement A highly secure wireless network is required and a RADIUS server is available. In this case, WPA or WPA2 mode is recommended. Assume that the IP address of the RADIUS server is 192.168.0.200, the Key is qtW7J5cA, and the port number for authentication is 1812.
Page 37
Version V1.0 Configuration procedure I. Configure the AP Assume that the second SSID of the AP, the WPA2 security mode, and AES encryption algorithm are used. Choose Wireless > SSID. Select the second SSID from the SSID drop-down list box. Set Status to Enable.
Page 38
Version V1.0 II. Configure the RADIUS server Windows 2003 is used as an example to describe how to configure the RADIUS server. Configure a RADIUS client. In the Computer Management dialog box, double-click Internet Authentication Service, right-click RADIUS Clients, and choose New RADIUS Client. Enter a RADIUS client name (which can be the name of the AP) and the IP address of the AP, and click Next.
Page 39
Version V1.0 Enter qtW7J5cA in the Shared secret and Confirm shared secret text boxes, and click Finish. Password same as that specified by RADIUS Password on the AP Configure a remote access policy. Right-click Remote Access Policies and choose New Remote Access Policy. In the New Remote Access Policy Wizard dialog box that appears, click Next.
Page 40
Version V1.0 Enter a policy name and click Next. Select Ethernet and click Next.
Page 41
Version V1.0 Select Group and click Add. Enter 802.1x in the Enter the object names to select text box, click Check Names, and click OK.
Page 42
Version V1.0 Select Protected EAP (PEAP) and click Next. Click Finish. The remote access policy is created.
Page 43
Version V1.0 Right-click root and choose Properties. Select Grant remote access permission, select NAS-Port-Type matches "Ethernet" AND, and click Edit. (10) Select Wireless – Other, click Add, and click OK.
Page 44
Version V1.0 (11) Click Edit Profile, click the Authentication tab, configure settings as shown in the following figure, and click OK. (12) When a message appears, click No. Configure user information. Create a user and add the user to group 802.1x.
Page 45
Version V1.0 III. Configure your wireless device Windows 7 is taken as an example to describe the procedure. Choose Start > Control Panel, click Network and Internet, click Network and Sharing Center, and click Manage wireless networks. Click Add. Click Manually create a network profile.
Page 46
Version V1.0 Enter wireless network information, select Connect even if the network is not broadcasting, and click Next. Same security mode of the SSID of the Click Change connection settings.
Page 47
Version V1.0 Click the Security tab, select Microsoft: Protected EAP (PEAP), and click Settings. Deselect Validate server certificate and click Configure.
Page 48
Version V1.0 Deselect Automatically use my Windows logon name and password (and domain if any) and click OK. Click Advanced settings.
Page 49
Version V1.0 Select User or computer authentication and click OK. Click Close.
Page 50
Version V1.0 Click the network icon in the lower-right corner of the desktop and choose the wireless network of the AP, such as hot_spot in this example.
Page 51
Version V1.0 In the Windows Security dialog box that appears, enter the user name and password on the RADIUS server and click OK. ---End Verification Wireless devices can connect to the wireless network named hot_spot.
Version V1.0 RF Settings To access the page, choose Wireless > RF Settings. This page enables you to modify the basic radio parameters.
Page 53
Version V1.0 Parameter description Parameter Description Wireless Network It specifies whether to enable the wireless function of the AP. It specifies the country or region where the AP is used. This parameter helps Country/Region comply with channel regulations of the country or region. This parameter can be set if Lock Channel is not selected.
Page 54
Version V1.0 Parameter Description It specifies the wireless channel bandwidth of the AP. This parameter can be set if the AP works in 11 b/g/n, 11ac, 11a/n mode and Lock Channel is not selected. − 20MHz: It indicates that the AP can use only 20 MHz channel bandwidth. −...
Version V1.0 RF Optimization To access the page, choose Wireless > RF Optimization. This page enables you to modify the radio parameters to optimize performance. You are strongly recommended to modify the settings only with professional guidance to prevent degrading wireless performance.
Page 56
Version V1.0 Parameter description Parameter Description Used to set the interval at which this device sends Beacon frames. Beacon frames are sent at the interval to announce the existence of a wireless Beacon Interval network. Generally, a smaller interval allows wireless clients to connect to this device sooner, while a larger interval allows the wireless network to transmit data quicker.
Page 57
Version V1.0 Parameter Description With this function enabled, if the strength of the signals transmitted by a wireless Prioritize 5 GHz device is stronger than this threshold, the wireless device connects to the 5 GHz Threshold WiFi network. Otherwise, it connects to the 2.4 GHz WiFi network. If this function is enabled, the same download time is assigned to users Air Interface experiencing different download rates, ensuring a better experience for high-rate...
Page 58
Version V1.0 The Prioritize 5 GHz function enables such dual-band wireless clients to connect the 5 GHz band on network initialization if the 5 GHz signal strength the AP received reaches or exceeds the 5 GHz threshold so as to improve the utilization of the 5 GHz band, reduce the load and interference on the 2.4 GHz band, thus bettering user experience.
Version V1.0 Frequency Analysis 6.4.1 Overview To access the page, choose Wireless > Frequency Analysis. This page allows you to analyze frequency and scan channels. Frequency Analysis ◼ From the intuitive result, you can check how many wireless networks (total SSIDs) use the same channel and choose a channel with low usage as the operating channel of the device for better wireless transmission efficiency.
Version V1.0 6.4.3 Execute Channel Scan Choose Wireless > Frequency Analysis. Click 2.4 GHz Channel Scan or 5 GHz Channel Scan tab to select the wireless network radio band for channel scan. 2.4 GHz Channel Scan is taken as an example here. Enable Scan.
Version V1.0 6.5.1 Overview 802.11 networks offer wireless access services based on the Carrier Sense Multiple Access with Collision Avoidance (CSMA/CA) channel competition mechanism, which allows all wireless clients to fairly compete for channels. All the services implemented over wireless networks share the same channel competition parameters.
Version V1.0 Contention window minimum (CWmin) and contention window maximum (CWmax) − specify the average backoff period. The period increases along with these two values. See the backoff slots in the following figure. Transmission Opportunity (TXOP): It specifies the maximum channel use duration −...
Page 63
Version V1.0 Parameter description Parameter Description It specifies the WMM optimization modes supported by the AP: − Optimized for scenario with 1 - 10 users: If 10 or less clients are connected to the AP, you are recommended to select this mode to obtain higher client throughput.
Version V1.0 Access Control 6.6.1 Overview The access control function enables you to allow or disallow the wireless devices to access the wireless network of the AP based on their MAC addresses. To access the page, choose Wireless > Access Control. The AP supports the following two filter modes: Whitelist: It indicates that only the wireless devices with the specified MAC −...
Version V1.0 ---End Parameter description Parameter Description SSID It specifies the wireless network to which the rule applies. Access Control It specifies whether to enable or disable the wireless control function. It specifies the access control mode − Blacklist: It indicates that only the wireless clients on the wireless access Mode control list cannot connect to the AP with the selected SSID.
Page 66
Version V1.0 Configuration procedure Choose Wireless > Access Control > 5 GHz. Select VIP from the SSID drop-down list. Enable Access Control. Set Mode to Whitelist. Enter D8:38:0D:00:00:01 in the MAC Address text box and click Add. Repeat step to add D8:38:0D:00:00:02 and D8:38:0D:00:00:03 as well. Click Save.
Version V1.0 Advanced Settings 6.7.1 Overview This page enables you to set the Identify Client Type and Broadcast Packet Filter of the AP. To access the page, choose Wireless > Advanced Settings. Identify Client Type ◼ It specifies whether to identify operating system types of wireless clients connected to this device.
Version V1.0 6.7.2 Configure Advanced Settings Choose Wireless > Advanced Settings Change the parameters as required. Click Save. ---End Parameter description Parameter Description If this function is enabled and the client connected to the AP has accessed an Identify Client Type http:// URL, the operating system type of the client can be viewed by choosing Status >...
Version V1.0 QVLAN Settings 6.8.1 Overview The AP supports 802.1Q VLANs and is applicable in a network environment where 802.1Q VLANs have been defined. By default, the QVLAN function is disabled. If the QVLAN function is enabled, tagged data received by a port of the AP is forwarded to the other ports of the VLAN corresponding to the VID in the data, whereas untagged data received by a port of the AP is forwarded to the other ports of the VLAN corresponding to the PVID of the port that receives the data.
Version V1.0 6.8.2 Configure the QVLAN Function Choose Wireless > QVLAN Settings. Enable QVLAN Settings. Change the parameters as required. Generally, you only need to change the 2.4 GHz SSID VLAN ID and 5 GHz SSID VLAN ID settings. Click Save. ---End Parameter description Parameter...
Page 71
− IPTV: It is used in IPTV business scenarios. This function needs to be used with the IPTV function of an IP-COM enterprise router of the same brand. It can QVLAN Mode establish an IPTV data transparent transmission channel between the router and the AP, and solve the problem of difficult connection caused by the long distance between the IPTV set-top box and the optical modem.
Version V1.0 6.8.3 Example of Configuring QVLAN Settings Networking requirement A hotel has the following wireless network coverage requirements: Guests are connected to VLAN 2 and can access only the internet. − Staffs are connected to VLAN 3 and can access only the LAN. −...
Page 73
Version V1.0 Configuration procedure I. Configure the AP Choose Wireless > QVLAN Settings. Enable QVLAN Settings. Modify the VLAN ID of the SSIDs at 2.4 GHz band. Set the VLAN of internet to 2, oa to 3, and vip to 4 respectively. Click Save.
Page 74
Version V1.0 Configure the switch Create IEEE 802.1Q VLANs described in the following table on the switch. Port Connected To Accessible VLAN ID Port Type PVID 1,2,3,4 Trunk LAN server Trunk Router Trunk Retain the default settings of other ports. For details, refer to the user guide for the switch. III.
Version V1.0 Advanced Traffic Control The Traffic Control page allows you to set limits on the internet speed of clients to guarantee a proper allocation of limited broadband resources. By default, the Traffic Control function is disabled. If you want to use this function, configure it on the Advanced >...
Version V1.0 Parameter Description It specifies the maximum upload/download rate allowed for every user Client Max. Upload Rate device connected to the target WiFi network. If you leave it blank, the maximum upload/download rate of every user device connected to the Client Max.
Version V1.0 Tools Date & Time This section introduces how to set the system time login timeout interval of your AP. 8.1.1 System Time The System Time page allows you to set the system time. To access the configuration page, choose Tools > Date & Time > System Time. To make the time-related functions effective, ensure that the system time of the AP is set correctly.
Version V1.0 Parameter Description It is valid only when Sync with Internet Time is chosen. Time Zone It specifies the standard time zone of the region in which the AP locates. Manual You can manually set the system time of the AP. If you choose this option, you need to set the system time each time after the AP reboots.
Version V1.0 Maintenance The Maintenance page allows you to perform the following operations: reboot, reset, upgrade firmware, back up/restore, and LED indicator control. Rebooting the AP disconnects all connections. You are recommended to reboot the AP in spare time. 8.2.1 Reboot Manual reboot If a parameter does not take effect or the AP does not work properly, you can try rebooting...
Page 80
Version V1.0 Set Interval as required, which is 1440 minutes in this example. Click Save to apply your settings. ---End After the configurations, the AP will automatically reboot in a day. Configure the AP to reboot at specifed time ◼ Choose Tools >...
Version V1.0 8.2.2 Reset If you cannot locate a fault of the AP or forget the password of the web UI of the AP, you can reset the AP to restore its factory settings and then configure it again. Resetting the AP deletes all your current configurations, and you need to reconfigure the AP again. Therefore, reset the AP only when necessary.
When upgrading, do not power off the AP. Procedure Download the latest firmware version for the AP from www.ip-com.com.cn to your local computer, and decompress the package. Generally, the package is in the format of .bin. Log in to the web UI of the AP and choose Tools > Maintenance > Maintenance.
Version V1.0 8.2.4 Backup/Restore The backup function is used to export the current configuration of the AP to your computer. The restore function is used to import a configuration file to the AP. You are recommended to back up the configuration after it is significantly changed. When the performance of your AP decreases because of an improper configuration, or after you restore the AP to factory settings, you can use this function to restore a configuration that has been backed up.
Page 84
Version V1.0 Click Backup on the pop-up window. ---End A configuration file indicated with APCfm.cfg will be downloaded. If the prompt “This type of file can harm your computer. Do you want to keep APCfm.cfg anyway?” appears, click Keep. Restore a configuration Choose Tools >...
Version V1.0 8.2.5 LED Indicator Control This function enables you to turn on/off the LED indicator of the AP. By default, the LED indicator is turned on. Turn off LED indicator On the Tools > Maintenance > Maintenance page, click Turn off all LED indicators. After the configurations, the LED indicator is turned off and no longer displays the working status of the AP.
Page 86
Version V1.0 Turn on LED indicator On the Tools > Maintenance > Maintenance page, click Turn on all LED indicators. After the configurations, the LED indicator lights up again and you can judge the working status of the AP.
Version V1.0 Account 8.3.1 Overview The Account page allows you to modify the information of the login account to keep unauthorized users from entering the web UI and modifying configurations, thus protecting the wireless network. To access the page, choose Tools > Account. The AP supports two account types: Administrator and Guest.
Version V1.0 8.3.2 Modify the password and user name of login account Choose Tools > Account. Click beside the account to be modified. If the account to be modified is a Guest, enable the Guest Account first. Otherwise, go to the next step.
Version V1.0 System Log The Logs page allows you to view system logs. The logs of the AP record various events that occur and the operations that users perform after the AP starts. In case of a system fault, you can refer to the logs during troubleshooting. To access the page, choose Tools >...
Version V1.0 Diagnostic Tool With the diagnostics tool, you can detect the connection status and connection quality of a network. Procedure The link to www.google.com is used as an example. Choose Tools > Diagnostics Tool. Enter the IP address or domain name to be pinged in Target IP /Domain Name. In this example, enter www.google.com.
Version V1.0 Uplink Detection 8.6.1 Overview In AP mode, the AP connects to its upstream network using the PoE LAN port. If a critical node between the PoE LAN port and the upstream network fails, the AP as well as the wireless clients connected to the AP cannot access the upstream network.
Version V1.0 8.6.2 Configure Uplink Detection Choose Tools > Uplink Check. Enable Uplink Detection. Enter the IP address of the host to be pinged in Host1 to Ping or Host2 to Ping, such as the IP address of the switch or router directly connected to the Ethernet port of the AP. If there is only one host IP address, enter this IP address in both Host1 to Ping and Host2 to Ping.
Version V1.0 Appendixes Factory default settings The following table lists the default values of major parameters of the AP. Parameter Default Value Management IP address 192.168.0.254 Login Administrator admin|admin User Name/Password Guest user|user Quick Setup Working Mode AP Mode IP Address Type Static IP Address LAN Setup IP Address...
Page 94
Version V1.0 Acronyms & Abbreviations Acronyms & Abbreviations Full Name Access Point Controller Advanced Encryption Standard AIFSN Arbitration Inter Frame Spacing Number Access Point APSD Automatic Power Save Delivery DHCP Dynamic Host Configuration Protocol Domain Name System EDCA Enhanced Distributed Channel Access Local Area Network Management Information Base MU-MIMO...
Need help?
Do you have a question about the Pro-6-IW and is the answer not in the manual?
Questions and answers