How to Use This Guide This guide includes detailed information on Edgecore access point (AP) software, including how to operate and use the management functions of APs. To deploy APs effectively and ensure trouble-free operation, you should first read the relevant sections in this guide so that you are familiar with all software features.
Page 4
How to Use This Guide Conventions The following conventions are used throughout this guide to show information: Note: Emphasizes important information or calls your attention to related features or instructions. Caution: Alerts you to a potential hazard that could cause loss of data, or damage the system or equipment.
Page 5
How to Use This Guide May 2023 Revision This is the 10th revision of this guide. It is valid for software release v12.4.0 and includes the following changes: Added WAN port auto-detection to QR code Onboarding, see “QR Code Onboarding”...
Page 6
How to Use This Guide Added Airtime Fairness, see “Physical Radio Settings” on page 64 Modified the value range of BSS Coloring, see “Physical Radio Settings” on page 64 Modified wireless security default, see “Wireless Networks — Security Settings” ...
Page 7
How to Use This Guide Added WPA3 Enterprise 192-bit and OWE security, see “Wireless Networks — Security Settings” on page 69 Added multiple PSK keys, see “Wireless Networks — Security Settings” on page 69 Added Short Guard Interval (SGI), see “Wireless Networks —...
Page 8
How to Use This Guide Added Target Wake Time, see “Physical Radio Settings” on page 64 Added HTTPS captive portal, see “Captive Portal Settings” on page 55 Added HTTPS certificate upload, see “Upload Certificate” on page 86 December 2021 Revision This is the fourth revision of this guide.
Page 9
How to Use This Guide Added WPA3-Personal transition, WPA3-Enterprise, and WPA3-Enterprise transition. See “Wireless Networks — Security Settings” on page 69 Support for IEEE 802.11 k/r, see “Wireless Networks — Security Settings” on page 69 Added Minimum signal allowed (RSSI Threshold), see “Physical Radio Settings”...
Contents How to Use This Guide Contents Figures Tables Section I Getting Started 1 Introduction Configuration Options Zero-Touch Provisioning Connecting to the Web Interface LAN Port Connection AP Setup Wizard QR Code Onboarding Mesh AP Configuration Main Menu Dashboard Common Web Page Buttons Section II Web Configuration 2 Status Information...
Page 11
Contents 3 Network Settings Internet Settings IPv6 Settings Ethernet Settings LAN Settings Firewall Rules Port Forwarding Hotspot Settings Network Settings OpenRoaming DHCP Snooping ARP Inspection DHCP Relay 4 Wireless Settings Radio Settings Physical Radio Settings Wireless Networks — General Settings Wireless Networks —...
Page 12
Contents User Accounts Services Telnet Edgecore Networks Discovery Tool Web Server Remote System Log Setup Network Time SNMP Multicast DNS LLDP Diagnostics Ping Traceroute Nslookup Speed Test Device Discovery Section III Appendices A Troubleshooting Problems Accessing the Management Interface Using System Logs –...
Section I Getting Started This section provides an overview of the access point, and introduces some basic concepts about wireless networking. It also describes the basic settings required to access the management interface. This section includes these chapters: “Introduction” on page 18 ...
Introduction The access point (AP) runs software that includes a network management agent. The agent offers a variety of management options, including a web-based interface. The AP can also be accessed through Secure Shell (SSH) for configuration using a command line interface (CLI). Note: This manual describes the configuration interface for stand-alone mode.
Chapter 1 | Introduction Configuration Options Configuration Options The access point’s web agent allows you to configure AP parameters, monitor wireless connections, and display statistics using a standard web browser. The AP’s web management interface can be accessed from any computer attached to the network.
Chapter 1 | Introduction Connecting to the Web Interface Connecting to the Web Interface For first-time access to the AP’s web management interface, you can connect a PC directly to one of the AP’s LAN ports or use the quick-setup QR code (printed on a label next to the AP’s ports).
Chapter 1 | Introduction AP Setup Wizard AP Setup Wizard The Setup Wizard is designed to help you configure the basic settings required to get the AP up and running. Step 1 Select How the AP will be Managed — To manage the AP using the Edgecore ecCLOUD controller, select “Yes, I will manage this device by ecCloud controller,”...
Chapter 1 | Introduction AP Setup Wizard Step 2 CAPWAP Setup — When EWS-Series Controller management is selected, you can set the mode for discovering the controller. Once the AP has discovered the controller on the network it can then send a CAPWAP (Control And Provisioning of Wireless Access Points) join request.
Chapter 1 | Introduction AP Setup Wizard Figure 4: Wireless Setup Step 4 Network Setup — For AP stand-alone mode, you also have the option to configure the IP address mode used to provide an IP address for the Internet access port. The default IP Address Mode is DHCP and other options include Static IP and PPPoE.
Chapter 1 | Introduction AP Setup Wizard Step 5 Change Your Password — Set a new password for management access to the AP (the default user name is “admin” with password “admin”). The password must be 6-20 ASCII characters (case sensitive with no special characters). Figure 6: Change Password Note: For information on changing user names and passwords, see...
Page 25
Chapter 1 | Introduction AP Setup Wizard Note: The country code selection is for non-US models only and is not available to any US models. Per FCC regulation, all Wi-Fi products marketed in the US must be fixed to US operation channels only. Step 7 After completing the Setup Wizard, click “Done.”...
Chapter 1 | Introduction QR Code Onboarding QR Code Onboarding For quick set up and registration of your AP with the ecCLOUD controller, you can scan the QR code on the AP using a phone. Follow these steps: Power on the AP. Connect the AP to the Internet.
Chapter 1 | Introduction QR Code Onboarding Figure 9: Setup Wizard - Detect Network Select to manage the AP using the ecCLOUD controller or to manage the AP in stand-alone mode. Figure 10: Setup Wizard - Device Management Stand-Alone Mode: Use the default wireless network setting or customize the network name and password.
Chapter 1 | Introduction QR Code Onboarding Figure 12: ecCLOUD Login Page If you already have an ecCLOUD account, log in and select a site for the AP. The AP is automatically registered for cloud management. Modify the device name, login password, SSID, and security key. After you tap “Save,” wait about five minutes for the cloud controller to configure the AP.
Chapter 1 | Introduction Main Menu If you do not have an ecCLOUD account, tap “I want to register” and set up an account. Create a cloud and site before confirming the regulatory country. After tapping “Next,” the AP is then automatically registered for cloud management.
Chapter 1 | Introduction Main Menu Dashboard After logging in to the web interface, the dashboard displays. The dashboard shows basic settings for the AP, including Internet status, local network settings, and wireless radio status. Figure 14: The Dashboard Common Web Page The list below describes the common buttons found on many of the web Buttons management pages:...
Section II Web Configuration This section provides details on configuring the access point using the web browser interface. This section includes these chapters: “Status Information” on page 32 “Network Settings” on page 41 “Wireless Settings” on page 62 ...
Status Information The Dashboard displays information on the current system configuration, including Internet status, local network settings, wireless radio status, traffic graphs, and services. This chapter includes the following sections: “General Status” on page 33 “Network Status” on page 35 ...
Chapter 2 | Status Information General Status General Status The General Status section shows descriptive information about the AP. Figure 16: General Status Information The following items are displayed in the “Port Status” section: Ethernet Port #0 — Shows the status of the WAN Ethernet port, including link- ...
Page 34
Chapter 2 | Status Information General Status IPv6 Address — The IPv6 address of the Internet connection. Netmask — The subnet mask of the IP address. Gateway — The IP address of the gateway router that is used when a ...
Chapter 2 | Status Information Network Status Network Status The Network Status section shows information about local network connections. Figure 17: Local Networks The following items are displayed in this section: Name — Shows information on the name of the local network. ...
Chapter 2 | Status Information Wireless Status Wireless Status The Wireless Status section shows information about the radio settings and associated clients. Figure 20: Wireless Status Note that you can click the red button next to an associated client to force disconnection.
Page 38
Chapter 2 | Status Information Wireless Status Tx Power — The power of the radio signals transmitted from the AP. Channel — The radio channel the access point uses to communicate with wireless clients. The available channels depend on the 802.11 Mode, Channel Bandwidth, and Country Code settings.
Figure 21: Traffic Graphs Services The Services section shows the status of the Edgecore cloud management agent. Figure 22: Services Edge-core Networks Cloud Agent Status — Shows whether or not the agent for the cloud controller is enabled. – 39 –...
Page 40
Hotspot (Chilli) — Shows whether or not hotspot services are enabled. Click on this field to open the Hotspot Settings menu. Edge-core Networks EWS-Series Controller — Shows if the CAPWAP service is enabled for management of the AP through an EWS-Series controller.
Network Settings This chapter describes basic network settings on the access point. It includes the following sections: “Internet Settings” on page 42 “Ethernet Settings” on page 45 “LAN Settings” on page 48 “Firewall Rules” on page 50 ...
Chapter 3 | Network Settings Internet Settings Internet Settings The Internet Settings page configures the basic Internet settings for the AP, such as the source port, IP aliases, as well as the host name and maximum MTU size. Figure 23: Internet Settings The following items are displayed on this page: IP Address Mode —...
Chapter 3 | Network Settings Internet Settings Figure 24: IP Address Mode – Static IP Static IP — To configure a static IP address for the selected Ethernet interface, the following items must be specified. IP Address — Specifies an IP address for the access point. Valid IP ...
Chapter 3 | Network Settings Internet Settings Figure 25: IP Address Mode – PPPoE PPPoE — To obtain an IP address for the selected Ethernet interface using PPPoE, the following items must be specified. Service Name — The service name assigned for the PPPoE ...
Chapter 3 | Network Settings Ethernet Settings IPv6 Settings Enables you to configure the method used to provide an IPv6 address for the Internet access port. Figure 26: IPv6 Settings The following items are displayed on this section of the page: IP Address Mode —...
Chapter 3 | Network Settings Ethernet Settings Ethernet Port #2 — Shows the status of the LAN Ethernet port 2. Figure 27: Ethernet Settings – Internet Source The following status message is displayed if an interface is set as the Internet source: “This interface is the internet source for this product.
Chapter 3 | Network Settings Ethernet Settings In the following figure, Ethernet Port 0 and Ethernet Port 1 are both attached to the WAN. Figure 29: Bridge to Internet Route to Internet — Configures an interface to be a member of the LAN. ...
Chapter 3 | Network Settings LAN Settings PoE Out — (EAP104 only) Enables the PoE Out feature when the PoE source is detected as 802.3at, otherwise the PoE Out feature is disabled. When set to “Off,” PoE Out is always disabled. (Default: On) CAPWAP Tunnel Interface —...
Page 49
Chapter 3 | Network Settings LAN Settings The following items are displayed on this page: IP Address — Specifies the IP address for the local network or guest network. Valid IP addresses consist of four decimal numbers, 0 to 255, separated by periods.
Chapter 3 | Network Settings Firewall Rules Firewall Rules Firewall filtering restricts connection parameters to limit the risk of intrusion. The firewall settings allow you to define a sequential list of rules that filter traffic based on source and destination IP addresses and ports. Ingress packets are tested against the filter rules one by one.
Chapter 3 | Network Settings Hotspot Settings Internal IP address — The internal destination IP address. Internal Port — The internal destination protocol port. (Range: 1-65535) Hotspot Settings The Hotspot Settings page can configure Internet access to the general public in places such as coffee houses, libraries and hospitals.
Page 53
Chapter 3 | Network Settings Hotspot Settings No Authentication — This option shows the hotspot guest your customized, locally hosted captive portal splash page, and will not require the guest to login before accessing the Internet. If you fill out the (optional) terms of service text, the guest will be required to accept these before they can access the Internet.
Chapter 3 | Network Settings Hotspot Settings RADIUS Server If you click set the mode to External Captive Portal Service or Local Splash page with External RADIUS, the following section is displayed. Figure 35: Hotspot Settings (RADIUS Settings) The following items are displayed on this page: Enable RADIUS Auth —...
Chapter 3 | Network Settings Hotspot Settings Local ID — Local RADIUS server identifier. Local Name — Local RADIUS server name NAS ID — Local RADIUS server operation identifier. Captive Portal Settings The following section is displayed for all hotspot mode options. Figure 36: Hotspot Settings (Captive Portal Settings) The following items are displayed on this page: HTTPS —...
Page 56
Chapter 3 | Network Settings Hotspot Settings Captive Portal URL — Host name of Internet service portal for the hotspot. The captive portal forces a hotspot client to access a welcome web page (normally used for authentication) before gaining further access to the Internet. The welcome page may require authentication and/or payment.
Chapter 3 | Network Settings OpenRoaming OpenRoaming OpenRoaming provides a standard for public-access Wi-Fi networks to support seamless roaming between wireless networks. An OpenRoaming network advertises its public Wi-Fi capabilities and services so that clients can decide if they want to connect to the network.
Page 58
Chapter 3 | Network Settings OpenRoaming Chargeable public network — A network that is available to all users, but requires a fee. Free Public Network — A network that is available to all users without any fees. Personal device network — A network for peripheral connectivity in an ...
Chapter 3 | Network Settings DHCP Snooping Cellular Network Information List (PLMN) — (Optional) Identifies the 3GPP cellular networks available through the AP. Specifically, this field identifies the Public Land Mobile Network (PLMN) ID, comprised of the Mobile Country Code (MCC) and Mobile Network Code (MNC) of the mobile operator.
Chapter 3 | Network Settings ARP Inspection The following items are displayed on this page: Enable DHCP Snooping — Enables DHCP Snooping on the AP. Trust DHCP Server MAC — The MAC address of a known and trusted DHCP ...
Chapter 3 | Network Settings DHCP Relay Static Trust List — Adds the MAC or MAC/IP pairs of devices that are trusted to issue ARP requests. Other network nodes can still send their ARP requests, but if their IP appears in the static list with a different MAC, their ARP requests will be dropped.
Wireless Settings This chapter describes the wireless settings on the access point. It includes the following sections: “Radio Settings” on page 63 “VLAN Settings” on page 78 – 62 –...
Chapter 4 | Wireless Settings Radio Settings Radio Settings The IEEE 802.11 wireless interfaces include configuration options for radio signal characteristics and wireless security features. The access point can operate in several radio modes, 802.11b+g+n/ax (2.4 GHz), 802.11a/a+n/ac+a+n/ax (5 GHz), or 802.11ax (6 GHz). Note that the dual-band access points can operate at 2.4 GHz and 5 GHz at the same time, and the tri-band access points can operate at 2.4 GHz, 5 GHz, and 6 GHz at the same time.
Chapter 4 | Wireless Settings Radio Settings Physical Radio Figure 41: Physical Settings for Radio 5 GHz and 6 GHz Settings Figure 42: Physical Settings for Radio 2.4 GHz – 64 –...
Page 65
Chapter 4 | Wireless Settings Radio Settings The following items are displayed on this page: Status — Enables or disables the wireless service on this interface. Mode — Selects the mode in which the AP will function. Access Point (Auto-WDS) — The AP operates as an access point in WDS ...
Page 66
Chapter 4 | Wireless Settings Radio Settings Selecting Auto enables the access point to automatically select an unoccupied radio channel. (Default: Auto) WME Configuration — Wireless Multimedia Extensions (WME), also known as Wi-Fi Multimedia (WMM), is a Wi-Fi Alliance interoperability certification, based on the IEEE 802.11e standard.
Page 67
Chapter 4 | Wireless Settings Radio Settings This forces clients to associate with an AP that has a better signal strength (also called assisted roaming). Suggested value is -70 to -80 depending on access point density and coverage. BSS coloring — In 802.11ax (Wi-Fi 6) mode, BSS coloring allows nearby APs ...
Chapter 4 | Wireless Settings Radio Settings Wireless Networks — Figure 43: Radio Settings (General Settings) General Settings The following items are displayed in this section of the Wireless Settings page: Status — Enables or disables the wireless service on this VAP. ...
Chapter 4 | Wireless Settings Radio Settings multicast traffic at a low basic rate, whereas unicast traffic can be transmitted at HT, VHT, or HE rates. Max Clients — The maximum number of clients that can associate to this SSID ...
Page 70
Chapter 4 | Wireless Settings Radio Settings CCMP (AES) — AES-CCMP is used as the multicast encryption cipher. AES-CCMP is the standard encryption cipher required for WPA2. (This is the default setting.) Auto: TKIP + CCMP (AES) — The encryption method used by the ...
Page 71
Chapter 4 | Wireless Settings Radio Settings WPA-EAP — WPA employs a combination of several technologies to provide an enhanced security solution for 802.11 wireless networks. A RADIUS server is used for authentication, and can also be used for accounting.
Page 72
Chapter 4 | Wireless Settings Radio Settings Acct Server — Specifies the IP address or host name of the RADIUS accounting server. Acct Port — The UDP port number used by the RADIUS server for accounting messages. (Range: 1024-65535; Default: 1813) Acct Secret —...
Page 73
Chapter 4 | Wireless Settings Radio Settings Refer to RADIUS Settings above for information on RADIUS configuration. WPA3 Enterprise Transition — Allows WPA3 and WPA2 clients to access the network. Encryption options and the use of Protected Management Frames (PMF) are negotiated with each client before allowing access to the network.
Chapter 4 | Wireless Settings Radio Settings DAE Port — The UDP port number to use for DAE messages. (Default: 3799) DAE Client — Specifies the IPv4 address of the RADIUS server. DAE Secret — The shared text string used to encrypt DAE messages ...
Page 75
Chapter 4 | Wireless Settings Radio Settings Add to Guest Network — This interface can only support the guest network. Hotspot Controlled — This interface can only support hotspot services. Configure Hotspot — Opens Hotspot Settings page. Walled Garden —...
Chapter 4 | Wireless Settings Radio Settings Limit Upload — Enables rate limiting of traffic from the VAP interface as it is passed to the wired network. You can set a maximum rate in Kbytes per second. (Range: 256-10048576 Kbytes per second; Default: OFF) Limit Download —...
Chapter 4 | Wireless Settings Radio Settings Figure 47: Open Mesh Settings The following items are displayed in this section of the Wireless Settings page: Mesh Point — Enables Open Mesh support on the SSID interface. Mesh ID — Name of the mesh network. ...
Chapter 4 | Wireless Settings VLAN Settings Power selection is not just a trade off between coverage area and maximum supported clients. You also have to ensure that high-power signals do not interfere with the operation of other radio devices in the service area. (The range of power settings and defaults are dependent on the AP model and the Country setting.) SGI —...
Chapter 4 | Wireless Settings VLAN Settings default, the subnet ranges of these networks is set to 192.168.2.1 and 192.168.3.1, respectively. If your network is already configured to use one of these subnets, when you plug in your network cable to the WAN port of your AP, there would normally be an IP conflict in the local AP’s network and your upstream network.
System Settings This chapter describes maintenance settings on the access point. It includes the following sections: “System Settings” on page 81 “Maintenance” on page 83 “Upload Certificate” on page 86 “User Accounts” on page 87 “Services” on page 87 ...
Chapter 5 | System Settings System Settings System Settings The System Settings page can be used to enable the AP to be managed from the Edgecore ecCLOUD controller or EWS-Series Controller, and configure general descriptive information about the AP. Figure 50: System Settings The following items are displayed on this page: Management —...
Page 82
Hostname — An alias for the AP, enabling the device to be uniquely identified on the network. (Default: EAP101; Range: 1-63 ASCII characters. Only accepts A-Z, a-z, 0-9, and dash “-”.) Enable Reset Button — Enables the AP’s hardware reset button. (Default: ...
Chapter 5 | System Settings Maintenance Maintenance The Maintenance page supports general maintenance tasks including displaying the system log, downloading a diagnostics log, rebooting the device, restoring factory defaults, backing up or restoring configuration settings, and upgrading firmware. Figure 51: Maintenance Displaying The access point saves event and error messages to a local system log database.
Chapter 5 | System Settings Maintenance Downloading the Click “Diagnostics Log” to download the log file to the management workstation. In Diagnostics Log Windows, a GNU Zip (*.tar.gz) file is stored in the Downloads folder. The diagnostics log file contains information that can help Edgecore resolve technical issues with the AP.
The Backup function allows you to back up the access point’s configuration to a Configuration management workstation. In Windows, a GNU Zip (*.tar.gz) file will be stored in the Downloads folder. This is a sample file name: backup-EAP101-2021-02-09.tar.gz Settings Restoring...
Chapter 5 | System Settings Upload Certificate Figure 56: Upgrading Firmware Upload Certificate The Upload Certificate page allows you to upload a unique security certificate from a trusted certification authority for secure access (an encrypted connection) to a configured HTTPS captive portal. Alternatively, you can also reset to use the default certificate.
Chapter 5 | System Settings User Accounts Use Default Certificate — Click to reset to use the AP’s default certificate. User Accounts The User Accounts page allows you to control management access to the AP based on manually configured user names and passwords. Figure 58: User Accounts The following items are displayed on this page: Enabled —...
Chapter 5 | System Settings Services Figure 59: SSH Settings The following items are displayed on this page: SSH Server — Enables or disables SSH access to the access point. (Default: Enabled) Port — Sets the TCP port number for the SSH server on the access point. ...
Chapter 5 | System Settings Services Figure 61: Discovery Agent Settings The following items are displayed on this page section: Discovery Agent — Enables the discovery agent. (Default: Enabled) Allow over WAN — Enables the discovery agent to operate over the port ...
Chapter 5 | System Settings Services HTTPS Port — The TCP port to be used by the HTTPS Web browser interface. (Range: 1-65535; Default: 443) Allow HTTPS from WAN — Allows HTTPS management access from the WAN. Remote System Log Use this feature to send log messages to a Syslog server.
Chapter 5 | System Settings Services Figure 64: NTP Settings The following items are displayed on this page: Local Time — Displays the local time as day of week, month, hour:minute:second, year, based on Universal Time Coordinates. NTP Service — Enables or disables sending of requests for time updates. ...
Chapter 5 | System Settings Services SNMP Simple Network Management Protocol (SNMP) is a communication protocol designed specifically for managing devices on a network. It is typically used to configure these devices for proper operation in a network environment, as well as to monitor them to evaluate performance or detect potential problems.
Chapter 5 | System Settings Services SNMPv3 User — SNMP protocol version 3 provides secure access by account authentication and data encryption. An SNMP v3 user can be defined by clicking the “Add new” button. Name — The user name used to access the SNMP service. ...
Minor — The iBeacon value that is used to identify individual beacons within a group. (Range: 0-65535) Tx Power — Sets the BLE radio transmit power (supported only on EAP101 and EAP104). (Range: 5 dBm to -20 dBm; Default: 5 dBm)
Chapter 5 | System Settings Diagnostics BLE Scan — (EAP101 and EAP104 only) Scans for all BLE devices, including these four types: EddyStone-UID, EddyStone-URL, EddyStone-TLM, and ibeacon. Figure 69: BLE Scan Diagnostics The Diagnostics page provides Ping, Traceroute, Nslookup, and Speed Test tools for troubleshooting connectivity problems.
Chapter 5 | System Settings Device Discovery Nslookup Enter a hostname or IP address and click to run the Nslookup tool. Figure 72: Network Utilities - Nslookup Speed Test Enter a hostname or IP address of a Netperf server to test the speed between the AP and server.
Troubleshooting Problems Accessing the Management Interface Table 1: Troubleshooting Chart Symptom Action Cannot connect using a Be sure the AP is powered up. web browser Check network cabling between the management station and the Check that you have a valid network connection to the AP and ...
Page 99
Chapter A | Troubleshooting Using System Logs Contact Edgecore and send a detailed description of the problem, along with all of the information mentioned in the above steps. – 99 –...
Need help?
Do you have a question about the EAP101 and is the answer not in the manual?
Questions and answers