Summary of Contents for ITS Telecom EKSELANS AX 3000
Page 1
USER MANUAL AX 3000 331019 WIFI 6 2.4/5GHz access point. 3000Mbps (600+2400Mbps), 24dBm, WiFi 802.11 b/g/n/ac/ax, PoE 48V. High density ITS Partner O.B.S S.L · Av. Cerdanyola 79-81 Local C 08172 Sant Cugat del Vallés · Barcelona (Spain) Phone:+34935839543 · info@ek.plus ·...
Preface Intended Audience This document is intended for: Network engineers ⚫ Technical support and servicing engineers ⚫ Network administrators ⚫ Technical Support • Company Website: https://www.ek.plus/ • Consult Website: https://www.ek.plus/contacto/ • Support Email: soporte@ek.plus Conventions Signs The symbols used in this document are described as follows: Warning An alert that calls attention to important rules and information that if not understood or followed can result in data loss or equipment damage.
USER MANUAL AX 3000 1 Product Overview The AX 3000 is a dual-band dual-radio access point compliant with the IEEE 802.11ax standard. The AX 3000 AP provides a combined data rate of 2.976 Gbps, with up to 574 Mbps in the 2.4 GHz band and 2.402 Gbps in the 5 GHz band.
Page 5
USER MANUAL AX 3000 Figure 1-2 Front Panel Table 1-1 Front Panel Item Description Indicate the operation status of device. Figure 1-3 Side View ITS Partner O.B.S S.L · Av. Cerdanyola 79-81 Local C 08172 Sant Cugat del Vallés · Barcelona (Spain) Phone:+34935839543 ·...
USER MANUAL AX 3000 Table 1-2 Side View Button and Port Description Anti-theft lock hole Connect to the anti-theft lock. 2.5G SFP port The uplink SFP port for service data transmission. Reboot the device or restore the device to factory Reset button settings.
USER MANUAL AX 3000 1.3 Technical Specifications 1.3.1 Size and Weight Table 1-4 Size and Weight Item Parameter Main Unit Dimensions 220 mm × 220 mm × 49 mm (8.66 in. x 8.66 in. x 1.93 in.) (W x D x H) Main Unit: 0.6 kg (1.33 lbs.) Weight Bracket: 0.2 kg (0.44 lbs.)
Page 8
USER MANUAL AX 3000 Radio1: 2.4 GHz, 574 Mbps Max. Data Rate Radio2: 5 GHz, 2.402 Gbps Combined dual-band: 2.976Gbps Antenna Type Built-in smart antenna 2.4 GHz: 3 dBi Antenna Gain 5 GHz: 3 dBi Max. Transmit 20 dBm (country-specific restrictions apply) Power Transmit Power Configurable in increments of 1 dBm...
Page 9
USER MANUAL AX 3000 Not supported One system status LED Button One reset button 1.3.4 Power Supply Table 1-7 Power Supply Item Description Power Supply 1. DC power adapter: 48 V/0.6 A (Optional. Please refer to Power Supply for details.) 2.
USER MANUAL AX 3000 1.4 LEDs and Button Note The description of LED status applies to both Fit AP and Fat AP, unless otherwise noted. ⚫ Table 1-9 System LED Status Color Frequency Status Description The AP is NOT receiving power, or the AP is receiving power, but the LED is disabled by software.
Page 11
USER MANUAL AX 3000 2.5 Gbps 3 Gbps Not supported 2.5 Gbps supported 2.5 Gbps 1 Gbps Not supported 1 Gbps supported Table 1-12 Negotiation Speed When Connected with Copper Port on Peer Device Negotiation Speed AP SFP Port SFP Copper 1 Gbps/10 1 Gbps/2.5 Gbps/10 Speed...
USER MANUAL AX 3000 2 Preparing for Installation 2.1 Safety Precautions Note To avoid personal injury and device damage, carefully read the safety precautions before you ⚫ install the device. The following safety precautions may not cover all possible dangers. ⚫...
USER MANUAL AX 3000 Direct or indirect contact with high voltage or mains power supply via wet objects may ⚫ cause fatal dangers. Observe local regulations and specifications during electric operations. Only personnel with ⚫ relevant qualifications can perform such operations. Check whether there are potential risks in the work area.
USER MANUAL AX 3000 2.2.4 Temperature/Humidity Requirements To ensure the normal operation and prolonged service life of the device, maintain an appropriate temperature and humidity in the equipment room. The equipment room with too high or too low temperature and humidity for a long period may damage the device.
USER MANUAL AX 3000 Table 2-2 Requirements for Gases Average (mg/m Maximum (mg/m Sulfur dioxide (SO Hydrogen sulfide (HS) 0.006 0.03 Nitrogen dioxide (NO 0.04 0.15 Ammonia gas (NH 0.05 0.15 Chlorine gas (CI 0.01 Note Average refers to the average value of harmful gases measured in one week. Maximum refers to the upper limit of harmful gases measured in one week, and the maximum value lasts up to 30 minutes every day.
Page 16
USER MANUAL AX 3000 2.3 Tools Table 2-3 Tools Phillips screwdrivers, wires, Ethernet cable, fastening bolts, diagonal pliers, Common Tools and binding straps Antistatic gloves, wire stripper, crimping pliers, crystal connector crimping Special Tools pliers, and wire cutter Meter Multimeter, and bit error rate tester (BERT) Relevant PC, display, and keyboard Devices...
USER MANUAL AX 3000 3 Installing the Access Point The AX 3000 AP must be fixed and installed indoors. Caution Before installing the device, make sure you have carefully read the requirements described in Chapter 2. 3.1 Installation Flowchart Start Preparation before installation Check installation precautions Install the device...
Page 18
USER MANUAL AX 3000 The power supply and required current are available in the installation position. ⚫ The Ethernet cable have been deployed in the installation position. ⚫ The selected power supply modules meet the system power requirements. ⚫ The position of the indoor emergency power switch is learned before installation. The power ⚫...
USER MANUAL AX 3000 Do not expose the device in a thunderstorm or strong electric field. ⚫ Keep the device clean and dust-free. ⚫ Disconnect the device before cleaning it. ⚫ Do not wipe the device with a damp cloth. ⚫...
Page 20
USER MANUAL AX 3000 Figure 3-3 Aligning the Square Feet with the Mounting Holes Caution Install the Ethernet cables before mounting the AP on the bracket. Slide the AP onto the bracket in the opposite direction of the arrow on the mounting bracket until it clicks into place.
USER MANUAL AX 3000 3.4.2 Wall Mounting Drill four 6.5 mm (0.26 in.) diameter holes in the wall and 53 mm (2.09 in.) apart, with the arrow on the mounting bracket facing up. Tap wall anchors into the holes, and drive screws through the mounting bracket into the anchors to secure the bracket.
USER MANUAL AX 3000 Caution When mounting the AP on the wall, keep the EK logo pointed upwards. ⚫ The square feet should fit easily into the mounting slots. Do not forcibly push the AP into the ⚫ slots. After installation, verify that the AP is securely fastened. ⚫...
USER MANUAL AX 3000 Caution Install the Ethernet cables before mounting the AP on the bracket. 3.5.2 Installing the SFP Module Insert the SFP module. Figure 3-9 Inserting the SFP Module Connect the fiber. ITS Partner O.B.S S.L · Av. Cerdanyola 79-81 Local C 08172 Sant Cugat del Vallés ·...
USER MANUAL AX 3000 Figure 3-10 Connecting the Fiber 3.6 Connecting Cables Connect UTP/STP to the LAN/PoE port on the AP. See Connectors_and_Media for supported wiring of twisted pairs. Caution By default, baud rate is set to 9600, data bit 8, parity none, stop bits 1 and flow control none on the Console port of the AP.
USER MANUAL AX 3000 3.8 Checking after Installation 3.8.1 Checking the Access Point Make sure the external power supply matches with the AP. ⚫ Make sure the device is completely fixed and does not move. ⚫ 3.8.2 Checking Cable Connection Make sure the UTP/STP cable matches the interface type.
Page 26
USER MANUAL AX 3000 4 Verifying Operating Status 4.1 Configuring the Environment Use a power adapter or PoE to power the AP. Setting up the Environment Verify that the AP is properly connected to the power source. ⚫ Connect the AP to an AC through a twisted pair cable. ⚫...
USER MANUAL AX 3000 5 Monitoring and Maintenance 5.1 Monitoring 5.1.1 LED You can observe the LED to monitor the AP in operation. 5.1.2 CLI Commands You can run related commands on the command line interface (CLI) of the device to remotely monitor the configurations and status of the AP.
USER MANUAL AX 3000 6 Troubleshooting 6.1 Troubleshooting Flowchart 6.2 Common Faults 6.2.1 Ethernet port is not working after the Ethernet cable is plugged in Verify that the device at the other end of the Ethernet cable is working properly. And then verify that the Ethernet cable is capable of providing the required data rate and is properly connected.
Page 29
USER MANUAL AX 3000 6.2.3 LED stays solid red for a long time The LED stays solid red for a long time, indicating the Ethernet port is not connected. Verify the Ethernet connection. 6.2.4 LED stays solid green for a long time The AP performs initialization after power on.
Page 30
USER MANUAL AX 3000 7 Appendix 7.1 Connectors and Media 1000BASE-T/100BASE-TX/10BASE-T The 1000BASE-T/100BASE-TX/10BASE-T is a 10/100/1000 Mbps auto-negotiation port that supports auto MDI/MDIX. Compliant with IEEE 802.3ab, 1000BASE-T requires Category 5e 100-ohm UTP or STP (STP is recommended) with a maximum distance of 100 meters (328 feet). 1000BASE-T requires all four pairs of wires be connected for data transmission, as shown in Figure 7-1.
Page 31
USER MANUAL AX 3000 7.2 Mini-GBIC Modules Use appropriate SFP (Mini-GBIC) modules according to the port types. You can select the module to suit your specific needs. The following models and technical specifications of some SFP modules are listed for your reference. Table 7-1 Models and Technical Specifications of the SFP Module Intensity of...
USER MANUAL AX 3000 7.3 Cabling Recommendations During installation, route cable bundles upward or downward along the sides of the rack depending on the actual situation in the equipment room. All cable connectors should be placed at the bottom of the cabinet rather than be exposed outside of the cabinet. Power cords should be routed upward or downward beside the cabinet close to the location of the DC power distribution cabinet, AC power outlet, or lightning protection box.
Page 33
USER MANUAL AX 3000 Cut off excess cable tie cleanly with no sharp edges after bundling cables, as shown in ○ Figure 7-5. Figure 7-5 Cutting off Excess Cable Tie If cables are to be bent, bind them first but do not tie cable ties within the bend to avoid ○...
Page 34
USER MANUAL AX 3000 Figure 7-7 Fastening Cable Lugs Note 1. Flat washer 3. Spring washer 2. Nut 4. Flat washer When using a stiff cable, fix it near the cable lug to avoid stress on the lug and cable. ○...
USER MANUAL AX 3000 7.4 Power Supply DC power adapter: ⚫ Input voltage: 48 V Rated current: 0.6 A Table 7-3 Technical Specifications of the DC Power Connector Inner Diameter Outer Diameter Depth Polarity Inner pole: positive 2.1 mm (0.08 in.) 5.5 mm (0.25 in.) 10 mm (0.39 in.) Outer pole: negative...
Page 36
USER MANUAL AX Series Access Points Web-based ITS Partner O.B.S S.L · Av. Cerdanyola 79-81 Local C 08172 Sant Cugat del Vallés · Barcelona (Spain) Phone:+34935839543 · info@ek.plus · www.ek.plus...
Page 38
Preface Intended Audience This document is intended for: Network engineers ⚫ Technical support and servicing engineers ⚫ Network administrators ⚫ Technical Support • Company Website: https://www.ek.plus/ • Consult Website: https://www.ek.plus/contacto/ • Support Email: soporte@ek.plus Conventions Signs The signs used in this document are described as follows: Warning An alert that calls attention to important rules and information that if not understood or followed can result in data loss or equipment damage.
USER MANUAL AX SERIES ACCESS POINTS 1 Operating Environment 1.1 Overview You can access the web management system through a web browser such as Internet Explorer and Google Chrome to manage access points (APs). The web management system involves two parts: web server and web client. A web server is integrated into the device to receive and process requests from a client, and return the processing result to the client.
USER MANUAL AX SERIES ACCESS POINTS 1.3 Configuration Environment for PC Clients An administrator logs in to the web management system to manage the device through the ⚫ web browser on a client. Typically, a client refers to a PC. It may also be other mobile terminal such as a laptop or iPad.
USER MANUAL AX SERIES ACCESS POINTS 1.5.1 Configuration Steps Enabling the Web Service Mandatory. ⚫ Enable the web service on the AP. ⚫ Configuring an IP Address Optional. ⚫ Configuring the Username and Password for Logging In to the Web Management System Optional.
Page 42
USER MANUAL AX SERIES ACCESS POINTS Configuring an IP Address Command ip address ip-address ip-mask Parameter ip-address: Indicates the IP address. Description mask: Indicates the subnet mask. Command Interface configuration mode Mode Configuring the Username and Password for Logging In to the Web Management System webmaster level privilege-level username name password { password | [ 0 | Command 7 ] encrypted-password...
USER MANUAL AX SERIES ACCESS POINTS 1.5.4 Configuration Examples Configuring the Web Server Enable the web service. Configuration Configure a management IP address for the device. The default Steps management VLAN is VLAN 1. Configure an IP address for VLAN 1 and ensure that users can ping the management IP address successfully from their PCs.
USER MANUAL AX SERIES ACCESS POINTS 2 Quick Setup 2.1 Logging In to the Web Management System You will be prompted to change the password upon your first login to the web management system. You are advised to set a complex password. Use the new password upon next login. Caution If there are five consecutive failed login attempts within 10 minutes, your account will be locked for 10 minutes.
Page 45
USER MANUAL AX SERIES ACCESS POINTS Working Parameter Description Mode Note In bridge mode, the gateway and DHCP server are deployed on the uplink device of the AP. Enter the VLAN for the AP to communicate with an external VLAN network.
Page 46
USER MANUAL AX SERIES ACCESS POINTS Working Parameter Description Mode Mode (Dedicated Enter the subnet mask for the static IP IP Mask address. Default Enter the gateway address of the AP. Gateway Enter the PPPoE username for Account Internet access. PPPoE Enter the PPPoE password for Internet Password...
Page 47
USER MANUAL AX SERIES ACCESS POINTS 2.2.2 Wi-Fi Set the Wi-Fi parameters and click Finish. Parameter Description SSID Set the Service Set Identifier (SSID), that is, Wi-Fi name. Wi-F Password Set the Wi-Fi password. DHCP After this option is selected, the DHCP service is enabled on the device. Vlan ID Enter the VLAN associated with the user.
Page 48
USER MANUAL AX SERIES ACCESS POINTS 3 Web GUI 3.1 Home Page The Web GUI includes four main modules: Monitoring, Config, Diagnostics, and Maintenance. Click these modules in the navigation bar to view configurations in each module. 3.2 Favorites This feature allows you to bookmark frequently used functions. Click Favorites to expand the list of bookmarked items and quickly enter the configuration page.
USER MANUAL AX SERIES ACCESS POINTS 3.3 Search Bar Given the extensive features in the system, you may find it hard to locate a specific configuration item. Enter keywords in the search bar to search for the configuration items and enter the configuration page quickly.
Page 50
USER MANUAL AX SERIES ACCESS POINTS 4 Monitoring 4.1 Dashboard Choose Monitoring > Dashboard. On the Dashboard page, you can view the basic information about the AP, including CPU usage, memory usage, number of online STAs, system time, model and version, device information, traffic tendency, user traffic, and Received Signal Strength Indicator (RSSI) summary.
Page 51
USER MANUAL AX SERIES ACCESS POINTS (2) Adding to the Blacklist or Whitelist Select the STAs to be added to the blacklist or whitelist. Click Blacklist or Whitelist. ITS Partner O.B.S S.L · Av. Cerdanyola 79-81 Local C 08172 Sant Cugat del Vallés · Barcelona (Spain) Phone:+34935839543 ·...
USER MANUAL AX SERIES ACCESS POINTS 4.3 DHCP 4.3.1 Client List Choose Monitoring > DHCP > Client List. The Client List page displays the clients allocated with addresses from the address pool. 4.3.2 DHCP Server Status Choose Monitoring > DHCP > Server Status. The Server Status page displays the DHCP server status and the usage of the address pool.
USER MANUAL AX SERIES ACCESS POINTS 5 Configuration 5.1 Wireless Configuration 5.1.1 Adding Wi-Fi Choose Config > Wireless > WiFi/WLAN. A Wi-Fi network allows wireless STAs to be associated with the AP for network access. Multiple Wi-Fi networks can be added or deleted. Note The maximum number of Wi-Fi networks is subject to device models.
Page 54
USER MANUAL AX SERIES ACCESS POINTS Parameter Description WLAN ID Enter the WLAN ID. SSID Enter the Wi-Fi name. Open: No encryption type is configured. No password is required when a STA associates with the Wi-Fi network. WPA/WPA2-PSK: WPA mode with a pre-shared key featuring high security and easy setup, applicable to homes and small-sized enterprises.
Page 55
USER MANUAL AX SERIES ACCESS POINTS Parameter Description Specify the network types supported by the Wi-Fi network. You can select multiple network types. Note Click Is signal unstable or weak? to go to the Radio page, where you can configure a radio. Click VLAN to add a VLAN on the VLAN page.
Page 56
USER MANUAL AX SERIES ACCESS POINTS Parameter Description Radio of the device. If the device supports dual radios, that is, dot11radio 1/0 and dot11radio 2/0, the Wireless Interface field is not displayed. If the device Wireless Interface supports three radios, that is, dot11radio 1/0, dot11radio 2/0, and dot11radio 3/0, the Wireless Interface field will be displayed.
Page 57
USER MANUAL AX SERIES ACCESS POINTS Parameter Description The protocol options available on the 2.4 GHz radio include: 11bgn indicates 802.11b, 802.11g, and 802.11n protocols. ○ 11bgn+11ax indicates 802.11b, 802.11g, 802.11n, and 802.11ax protocols. ○ The protocol options available on the 5 GHz radio include: 11an indicates 802.11a and 802.11n protocols.
Page 58
USER MANUAL AX SERIES ACCESS POINTS range of the front-end network and the Wi-Fi signals, allowing users at a great distance to connect to the network. WDS supports bridging on the 2.4 GHz and 5 GHz radios. Enable the bridging function on the 2.4 GHz or 5 GHz radio as required. Select the operating mode and configure the parameters.
USER MANUAL AX SERIES ACCESS POINTS Operating Parameter Description Mode Enter the distance between two wireless bridge devices (root Distance bridge and non-root bridge). Other WiFi The radio can be used as a bridge or to broadcast Wi-Fi signals. Allowed 5.2.3 Client Limit Choose Config >...
USER MANUAL AX SERIES ACCESS POINTS 5.2.4 Radio Balance Choose Config > AP > Radio Balance. Currently, load balancing on radios is implemented only based on the number of STAs. After the load balancing function is enabled, you can set the ratio of STAs connected to different radios. 5.3 Network 5.3.1 External Network Choose Config >...
Page 61
USER MANUAL AX SERIES ACCESS POINTS Click Edit in the Action column to edit information about a specific port. Parameter Description Admin Status Select the management status of the port. IPv4 Enter the IPv4 address of the port. Mask Enter the IPv4 subnet mask of the port. Description Enter the description and alias of the port.
Page 62
USER MANUAL AX SERIES ACCESS POINTS Parameter Description and half-duplex. 5.3.3 VLAN Choose Config > Network > VLAN. (1) Adding a VLAN Click Add VLAN and edit the fields in the pop-up window. Click Save and a message indicating operation success is displayed. The added VLAN is displayed in the VLAN list. (2) Editing a VLAN Click Edit in the Action column and a window pops up displaying information about the VLAN.
Page 63
USER MANUAL AX SERIES ACCESS POINTS (3) Deleting a VLAN Click Delete in the Action column and click OK in the pop-up window to delete a VLAN. If multiple VLANs need to be deleted, select the target VLANs in the list. Click Delete Selected and a window pops up.
USER MANUAL AX SERIES ACCESS POINTS Note Route selection involves a primary route and backup routes. When the primary route is unavailable, for example, the interface of the primary route is inactive, the backup route will be adopted. The selection of the backup route is also determined by the priority levels. For instance, backup route 1 has a higher priority than backup route 2.
Page 65
USER MANUAL AX SERIES ACCESS POINTS (2) Adding a DHCP Address Pool Click Add DHCP and edit the fields in the pop-up window. Click Save and a message indicating operation success is displayed. The DHCP address pool will be displayed in the list. Parameter Description Pool Name...
Page 66
USER MANUAL AX SERIES ACCESS POINTS (3) Deleting a DHCP Address Pool Click Delete in the Action column and click OK in the pop-up window to delete a DHCP address pool. To delete multiple DHCP address pools, select the target DHCP address pools in the list. Click Delete Selected.
Page 67
USER MANUAL AX SERIES ACCESS POINTS Parameter Description Client Name Enter the name of the static address pool. Client IP Configure the IP address. Mask Configure the subnet mask. Client MAC Enter the MAC address of the client. Gateway Address Configure the IP address of the egress gateway.
Page 68
USER MANUAL AX SERIES ACCESS POINTS 4. Client List Choose Config > Network > DHCP > Client List. (1) Binding a MAC Address to a Dynamic IP Address Select a MAC address in the list and click Bind MAC to Dynamic IP. Click OK in the pop-up window to bind the MAC address with the dynamic IP address.
USER MANUAL AX SERIES ACCESS POINTS (3) Searching for Clients by IP Address or MAC Address Enter the IP address or MAC address in the search box. Click Search and the result is displayed in the list. 5.3.6 Port Mapping Choose Config >...
Page 70
USER MANUAL AX SERIES ACCESS POINTS Parameter Description Mapping Mode The mapping modes includes Port Mapping and DMZ Host Mapping. Enter the internal IP address to be mapped to the extranet, which is typically Internal IP the IP address of the server. Inner Port Enter the port to be mapped to the extranet.
Page 71
USER MANUAL AX SERIES ACCESS POINTS 5.3.7 VPN Choose Config > Network > VPN. You can configure VPN for only one WAN port. Enter the local IP address, local subnet mask, headquarters (HQ) IP address, HQ subnet mask, VPN address, and shared key. Click Advanced Settings to configure the algorithms.
Page 72
USER MANUAL AX SERIES ACCESS POINTS 2. Trusted Device List When Rogue AP Containment is enabled, unauthorized APs will be contained. However, some devices are trusted devices. You can configure the MAC address of a trusted device or the MAC address of a trusted manufacturer.
Page 73
USER MANUAL AX SERIES ACCESS POINTS 5.4.2 Sharing Prevention Choose Config > Security > Prevent Share. When Prevent Share is enabled, the system can detect whether one STA provides the proxy service to another and adds the STA providing the proxy service into the containment list. ITS Partner O.B.S S.L ·...
USER MANUAL AX SERIES ACCESS POINTS 5.4.3 Blacklist & Whitelist Choose Config > Security > Blacklist & Whitelist. To enhance wireless security, you can configure a blacklist (users in the blacklist are denied from accessing the Wi-Fi network) and a whitelist (only users in the whitelist are allowed to access the Wi-Fi network) to control the access of wireless users.
Page 75
USER MANUAL AX SERIES ACCESS POINTS (2) Deleting a User Click Delete in the Action column and click OK in the pop-up window to delete a user. To delete multiple users, select the target users in the list. Click Delete Selected. Click OK in the pop-up window to batch delete the users.
Page 76
USER MANUAL AX SERIES ACCESS POINTS 2. Configuring the SSID-based Blacklist or Whitelist The wireless users in the SSID-based blacklist are denied from accessing a specified Wi-Fi network. However, only the wireless users in the SSID-based whitelist are permitted to access a specified Wi- Fi network.
Page 77
USER MANUAL AX SERIES ACCESS POINTS Click Add OUI. Enter the name and OUI of a manufacturer. Click OK. 3. Configuring the Dynamic Blacklist or Whitelist Dynamic blacklist: Add malicious attack sources to the dynamic blacklist to prevent their access. After a detection mode is configured and dynamic blacklist is enabled, the device will automatically add the attack source to the dynamic blacklist when an attack is detected.
Page 78
USER MANUAL AX SERIES ACCESS POINTS Deleting a dynamic blacklist: Click Delete in the Action column and click OK in the pop-up window to delete a dynamic blacklist. To delete multiple dynamic blacklists, select the target dynamic blacklists. Click Delete Selected. Click OK in the pop-up window to batch delete the dynamic blacklists.
USER MANUAL AX SERIES ACCESS POINTS 5. Configuring the STA Dynamic Blacklist Add STAs from malicious attack sources to the STA dynamic blacklist to prevent them from accessing the network. 5.4.4 User Isolation Choose Config > Security > User Isolation. To ensure network security and information confidentiality, enable User Isolation so that intranet users cannot communicate with each other.
USER MANUAL AX SERIES ACCESS POINTS 5.4.5 Attack Prevention Choose Config > Security > Attack Protection. Malicious attacks often occur in a network environment. These attacks overload the device, resulting in high CPU usage and an operation failure of the device. Select attack prevention types and click Save.
Page 81
USER MANUAL AX SERIES ACCESS POINTS 5.4.6 ARP Entry Binding Choose Config > Security > ARP. (1) Switching a Dynamic Binding to a Static Binding Select one entry in the ARP list. Click Dynamic Binding >> Static Binding in the Action column to switch the dynamic binding to the static binding.
USER MANUAL AX SERIES ACCESS POINTS (3) Manual Binding Click Manual Binding. Enter the IP and MAC addresses. Click OK and a message indicating operation success is displayed. The new entry is displayed in the ARP list. 5.4.7 ACL Choose Config > Security > ACL. When receiving a packet, a device interface on which an ingress ACL is configured checks whether the packet matches an access control entry (ACE) in the ingress ACL.
Page 83
USER MANUAL AX SERIES ACCESS POINTS (2) Deleting an ACL Select the ACL to be deleted from the drop-down ACL list. Click Delete ACL. Click OK in the pop-up window to delete the ACL. (3) Adding an ACE Select an ACL to which an ACE needs to be added from the drop-down ACL list. Click Add Access Rule.
Page 84
USER MANUAL AX SERIES ACCESS POINTS (4) Editing an ACE Click Edit in the Action column of an ACE in the ACL list. Edit the fields in the pop-up window. Click OK and a message indicating operation success is displayed. ITS Partner O.B.S S.L ·...
Page 85
USER MANUAL AX SERIES ACCESS POINTS (5) Deleting an ACE Select one or more entries in the ACL list. Click Delete Selected. Click OK in the pop-up window to delete the ACE(s). 2. ACL Time An ACL can be configured to take effect based on time, for example, in some time periods of a week.
Page 86
USER MANUAL AX SERIES ACCESS POINTS (1) Adding a Time Object Click Add Time Object. Edit the fields in the pop-up window. Click Save and a message indicating operation success is displayed. (2) Deleting a Time Object Click Delete in the Action column and click OK in the pop-up window to delete a time object. To delete multiple time objects, select the target time objects in the list.
USER MANUAL AX SERIES ACCESS POINTS (3) Editing a Time Object Click Edit in the Action column of a time object. Edit the fields in the pop-up window. Click Save and a message indicating operation success is displayed. 3. ACL Application You can configure ACEs and apply them to interfaces or Wi-Fi networks to restrict the access of specified users or allow users to access specified networks.
Page 88
USER MANUAL AX SERIES ACCESS POINTS (2) Deleting an ACL Application Click Delete in the Action column and click OK in the pop-up window to delete an ACL application. To delete multiple ACL applications, select the target ACL applications in the list. Click Delete Selected.
USER MANUAL AX SERIES ACCESS POINTS 5.5 Authentication 5.5.1 Web-based Authentication Choose Config > Authentication > Web Auth. Web-based authentication allows you to control user access to the network. After web-based authentication is enabled, when a client needs to access the network, the device will steer the client to access a specific website (portal server) for authentication.
Page 90
USER MANUAL AX SERIES ACCESS POINTS Caution Before configuring ePortal authentication, you need to set up an ePortal authentication server, including the deployment of the ePortal server and the configuration of authorized users on the RADIUS server. (1) ePortalv1: ITS Partner O.B.S S.L · Av. Cerdanyola 79-81 Local C 08172 Sant Cugat del Vallés ·...
Page 91
USER MANUAL AX SERIES ACCESS POINTS Parameter Description Enter the IP address of the ePortal server. Typically, the authentication page Portal Server IP is provided by the ePortal server. Enter the URL of the authentication page. When an unauthenticated user Redirection URL accesses network resources, the user is automatically redirected to this page for authentication.
Page 92
USER MANUAL AX SERIES ACCESS POINTS Parameter Description Enter the URL that users will be redirected to, typically the URL of the Redirection URL portal authentication page. Configure a key used for the communication between the device and Portal Key the authentication server.
Page 93
USER MANUAL AX SERIES ACCESS POINTS (1) Adding a WiFiDog Authentication Server Click Add Authentication Server. Enter the fields in the pop-up window. Click OK and a message indicating operation success is displayed. The new entry is displayed in the list Parameter Description Portal Server IP...
USER MANUAL AX SERIES ACCESS POINTS used for communication with the server. Enter the ID of a gateway used by WiFiDog, which is the gateway SN by Gateway ID default. Enter HTTP redirection or JavaScript redirection. JavaScript redirection Redirection Mode is employed by default.
Page 95
USER MANUAL AX SERIES ACCESS POINTS Parameter Description In this mode, the AP can automatically steer a STA to the Auto optimal radio based on the radio load utilization. Navigation Mode In this mode, the AP steers a STA to the corresponding Fixed radio, which remains unchanged despite differences in radio environments.
Page 96
USER MANUAL AX SERIES ACCESS POINTS 5.7 Advanced 5.7.1 Multicast/Unicast Choose Config > Advanced > Multicast/Unicast. This function is used to configure the communication mode of a device as broadcast, multicast, or unicast. 5.7.2 Antenna Choose Config > Advanced > Antenna. RF antennas are categorized into built-in antennas and external antennas.
Page 97
USER MANUAL AX SERIES ACCESS POINTS 5.7.3 RADIUS Choose Config > Advanced > Radius. 1. RADIUS Server The Remote Authentication Dial-In User Service (RADIUS) server conducts authentication and accounting on access users to safeguard the network and facilitate management for network administrators.
Page 98
USER MANUAL AX SERIES ACCESS POINTS (2) Adding a Server Select All Servers for the Server Group field. Click Add Server. Enter the fields in the pop-up window. Click Save and a message indicating operation success is displayed. ITS Partner O.B.S S.L · Av. Cerdanyola 79-81 Local C 08172 Sant Cugat del Vallés ·...
Page 99
USER MANUAL AX SERIES ACCESS POINTS Parameter Description Server IP Enter the IP address of a RADIUS server. Enter the UDP port number for RADIUS authentication. The value range is Authentication from 0 to 65535. The value 0 indicates that the host does not perform Port authentication.
Page 100
USER MANUAL AX SERIES ACCESS POINTS (4) Deleting a Server Click Delete in the Action column and click OK in the pop-up window to delete a server. To delete multiple servers, select the target servers in the list. Click Delete Selected. Click OK in the pop-up window to batch the servers.
Page 101
USER MANUAL AX SERIES ACCESS POINTS 1 to 65535. The default value is 2083. Enter the TLS connection timeout. The value range is from 1 to 1000. TLS Timeout(s) The default value is 5. (2) Editing a Server Click Edit in the Action column. Edit the parameters in the pop-up window. Click Save. (3) Deleting a Server Click Delete in the Action column and click OK in the pop-up window to delete a server.
Page 102
USER MANUAL AX SERIES ACCESS POINTS (4) Local Certificate Management Click Local Certificate Info. The local certificate management window pops up. The icon on the right of Local Certificate Info shows the certificate loading status. Select a certificate file and private key file. Enter the certificate password (if any). Click Upload & Load. A message indicating operation success is displayed.
USER MANUAL AX SERIES ACCESS POINTS 6 Diagnosis 6.1 Detection Tools 6.1.1 Network Diagnosis Choose Diagnosis > Detection Tools > Network Diagnosis. 1. Connectivity Test Detection Item Description Port Status Check whether a port on the AP is Up. WiFi Configuration Check whether a Wi-Fi network is configured on the AP.
Page 104
USER MANUAL AX SERIES ACCESS POINTS 2. Ping Parameter Description Dest IP/Domain Enter the destination IP address or domain name to be pinged. Name Enter the source IP address of ping packets, that is, the local interface Source IP address of the device. Timeout Enter the timeout interval.
Page 105
USER MANUAL AX SERIES ACCESS POINTS 3. Tracert Parameter Description Dest IP/Domain Enter the Tracert destination address or domain name. name Enter the Tracert source address, that is, the local interface address of Source IP the device. Timeout Interval(s) Enter the timeout interval. 6.2 Log 6.2.1 Syslog Choose Diagnosis >...
Page 106
USER MANUAL AX SERIES ACCESS POINTS 6.3 Wireless Intrusion Detection System 6.3.1 Rogue AP Choose Diagnosis > WIDS > Rogue AP. Rogue APs may exist on a wireless network. They may have security vulnerabilities or be controlled by attackers, posing great threat to network security. The following page displays potential rogue APs that are identified when rogue AP containment is enabled.
USER MANUAL AX SERIES ACCESS POINTS 7 Maintenance 7.1 Settings 7.1.1 Local Update Choose Maintenance > Settings > Local Upgrade. Click Browse to select the downloaded .bin file. Click Upgrade. Caution During the upgrade, the device will be restarted, causing network disconnection and service ⚫...
USER MANUAL AX SERIES ACCESS POINTS 7.1.3 Configuration Management Choose Maintenance > Settings > Backup & Restore. 1. Backup Back up the configuration file on the device. You can import or export configurations to perform batch operations, facilitating configuration management. ITS Partner O.B.S S.L ·...
USER MANUAL AX SERIES ACCESS POINTS 2. Restore After restoring the device to factory settings, use the default IP address to access web. Restoring the device to factory settings will clear all configurations. Therefore, exercise with caution. 7.1.4 System Time Choose Maintenance >...
USER MANUAL AX SERIES ACCESS POINTS 7.1.5 System Mode Choose Maintenance > Settings > System Mode. Select the system mode of the AP. Fit AP Mode, Fat AP Mode, and Cloud Mode are supported. 7.1.6 Log Server Choose Maintenance > Settings > Syslog. The device sends local logs to the server for storage.
USER MANUAL AX SERIES ACCESS POINTS 7.2 System 7.2.1 Web Management Choose Maintenance > System > Web. 1. Admin Password To enhance the system security and ensure secure information exchange, you are advised to change the default password of the system. ITS Partner O.B.S S.L ·...
Page 112
USER MANUAL AX SERIES ACCESS POINTS 2. Basic Settings To facilitate device management, configure the device location on the Basic Settings page. Set the web access port and login timeout. When the login timeout expires, the web system automatically exits to ensure system security. If the device supports the configuration of Limit logins, set the maximum number of users who can log in to the device simultaneously using the same account (the default value is 10).
Page 113
USER MANUAL AX SERIES ACCESS POINTS 7.2.2 Telnet Choose Maintenance > System > Telnet. The Telnet feature enhances the system security and ensures secure information exchange. On the Telnet page, Telnet Service and SSH Service can be enabled or disabled, and the password can be configured.
Page 114
USER MANUAL AX SERIES ACCESS POINTS 7.2.4 SNMP Choose Maintenance > System > SNMP. Simple Network Management Protocol (SNMP) provides a method for collecting network management information from devices on the network. SNMP can be used to manage numerous network devices. ITS Partner O.B.S S.L ·...
Need help?
Do you have a question about the EKSELANS AX 3000 and is the answer not in the manual?
Questions and answers