OVERVIEW Grandstream’s powerful indoor and outdoor Wi-Fi Access Points (APs) offer high-performance networking and an exceptional Wi-Fi coverage range. The outdoor series offers weatherproof certified casing and supports up to a 300-meter coverage range. They are supported by GDMS Networking and GWN Manager, Grandstream’s cloud and on-premise free management platforms.
Page 3
device. 2×2:2 2.4GHz MIMO 2×2:2 5GHz Up to 175 meters Coverage Range Note: coverage range can vary based on environment. 2.4G: 26dBm Max TX Power 5G: 26dBm Note: Maximum power varies by country, frequency band and MCS rate. 2.4G 802.11b: -96dBm @1Mbps, -88dBm @11Mbps; 802.11g: -93dBm @6Mbps, -75dBm @54Mbps;...
Page 4
Unit Dimension: 150mmx106mmx34.1mm; Unit Weight: 473g Physical Entire Package Dimension: 193mmx138.5mmx54mm; Entire Package Weight: 600g Compliance FCC, CE, RCM, IC Package Contents GWN7670WM Wi-Fi 7 Wireless AP, Mounting Kits, Quick Start Guide GWN7670WM Technical Specifications GWN7670 Technical Specifications Wi-Fi Standards IEEE 802.11 a/b/g/n/ac/ax/be 5 single frequency antennas 2.4GHz x 2, gain 3.5dBi...
Page 9
Mounting In-wall mountable LEDs 1 tri-color LEDs for device tracking and status indication Network Protocols IPv4, IPv6, 802.1Q, 802.1p, 802.1x, 802.11e/WMM 802.11e/WMM, VLAN, TOS Embedded controller can manage up to 50 local GWN APs Network Management GDMS Networking offers a free cloud management platform for unlimited GWN APs. GWN Manager offers premise-based software controller for up to 50,000 APs.
Page 10
2.4G: 20 and 40 MHz (x4) Channel Bandwidth 5G: 20, 40,80 and 160 MHz (x4) WPA/WPA2-PSK, WPA/WPA2 Enterprise (TKIP/AES); WPA3, anti-hacking secure boot and critical Wi-Fi and System data/control lockdown via digital signatures, unique security certificate and random default password per Security device.
Page 11
Unit Dimension: 260mm(L)x310mm(W)x59mm(H); Unit Weight: 1.445kg Physical Entire Package Dimension: 469mm x 377mm x 137mm; Entire Package Weight: 3.06kg Package Content GWN7664ELR 802.11ax Wireless AP, Mounting Kits, Quick Installation Guide. Weatherproof Grade IP67-level weatherproof capability when installed vertically. Compliance FCC, CE, RCM, IC GWN7664ELR Technical Specifications GWN7664E Technical Specifications Wi-Fi Standards...
Page 13
IEEE 802.11n: 6.5 Mbps to 300 Mbps IEEE 802.11a: 6, 9, 12, 18, 24, 36, 48, 54 Mbps 2.4G: IEEE 802.11ax: 7.3 Mbps to 573.5 Mbps IEEE 802.11n: 6.5 Mbps to 300 Mbps IEEE 802.11b: 1, 2, 5.5, 11 Mbps IEEE 802.11g: 6, 9, 12, 18, 24, 36, 48, 54 Mbps *Actual throughput may vary depending on many factors including environmental conditions, distance between devices, radio interference in the operating environment and mix of devices in the network...
Page 14
LEDs 1 tri-color LED for device tracking and status indication; 1 single-color LED for SFP Network Protocols IPv4, IPv6, 802.1Q, 802.1p, 802.1x, 802.11e/WMM 802.11e/WMM, VLAN, TOS Embedded controller can manage up to 50 local GWN APs Network Management GDMS Networking offers a free cloud management platform for unlimited GWN APs. GWN Manager offers premise-based software controller for up to 3,000 GWN APs.
Page 15
*Actual throughput may vary depending on many factors including environmental conditions, distance between devices, radio interference in the operating environment and mix of devices in the network 2.4GHz Radio: 2400 – 2483.5 MHz Frequency Bands 5GHz Radio: 5150 – 5850 MHz *Not all frequency bands can be used in all regions 2.4G: 20 and 40 MHz Channel Bandwidth...
Page 16
Auto Power Saving Self-power adaptation upon auto detection of PoE or PoE+ Power and Green PoE 802.3af/ 802.3at; Energy Efficiency Maximum Power Consumption: 12.95W Operation: 0°Cto 50°C Environmental Storage: -10°C to 60°C Humidity: 10% to 95% Non-condensing Unit Dimension: 180.4mmx180.4mmx40.8mm(TBD); Unit Weight: 385g Physical Entire Package Dimension: 228.5x220x79mm(TBD);...
Page 17
2×2:2 2.4GHz (MU-MIMO) MIMO 2×2:2 5GHz (MU-MIMO) 2×2:2 6GHz Up to 175 meters Coverage Range *coverage range can vary based on the environment 2.4G: 24 dBm 5G: 27dBm Maximum TX Power 6G: 26 dBm *Maximum power varies by country, frequency band, and MCS rate 2.4GHz 802.11b: -96dBm@1Mbps, -88dBm@11Mbps;...
Page 20
Wi-Fi Standards IEEE 802.11 a/b/g/n/ac/ax 6 single frequency internal antennas Antennas 2.4GHz, gain 3.65dBi 5 GHz, gain 5.26dBi 2.4GHz: IEEE 802.11ax: 8 Mbps to 1147 Mbps IEEE IEEE 802.11n: 6.5Mbps to 300Mbps IEEE 802.11b: 1, 2, 5.5, 11 Mbps IEEE 802.11g: 6, 9, 12, 18, 24, 36, 48, 54 Mbps 5GHz: Wi-Fi Data Rates IEEE 802.11ax: 8 Mbps to 2402 Mbps IEEE...
Page 21
Auxiliary Ports 1x Reset Pinhole Mounting Indoor wall mount or ceiling mount, kits included LEDs 1 tri-color LEDs for device tracking and status indication Network Protocols IPv4, IPv6, 802.1Q, 802.1p, 802.1x, 802.11e/WMM 802.11e/WMM, VLAN, TOS Embedded controller can manage up to 50 local GWN APs Network Management GDMS Networking offers a free cloud management platform for unlimited GWN APs.
Page 22
2.4G: 20 and 40 MHz Channel Bandwidth 5G: 20, 40 and 80 MHz WEP, WPA/WPA2-PSK, WPA/WPA2 Enterprise (TKIP/AES); WPA3, anti-hacking secure boot and critical Wi-Fi and System data/control lockdown via digital signatures, unique security certificate and random default password per Security device 2×2:2 2.4GHz (MIMO)
Page 25
6 single frequency internal antennas Antennas 2.4GHz, gain 3.5dBi 5GHz, gain 4.5dBi 2.4GHz: IEEE 802.11n: 6.5Mbps to 300Mbps IEEE 802.11b: 1, 2, 5.5, 11 Mbps IEEE 802.11g: 6, 9, 12, 18, 24, 36, 48, 54 Mbps 5GHz: Wi-Fi Data Rates IEEE 802.11ac: 6.5 Mbps to 1733 Mbps IEEE 802.11n: 6.5Mbps to 600Mbps IEEE 802.11a: 6, 9, 12, 18, 24, 36, 48, 54 Mbps...
Page 26
Embedded controller can manage up to 30 local GWN APs. Network Management GDMS Networking offers a free cloud management platform for unlimited GWN APs. GWN Manager offers premise-based software controller for up to 3,000 GWN APs. Auto Power Saving Self-power adaptation upon auto detection of PoE or PoE+ Supports 802.3az Power and Green PoE 802.3af/ 802.3at...
2.4G: 20 and 40 MHz (x4) Channel Bandwidth 5G: 20, 40 and 80 MHz (x4) WEP, WPA/WPA2-PSK, WPA/WPA2 Enterprise (TKIP/AES); WPA3, anti-hacking secure boot and Wi-Fi and System critical data/ control lockdown via digital signatures, unique security certificate and random default Security password per device 4×4:4 2.4GHz...
802.11e/WMM, VLAN, TOS Embedded controller can manage up to 50 local GWN APs Network GDMS Networking offers a free cloud management platform for unlimited GWN APs Management GWN Manager offers premise-based software controller for up to 3,000 GWN APs Auto Power Saving Self-power adaptation upon auto detection of PoE or PoE+ Power over Ethernet 802.3af/802.3at compliant Power and Green...
Page 34
SSIDs 32 SSIDs total, 16 per radio (2.4GHz and 5GHz) Concurrent Clients 200+ Network Interfaces 2x autosensing 10/100/1000 Base-T Ethernet Ports Auxiliary Ports 1x Reset Pinhole, 1x Kensington lock Mounting Indoor wall mount or ceiling mount, kits included LEDs 3 tri-color LEDs for device tracking and status indication Network Protocols IPv4, 802.1Q, 802.1p, 802.1x, 802.11e/WMM, 802.11h 802.11e/WMM, VLAN, TOS...
Page 35
IEEE 802.11ac: 6.5 Mbps to 1300Mbps IEEE 802.11a: 6, 9, 12, 18, 24, 36, 48, 54 Mbps IEEE 802.11n: 6.5 Mbps to 450 Mbps IEEE 802.11b: 1, 2, 5.5, 11Mbps Wi-Fi Data Rates IEEE 802.11g: 6, 9, 12, 18, 24, 36, 48, 54 Mbps *Actual throughput may vary depending on many factors including environmental conditions, distance between devices, radio interference in the operating environment and mix of devices in the network...
Page 36
Network Protocols IPv4, 802.1Q, 802.1p, 802.1x, 802.11e/WMM, 802.11h 802.11e/WMM, VLAN, TOS ≤ 50 APs: Light-weight Master in AP Network ≤ 3000 APs: On-Premises controller Management ≤ +∞ APs: Cloud management POE 802.3af/ 802.3at; Power and Green Energy Efficiency Max Consumption: 12.5W Operation: 0°C to 40°C Environmental Storage: -10°C to 60°C...
Page 37
2.4G: 20 and 40 MHz Channel Bandwidth 5G: 20,40 and 80 MHz WEP, WPA3, WPA/WPA2-PSK, WPA/WPA2-Enterprise (TKIP/AES), anti-hacking secure boot and Wi-Fi and System critical data/control lockdown via digital signatures, unique security certificate and random default Security password per device 2×2:2 2.4GHz (MIMO) MIMO 2×2:2 5GHz (MU-MIMO)
Page 38
Power over Ethernet 802.3af/802.3at compliant Power and Green Energy Efficiency Maximum Power Consumption: 13.8W Operation: 0°C to 40°C Environmental Storage: -10°C to 60°C Humidity: 10% to 90% Non-condensing Unit Dimension: 180.4mmx180.4mmx40.8mm; Unit Weight: 388.2g Physical Entire Package Dimension: 228.5x220x79mm; Entire Package Weight: 719.3g Package Content GWN7605 802.11ac Wireless AP, Mounting Kits, Quick Start Guide Compliance...
Page 39
Up to 250 meters Coverage Range *coverage range can vary based on environment 2.4G: 24 dBm Maximum TX Power 5G: 22dBm 2.4G 802.11b: -96dBm@1Mbps, -88dBm@11Mbps; 802.11g: -93dBm @6Mbps, -75dBm@54Mbps; 802.11n 20MHz: -73dBm @MCS7; 802.11n 40MHz:-70dBm @MCS7 Receiver Sensitivity 802.11a: -92dBm @6Mbps, -74dBm @54Mbps; 802.11ac 20MHz: -67dBm@MCS8; 802.11ac: HT40:- 63dBm @MCS9;...
Page 42
2 Dual band internal antennas Antennas Antenna 1 – 2.4GHz: gain 3.0dBi, 5GHz: gain 3.5dBi Antenna 2 – 2.4GHz: gain 3.5dBi, 5GHz: gain 3.0dBi 2.4GHz: IEEE 802.11n: 6.5Mbps to 300Mbps IEEE 802.11b: 1, 2, 5.5, 11 Mbps IEEE 802.11g: 6, 9, 12, 18, 24, 36, 48, 54 Mbps 5GHz: Wi-Fi Data Rates IEEE 802.11ac: 6.5 Mbps to 1733 Mbps...
Page 43
LEDs 1 tri-color LEDs for device tracking and status indication Network Protocols IPv4, IPv6, 802.1Q, 802.1p, 802.1x, 802.11e/WMM, 802.11h 802.11e/WMM, VLAN, TOS GDMS Networking offers a free cloud management platform for unlimited GWN APs. Network Management GWN.Manager offers premise-based software controller for up to 3,000 GWN APs. Auto Power Saving Self-power adaptation upon auto detection of PoE or PoE+ Support 802.3az...
Page 44
MU-MIMO 2×2:2 2.4GHz, 2×2:2 5GHz Up to 100 meters Coverage Range *coverage range can vary based on environment 5G: 22dBm Maximum TX Power 2.4G: 24dBm *Maximum power varies by country, frequency band, and MCS rate 2.4GHz 802.11b: -96dBm@1Mbps, -88dBm@11Mbps; 802.11g: -93dBm @6Mbps, -75dBm@54Mbps; 802.11n 20MHz: -73dBm @MCS7;...
INSTALLATION Before deploying and configuring the GWN76XX, the device needs to be properly powered up and connected to the network. This section describes detailed information on installation, connection, and warranty policy of the GWN76XX. Equipment Packaging GWN76xx GWN76xx Equipment Packaging Main Case (GWN7625, GWN7664, GWN7660, GWN7630, GWN7615, GWN7605, GWN7662 ,GWN7665, Yes (1) GWN7664E, GWN7660E, GWN7670).
Page 49
Port Description Power Power adapter connector (12V, 2A) for GWN7602, GWN7603 and GWN7604 Ethernet RJ45 port (10/100/1000Mbps) supporting PoE/PoE+. * GWN7624, GWN7661, GWN7661E supports 2x 10/100/1000Mbps Ethernet ports with PSE. NET/PoE • The maximum output of each PSE port is 6W. •...
GWN7670WM Ports Port Description NET/2.5G (PoE+) Ethernet RJ45 port (2.5 Gbps) supporting PoE/PoE+. RESET Factory reset pinhole. Press for 7 seconds to reset factory default settings. GWN7670WM ports Power and Connect GWN76XX Access Point Step 1: Connect one end of a RJ-45 Ethernet cable to the NET or PoE/NET port of the GWN76XX unit. Step 2: Connect the other end of the Ethernet cable(s) into a LAN port to your Network.
Wall/Ceiling Mount Installation GWN76XX GWN7625/GWN7664/GWN7660/GWN7630/GWN7615/GWN7605/GWN7662/GWN7665/GWN7660E/GWN7664E/GWN7670 can be mounted on the wall or ceiling, please refer to the following steps for the appropriate installation. Wall Mount – GWN76xx Step1: Position the mounting bracket at the desired location on the wall with the arrow pointing up. Step 2: Use a pencil to mark the four mounting holes (screw holes DIA 5.5mm, reticle hole DIA 25mm).
Page 52
Ceiling Mount – Step 1, 2 and 3 Step 4: Connect the power cable and the Ethernet cable (RJ45) to the correct ports of your GWN76XX. Step 5: Align the arrow on the GWN AP with the arrow on the locking tab of the mounting bracket and ensure that your GWN is firmly seated on the mounting bracket and connect the network and power cables.
Wall Mount GWN76xxLR Wall Mount 1. Drill four holes on the wall referring to the positions of the ones on the base bracket. Then, fix an expansion screw in each hole. 2. Attach the GWN76xxLR access point by securing the Base Bracket with the expansion screws on the wall. Pole Mount GWN76xxLR Pole Mount 1.
Page 54
Wall Mount 4. Attach the front cover with the AP body and then the grey screw on the side. GWN7624/GWN7661/GWN7661E Wall Installation Mounting Instructions for GWN7670WM The GWN7670WM can be installed on the wall using one of two methods: Embedded Wall Installation (Rear Shell Not Required) 1.
Page 55
Wall or Electrical Box Installation (Rear Shell Required) 1. Use a measuring tape to measure the distance between the two wall mount slots on the back of the GWN7670WM rear shell, and mark the mounting screw holes on the wall with a pencil. 2.
Page 56
4. Connect the Ethernet (RJ45) or Fiber (SFP module) to the appropriate port, then screw the front clamp nut with the port and screw the back clamp nut with the front clamp nut. Waterproof Kits Installation Note: Please use a 5mm diameter Ethernet cable and a 2.8mm diameter Fiber cable, if the Ethernet or Fiber cable is too small, the device may leak.
Page 57
Wall Mount Pole Mount – GWN76xxELR 1. Please refer to the waterproof kit installation. 2. Connect the Ethernet (RJ45) or Fiber (SFP module) to the correct port and tighten the waterproof joints. 3. Attach the Base Bracket with screws (HM 5.0 x 12) on the back of the access point. 4.
GETTING STARTED The GWN76XX Wireless Access Point provides an intuitive web GUI configuration interface for easy management to give users access to all the configurations and options for the GWN76XX’s setup. This section provides step-by-step instructions on how to read LED patterns, discover the GWN76XX, and use its Web GUI interface.
if a GWN76XX has the MAC address 00:0B:82:8B:58:30, this unit can be accessed by typing https://gwn_000b828b5830.local/ on the browser. Discover the GWN76XX using its MAC Address Method 2: Discover the GWN76XX using the GWN Discovery Tool 1. Download and install the GWN Discovery Tool from the following link: https://www.grandstream.com/support/tools 2.
GWN76XX Web GUI Login Page To access the Web GUI: 1. Make sure to use a computer connected to the same local Network as the GWN76XX. 2. Ensure the device is properly powered up. 3. Open a Web browser on the computer and type in the URL using the MAC address as shown in [Discover the GWN76XX ] or the IP address using the following format: http(s)://IP_Address 4.
GWN76XX Web GUI Language (Web Interface) Overview Page Overview is the first page shown after successful login to the GWN76XX’s Web Interface. This page provides an overall view of the GWN76XX information presented in a Dashboard style for easy monitoring along with firmware version and date-time information at the top.
New Firmware Notification: Starting from firmware version 1.0.5.13/1.0.5.14, and once a different OFFICIAL firmware is released on the Grandstream Networks website, the master AP will pop up a reminder notification to the administrator to upgrade the device. You can click on the New button to be redirected to the release note of the new firmware version, for upgrading steps please refer to section [UPGRADING AND BACKUP/RESTORE].
GWN Manager Starting from firmware 1.0.13.1, the GWN76XX can be managed and monitored by your GWN Manager account, GWN Manager On-premises Access Points Controller platform can be installed using the link below: https://www.grandstream.com/support/firmware GWN Manager Architecture Note: GWN Manager installation is supported on virtual machines. Please refer to GWN Management Platform User Guide for more detailed information.
USING GWN76XX AS MASTER ACCESS POINT CONTROLLER Master Mode allows a GWN76XX to act as an Access Point Controller managing other GWN76XX access points. This will allow users to add other access points under one controller and manage them in an easy and centralized way Master/Slave mode is helpful with large installations that need more area zone coverage with the same controller.
Page 65
To pair and manage access points located on remote networks, the admin needs to configure the IP address of the master AP on DHCP option 43 which will be sent to the slave access point during the booting stage and allow the save/master connection to be established remotely.
The paired GWN76XX access point will appear Online, users can click on to unpair it. GWN76XX Online If a GWN76XX is not being discovered or the pair icon is grey color, make sure that it is not being paired with another GWN76XX Access Point acting as Master Controller.
After this step, you will be redirected to GDMS Networking/GWN Manager page, select the network and click on “Save” button to complete the transfer. GDMS Networking – Select Network This feature will allow you to transfer your local configurations to your cloud account. For more details, please refer to GDMS Networking –...
Failover AP Failover Mode Once Failover slave has been selected, the primary master will send the configuration of the network to the Failover slave and the slave will start monitoring the status of the primary master to detect any failure for any reason (network connection loss, power outage).
Takeover Feature This feature is used to re-pair the slave APs whose master has gone offline with another master AP in the same subnet. Please follow the steps to takeover slave APs from another master: Step 1. Log in to the Web GUI of Master and click on “Discover APs” on the Access Points Page. Takeover –...
Switch to Master Click on button, the following warning message will prompt to confirm the procedure: Transfer Master Role to another device confirmation message When the process is finished, the original Master will turn to be a slave for the new Assigned Master and to log in to the new Master AP web interface, you will need to use the previous Master Admin password.
Page 71
To verify, you may access the bridged AP configuration, then under Status, the option “Client Bridge Mode” would be set to Isolated as shown in the figure down below: Client Bridge Mode Important notes The access point that will be operating on bridge mode, must be set with a fixed IP address before activating the bridge mode on the access point.
If the AP is slave to a Master controller, the default username is admin, and the default password is the master AP’s password. If the AP is paired to the GDMS Networking the default username is admin, and the default password is the SSH Password (GDMS Networking →...
Manager Address Enter the IP address of the GWN Manager Manager Port Enter the port set for the GWN Manager Allow DHCP Option 43 This configuration will not be effective if AP has been managed by cloud. Override Manager Address Manager settings Debug Slave AP debug...
Page 74
To locate the access point, click the Location Icon (refer to the figure above). Once clicked, the LED on the access point will start blinking continuously until it is manually turned off. To transfer a Slave Access Point (AP) to a Master AP, click the Role Switch Icon located next to the Location Icon. This action will swap the roles: the Slave AP will become the Master, and the current Master AP will switch to a Slave.
Page 75
The first tab “Info” shows general information about the access point such as the firmware version, IP address, Uptime, etc. The second tab “Current Client” displays the clients connected to this AP and the last tab is used by administrator for debugging purposes and provides the following tools: Core Files, when a crash event happens on the unit, it will automatically generate a coredump file that can used by engineering team for debugging purposes.
The administrator can move GWN Access points from one network to another. Click on Move button and the following window will popup, select the network where to move the access point and click on move. Moving Access Points between Networks Delete Access Points To delete an access point, select it, then click on reboot button, the following confirmation message will be displayed: Delete Access Point...
Page 77
Access Point Configuration Page – Example GWN7660ELR Note: The number of ports, their types and speeds, as well as the supported wireless bands, vary based on the hardware specifications of the access point model. The following settings can be configured from this page: Device Name Set GWN76xx’s name to identify it along with its MAC address.
Enables bonding of Ethernet ports into a single logical uplink. Increases total bandwidth and provides Port Aggregation link redundancy. Note: Must be supported on the peer device. Select the bonding method: Link aggregation Type LACP (dynamic negotiation) or Static (manual config). Note: Both sides must match to form a valid link group.
Page 79
Link Aggregation (also known as Port Bonding or LAG) allows GWN76xx access points to combine multiple Ethernet ports into a single logical uplink. This setup provides increased bandwidth and ensures redundancy in case one connection fails. GWN76xx access points support two LAG types: Static: Manually configured, no negotiation required.
Page 80
Add a new SSID When editing or adding a new SSID, users will have two tabs to configure: Wi-Fi: Please refer to the below table for Wi-Fi tab options Basic SSID Set or modify the SSID name. Enable SSID Check to enable Wi-Fi for the SSID.
Page 81
• WPA/WPA2: Using “PSK” or “802.1x” as WPA Key Mode, with “AES” or “AES/TKIP” Encryption Type. • WPA2: Using “PSK”, “PPSK” or “802.1x” as WPA Key Mode, with “AES” or “GCMP-128” Encryption Type. • WPA2/WPA3: Using “SAE-PSK” or “802.1x” as WPA Key Mode, with “AES” or “GCMP-128” Encryption Type.
Page 82
• RADIUS Server Port : Enter the secondary RADIUS server port. The default port is 1812 and the range is 1-65535. • RADIUS Server Secret: Enter the secret password for client authentication with the secondary RADIUS server. Configure the address for the RADIUS accounting server. This field is available only when “WPA Key RADIUS Accounting Server Mode”...
Page 83
The OS Filtering option allows you to control access to the network based on the operating system of the client devices. This feature can be set to either blacklist or whitelist specific operating systems. Options: OS Filtering • Disabled: No filtering based on the operating system (default). •...
Page 84
Check to enable/disable Voice Enterprise. The roaming time will be reduced once enabled voice enterprise. • The 802.11k standard helps clients to speed up the search for nearby APs that are available as roaming targets by creating an optimized list of channels. •...
Page 85
Device Membership Click on to add the GWN76XX to the SSID or click on to remove it. Wi-Fi Phones (WP) series device fast configuration This feature helps to quickly create and configure SSID based on Wi-Fi phones (WP series) default configurations, WP phones come by default with an SSID name and password.
Page 86
The SSID default password is already pre-configured with the WP phone. WP phone For more details visit: https://documentation.grandstream.com/knowledge-base/wp816-user-guide/#auto-connection CLIENTS Users can access clients list connected to GWN76XX from Web GUI → Clients to perform different actions to wireless clients. Clients Click on under Actions to check client’s status and modify basic settings such Device’s Name.
Clients – Select Items ACCESS CONTROL Access List From this menu, users can manage the blacklist of clients that will be blocked from accessing the Wi-Fi network globally, click on “Edit” icon as shown below to add/remove MAC addresses of the client to/from global blacklist. Global Blacklist Managing the Global Blacklist A second option is to add custom access lists that will be used as matching mechanism for MAC address filtering option...
Page 88
Adding Client Access List Note: The total number of entries is limited to 1024, including the Global Blacklist. For the GWN7602 model, the limit is 256 entries. Users can also Import/Export the client access lists in CSV format as shown below: Import/Export the client access Users can check «...
Use MAC Filtering Time Policy The timed client disconnect feature allows the system administrator to set a fixed time for which clients should be allowed to connect to the access point, after which the client will no longer be allowed to connect until the user configurable cool-down period is reached.
Time tracking shall be accounted for on a per-policy basis, such that a client connected to any SSID assigned the time tracking policy will accrue a common counter, regardless of which SSID they are connected to (as long as those SSIDs all share the same time tracking policy).
Page 91
Enable Enable this option to assign a schedule for the bandwidth rule. Schedule Upload Specify the limit for the upload bandwidth using Kbps or Mbps. Limit Download Specify the limit for the download bandwidth using Kbps or Mbps. Limit Bandwidth Rules The following figure shows examples of bandwidth rules: ...
Page 92
Add a PPSK Profile In case where the Maximum Number of Access Clients set to 1, then an option to specify a MAC Address is added. Please refer to the figure below: PPSK – Maximum Number of Access Clients Select the SSID from the drop-down list SSID Note: the SSID WPA Key Mode must be set to “PPSK Without RADIUS or With RADIUS“.
In case the maximum number of access clients is set to 1, then the user can specify the MAC address as well for even more security. Upload Limit set a max upload limit (Mbps/Kbps) Download Limit set a max download limit (Mbps/Kbps) VLAN specify a VLAN or leave it empty (Default VLAN).
Policy List Users can customize a portal policy in this page. Captive Portal – Policy List Click on to edit the policy. Click on to delete the policy. Click on to add a policy. The policy configuration page allows adding multiple captive portal policies which will be applied to SSIDs and contains options for different authentication types.
Page 95
Below table lists the items policy add page configures Name Enter the name of the Captive Portal policy Splash Page Select Splash Page type, in this case “Internal” The following types of authentications are available: ● Log in for free: when choosing this option, the landing page feature will not provide any type of authentication instead, it will prompt users to accept the license agreement to gain access to the internet.
Page 96
Force to Follow If checked, users need to Follow owner before been authenticated. Consumer Key Enter the app Key to use Twitter Login API. Consumer Secret Enter the app secret to use Twitter Login API. Google Check this box to enable Google Authentication. Google Client ID Enter the Client Id to use Google Login API.
● Disabled: Non -day access limit. ● According to the client limit: After opening, only the Guest is allowed to be connected once a day, and it Enable Daily Limit is not allowed to authenticate again after the network use timeout. ●...
Page 98
RADIUS Server Address IP address of the RADIUS server used for authentication: e.g. 38.243.72.163 RADIUS Server Port Port number for the RADIUS authentication server: e.g. 31912 RADIUS Server Secret Shared secret for authenticating with the RADIUS server Secondary RADIUS Server Option to enable a secondary RADIUS server for redundancy RADIUS Accounting Server IP address of the RADIUS accounting server: 35.205.62.147...
Pre-Authentication Rules Using this option, users can set rules to match traffic that will be allowed for connected Wi-Fi users before the authentication process. For example, if users need to set up Facebook authentication, some traffic should be allowed to the Facebook server(s) to process the user’s authentication.
Voucher feature will allow clients to have internet access for a limited duration using a code that is randomly generated from GWN controller. Note that multiple users can use a single voucher for connection with expiration duration of the voucher that starts counting after first successful connection from one of the users that are allowed.
Add Voucher Sample The below figure shows the list of the vouchers after GWN randomly generates the code for each one. Figure 84: Vouchers List Users can click on buttons to delete and print multiple vouchers or click button to print all vouchers at once. Also, users can use the drop-down list filter to filter the vouchers that were created at specific date-time.
Page 102
Captive Portal with Voucher authentication Then go under your SSID configuration page and enable the generated captive portal under Wi-Fi settings tab. RADIO When using GWN76XX as Master Access Point, users can edit the frequency band used by the AP and channel used along with the Transmission power for each band.
Page 103
Note: Once enabled, Band Steering in Access Device → Configuration → Configure cannot be configured. SSID→Wifi Settings→802.11k will be enabled This option is only available if Client Steering is enabled. RSSI Threshold Specify the RSSI Threshold before clients get steered away to another AP. (dBm) Note: Must be an integer between -80 and -65.
Page 104
Allow Legacy Check to support 802.11b devices to connect the AP in 802.11n/g mode. (2.4GHz setting). Devices(802.11b) Enable Minimum Configure whether to enable/disable Minimum RSSI function. This option can be either Disabled or Enabled RSSI and set manually or set to Use Radio Settings. Specify whether to limit the minimum access rate for clients.
Page 105
SECURITY Rogue AP The GWN Access Points offer the ability to prevent malicious intrusion to the network and increase the wireless security access of clients when introducing Rogue AP detection. The detected APs will be listed with all the details under the detected section for further intervention.
Page 106
Specify the containment range: • Same channel: detect AP will countermeasure the APs in the same channel. Containment Range • All channels: detect AP will countermeasure the APs in all channels at the cost of consuming of much AP performance. Default is Same Channel.
Page 107
User can define outbound and inbound rules on the traffic from the options in figure below: Firewall-inbound Field Description Select type of traffic to be affected by the inbound rule like ICMP, HTTP, HTTPS… or you may add another type of traffic when selecting Custom. When set to Custom, user could enter the following: Service Protocol •...
IP-MAC Binding To make an IP-MAC address Binding manually, on the IP-MAC Binding tab, click on “Add” button and then enter the IP address and the MAC address then click save. ARP Attack Defense – IP MAC Binding To unbind or edit, click on “Delete or Edit” icons under Actions. Please refer to figure below: ARP Attack Defense Strict ARP Learning option only learns ARP from the ARP Reply responding to the ARP Request sent by this device.
Page 109
SERVICE Hotspot 2.0 This section lists the configuration page to Hotspot 2.0. This is a technology that allows mobile devices to automatically connect to available Passpoint-certified Wi-Fi hotspots. This gives the device liberty to hop from one hotspot on a network to another without the need to log in to each hotspot.
Select IPv6 Type: • Address type not available IPv6 Type • Address type available • Availability of the address type not known Configure the Network authentication type to help users find and select the right network. Select either: • Acceptance of terms and conditions Network Auth Type •...
Select the type: • Time-based Type • Data-volume-based • Time-and-data-volume-based • Unlimited Realm Select the Realm. Language Code Select the language code. Currency Code Select the currency: XSU, BTN, INR, CNY, MOP, HKD, XAF. XML Content Upload XML file Advanced WAN Link Status Set the WAN Link Status to either: Not configured, Link-up, Link-down or Link-test.
Authentication Mode Set the authentication mode to: either MD5 or SHA. Authentication password Enter the SNMPv3 authentication password. Privacy Mode Set the authentication mode to: either AES128 or DES. Privacy password Enter the privacy password. SNMP DHCP Server Users could create and manage multiple DHCP server pools which will be mapped to the SSID using VLAN tag, for example when creating a DHCP pool under “System Settings ...
Static DHCP Users can use this feature in order to set static DHCP that binds to certain clients, to whom you do not want the IP address to change. To configure Static DHCP, please follow below steps: 1. Click button to create a new entry. 2.
Page 114
Setting up a static IP 3. To configure DHCP Relay, please navigate to GWN access point Web UI → Service → DHCP Server → DHCP Relay tab, Then enable DHCP Relay and then enter the DHCP Server Address (ex: GWN access point). DHCP Relay Note: a router side configuration could be required to setup VLANs for both access points to be able to communicate.
Page 115
TR-069 Field Description Configure whether to enable TR-069. Note: Once enabled, this device cannot be managed by Enable TR-069 GDMS Networking anymore. ACS URL URL for TR-069 Auto Configuration Server (ACS). When AP sends a connection request to ACS, the username that ACS authenticates TR-069 client, ACS Username that is AP, must be consistent with the configuration on the ACS side.
Page 116
L2TPv3 Diagram GWN Access Points, known for their reliability and performance, acting as LACs establish tunnels to the LNS, facilitating the encapsulation and transmission of all wireless clients’ Layer 2 traffic. This architecture proves particularly beneficial in centralized network models where VLANs extend from corporate environments to remote branch sites. By leveraging L2TPv3, wireless clients associated with GWN Access Points are seamlessly integrated into the corporate network infrastructure.
Page 117
Add L2TPv3 Name Set the name of the tunnel. Enable Enable/Disable the tunnel. Encap Type Set the encapsulation type of the tunnel. Valid values for encapsulation are: UDP, IP. Remote Server Address Set the IP address of the remote peer. Local Tunnel ID Set the tunnel id, which is a 32-bit integer value.
Page 118
Note: The tunnel ID must be set in SSID, and make sure that SSID only has the AP(s) who enabled L2TPv3. Add L2TPv3 SYSTEM The System section of the GWN76xx Access Point management interface is designed to provide administrators with comprehensive tools to manage and maintain the access point’s core system settings.
Page 119
Field Description LEDS Configures the status of the device’s LED indicator. ● Always On: the LEDs always on. ● Always Off: the LEDs always off. ● Schedule: if schedule is selected, the user can specify the schedule under the schedule field. Management Vlan VLAN Enables or disables VLAN tagging for management traffic.
Page 120
Account Field Description Enter administrator password.This field is case sensitive. The maximum length is 32 alphabet Current Administrator Password characters. Allows the user to change the admin password. The password field is purposely blank after New Administrator Password clicking the “Save” button for security purpose. This field is case sensitive with a maximum length of 32 characters.
Page 121
Mesh overview Deploying Mesh Access Points (REs) 1. Prepare the CAP Access Point: Ensure the CAP access point are deployed and operational. The CAP can also act as the master controller of the network. 2. Pair RE Access Points with the CAP: Connect all REs to the same wired LAN (same VLAN) as the master.
Page 122
• The supported bands depend on the model’s capabilities. • The 6GHz band is available only on supported models, which depend on specific hardware capabilities. • Mesh connections prioritize higher frequency bands for better performance. Defines the number of APs that can be cascaded wirelessly. Wireless Cascades Must be an integer between 1 and 3.
Create New Schedule 2. Select the periods on each day that will be included on the schedule and enter a name for the schedule (ex: office hours). 3. Users can choose to set weekly schedule or absolute schedule (for specific days for example), and if both weekly schedule and absolute schedules are configured on the same day then the absolute schedule will take effect and the weekly program will be cancelled for that specific date.
Page 124
Upgrade Syslog On the GWN76XX, users could dump the syslog information to a remote server under Web GUI → System → Maintenance → Syslog Tab. Enter the syslog server hostname or IP address and select the level for the syslog information. Eight levels of syslog are available: Emergency, Alert, Critical, Error, Warning, Notice, Information and Debug.
Page 125
Field Description Syslog Server Enter the IP address or URL of Syslog server. Select the level of Syslog, 8 levels are available: Syslog Level Emergency, Alert, Critical, Error, Warning, Notice, Information and Debug. Protocol The protocol type sent to Syslog Server. Log DNS Queries Check to log DNS Queries.
Firmware upgrade Configure whether to send notification on firmware upgrade. Rogue AP Once enabled, system will generate an Alert when there is a Rogue AP detected. AP Offline Configure whether to send notification when AP going offline. Email Events UPGRADING AND BACKUP/RESTORE Upgrading Firmware The GWN76XX can be upgraded to a new firmware version remotely or locally.
Sequential Upgrade If you choose multiple slave devices to upgrade their firmware, two options are available: “All-at-Once” and “Sequential”. “All- at-Once” will use the default method, all checked slaves will upgrade their firmware at the same time, while using the “Sequential”...
Note: Please note that the GWN76XX will reboot after the configuration file is restored successfully. Reset and reboot Users can reboot the device under Web GUISystem SettingsMaintenance Upgrade by clicking on button. button will restore all the GWN76XX options to factory settings. EXPERIENCING THE GWN76xx Wi-Fi ACCESS POINTS Please visit our website: https://www.grandstream.com...
Page 129
This is the initial release of GWN7670. Added LLDP. Added MAC authentication support. [External Splash Page] Added MLO support. [SSID] Added WPA3 support for PPSK. [SSID] Added AP CLI feature. [Settings] Firmware Version 1.0.25.34 Product Name: GWN7660 / GWN7660LR / GWN7661 / GWN7662 / GWN7664 / GWN7664LR / GWN7630 / GWN7630LR / GWN7605 / GWN7605LR / GWN7615 / GWN7624 / GWN7625 / GWN7660E / GWN7660ELR / GWN7664E / GWN7664ELR / GWN7665 / GWN7603 No major changes...
Page 130
Added support for Speed Test [GWN AP as a slave] Firmware Version 1.0.25.9 Product Name: GWN7662 No major changes Firmware Version 1.0.25.8 Product Name: GWN7661 No major changes Firmware Version 1.0.25.7 Product Name: GWN7602 / GWN7615 / GWN7605 / GWN7605LR / GWN7630 / GWN7630LR / GWN7624 / GWN7625 / GWN7660 / GWN7660LR / GWN7664 / GWN7664LR Increased PPSK accounts.
Page 131
No major changes Firmware Version 1.0.23.22 Product Name: GWN7602 / GWN7615 / GWN7605 / GWN7605LR / GWN7630 / GWN7630LR / GWN7624 / GWN7625 / GWN7660 / GWN7660LR / GWN7664 / GWN7664LR Added support for GWN Cloud v1.1.23.27 and GWN Manager v1.1.23.27 Firmware Version 1.0.23.11 Product Name: GWN7602 No major changes...
Page 132
Added support of more DFS Channels. [Scene] Firmware Version 1.0.23.7 Product Name: GWN7605 / GWN7605LR / GWN7615 / GWN7625 / GWN7630 / GWN7630LR Added support of Import/Export the client access lists in CSV format [Access List] Added support of 802.11h Added support of PPSK [SSIDs] Added support of PassPoint R3 [Hotspot...
Page 133
Added feature to allow Each AP to disable/Enable 2.4GHz or 5GHz independently [Table 20: Access Point Configuration Settings] Added feature of TR-069 [TR-069] Added feature of Google Authentication [Captive Portal – Policy List – Splash Page is “Internal”] Added feature to Delete inbound and outbound rules in batches [Firewall] Added feature to save network abnormal log to Flash [Debug] Added feature of Web lock for failed login [Access Web...
Page 134
Extended support of RRM to GWN Cloud and remaining AP models. [Transmit Power Control][Coverage Hole Detection] [Dynamic Channel Assignment] Added support of Active IGMP for the feature Convert IP multicast to unicast enhancement. [Convert IP multicast to unicast] Allow DHCP Option43 to override GWN Manager Address. [Allow DHCP Option 43 to override GWN Manager Address] Firmware Version 1.0.19.4 Product Name: GWN7602 Added support of Multicast/Broadcast Suppression.
Page 135
Grandstream Networks, Inc. is not permitted. The latest electronic version of this guide is available for download here: https://www.grandstream.com/support Grandstream is a registered trademark and the Grandstream logo is a trademark of Grandstream Networks, Inc. in the United States, Europe, and other countries CAUTION Changes or modifications to this product not expressly approved by Grandstream, or the operation of this product in any way other than as detailed by this guide, could void your manufacturer warranty.
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
Page 139
The simplified EU declaration of conformity referred to in Article 10(9) shall be provided as follows: Hereby, [Grandstream Networks, Inc.] declares that the radio equipment type [GWN7664/GWN7660/GWN7630/GWN7630LR/GWN7605/GWN7605LR/GWN7615] are in compliance with Directive 2014/53/EU. The full text of the EU declaration of conformity is available at the following internet address: https://www.grandstream.com...
Need help?
Do you have a question about the GWN76 Series and is the answer not in the manual?
Questions and answers