Page 2
The documentation and the software included with this product are copyrighted 2011 by Advantech Co., Ltd. All rights are reserved. Advantech Co., Ltd. reserves the right to make improvements in the products described in this manual at any time without notice. No part of this manual may be reproduced, copied, translated or transmitted in any form or by any means without the prior written permission of Advantech Co., Ltd.
Page 3
Because of Advantech′s high quality-control standards and rigorous testing, most of our customers never need to use our repair service. If an Advantech product is defective, it will be repaired or replaced at no charge during the warranty period. For out-of-warranty repairs, you will be billed according to the cost of replacement materials, service time and freight.
Page 4
Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
Page 5
Step 2. Contact your distributor, sales representative, or Advantech’s customer service center for technical support if you need additional assistance. Please have the following information ready before you call: - Product name and serial number...
Page 6
Safety Precaution - Static Electricity Follow these simple precautions to protect yourself from harm and the products from damage. 1. To avoid electrical shock, always disconnect the power from your PC chassis before you work on it. Don't touch any components on the CPU card or other cards while the PC is on. 2.
Page 10
The PoE injector enhances flexibility in deployment of this AP/ CPE even where the DC power supply is hard to fulfill. As an 802.11n compliant device, EKI-6331AN provides 3 times higher data rates than legacy 802.11a devices. With 2X2 MIMO technology, EKI-6331AN provides both robust wireless connectivity as well as high throughput rate in wireless transmission.
Page 11
Key Features Compliant with IEEE802.11a/n IP55 waterproof certification MIMO 2 x 2 11n Embedded 16dBi dual-polarity directional antenna with external R-SMA connector for optional antenna Passive PoE WEP/WPA/WPA2/ IEEE 802.1 x authentication support IGMP snooping protocol support Specification Standard Support Wireless IEEE802.11a/n Ethernet...
Page 12
Bridge ( WDS) AP repeater Antenna Default embedded 2T2R 16dBi dual-polarity directional antenna Reverse SMA Connector x 2 for external antennas *Switchable by software Modulation Techniques 802.11a OFDM 802.11n OFDM (BPSK, QPSK, 16-QAM, 64-QAM) Support Frequency FCC : 5725-5850 CE: 5470-5725 MHz (DFS band) Wireless Tx power and Rx Sensitivity Transmitted Power 802.11a: 24dBm @ 6Mbps, 21dBm @ 54Mbps...
Page 14
EKI-6331AN. Preparation before Installation Professional Installation Required Please have EKI-6331AN installed by professional installer who is well trained in the RF installation and knowledgeable in the local regulations. Safety Precautions To keep you safe and install the hardware properly, please read and follow these safety precautions.
Page 15
EMD (Lightning) DAMAGE IS NOT COVERED UNDER WARRNTY. Users MUST use the “Power cord & POE Injector” shipped in the box with EKI-6331AN. Use of other options may cause damage to the unit. Users MUST power off EKI-6331AN first before connecting the external antenna to it. Do not switch from built-in antenna to the external antenna from WEB management without physically attaching the external antenna onto EKI-6331AN;...
Page 16
Pole Mounting Ring Start up manual & User’s manual CD Warning: Users MUST use the “Power cord & POE Injector” shipped in the box with EKI-6331AN. Use of other options will likely cause damage to the unit. EKI-6331AN_User Manual ...
Page 17
Hardware Installation Connect up The bottom of EKI-6331AN is a movable cover. Loosen the screw with a screwdriver. Grab the cover and pull it back harder to take it out as the figure shown below. Figure 3 Move the Cover Plug a standard Ethernet cable into the RJ45 port labeled “LAN 1”.
Page 18
EKI-6311GN or IP camera from EKI-6331AN Web Management as shown below. Take out the power cord and POE injector from the gift box, and plug the power cord into the DC port of the POE injector as the below picture shows.
Page 19
Figure 6 Plug the Ethernet cable to the RJ-45 jack of the injector Press the black PWR button beside the LAN 1 Ethernet port. Attach and fasten the removable cover to the bottom of the unit with the screw. EKI-6331AN_User Manual ...
Page 20
Power on EKI-6331AN by plugging the power adapter to the power socket. Using the External Antenna EKI-6331AN provides two reverse SMA antenna connectors if you prefer to use the external antenna for your application instead of the built-in directional antenna, please follow the steps below.
Page 21
Follow the steps described in Connect Up to finish the installation. Pole Mounting Turn EKI-6331AN over. Put the pole mounting rings through the middle hole of it. Note that you should unlock the pole mounting ring with a screw driver before putting it through EKI-6331AN as the following right picture shows.
Page 22
Chapter 3 Basic Settings Factory Default Settings The following table shows EKI-6331AN factory default settings. You can re-acquire these parameters by default. If necessary, please refer to the “Restore Factory Default Settings”. Table 1 Factory Default Settings Features Factory Default Settings...
Page 23
How to Login the Web-based Interface EKI-6331AN provides you with user-friendly Web-based management tool. Open Web browser and enter the IP address (Default: 192.168.1.1) of EKI-6331AN into the address field. You will see the login page as below. Figure 9 Login Page EKI-6331AN_User Manual ...
Page 24
Enter the username (Default: admin) and password (Default: password) respectively and click “Login” to login the main page of EKI-6331AN. As you can see, this management interface provides 5 main options in the black bar above, which are Status, System, Wireless, Management and Tools.
Page 25
Basic System Settings For users who use EKI-6331AN for the first time, it is recommended that you begin configuration from “Basic Settings” in “System” shown below: Figure 11 Basic System Settings Basic Settings Device Name: Specify the device name, which is composed of no more than 15 characters with (0-9), (A-Z), (a-z) or (-).
Page 26
TCP/IP Settings Open “TCP/IP Settings” in “System” as below to configure the parameters for LAN which connects to the LAN port of EKI-6331AN. In this page, users may change the settings for IP Address, Subnet Mask, and DHCP Server. Figure 12 TCP/IP Settings (Bridge) Obtain IP Address Automatically: If a DHCP server exists in your network, you can check this option, thus EKI-6331AN is able to obtain IP settings automatically from that DHCP server.
Page 27
LAN Settings: When DHCP Server is disabled, users can specify IP address and subnet mask for EKI-6331AN manually. Make sure the specified IP address is unique on your network in order to prevent IP conflict. When DHCP Server is enabled, users may specify DHCP IP Address Range, DHCP Subnet Mask, DHCP Gateway and Lease Time (15-44640 minutes).
Page 28
EKI-6331AN via the connected wireless device. Time Settings Compliant with NTP, EKI-6331AN is capable of keeping its time in complete accord with the Internet time. Make configuration in “Time Settings” from “System”. To use this feature, check “Enable NTP Client Update”...
Page 29
Select the time zone from the dropdown list. NTP Server Select the time server from the “NTP Server” dropdown list or manually input the IP address of available time server into “Manual IP”. (For example, 192.43.244.18 for NIST server. ) Hit “Apply”...
Page 30
Source IP Filtering: The source IP filtering gives users the ability to restrict certain types of data packets from your local network to Internet through EKI-6331AN. Use of such filters can be helpful in securing or restricting your local network.
Page 31
Figure 17 Destination IP Filtering Source Port Filtering: The source port filtering enable you to restrict certain ports of data packets from your local network to Internet through EKI-6331AN. Use of such filters can be helpful in securing or restricting your local network.
Page 32
Destination Port Filtering: The destination port filtering enables you to restrict certain ports of data packets from your local network to Internet through EKI-6331AN. Use of such filters can be helpful in securing or restricting your local network. Figure 19 Destination Port Filtering Port Forwarding: The port forwarding allows you to automatically redirect common network services to a specific machine behind the NAT firewall.
Page 33
DMZ: A Demilitarized Zone is used to provide Internet services without sacrificing unauthorized access to its local private network. Typically, the DMZ host contains devices accessible to the Internet traffic, such as Web (HTTP) servers, FTP servers, SMTP (e-mail) servers and DNS servers. Figure 21 DMZ Settings Basic Wireless Settings Open “Basic Settings”...
Page 34
AP: EKI-6331AN establishes a wireless coverage and receives connectivity from other wireless devices. Wireless Client: EKI-6331AN is able to connect to the AP and thus join the wireless network around it. Bridge: EKI-6331AN establishes wireless connectivity with other EKI-6331AN by keying in remote MAC address.
Page 35
EKI-6331AN to use two channels at once. Two options are available: Upper Channel and Lower Channel. Channel Mode 4 levels are available: 40MHz, 20MHz, 10MHz and 5MHz. 40MHz can enhance data throughput, but it takes more bandwidth, thus it might cause potential interference.
Page 36
Select the AP you would like to connect and click “Selected” to establish connection. Figure 23 Site Survey VAP Profile Settings Available in AP mode, EKI-6331AN allows up to 16 virtual SSIDs on a single BSSID and to configure EKI-6331AN_User Manual ...
Page 37
To create a virtual AP, you may different profile settings such as security and VLAN ID to each SSID. check the Enable box of the profile and click on the profile (eg. Profile 2) to configure wireless and security settings. Hit Apply to active the profile. Figure 24 VAP Profile Settings Figure 25 VAP Profile Settings Basic Setting...
Page 38
To enable WMM, the wireless client should also support it Max. Station Number: By checking the “Max. Station Num” EKI-6331AN will allow up to 32 wireless clients to associate with. By disabling the checkbox EKI-6331AN will allow up to 128 clients to connect, but it is likely to cause network congestion or poor performance.
Page 39
If your network uses VLANs, you can assign one SSID to a VLAN, and client devices using the SSID are grouped in that VLAN. EKI-6331AN, you need to enable “Enable To allow users on the VLAN to access the WEB page of 802.1Q VLAN”...
Page 40
Figure 27 Advanced Wireless Settings A-MPDU/A-MSDU Aggregation The data rate of your EKI-6331AN except wireless client mode could be enhanced greatly with this option enabled; however, if your wireless clients don’t support A-MPDU/A-MSDU aggregation, it is not recommended to enable it.
Page 41
Fragmentation Length Specify the maximum size in byte for a packet before data is fragmented into multiple packets. Setting it too low may result in poor network performance. Leave it at its default of 2346 is recommended. Beacon Interval Specify the frequency interval to broadcast packets. Enter a value between 20 and 1024. DTIM Interval DTIM, which stands for Delivery Traffic Indication Message, is contained in the data packets.
Page 42
Layer2 protocols. Space in Meter To decrease the chances of data retransmission at long distance, EKI-6331AN can automatically adjust proper ACK timeout value by specifying distance of the two nodes. Flow Control It allows the administrator to specify the incoming and outgoing traffic limit by checking “Enable Traffic Shaping”.
Page 43
Figure 28 Security Settings Network Authentication Open System: It allows any device to join the network without performing any security check. Shared Key: Data encryption and key are required for wireless authentication. (not available in Bridge/AP Repeater mode) Legacy 802.1x: Available in AP/Wireless Client mode, it provides the rights to access the wireless network and wired Ethernet.
Page 44
TKIP + AES: It allows for backwards compatibility with devices using TKIP. Note: We strongly recommend you enable wireless security on your network! Only setting the same Authentication, Data Encryption and Key in EKI-6331AN and other associated wireless devices, can the communication be established! EKI-6331AN_User Manual...
Page 45
Access Control The Access Control appoints the authority to wireless client on accessing EKI-6331AN, thus a further security mechanism is provided. This function is available only under AP mode. Open “Access Control” in “Wireless” as below. Figure 29 Access Control Access Control Mode If you select “Allow Listed”, only those clients whose wireless MAC addresses are in the access...
Page 46
Distribution System (WDS): Simply put, you can link the bridges wirelessly. Open “WDS Settings” in “Wireless” as below: Figure 30 WDS Settings Enter the MAC address of another EKI-6331AN you wirelessly want to connect to into the appropriate field and click “Apply” to save settings. Note: WDS Settings is available only under Bridge and AP Repeater Mode.
Page 47
Chapter 5 Management Remote Management EKI-6331AN provides a variety of remotes managements including Telnet, SNMP, FTP, SSH, HTTPS and exclusive WISE tool, making configuration more convenient and secure. With Normal selected, Telnet, SNMP and FTP are activated as default remote management options.
Page 48
Figure 32 SNMP Configuration Protocol Version Select the SNMP version, and keep it identical on EKI-6331AN and the SNMP manager. EKI-63331AN supports SNMP v2/v3. Server Port Change the server port for a service if needed; however you have to use the same port to use that service for remote management.
Page 49
User Name Specify a user name for the SNMPv3 administrator or user. Only the SNMP commands carrying this user name are allowed to access EKI-6331AN. Password Specify a password for the SNMPv3 administrator or user. Only the SNMP commands carrying this password are allowed to access EKI-6331AN.
Page 50
None: No encryption is applied. DES: Data Encryption Standard, it applies a 58-bit key to each 64-bit block of data. Coovachilli Settings Coovachilli is a captive portal management which allows WLAN users to easily and securely access the Internet. Under Router mode, when Coovachilli is enabled, the IEEE 802.11b/g/n Wireless Access Point will force an HTTP client on a network to see a special web page (usually for authentication purposes) before using the Internet normally.
Page 51
Enter the address of the UAM portal server UAM Secret: Enter the secret password between the redirect URL and the Hotspot. Upgrade Firmware Open “Firmware Upload” in “Management” and follow the steps below to upgrade firmware locally or remotely through EKI-6331AN’s Web: EKI-6331AN_User Manual ...
Page 52
Figure 35 Upgrade Firmware Click “Browse” to select the firmware file you would like to load; Click “Upload” to start the upload process; Wait a moment, the system will reboot after successful upgrade. Note: Do NOT cut the power off during upgrade, otherwise the system may crash! Backup/ Retrieve Settings It is strongly recommended you back up configuration information in case of something unexpected.
Page 53
Restore factory default settings via Reset Button If software in EKI-6331AN is unexpectedly crashed and no longer reset the unit via Web, you may do hardware reset via the reset button. Press and hold the button for at least 5 seconds and then release it until the PWR LED gives a blink.
Page 54
Figure 38 Reboot Password From “Password Settings” in “Management”, you can change the password to manage your EKI-6331AN. Enter the new password respectively in “New Password” and “Confirm Password” fields; click “Apply” to save settings. Figure 39 Password EKI-6331AN_User Manual...
Page 55
Note: The password is case-sensitive and its length cannot exceed 19 characters! Certificate Settings Under Client mode, when EAP-TLS is used, the RADIUS server must know which user certificates to trust. The Server can trust all certificates issued by a given CA. To import a user certificate, from Import User Certificates, click “Browse”...
Page 56
Monitoring Tools System Log System log is used for recording events occurred on EKI-6331AN, including station connection, disconnection, system reboot and etc. Open “System Log” in “Tools” as below. Figure 41 System Log Remote Syslog Server Enable Remote Syslog: Enable System log to alert remote server.
Page 57
Figure 42 Site Survey Tool Ping Watch Dog If the link is somehow broken and cut off your ability the log in to the unit, the ping watchdog has a chance to reboot due to loss of connectivity. Figure 43 Ping Watchdog Ping Watchdog Enable Ping Watchdog: To activate ping watchdog, check this checkbox.
Page 58
Failure Count To Reboot: If the ping timeout packets reached the value, EKI-6331AN will reboot automatically. Date Rate Test The Data Rate Test allows you test the current RSSI at each data rate between EKI-6331AN. Figure 44 Data Rate Test Antenna Alignment...
Page 59
The speed test is to monitor the current data transmission (TX) and data reception (RX) rate with the remote EKI-6331AN. Enter the IP address of the remote EKI-6331AN, type in the user name/password and click “Test”. The result will display in the bottom STATUS. You may test single TX/RX or bi-direction.
Page 60
Chapter 6 Status View Basic Information Open “Information” in “Status” to check the basic information of EKI-6331AN, which is read only. Information includes system information, LAN settings, wireless setting and interface status. Click “Refresh” at the bottom to have the real-time information.
Page 61
Figure 48 Connection By clicking on the MAC address of the selected device on the web you may see more details including device name, connection time, signal strength, noise floor, ACK timeout, link quality, IP information, current data rate, current TX/RX packets. EKI-6331AN_User Manual ...
Page 62
View Network Flow Statistics Open “Flow Statistics” in “Status” to check the data packets received on and transmitted from the wireless and Ethernet ports. Click “Refresh” to view current statistics. Figure 49 Network Flow Statistics Poll Interval Specify the refresh time interval in the box beside “Poll Interval” and click “Set Interval” to save settings.
Page 63
Figure 50 ARP Table View Bridge Table Open “Bridge Table” in “Status” as below. Click “Refresh” to view current connected status. Figure 51 Bridge Table View Active DHCP Client Table Open “DHCP Client” in “Status” as below to check the assigned IP address, MAC address and time EKI-6331AN_User Manual ...
Page 64
expired for each DHCP leased client. Click “Refresh” to view current table. Figure 52 DHCP Client Table View Network Activities The network activities allows you to monitor the current Wireless and Ethernet TX/RX data traffic in graphical and numerical form on the Web of the Skyport. The chart scale and throughput dimension (bps, Kbps, Mbps) changes dynamically according to the mean throughput value.
Page 65
Chapter 7 Troubleshooting This chapter provides troubleshooting procedures for basic problems with EKI-6331AN. For warranty assistance, contact your service provider or distributor for the process. Q 1. How to know the MAC address of EKI-6331AN? MAC Address distinguishes itself by the unique identity among network devices. There are two ways available to know it.
Page 66
Q 5. In wireless client mode, what if the wireless connection is not stable after associating with an AP? • Since EKI-6331AN comes with a built-in directional antenna, it is recommended make it face to the direction where the AP is to get the best connection quality. •...
Page 67
Appendix A. ASCII WEP can be configured with a 64-bit, 128-bit or 152-bit Shared Key (hexadecimal number or ACSII). As defined, hexadecimal number is represented by 0-9, A-F or a-f; ACSII is represented by 0-9, A-F, a-f or punctuation. Each one consists of two-digit hexadecimal. Table 2 ACSII ASCII ASCII...
Page 68
Appendix B. SSH Settings Table 3 SSH Settings Keyword Descriptions √ √ time --time setting √ -now --current system time √ √ -zone --time zone √ √ -NTPUpdate -- NTP Update √ √ -servertype --server type √ √ √ √ -Manual IP -Manual IP √...
Page 72
√ √ -Isolation --wireless separation √ √ -wmm --WMM Support √ √ -MaxStaNum --Max Station Number --Whether manually limit the √ √ -StaNumLmt number o f station --wireless authentication √ √ -authentication type √ √ -encryption --wireless data encryption --wireless wep default key √...
Page 73
settings --destination port filter √ √ -enable enable --add a destination port filter √ √ -addrule rule --delete destination port √ -delerule filter rule --show destination port filter √ -rulelist rule lists √ √ -portforward --port forward settings √ √ -enable --port forward enable √...
Page 75
√ statistics --statistics √ -Wireless --Wireless LAN √ -Ethernet --Ethernet LAN √ √ log list --syslog list √ password --system password √ reset --restore factory √ reboot --reboot system √ exit --logout from CLI EKI-6331AN_User Manual ...
Page 76
Appendix C. GPL Declamation PUBLIC SOFTWARE DECLAMATION In the software we delivered, there may contains some public software, if it is, please read below carefully: 1. Definition “Public Software”, when applicable, shall mean that portion of the Licensed Software, in source code form, set forth in the below Table, and provided under the terms set forth in the Section 5, the indicated website, the complete license terms can be found.
Page 77
to any such Public Software, as set forth in its presentation on website. 3. Limited Liability The supplier hereby express that the supplier shall have no liability for any costs, loss or damages resulting from Licensee’s breach of the terms and conditions applicable to use, conversion or combination of the licensed software with or into Public Software.
Page 78
Software Inc., /Webserver/2.1. 1992-2000. 8/webs218.tar.g hostapd Copyright (c) http://hostap.epit GNU GENERAL http://www.gnu.or 2002-2006, Jouni est.fi/releases/h PUBLIC LICENSE g/licenses/old-lice Malinen ostapd-0.4.8.tar. Version 2 nses/gpl-2.0.html <jkmaline@cc.hut .fi> and contributors wpa_supplic Copyright (c) http://hostap.epit GNU GENERAL http://www.gnu.or 2003-2005, Jouni est.fi/releases/w PUBLIC LICENSE g/licenses/old-lice Malinen pa_supplicant-0.
Page 79
ns/vsftpd-1.1.2.t Version 2 nses/gpl-2.0.html ar.gz linux ftp://ftp.kernel.or GNU GENERAL http://www.gnu.or g/pub/linux/kern PUBLIC LICENSE g/licenses/old-lice el/v2.6/linux-2.6. Version 2 nses/gpl-2.0.html 15.tar.bz2 iptables Copyright ftp://ftp.netfilter.o GNU GENERAL http://www.gnu.or 2000-2004 rg/pub/iptables/i PUBLIC LICENSE g/licenses/old-lice netfilter project ptables-1.3.6.tar. Version 2 nses/gpl-2.0.html http://www.netfilter .org/ openssl Copyright (c) http://www.open GNU GENERAL http://www.gnu.or...
Page 81
Appendix D. Country Channel List EKI-6331AN supports country selection. Channels may vary upon each country’s regulation. The following tables list the channel with country code in each bandwidth. Table 4 FCC Countries Country Mode Channel list 40MHz 20MHz 10MHz 5MHz...
Page 82
Finland France Germany Greece Hungary Iceland Ireland Italy Latvia Liechtenstein Lithuania Luxembourg Macedonia Malta Netherlands Norway Poland Portugal Romania Slovakia Slovenia Spain Sweden United Kingdom Table 6 Other Countries Country Mode Channel list 40MHz 20MHz 10MHz 5MHz 149/150/151/152/ 153/154/155/156/ 149/151/153/155/ 157/158/159/160/ 149/153/157/ 149/153/157/161/...
Page 83
100/104/108/ 100/101/102/103/ 112/149/153/ 104/105/106107/ 157/161 100/102/104/106/ 108/109/110/111/ 100/104/108/112/ Korea 108/110/112/114/ 112/113/114/115/ 5470-5650MHz 116/149/153/157/ Russia *Russia: 116/149/151/153/1 116/149/150/151/ 5725-5825MHz Does not 55/157/159/161/ 152/153/154/155/ support 156/157/158/159/ HT40. 160/161/ 100/101/102/103/ 104/105/106107/ 108/109/110/111/ 100/102/104/106/ 112/113/114/115/ 100/104/108/ 100/104/108/112/ 108/110/112/114/ 116/117/118/119/ 112/116/132/ 116/132/136/140/ 116/118//132/134/1 131/132/133/134/ South Africa 5470-5725MHz 136/140/149/ 149/153/157/161/...
Need help?
Do you have a question about the EKI-6331AN and is the answer not in the manual?
Questions and answers