CHAPTER 1: PRODUCT OVERVIEW ..........1 Introduction ......................1 Features and Benefits ..................2 When to use which mode ...................3 Access Point Mode.................... 3 Access Point Client Mode ................4 Wireless Routing Client Mode ................5 Gateway Mode....................6 Wireless Adapter Mode ..................7 Transparent Client Mode ..................
Page 3
Table of Contents Access the Secure Shell Host Command Line Interface .......67 Set the WEB Mode....................68 SNMP Setup ......................69 Setup SNMP Trap ....................70 Setup STP (Only available in Access Point, Transparent Client and Repeater modes)........................71 Use MAC Filtering....................75 CHAPTER 5: ADVANCED CONFIGURATION ......85 Setup Routing (only supported by Wireless Routing Client and Gateway)..85 Configure Static Routing.................
Page 4
Table of Contents Set Virtual AP (Multiple SSID) ................118 Set Preferred APs (Available in Client Mode) ..........120 Long Distance Parameters................121 Set Wireless Multimedia ..................123 Setup Point-to-Point & Point-to-MultiPoint Connection ........127 Setup Repeater ....................130 CHAPTER 7: WLAN SECURITY ..........135 How to set up WEP ...................136 How to set up WPA-Personal (Only available in Access Point mode) ..137 How to set up 802.1x/RADIUS (Only available in Access Point mode) ..139 How to set up WPA Enterprise (Only Access Point mode supports WPA2-EAP...
Page 5
Table of Contents APPENDIX I: FIRMWARE RECOVERY........168 APPENDIX II: TCP/IP CONFIGURATION........170 For Windows 95/98/98SE/ME/NT ..............170 For Windows XP/2000..................173 APPENDIX III: PANEL VIEWS & DESCRIPTIONS .......175 APPENDIX IV: VIRTUAL AP (MULTI-SSID) FAQ.......177 APPENDIX V: HOW TO UPGRADE YOUR SINGLE SSID FIRMWARE TO NEW MULTI-SSID FIRMWARE ....181...
The AIRNET 54Mb Outdoor AP/Bridge series is a high-performance Access Point and Bridge designed for enterprises and outdoor users. It is compatible with IEEE 802.11a/b/g and supports high-speed data transmission up to 54Mb. Housed in a waterproof casing, AIRNET 54Mb Outdoor AP/Bridge series is designed to withstand any extreme climatic conditions, making it the ideal solution for outdoor applications.
Product Overview • Outdoor and Waterproof Design • Full IEEE 802.11a/b/g compatibility allows inter-operation among multiple vendors. • High speed data transfer rate up to 54Mbps • Virtual AP (Multiple SSID) • WDS2 • Long-Range Parameter Settings • Power over Ethernet - PoE •...
Product Overview The access point is versatile in the sense that it may operate in seven different types of modes: Access Point Mode, Client Mode, Point to Point, Point to Multiple Point, Wireless Routing Client , Gateway and Wireless Adapter. This section presents a brief outline of the different network applications that can be accommodated through the different modes of the access point.
Product Overview In Access Point Client mode, the access point acts as a wireless client that can operate wirelessly with another access point to perform bridging between two Fast Ethernet networks. The Access Point client cannot communicate directly with any other wireless device. In the example above, the workgroup PCs will be able to access the PCs connected to the access point in Access Point Client mode.
Product Overview An application of this mode would be for the Ethernet port of the Wireless Routing Client to be used for connection with other devices on the network while access Internet would achieved through wireless communication with wireless ISP. The above illustration describes how this mode operates.
Product Overview Or put it more simply, Broadband Internet sharing in a wireless network! Since the access point supports several types of broadband connections, the first step in setting up the access point as a Broadband Internet Gateway is to identify the type of broadband Internet access you are subscribed to.
Product Overview PPP over Ethernet (PPPoE) Select this type of connection if you are using ADSL services in a country utilising standard PPP over Ethernet for authentication. For instance: If you are in Germany which uses T-1 connection or If you are using SingNet Broadband or Pacific Internet Broadband in Singapore. PPTP Select this type of connection if you are using ADSL services in a country utilising PPTP connection and authentication.
Product Overview In Transparent Client Mode, the access point provides connection with an access point acting as the RootAP. This operation is designed for the implementation of Point-to-Point and Point-to-Multipoint connections An access point acts as Root AP and 1 An access point acts as Root AP other access point acts as Transparent and several other access point...
Product Overview The access point comes with a built-in Repeater Mode to extend the range, and substantially enhance the performance of the wireless network by allowing communications over much greater distances. In Repeater Mode, the access point acts as a relay for network signals on the network by regenerating the signals it receives, and retransmitting them to extend the range of the existing network infrastructure.
• Do not work on the system or connect or disconnect cables during periods of lightning activity. • Do not locate the antenna near overhead power lines or other electric light or power circuits, or where it can come into contact with such circuits. When installing the antenna, take extreme care not to come into contact with such circuits, as they may cause serious injury or death.
Hardware Installation Take a moment to ensure you have all of the following parts in your Outdoor Waterproof Unit installation kit before you begin installing the product. If any parts are missing, please contact your local vendor or contact us at 305- 4182232.
Hardware Installation Before starting, please verify that the following is available: • CAT5/5e or FTP Outdoor Ethernet cable (from the Outdoor AP to PoE Injector) • At least one computer is installed with a Web browser and a wired or wireless network interface adapter •...
Hardware Installation The diagram below shows the overall setup of Outdoor Access Point.
Page 19
RJ-45 connector on the outdoor access point. Then connect the other end of the cable to the PoE injector. For the Netkrom PoE, the recommended length of the RJ45 Category 5 cable is up to 150 feet or 50 meters.
Page 20
Hardware Installation 5.- The final step is to tighten the compression nut until the gaskets are tight around the Cat5 cable. Always push the cable toward the connector while tightening to ensure good strain relief of cable to connector. Connect the external antenna to the N Female connector of the access point.
Page 21
Hardware Installation Connect the power cable supplied in the Netkrom PoE kit to the main electrical supply and the power plug into the socket of the injector. Now, turn on your power supply. Notice that the POWER LED has lighted up.
Hardware Installation Outdoor Access Point device can be mounted on the pole or tower as shown in following: 1.- Mount the bracket to the pole. 2.- Attach the radio to the bracket which was mounted on the pole with the supplied nuts and 4 screws.
There are two methods to access to the web-based Interface of your access point: • – • – You can access to the web-based interface directly without the need to assign a different IP address to your PC. • • You need to assign an IP address to your PC, such as 192.168.168.x, where x can take any value from 2 to 254, so that it is in the same subnet as Access point.
Page 24
Access to Web-based Interface When the utility has been installed, double-click on the icon. The following screen will appear, click on the button to proceed. Select in the section and click on the button. To retrieve and display the latest device(s) in the list, click on the button.
Page 25
Access to Web-based Interface Do not exit the uConfig program while accessing to the web-based interface. This will disconnect you from the device. Click on the button to proceed. At the login page, press the button to enter the configuration page. The default password is “password”.
Page 26
Access to Web-based Interface You will then reach the home page of your access point’s web-based interface.
Access to Web-based Interface Another utility program NpFind, intended to help you verify the IP address of your product. Follow the next steps to check the IP address of your access point. Insert the Product CD into the CD-ROM drive. It will automatically run. Click on and select program to run it.
Access to Web-based Interface For this method, you need to assign an IP address to your PC so that it belongs to the same subnet as your access point. In this example, we are using Windows XP for illustration. For Windows 98/98SE/2000/NT/ME, kindly refer to Appendix II “TCP/IP Configuration”.
Page 29
Access to Web-based Interface Highlight and click on the button. Select the radio button for . Enter the IP Address and Subnet Mask as 192.168.168.x and 255.255.255.0, where x can be any number from 2 to 254, except 1. In this example, we are using 192.168.168.160 as the static IP Address.
Page 30
Access to Web-based Interface Click on the button to close all windows. Next, in order to check if the IP address has been correctly assigned to your PC, go to menu, , select and type the command ipconfig/all. Your PC is now ready to configure your access point. Launch your Web browser.
Page 31
Access to Web-based Interface Open the tab and in the section, disable all the option boxes. Click on the button to update the changes. At the bar, enter http://192.168.168.1 and press on your keyboard. At the login page, click on the button to enter the configuration pages.
Page 32
Access to Web-based Interface You will then reach the home page of your access point’s Web interface.
At the Management Port Setup page, you may: Automatically obtain IP address from DHCP server. The default IP 192.168.168.1 is used until a new IP is obtained. Access Point Clients also allows PCs connected to the Ethernet port to obtain IP from the DHCP server at the access point end network.
Page 34
Common Configuration Select to either address or addresses and enter the parameters, if any. In the page, refer to the table below to replace the default settings of Access point with appropriate values to suit the needs of your network. If you choose to...
Page 35
Common Configuration If you choose to Click on the button to save your new parameters. This table describes the parameters that can be modified in the Management Port Setup page if you select to Use the following DNS server addresses. Parameters Description Primary...
Page 36
Common Configuration Follow these steps to manually define the IP address. Click on from from the menu. Select to In the Management Port Setup page, refer to the table below to replace the default settings of Access point with appropriate values to suit the needs of your network.
Page 37
Common Configuration The parameters are the same in routing mode. Click on the Apply button to save your new parameters. This table describes the parameters that can be modified in the Management Port Setup page. Parameters Description IP Address When the DHCP server of the access point is enabled (unless you set a different DHCP Gateway IP Address), this LAN IP Address would be allocated as the Default Gateway of the DHCP client.
Common Configuration There are 3 DHCP modes: • NONE By default, DHCP Mode is set to NONE. Leave the selection at this mode if you do not wish to use DHCP. • DHCP Server Select this mode to setup a DHCP server. •...
Page 39
Common Configuration The following will guide you to setup the DHCP Server. Click Advanced Settings from Management Setup from CONFIGURATION menu. DHCP Server. DHCP Server Setup, refer to the table below to set the appropriate values to suit the needs of your network. Click on the Apply button.
Page 40
Common Configuration This table describes the parameters that can be modified in DHCP Server Setup Parameters Description The fields DHCP Start IP Address and DHCP End IP Address fields allow you to define the range of IP addresses from which the DHCP Server can assign an IP address to the LAN.
Page 41
Common Configuration The following will guide you to setup the DHCP Relay. Click Advanced Settings from Management Setup from CONFIGURATION menu. DHCP Mode DHCP Relay. DHCP Server Setup, refer to the table below to set the appropriate values to suit the needs of your network. Step 3: Click on the Apply...
Common Configuration Select Management Setup from the CONFIGURATION menu. Go to the Advanced DHCP Server Options section and click on the Show Active DHCP leases button. The DHCP Active Leases table displays: • The Host Name of the DHCP client •...
Common Configuration A reserved IP address is excluded from the pool of free IP addresses the DHCP server draws on for dynamic IP address allocation. For instance, if you set up a publicly accessible FTP/HTTP server within your private LAN, while that server requires a fixed IP address you would still want the DHCP server to dynamically allocate IP addresses to the rest of the PCs on the LAN.
Page 44
Common Configuration Fill in: The host portion of the IP Address to be reserved. The Hardware Address, in pairs of two hexadecimal values Press the button to effect your new entry. page will then be refreshed to illustrate the currently reserved IP addresses.
Common Configuration If you do not need the DHCP server to reserve an IP address anymore, you can delete the DHCP Server Reservation. Click on the reserved IP address that you wish to delete, e.g. 192.168.168.20. Click on the button. table will then be refreshed to reflect your changes.
Common Configuration Click on from the menu. You will see the sub- menus expanded under . Click on The default operating mode of the access point is the Access Point mode. AIR-BR500GX AIR-BR500AGX If you wish to change the current mode of your access point, click on , select your and click on the button to...
Page 47
Common Configuration Enter the parameters in their respective fields, click on the button and reboot your device to let your changes take effect. Note that the pages for the modes are different. Example: WLAN Basic Setup page for Client Mode Example: WLAN Basic Setup page for...
Page 48
Common Configuration This table describes the parameters that can be modified in the page. Parameters Description The Current Mode The default operating mode is the Access Point mode. Operating modes: • Access Point Mode • Client Mode • Wireless Routing Client •...
Page 49
Common Configuration • • Supports both wireless B and G clients. • • Supports wireless-G clients that offer transmission rates of up to 54Mbps in the 2.4GHz frequency band. Country Choose the Country where you are located. Channel This option allows you to select a frequency channel for the wireless communication.
Page 50
Common Configuration In the page, click on the button. provides a list of the neighboring access points detected, (channels), (Authentication), (Algorithm) used, and the strength of the received. Site Survey on the 2.4 Ghz frequency band...
Page 51
Common Configuration To connect the client to one of the access points detected, select the radio button corresponding to the access point you want to connect to. Click on the button to effect the change and return to the setup page.
Page 52
Common Configuration This table describes the read-only parameters of neighboring access points that can be viewed from the Site Survey page. Parameters Description Bssid In an infrastructure wireless network, the BSSID refers to the wireless MAC address of the access point. SSID Refers to the network name that uniquely identifies the network to which the access point is connected.
Page 53
Common Configuration To view the connection status when the client is linked to another access point, click on the button. table dispalys the following data: This table describes the parameters that can be viewed from the page. Parameters Description State Displays whether the State is Scanning or Associated, and MAC address of the access point to which the client is connected.
Page 54
Common Configuration Channel Survey provides a list of all channels that are supported by the access point. This feature will show relative interference of all channels and recommend the least congested channel. In the page, click on the button. provides a list of the (frequency) and the access point detected, the (your access point’s...
Page 55
Common Configuration Channel Survey on the 2.4 Ghz frequency band Please take note that the MYQuality and NeighQuality are RSSI values. If the value is higher which means that you receive the stronger signal strength from several APs, it indicates that the higher interference from these APS will occur as well.
Page 56
Common Configuration This table describes the read-only parameters of all channels that can be viewed from the Channel Survey page. Parameters Description Freq Frequency of the channel at which your access point is operating. Channel Channel of the access point being used for transmission depending on its origin of country.
Common Configuration The Antenna Alignment feature in the access point is designed to precisely align the antenna over such a long distance so that the connectivity communication between your access point and another remote or neighboring access point could be improved as indicated by higher signal strength.
Page 58
Common Configuration NOTE If no MAC address is entered, the Antenna Alignment tool will make use of the SSID to align the antenna. Please make sure that the correct SSID is entered. If more than one access point (AP) shares the same SSID, the Antenna Alignment tool will show the strongest signal AP.
Common Configuration Select from the menu to expand four sub- menus. From here, click on Enter the parameters in the page. Click on the button to update the changes.
Page 60
Common Configuration This table describes the parameters that can be modified in the page. Parameters Description Beacon Interval The Beacon Interval is the amount of time between beacon (Only Access transmissions. This tells the client when to receive the beacon. A Point mode) beacon is a guidance signal sent by the access point to announce its presence to other devices in the network.
Common Configuration The Statistics feature reveals information on the wireless device connected to the WLAN. Select from the menu. You will see the sub- menus under . Click on Wireless clients that are connected to the WLAN are shown in the WLAN Station List.
Common Configuration NOTE Any changes to the WAN Setup will only take effect after rebooting. Setup your WAN to share Internet connection among the clients of the access point. Setup your WAN for Cable Internet whereby WAN IP address is dynamically assigned by ISP The access point is pre-configured to support this WAN type.
Page 63
Common Configuration Note: There are exceptional cases where additional configuration is required before an IP address will be allocated by your ISP to the access point. Certain ISPs log the MAC address of the first device used to connect to the broadband channel and will not release a WAN IP address unless the MAC address matches the one in their log.
Page 64
Common Configuration Step 6: Steps 6 - 7 are for those who need to set up the that your authenticate it as a valid DHCP Client Click on under the command menu. Step 7: On the following screen, key in the ISP assigned DHCP Client ID as the (You may also like to key in a preferred...
Page 65
Common Configuration WAN Setup - Cable Internet with Static IP Assignment If you have an ISP that leases a static WAN IP for your subscription, you will need to configure your access point’s WAN type accordingly. For example, if the ISP provided you with the following setup information, you can set up your WAN as described below: IP Address...
Page 66
Common Configuration WAN Setup - ADSL Internet using PPP over Ethernet (PPPoE) If you subscribe to an ADSL service using PPP over Ethernet (PPPoE) authentication, you can set up your access point’s WAN type as follows. For example, you may configure an account whose username is ‘guest’ as described below: Step 1: Under...
Page 67
Common Configuration setting is associated with the option, allowing you to specify the value (in seconds) after which the access point will disconnect from the ISP after the last Internet activity. A value of “0” will disable idle timeout. is associated with the option and specifies the maximum time the access point will wait before re-attempting to connect with your ISP.
Page 68
Common Configuration take effect. setting allows you to specify the value (in seconds) after which the access point will disconnect from the ISP after the last Internet activity. A value of “0” will disable idle timeout.
Common Configuration Telnet allows a computer to remotely connect to the access point CLI (Command Line Interface) for control and monitoring SSH (Secure Shell Host) establishes a secure host connection to the access point CLI for control and monitoring Select Telnet/SSH Setup from the CONFIGURATION...
Page 70
Common Configuration To add user: Click the button. In Add User Entry Page, enter the User Name, Password and specify whether the user is granted permission to Read Only or Read/Write. Click the Apply button. To delete user: Select which user to delete. Click the Delete button.
Common Configuration You may connect to the CLI (Command Line Interface) via a TELNET session to the default IP 192.168.168.1 Microsoft TELNET command is shown here but any TELNET client can be used. Enter C:\WINDOWS\TELNET 192.168.168.1 at DOS prompt and the TELNET application will launch and connect.
Common Configuration SSH provides the best remote access security using different forms of encryption and ciphers to encrypt sessions, and providing better authentication facilities and features that increase the security of other protocols. An encrypted connection like SSH is not viewable on the network. The Server can still read the information, but only after negotiating the encrypted session with the client.
Common Configuration The access point supports HTTPS (SSL) featuring additional authentication and encryption for secure communication, in addition to the standard HTTP. Select Web Server Setup from the CONFIGURATION menu. Select whether to set web server to HTTP or HTTPS (SSL) mode. Click Apply.
Common Configuration Simple Network Management Protocol (SNMP) is a set of communication protocols that separates the management software architecture from the hardware device architecture. Step 1: Click on from the menu. Step 2: Select from the drop-down list. The default is set to public while the default is private.
Common Configuration The SNMP Trap saves network resources through eliminating the need for unnecessary SNMP requests by providing notification of significant network events with unsolicited SNMP messages. Select from the menu. Select whether to the SNMP Trap. Enter the Enter the This is the port number of the SNMP manager.
Common Configuration Spanning Tree Protocol (STP) is a link management protocol that helps to prevent undesirable loops occurs in the network. For an Ethernet network to function properly, only one active path can exist between two stations. If a loop exists in the network topology, duplication of messages will occur and this might confuse the forwarding algorithm and allow duplicate frames to be forwarded.
Page 77
Common Configuration In short, the main purpose of activating STP is to prevent looping when you have redundant paths in the network. Without activating STP, redundant topology will cause broadcast storming. To establish path redundancy, STP creates a tree that spans all of the devices in an extended network, forcing redundant paths into a standby, or blocked, state, but establishing the redundant links as a backup in case the active link should fail.
Page 78
Common Configuration Scenario #1 – (No STP) With no STP, all clients (Notebook#1, #2, #3, #4) can access one another, resulting in low data security. Due to the redundant paths, broadcast packets will be duplicated and forwarded endlessly, resulting in a broadcast storm. Scenario #2 –...
Page 79
Common Configuration Click on from the menu Select the STP Status Enable radio button, fill in the fields, and click on the Apply button to update the changes. Priority: (Default: 32768, Range: 0 – 65535) This is the relative priority. The lowest priority will be elected as the root.
Common Configuration MAC Filtering acts as a security measure by restricting user network access according to MAC address. Each WLAN or radio card supports up to 16 virtual access points and has its own MAC address listing. NOTE MAC Filtering will not filter any MAC address from the Ethernet port.
Page 81
Common Configuration Select from The MAC Address Filtering page displays. In this page you may also set the MAC Filtering Status to Enable Disable for access points and set the Policy to either Accept Deny addresses. MAC Filtering set to Enable with Policy to Accept...
Page 82
Common Configuration MAC Filter Address List page displays. Click the button. The Add MAC Address page displays. Enter the MAC Address of the client in the format xx-xx-xx-xx-xx-xx, where x can take any value from 0 to 9 or a to f. Enter the Comment.
Page 83
Common Configuration MAC Filter Address List page displays with updated MAC Address List. NOTE Please reboot to effect all changes and new MAC address entries.
Page 84
Common Configuration Select MAC Filtering from WLAN Setup. The MAC Address Filtering page displays. Select View Complete MAC List. The MAC Filter Address List page displays. Select the checkbox of the MAC address you wish to delete. Click the Delete button.
Page 85
Common Configuration The MAC Filter Address List page displays with updated MAC Address List.
Page 86
Common Configuration Select MAC Filtering from WLAN Setup. The MAC Address Filtering page displays. Select Edit for the corresponding Access Point. The MAC Filter Address List page displays. Select the checkbox of the MAC address you wish to delete. Click the Delete button.
Page 87
Common Configuration The MAC Filter Address List page displays with updated MAC Address List.
Page 88
Common Configuration Select MAC Filtering from WLAN Setup. The MAC Address Filtering page displays. Select Edit. The MAC Filter Address List page displays. Select the MAC Address to edit.
Page 89
Common Configuration The Edit MAC Address page displays. Edit the MAC address settings accordingly. Click the Save button. The MAC Filter Address List page displays with updated MAC Address List.
The access point allows the network administrator to add a static routing entry into its routing table so that the access point can re-route IP packets to another network access point. This feature is very useful for a network with more than one access point.
Advanced Configuration With an understanding of how adding a static routing entry can facilitate a network setup such as the one described above, here is how you may configure the access point: Step 1: Under command menu, click on be brought to the shown (on the right).
Advanced Configuration (Available in Wireless Routing Client and Gateway modes) RIP (Routing Information Protocol) allows information to be exchanged within a set of routers under the same administration. RIPv1 bases the path used to pass traffic between routers on the fewest number of hops between the source and destination IP addresses within a packet.
Advanced Configuration – – The basic purpose of NAT is to share a single public IP address when there are multiple PCs in the private network by using different TCP ports to identify requests coming from different PCs. NAT is enabled by default. Due to NAT, computers in the private LAN behind the access point will not be directly accessible from the Internet.
Advanced Configuration DMZ (De-Militarized Zone) makes specific PCs in a NAT-enabled network directly accessible from the Internet. When NAT is enabled, an Internet request from a client within the private network first goes to the access point receiving a request, the access point keeps track of which client is using which port number.
Page 95
Advanced Configuration Step 3: On the page, you have to define the of the DMZ host. In this example, we keyed in the private IP address for the PC we wish to place within the DMZ : 192.168.168.55 (Enter as the and it will disable DMZ).
Advanced Configuration Virtual Server based on Port Forwarding is implemented to forward Internet requests arriving at the access point’s WAN interface, based on their TCP ports, to specific PCs in the private network. Step 1: Under the command menu, click on .
Page 97
Advanced Configuration Step 4: On the following screen, you can set up a Virtual Server for a type by selecting from a drop-down menu OR you can define a As an example, if you want to set up a web server on a PC with IP address of 192.168.168.55, select HTTP as enter as the...
Page 98
Advanced Configuration Known Server Select from the drop-down list of known server types: (HTTP, Server Type FTP, POP3 or Netmeeting). Private IP Specify the LAN IP address of your server PC running within Address the private network. Select All, Single, or Range from the dropdown list. Public IP Enter the beginning of the range.
Advanced Configuration When you have subscribed for more than one IP address from your ISP, you may define Virtual Servers based on IP Forwarding for which all Internet requests, regardless of ports, are forwarded to defined computers in the private network.
Advanced Configuration The access point is designed to support simple bandwidth management that makes use of the Bandwidth Control. This feature gives the administrator the choice to manage the bandwidth control of subscribers in case of massive data transfer which causes slowdown problems when surfing the Internet. Only two simple steps are required to enable or disable bandwidth control for the access point.
Advanced Configuration The access point can allow you to limit the entire throughput by configuring the option. These values should Upload / Download Bandwidth Setting be set to a positive integer indicating the maximum number of kilobytes transferred per second that will be allowed. The value of zero means unlimited. For example, if you configure the Upload Total Rate to be 640kb/sec (80KB/sec), then the access point will send out packets by this speed no matter how many clients/users are connected to it.
Advanced Configuration The access point can allow you to limit the LAN user’s throughput by configuring the Bandwidth Control Rule Step 1: Under the command menu, click on select Step 2: Click to create the bandwidth rule for LAN user. Step 3: Click to create the rule...
Page 103
Advanced Configuration This table describes the parameters that can be modified in the Add Bandwidth Control Entry page. Parameters Description Rule Name The rule describes the type of bandwidth traffic to be controlled and of a specification of what action to take when that bandwidth traffic is encountered.
Advanced Configuration The advanced network administrator will be delighted to know that remote management is supported on the access point. With this feature enabled, you will be able to access the access point’s web-based configuration pages from anywhere on the Internet and manage your home/office network remotely. Only two simple steps are required to set up remote management for the access point.
Advanced Configuration Parallel Broadband provides scalable Internet bandwidth with Load Balancing and Fail-Over Redundancy. Load Balancing is provided by balancing the aggregate bandwidth of multiple broadband connections across the traffic demands of your private network. With Parallel Broadband, if a particular broadband connection fails, the access point will use the remaining functional broadband connections, thus providing Fail-Over Redundancy.
Advanced Configuration Before you begin, ensure that each of the access point within the network is properly configured to connect to its individual broadband Internet account. Then ensure that either: • each access point is connected to an Ethernet port in the network as illustrated above or •...
Advanced Configuration The access point provides this feature to notify you by email when there is a change in the WAN IP address that was supplied to you earlier. Step 1: Under command menu, click on and you will be brought to the following screen.
Page 108
Advanced Configuration • Email address of Receiver: This is the email address of the receiver to whom the message would be sent. • IP address of Email Server: This is the IP address of the SMTP server through which the message would be sent out.
Advanced Configuration If you use a notebook for work in the office, you most probably bring it home to connect to the Internet as well. Since it is most likely that your office network and home network broadband-sharing network subnets are configured differently, you would have the hassle of reconfiguring your TCP/IP settings every time you use the notebook in a different place.
Advanced Configuration When you enter a URL in your Internet browser, the browser requests for a name-to-IP address translation from the Domain Name System (DNS) servers to be able to locate the web server hosting the website you want to access. The DNS server, in turn, looks for the answer in its local cache and if an appropriate entry is found, sends back this cached IP address to the browser.
Advanced Configuration NOTE An entry for the DNS Server field in the PC TCP/IP Properties is required for Internet access. If the exact DNS IP address is unavailable, simple key in any valid IP address, for example: 10.10.10.10 Step 1: Under the command menu, click on Step 2:...
Advanced Configuration It is difficult to remember the IP addresses used by computers to communicate on the Internet. It gets even more complicated when ISPs change your public IP address regularly, as is the case when the Internet connection type is Dynamic IP or PPPoE with Dynamic IP.
Advanced Configuration Step 1: Under the command menu, click on Step 2: If you have already created a list earlier, click on the button to update the list. Step 3: To add a new Dynamic DNS to the list, click on the Add button and you will see the page appear.
Page 114
Advanced Configuration There are two DDNS providers that are pre-defined for you. Please note that you need to be connected to the Internet to register your DDNS account. To select 2MyDNS – Dynamic DNS Service Provider as DDNS Service Provider Step 1: Under the column in the...
Page 115
Advanced Configuration Step 4: (Optional) enable wildcard service, your hostname would allowed multiple identities. For example, if you register: , users looking www.mydomain.2mydns.net ftp.mydomain.2mydns.net can still reach your hostname. Step 5: (Optional) In the Mail Exchanger field, enter the Static WAN IP address mail server...
Page 116
Advanced Configuration Step 8: It will appear as a hyperlink which you can click to go back to the Dynamic DNS Edit page. From this page, you can update any of the parameters, delete the domain name or reset all parameters to be blank again.
Page 117
Advanced Configuration Select DtDNS as DDNS Service Provider Step 1: Under the column in the table of check the radio button next to the . Then click on the button to proceed. Step 2: Enter your Step 3: checkbox is ticked by default.
Page 118
Advanced Configuration Step 4: Then click on the button. Step 5: In our example, while the new domain name, is being added to the list, the message ‘Waiting in queue…” will be displayed under the column of the table.
WDS2 (Wireless Distributed System 2) links up access points to create a wider network in which mobile users can roam while still staying connected to available network resources. The wireless client and root access point has to be set up with the same channel frequency. This allows them to connect even when the link is lost, as the channel frequency setting is preserved.
Page 120
Wireless Extended Features Follow these steps to change the setup of the root access point. Setup access point 1: Click on WLAN Setup from the CONFIGURATION menu. You will see the sub- menus expanded under WLAN Setup. Click on Basic. Ensure that The Current Mode is set to...
Page 121
Wireless Extended Features Follow these settings to setup access point 2. Setup access point 2: Click on WLAN Setup from the CONFIGURATION menu. You will see the sub- menus expanded under WLAN Setup. Click on Basic. Select the Channel common to both access point 1 and access point 2.
Page 122
Wireless Extended Features Configure WDS2 link: Click on WLAN Setup from the CONFIGURATION menu. You will see the sub- menus expanded under WLAN Setup. Click on Advanced. Under Extended Features, click on the WDS2 Settings button. WDS2 Link Status to Enable. Options for configuring WDS2 link: •...
Wireless Extended Features Virtual AP implements mSSID (Multi-SSID) whereby a single wireless card can be setup with up to 16 virtual AP connections with different SSIDs or BSSID (Basic Service Set Identifier) and security modes. Virtual AP delivers multiple services by VLAN segmentation: making the network think there are many SSIDs available and channeling each connection through different VLANs to the respective virtual network segments on the Ethernet network.
Page 124
Wireless Extended Features Follow these steps to setup Virtual AP. Virtual AP Click on WLAN Setup from the CONFIGURATION menu. Select Virtual AP. Virtual AP List page displays. • Click Apply register changes. • Click Clear to clear Virtual AP List. •...
Wireless Extended Features When there is more than one AP with the same SSID, the Preferred APs function allows you define the MAC address of the APs in order of preference. The MAC address at the top of the Preferred APs list has the highest connection preference, and the MAC address at the bottom has the lowest connection preference.
Wireless Extended Features The access point can calculate and display suggested values for certain parameters to use to ensure that efficient wireless communication between physically distant access points. Select Advanced from WLAN Setup under Configuration. Click on the Long Distance Parameters button under the Extended Features section.
Page 127
Wireless Extended Features This table describes the parameters that can be modified in the Long Distance Parameters page. Parameters Description Outdoor The Outdoor parameter is disabled by default. If set to Enable, the Outdoor parameters will be configured for outdoor communication over short or long distances as specified.
Wireless Extended Features Wireless Multimedia (WMM) is a QoS (Quality of Service) standard in IEEE802.11E that we have adopted to improve and support the user experience for multimedia, video, and voice applications by prioritizing data traffic. QoS can be realized through 4 different Access Categories (AC). Each AC type consists of an independent transmit queue, and a channel access function with its own parameters.
Page 129
Wireless Extended Features Follow these steps to change the setup Wireless Multimedia on your access point. Click on WLAN Setup from the CONFIGURATION menu. Select Advanced. Click on the WMM Settings button. Select to Enable Wireless Multimedia (WMM) Enter the desired WMM parameters. Using the default parameters is recommended.
Page 130
Wireless Extended Features WMM Parameters (for advanced users) AIFs (Arbitrary Arbitrary Inter-Frame Space is the minimum wait time Inter-Frame interval between the wireless medium becoming idle and Spacce) the start of transmission of a frame over the network. Cwmin Contention Window Minimum is the minimum random wait (Contention time drawn from this interval or window for the backoff Window...
Page 131
Wireless Extended Features Parameters for Data1 Background. (Background) Background data traffic is de-prioritized and is mostly for backup applications, or background transfers like backup applications or background transfers like bulk copies that do not impact ongoing traffic like Internet downloads. VI (Video) Parameters for video data traffic.
Wireless Extended Features & & You can implement Point-to-Point connection by simply setting one access point as RootAP in Access Point mode and setting the other access points to Transparent Client mode. You can set a root access point and a transparent client to allow point-to-point communication between different buildings and enable you to bridge wireless clients that are kilometres apart while unifying the networks.
Page 133
Wireless Extended Features Select Act as RootAP, click on the Apply button and reboot your device to let your changes take effect.
Page 134
Wireless Extended Features Follow these steps to setup Transparent Client/s. Click on WLAN Setup from the CONFIGURATION menu. You will see the sub- menus expanded under WLAN Setup. Click on Basic. Ensure that The Current Mode is set to Transparent Client.
Wireless Extended Features A Repeater AP can connect to an AP only if the option Act as RootAP is set or checked in the AP setup. NOTE bandwidth degrades with every repeater recommended that a limit of 4 hops is not exceeded.
Page 136
Wireless Extended Features NOTE DO NOT physically connect your PC to the server via Ethernet cable in addition to the wireless connection, as doing so will create a loop that is not prevented by wireless loop preventing feature.
Page 137
Wireless Extended Features Follow these settings to setup the root AP. Root AP Settings: Click on WLAN Setup from the CONFIGURATION menu. You will see the sub- menus expanded under WLAN Setup. Click on Basic. Ensure that The Current Mode is set to Access Point.
Page 138
Wireless Extended Features Follow these settings to setup the repeater. Repeater Settings: Click on WLAN Setup from the CONFIGURATION menu. You will see the sub- menus expanded under WLAN Setup. Click on Basic. Ensure that The Current Mode is set to Repeater.
Page 139
Wireless Extended Features Options for defining the root AP: • Accept the default Remote ESSID (root AP’s SSID) • Enter the Remote ESSID. • Check and enter the Remote BSSID (root AP’s MAC address) Click Apply.
This section illustrates how to make your WLAN more secure. All the nodes in your network MUST share the same wireless settings to be able to communicate. We will illustrate how to configure each type of security mode individually. To start with, follow the common preliminary steps described below to select the most appropriate security approach for protecting your wireless communications.
WLAN Security The guidelines below will help you to set up your access point for using WEP. At the WEP Setup page, Specify the , by selecting either: • • • • Select the from the pull down menu: • •...
WLAN Security The guidelines below will help you to set up the access point for using WPA-PSK. Please follow the steps below if you have activated WPA-PSK, WPA2-PSK or WPA-PSK-AUTO security modes. At the page, Specify the , by selecting either: •...
Page 143
WLAN Security For WPA-PSK Set the WPA replaces WEP with a strong encryption technology called Temporal Key Integrity Protocol (TKIP) with Message Integrity Check (MIC). For WPA2-PSK Set the Advanced Encryption Standard (AES) is a stronger symmetric 128-bit block data encryption technique. AES is a requirement of WPA2 under the IEEE 802.11i standard.
WLAN Security The guidelines below will help you to set up the access point for using 802.1x/RADIUS. At the IEEE 802.1x Setup page, Key in the IP address of the in your WLAN. You can optionally add in the IP address of a , if any.
Page 145
WLAN Security Enter the in the field provided. By default, the is set as seconds. You may leave this value as its default setting. Select the of each encryption key: • • 10 hexadecimal or 5 ASCII Text • • 26 hexadecimal or 13 ASCII Text Press the button and reboot your system, after which your settings will...
WLAN Security The guidelines below will help you to set up the access point for using WPA-EAP. Please follow the steps below if you have selected the WPA or WPA1-EAP, WPA2-EAP or WPA-EAP-AUTO. At the page, Key in the IP address of the in your WLAN.
Page 147
WLAN Security Enter the used to validate client-server RADIUS communications. Select the of each encryption key: • • 10 hexadecimal or 5 ASCII Text • • 26 hexadecimal or 13 ASCII Text For WPA-EAP Set the WPA replaces WEP with a strong encryption technology called Temporal Key Integrity Protocol (TKIP) with Message Integrity Check (MIC).
This chapter describes the security configuration mainly found in the Wireless Routing Client and Gateway modes. As part of the comprehensive security package found on the access point, you may perform IP packet filtering to selectively allow/disallow certain applications from connecting to the Internet. Step 1: Under the command menu, click on...
Security Configuration Step 4: Click on the button and you will be able to define the details of your from the screen on the right. Enter Rule Name for this new 4a). packet filtering rule. example, BlockCS 4b). From the IP Address drop down list, select whether to...
Page 150
Security Configuration Range of TCP ports In this case, you will have to define (From) which port (To) which port, your rule applies. Single TCP port Here, you need only specify the source port in the (From) field. IP port You may here, leave both, the (From) as well as the...
Page 151
Security Configuration time Here, you may leave both (From) (To) fields blank. Step 5: Click on the button to make the new rule effective. table will then be updated. Step 6: In this example, let us say we would like block application called CS from all PCs (any IP address within the...
Security Configuration The access point supports URL Filtering which allows you to easily set up rules to block objectionable web sites from your LAN users. Step 1: Under the command menu, click on Step 2: You may now define the by clicking the button.
Security Configuration More than just a “NAT” firewall, there is a powerful Stateful Packet Inspection (SPI) firewall option that can be activated on the access point. Stateful inspection compares certain key parts of the packet to a database of trusted information before allowing it through.
Page 154
Security Configuration The packet types that you have selected in the section will be displayed in the firewall log if they are detected by the firewall. This also applies to the section. Step 4: You may add more firewall rules for specific security purposes.
Page 155
Security Configuration ICMP Types This IP protocol is used to report errors in IP packet routing. ICMP serves as a form of flow control, although ICMP messages are neither guaranteed to be received or transmitted. ICMP Packet Type Description Echo request Determines whether an IP node (a host or a router) is available on the network.
Page 156
Security Configuration of IP addresses. Destination IP This parameter lets you specify the set of workstations that receive the data packets. Users can either set a single IP address or set a range of IP addresses. Source Port You can control requests for using a specific application by entering its port number here.
Security Configuration When the access point’s SPI firewall is in operation, valuable traffic patterns in your network will be captured and stored into the Firewall Logs. From these logs, you can extract detailed information about the type of data traffic, the time, the source and destination address/port as well as the action taken by the SPI firewall.
This feature lets you determine whether your access point can communicate (ping) with another network host. This feature is available only for the Wireless Routing Client and Gateway modes. Step 1: Select under the command menu. Step 2: Enter the IP address of the target host where the target host you want the access point to ping to.
System Utilities Syslog forwards system log messages in a network to a machine running a Syslog listening application. It is used to help in managing the computer system and increase security on the network. Freeware supporting Syslog is widely available for download from the Internet. This section shows how to: •...
System Utilities Follow these steps to setup Syslog: Step 1: Click on Syslog from the SYSTEM TOOLS menu. Step 2: Select to Enable Syslog. Enter the Logging IP or Domain Name Enter the Logging Port Click Apply to make the changes.
Page 161
System Utilities Follow these sample steps to view logged information: for a Syslog listening application. Search Select a Syslog listening application. Download Syslog listening application. Install Syslog listening application. View logged information on Syslog listening application.
System Utilities If your network operates with several access points, you would find it useful to have a means of identifying each individual device. You can define the System Identity of your access point to be uniquely identifiable as follows: Click on from the menu.
System Utilities ’ ’ Click on ’ from the menu. ’ Select the appropriate time zone from the drop-down list. the Auto Time Setting (SNTP) radio button. stands for Simple Network Time Protocol and is used to synchronise computer clocks. Fill in the field and click on the button to effect the...
System Utilities You can check the types and version of your firmware by clicking on About System from the HELP menu. To begin with, ensure that you have downloaded the latest firmware onto your local hard disk drive. Click on from the menu.
Page 165
System Utilities Follow the instructions given during the upgrading process. You need to reboot the system after the firmware upgrade. NOTE The firmware upgrade process must NOT be interrupted otherwise the device might become unusable.
System Utilities You may choose to save the current configuration profile, to make a backup of it onto your hard disk, to restore an earlier profile saved on file or to reset the access point back to its default settings. Click on from the menu.
Page 167
System Utilities Click on from the menu. If you want to back up the current settings of your access point onto your hard disk drive, click on the button. Next, save your configuration file to your local disk.
Page 168
System Utilities Click on from the menu. If you want to store back the settings that you had previously saved, click on … button. Proceed to the folder where you saved your … configuration file. Click on the button and the system will prompt you to reboot your device.
System Utilities Most of the changes you make to the system’s settings require a system reboot before the new parameters can take effect. Click on from the menu. Click on the button. Wait for the system to reboot and the login page will be displayed.
System Utilities It is recommended that you change the default login password, which is case sensitive and is set by default, to password. Click on from the menu. Key in the . The factory default is password. Enter the in the field as well as in the field.
System Utilities To exit the Web interface, follow the next few steps. Click on from the menu. Click the button to access your access point’s configuration interface again.
System Utilities The About System page displays a summary of your system configuration information. Support technicians might require specific information about your system data when they are troubleshooting your configuration. You can use the information displayed in this page to quickly find the data they need to resolve your system problem.
This section demonstrates how to reload the firmware to the access point should the system fail to launch properly. In such cases, the access point will automatically switch to loader mode and the diagnostic LED will light up and remain ON. The table below illustrates the behavior of the diagnostic LED ( ).
Page 174
Firmware Recovery From the Start menu, click Run and type cmd. When the command prompt window appears, type in the following command: X:\recovery\TFTP -i 192.168.168.1 PUT image_name.IMG, where refers to your CD drive and image_name.IMG to the firmware filename found in the Recovery folder of the Product CD.
Once the hardware has been set up, you need to assign an IP address to your PC so that it will be in the same subnet as the access point. By default, the access point’s IP address is 192.168.168.1; and its subnet mask is 255.255.255.0. You need to configure your PC’s IP address to 192.168.168.xxx;...
TCP/IP Configuration Highlight the TCP/IP and click on Properties button. Select radio button Specify an IP address. Enter the IP Address and Subnet Mask 192.168.168.X 255.255.255.0, where X can be any number from 2 to 254, except for 1. In this example, we are using 192.168.168.100 as the static IP Address.
Page 177
TCP/IP Configuration In order to check if the IP address has been assigned correctly to your PC, simply go to the Start menu, select Run, and enter the command winipcfg. Select your respective Ethernet Adapter from the drop down list and click OK.
TCP/IP Configuration Go to your desktop, right-click on My Network Places icon and select Properties. Go to your network adapter icon, right click and select to Properties. Highlight Internet Protocol (TCP/IP) and click on Properties button.
Page 179
TCP/IP Configuration Select the radio button for Use the following IP address. Enter the IP Address Subnet Mask 192.168.168.X 255.255.255.0, where Xcan be any number from 2 to 254, except for 1. In this example, we are using 192.168.168.160 as the static IP Address.
& & Front View of Access Point N Female Connector Waterproof RJ45 Connector Back View of Access Point Mounting bracket Bottom View of Access Point Board...
Page 181
Panel View & Descriptions Name Description Reset Push button To reboot, press once. To reset password, press and hold the button for 5 seconds. The DIAG light will flash fast for about 5 flashes/sec before releasing the button. To restore the factory default settings, press and hold the button for more than 10 seconds.
Q1) What is mSSID? Multi-SSID (mSSID) as the name suggest, allows an access point (AP) with a single radio card to support more than one SSID. Q2) What can you do with mSSID connection? The application of mSSID is to provide better security with multiple network path connections from a single AP, to multiple VLAN network segments of the switch on the local area network.
Page 183
Virtual AP (Multi-SSID) Q3) Can I update my access point to this mSSID firmware? (See Appendix V) Yes. You can retain your access point configuration when you update to the mSSID firmware if the current firmware running is v1.3x and above. If AP is running the following configuration setup, updating to the mSSID firmware will affect the configuration.
Page 184
Virtual AP (Multi-SSID) Q6) I have Pseudo VLAN for Per Group enabled. Will updating to mSSID firmware still support wireless clients with MAC addresses listed in Per Group? The mSSID firmware replaces Pseudo VLAN and integrates it into VAP (Virtual AP) and MAC Filtering.
Page 185
Virtual AP (Multi-SSID) Q8) I have 2 of the access point units installed at a site about 2km from each other running PtP modes. Should I update to mSSID firmware? Can I do it from one location to update the firmware like I do with the current single SSID firmware? The setup for PtP and PtMP for mSSID firmware is different the current sSSID firmware.
This is how your Single SSID interface must look before the update to Multi SSID. Download the Multi SSID Firmware ( 3.XX and above) at http://www.netkrom.com/supp_drivers.html Upgrade to Multi SSID Firmware following the standard procedure explained in Chapter 9 > Firmware Upgrade...
Page 187
This is how your Multi SSID interface must look after following all the previous steps. Note: After upgrading the Firmware your configuration may change. Please use this manual for new configuration.
Page 188
This is how your Single SSID interface must look before the update to Multi SSID Download the Loader Update 2.43 at http://www.netkrom.com/supp_drivers.html Proceed with the Loader Update following the standard procedure explained in Chapter 9 > Firmware Upgrade, which means via Web Browser.
Page 189
Download the Multi SSID Firmware ( 3.XX and above) at http://www.netkrom.com/supp_drivers.html In this step, you have to follow a similar procedure explained in APPENDIX 1: FIRMWARE RECOVERY. If you Saved the Multi SSID Firmware in your Hard Disk as: C:\accesspoint\mSSID_FirmwareXXX.IMG Type in your DOS console: C:\accesspoint\>...
Page 190
This is how your Multi SSID interface must look after following all the previous steps. Note: After upgrading the Firmware your configuration may change. Please use this manual for new configuration.
Need help?
Do you have a question about the AIR-BR500GHP and is the answer not in the manual?
Questions and answers