ABLE OF ONTENTS ABLE OF ONTENTS Conventions 0-vi Copyright 0-viii Product Overview Package Contents Product Overview Key Features ............1-2 Benefits .
Page 3
ABLE OF ONTENTS Installing the Device Pre-Installation Guidelines ..........2-2 Installing the Device .
Page 4
ABLE OF ONTENTS Configuring IP Settings 4-10 Configuring Spanning Tree Settings 4-11 Router Setup 4-12 Configuring WAN Settings 4-12 Static IP ............4-12 Dynamic IP.
Page 6
ABLE OF ONTENTS Configuring Logging 4-50 Configuring Diagnostics 4-51 Viewing Device Discovery 4-52 Configure Denial of Service Protection 4-53 Logging Out 4-54 Appendix A Federal Communication Commission Interference Statement Appendix B Industry Canada Statement Appendix C WorldWide Technical Support...
ONVENTIONS Conventions The following conventions are used to give the user additional Example: information about specific procedures or content. It is important Indicates information used to demonstrate or explain an to pay attention to these conventions as they provide informa- associated concept.
ONVENTIONS Typographical Conventions The following typographical conventions are used in this docu- ment: Italics Indicates book titles, directory names, file names, path names, and program/process names. Constant width Indicates computer output shown on a computer screen, includ- ing menus, prompts, responses to input, and error messages. Constant width bold Indicates commands lines as entered on the computer.
VERVIEW RODUCT VERVIEW 1.2 Product Overview Thank you for choosing ENS200. The ENS200 is a long range, Point-to-point and point-to-multipoint wireless connectiv- high performance IEEE 802.11b/g/n network solution that pro- ity enable data transfers between two or more buildings...
Wireless extensions to Ethernet networks WLANs enable network managers in dynamic environments to The ENS200 is the ideal product around which you can build minimize overhead caused by moves, extensions to networks, your WLAN. The following list summarizes a few key advan- and other changes.
RODUCT VERVIEW ECHNICAL PECIFICATION Technical Specification Wireless Specification IEEE802.11b/g/n, 1T1R, 150Mbps 2.400 to 2.484 GHz, programmable upon different country regulations Hardware Specification Physical Interface: 2 x 10/100Mbps LAN Ports, 1 x Reset Button Power Supply: Passive PoE, 24V/0.6A Power Adapter ...
Blink = ENS200 is sending or receiving data (Access Point or Client Bridge Mode) OFF = ENS200 radio is off and the device is not sending or receiving data over the wireless LAN. ON = ENS200 radio is on, and the device is...
Page 16
To reset to factory settings, press button for > Reset Button 10 seconds. To configure the ENS200, connect to an LAN Connector Ethernet adapter in a computer. For more information The PoE interface allows the ENS200 to be PoE LAN Connector powered using the supplied PoE injector...
NSTALLATION YSTEM EQUIREMENTS 2.1 System Requirements To install the ENS200, you need the following: Computer (Windows, Linux, Mac OS X Operating System) Web Browser (Internet Explorer, FireFox, Chrome, Safari) Network Interface Card with an open RJ-45 Ethernet Port ...
NSTALLING THE EVICE 2.2 Installing the Device Installing the Device Installing the ENS200 on a pole or wall optimizes the wireless access range. To install the ENS200, use the following procedure to mount the Note: device on a pole and refer to the figure below.
Page 20
6. Turn over the ENS200. Then insert the mast strap through the middle hole of the ENS200. Use a screw- driver to unlock the pole-mounting ring putting it through the ENS200. 7. Mount the ENS200 securely to the pole by locking the strap tightly. This completes the installation procedure.
ONFIGURATION OGGING 3.1 Logging In The ENS200 has a built-in Web Configurator that lets you man- 3. When the login screen appears, enter admin for the user- age the unit from any location using a Web browser that sup- name in the top field and admin for the password in the bottom ports HTTP and has Javascript installed.
restore it. Restoring an earlier working configuration can be useful if the ENS200 becomes unstable or crashes. If you forget your password, you will have to reset the ENS200 to its factory default settings and lose any cus- tomized override settings you configured.
ASIC ETWORK ETTINGS YSTEM TATUS 4.1 System Status View the summary of the current system status including system (hardware/software version, date/time), wired network (LAN) and wireless network (WLAN) information. 4.1.1 Using Save/Reload Save and apply the settings shown in the Unsaved changes list, or cancel the unsaved changes and revert to the previous set- tings that were in effect.
ASIC ETWORK ETTINGS IEWING YSTEM NFORMATION 4.1.2 Viewing System Information Displays status information about the current operating mode. System Information shows the general system information such as operating mode, system up time, firmware version, serial number, kernel version, and application version. LAN Settings shows Local Area Network settings such as the LAN IP address, subnet mask, and MAC address.
Page 27
ASIC ETWORK ETTINGS IEWING YSTEM NFORMATION Current Wireless Settings shows wireless information such as frequency and channel. Since the ENS200 supports multiple- SSIDs, information about each SSID, such as its ESSID and security settings, are displayed.
ASIC ETWORK ETTINGS IEWING IRELESS LIENT 4.1.3 Viewing Wireless Client List Displays a list of clients associated to the ENS200, along with the MAC addresses and signal strength for each client. Click the Refresh button to update the client list.
IEWING YSTEM 4.1.4 Viewing System Log The ENS200 automatically logs events to internal memory. Note: The oldest events are deleted from the log when memory is full. Click the Refresh button to update the client list or the Clear button to remove all events.
ASIC ETWORK ETTINGS IEWING ONNECTION TATUS 4.1.5 Viewing Connection Status Displays the current status of the network. The WLAN information shown includes network type, SSID, BSSID, connection status, wireless mode, current channel, security, data rate, noise level, and signal strength. The WAN information shown includes the MAC address, connection type, connection status, IP address, IP subnet mask, primary DNS and secondary DNS.
IEWING LIENT ABLE 4.1.6 Viewing DHCP Client Table Displays the clients that are associated to the ENS200 through DHCP. The MAC addresses and signal strength for each client are also shown. Click the Refresh button to update the client list.
IEWING 4.1.7 Viewing WDS Link List Displays the clients that are associated to the ENS200 through WDS. The MAC addresses, link status and signal strength for each client are also shown. Click the Refresh button to update the client list.
ETUP 4.2 System Setup The following sections explain the features and functionality of the ENS200 in access point mode, client bridge mode, WDS access point mode, WDS bridge mode, WDS station mode and client router mode. 4.2.1 Configuring Operation Mode Set the primary function of the device.
ETWORK ETTINGS ONFIGURING ETTINGS 4.2.2 Configuring IP Settings Configure the LAN settings for the ENS200 using a static or dynamic IP address. IP Network Setting Configure the network connection type using either a static IP or dynamic IP. IP Address Enter the LAN IP address of the ENS200.
Enable or disable the ENS200 Spanning Tree function. Bridge Hello Time Specify Bridge Hello Time, in seconds. This value determines how often the ENS200 sends hello packets to communicate information about the topology throughout the entire Bridged Local Area Network Bridge Max Age Specify Bridge Max Age, in seconds.
ETUP 4.3 Router Setup 4.3.1 Configuring WAN Settings Configure the WAN settings for the ENS200 using a static or dynamic IP address, PPPoE or PPTP. Static IP Setting a static IP address allows an administrator to set a specific IP address for the router and guar- antees that it can not be assigned a different address.
Discard Ping on WAN Check to Enable to recognize pings on the ENS200 WAN interface or Disable to block pings on the ENS200 WAN interface. Note: Pinging IP addresses is a common method used by hackers to test whether the IP address is valid. Blocking pings provides some extra security from hackers.
Discard Ping on WAN Check to Enable to recognize pings on the ENS200 WAN interface or Disable to block pings on the ENS200 WAN interface. Note: Pinging IP addresses is a common method used by hackers to test whether the IP address is valid. Blocking pings provides some extra security from hackers.
Connect on Demand If you want the ENS200 to end the Internet connection after it has been inactive for a period of time, select this option and enter the number of minutes you want that period of inactivity to last.
Page 40
Discard Ping on WAN Check to Enable to recognize pings on the ENS200 WAN interface or Disable to block pings on the ENS200 WAN interface. Note: Pinging IP addresses is a common method used by hackers to test whether the IP address is valid. Blocking pings provides some extra security from hackers.
Enter the WINS Server IP. Use Router As DHCP Server Check this option to enable the ENS200 internal DHCP server. Starting IP Address Specify the starting IP address range for the pool of allocated for private IP addresses. The starting IP address must be on the same subnet as the ending IP address;...
4.3.3 Configuring VPN Pass-Through VPN Pass-through allows a secure virtual private network (VPN) connection between two computers. Enabling the options on this page opens a VPN port and enables connections to pass through the ENS200 without interruption. PPTP Pass-through Check this option to enable PPTP pass-through mode.
ASIC ETWORK ETTINGS ONFIGURING ORWARDING 4.3.4 Configuring Port Forwarding Port forwarding enables multiple server applications on a LAN to serve clients on a WAN over a single WAN IP address. The router accepts incoming client packets, filters them based on the destination WAN, or public, port and protocol and forwards the packets to the appropriate LAN, or local, port.
Page 44
ASIC ETWORK ETTINGS ONFIGURING ORWARDING Service Name Enter a name for the port forwarding rule. Protocol Select a protocol for the application: Choices are Both, TCP, and UDP. Starting Port Enter a starting port number. Ending Port Enter an ending port number. All ports numbers between the starting and ending ports will forward users to the IP address specified in the IP Address field.
ASIC ETWORK ETTINGS ONFIGURING EMILITARIZED 4.3.5 Configuring Demilitarized Zone Configuring a device on the LAN as a demilitarized zone (DMZ) host allows unrestricted two-way Internet access for Internet applica- tions, such as online video games, to run from behind the NAT firewall. The DMZ function allows the router to redirect all packets going to the WAN port IP address to a particular IP address on the LAN.
Incorrectly changing these settings may cause the device to stop functioning. Do not modify the settings in this section without a thor- ough understanding of the parameters. Access Point Mode The ENS200 supports Access Point Mode. In this mode, users with a wireless client device within range can connect to the ENS200 to access the WLAN. Wireless Mode Wireless mode supports 802.11b/...
Page 47
ASIC ETWORK ETTINGS CCESS OINT AP Detection AP Detection can select the best channel to use by scanning nearby areas for Access Points. Current Profile Configure up to four different SSIDs. If many client devices will be accessing the network, you can arrange the devices into SSID groups.
ASIC ETWORK ETTINGS LIENT RIDGE Client Bridge Mode Client Bridge Mode lets you connect two LAN segments via a wireless link as though they are on the same physical network. Since the computers are on the same subnet, broadcasts reach all machines. As a result, DHCP information generated by the server reach all client computers as though the clients residing on one physical network.
Page 49
ASIC ETWORK ETTINGS LIENT RIDGE Profile If you used the Site Survey, the Web Configurator shows nearby Access Points. To connect to an Access Point, click the Access Point’s BSSID. Wireless Security See Configuring Wireless Security. Click Refresh to scan again. 4-25...
WDS B ASIC ETWORK ETTINGS RIDGE WDS Bridge Mode Unlike traditional bridging. WDS Bridge Mode allows you to create large wireless networks by linking several wireless access points with WDS links. WDS is normally used in large, open areas, where pulling wires is cost prohibitive, restricted or physically impossible. Wireless Mode Wireless mode supports 802.11b/g/n mixed modes.
Page 51
WDS B ASIC ETWORK ETTINGS RIDGE Security Select the type of WDS security: None, WEP, or AES. WEP Key Enter the WEP key. AES Pass phrase Enter the AES pass phrase. MAC Address Enter the MAC address of the Access Point to which you want to extend wireless connectivity.
In Client Router Mode, you can access the Internet wirelessly with the support of a WISP. In AP Router Mode, the ENS200 can access the Internet via a cable or DSL modem. In this mode, the ENS200 can be configured to turn off the wireless network name (SSID) broadcast, so that only stations that have the SSID can be connected.
Page 53
ASIC ETWORK ETTINGS LIENT OUTER Profile If you used the Site Survey, the Web Configurator shows nearby Access Points. To connect to an Access Point, click the Access Point’s BSSID. Wireless Security See Configuring Wireless Security. Click Refresh to scan again. 4-29...
IRELESS ECURITY 4.4.2 Configuring Wireless Security The Wireless Security Settings section lets you configure the ENS200’s security modes: WEP, WPA-PSK, WPA2-PSK, WPA-PSK Mixed, WPA, WPA2, and WPA Mixed. We strongly recommend you use WPA2-PSK. Wired Equivalent Privacy (WEP) Security Mode Select WEP from the drop-down list to begin the configuration.
(WPA-PSK) ASIC ETWORK ETTINGS ROTECTED CCESS HARED Wi-Fi Protected Access Pre-Shared Key (WPA-PSK) Security Mode Select WPA-PSK from the drop-down list to begin the configuration. Encryption Select Both, TKIP, or AES as the encryption type. Both = uses TKIP and AES. ...
(WPA2-PSK) ASIC ETWORK ETTINGS ROTECTED CCESS HARED Wi-Fi Protected Access 2 Pre-Shared Key (WPA2-PSK) Security Mode Select WPA2-PSK from the drop-down list to begin the configuration. Encryption Select Both, TKIP, or AES as the encryption type. Both = uses TKIP and AES. ...
(WPA-PSK) M ASIC ETWORK ETTINGS ROTECTED CCESS HARED IXED Wi-Fi Protected Access Pre-Shared Key (WPA-PSK) Mixed Security Mode Select WPA2-PSK Mixed from the drop-down list to begin the configuration. Encryption Select Both, TKIP, or AES as the encryption type. Both = uses TKIP and AES. ...
(WPA) ASIC ETWORK ETTINGS ROTECTED CCESS Wi-Fi Protected Access (WPA) Security Mode Select WPA from the drop-down list to begin the configuration. Encryption Select Both, TKIP, or AES as the encryption type. Both = uses TKIP and AES. TKIP = automatic encryption with WPA-PSK; requires pass- ...
2 (WPA2) ASIC ETWORK ETTINGS ROTECTED CCESS Wi-Fi Protected Access 2 (WPA2) Security Mode Select WPA2 from the drop-down list to begin the configuration. Encryption Select Both, TKIP, or AES as the encryption type. Both = uses TKIP and AES. ...
(WPA) M ASIC ETWORK ETTINGS ROTECTED CCESS IXED Wi-Fi Protected Access (WPA) Mixed Security Mode Select WPA Mixed from the drop-down list to begin the configuration. Encryption Select Both, TKIP, or AES as the encryption type. Both = uses TKIP and AES. ...
Wireless MAC Filters are used to allow or deny network access to wireless clients according to their MAC addresses. You can manu- ally add a MAC address to restrict the permission to access ENS200. The default setting is Disable Wireless MAC Filters.
Note: The Access Point to which you want to extend wireless connectivity must enter the ENS200’s MAC address into its configuration. For more information, refer to the documentation for the Access Point. Not all Access Point supports this feature.
ASIC ETWORK ETTINGS ONFIGURING DVANCED ETWORK ETTINGS 4.4.5 Configuring Advanced Network Settings Network address translation (NAT) allows users on the LAN to access the Internet through a single or multiple Public IP Addresses. NAT provides firewall protection from hacker attacks and allows for mapping LAN IP addresses to WAN IP addresses with key ser- vices such as websites, FTP, video game servers, etc.
4.5.1 Configuring Administrator Account Click the Administration link under the Management menu to change the user name and password used to log on to the ENS200 Web Configurator. The default user name is admin and the default password is admin. Changing these settings protects the ENS200 configuration settings from being accessed by unauthorized users.
Click Accept to confirm the changes or Cancel to cancel and return previous settings. Note: If you reconfigure the Management VLAN ID, you may lose your connection to the ENS200. Verify that the DHCP server supports the reconfigured VLAN ID and then reconnect to the ENS200 using the new IP address.
ONFIGURING 4.5.3 Configuring SNMP SNMP is used in network management systems to monitor network-attached devices for conditions that warrant administrative atten- tion. SNMP Enable or disable the ENS200 SNMP function. Contact Enter the contact details of the device. Location Enter the location of the device.
Page 67
SNMP ASIC ETWORK ETTINGS ONFIGURING Engine ID Specify the engine ID for SNMPv3. Click Save/Apply to apply the changes or Cancel to return previous settings. 4-43...
This feature is particularly convenient administrators who have several ENS200 devices that need to be configured with the same settings. This page also lets you return the ENS200 to its factory default settings. If you perform this procedure, any changes made to the ENS200 default settings will be lost.
Upgrading firmware through a wireless connection is not recommended. Firmware upgrading must be performed while connected to an Ethernet (LAN port) with all other clients disconnected. The firmware upgrade procedure can take several minutes. Do not power off the ENS200 during the firmware upgrade, as it can cause the device to crash or become unusable.
ONFIGURING YSTEM 4.5.6 Configuring System Time Change the system time of the ENS200 by manually entering the information, synchronizing the device with a PC, or setup automatic updates through a network time (NTP) protocol server. Manually Set Date and Time...
ASIC ETWORK ETTINGS ONFIGURING CHEDULE 4.5.7 Configuring Wi-Fi Schedule Use the Wi-Fi schedule function to control the wireless power ON/OFF service that operates on a routine basis. Add a Schedule Service Create a schedule service type and date/time parameters for a specific service. Schedule Name Enter the description of the schedule service.
ENS200 to an NTP server, see Configuring System Time. Schedule Table Displays a list of scheduled services for the ENS200. The properties of each service displayed are: Displays the ID number of the service in the table. Name Displays the description of the service.
4.5.8 Configuring Command Line Interface Most users will configure the ENS200 through the graphical user interface (GUI). However, for those who prefer an alternative method there is the command line interface (CLI). The CLI can be access through a command console, modem or Telnet connec- tion.
4.5.9 Configuring Logging Display a list of events that are triggered on the ENS200 Ethernet and wireless interfaces. You can consult this log if an unknown error occurs on the system or when a report needs to be sent to the technical support department for debugging purposes.
Page 75
ASIC ETWORK ETTINGS ONFIGURING IAGNOSTICS 4.5.10 Configuring Diagnostics The diagnosis feature allow the administrator to verify that another device is available on the network and is accepting request pack- ets. If the ping result returns alive, it means a device is on line. This feature does not work if the target device is behind a firewall or has security software installed.
Page 76
ASIC ETWORK ETTINGS IEWING EVICE ISCOVERY 4.5.11 Viewing Device Discovery Device Name Displays the name of the devices connected to the network. Operation Mode Displays the operation mode of the devices connected to the network. IP Address Displays the IP address of the devices connected to the network. System MAC Address Displays the system MAC address of the devices connected to the network.
Page 77
ASIC ETWORK ETTINGS ONFIGURE ENIAL OF ERVICE ROTECTION 4.5.12 Configure Denial of Service Protection Use TCP SYN Cookies Protection Click to enable TCP SYN cookies protection. SYN Flood Attack Protection Click to enable or disable SYN Flood Attack Protection. Match Interval Per Second Enter the allowed number of packets per second.
PPENDIX EDERAL OMMUNICATION OMMISSION NTERFERENCE TATEMENT Appendix A Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
Page 80
PPENDIX EDERAL OMMUNICATION OMMISSION NTERFERENCE TATEMENT Important: This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This device complies with FCC RF Exposure limits set forth for an uncontrolled environment, under 47 CFR 2.1093 paragraph (d)(2). This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.
PPENDIX NDUSTRY ANADA TATEMENT Appendix B Industry Canada Statement This device complies with RSS-210 of the Industry Canada Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.
Page 82
PPENDIX ORLD ECHNICAL UPPORT Appendix C WorldWide Technical Support REGION COUNTRY OF PURCHASE SERVICE CENTRE SERVICE INFORMATION CANADA web site www.engeniuscanada.com email rma@engeniuscanada.com Toll Free: (+1) 888-397-2788 Canada contact numbers Local: (+1) 905-940-8181 Monday - Friday hours of operation 9:00AM to 5:30PM EST (GMT-5) LOS ANGELES, USA web site www.engeniustech.com...
Page 83
Africa DUBAI, UAE web site www.engenius-me.com Middle East email support@engenius-me.com Russia CIS / Armenia, Azerbaijan, Belarus, Toll Free: Georgia, Kazakhstan, Kyrgyzstan, U.A.E.: 800-EnGenius Moldova, Tajikistan, contact numbers 800-364-364-87 Turkmenistan, Ukraine, General: Uzbekistan (+971) 4357-5599 Turkey Afghanistan Sunday - Thursday Pakistan...
Page 84
PPENDIX ORLD ECHNICAL UPPORT REGION COUNTRY OF PURCHASE SERVICE CENTRE SERVICE INFORMATION Singapore, Cambodia, SINGAPORE web site www.engeniustech.com.sg/e_warranty_form Indonesia, Malaysia, email techsupport@engeniustech.com.sg Thailand, Philippines, Vietnam Toll Free: contact numbers China, Hong Kong, Korea Singapore: 1800-364-3648 India Monday - Friday South Africa hours of operation 9:00 AM - 6:00 PM (GMT+8) Oceania...
Need help?
Do you have a question about the ENS200 and is the answer not in the manual?
Questions and answers