Wireless Access Point Ceiling 300Mbps User’s Manual Cod. KR.KZ Warning The manufacturer is under no circumstances liable for any unauthorised modifications made to the product by the user or any other parties which may compromise its conformity and safety. www.kraun.it...
One Gigabit Auto-negotiation LAN port supported for LAN connection y POE and external power supported y SNMP and Web-based management interface y 64/128-bit WEP encryption y WPA-PSK, WPA2-PSK, WPA&WPA2 encryption methods y Auto MDI/ MDIX y Wireless VLAN divisible for managing clients conveniently y Client’s access limited y Watchdog designed to make device run stably y Supports auto wireless channel selection y Software controls the wireless signal on/ off and remotely controls the wireless coverage area. 1.2 Package Contents Please unpack the package and find the following items: y One KR.KZ Wireless AP y One Power Adapter y Eight Screws y One User Guide y One Network Cable y Four plastic covers If any of listed items are missing or damaged, please contact the Tenda reseller from whom you purchased for replacement immediately. www.kraun.it...
2. Connect one end of the network cable to the LAN port of KR.KZ, and another end to your Ethernet broadband, switch or PC. 3. Connect wireless adapter to KR.KZ. Please refer to the topology below: 2.1 Default Settings The default mode setting of this device is AP (Access Point): Item Default Value Common Default Settings Username admin Password admin IP Address 192.168.0.254 Subnet Mask 255.255.255.0 Wireless KRAUN_the last 6 characters of MAC SSID address (example KRAUN_123456) Wireless Security Enable Security Type WPA-PSK/WPA2-PSK Criptazione (Encryption) TKIP+AES WPA KEY KRAUN_KR.KZ DHCP Server Disable www.kraun.it...
Manual Chapter 3. Configuration Guide 3.1 Web Login Connect to KR.KZ via wired cable and configure 192.168.0.x(x ranges 2-254) as your PC’s IP address, and 255.255.255.0 as subnet mask. (Please refer to the Appendix II for details on TCP/IP setting) Launch Internet Explorer. In the address bar, enter the AP’s default IP address, 192.168.0.254. Press Enter key and the login screen will appear. Enter admin both in the user name and password field. Click OK to enter the welcome page of the device. You can select “Running Status”, ”LAN Settings”, “Wireless Settings”, “SNMP Settings” and “System Tools” on the left menu. Click “Next” to enter the wireless working mode setup page. KR.KZ supports two working modes: wireless AP (AP), Bridge (WDS). Select a working mode to configure the settings. For more details please refer to the following chapters. www.kraun.it...
Manual 3.2 Setup Wizard Click “Next” in the first page and the next page appears. On this page, you can select wireless AP or Bridge to adapt different wireless access environment. Wireless Access Point (AP) Mode Select “Wireless Access Point (AP)” and then click “Next” to enter the basic settings. Picture 4 Fill in the following items according to the reminder information. 1. SSID: Set the SSID name of the device. 2. Channel: Select the wireless communication channel. The default is channel 6. www.kraun.it...
Page 8
Manual After you finish the settings, click “Next” to enter the “Security Settings” page as the picture below: “Security Settings” is used to encrypt the settings for AP and authorize the wireless client to access the AP for security in wireless network. Please refer to chapter 4.1.1.2 for detailed security setting specifications. After finishing the settings, click “Next” to finish settings as the picture below. www.kraun.it...
Manual Bridge (WDS) Mode Select “Setup Wizard” on the left menu and the working mode selection interface will appear as the picture below. Select Bridge (WDS) and then click “Next”. You will enter the WDS setup page as the picture below. Bridge (WDS) working mode includes: Point to Point Bridge (WDS P2P), Point to Multipoint Bridge (WDS P2MP), Wireless Repeater (Repeater). Users can select the mode according to need. Please refer to Chapter 4.1.2 for detailed introduction. Click “Enable Scan”. AP will scan the available wireless device nearby automatically and display them under the www.kraun.it...
Page 10
Manual list (see the picture below). Select the AP which you need to bridge and click “Next” to enter the security setup interface. On the other hand, you can input the MAC address of wireless device which you want to bridge manu- ally and select the corresponding channel. After finish the settings, click “Next” to enter the “Security Setting” option as the picture below. “WDS Security Setting” is used to encrypt the AP and authorize the device to establish bridge. Only when the passwords of the devices in bridge are consistent, the communication can get through normally. www.kraun.it...
Manual After finishing the settings, click “Next” and “Save” to finish settings. 3.3 Running Status This page shows the wireless AP’s current status, including wireless status, LAN status and system information. y Wireless Status It shows the current working status, including working mode, wireless network mode, SSID, Channel, Encryp- tion mode, etc. www.kraun.it...
This section mainly deals with LAN’s basic settings. h h StatichIP:hThe default IP address is 192.168.0.254. If necessary, you can configure a new IP address, subnet mask and gateway manually for the device. h h DynamichIP:hAutomatically obtain IP address, subnet mask and gateway from DHCP server. (Unless you have got permission to obtain this information from the uplink connected device, otherwise, it is not recommended to select this way). NOTE: If the LAN IP address is changed, you need use the new IP address to login the wireless AP’s Web interface next time. www.kraun.it...
Manual Chapter 4. Wireless Settings This chapter introduces you wireless settings in two working modes: Access Point (AP) and Bridge (WDS), includ- ing basic settings, security settings, advanced settings, access control, and connection status. 4.1 Basic Settings This period introduces you the basic settings in AP mode and WDS mode. 4.1.1 Access Point (AP) Mode In this mode, the AP will act as a central hub for accesses from wireless to wireless, wireless to wired, wireless to WAN. The most important is to provide a wireless client access such as wireless network adapter access. 4.1.1.1 Application and Topology Plan The AP mode can convert the wired transmission into wireless signals. If you have one wired cable connecting to Internet, and want to access the Internet via wireless signals connecting to your notebook computer, this mode fits perfectly. www.kraun.it...
The basic setup page in Access Point (AP) working mode is as follows: Wireless Signal: Click “ Disable” to shut all the wireless feature of this AP; click “ Enable” to open the wireless feature. Network Mode: Select one mode from the following. The default is 11b/g/n mode. 11b mode: Allow the wireless client to connect with the device in 11b mode at the maximum speed of 11Mbps. 11g mode: Allow the 11g/11n-compliant client device to connect with the AP at the maximum speed of 54Mbps. 11b/g mode: Allow the 11b/g-compliant client device to connect with the AP with auto-negotiation speed, and 11n wireless client to connect the device with 11g speed. 11b/g/n mode: Allow 11b/g/n-compliant client device to connect with the AP with auto- negotiation speed. The maximum speed is 300Mbps. Main SSID: SSID (Service Set Identifier) is the unique name of the wireless network. It is recommended to modify this name for wireless client to recognize wireless signals. Broadcast SSID: When you select “Disable SSID broadcast”, AP will not broadcast its own SSID number. If there is a wireless connection request, you need to input SSID number manually. BSSID: Basic Service Set Identifier of wireless network. In IEEE802.11, BSSID is the MAC address of wireless access point. WLAN Isolation: The access control feature based on wireless MAC address. When this feature is enabled, each of your wireless clients will be in its own virtual network and will not be able to communicate with each other. This feature is to isolate the communication of wireless clients connected with different AP. Channel: Specify the effective channel (from 1 to 13\Auto) of the wireless network. Extension channel: To increase data throughput of wireless network, the extension channel range is used in 11n mode. Channel Bandwidth: Select the proper channel bandwidth to improve the wireless performance. 20M bandwidth can improve the anti-jamming ability of the wireless device. 40M bandwidth can improve the flux of 11N client. www.kraun.it...
4.1.2.1 4.1.2.1 Point to Point Bridge P2P bridge mode can connect with two wired network via wireless access points, which communicate by wire- less signals and not by cables. This mode can be free from the cable trouble. The P2P topology shows below Modem Ethernet Switch Switch Select P2P Bridge in drop-down list of WDS mode as the picture below: This page includes the AP and WDS parameter setting. AP parameter setting can change SSID and enable/ disable wireless feature. h h APhMAC: Enter the interconnection equipment’s MAC address. h h Channel: Select the channel according to interconnection equipment’s; the devices on the two ends must be at the same channel. h h OpenhScan: Click this button, the AP will scan the nearby wireless devices automatically and display the information in the table. Select the device which need to bridge, the AP will add the device’s MAC address automatically and select the corresponding channel. www.kraun.it...
Manual 4.1.2.2 P2MP Bridge Mode The P2MP Bridge Mode which connects scattered wired network together is more complicated than P2P Bridge mode. P2MP usually transmit wireless signals from one access point, and other access points are in charge of receiving signals so as to share network resource. Support up to 4 remote access point connection. In this mode, wireless clients are not allowed to connect. P2MP Bridge mode can connect multiple wireless access point together without cabling. If “Root AP” is config- ured as P2MP bridge mode, other (less than 4) remote access points should select P2P bridge modes. The topol- ogy shows below: Modem Ethernet Switch Select WDS P2MP mode in the drop-down box of WDS mode as the picture below. h h APhMAChAddress: Input the remote AP’s MAC address. (No more than 4) h h Channel: Select the channel which bridge needs to use. (All APs in the bridge must be at the same channel.) h h EnablehScan: Click this button, the AP will scan the nearby wireless devices automatically and display the information in the table. Select the device which need to bridge, the AP will add the device’s MAC address automatically and select the corresponding channel. When multiple devices are added, AP will select the channel of the last added device as the bridge used channel (You can also change the channel according to your need. All the devices must at the same channel, thus the bridge can be established.) www.kraun.it...
Manual 4.1.2.3 Wireless Repeater Mode Repeater Mode can repeat and amplify wireless signals to extend wireless network coverage. In this mode, wire- less clients are allowed to connect. When two LAN’s transmission distance is over the wireless device’s maximum transmission value, or there is much block among devices, you can use the Repeater mode to deal with these problems by adding MAC ad- dresses. The topology shows below: Modem Ethernet Switch Select wireless repeater on the drop-down box of WDS mode and the page will show as below. When the users select “permit wireless client to access”, AP can also be used as “Wireless Access Point” to allow the access of wireless client when it is used as a wireless bridge. The basic settings of wireless repeater are di- vided into two parts: one part is the basic setting in AP mode (See 4.1.1.2); another part is the basic setting in WDS mode (See 4.1.2.2). www.kraun.it...
4.2.1 AP Security Setting We introduce six common encryption modes to you (support ten encryption modes), including Mixed WEP en- cryption, WPA-PSK, WPA-Enterprise, WPA2-PSK, WPA2-Enterprise, etc. Mixed WEP WEP (Wired Equivalent Privacy), a basic encryption method, usually encrypts wireless data using a series of digital keys (64 bits or 128 bits in length). By using the same keys on each of your wireless network devices, you can prevent unauthorized wireless devices from monitoring your transmissions or using your wireless resources. WEP is based on RSA algorithm from RC4. It is the original and weak encryption method, so it is recommended not to use this method. Select Mixed WEP to enter the following window: Setting Explanation h h SecurityhMode:hFrom the drop-down menu select the corresponding security encryption modes. h h WEPhKey1~4:hSet the WEP key with the format of ASCII and Hex. You can enter ASCII code (5 or 13 ASCII characters. Illegal character as “/” is not allowed.) Or 10/26 hex characters. h h DefaulthKey:hSelect one key from the four configured keys as the current available one. www.kraun.it...
Manual WPA- PSK WPA (Wi-Fi Protected Access), a Wi-Fi standard, is a more recent wireless encryption scheme, designed to im- prove the security features of WEP. Select “WPA-PSK” from the drop-down menu to enter the following window: Setting Explanation h h WPAhAlgorithms:hProvides TKIP [Temporal Key Integrity Protocol] or AES [Advanced Encryption Standard]. The default is TKIP mode. h h PasshPhrase:hEnter the encrypted characters with 8-63 ASCII characters. h h KeyhRenewalhInterval:hSet the key’s renewal period. www.kraun.it...
Manual WPA2-PSK WPA2 provides more secure features than WEP and WPA. Select “WPA2-PSK” from the drop-down menu to enter the following window: Setting Explanation h h WPAhAlgorithms:hProvides TKIP [Temporal Key Integrity Protocol] or AES [Advanced Encryption Standard]. The default is TKIP mode. h h PasshPhrase:hEnter the encrypted characters with 8-63 ASCII characters. h h KeyhrenewalhInterval:hSet the key’s renewal period. www.kraun.it...
Manual This security mode is used when a RADIUS server is connected to the device. Select “WPA” from the drop-down menu to enter the following window: Setting Explanation h h WPAhAlgorithms:hProvides TKIP [Temporal Key Integrity Protocol] or AES [Advanced Encryption Standard]. The default is TKIP mode. h h PasshPhrase:hEnter the encrypted characters with 8-63 ASCII characters. h h KeyhRenewalhInterval:hSet the key’s renewal period. h h RadiushServer:hEnter the IP address of the Radius server. h h RadiushServerhport:hEnter the authentication port of the Radius server. The default is 1812. h h SharedhSecret:hEnter the shared key for authentication server with 8~63 ASCII characters. h h SessionhTimeout:hThe authentication interval period between AP and authentication server. The default is 3600s. www.kraun.it...
Manual WPA2 This security mode is based on Radius authentication server and WPA2 encryption method. WPA2 is used when a RADIUS server is connected to the device. Select “WPA2” from the drop-down menu to enter the following window: Setting Explanation h h WPAhAlgorithms:hProvides TKIP [Temporal Key Integrity Protocol] or AES [Advanced Encryption Standard]. The default is TKIP mode. h h PasshPhrase:hEnter the encrypted characters with 8-63 ASCII characters. h h KeyhRenewalhInterval:hSet the key’s renewal period. h h RadiushServer:hEnter the IP address of the Radius server. h h RadiushServerhPort:hEnter the authentication port of the Radius server. The default is 1812. h h SharedhKey:hEnter the shared key for authentication server with 8~63 ASCII characters. h h SessionhTimeout:hThe authentication interval period between AP and authentication server. The default is 3600s. www.kraun.it...
802.1x Authentication This security mode is used when a RADIUS server is connected to the device. 802.1x, a kind of Port-based au- thentication protocol, is an authentication type and strategy for users. The port can be either a physic port or logic port (such as VLAN). For wireless LAN users, a port is just a channel. The final purpose of 802.11x authenti- cation is to check if the port can be used. If the port is authenticated successfully, you can open this port which allows all the messages to pass. If the port isn’t authenticated successfully, you can keep this port “ disable” which just allows 802.1x authentication protocol message to pass. Select “802.1x” from the drop-down menu to enter the following window: Setting Explanation h h 802.1xhWEP:hhClick “Enable/Disable” to enable or disable the WEP algorithm. h h RadiushServer:hhEnter the IP address of the Radius server. h h RadiushServerhPort:hhEnter the authentication port of the Radius server. The default is 1812. h h SharedhSecret:hhEnter the shared key for authentication server with 8~63 ASCII characters. h h SessionhTimeout:hh The authentication interval period between AP and authentication server. The default is 3600s. Note: To improve security level, do not use too easy characters. www.kraun.it...
Manual 4.2.2 WDS Security Setting WDS Security Setting is to protect the data safety of wireless bridge. The security setup page of Point to Point Bridge and Point to Multipoint Bridge is as the picture below. WDS security setting provides three encryption modes: WEP encryption, TKIP encryption and AES encryption. h h WEPhKey: You can set the WEP key in ASCII code or Hexadecimal code. h h Key: You can choose ASCII code (5 or 13 ASCII codes, illegal characters like “/” are forbidden) or Hexadecimal characters (10 or 26 Hexadecimal characters). h h TKIP/hAEShKey: TKIP/AES is an encryption mode based on WPA and WPA2. h h Key: Key characters are ASCII codes from 8 to 63. Note: The encryption mode and password of each device in the bridge must be consistent, thus the connection can be established. You are recommended to encrypt the bridge to protect the wireless bridge. The security setup page of wireless repeater is as follows: Security setting of wireless repeater can be divided into AP security setting and WDS security setting. AP security setting focuses on wireless client access, while WDS security setting focuses on wireless bridge connection. AP security setting appears only when wireless client accesses are permitted in wireless repeater mode. Please refer to Chapter 4.2.1 for AP security setup. www.kraun.it...
Fragmenth Threshold:h h The fragmentation threshold defines the maximum transmission packet size in bytes. The packet will be fragmented if the arrival is bigger than the threshold setting. The default size is 2346 bytes. h h RTSh Threshold:h h RTS stands for “Request to send”. This parameter controls what size data packet the frequency protocol issues to RTS packet. If the device works in SOHO, do not modify the default value. h h TXhPower:hhSet the wireless output power level. The default value is 100. h h WMMhCapable:hhTo enhance wireless multimedia transfer performance (0n-line video and voice). If you are not clear about this, enable it. h h APSDhCapable:hhIt is used for auto power-saved service. The default is disabled. www.kraun.it...
MAChAddresshManagement:hInput the MAC address to implement the filter policy. Click “Add” to finish the MAC add operation. h h MAChlist:h Show the added MAC address. You can add or delete them. Note: This AP can support no more than 32 MAC addresses. 4.5 Connection Status This page shows wireless client’s connection status, including MAC address, Channel bandwidth, etc. Select “Wireless Setting->connection status” to enter the following screen: Setting Explanation: MAChAddress:hShows current connecting host’s MAC address. Bandwidth:hShows current connecting host’s (wireless client) bandwidth (20MHz or 40MHz). www.kraun.it...
NewhPassword: Enter a new password. h h Re-enterhtohConfirm: Re-enter to confirm the new password. NOTE:hIt is highly recommended to change the password to secure your network and the device. 5.2 Restore to Factory This button is to reset all configurations to the default values. It means the device will lose all the settings you have set. Restore: Click this button to restore to default settings. FactoryhDefaulthSettings: User Name: admin Password: admin IP Address: 192.168.0.254 Subnet Mask: 255.255.255.0 www.kraun.it...
Manual 5.3 Backup/Restore The device provides backup/restore settings, so you need set a directory to keep these settings. Backup: Click this button to back up the device’s configurations. Browse: Click this button to browse the directory where you backup or save the device’s settings. Restore:hClick this button to restore the device’s configurations. 5.4 Time Settings This section is to select the time zone for your location. You can select your own time or obtain the standard GMT time from Internet. Setting Explanation: h h TimehZone:hSelect your time zone from the drop-down menu. h h Customizedhtime:hEnter the time you customize. www.kraun.it...
Manual 5.5 Reboot System This page is used to reboot wireless access point. Rebooting the device makes the settings configured go into effect. Reboot: Click this button to reboot the device. 5.6 Syslog The section is to view the system log. Click the “Refresh” to update the log. Click “Clear” to clear all shown information. If the log is over 150 records, it will clear them automatically. Refresh: Click this button to update the log. Clear: Click this button to clear the current log. www.kraun.it...
Page 30
Manual Appendix I: TCP/IP Address Setting (Take WinXP for example) Click the “Start—>Settings—>Control Panel” (Fig- 1): Click “Network and Internet Connections”, the windows as below will appear (Fig- 2): Click the “Network Connections”, as Fig-3: Choose “ Local Area Connection”, right-click on the icon, choose the “ Properties”, then the “ Local Area Connection Properties”windows appear, choose the “Internet Protocol (TCP/IP)” in the “This connection uses the following items”, click the “Properties”. www.kraun.it...
Page 31
Manual Choose the “Use the following IP address”, enter the IP address as: 192.168.0.xxx. (xxx ranges 1~253), Subnet mask is: 255.255.255.0(As Showed in Fig- 5) Click “OK” to apply and return to the “Local Area Connection Properties” windows. Continue click “OK” to exit the setting windows. www.kraun.it...
Manual Chapter 6. Appendix II: WDS Application Instances The configurations of P2P, P2MP and Wireless Repeater in WDS mode are almost the same. The number of devices which need to be configured is different according to different mode. The following steps take P2P for example. If you want to establish P2P transmission between AP1 and AP2, you need to set the parameters as follows. Select “WDS” mode in Setup Guide for AP1 and set the SSID as “AP1” and channel as “13”. The BSSID is 00:b0:c6:05:4e:d0. Click “Next” to enter the WDS Security Setting. Select the encryption mode you need to use. (For example: set the encryption mode as TKIP and enter the en- cryption key as 12345678.) www.kraun.it...
Page 33
Manual Click “Next” and save the settings. Then enter the AP2 settings. Select “WDS” mode for AP2 and set SSID as “AP2”. Select the channel “13” which is the same as AP1. Enter the BSSID: 00:b0:c6:05:4e:d0 of AP1 into the AP MAC blank and record the BSSID 00:b0:c6:05:4e:dd of AP2. (You can also use “Enable scan to add”.) Click “Next” to enter the WDS security setting and select AP1 corresponding encryption mode. Then enter the encryption key. (We select TKIP and encryption key 12345678.) www.kraun.it...
Page 34
Manual Click “Next” and save the settings. After you finished AP2 settings, return to AP1 setting. Select “Wireless Settings Basic Setting” in AP. SSID, channel and extension channel can’t be changed. You only need to enter BSSID: 00:b0:c6:05:4e:dd of AP2 in AP MAC address blank an then save it (You can also use “Enable Scan to add”). Now all the settings of WDS have been finished. www.kraun.it...
Need help?
Do you have a question about the Wireless Access Point Ceiling 300Mbps and is the answer not in the manual?
Questions and answers