4ipnet EAP200 V1.10 Manual

EAP110 V1.10

Enterprise Access Point

User’s Manual

EAP110 Enterprise Access Point ENGLISH

Copyright & Disclaimer

Copyright

The contents of this publication may not be reproduced in any part or as a whole, stored, transcribed in an information retrieval system, translated into any language, or transmitted in any form or by any means, mechanical, magnetic, electronic, optical, photocopying, manual, or otherwise, without the prior written permission of 4IPNET, INC.

Disclaimer

4IPNET, INC. does not assume any liability arising out the application or use of any products, or software described herein. Neither does it convey any license under its parent rights not the parent rights of others. 4IPNET further reserves the right to make changes in any products described herein without notice. The publication is subject to change without notice.

Trademarks

4IPNET (4ipnet) is a registered trademark of 4IPNET, INC. Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.

1

Copyright © 4IPNET, INC.

 

 

User’s Manual

 

 

EAP110 Enterprise Access Point ENGLISH

 

Table of Contents

1.

Before You Start..................................................................................................................................

4

 

1.1 Preface.................................................................................................................................................

4

 

1.2 Document Conventions....................................................................................................................

4

 

1.3 Package Content................................................................................................................................

5

2.

System Overview and Getting Started .............................................................................................

6

 

2.1 Introduction of 4ipnet EAP110 .......................................................................................................

6

 

2.2 Deployment Topology......................................................................................................................

7

 

2.3 Hardware Description......................................................................................................................

8

 

2.4 Hardware Installation....................................................................................................................

10

 

2.5 Access Web Management Interface.............................................................................................

11

3.

Connect your AP to your Network..................................................................................................

15

4.

Adding Virtual Access Points ..........................................................................................................

21

5.

Secure Your AP..................................................................................................................................

22

6.

Create a WDS Bridge between two APs.........................................................................................

30

7.

Web Management Interface Configuration...................................................................................

32

 

7.1 System...............................................................................................................................................

34

 

7.1.1 System Information .................................................................................................................

34

 

7.1.2 Network Interface....................................................................................................................

36

 

7.1.3 Management.............................................................................................................................

37

 

7.1.4 GRE Tunnel ..............................................................................................................................

39

 

7.1.5 CAPWAP....................................................................................................................................

40

 

7.1.6 QoS Classification....................................................................................................................

42

 

7.2 Wireless............................................................................................................................................

43

 

7.2.1 VAP Overview...........................................................................................................................

43

 

7.2.2 General......................................................................................................................................

46

 

7.2.3 VAP Configuration ..................................................................................................................

48

 

7.2.4 Security.....................................................................................................................................

49

 

7.2.5 Repeater....................................................................................................................................

53

 

7.2.6 Advanced ..................................................................................................................................

54

 

7.2.7 Access Control..........................................................................................................................

55

 

7.3 Firewall.............................................................................................................................................

58

 

7.3.1 Firewall List..............................................................................................................................

58

 

7.3.2 Service.......................................................................................................................................

63

 

7.3.3 Advanced ..................................................................................................................................

64

 

7.4 Utilities.............................................................................................................................................

65

 

7.4.1 Change Password.....................................................................................................................

65

 

 

2

 

 

Copyright © 4IPNET, INC.

 

User’s Manual

 

EAP110 Enterprise Access Point ENGLISH

7.4.2 Network Utilities .....................................................................................................................

66

7.4.3 Save & Restore.........................................................................................................................

67

7.4.4 System Upgrade.......................................................................................................................

68

7.4.5 Reboot.......................................................................................................................................

69

7.4.6 Upload Certificate....................................................................................................................

70

7.5 Status................................................................................................................................................

71

7.5.1 Overview....................................................................................................................................

71

7.5.2 Clients........................................................................................................................................

73

7.5.3 Repeater....................................................................................................................................

74

7.5.4 Event Log..................................................................................................................................

75

7.6 Online Help......................................................................................................................................

76

3

Copyright © 4IPNET, INC.

User’s Manual

EAP110 Enterprise Access Point ENGLISH

1.Before You Start

1.1 Preface

This manual is intended for system integrators, field engineers, and network administrators to set up 4ipnet’s EAP110 802.11n/b/g 2.4GHz MIMO Access Point in their network environments. It contains step- by-step procedures and visual examples to guide MIS staff or individuals with basic network system knowledge to complete the installation.

1.2 Document Conventions

Represents essential steps, actions, or messages that should not be ignored.

Note: Contains related information that corresponds to a topic.

Indicates that clicking this button will save the changes you made, but you must reboot the system upon the completion of all configuration settings for the changes to take effect.

Indicates that clicking this button will clear what you have set before the settings are applied.

4

Copyright © 4IPNET, INC.

User’s Manual

EAP110 Enterprise Access Point ENGLISH

1.3 Package Content

The standard package of EAP110 includes:

4ipnet EAP110

x1

Quick Installation Guide (QIG)

x1

CD-ROM (with User’s Manual and QIG)

x1

Power Adapter (DC 5V)

x1

Antenna

x2

It is recommended to keep the original packing materials for possible future shipment when repair or maintenance is required. Any returned product should be packed in its original packaging to prevent damage during delivery.

5

Copyright © 4IPNET, INC.

User’s Manual

EAP110 Enterprise Access Point ENGLISH

2. System Overview and Getting Started

2.1 Introduction of 4ipnet EAP110

The 4ipnet EAP110 Enterprise Access Point embedded with 802.11 n/b/g 2.4GHz MIMO radio in dustproof metal housing is designed for wireless connectivity in enterprise or industrial environments of all dimensions. EAP110 makes the wireless communication fast, secure and easy. It supports business grade security such as 802.1X, and Wi-Fi Protected Access (WPA and WPA2).

EAP110 also features multiple ESSIDs with VLAN tags and multiple Virtual APs, great for enterprise applications, such as separating the traffics of different departments using different ESSIDs. The PoE LAN port can receive power from Power over Ethernet (PoE) sourcing device. Its metal case is IP50 antidust compliant, which means that EAP110 is well suited to WLAN deployment in industrial environments.

6

Copyright © 4IPNET, INC.

User’s Manual

EAP110 Enterprise Access Point ENGLISH

2.2 Deployment Topology

Network Layout with EAP110s

This above deployment scenario illustrates a deployment example using these access points.

Three EAP110 systems construct a network comprising of wireless segments.

AP plays the role of a wireless bridge.

All devices share the same DHCP server 192.168.1.1.

7

Copyright © 4IPNET, INC.

User’s Manual

EAP110 Enterprise Access Point ENGLISH

2.3 Hardware Description

This section depicts the hardware information including all panel description.

Connector Panel

 

 

 

 

 

EAP110 Connector Panel

 

 

 

 

 

 

 

 

 

1

5V 1A

 

Attach the power adapter here.

 

 

 

 

 

 

 

 

 

2

LAN(PoE)

 

Attach the Ethernet cable here for connecting to wired local network. This port supports

 

PoE as well which can be connected to a PSE (power sourcing equipment) as an

 

 

 

alternative power sourcing.

 

 

 

 

 

 

 

 

 

 

 

Press to start running WES process.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Master (Press for more than 3

Slave (Press once until the WLAN

 

 

 

 

WES

 

seconds until the WLAN LED

LED starts blinking and then

 

 

 

 

 

 

blinks twice and then release)

release right away)

 

3

WES

 

 

 

 

 

 

WES Start

 

WLAN LED BLINKING SLOWLY

WLAN LED BLINKING QUICKLY

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

WES Success

 

WLAN LED ON constantly for 5 seconds

 

 

 

 

 

 

 

 

 

 

 

WES Fail

 

WLAN LED OFF for 5 seconds

 

 

 

 

 

 

 

3

Reset

 

Press and hold the button for more than 10 seconds until WLAN LED OFF. WLAN ON while

 

reset is successful.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

4

Antenna

 

Attach the antennas here. The system supports one RF interface with two SMA connectors.

Connector

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

8

Copyright © 4IPNET, INC.

User’s Manual

EAP110 Enterprise Access Point ENGLISH

LED Panel

EAP110 LED Panel

1

LAN LED

 

LED ON indicates LAN cable is connected; OFF indicates no connection; BLINKING

 

 

 

indicates transmitting data.

 

 

 

 

 

 

 

 

 

2

WLAN LED

 

LED ON indicates wireless is ready.

 

 

 

 

 

 

 

 

2

WES LED

 

To indicate WES status.

 

 

 

 

 

 

 

 

 

 

 

 

 

Master (Press for more than 3

Slave (Press once until the WLAN

 

 

 

 

WES

seconds until the WLAN LED

LED starts blinking and then

 

 

 

 

 

blinks twice and then release)

release right away)

 

 

 

 

 

 

 

 

 

 

 

WES Start

WLAN LED BLINKING SLOWLY

WLAN LED BLINKING QUICKLY

 

 

 

 

 

 

 

 

 

 

 

WES Success

WLAN LED ON constantly for 5 seconds

 

 

 

 

 

 

 

 

 

 

WES Fail

WLAN LED OFF for 5 seconds

 

 

 

 

 

 

 

 

3

Power LED

 

LED ON indicates power on; OFF indicates power off.

 

 

 

 

 

 

 

 

 

9

Copyright © 4IPNET, INC.

User’s Manual

EAP110 Enterprise Access Point ENGLISH

2.4 Hardware Installation

Please follow the steps mentioned below to install the hardware of EAP110:

1.Place the EAP110 at the best location.

The best location for EAP110 is usually at the center of your intended wireless network.

2.Connect the EAP110 to your network device.

Connect one end of the Ethernet cable to LAN port of EAP110 and the other end of the cable to a switch, a router, or a hub. EAP110 is then connected to your existing wired LAN network.

3.There are two ways to supply power over to EAP110.

a)Connect the DC power adapter to the EAP110 power socket.

b)EAP110 LAN port is capable of transmitting DC currents. Connect an IEEE 802.3af-compliant PSE device (e.g. a PoE-switch) to the LAN port of EAP110 with the Ethernet cable.

Now, the Hardware Installation is complete.

Please only use the power adapter supplied with the EAP110 package. Using a different power adapter may damage this system.

To double verify the wired connection between EAP110 and you switch / router / hub, please also check the LED status indicator of the respective network devices.

10

Copyright © 4IPNET, INC.

User’s Manual

EAP110 Enterprise Access Point ENGLISH

2.5 Access Web Management Interface

4ipnet EAP110 supports web-based configuration. Upon the completion of hardware installation, EAP110 can be configured through a PC by using its web browser such as Mozilla Firefox 2.0 (and higher) or Internet Explorer version 6.0 (and higher).

The default values of the EAP110’s LAN IP Address and Subnet Mask are:

IP Address: 192.168.1.1

Subnet Mask: 255.255.255.0

Example of entering EAP110's default IP Address into a web browser

To access the web management interface (WMI), connect the administrator PC to the LAN port of EAP110 via an Ethernet cable. Then, set a static IP Address on the same subnet mask as the EAP110 in TCP/IP settings of your PC, such as the following example:

IP Address: 192.168.1.100

Subnet Mask: 255.255.255.0

Please note that the IP Address used should not overlap with the IP Addresses of

Note:

any other device within the same network.

Launch the web browser on your PC and enter the IP Address of the EAP110 (192.168.1.1) at the address field, and then press Enter. The following Administrator Login Page will then appear. Enter “admin” for both the Username and Password fields, and then click Login.

Administrator Login Page

11

Copyright © 4IPNET, INC.

User’s Manual

EAP110 Enterprise Access Point ENGLISH

After a successful login into EAP110, a System Overview page of the Web Management Interface (WMI) will appear.

The Web Management Interface - System Overview Page

12

Copyright © 4IPNET, INC.

User’s Manual

EAP110 Enterprise Access Point ENGLISH

To logout, simply click on the Logout button at the upper right hand corner of the interface to return to the Administrator Login Page. Click OK to logout.

Logout

Logout Prompt

For security reasons, it is strongly recommended to change the administrator’s password upon the

completion of all configuration settings

13

Copyright © 4IPNET, INC.

User’s Manual

EAP110 Enterprise Access Point ENGLISH

Please follow the following steps to change the administrator’s password:

Change Password Page

Click on the Utilities main menu button, and then select the Change Password tab.

Enter the old password and then a new password with a length of up to 32 characters, and retype it in the Re-enter New Password field.

Congratulations!

Now, 4ipnet’s EAP110 is installed and configured successfully.

It is strongly recommended to make a backup copy of configuration settings.

After the EAP110’s network configuration is completed, please remember to change the IP Address of your PC Connection Properties back to its original settings in order to ensure that your PC functions properly in its real network environments.

14

Copyright © 4IPNET, INC.

User’s Manual

EAP110 Enterprise Access Point ENGLISH

3. Connect your AP to your Network

The following instructions depict how to establish the wireless coverage of your network. The AP will connect to the network through its LAN port and provide wireless access to your network.

After having prepared the EAP110’s hardware for configuration, set the TCP/IP settings of administrator’s computer to have a static IP Address of 192.168.1.10 and Subnet Mask of 255.255.255.0.

Step 1: Configuring the AP’s System Information

Enter the AP’s default IP Address (192.168.1.1) into the URL of a web browser.

Login via using Username: admin and Password: admin. The WMI appears as shown below.

Web Management Interface Main Page (System Overview)

From here, click on the System icon to arrive at the following page. On this Page you can make

entries to the Name, Description, and Location fields as well as set the device’s time.

15

Copyright © 4IPNET, INC.

4ipnet EAP200 V1.10 Manual

User’s Manual

EAP110 Enterprise Access Point ENGLISH

System Information Page

There are two methods of setting up the time: Manual (indicated by the option Set Date & Time) and NTP.

The default is Manual and requires individual setup every time the system starts up. Simply choose a time zone and set the time accordingly. When finished, click SAVE.

Manually Time Setup

The alternative is NTP. Upon selecting NTP under the Time field, the configuration changes to allow up to two NTP servers. Simply enter a local NTP server’s IP Address (if available) or search online for an NTP server nearest you. Set the time zone and click SAVE.

NTP Setup

16

Copyright © 4IPNET, INC.

User’s Manual

EAP110 Enterprise Access Point ENGLISH

Step 2: Configuring the AP’s Network Settings

While still on this Page, click on the Network Interface tab to begin configuration of the network settings.

Network Settings Page

If the deployment decides the AP will be getting dynamic IP Addresses from the connected network, set Mode to DHCP; otherwise, set Mode to Static and fill in the required fields marked with a red asterisk (IP Address, Netmask, Gateway, and Primary DNS Server) with the appropriate values for the network. Click SAVE when you are finished to save changes that have been made.

17

Copyright © 4IPNET, INC.

User’s Manual

EAP110 Enterprise Access Point ENGLISH

Step 3: Configure the AP’s Wireless General Settings

Click on the Wireless icon followed by the General tab. On this page we only need to choose the

Band and Channel that we wish to use.

Wireless General Settings Page

On this page, select the Band with which the AP is to broadcast its signal. The rest of the fields are optional and can be configured at another time. Click SAVE if any changes have been made.

18

Copyright © 4IPNET, INC.

User’s Manual

EAP110 Enterprise Access Point ENGLISH

Step 4: Configuring Wireless Coverage (VAP-1)

To setup the AP’s wireless access, refer to the following VAP-1 configuration (other VAP configuration can refer to the same setup steps as done for VAP-1). Click on the Overview tab to proceed.

Virtual AP Overview Page

On this page click the hyperlink in the row and column that corresponds with VAP-1’s State. This will bring up the following page.

VAP Configuration Page (VAP-1 shown)

19

Copyright © 4IPNET, INC.

User’s Manual

EAP110 Enterprise Access Point ENGLISH

The desired VAP profile can be selected from the drop-down menu of Profile Name and VAP-1 configuration will serve as an example for all other VAPs. Before proceeding further, please make sure that the VAP field is Enable; afterwards, enter an ESSID to represent the WLAN associated with AP’s VAP-1. It is suggested that Profile Name is used to describe what this particular VAP will be used for; otherwise, leave it as default. VLAN ID can be chosen at another time. Click SAVE to save all changes up to this point and Reboot the system to apply these revised settings.

Congratulations!

After reboot, the AP can start to work with these revised settings.

20

Copyright © 4IPNET, INC.

User’s Manual

EAP110 Enterprise Access Point ENGLISH

4. Adding Virtual Access Points

EAP110 possesses the feature of multi-ESSID; namely, it can behave as multiple virtual access points, providing different levels of services from the same physical AP device.

Please click on the AP icon to review the VAP Overview page.

VAP Overview Page

To proceed with specific VAP configuration, click on the corresponding cell in the State column and the row of the VAP; the particular VAP’s Configuration page will then appear for further configuration.

VAP Configuration Page (VAP-1 shown)

Please select the desired VAP profile from the drop-down menu of Profile Name. Choose Enable for the VAP field. Pick a descriptive Profile Name and an appropriate ESSID for clients to associate to. A

VLAN ID can be provided to indicate the traffics through this particular VAP. It may allow further management/control (e.g. access rights and Internet usage, etc) of each VAP with a management gateway. Click SAVE and then Reboot for the changes to take effect.

21

Copyright © 4IPNET, INC.

User’s Manual

EAP110 Enterprise Access Point ENGLISH

5. Secure Your AP

Different VAP may require different level of security. These instructions will guide the user through setting up different types of security for a particular VAP. Simply repeat the following steps for other VAP with security requirement.

Step 1: Ensure the intended VAP is Enabled

VAP Overview Page

On the VAP Overview page, check the table to confirm the VAP State. If it is Enabled, skip to Step 2. If not, click on to proceed with VAP Configuration for that particular VAP.

VAP Configuration Page (VAP-1 as shown for example)

Select Enable for the VAP field, and click SAVE. Click the Overview tab to return to the previous table to begin the next step.

22

Copyright © 4IPNET, INC.

User’s Manual

EAP110 Enterprise Access Point ENGLISH

Step 2: Configure Security Settings for your VAP

The following instructions will guide the user to set up wireless security with a specific VAP. If only restricted access of certain MAC addresses is desired, skip to the Step3. MAC restriction can be coupled with wireless security to provide extra protection.

First, click on the corresponding cell in the column labeled Security Type. This hyperlink will direct the user to the following Security Settings page.

Security Settings Page (VAP-1 as shown for example)

Select the desired Security Type from the drop-down menu, which includes None, WEP, 802.1X,

WPA-PSK, and WPA-RADIUS.

23

Copyright © 4IPNET, INC.

Loading...
+ 53 hidden pages