D-Link ac1750 User Manual
Document Created by Nick Schuster
D-Link DAP-2695 User Manual
Table of Contents
Product Overview ......................................................................4
Introduction ...................................................................................4
Features ............................................................................................ 5
Package Contents ......................................................................... 6
System Requirements ................................................................. 6
Hardware Overview ..................................................................7
LEDs ................................................................................................... 7
Connections ...................................................................................7
Basic Installation ........................................................................8
Hardware Setup ............................................................................8
Method 1 - PoE with PoE Switch or Router .................. 8
Method 2 - PoE without PoE Switch or Router ................9
Method 3 - No PoE..............................................................10
Web User Interface ................................................................. 11
Wireless ..........................................................................................12
Access Point Mode .............................................................12
WDS with AP Mode ............................................................14
WDS Mode ............................................................................16
Wireless Client Mode .........................................................18
Wireless Security .................................................................19
Wired Equivalent Privacy (WEP) ..............................19
Wi-Fi Protected Access (WPA / WPA2)....................20
LAN ..........................................................................................22
Advanced Settings .....................................................................23
Performance .........................................................................24
Wireless Resource Control .......................................................26
Multi-SSID ..............................................................................28
VLAN ........................................................................................30
VLAN List ..........................................................................30
Port List .............................................................................31
Add/Edit VLAN ...............................................................32
PVID Settings ..................................................................33
Intrusion .................................................................................34
Schedule ................................................................................35
AP Array ..................................................................................36
Wireless Basic Settings ................................................37
Wireless Basic Settings ................................................37
Multiple SSID & VLAN ..................................................38
Wireless Basic Settings ................................................38
Administration Settings .............................................38
Web Redirection ..................................................................39
Internal RADIUS Server .....................................................40
ARP Spoong Prevention ................................................41
Fair Air Time ..........................................................................42
DHCP Server .........................................................................43
Dynamic Pool Settings ................................................43
Static Pool Setting ........................................................44
Current IP Mapping List ..............................................45
Filters .......................................................................................46
Wireless MAC ACL .........................................................46
WLAN Partition ..............................................................47
2
D-Link DAP-2695 User Manual
Trac Control...............................................................................48
Uplink/Downlink Setting .................................................48
QoS...........................................................................................49
Trac Manager ....................................................................50
Status ..............................................................................................51
Device Information ............................................................52
Client Information ..............................................................53
WDS Information Page .....................................................54
Channel Analyze .................................................................55
Stats Page ......................................................................................56
Ethernet Trac Statistics ..................................................56
WLAN Trac Statistics .......................................................57
Log ...................................................................................................58
View Log .................................................................................58
Log Settings ..........................................................................59
Maintenance Section ................................................................60
Administration .............................................................................61
Conguration and System.......................................................67
System Settings ...........................................................................68
Help .................................................................................................69
Knowledge Base ..................................................................... 70
Wireless Basics .............................................................................70
Wireless Installation Considerations ....................................71
Troubleshooting ..................................................................... 72
Why can’t I access the web-based conguration
utility? .....................................................................................72
What can I do if I forgot my password? .......................72
How to check your IP address? ......................................73
How to statically assign an IP address? .......................74
Technical Specications ........................................................ 75
Limit Administrator ............................................................61
System Name Settings ......................................................62
Login Settings ......................................................................62
Console Settings .................................................................62
SNMP Settings .....................................................................63
Firmware and SSL Upload ................................................64
Conguration File Upload ...............................................65
Time and Date Settings ....................................................66
3
D-Link DAP-2695 User Manual
Product Overview
Introduction
D-Link, an industry pioneer in wireless networking, introduces a solution for businesses seeking to deploy next generation draft 802.11ac LANs. D-Link
unveils its new DAP-2695, designed specically for business-class environments such as large or enterprise corporations to provide secure and manageable
dual band wireless LAN options for network administrators.
Versatile Access Point
The DAP-2695 Access Point allows network administrators to deploy a highly manageable and extremely robust dual band wireless network. All six
antennas are detachable and can provide optimal wireless coverage in either 2.4GHz (802.11g and 802.11n) or 5GHz (802.11ac, 802.11a, and 802.11n)
bands. Enclosed in a plenum-rated metal chassis, the DAP-2695 Access Point adheres to strict re codes for placement in air passageways. For advanced
installations, this new high-speed Access Point has integrated 802.3af Power over Ethernet (PoE) support, allowing installation of this device in areas where
power outlets are not readily available.
Enhanced Performance
The DAP-2695 delivers reliable wireless performance with maximum wireless signal rates of up to 1750Mbps. This, coupled with support for Wi-Fi Multimedia™
(WMM) Quality of Service features, makes it an ideal access point for audio, video, and voice applications. Additionally, the DAP-2695 supports load balance
features to ensure maximum performance.
Security
To help maintain a secure wireless network, the DAP-2695 provides the latest in wireless security technologies by supporting both Personal and Enterprise
versions of WPA and WPA2 (802.11i) with support for RADIUS server back end. To further protect your wireless network, MAC Address Filtering, Wireless
LAN segmentation, Disable SSID Broadcast, Rogue AP Detection, and Wireless Broadcast Scheduling are also included.
The DAP-2695 includes support for up to 16 VLANs for implementing multiple SSIDs to further help segment users on the network. The DAP-2695 also
includes a wireless client isolation mechanism, which limits direct client-to-client communication.
* Maximum wireless signal rate derived from IEEE Standard 802.11ac (draft), 802.11g, 802.11a, and 802.11n specications. Actual data throughput will vary. Network conditions and environmental factors, including
volume of network trac, building materials and construction, and network overhead, lower actual data throughput rate. Environmental conditions will adversely aect wireless signal range.
4
D-Link DAP-2695 User Manual
Features
y Provide Ethernet to Wireless LAN bridge fully IEEE 802.3/u/ab compatible on the Ethernet side and fully interoperable with IEEE 802.11ac and b/g/n/a
compliant equipment
y Compatible with IEEE 802.11b high rate standard to provide wireless 11Mbps data rate
y Compatible with IEEE 802.11g higher speed standard to provide wireless 54Mbps data rate
y Compatible with IEEE 802.11a higher speed standard to provide wireless 54Mbps data rate
y Compatible with IEEE 802.11n higher speed standard to provide wireless 450Mbps data rate
y Compatible with draft 802.11ac higher speed standard to provide wireless 1300Mbps data rate
y Operation at 2.4~2.5GHz and 5.15~5.85GHz frequency band to meet worldwide regulations
y Supports IEEE 802.11ac and b/g/n/a wireless data encryption with 64/128-bit WEP for security
y Allows auto fallback data rate for reliability, optimized throughput and transmission range
y Web-based conguration and management
y Supports enhanced security – WPA-PSK and WPA2-PSK, RADIUS client, and Cipher negotiation
y Supports one 802.3af PoE port
y Supports two 10/100/1000M Ethernet ports
y AP Mode, WDS Mode, WDS with AP, and Wireless Client Mode
y Supports SNMP v1,v2,v3
y Support Trap server (SNMP v1, v2c)
y Support AP Manager II and D-View 6.0
y Support AP Array and AP Array Setup Tool
y Support Port Redundancy
y Support one RJ-45 console port for debug
* Maximum wireless signal rate derived from IEEE Standard 802.11ac (draft), 802.11g, 802.11a, and 802.11n specications. Actual data throughput will vary. Network conditions and environmental factors, including
volume of network trac, building materials and construction, and network overhead, lower actual data throughput rate. Environmental conditions will adversely aect wireless signal range.
**Please note that operating frequency ranges vary depending on the regulations of individual countries and jurisdictions. The DAP-2695 isn’t supported in the 5.25~5.35GHz and 5.47 ~ 5.725GHz frequency ranges in
some regions.
5
D-Link DAP-2695 User Manual
Package Contents
• DAP-2695 Access Point
• Six Detachable Antennas
• Power Adapter
• PoE Base Unit
• Mounting Plate and Hardware
• Ethernet Cable
• Console Cable
• CD (with software and user manual)
Note: Using a power supply with a dierent voltage rating than the one included with the DAP-2695 will cause damage and void the warranty for this product.
System Requirements
y Computers with Windows®, Macintosh®, or Linux-based operating systems with an installed Ethernet Adapter
y Internet Explorer Version 7.0 or Firefox 3.0 and Above (for conguration)
6
D-Link DAP-2695 User Manual
1 2 3 4 5
Hardware Overview
LEDs Connections
1 5GHz
2 2.4GHz
3 LAN1 (PoE)
4 LAN2
5 Power
When lit, the access point is operating at 5GHz. This light
will blink when there is wireless trac.
When lit, the access point is operating at 2.4GHz. This
light will blink when there is wireless trac.
Solid light when the Ethernet port is connected to a
power over Ethernet (PoE) port, such as a router or
switch. The light will blink when there is trac through
LAN port.
Solid light when the Ethernet port is connected to a
working port, such as a router or switch. The light will
blink when there is trac through LAN port.
The light will blink during boot up. Once solid, the access
point is ready.
1 2 3 4 5
1 Reset Button
2 Console Port
3 LAN2 Port Connect to your network with an Ethernet cable.
4 LAN1 (PoE) Port
5 Power Receptor Connect the supplied power adapter.
Press and hold for six seconds to reset the access point
to the factory default settings.
Connect the supplied console cable to congure
using a command line interface.
Connect to a Power over Ethernet (PoE) switch or
router.
7
D-Link DAP-2695 User Manual
Basic Installation
Hardware Setup
To power the access point, you can use one of the following 3 methods:
Method 1 - Use if you have a PoE switch or router.
Method 2 - Use if you do not have a PoE switch or router and do not have a power outlet near the location of the access point.
Method 3 - Use if you do not have a PoE switch or router and have a power outlet near the location of the access point.
Method 1 - PoE with PoE Switch or Router
1. Connect one end of your Ethernet cable to the LAN1 (PoE) port on the access point.
2. Connect the other end into one port on a PoE switch or router.
DAP-2695
PoE Switch or Router
8
D-Link DAP-2695 User Manual
Method 2 - PoE without PoE Switch or Router
1. Connect one end of an Ethernet cable into the Data In port on the PoE base unit and the other end into one port on your switch, router, or computer.
2. Connect one end of an Ethernet cable into the P+Data Out port on the PoE base unit and the other end into the LAN1 (PoE) port on the Access Point.
3. Use the supplied power adapter. Connect the power adapter to the Power In receptor on the PoE adapter.
4. Connect the power cable to the power adapter and then connect the other end into a power outlet.
9
D-Link DAP-2695 User Manual
Method 3 - No PoE
1. Connect one end of your Ethernet cable into the LAN1 (PoE) or LAN2 port and then connect the other end to a switch, router, or computer.
2. Use the supplied power adapter. Connect the power adapter to the Power receptor on the Access Point.
3. Connect the power cable to the power adapter and then connect the other end into a power outlet.
DAP-2695
PC
Power Adapter
Switch or Router
10
D-Link DAP-2695 User Manual
Web User Interface
The DAP-2695 supports an elaborate web user interface where the user can congure and monitor the device. Most of the congurable settings
are located in the left menu of the web GUI which contains section called Basic Settings, Advanced Settings and Status.
11
D-Link DAP-2695 User Manual
Wireless
On the wireless settings page, you can setup the basic wireless conguration for the access point. The user can choose from 4 dierent wireless
modes:
Access Point - Used to create a wireless LAN
WDS with AP - Used to connect multiple wireless networks while still functioning as a wireless access point
WDS - Used to connect multiple wireless networks
Wireless Client - Used when the access point needs to act as a wireless network adapter for an Ethernet enabled device
Access Point Mode
Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Auto Channel Selection:
Select either 2.4 GHz or 5 GHz from the drop-down
menu.
Select Access Point from the drop-down menu.
Service Set Identier (SSID) is the name designated
for a specic wireless local area network (WLAN).
The SSID’s factory default setting is dlink. The SSID
can be easily changed to connect to an existing
wireless network or to establish a new wireless
network. The SSID can be up to 32 characters and
is case-sensitive.
Select Enable to broadcast the SSID across the
network, thus making it visible to all network users.
Select Disable to hide the SSID from the network.
This feature when enabled automatically selects
the channel that provides the best wireless
performance. The channel selection process only
occurs when the AP is booting up. To manually
select a channel, set this option to Disable and
select a channel from the drop-down menu.
12
D-Link DAP-2695 User Manual
Channel:
Channel Width:
Authentication:
To change the channel, rst toggle the Auto Channel Selection setting to Disable, and then use the drop-down menu to make
the desired selection.
Note: The wireless adapters will automatically scan and match the wireless settings.
Allows you to select the channel width you would like to operate in. Select 20 MHz if you are not using any 802.11n wireless
clients. Auto 20/40 MHz allows you to connect to both 802.11n and 802.11b/g or 802.11a wireless devices on your network.
Use the drop-down menu to choose Open System, Shared Key, WPA-Personal, WPA-Enterprise, or 802.1x.
• Select Open System to communicate the key across the network (WEP).
• Select Shared Key to limit communication to only those devices that share the same WEP settings. If multi-SSID is
enabled, this option is not available.
• Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.
• Select WPA-Enterprise to secure your network with the inclusion of a RADIUS server.
• Select 802.1X if your network is using port-based Network Access Control.
13
D-Link DAP-2695 User Manual
WDS with AP Mode
Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Auto Channel Selection:
Select either 2.4GHz or 5GHz from the drop-down
menu.
WDS with AP mode is selected from the drop-down
menu.
Service Set Identier (SSID) is the name designated
for a specic wireless local area network (WLAN).
The SSID’s factory default setting is dlink. The SSID
can be easily changed to connect to an existing
wireless network or to establish a new wireless
network.
Enable or Disable SSID visibility. Enabling this
feature broadcasts the SSID across the network,
thus making it visible to all network users.
Enabling this feature automatically selects
the channel that will provide the best wireless
performance. This feature is not supported in WDS
with AP mode. The channel selection process only
occurs when the AP is booting up.
Channel:
Channel Width:
All devices on the network must share the same
channel. To change the channel, use the drop-down
menu to make the desired selection. (Note: The
wireless adapters will automatically scan and match
the wireless settings.)
Allows you to select the channel width you would
like to operate in. Select 20 MHz if you are not using
any 802.11n wireless clients. Auto 20/40 MHz allows
you to connect to both 802.11n and 802.11b/g or
802.11a wireless devices on your network.
14
D-Link DAP-2695 User Manual
Remote AP MAC Address:
Site Survey:
Authentication:
Enter the MAC addresses of the APs on your network that will serve as bridges to wirelessly connect multiple networks.
Click on the Scan button to search for available wireless networks, then click on the available network that you want to
connect with.
Use the drop-down menu to choose Open System, Shared Key, or WPA-Personal.
• Select Open System to communicate the key across the network.
Select Shared Key to limit communication to only those devices that share the same WEP settings. If multi-SSID is enabled,
•
this option is not available.
• Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.
15
D-Link DAP-2695 User Manual
WDS Mode
Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Auto Channel Selection:
Channel:
Select either 2.4GHz or 5GHz from the drop-down
menu.
WDS is selected from the drop-down menu.
Service Set Identier (SSID) is the name designated
for a specic wireless local area network (WLAN). The
SSID’s factory default setting is dlink. The SSID can
be easily changed to connect to an existing wireless
network or to establish a new wireless network.
Enable or Disable SSID visibility. Enabling this
feature broadcasts the SSID across the network, thus
making it visible to all network users.
Enabling this feature automatically selects
the channel that will provide the best wireless
performance. This feature is not supported in WDS
mode.
All devices on the network must share the same
channel. To change the channel, use the drop-down
menu to make the desired selection.
Channel Width:
Remote AP MAC Address:
Use the drop-down menu to choose 20 MHz or
Auto 20/40 MHz.
Enter the MAC addresses of the APs on your network
that will serve as bridges to wirelessly connect
multiple networks.
16
D-Link DAP-2695 User Manual
Site Survey:
Authentication:
Click on the Scan button to search for available wireless networks, then click on the available network that you
want to connect with.
Use the drop-down menu to choose Open System, Shared Key, or WPA-Personal.
• Select Open System to communicate the key across the network.
• Select Shared Key to limit communication to only those devices that share the same WEP settings.
• Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is
required.
17
D-Link DAP-2695 User Manual
Wireless Client Mode
Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Auto Channel Selection:
Channel:
Select either 2.4 GHz or 5 GHz from the drop-down
menu.
Wireless Client is selected from the drop-down menu.
Service Set Identier (SSID) is the name designated
for a specic wireless local area network (WLAN). The
SSID’s factory default setting is dlink. The SSID can
be easily changed to connect to an existing wireless
network.
This option is unavailable in Wireless Client mode.
Enabling this feature automatically selects the channel
that will provide the best wireless performance. This
feature is not supported in Wireless Client mode.
The channel used will be displayed, and matches the
AP that the DAP-2695 is connected to when set to
Wireless Client mode.
Channel Width:
Site Survey:
Authentication:
Use the drop-down menu to choose 20 MHz or Auto
20/40 MHz.
Click on the Scan button to search for available
wireless networks, then click on the available network
that you want to connect with.
Will be explained in the next topic.
18
D-Link DAP-2695 User Manual
Wireless Security
Wireless security is a key concern for any wireless network installed. Unlike any other networking method wireless networks will broadcast it’s presence for
anyone to connect to it. Today, wireless security has advanced to a level where it is virtually impenetrable.
There are mainly two forms of wireless encryption and they are called Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA). WEP was the rst
security method developed. It is a low level encryption but better than now encryption. WPA is the newest encryption standard and with the advanced WPA2
standard wireless networks have nally reach a point where the security is strong enough to give users the peace of mind when installing wireless networks.
Wired Equivalent Privacy (WEP)
WEP provides two variations called Open System and Shared Key.
Open System
will send a request to the access point and if the key used matches the one congured on the access point, the access point will return a success
message back to the wireless client. If the key does not match the one congured on the access point, the access point will deny the connection request from
the wireless client.
Shared Key
will send a request to the access point and if the key used matches the one congured on the access point, the access point will send a challenge
to the client. The client will then again send a conrmation of the same key back to the access point where the access point will either return a successful or a
denial packet back to the wireless client.
Encryption:
Use the radio button to disable or enable
encryption.
Key Type*:
Key Size:
Key Index (1-4):
Select HEX or ASCII.
Select 64 Bits or 128 Bits.
Select the 1st through the 4th key to be
the active key.
Key:
Input up to four keys for encryption. You
will select one of these keys in the Key
Index drop-down menu.
**Hexadecimal (HEX) digits consist of the numbers 0-9 and the letters A-F.
*ASCII (American Standard Code for Information Interchange) is a code that represents English letters using
numbers ranging from 0-127.
19
D-Link DAP-2695 User Manual
Wi-Fi Protected Access (WPA / WPA2)
WPA was created by the Wi-Fi Alliance to address the limitations and weaknesses found in WEP. This protocol is mainly based on the 802.11i
standard. There are also two variations found in WPA called WPA-Personal (PSK) and WPA-Enterprise (EAP).
WPA-EAP requires the user to install a Radius Server on the network for authentication.
WPA-Personal does not require the user to install a Radius Server on the network.
Comparing WPA-PSK with WPA-EAP, WPA-PSK is seen as a weaker authentication but comparing WPA-PSK to WEP, WPA-PSK is far more secure
than WEP. WPA-EAP is the highest level of wireless security a user can use for wireless today.
WPA2 is an upgrade of WPA. WPA2 yet again solves some possible security issues found in WPA. WPA2 has two variations called WPA2-Personal
(PSK) and WPA2-Enterprise (EAP) which is the same as found with WPA.
WPA Mode:
Cipher Type:
Group Key Update:
Pass Phrase:
When WPA-Personal is selected for Authentication
type, you must also select a WPA mode from the
drop-down menu: AUTO (WPA or WPA2), WPA2 Only,
or WPA Only. WPA and WPA2 use dierent algorithms.
AUTO (WPA or WPA2) allows you to use both WPA
and WPA2.
When you select WPA-Personal, you must also select
AUTO, AES, or TKIP from the pull down menu.
Select the interval during which the group key will
be valid. The default value of 1800 is recommended.
When you select WPA-Personal, please enter a Pass
Phrase in the corresponding eld.
20
D-Link DAP-2695 User Manual
WPA Mode:
Cipher Type:
Group Key Update Interval:
Network Access Protection:
RADIUS Server:
When WPA-Enterprise is selected, you must
also select a WPA mode from the drop-down
menu: AUTO (WPA or WPA2), WPA2 Only,
or WPA Only. WPA and WPA2 use dierent
algorithms. AUTO (WPA or WPA2) allows you
to use both WPA and WPA2.
When WPA-Enterprise is selected, you must
also select a cipher type from the drop-down
menu: Auto, AES, or TKIP.
Select the interval during which the group
key will be valid. 1800 is the recommended
value as a lower interval may reduce data
transfer rates.
Enable or disable Microsoft Network Access
Protection.
Enter the IP address of the RADIUS server.
RADIUS Port:
RADIUS Secret:
Enter the RADIUS port.
Enter the RADIUS secret.
21
D-Link DAP-2695 User Manual
LAN
LAN is short for Local Area Network. This is considered your internal network. These are the IP settings of the LAN interface for the DAP-2695.
These settings may be referred to as private settings. You may change the LAN IP address if needed. The LAN IP address is private to your internal
network and cannot be seen on the Internet.
Get IP From:
IP Address:
Subnet Mask:
Default Gateway:
DNS:
Static IP (Manual) is chosen here. Choose this option if
you do not have a DHCP server in your network, or if you
wish to assign a static IP address to the DAP-2695. When
Dynamic IP (DHCP) is selected, the other elds here will
be grayed out. Please allow about 2 minutes for the DHCP
client to be functional once this selection is made.
The default IP address is 192.168.0.50. Assign a static
IP address that is within the IP address range of your
network.
Enter the subnet mask. All devices in the network must
share the same subnet mask.
Enter the IP address of the gateway/router in your
network.
Enter a DNS server IP address. This is usually the local IP
address of your gateway/router.
22
D-Link DAP-2695 User Manual
Advanced Settings
In the Advanced Settings Section the user can congure advanced settings concerning Performance, Multiple SSID, VLAN, Security, Quality of Service, AP
Array, Web Redirection, DHCP Server, Filters and Scheduling. The following pages will explain settings found in the Advanced Settings section in more detail.
23
Loading...