D Link AP2620A1 User Manual

Download

Document Created by Nick Schuster

D-Link DAP-2620 User Manual

Package Contents

• DAP-2620 Access Point

• Mounting Plate and Hardware

Note: Using a power supply with a dierent voltage rating than the one included with the DAP-2620 will cause damage and void the warranty for this product.

System Requirements

y Computers with Windows®, Macintosh®, or Linux-based operating systems with an installed Ethernet Adapter y Internet Explorer 11, Safari 7, Firefox 28, or Google Chrome 33 and above (for web-based conguration)

D-Link DAP-2620 User Manual

Basic Installation

Hardware Setup

To power the access point, you can use one of the following 3 methods:

Method 1 - Use if you have a PoE switch or router.

Method 1 - PoE with PoE Switch or Router

1. Connect one end of your Ethernet cable to the LAN (PoE) port on the access point.

2. Connect the other end into one port on a PoE switch or router.

DAP-2620

PoE Switch or Router

D-Link DAP-2620 User Manual

Web User Interface

The DAP-2620 supports an elaborate web user interface where the user can congure and monitor the device. Launch a web browser, type the IP address of the access point (Default setting is http://192.168.0.50 or https://192.168.0.50) and then press Enter to login. Most of the congurable settings are located in the left menu of the web GUI which contains section called Basic Settings, Advanced Settings and Status.

D-Link DAP-2620 User Manual

Wireless

On the wireless settings page, you can setup the basic wireless conguration for the access point. The user can choose from 4 dierent wireless modes:

Access Point - Used to create a wireless LAN WDS with AP - Used to connect multiple wireless networks while still functioning as a wireless access point WDS - Used to connect multiple wireless networks Wireless Client - Used when the access point needs to act as a wireless network adapter for an Ethernet enabled device

Access Point Mode

Wireless Band:

Mode:

Network Name (SSID):

SSID Visibility:

Auto Channel Selection:

Select either 2.4 GHz or 5 GHz from the drop-down menu.

Select Access Point from the drop-down menu.

Service Set Identier (SSID) is the name designated for a specic wireless local area network (WLAN). The SSID’s factory default setting is dlink. The SSID can be easily changed to connect to an existing wireless network or to establish a new wireless network. The SSID can be up to 32 characters and is case-sensitive.

Select Enable to broadcast the SSID across the network, thus making it visible to all network users. Select Disable to hide the SSID from the network.

This feature when enabled automatically selects the channel that provides the best wireless performance. The channel selection process only occurs when the AP is booting up. To manually select a channel, set this option to Disable and select a channel from the drop-down menu.

D-Link DAP-2620 User Manual

Channel:

Channel Width:

Authentication:

To change the channel, rst toggle the Auto Channel Selection setting to Disable, and then use the drop-down menu to make the desired selection.

Note: The wireless adapters will automatically scan and match the wireless settings.

Allows you to select the channel width you would like to operate in. Select 20 MHz if you are not using any 802.11n wireless clients. Auto 20/40 MHz allows you to connect to both 802.11n and 802.11b/g or 802.11a wireless devices on your network.

Use the drop-down menu to choose Open System, Shared Key, WPA-Personal, WPA-Enterprise, or 802.1x.

• Select Open System to communicate the key across the network (WEP).

• Select Shared Key to limit communication to only those devices that share the same WEP settings. If multi-SSID is enabled, this option is not available.

• Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.

• Select WPA-Enterprise to secure your network with the inclusion of a RADIUS server.

• Select 802.1X if your network is using port-based Network Access Control.

D-Link DAP-2620 User Manual

WDS with AP Mode

Wireless Band:

Mode:

Network Name (SSID):

SSID Visibility:

Auto Channel Selection:

Select either 2.4GHz or 5GHz from the drop-down menu.

WDS with AP mode is selected from the drop-down menu.

Enable or Disable SSID visibility. Enabling this feature broadcasts the SSID across the network, thus making it visible to all network users.

Enabling this feature automatically selects the channel that will provide the best wireless performance. This feature is not supported in WDS with AP mode. The channel selection process only occurs when the AP is booting up.

Channel:

Channel Width:

All devices on the network must share the same channel. To change the channel, use the drop-down menu to make the desired selection. (Note: The wireless adapters will automatically scan and match the wireless settings.)

802.11a wireless devices on your network.

D-Link DAP-2620 User Manual

Remote AP MAC Address:

Site Survey:

Authentication:

Enter the MAC addresses of the APs on your network that will serve as bridges to wirelessly connect multiple networks.

Click on the Scan button to search for available wireless networks, then click on the available network that you want to connect with.

Use the drop-down menu to choose Open System, Shared Key, or WPA-Personal.

• Select Open System to communicate the key across the network.

• Select Shared Key to limit communication to only those devices that share the same WEP settings. If multi-SSID is enabled, this option is not available.

• Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.

D-Link DAP-2620 User Manual

WDS Mode

Wireless Band:

Mode:

Network Name (SSID):

SSID Visibility:

Auto Channel Selection:

Channel:

Select either 2.4GHz or 5GHz from the drop-down menu.

WDS is selected from the drop-down menu.

Enable or Disable SSID visibility. Enabling this feature broadcasts the SSID across the network, thus making it visible to all network users.

Enabling this feature automatically selects the channel that will provide the best wireless performance. This feature is not supported in WDS mode.

All devices on the network must share the same channel. To change the channel, use the drop-down menu to make the desired selection.

Channel Width:

Remote AP MAC Address:

Use the drop-down menu to choose 20 MHz or Auto 20/40 MHz.

Enter the MAC addresses of the APs on your network that will serve as bridges to wirelessly connect multiple networks.

D-Link DAP-2620 User Manual

Site Survey:

Authentication:

Click on the Scan button to search for available wireless networks, then click on the available network that you want to connect with.

Use the drop-down menu to choose Open System, Shared Key, or WPA-Personal.

• Select Open System to communicate the key across the network.

• Select Shared Key to limit communication to only those devices that share the same WEP settings.

• Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.

D-Link DAP-2620 User Manual

Wireless Client Mode

Wireless Band:

Mode:

Network Name (SSID):

SSID Visibility:

Auto Channel Selection:

Channel:

Select either 2.4 GHz or 5 GHz from the drop-down menu.

Wireless Client is selected from the drop-down menu.

This option is unavailable in Wireless Client mode.

Enabling this feature automatically selects the channel that will provide the best wireless performance. This feature is not supported in Wireless Client mode.

The channel used will be displayed, and matches the AP that the DAP-2620 is connected to when set to Wireless Client mode.

Channel Width:

Site Survey:

Authentication:

Use the drop-down menu to choose 20 MHz or Auto 20/40 MHz.

Click on the Scan button to search for available wireless networks, then click on the available network that you want to connect with.

Will be explained in the next topic.

D-Link DAP-2620 User Manual

Wireless Security

Wireless security is a key concern for any wireless network installed. Unlike any other networking method wireless networks will broadcast it’s presence for anyone to connect to it. Today, wireless security has advanced to a level where it is virtually impenetrable. There are mainly two forms of wireless encryption and they are called Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA). WEP was the rst security method developed. It is a low level encryption but better than now encryption. WPA is the newest encryption standard and with the advanced WPA2 standard wireless networks have nally reach a point where the security is strong enough to give users the peace of mind when installing wireless networks.

Wired Equivalent Privacy (WEP)

WEP provides two variations called Open System and Shared Key.

Open System will send a request to the access point and if the key used matches the one congured on the access point, the access point will return a success

message back to the wireless client. If the key does not match the one congured on the access point, the access point will deny the connection request from the wireless client.

Shared Key will send a request to the access point and if the key used matches the one congured on the access point, the access point will send a challenge to the client. The client will then again send a conrmation of the same key back to the access point where the access point will either return a successful or a denial packet back to the wireless client.

Encryption:

Use the radio button to disable or enable encryption.

Key Type*:

Key Size:

Key Index (1-4):

Select HEX or ASCII.

Select 64 Bits or 128 Bits.

Select the 1st through the 4th key to be the active key.

Key:

Input up to four keys for encryption. You will select one of these keys in the Key Index drop-down menu.

**Hexadecimal (HEX) digits consist of the numbers 0-9 and the letters A-F. *ASCII (American Standard Code for Information Interchange) is a code that represents English letters using numbers ranging from 0-127.

D-Link DAP-2620 User Manual

Wi-Fi Protected Access (WPA / WPA2)

WPA was created by the Wi-Fi Alliance to address the limitations and weaknesses found in WEP. This protocol is mainly based on the 802.11i standard. There are also two variations found in WPA called WPA-Personal (PSK) and WPA-Enterprise (EAP).

WPA-EAP requires the user to install a Radius Server on the network for authentication. WPA-Personal does not require the user to install a Radius Server on the network.

Comparing WPA-PSK with WPA-EAP, WPA-PSK is seen as a weaker authentication but comparing WPA-PSK to WEP, WPA-PSK is far more secure than WEP. WPA-EAP is the highest level of wireless security a user can use for wireless today.

WPA2 is an upgrade of WPA. WPA2 yet again solves some possible security issues found in WPA. WPA2 has two variations called WPA2-Personal (PSK) and WPA2-Enterprise (EAP) which is the same as found with WPA.

WPA Mode:

Cipher Type:

Group Key Update:

Pass Phrase:

When WPA-Personal is selected for Authentication type, you must also select a WPA mode from the drop-down menu: AUTO (WPA or WPA2), WPA2 Only, or WPA Only. WPA and WPA2 use dierent algorithms. AUTO (WPA or WPA2) allows you to use both WPA and WPA2.

When you select WPA-Personal, you must also select AUTO, AES, or TKIP from the pull down menu.

Select the interval during which the group key will be valid. The default value of 1800 is recommended.

When you select WPA-Personal, please enter a Pass Phrase in the corresponding eld.

D-Link DAP-2620 User Manual

WPA Mode:

Cipher Type:

Group Key Update Interval:

Network Access Protection:

RADIUS Server:

RADIUS Port:

When WPA-Enterprise is selected, you must also select a WPA mode from the drop-down menu: AUTO (WPA or WPA2), WPA2 Only, or WPA Only. WPA and WPA2 use dierent algorithms. AUTO (WPA or WPA2) allows you to use both WPA and WPA2.

When WPA-Enterprise is selected, you must also select a cipher type from the drop-down menu: Auto, AES, or TKIP.

Select the interval during which the group key will be valid. 1800 is the recommended value as a lower interval may reduce data transfer rates.

Enable or disable Microsoft Network Access Protection.

Enter the IP address of the RADIUS server.

Enter the RADIUS port.

RADIUS Secret:

Account Server:

Account Port:

Account Secret:

Enter the RADIUS secret.

Enter the IP address of the Account Server

Enter the Account port

Enter the Account secret

D-Link DAP-2620 User Manual

LAN

LAN is short for Local Area Network. This is considered your internal network. These are the IP settings of the LAN interface for the DAP-2620. These settings may be referred to as private settings. You may change the LAN IP address if needed. The LAN IP address is private to your internal network and cannot be seen on the Internet.

Get IP From:

IP Address:

Subnet Mask:

Default Gateway:

DNS:

Static IP (Manual) is chosen here. Choose this option if

you do not have a DHCP server in your network, or if you wish to assign a static IP address to the DAP-2620. When Dynamic IP (DHCP) is selected, the other elds here will be grayed out. Please allow about 2 minutes for the DHCP client to be functional once this selection is made.

The default IP address is 192.168.0.50. Assign a static IP address that is within the IP address range of your network.

Enter the subnet mask. All devices in the network must share the same subnet mask.

Enter the IP address of the gateway/router in your network.

Enter a DNS server IP address. This is usually the local IP address of your gateway/router.

D-Link DAP-2620 User Manual

IPv6

Enable IPv6:

Get IP From:

IP Address:

Prex:

Default Gateway:

Check to enable the IPv6

Auto is chosen here. Choose this option the DAP-2620 can get IPv6 address automatically or use Static to set IPv6 address manually. When Auto is selected, the other elds here will be grayed out.

Enter the LAN IPv6 address used here.

Enter the LAN subnet prex length value used here.

Enter the LAN default gateway IPv6 address used here.

D-Link DAP-2620 User Manual

Advanced Settings

In the Advanced Settings Section the user can congure advanced settings concerning Performance, Multiple SSID, VLAN, Security, Quality of Service, AP Array, Web Redirection, DHCP Server, Filters and Scheduling. The following pages will explain settings found in the Advanced Settings section in more detail.

D-Link DAP-2620 User Manual

Performance

On the Performance Settings page the users can congure more advanced settings concerning the wireless signal and hosting.

Wireless Band:

Wireless:

Wireless Mode:

Data Rate*:

Select either 2.4GHz or 5GHz.

Use the drop-down menu to turn the wireless function On or O.

The dierent combination of clients that can be supported include Mixed 802.11n, 802.11g and 802.11b, Mixed 802.11g and 802.11b and 802.11n Only in the 2.4 GHz band and Mixed 802.11n, 802.11a,

802.11a only, and 802.11n Only in the 5 GHz band. Please note that when backwards compatibility is enabled for legacy (802.11a/g/b) clients, degradation of 802.11n (draft) wireless performance is expected.

Indicate the base transfer rate of wireless adapters on the wireless LAN. The AP will adjust the base transfer rate depending on the base rate of the connected device. If there are obstacles or interference, the AP will step down the rate. This option is enabled in Mixed 802.11g and 802.11b mode (for 2.4 GHz) and 802.11a only mode (for 5 GHz). The choices available are Best (Up to 54), 54, 48, 36, 24, 18, 12, 9, 6 for 5 GHz and Best (Up to 54), 54, 48, 36, 24, 18, 12, 9, 6, 11, 5.5, 2 or 1 for 2.4 GHz.

Beacon Interval (25-500):

DTM Interval (1-15):

Beacons are packets sent by an access point to synchronize a wireless network. Specify a value in milliseconds. The default (100) is recommended. Setting a higher beacon interval can help to save the power of wireless clients, while setting a lower one can help a wireless client connect to an access point faster.

Select a Delivery Trac Indication Message setting between 1 and 15. 1 is the default setting. DTIM is a countdown informing clients of the next window for listening to broadcast and multicast messages.

D-Link DAP-2620 User Manual

Transmit Power:

WMM (Wi-Fi Multimedia):

Ack Time Out

(2.4 GHZ, 64~200):

Short GI:

IGMP Snooping:

Multicast Rate:

Multicast Bandwidth

Control :

This setting determines the power level of the wireless transmission. Transmitting power can be adjusted to eliminate overlapping of wireless area coverage between two access points where interference is a major concern. For example, if wireless coverage is intended for half of the area, then select 50% as the option. Use the drop-down menu to select 100%, 50%, 25%, or 12.5%.

WMM stands for Wi-Fi Multimedia. Enabling this feature will improve the user experience for audio and video applications over a Wi-Fi network.

To eectively optimize throughput over long distance links enter a value for Acknowledgement Time Out between 25 and 200 microseconds for 5 GHz or from 64 to 200 microseconds in the 2.4 GHz in the eld provided.

Select Enable or Disable. Enabling a short guard interval can increase throughput. However, be aware that it can also increase the error rate in some installations due to increased sensitivity to radio-frequency installations.

Select Enable or Disable. Internet Group Management Protocol allows the AP to recognize IGMP queries and reports sent between routers and an IGMP host (wireless STA). When IGMP snooping is enabled, the AP will forward multicast packets to an IGMP host based on IGMP messages passing through the AP.

Adjust the multicast packet data rate here. The multicast rate is supported in AP mode, (2.4 GHZ and 5 GHZ) and WDS with AP mode, including Multi-SSIDs.

Adjust the multicast packet data rate here. The multicast rate is supported in AP mode, and WDS with AP mode, including MultiSSIDs

Maximum Multicast

Bandwidth :

HT20/40 Coexistence :

Transfer DHCP Oer to

Unicast :

Set the multicast packets maximum bandwidth pass through rate from the Ethernet interface to the Access Point.

Enable this option to reduce interference from other wireless networks in your area. If the channel width is operating at 40MHz and there is another wireless network’s channel over-lapping and causing interference, the Access Point will automatically change to 20MHz.

Enable to transfer the DHCP Oer to Unicast from LAN to WLAN, suggest to enable this function if stations number is larger than 30.

D-Link DAP-2620 User Manual

Wireless Resource Control

The Wireless Resource Control window is used to congure the wireless connection settings so that the device can detect the better wireless connection in your environment.

Wireless band:

Band Steering:

Band Steering Age:

Band Steering

Dierence:

Band Steering

Refuse Number:

Select 2.4GHz or 5GHz.

Use the drop-down menu to Enable the 5G Preferred function. When the wireless clients support both

2.4GHz and 5GHz and the 2.4GHz signal is not strong enough, the device will use 5G as higher priority.

Enter the time in seconds to specify the interval of updating information.

The 5G preferred dierence value is equal to the number of 5GHz wireless client connections minus the number of 2.4GHz wireless client connections. If the number of 5GHz wireless client connections minus the number of 2.4GHz wireless client connections exceed this value, the extra 5GHz wireless client connections will be forced to connect to the 2.4GHz band and not the 5GHz band.

Enter the maximum 5G connection attempts allowed before the 5G preferred function will be disabled for the wireless station connection.

Connection Limit:

User Limit:

Select Enable or Disable. This is an option for load balancing. This determines whether to limit the number of users accessing this device. The exact number is entered in the User Limit eld below. This feature allows the user to share the wireless network trac and the client using multiple APs. If this function is enabled and when the number of users exceeds this value, or the network utilization of this AP exceeds the percentage that has been specied, the DAP-2620 will not allow clients to associate with the AP.

Set the maximum amount of users that are allowed access (zero to 64 users) to the device using the specied wireless band. The default setting is 20.

D-Link DAP-2620 User Manual

11n Preferred:

Network Utilization:

Aging out:

RSSI Threshold:

Data Rate Threshold:

ACL RSSI:

ACL RSSI Threshold:

Use the drop-down menu to Enable the 11n Preferred function. The wireless clients with 802.11n protocol will have higher priority to connect to the device.

Set the maximum utilization of this access point for service. The DAP-2620 will not allow any new clients to associate with the AP if the utilization exceeds the value the user species. Select a utilization percentage between 100%, 80%, 60%, 40%, 20%, or 0%. When this network utilization threshold is reached, the device will pause one minute to allow network congestion to dissipate.

Use the drop-down menu to select the criteria of disconnecting the wireless clients. Available options are RSSI and Data Rate.

When RSSI is selected in the Aging out drop-down menu, select the percentage of RSSI here. When the RSSI of wireless clients is lower than the specied percentage, the device disconnects the wireless clients.

When Data Rate is selected in the Aging out drop-down menu, select the threshold of data rate here. When the data rate of wireless clients is lower than the specied number, the device disconnects the wireless clients.

Use the drop-down menu to Enable the function. When enabled, the device denies the connection request from the wireless clients with the RSSI lower than the specied threshold below.

Set the ACL RSSI Threshold.

D-Link DAP-2620 User Manual

Multi-SSID

The device supports up to four multiple Service Set Identiers. You can set the Primary SSID in the Basic > Wireless section. The SSID’s factory default setting is dlink. The SSID can be easily changed to connect to an existing wireless network or to establish a new wireless network.

Enable Multi-SSID:

Band:

Index:

SSID:

SSID Visibility:

Security:

Check to enable support for multiple SSIDs.

Select 2.4GHz or 5GHz.

You can select up to seven multi-SSIDs. With the Primary SSID, you have a total of eight multi-SSIDs.

Enable or Disable SSID visibility. Enabling this feature broadcasts the SSID across the network, thus making it visible to all network users.

The Multi-SSID security can be Open System, WPAPersonal, or WPA-Enterprise. For a detailed description of the Open System parameters please go to page 23. For a detailed description of the WPA-Personal parameters please go to page 24. For a detailed description of the WPA-Enterprise parameters please go to page 25.

Priority:

WMM (Wi-Fi

Multimedia):

Select the priority level of the SSID selected.

WMM stands for Wi-Fi Multimedia. Enabling this feature will improve the user experience for audio and video applications over a Wi-Fi network.

D-Link DAP-2620 User Manual

Encryption:

Key Type:

Key Size:

Key Index (1-4):

Key:

WPA Mode:

Cipher Type:

Group Key Update Interval:

Pass Phrase:

When you select Open System, toggle between Enable and Disable. If Enable is selected, the Key Type, Key Size, Key Index (1~4), Key, and Conrm Keys must also be congured.

Select HEX or ASCII.

Select 64-bit or 128-bit.

Select from the 1st to 4th key to be set as the active key.

Input up to four keys for encryption. You will select one of these keys in the Key Index drop-down menu.

When you select either WPA-Personal or WPA-Enterprise, you must also choose a WPA mode from the drop-down menu: AUTO (WPA or WPA2), WPA2 Only, or WPA Only. WPA and WPA2 use dierent algorithms. AUTO (WPA or WPA2) allows you to use both WPA and WPA2. In addition, you must congure Cipher Type, and Group Key Update Interval.

Select Auto, AES, or TKIP from the drop-down menu.

Select the interval during which the group key will be valid. The default value of 1800 seconds is recommended.

When you select WPA-Personal, please enter a Pass Phrase in the corresponding eld.

Conrm Pass Phrase:

RADIUS Server:

RADIUS Port:

RADIUS Secret:

When you select WPA-Personal, please re-enter the Pass Phrase entered in the previous item in the corresponding eld.

When you select WPA-Enterprise, enter the IP address of the RADIUS server. In addition, you must congure RADIUS Port and RADIUS Secret.

Enter the RADIUS port.

Enter the RADIUS secret.

D-Link DAP-2620 User Manual

VLAN

VLAN List

The DAP-2620 supports VLANs. VLANs can be created with a Name and VID. Mgmt (TCP stack), LAN, Primary/Multiple SSID, and WDS connection can be assigned to VLANs as they are physical ports. Any packet which enters the DAP-2620 without a VLAN tag will have a VLAN tag inserted with a PVID. The VLAN List tab displays the current VLANs.

VLAN Status:

VLAN Mode:

Use the radio button to toggle to Enable. Next, go to the Add/Edit VLAN tab to add or modify an item on the VLAN List tab.

The current VLAN mode is displayed.

D-Link DAP-2620 User Manual

Port List

The Port List tab displays the current ports. If you want to congure the guest and internal networks on a Virtual LAN (VLAN), the switch and DHCP server you are using must also support VLANs. As a prerequisite step, congure a port on the switch for handling VLAN tagged packets as described in the IEEE 802.1Q standard.

VLAN Status:

Port Name:

Tag VID:

Untag VID:

PVID:

Use the radio button to toggle to Enable. Next, go to the Add/Edit VLAN tab to add or modify an item on the VLAN List tab.

The name of the port is displayed in this column.

The Tagged VID is displayed in this column.

The Untagged VID is displayed in this column.

The Port VLAN Identier is displayed in this column.

D-Link DAP-2620 User Manual

Add/Edit VLAN

The Add/Edit VLAN tab is used to congure VLANs. Once you have made the desired changes, click the Save button to let your changes take eect.

VLAN Status:

VLAN ID:

VLAN Name:

Use the radio button to toggle to Enable.

Provide a number between 1 and 4094 for the Internal VLAN.

Enter the VLAN to add or modify.

D-Link DAP-2620 User Manual

PVID Settings

The PVID Setting tab is used to enable/disable the Port VLAN Identier Auto Assign Status as well as to congure various types of PVID settings. Click the Save button to let your changes take eect.

VLAN Status:

PVID Auto Assign Status:

Use the radio button to toggle between Enable and Disable.

Use the radio button to toggle PVID auto assign status to Enable.

D-Link DAP-2620 User Manual

Intrusion

The Wireless Intrusion Protection window is used to set APs as All, Valid, Neighborhood, Rogue, and New. Click the Save button to let your changes take eect.

Wireless Band:

AP List:

Detect:

Select 2.4GHz or 5GHz.

The choices include All, Valid, Neighbor, Rogue, and New.

Click this button to initiate a scan of the network.

D-Link DAP-2620 User Manual

Schedule

The Wireless Schedule Settings window is used to add and modify scheduling rules on the device. Click the Save button to let your changes take eect.

Wireless Schedule:

Name:

Index:

SSID:

Day(s):

All Day(s):

Start Time:

Use the drop-down menu to enable the device’s scheduling feature.

Enter a name for the new scheduling rule in the eld provided.

Use the drop-down menu to select the desired SSID.

This read-only eld indicates the current SSID in use. To create a new SSID, go to the Wireless Settings window (Basic Settings > Wireless).

Toggle the radio button between All Week and Select Day(s). If the second option is selected, check the specic days you want the rule to be eective on.

Check this box to have your settings apply 24 hours a day.

Enter the beginning hour and minute, using a 24-hour clock.

End Time:

Enter the ending hour and minute, using a 24-hour clock.

D-Link DAP-2620 User Manual

Internal RADIUS Server

The DAP-2620 features a built-in RADIUS server. Once you have nished adding a RADIUS account, click the Save button to let your changes take eect. The newly-created account will appear in this RADIUS Account List. The radio buttons allow the user to enable or disable the RADIUS account. Click the icon in the delete column to remove the RADIUS account. We suggest you limit the number of accounts below 30.

User Name:

Password:

Status:

RADIUS Account List:

Enter a name to authenticate user access to the internal RADIUS server.

Enter a password to authenticate user access to the internal RADIUS server. The length of your password should be 8~64.

Toggle the drop-down menu between Enable and Disable.

Displays the list of users.

D-Link DAP-2620 User Manual

ARP Spoong Prevention

The ARP Spoong Prevention feature allows users to add IP/MAC address mapping to prevent arp spoong attack.

ARP Spoong Prevention:

Gateway IP Address:

Gateway MAC Address:

This check box allows you to enable the arp spoong prevention function.

Enter a gateway IP address.

Enter a gateway MAC address.

D-Link DAP-2620 User Manual

Bandwidth Optimization

The Bandwidth Optimization window allows the user to manage the bandwidth of the device and arrange the bandwidth for various wireless clients. When the Bandwidth Optimization ruile is nished, click the Add button. To discard the Add Bandwidth Optimization Rule settings, click the Clear button. Click the Save button to let your changes take eect.

Enable Bandwidth

Optimization:

Downlink Bandwidth:

Uplink Bandwidth:

Allocate average BW

for each station:

Allocate maximum BW

for each station:

Allocate dierent BW

for a/b/g/n stations:

Allocate specic BW

for SSID:

Use the drop-down menu to Enable the Bandwidth Optimization function.

Enter the downlink bandwidth of the device in Mbits per second.

Enter the uplink bandwidth of the device in Mbits per second.

AP will distribute average bandwidth for each client.

Specify the maximum bandwidth for each connected client. Reserve certain bandwidth for future clients.

The weight of 11b/g/n and 11a/n client are 10%/20%/70% ; 20%/80%. AP will distribute dierent bandwidth for 11a/b/g/n clients.

All clients share the total bandwidth.

Rule Type:

Use the drop-down menu to select the type that is applied to the rule. Available options are:

Allocate average BW for each station, Allocate maximum BW for each station, Allocate dierent BW for 1a/b/g/n stations, and Allocte specic BW for SSID.

D-Link DAP-2620 User Manual

Band:

SSID Index:

Downlink Speed:

Uplink Speed:

Use the drop-down menu to toggle the wireless band between 2.4GHz and 5GHz.

Use the drop-down menu to select the SSID for the specied wireless band.

Enter the limitation of the downloading speed in either Kbits/sec or Mbits/sec for the rule.

Enter the limitation of the uploading speed in either Kbits/sec or Mbits/sec for the rule.

D-Link DAP-2620 User Manual

AP Array

AP Array Scan

The AP Array window is used to create up to 32 APs on a local network to be organized into a single group in order to increase ease of management. Click the Save button to let your changes take eect. Central WiFiManager and AP Array are mutually exclusive functions.

Enable AP Array:

AP Array Name:

AP Array Password:

Scan AP Array List:

Connection Status:

AP Array List:

Select the check box to enable the AP array function. The three modes that are available are Master, Backup Master, and Slave. APs in the same array will use the same conguration. The conguration will sync the Master AP to the Slave AP and the Backup Master AP when a Slave AP and a Backup Master AP join the AP array.

Enter an AP array name for the group here.

Enter an AP array password for the group here. This password must be the same on all the APs in the group.

Click this button to initiate a scan of all the available APs currently on the network.

Display the AP array connection status.

This table displays the current AP array status for the following parameters: Array Name, Master IP, MAC, Master, Backup Master, Slave, and Total.

Current Members:

This table displays all the current array members. The DAP-2620 AP array feature supports up to eight AP array members.

D-Link DAP-2620 User Manual

Conguration Settings

In the AP array conguration settings windows, users can specify which settings all the APs in the group will inherit from the master AP. Make the required selection in this window and click the Save button to accept the changes made.

Enable AP Array

Conguration:

Wireless Basic

Settings:

Wireless Advanced

Settings:

Multiple SSID & VLAN:

Advanced Functions:

Administration

Settings:

Select to Enable or Disable the AP array congure feature here.

Select this option to specify the basic wireless settings that the APs in the group will inherit.

Select this option to specify the advanced wireless settings that the APs in the group will inherit.

Select this option to specify the multiple SSIDs and VLAN settings that the APs in the group will inherit.

Select this option to specify the other advanced settings that the APs in the group will inherit.

Select this option to specify the administrative settings that the APs in the group will inherit.

D-Link DAP-2620 User Manual

Wireless Basic Settings

Network Name (SSID):

SSID Visibility:

Auto Channel Selection:

Channel Width:

Security:

Captive Prole:

Band:

Wireless:

Wireless Mode:

Select this option to use the same SSID.

Select this option to enable SSID visibility.

Select this option to use auto channel selection.

Select this option to use the same channel width.

Select this option to use the same wireless security.

Select this option to use the same captive prole settings.

Select this option to use the same wireless band.

Wireless Advanced Settings

Select this option to use the same wireless settings.

Select this option to use the same wireless mode.

Data Rate:

Beacon Interval:

DTIM Interval:

Transmit Power:

WMM (Wi-Fi

Multimedia):

Ack Time Out:

Wireless ACL:

Select this option to use the same data rate.

Select this option to use the same beacon interval.

Select this option to use the same DTIM interval.

Select this option to use the same transmit power.

Select this option to use the same WMM settings.

Select this option to use the same ACK timeout value.

Select this option to use the same wireless ACL settings.

D-Link DAP-2620 User Manual

Short GI:

Link Integrity:

Connection Limit:

IGMP Snooping::

SSID:

SSID Visibility:

Security:

WMM:

Captive Prole:

Select this option to use the same short GI settings.

Select this option to use the same link integrity settings.

Select this option to use the same connection limit value.

Select this option to use the same IGMP snooping settings.

Multiple SSID & VLAN

Select this option to use the same multi-SSIDs.

Select this option to use the same SSID visible.

Select this option to use the same wireless security settings.

Select this option to use the same WMM settings.

Select this option to use the same captive prole settings.

VLAN:

Schedule Settings:

QoS Settings:

Log Settings:

Time and Date Settings:

Select this option to use the same VLAN settings.

Advanced Functions

Select this option to use the same schedule settings.

Select this option to use the same Quality of Service settings.

Select this option to use the same log settings.

Select this option to use the same time and date settings.

D-Link DAP-2620 User Manual

ARP Spoong

Prevention:

Bandwidth

Optimization:

Captive Portal:

Auto RF:

Load Balance:

DHCP Server Settings:

System Name Settings:

SNMP Settings:

Select this option to use the same ARP spoong prevention settings.

Select this option to use the same bandwidth optimization settings.

Select this option to use the same captive portal settings.

Select this option to use the same auto-RF settings.

Select this option to use the same load balancing settings.

Select this option to use the same DHCP server settings.

Administration Settings

Select this option to use the same system name.

Select this option to use the same SNMP settings.

Console Settings:

Limit Administrator:

Ping Control Setting:

Select this option to use the same login settings.

Select this option to use the same console settings.

Select this option to use the same limit administrator settings.

Select this option to use the same ping control settings.

D-Link DAP-2620 User Manual

Auto-RF

In this windows, users can view and congure the automatic radio frequency settings as well as congure the the auto-initiate period and threshold values. Click the Save button to accept the changes made.

Enable: Auto-RF:

Initiate Auto-RF:

Auto-Initiate:

Auto-Initiate Period:

RSSI Threshold:

RF Report Frequency:

Select to Enable or Disable the auto-RF feature here.

Click the Auto-RF Optimize button to initiate the auto-RF optimization feature.

Select the Enable or Disable the auto-initiate feature here.

After enabling the auto-initiate option, the autoinitiate period value can be entered here. This value must be between 1 and 24 hours.

Select the RSSI threshold value here. This value is listed in the drop-down menu in increments of 10% from 10% to 100%.

Enter the RF report frequency value here.

D-Link DAP-2620 User Manual

Load Balance

In this window, users can view and congure the AP array’s load balancing settings. Click the Save button to accept the changes made.

Enable Load Balance:

Active Threshold:

Select to Enable or Disable the load balance feature here.

Enter the active threshold value here.

D-Link DAP-2620 User Manual

Captive Portal

Authentication Settings-Web Redirection Only

The Captive Portal is a built-in web authentication server. When a station connects to an AP, the web browser will be redirected to a web authentication page. In this window, user can view and congure the Captive Portal settings. After selecting Web Redirection Only as the Authentication Type, we can congure the redirection website URL that will be applied to each wireless client in this network.

Session

timeout(1-1440) :

Band :

SSID Index :

Authentication Type :

Web Redirection State :

URL Path :

Enter the session timeout value here. This value can be from 1 to 1440 minutes. By default, this value is 60 minutes.

Select 2.4GHz or 5GHz.

Select the SSID for this Authentication.

Select the captive portal encryption type here. Options to choose from are Web Redirection, Username/Password, Passcode, Remote RADIUS, LDAP and POP3. In this section we’ll discuss the Web Redirection option.

Default setting is Enable when select Web Redirection Only.

Select whether to use either HTTP or HTTPS here. After selecting either http:// or https://, enter the URL of the website that will be used in the space provided.

IPIF Status :

VLAN Group :

Get IP From :

Select to Enable or Disable the Captive Portal with its IP interface feature here.

Enter the VLAN Group ID here

Static IP (Manual) is chosen here. Choose this option if you do not have a DHCP server in your network, or if you wish to assign a static IP address to the DAP-2620. When Dynamic IP (DHCP) is selected, the other elds here will be grayed out. Please allow about 2 minutes for the DHCP client to be functional once this selection is made.

D-Link DAP-2620 User Manual

IP Address :

Subnet Mask :

Gateway :

DNS :

Assign a static IP address that is within the IP address range of your network.

Enter the subnet mask. All devices in the network must share the same subnet mask.

Enter the IP address of the gateway/router in your network.

Enter a DNS server IP address. This is usually the local IP address of your gateway/router.

D-Link DAP-2620 User Manual

Authentication Settings- Username/Password

The Captive Portal is a built-in web authentication server. When a station connects to an AP, the web browser will be redirected to a web authentication page. In this window, user can view and congure the Captive Portal settings. After selecting Username/Password as the Authentication Type, we can congure the Username/Password authentication that will be applied to each wireless client in this network.

Session

timeout(1-1440) :

Band :

SSID Index :

Authentication Type :

Web Redirection State :

URL Path :

Enter the session timeout value here. This value can be from 1 to 1440 minutes. By default, this value is 60 minutes.

Select 2.4GHz or 5GHz.

Select the SSID for this Authentication.

Default is Disable or select Enable to enable the website redirection feature.

Select whether to use either HTTP or HTTPS here. After selecting either http:// or https://, enter the URL of the website that will be used in the space provided.

IPIF Status :

VLAN Group :

Get IP From :

Select to Enable or Disable the Captive Portal with its IP interface feature here.

Enter the VLAN Group ID here

Static IP (Manual) is chosen here. Choose this option if you do not have a DHCP server in your network, or if you wish to assign a static IP address to the DAP-2620. When Dynamic

D-Link DAP-2620 User Manual

IP (DHCP) is selected, the other elds here will be grayed out. Please allow about 2 minutes for the DHCP client to be functional once this selection is made.

IP Address :

Subnet Mask :

Gateway :

DNS :

Username:

Password:

Assign a static IP address that is within the IP address range of your network.

Enter the subnet mask. All devices in the network must share the same subnet mask.

Enter the IP address of the gateway/router in your network.

Enter a DNS server IP address. This is usually the local IP address of your gateway/router.

Enter the username for the new account here.

Enter the password for the new account here.

D-Link DAP-2620 User Manual

Authentication Settings- Passcode

The Captive Portal is a built-in web authentication server. When a station connects to an AP, the web browser will be redirected to a web authentication page. In this window, user can view and congure the Captive Portal settings. After selecting Passcode as the Authentication Type, we can congure the Passcode authentication that will be applied to each wireless client in this network.

Session

timeout(1-1440) :

Band :

SSID Index :

Authentication Type :

Web Redirection State :

URL Path :

IPIF Status :

Enter the session timeout value here. This value can be from 1 to 1440 minutes. By default, this value is 60 minutes.

Select 2.4GHz or 5GHz.

Select the SSID for this Authentication.

Default is Disable or select Enable to enable the website redirection feature.

Select whether to use either HTTP or HTTPS here. After selecting either http:// or https://, enter the URL of the website that will be used in the space provided.

Select to Enable or Disable the Captive Portal with its IP interface feature here.

VLAN Group :

Get IP From :

Enter the VLAN Group ID here

D-Link DAP-2620 User Manual

grayed out. Please allow about 2 minutes for the DHCP client to be functional once this selection is made.

IP Address :

Subnet Mask :

Gateway :

DNS :

Passcode Quantity:

Duration:

Last Active Day:

User Limit:

Assign a static IP address that is within the IP address range of your network.

Enter the subnet mask. All devices in the network must share the same subnet mask.

Enter the IP address of the gateway/router in your network.

Enter a DNS server IP address. This is usually the local IP address of your gateway/router.

Enter the number of ticket that will be used here.

Enter the duration value, in hours, for this passcode.

Select the last active date for this passcode here. Year, Month and Day selections can be made.

Enter the maximum amount of users that can use this passcode at the same time

D-Link DAP-2620 User Manual

Authentication Settings- Remote RADIUS

The Captive Portal is a built-in web authentication server. When a station connects to an AP, the web browser will be redirected to a web authentication page. In this window, user can view and congure the Captive Portal settings. After selecting Remote RADIUS as the Authentication Type, we can congure the Remote RADIUS authentication that will be applied to each wireless client in this network.

Session

timeout(1-1440) :

Band :

SSID Index :

Authentication Type :

Web Redirection State :

URL Path :

IPIF Status :

Enter the session timeout value here. This value can be from 1 to 1440 minutes. By default, this value is 60 minutes.

Select 2.4GHz or 5GHz.

Select the SSID for this Authentication.

Select the captive portal encryption type here. Options to choose from are Web Redirection, Username/ Password, Passcode, Remote RADIUS, LDAP and POP3. In this section we’ll discuss the Remote RADIUS option.

Default is Disable or select Enable to enable the website redirection feature.

Select whether to use either HTTP or HTTPS here. After selecting either http:// or https://, enter the URL of the website that will be used in the space provided.

Select to Enable or Disable the Captive Portal with its IP interface feature here.

VLAN Group :

Get IP From :

Enter the VLAN Group ID here

D-Link DAP-2620 User Manual

IP Address :

Subnet Mask :

Gateway :

DNS :

Radius Server:

Radius Port:

Remote Radius Type:

Assign a static IP address that is within the IP address range of your network.

Enter the subnet mask. All devices in the network must share the same subnet mask.

Enter the IP address of the gateway/router in your network.

Enter a DNS server IP address. This is usually the local IP address of your gateway/router.

Enter the RADIUS server’s IP address here

Enter the RADIUS server’s port number here

Enter the RADIUS server’s shared secret here

Select the remote RADIUS server type here. Currently, only SPAP will be used.

D-Link DAP-2620 User Manual

Authentication Settings- LDAP

The Captive Portal is a built-in web authentication server. When a station connects to an AP, the web browser will be redirected to a web authentication page. In this window, user can view and congure the Captive Portal settings. After selecting LDAP as the Authentication Type, we can congure the LDAP authentication that will be applied to each wireless client in this network.

Session timeout(1-1440)

Band :

SSID Index :

Authentication Type :

Web Redirection State :

URL Path :

IPIF Status :

VLAN Group :

Enter the session timeout value here. This value can

be from 1 to 1440 minutes. By default, this value is 60 minutes.

Select 2.4GHz or 5GHz.

Select the SSID for this Authentication.

Select the captive portal encryption type here. Options to choose from are Web Redirection, Username/Password, Passcode, Remote RADIUS, LDAP and POP3. In this section we’ll discuss the LDAP option.

Default is Disable or select Enable to enable the website redirection feature.

Select whether to use either HTTP or HTTPS here. After selecting either http:// or https://, enter the URL of the website that will be used in the space provided.

Select to Enable or Disable the Captive Portal with its IP interface feature here.

Enter the VLAN Group ID here

Get IP From :

IP Address :

Static IP (Manual) is chosen here. Choose this option if you do not have a DHCP server in your network, or if you wish to assign a static IP address to the DAP-

2620. When Dynamic IP (DHCP) is selected, the other elds here will be grayed out. Please allow about 2 minutes for the DHCP client to be functional once this selection is made.

Assign a static IP address that is within the IP address range of your network.

D-Link DAP-2620 User Manual

Subnet Mask :

Gateway :

DNS :

Server:

Port:

Authenticate Mode:

Username:

Password:

Base DN:

Account Attribute:

Identity:

Enter the subnet mask. All devices in the network must share the same subnet mask.

Enter the IP address of the gateway/router in your network.

Enter a DNS server IP address. This is usually the local IP address of your gateway/router.

Enter the LDAP server’s IP address or domain name here.

Enter the LDAP server’s port number here.

Select the authentication mode here. Options to choose from are Simple and TLS.

Enter the LDAP server account’s username here.

Enter the LDAP server account’s password here.

Enter the administrator’s domain name here

Enter the LDAP account attribute string here. This string will be used to search for clients.

Enter the identity’s full path string here. Alternatively, select the Auto Copy checkbox to automatically add the generic full path of the web page in the identity eld.

D-Link DAP-2620 User Manual

Authentication Settings- POP3

The Captive Portal is a built-in web authentication server. When a station connects to an AP, the web browser will be redirected to a web authentication page. In this window, user can view and congure the Captive Portal settings. After selecting POP3 as the Authentication Type, we can congure the POP3 authentication that will be applied to each wireless client in this network.

Session

timeout(1-1440) :

Band :

SSID Index :

Authentication Type :

Web Redirection State :

URL Path :

Enter the session timeout value here. This value can be from 1 to 1440 minutes. By default, this value is 60 minutes.

Select 2.4GHz or 5GHz.

Select the SSID for this Authentication.

Select the captive portal encryption type here. Options to choose from are Web Redirection, Username/Password, Passcode, Remote RADIUS, LDAP and POP3. In this section we’ll discuss the POP3 option.

Default is Disable or select Enable to enable the website redirection feature.

Select whether to use either HTTP or HTTPS here. After selecting either http:// or https://, enter the URL of the website that will be used in the space provided.

IPIF Status :

VLAN Group :

Get IP From :

Select to Enable or Disable the Captive Portal with its IP interface feature here.

Enter the VLAN Group ID here

Static IP (Manual) is chosen here. Choose this option if you do not have a DHCP server in your network, or if you wish to assign a static IP address to the DAP-2620. When Dynamic IP

D-Link DAP-2620 User Manual

(DHCP) is selected, the other elds here will be grayed out. Please allow about 2 minutes for the DHCP client to be functional once this selection is made.

IP Address :

Subnet Mask :

Gateway :

DNS :

Server:

Port:

Connection Type:

Assign a static IP address that is within the IP address range of your network.

Enter the subnet mask. All devices in the network must share the same subnet mask.

Enter the IP address of the gateway/router in your network.

Enter a DNS server IP address. This is usually the local IP address of your gateway/router.

Enter the POP3 server’s IP address or domain name here.

Enter the POP server’s port number here.

Select the connection type here. Options to choose from are None and SSL/TLS.

D-Link DAP-2620 User Manual

In this window, users can upload a custom login web page that will be used by the captive portal feature. Click the Browse button to navigate to the login style, located on the managing computer and then click the Upload button to initiate the upload.

Upload Login Style

From Local Hard Drive:

In this eld the path to the login style le, that will be uploaded, will be displayed. Alternatively, the path can be manually entered here.

Select the wireless band and login style that will be used in each SSID here. Click Download button to download the template le for login page and Click Del button to delete the template le.

D-Link DAP-2620 User Manual

IP Filter Settings

Enter the IP address or network address that will be used in the IP lter rule. For example, an IP address like 192.168.70.66 or a network address like 192.168.70.0. This IP address or network will be inaccessible to wireless clients in this network.

Wireless Band :

IP Address:

Subnet Mask:

Upload IP Filter File:

Download IP Filter File:

Wireless Band : Select 2.4GHz or 5GHz.

IP Address: Enter the IP address or network address

Subnet Mask: Enter the subnet mask of the IP address or networks address

Upload IP Filter File: To upload a IP lter list le, click Browse and navigate to the IP lter list le saved on the computer, and then click Upload.

Download IP Filter File: To download IP Filter list le, click Download and to save the IP Filter list.

D-Link DAP-2620 User Manual

MAC Bypass

The DAP-2620 features a wireless MAC Bypass. Once a user is nished with these settings, click the Save button to let the changes take eect.

Wireless Band:

SSID Index:

MAC Address:

MAC Address List:

Upload File:

Load MAC File to Local

Hard Driver:

Select the wireless band for MAC Bypass.

Select the SSID for MAC Bypass.

Enter each MAC address that you wish to include in your bypass list, and click Add.

When a MAC address is entered, it appears in this list. Highlight a MAC address and click the Delete icon to remove it from this list.

To upload a MAC bypass list le, click Browse and navigate to the MAC bypass list le saved on the computer, and then click Upload.

To download MAC bypass list le, click Download and to save the MAC bypass list.

D-Link DAP-2620 User Manual

DHCP Server

Dynamic Pool Settings

The DHCP address pool denes the range of the IP address that can be assigned to stations in the network. A Dynamic Pool allows wireless stations to receive an available IP with lease time control. If needed or required in the network, the DAP-2620 is capable of acting as a DHCP server.

Function Enable/Disable:

IP Assigned From:

The Range of Pool (1-254):

Subnet Mask:

Gateway:

WINS:

Dynamic Host Configuration Protocol (DHCP) assigns dynamic IP addresses to devices on the network. This protocol simplies network management and allows new wireless devices to receive IP addresses automatically without the need to manually assign new IP addresses. Select Enable to allow the DAP-2620 to function as a DHCP server.

Input the rst IP address available for assignment on your network.

Enter the number of IP addresses available for assignment. IP addresses are increments of the IP address specied in the “IP Assigned From” eld.

All devices in the network must have the same subnet mask to communicate. Enter the subnet mask for the network here.

Enter the IP address of the gateway on the network.

Specify the Windows Internet Naming Service (WINS) server address for the wireless network. WINS is a system that determines the IP address of a network computer that has a dynamically assigned IP address.

DNS:

Domain Name:

Lease Time:

Enter the IP address of the Domain Name System (DNS) server. The DNS server translates domain names such as www.dlink.com into IP addresses.

Enter the domain name of the network, if applicable. (An example of a domain name is: www.dlink.com.)

The lease time is the period of time before the DHCP server will assign new IP addresses.

D-Link DAP-2620 User Manual

Static Pool Setting

The DHCP address pool denes the range of IP addresses that can be assigned to stations on the network. A static pool allows specic wireless stations to receive a xed IP without time control.

Function Enable/Disable:

Assigned IP:

Assigned MAC Address:

Dynamic Host Configuration Protocol (DHCP) assigns IP addresses to wireless devices on the network. This protocol simplifies network management and allows new wireless devices to receive IP addresses automatically without the need to manually assign IP addresses. Select Enable to allow the DAP-2620 to function as a DHCP server.

Use the Static Pool Settings to assign the same IP address to a device every time you start up. The IP addresses assigned in the Static Pool list must NOT be in the same IP range as the Dynamic Pool. After you have assigned a static IP address to a device via its MAC address, click Apply; the device will appear in the Assigned Static Pool at the bottom of the screen. You can edit or delete the device in this list.

Enter the MAC address of the device requesting association here.

Subnet Mask:

Gateway:

WINS:

DNS:

Domain Name:

Dene the subnet mask of the IP address specied in the “IP Assigned From” eld.

Specify the Gateway address for the wireless network.

Specify the Windows Internet Naming Service (WINS) server address for the wireless network. WINS is a system that determines the IP address of a network computer with a dynamically assigned IP address, if applicable.

Enter the DNS server address for your wireless network.

Specify the domain name for the network.

D-Link DAP-2620 User Manual

Current IP Mapping List

This window displays information about the current assigned DHCP dynamic and static IP address pools. This information is available when you enable DHCP server on the AP and assign dynamic and static IP address pools.

Current DHCP Dynamic

Prole:

Binding MAC Address:

Assigned IP Address:

Lease Time:

Current DHCP Static Pools:

Binding MAC Address:

Assigned IP Address:

These are IP address pools the DHCP server has assigned using the dynamic pool setting.

The MAC address of a device on the network that is assigned an IP address from the DHCP dynamic pool.

The current corresponding DHCP-assigned IP address of the device.

The length of time that the dynamic IP address will be valid.

These are the IP address pools of the DHCP server assigned through the static pool settings.

The MAC address of a device on the network that is within the DHCP static IP address pool.

The current corresponding DHCP-assigned static IP address of the device.

Binding MAC Address:

Assigned IP Address:

The MAC address of a device on the network that is assigned an IP address from the DHCP dynamic pool.

The current corresponding DHCP-assigned static IP address of the device.

D-Link DAP-2620 User Manual

Filters

Wireless MAC ACL

This page allows the user to congure Wireless MAC ACL settings for access control.

Wireless Band:

Access Control List:

MAC Address:

MAC Address List:

Current Client

Information:

Displays the current wireless band rate.

Select Disable to disable the lters function.

Select Accept to accept only those devices with MAC addresses in the Access Control List. All other devices not on the list will be rejected.

Select Reject to reject the devices with MAC addresses on the Access Control List. All other devices not on the list will be accepted.

Enter each MAC address that you wish to include in your lter list, and click Apply.

When you enter a MAC address, it appears in this list. Highlight a MAC address and click Delete to remove it from this list.

This table displays information about all the current connected stations.

D-Link DAP-2620 User Manual

This page allows the user to congure a WLAN Partition.

WLAN Partition

Wireless Band:

Link Integrity:

Ethernet WLAN Access:

Internal Station Connection:

Displays the current wireless band.

Select Enable or Disable. If the Ethernet connection between the LAN and the AP is disconnected, enabling this feature will cause the wireless segment associated with the AP to be disassociated from the AP.

The default is Enable. When disabled, all data from the Ethernet to associated wireless devices will be blocked. Wireless devices can still send data to the Ethernet.

The default value is Enable, which allows stations to intercommunicate by connecting to a target AP. When disabled, wireless stations cannot exchange data on the same Multi-SSID. In Guest mode, wireless stations cannot exchange data with any station on your network.

D-Link DAP-2620 User Manual

Trac Control

Uplink/Downlink Setting

The uplink/downlink setting allows users to customize the downlink and uplink interfaces including specifying downlink/uplink bandwidth rates in Mbits per second. These values are also used in the QoS and Trac Manager windows. Once the desired uplink and downlink settings are nished, click the Save button to let your changes take eect.

Downlink Bandwidth:

Uplink Bandwidth:

The downlink bandwidth in Mbits per second.

Uplink Bandwidth: The uplink bandwidth in Mbits per second.

D-Link DAP-2620 User Manual

QoS

Quality of Service (QoS) enhances the experience of using a network by prioritizing the trac of dierent applications. The DAP-2620 supports four priority levels. Once the desired QoS settings are nished, click the Save button to let your changes take eect.

Enable QoS:

Downlink Bandwidth:

Uplink Bandwidth:

Check this box to allow QoS to prioritize trac. Use the drop-down menus to select the four levels of priority. Click the Save button when you are nished.

Downlink Bandwidth: The downlink bandwidth in Mbits per second. This value is entered in the Uplink/Downlink Setting window.

Uplink Bandwidth: The uplink bandwidth in Mbits per second. This value is entered in the Uplink/Downlink Setting window.

D-Link DAP-2620 User Manual

Trac Manager

The trac manager feature allows users to create trac management rules that specify how to deal with listed client trac and specify downlink/ uplink speed for new trac manager rules. Click the Save button to let your changes take eect.

Trac Manager:

Unlisted Client Trac:

Downlink Bandwidth:

Uplink Bandwidth:

Use the drop-down menu to Enable the trac manager feature.

Select Deny or Forward to determine how to deal with unlisted client trac.

The downlink bandwidth in Mbits per second. This value is entered in the Uplink/Downlink Setting window.

Uplink Bandwidth:The uplink bandwidth in Mbits per second. This value is entered in the Uplink/Downlink Setting window.

D-Link DAP-2620 User Manual

Status

In the Status Section the user can monitor and view conguration settings of the access point. Here the user can also view statistics about client information, WDS information and more. The following pages will explain settings found in the Status section in more detail.

D-Link DAP-2620 User Manual

Device Information

This page displays the current information like rmware version, Ethernet and wireless parameters, as well as the information regarding CPU and memory utilization.

Device Information: This read-only window displays the

configuration settings of the DAP-2620, including the firmware version and the device’s MAC address.

D-Link DAP-2620 User Manual

Client Information

This page displays the associated clients SSID, MAC, band, authentication method, signal strength, and power saving mode for the DAP-2620 network.

Client Information:

SSID:

MAC:

Band:

Authentication:

RSSI:

Power Saving Mode:

This window displays the wireless client information for clients currently connected to the DAP-2620.

Displays the SSID of the client.

Displays the MAC address of the client.

Displays the wireless band that the client is connected to.

Displays the type of authentication being used.

Displays the client’s signal strength.

Displays the status of the power saving feature.

D-Link DAP-2620 User Manual

WDS Information Page

This page displays the access points SSID, MAC, band, authentication method, signal strength, and status for the DAP-2620’s Wireless Distribution System network.

WDS Information:

Name:

MAC:

Authentication:

Signal:

Status:

This window displays the Wireless Distribution System information for clients currently connected to the DAP-2620.

Displays the SSID of the client.

Displays the MAC address of the client.

Displays the type of authentication being used.

Displays the client’s signal strength.

Displays the status of the power saving feature.

D-Link DAP-2620 User Manual

Channel Analyze

Wireless Band:

Detect:

AP List:

Select either 2.4Ghz or 5GHz.

Click the Detect button to scan.

This will list the transmitting channels and quality.

D-Link DAP-2620 User Manual

Stats Page

Ethernet Trac Statistics

Displays wired interface network trac information.

Ethernet Trac Statistics: This page displays transmitted and received

count statistics for packets and bytes.

D-Link DAP-2620 User Manual

WLAN Trac Statistics

Displays throughput, transmitted frame, received frame, and WEP frame error information for the AP network.

WLAN Trac Statistics: This page displays wireless network

statistics for data throughput, transmitted and received frames, and frame errors.

D-Link DAP-2620 User Manual

Log

View Log

The AP’s embedded memory holds logs here. The log information includes but is not limited to the following items: cold start AP, upgrading rmware, client associate and disassociate with AP, and web login. The web page holds up to 500 logs.

View Log: The AP’s embedded memory displays

system and network messages including a time stamp and message type. The log information includes but is not limited to the following items: cold start AP, upgrading rmware, client associate and disassociate with AP, and web login. The web page holds up to 500 logs.

D-Link DAP-2620 User Manual

Log Settings

Enter the log server’s IP address to send the log to that server. Check or uncheck System Activity, Wireless Activity, or Notice to specify what kind of log type you want it to log.

Log Server/IP Address:

Log Type:

E-mail Notication:

E-mail Log Schedule:

Enter the IP address of the server you would like to send the DAP-2620 log to.

Check the box for the type of activity you want to log. There are three types: System Activity, Wireless Activity, and Notice.

Support Simple Mail Transfer Protocol for log schedule and periodical change key. It can not support Gmail SMTP port 465. Please set to Gmail SMTP port 25 or 587.

Use the drop-down menu to set the e-mail log schedule.

D-Link DAP-2620 User Manual

Maintenance Section

D-Link DAP-2620 User Manual

Administration

Limit Administrator

Check one or more of the ve main categories to display the various hidden administrator parameters and settings displayed on the next ve pages. Each of the ve main categories display various hidden administrator parameters and settings.

Limit Administrator VLAN

ID:

Limit Administrator IP:

IP Range:

Check the box provided and the enter the specic VLAN ID that the administrator will be allowed to log in from.

Check to enable the Limit Administrator IP address.

Enter the IP address range that the administrator will be allowed to log in from and then click the Add button.

D-Link DAP-2620 User Manual

System Name Settings

Each of the ve main categories display various hidden administrator parameters and settings.

System Name:

Location:

The name of the device. The default name is D-Link DAP-2620.

The physical location of the device, e.g. 72nd Floor, D-Link HQ.

Each of the ve main categories display various hidden administrator parameters and settings.

User Name:

Old Password:

New Password:

Conrm Password:

Enter a user name. The default is admin.

When changing your password, enter the old password here.

When changing your password, enter the new password here. The password is case-sensitive. “A” is a dierent character than “a.” The length should be between 0 and 12 characters.

Enter the new password a second time for conrmation purposes.

Console Settings

Each of the ve main categories display various hidden administrator parameters and settings.

Status:

Console Protocol:

Time-out:

Status is enabled by default. Uncheck the box to disable the console.

Select the type of protocol you would like to use, Telnet or SSH.

Set to 1 Min, 3 Mins, 5 Mins, 10 Mins, 15 Mins or Never.

D-Link DAP-2620 User Manual

SNMP Settings

Each of the ve main categories display various hidden administrator parameters and settings.

Status:

Public Community String:

Private Community String:

Check the box to enable the SNMP functions. This is enabled by default.

Enter the public SNMP community string.

Enter the private SNMP community string.

D-Link DAP-2620 User Manual

Administration

Central WiFiManager Settings

The Central WiFiManager section is used to create a set of APs on the Internet to be organized into a single group in order to increase ease of management. Central WiFiManager and AP Array are mutually exclusive functions.

Enable Central

WiFiManager:

Select to enable or disable the Central WiFiManager.

D-Link DAP-2620 User Manual

Firmware and SSL Upload

This page allows the user to perform a rmware upgrade. A Firmware upgrade is a function that upgrade the running software used by the access point. This is a useful feature that prevents future bugs and allows for new features to be added to this product. Please go to your local D-Link website to see if there is a newer version rmware available.

Firmware and SSL

Certication Upload:

Upload Firmware from

Local Hard Drive:

Upload SSL Certication

from Local Hard Drive:

You can upload les to the access point.

The current rmware version is displayed above the le location eld. After the latest rmware is downloaded, click on the “Choose File” button to locate the new rmware. Once the le is selected, click on the “Open” and “Upload” button to begin updating the rmware. Please don’t turn the power o while upgrading.

After you have downloaded a SSL certication to your local drive, click “Choose File.” Select the certication and click “Open” and “Upload” to complete the upgrade.

D-Link DAP-2620 User Manual

Conguration File Upload

This page allows the user to backup and recover the current conguration of the access point in case of a unit failure.

Conguration File Upload

and Download:

Upload Conguration File:

Download Conguration

File:

You can upload and download conguration les of the access point.

Browse to the saved conguration le you have in local drive and click “Open” and “Upload” to update the conguration.

Click “Download” to save the current conguration le to your local disk. Note that if you save one conguration le with the administrator’s password now, after resetting your DAP-2620 and then updating to this saved conguration le, the password will be gone.

D-Link DAP-2620 User Manual

Time and Date Settings

Enter the NTP server IP, choose the time zone, and enable or disable daylight saving time.

Current Time:

Enable NTP Server:

NTP Server:

Time Zone:

Enable Daylight

Saving:

Daylight Saving

Dates:

Set the Date and

Time Manually:

Displays the current time and date settings.

Check to enable the AP to get system time from an NTP server from the Internet.

Enter the NTP server IP address.

Use the drop-down menu to select your correct Time Zone.

Check the box to enable Daylight Saving Time.

Use the drop-down menu to select the correct Daylight Saving oset.

A user can either manually set the time for the AP here, or click the Copy Your Computer’s Time Settings button to copy the time from the computer in use (Make sure that the computer’s time is set correctly).

D-Link DAP-2620 User Manual

Conguration and System

These options are the remaining option to choose from in the top menu. Conguration allows the user to save and activate or discard the congurations done. System allows the user to restart the unit, perform a factory reset or clear the language pack settings. Logout allows the user to safely log out from the access point’s web conguration. Help allows the user to read more about the given options to congure without the need to consult the manual. The following pages will explain settings found in the conguration and system section in more detail.

D-Link DAP-2620 User Manual

System Settings

On this page the user can restart the unit, perform a factory reset of the access point or clear the added language pack.

Restart the Device:

Restore to Factory Default

Settings:

Clear Language Pack:

Click Restart to restart the DAP-2620.

Click Restore to restore the DAP-2620 back to factory default settings.

Click to clear the current Language pack running.

D-Link DAP-2620 User Manual

Help

The help page is useful to view a brief description of a function available on the access point in case the manual is not present.

Help: Scroll down the Help page for topics and

explanations.

D-Link DAP-2620 User Manual

Federal Communication Commission Interference Statement

This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment o and on, the user is encouraged to try to correct the interference by one of the following measures:

- Reorient or relocate the receiving antenna.

- Increase the separation between the equipment and receiver.

- Connect the equipment into an outlet on a circuit dierent from that to which the receiver is connected.

- Consult the dealer or an experienced radio/TV technician for help.

FCC Caution:

Any changes or modications not expressly approved by the party responsible for compliance could void the user’s authority to operate this equipment.

This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.

Operations in the 5.15-5.25GHz band are restricted to indoor usage only.

Radiation Exposure Statement:

This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 24cm between the radiator & your body.

D-Link DAP-2620 User Manual

Registration

Product registration is entirely voluntary and failure to complete or return this form will not diminish your warranty rights.

Version 1.00

March 19, 2019

D Link AP2620A1 User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual