D-link DAP-2230 User Manual

Preface

D-Link reserves the right to revise this publication and to make changes in the content hereof without obligation to notify any person or organization of such revisions or changes.

Manual Revisions

Revision Date Description

1.00 June 30, 2015 • Initial release for revision A1

Trademarks

D-Link and the D-Link logo are trademarks or registered trademarks of D-Link Corporation or its subsidiaries in the United States or other countries. All other company or product names mentioned herein are trademarks or registered trademarks of their respective companies.

iD-Link DAP-2230 User Manual

Table of Contents

Preface ................................................................................. i

Product Overview ..............................................................1

Package Contents .........................................................................1

System Requirements ................................................................. 2

Introduction ................................................................................... 3

Features ............................................................................................4

Hardware Overview .....................................................................5

Top Panel ................................................................................. 5

Hardware Overview .....................................................................6

Bottom Panel ..........................................................................6

Physical Installation ..........................................................7

Before You Begin ................................................................... 7

Connect to your Network .......................................................... 8

Method 1 - Powered by PoE Switch ...............................8

Method 2 - Powered by PoE Injector ............................. 9

Method 3 - DC Adapter .....................................................10

Mounting the AP ........................................................................11

Wireless Installation Considerations ....................................12

Four Operational Modes .................................................13

Access Point mode ........................................................16

WDS with AP mode ......................................................18

WDS mode .......................................................................20

Wireless Client mode ....................................................22

Authentication Types ........................................................24

Open System/Shared Key Authentication ...........24

WPA/WPA2-Personal Authentication ......................25

WPA/WPA2-Enterprise Authentication ..................26

802.1x Authentication ..................................................27

LAN .........................................................................................28

IPv6 ..........................................................................................29

Advanced Settings .....................................................................30

Performance .........................................................................30

Wireless Resource Control .......................................................32

Multi-SSID ..............................................................................34

VLAN ........................................................................................35

VLAN List ...........................................................................35

Port List ..............................................................................36

Add/Edit VLAN ................................................................37

PVID Setting .....................................................................38

Intrusion .................................................................................39

Conguration ................................................................... 14

Web-based Conguration Utility ..........................................14

Save and Activate Settings ......................................................15

Basic Settings ...............................................................................16

Wireless .................................................................................16

Schedule ................................................................................40

Internal RADIUS Server ..................................................... 41

ARP Spoong Prevention Settings ...............................42

Bandwidth Optimization .................................................43

AP Array ..................................................................................45

iiD-Link DAP-2230 User Manual

Table of Contents

AP Array Scan ..................................................................45

Conguration Settings .................................................46

Auto-RF ..............................................................................47

Load Balance ...................................................................48

Captive Portal Authentication........................................49

Web Redirection Only ..................................................49

Username/Password .....................................................50

Passcode ...........................................................................51

Remote Radius ................................................................52

LDAP ...................................................................................53

POP3 ...................................................................................55

IP Filter ....................................................................................57

MAC Bypass...........................................................................58

DHCP Server ........................................................................59

Client Information ..............................................................68

WDS Information ................................................................69

Channel Analyze .................................................................70

Statistics .................................................................................71

Ethernet .............................................................................71

WLAN Trac ....................................................................72

Log ...........................................................................................73

View Log ............................................................................73

Log Settings .....................................................................74

Maintenance ...............................................................................76

Administration Settings ...................................................76

Limit Administrator .......................................................77

System Name Settings .................................................78

Console Settings ............................................................80

SNMP Settings ................................................................81

Status: .................................................................................82

Dynamic Pool Settings .................................................59

Static Pool Setting .........................................................60

Current IP Mapping List ...............................................61

Filters .......................................................................................62

Wireless MAC ACL ..........................................................62

WLAN Partition ...............................................................63

Trac Control .......................................................................64

Uplink/Downlink Settings ..........................................64

QoS ......................................................................................65

Trac Manager ...............................................................66

Status .............................................................................................67

Device Information ............................................................67

Ping Control .....................................................................82

Central WiFiManager Settings ................................... 83

Firmware and SSL Certication Upload ..............................84

Conguration File Upload .......................................................85

Time and Date .............................................................................86

System ....................................................................................87

System Settings ..............................................................87

Help .................................................................................................88

Wireless Security .............................................................89

What is WEP? ................................................................................90

Congure WEP .............................................................................91

iiiD-Link DAP-2230 User Manual

Table of Contents

What is WPA? ................................................................................92

Congure WPA/WPA2 Personal .............................................93

Congure WPA/WPA2 Enterprise ..........................................94

Connect to a Wireless Network ....................................... 95

Using Windows

XP ....................................................................95

Congure WPA-PSK ....................................................................96

Using Windows Vista

...............................................................98

Congure WPA-PSK ................................................................. 100

Using Windows

7 .................................................................... 101

Troubleshooting ............................................................104

Wireless Basics ...............................................................108

What is Wireless? ...................................................................... 109

Tips ................................................................................................111

Wireless Modes .........................................................................112

Networking Basics .........................................................113

Check your IP address ............................................................ 113

Statically Assign an IP address ............................................ 114

Technical Specications ................................................115

Antenna Pattern ............................................................ 117

Regulatory Information ................................................118

ivD-Link DAP-2230 User Manual

Section 1 - Product Overview

Package Contents

DAP-2230 Wireless N PoE Access Point

12 V DC, 1 A Power Adapter (included with some models)

Wall mounting bracket with mounting kit

Quick Installation Guide

If any of the above items are missing, please contact your reseller.

Note: Using a power supply with a dierent voltage rating will cause damage and void the warranty for this product.

1D-Link DAP-2230 User Manual

Section 1 - Product Overview

Network Requirements

System Requirements

• An Ethernet-based Network

• IEEE 802.11n/g wireless clients (AP Mode)

• IEEE 802.11n/g wireless network (AP Mode)

Computer with the following:

• Windows®, Macintosh, or Linux-based operating system

• An installed Ethernet adapter

Web-based Conguration

Utility Requirements

Browser Requirements:

• Microsoft Internet Explorer® 7, Mozilla® Firefox® 12.0, Google® Chrome 20.0, or Safari® 4 or higher

Windows

Visit www.java.com to download the latest version.

Users: Make sure you have the latest version of Java installed.

2D-Link DAP-2230 User Manual

Section 1 - Product Overview

Introduction

The D-Link DAP-2230 Wireless N PoE Access Point is an 802.11n compliant device that delivers real world performance of up to 300 Mbps* while still maintaining backwards compatibility with slower 802.11g and 802.11b devices. The DAP-2230 increases productivity by allowing you to work faster and more eciently. With the DAP-2230, bandwidth-intensive applications like graphics or multimedia will benet signicantly because large les are now able to move across the network more quickly. Create a secure wireless network to share photos, les, music, video, printers, and network storage outside of your normal internal networking environment. Built to withstand harsh environments, the DAP-2230 also excels in connecting separate networks that cannot be joined physically using a traditional medium. The built-in omni-directional 3 dBi antenna is designed to deliver high performance, ensuring that wireless coverage will cover even hard to reach locations. The DAP-2230 is an ideal solution for quickly creating and extending a wireless local area network (WLAN) in oces or other workplaces, hotels, resorts, trade shows, and special events.

The DAP-2230 features four dierent operation modes: Access Point, Wireless Distribution System (WDS), WDS with AP, and Wireless Client mode, allowing it to adapt to many situations. As a standard wireless Access Point (AP) the DAP-2230 can connect to a wide range of devices that are 802.11 n/g/b compliant. In WDS mode it can expand current wireless coverage without the need for a wired backbone link. As a wireless client it can connect to an existing AP, and expand the network physically with the built-in 10/100 Ethernet port.

The DAP-2230 supports 64/128-bit WEP data encryption and WPA/WPA2 security functions. In addition, it provides MAC Address Filtering to control user access, and the Disable SSID Broadcast function to limit unauthorized access to the internal network. Network administrators have multiple options for managing the DAP-2230, including Web (HTTP) or Secured Web (HTTPS). For advanced network management, administrators can use SNMP v1, v2c, v3 to congure and manage access points.

*Maximum wireless signal rate derived from IEEE Standard 802.11n and 802.11g specications. Actual data throughput may vary. Network conditions and environmental factors, including volume of network trac, building materials and construction, and network overhead can lower actual data throughout rate.

3D-Link DAP-2230 User Manual

Section 1 - Product Overview

• Faster Wireless Networking - The DAP-2230 provides an up to 300 Mbps* wireless connection with other 802.11n wireless clients. This capability allows users to participate in real-time activities online, such as video streaming, online gaming, and real-time audio.

• Compatible with IEEE802.11g Devices - The DAP-2230 is still fully compatible with the 802.11g standards, so it can connect with existing 802.11g adapters.

• Four dierent operation modes - Capable of operating in one of four dierent operation modes to meet your wireless

networking needs: Access Point, WDS with AP, WDS, and Wireless Client.

• Power over Ethernet - The DAP-2230 supports IEEE 802.3af PoE (Power over Ethernet) which enables it to be supplied with power over an Ethernet cable or IEEE 802.3af PoE switch.

Features

• Comprehensive Web-Interface - Fine tune network settings using the DAP-2230’s robust network-based conguration software.

• Central WiFiManager management software compatibility - The real-time display of the network’s topology and AP’s information makes network conguration and management of multiple devices quick and simple.

• SNMP for management - The DAP-2230 supports SNMP v1, v2c, and v3 for better network management. Superior wireless AP manager software is bundled with the DAP-2230 for network conguration and rmware upgrade. Systems administrators can also set up the DAP-2230 easily with the Web-based conguration utility.

• Convenient Installation - The DAP-2230 features a wall mount in the rear for easy setup on walls.

4D-Link DAP-2230 User Manual

Section 1 - Product Overview

Hardware Overview

Top Panel

Power/Status LED

Static Green Ready/Working Properly Flashing Green Transmitting/Receiving data

Flashing Red Malfunction during boot Solid Red Boot failure

5D-Link DAP-2230 User Manual

Section 1 - Product Overview

Hardware Overview

Bottom Panel

1 2 3 4

1 Security Lock Physically secure your device with this lock. 2 Power Connector Connector for a power adapter.

3 10/100 LAN (PoE)Port

4 Reset Button

Connect an Ethernet cable to this device and your network. Power may be supplied to this port via a LAN cable that is connected to a PoE injector or PoE switch.

Press and hold the reset button with a paperclip for at least 5 seconds to reset the device back to the factory default settings. The LED will turn on for 2 seconds and then begin the reboot process.

6D-Link DAP-2230 User Manual

Section 2 - Installation

Physical Installation

Before You Begin

This chapter describes safety precautions and product information that you must know and check before installing this product.

Professional Installation Required

1. Please seek assistance from a professional installer who is well trained in RF installation and knowledgeable about local regulations.

2. This product is distributed through distributors and system installers with professional technicians and is not to be sold directly through retail stores.

7D-Link DAP-2230 User Manual

Section 2 - Installation

Connect to your Network

To power the access point, you can use one of the following 3 methods:

Method 1 - Powered by PoE Switch Method 2 - Powered by PoE Injector Method 3 - Powered by DC Adapter

Method 1 - Powered by PoE Switch

1. Connect one end of an Ethernet cable into the LAN (PoE) port on the DAP-2230 and then connect the other end to a PoE switch.

DAP-2230

PoE Switch

8D-Link DAP-2230 User Manual

Section 2 - Installation

Method 2 - Powered by PoE Injector

If you wish to power the DAP-2230 without a PoE switch, we suggest you use a PoE injector, such as a DPE-101GI.

1. Connect one end of an Ethernet cable into the DATA IN port on the PoE injector and the other end into a port on a switch, router, or computer.

2. Connect one end of a dierent Ethernet cable into the P+DATA OUT port on the PoE injector and the other end into the LAN (PoE) port on the DAP-2230 access point.

3. Connect the supplied power adapter to the POWER IN connector on the PoE Injector.

4. Plug the power adapter into a power outlet.

Power adapter

DAP-2230

PoE Base Unit

PC Switch

9D-Link DAP-2230 User Manual

Section 2 - Installation

Method 3 - DC Adapter

A power adapter is included with some DAP-2230 models.

1. Connect an Ethernet cable from your network device to the LAN(PoE) port on the DAP-2230.

2. Connect the supplied power adapter to the DC IN connector on the DAP-2230.

3. Plug the power adapter into a power outlet.

DAP-2230

Power Adapter

Switch or Router

10D-Link DAP-2230 User Manual

Section 2 - Installation

Mounting the AP

Place the mounting bracket on a wall or ceiling and mark holes where you will insert the screws with a marker. Drill holes in the marked points and insert the plastic wall anchors.

Use the supplied screws to attach the mounting plate to the wall.

Reattach the DAP-2230 to the mounting bracket.

11D-Link DAP-2230 User Manual

Section 2 - Installation

Wireless Installation Considerations

The D-Link DAP-2230 Wireless N PoE Access Point lets you access your network using a wireless connection from virtually anywhere within the operating range of your wireless network. Keep in mind, however, that the number, thickness and location of walls, ceilings, or other objects that the wireless signals must pass through, may limit the range. Typical ranges vary depending on the types of materials and background RF (radio frequency) noise in your home or business. The key to maximizing wireless range is to follow these basic guidelines:

1. Keep the number of walls and ceilings between the D-Link access point and other network devices to a minimum. Each wall or ceiling can reduce your adapter’s range from 3-90 feet (1-30 meters). Position your devices so that the number of walls or ceilings is minimized.

2. Be aware of the direct line between network devices. A wall that is 1.5 feet thick (.5 meters), at a 45-degree angle appears to be almost 3 feet (1 meter) thick. At a 2-degree angle it looks over 42 feet (14 meters) thick! Position devices so that the signal will travel straight through a wall or ceiling (instead of at an angle) for better reception.

3. Building materials make a dierence. A solid metal door or aluminum studs may have a negative eect on range. Try to position access points, wireless access points, and computers so that the signal passes through drywall or open doorways. Materials and objects such as glass, steel, metal, walls with insulation, water (sh tanks), mirrors, le cabinets, brick, and concrete will degrade your wireless signal.

4. Keep your product away (at least 3-6 feet or 1-2 meters) from electrical devices or appliances that generate RF noise.

5. If you are using 2.4 Ghz cordless phones or X-10 (wireless products such as ceiling fans, lights, and home security systems), your wireless connection may degrade dramatically or drop completely. Make sure your 2.4 Hz phone base is as far away from your wireless devices as possible. The base transmits a signal even if the phone is not in use.

12D-Link DAP-2230 User Manual

Section 2 - Installation

Four Operational Modes

Operation Mode

(Only supports 1 mode at a time)

Access Point (AP) Create a wireless LAN

WDS with AP

WDS Wirelessly connect multiple networks

Wireless Client

Function

Wirelessly connect multiple networks while still functioning as a wireless AP

AP acts as a wireless network adapter for your Ethernet-enabled device

13D-Link DAP-2230 User Manual

Section 3 - Conguration

Conguration

This section will show you how to congure your new D-Link Wireless N PoE Access Point using the web-based conguration utility.

Web-based Conguration Utility

If you wish to change the default settings or optimise the performance of the DAP-2230, you may use the webbased conguration utility.

To access the conguration utility, open a web browser such as Internet Explorer and enter http://192.168.0.50

Type admin and then enter your password. Leave the password blank by default.

If you get a Page Cannot be Displayed error, please refer to “Troubleshooting” on page 104 for assistance.

14D-Link DAP-2230 User Manual

Section 3 - Conguration

After successfully logging into the DAP-2230, the following screen will appear:

Save and Activate Settings

When making changes on most of the conguration screens in this section, use the screen to save (not activate) your conguration changes.

You may change settings to multiple pages before activating. Once you are nished, click the Conguration button located at the top of the page and then click Save and Activate.

button at the bottom of each

15D-Link DAP-2230 User Manual

Section 3 - Conguration

Basic Settings

Wireless

Access Point mode

Wireless

Band:

Mode: Select Access Point from the drop-down menu.

Network

Name

(SSID):

SSID

Visibility:

Auto

Channel

Selection:

Select 2.4 Ghz from the drop-down menu.

The other three choices are WDS with AP, WDS, and wireless Client.

Service Set Identier (SSID) is the name designated for a specic wireless local area network (WLAN). The SSID’s factory default setting is dlink. The SSID can be easily changed to connect to an existing wireless network or to establish a new wireless network. The SSID can be up to 32 characters and is case-sensitive.

Enable or Disable SSID visibility. Enabling this feature broadcasts the SSID across the network, thus making it visible to all network users. This feature is enabled by default.

Enabling this feature automatically selects the channel that provides the best wireless performance. Enable is set by default. The channel selection process only occurs when the AP is booting up.

Channel: All devices on the network must share the same channel. To change the

channel, rst toggle the Auto Channel Selection setting to Disable, and then use the drop-down menu to make the desired selection.

Note: The wireless adapters will automatically scan and match the wireless settings.

16D-Link DAP-2230 User Manual

Section 3 - Conguration

Channel

Width:

Authentication: Use the drop-down menu to choose Open System, Shared Key, WPA-

Allows you to select the channel width you would like to operate in. Select 20 MHz if you are not using any 802.11n wireless clients. Auto 20/40 MHz allows you to connect to both 802.11n and 802.11b/g wireless devices on your network.

Personal, WPA-Enterprise, or 802.11x.

Select Open System to communicate the key across the network.

Select Shared Key to limit communication to only those devices that share the same WEP settings. If multi-SSID is enabled, this option is not available.

Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.

Select WPA-Enterprise to secure your network with the inclusion of a RADIUS server.

Select 802.1x to secure your network using 802.1x authentication.

17D-Link DAP-2230 User Manual

Section 3 - Conguration

WDS with AP mode

In WDS with AP mode, the DAP-2230 wirelessly connects multiple networks while still functioning as a wireless AP.

Wireless

Band:

Mode: WDS with AP mode is selected from the drop-down menu.

Network

Name

(SSID):

SSID

Visibility:

Auto

Channel

Selection:

Channel: To change the channel, use the drop-down menu to make the desired

Select 2.4 Ghz from the drop-down menu.

The other three choices are Access Point, WDS, and wireless Client.

Enable or Disable SSID visibility. Enabling this feature broadcasts the SSID across the network, thus making it visible to all network users.

Enabling this feature automatically selects the channel that will provide the best wireless performance. This feature is not supported in WDS with AP mode. The channel selection process only occurs when the AP is booting up.

selection. (Note: The wireless adapters will automatically scan and match the wireless settings.)

Channel

Width:

Remote AP

MAC Address:

Site Survey: Click on the Scan button to search for available wireless networks, then click

Indicates whether the device is capable of 20 MHz operation only or both 20 MHz and 40 MHz operation.

Enter the MAC addresses of the APs on your network that will serve as bridges to wirelessly connect multiple networks.

on the available network that you want to connect with.

18D-Link DAP-2230 User Manual

Section 3 - Conguration

Authentication: Use the drop-down menu to choose Open System or WPA-Personal.

Select Open System to communicate the key across the network.

Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.

19D-Link DAP-2230 User Manual

Section 3 - Conguration

WDS mode

In WDS mode, the DAP-2230 wirelessly connects multiple networks, without functioning as a wireless AP.

Wireless

Band:

Mode: WDS is selected from the drop-down menu.

Network

Name

(SSID):

SSID

Visibility:

Auto

Channel

Selection:

Channel: To change the channel, use the drop-down menu to make the desired

Select 2.4 Ghz from the drop-down menu.

The other three choices are Access Point, WDS with AP, and wireless Client.

Enable or Disable SSID visibility. Enabling this feature broadcasts the SSID across the network, thus making it visible to all network users.

selection. (Note: The wireless adapters will automatically scan and match the wireless settings.)

Channel

Width:

Remote AP MAC

Address:

Site Survey: Click on the Scan button to search for available wireless networks, then click

Indicates whether the device is capable of 20 MHz operation only or both 20 MHz and 40 MHz operation.

Enter the MAC addresses of the APs on your network that will serve as bridges to wirelessly connect multiple networks.

on the available network that you want to connect with.

20D-Link DAP-2230 User Manual

Section 3 - Conguration

Authentication: Use the drop-down menu to choose Open System or WPA-Personal.

Select Open System to communicate the key across the network.

Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.

21D-Link DAP-2230 User Manual

Section 3 - Conguration

Wireless Client mode

Wireless

Band:

Mode: Wireless Client is selected from the drop-down menu.

Network

Name

(SSID):

SSID

Visibility:

Auto

Channel

Selection:

Channel: To change the channel, use the drop-down menu to make the desired

Select 2.4 Ghz from the drop-down menu.

The other three choices are Access Point, WDS with AP, and WDS.

Enable or Disable SSID visibility. Enabling this feature broadcasts the SSID across the network, thus making it visible to all network users. Disabling SSID is not supported in Wireless Client mode.

Enabling this feature automatically selects the channel that will provide the best wireless performance. This feature is automatically enabled in Wireless Client mode. The channel selection process only occurs when the AP is booting up.

selection. (Note: The wireless adapters will automatically scan and match the wireless settings.)

Channel

Width:

Indicates whether the device is capable of 20 MHz operation only or both 20 MHz and 40 MHz operation.

Click on the Scan button to search for available wireless networks, then click on the available network that you want to connect with.

22D-Link DAP-2230 User Manual

Section 3 - Conguration

Authentication: Use the drop-down menu to choose Open System or WPA-Personal.

Select Open System to communicate the key across the network.

Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.

Wireless Mac

Clone Enable:

MAC Source: Select the MAC source from the drop-down menu.

MAC Address: Enter the MAC address that you would like to assign to the access point.

Check to enable clone MAC. This feature will allow you to change the MAC address of the access point to the MAC address of a client.

23D-Link DAP-2230 User Manual

Section 3 - Conguration

Authentication Types

Each of the wireless modes on the DAP-2230 support dierent types of wireless encryption security standards. Not every mode supports all types of encryption.

Open System/Shared Key Authentication

All wireless modes on the DAP-2230 support Open System/Shared Key Authentication.

Encryption Use the radio button to disable or enable encryption.

Key Type: Select HEX

Key Size: Select 64 Bits or 128 Bits.

Key Index

(1-4):

Key: Input up to four keys for encryption. You will select one of these keys in

Select the 1st through the 4th key to be the active key:

the Key Index drop-down menu.

*Hexadecimal (HEX) digits consist of the numbers 0-9 and the letters A-F.

**ASCII (American Standard Code for Information Interchange) is a code that

represents English letters using numbers ranging from 0-127.

or ASCII**.

24D-Link DAP-2230 User Manual

Section 3 - Conguration

WPA/WPA2-Personal Authentication

WPA/WPA2 Personal Authentication can be enabled for Access Point, WDS with AP, WDS, and Wireless Client modes.

WPA Mode: When WPA-Personal is selected for Authentication type, you must also select

a WPA mode from the drop-down menu: AUTO (WPA or WPA2), WPA2 Only, or WPA Only. WPA and WPA2 use dierent algorithms. AUTO (WPA or WPA2) allows you to use both WPA and WPA2.

Cipher Type: When you select WPA-Personal, you must also select AUTO, AES, or TKIP

from the drop-down menu.

Group Key

Update:

Periodical

Key Change:

PassPhrase: When you select WPA-Personal, please enter a PassPhrase in the

Conrm

PassPhrase:

Select the interval during which the group key will be valid. The default value of 3600 is recommended. Select Manual to enter your key (PassPhrase). You can select Periodical Key Change to have the access point automatically change your PassPhrase.

Enter the Activate From time and the time in hours to change the key.

corresponding eld.

Type the passphrase again to guard against typos.

25D-Link DAP-2230 User Manual

Section 3 - Conguration

WPA/WPA2-Enterprise Authentication

WPA/WPA2 Enterprise Authentication can only be enabled for Access Point mode.

WPA Mode: When WPA-Enterprise is selected, you must also select a WPA mode from

the drop-down menu: AUTO (WPA or WPA2), WPA2 Only, or WPA Only. WPA and WPA2 use dierent algorithms. AUTO (WPA or WPA2) allows you to use both WPA and WPA2.

Cipher

Type:

Group Key

Update

Interval:

Network

Access

Protection:

RADIUS

Server:

RADIUS

Port:

RADIUS

Secret:

When WPA-Enterprise is selected, you must also select a cipher type from the drop-down menu: Auto, AES, or TKIP.

Select the interval during which the group key will be valid. The recommended value is 3600. A lower interval may reduce data transfer rates.

Enable or disable Microsoft Network Access Protection.

Enter the IP address of the RADIUS server.

Enter the RADIUS port.

Enter the RADIUS secret.

26D-Link DAP-2230 User Manual

Section 3 - Conguration

802.1x Authentication

802.1x Authentication can only be enabled for Access Point mode.

Key Update

Interval:

RADIUS

Server:

RADIUS

Port:

RADIUS

Secret:

Select the interval during which the group key will be valid (300 is the recommended value). A lower interval may reduce data transfer rates.

Enter the IP address of the RADIUS server.

Enter the RADIUS port.

Enter the RADIUS secret.

27D-Link DAP-2230 User Manual

Section 3 - Conguration

LAN

LAN is short for Local Area Network. This is considered your internal network. These are the IP settings of the LAN interface for the DAP-2230. These settings may be referred to as private settings. You may change the LAN IP address if needed. The LAN IP address is private to your internal network and cannot be seen on the Internet.

Get IP From: Static IP (Manual) is chosen here. Choose this option if you do not have a

DHCP server in your network, or if you wish to assign a static IP address to the DAP-2230. When Dynamic IP (DHCP) is selected, the other elds here will be grayed out. Please allow about two minutes for the DHCP client to be functional once this selection is made.

IP Address: The default IP address is 192.168.0.50. Assign a static IP address that is within

the IP address range of your network.

Subnet

Mask:

Default

Gateway:

DNS: Enter the DNS IP address used here.

Enter the subnet mask. All devices in the network must share the same subnet mask.

Enter the IP address of the gateway in your network. If there is a gateway in your network, please enter an IP address within the range of your network.

28D-Link DAP-2230 User Manual

Section 3 - Conguration

IPv6

Enable IPv6: Check to enable the IPv6.

Get IP From: Auto is the default option. The DAP-2230 will get an IPv6 address

automatically or use Static to set IPv6 address manually. When Auto is selected, the other elds here will be grayed out.

IP Address: Enter the LAN IPv6 address used here.

Prex: Enter the LAN subnet prex length value used here.

Default

Gateway:

Enter the LAN default gateway IPv6 address used here.

29D-Link DAP-2230 User Manual

Section 3 - Conguration

Advanced Settings

Performance

Wireless: Use the drop-down menu to turn the wireless function On or O.

Wireless

Mode:

Data Rate*: Indicate the base transfer rate of wireless adapters on the wireless LAN.

Beacon

Interval (25-

500):

DTM

Interval

(1-15):

The dierent combination of clients that can be supported include Mixed

802.11n, 802.11g and 802.11b, Mixed 802.11g and 802.11b and 802.11n Only. Please note that when backwards compatibility is enabled for legacy

(802.11g/b) clients, degradation of 802.11n wireless performance is expected.

The AP will adjust the base transfer rate depending on the base rate of the connected device. If there are obstacles or interference, the AP will step down the rate. This option is enabled in Mixed 802.11g and 802.11b mode. The choices available are Best (Up to 54), 54, 48, 36, 24, 18, 12, 9, 6, 11, 5.5, 2 or 1.

Beacons are packets sent by an access point to synchronize a wireless network. Specify a value in milliseconds. The default (100) is recommended. Setting a higher beacon interval can help to save the power of wireless clients, while setting a lower one can help a wireless client connect to an access point faster.

Select a Delivery Trac Indication Message setting between 1 and 15. The default value is 1. DTIM is a countdown informing clients of the next window for listening to broadcast and multicast messages.

Transmit

Power:

This setting determines the power level of the wireless transmission. Transmitting power can be adjusted to eliminate overlapping of wireless area coverage between two access points where interference is a major concern. For example, if wireless coverage is intended for half of the area, then select 50% as the option. Use the drop-down menu to select 100%, 50%, 25%, or 12.5%.

30D-Link DAP-2230 User Manual

Section 3 - Conguration

WMM (Wi-Fi

Multimedia):

Ack Time Out

(2.4 GHZ,

64~200):

Short GI: Select Enable or Disable. Enabling a short guard interval can increase

IGMP

Snooping:

Multicast Rate: Select the multicast rate for 2.4G band.

Multicast

Bandwidth

Control:

WMM stands for Wi-Fi Multimedia. Enabling this feature will improve the user experience for audio and video applications over a Wi-Fi network.

To eectively optimize throughput over long distance links, enter a value for Acknowledgement Time Out from 64 to 200 microseconds in the 2.4 GHz in the eld provided.

throughput. However, be aware that it can also increase the error rate in some installations due to increased sensitivity to radio-frequency installations.

Select Enable or Disable. Internet Group Management Protocol allows the AP to recognize IGMP queries and reports sent between routers and an IGMP host (wireless STA). When IGMP snooping is enabled, the AP will forward multicast packets to an IGMP host based on IGMP messages passing through the AP.

Adjust the multicast packet data rate here. The multicast rate is supported in AP mode and WDS with AP mode, including Multi-SSIDs.

Maximum

Multicast

Bandwidth :

HT20/40

Coexistence:

Transfer

DHCP Oer

to Unicast :

Set the multicast packets maximum bandwidth pass through rate from the Ethernet interface to the Access Point.

Enable this option to reduce interference from other wireless networks in your area. If the channel width is operating at 40 MHz and there is another wireless network’s channel over-lapping and causing interference, the Access Point will automatically change to 20 MHz.

Enable to transfer the DHCP Oer to Unicast from LAN to WLAN, it is recommended to enable this function if the number of stations is larger than 30.

31D-Link DAP-2230 User Manual

Section 3 - Conguration

Wireless Resource Control

The Wireless Resource Control window is used to congure the wireless connection settings so that devices can detect and connect to the Access Point with the strongest signal.

Wireless band: Select 2.4 Ghz.

Connection

Limit:

User Limit: Set the maximum amount of users that are allowed access (zero to 64 us-

Preferred:

Network

Utilization:

Select Enable or Disable. This is an option for load balancing. This determines whether to limit the number of users accessing this device. The exact number is entered in the User Limit eld below. This feature allows the user to share the wireless network trac and the client using multiple APs. If this function is enabled and when the number of users exceeds this value, or the network utilization of this AP exceeds the percentage that has been specied, the DAP-2230 will not allow clients to associate with the AP.

ers) to the device using the specied wireless band. The default setting is

20.

11n

Use the drop-down menu to Enable the 11n Preferred function. The wireless clients with 802.11n protocol will have higher priority to connect to the device.

Set the maximum utilization of this access point. The DAP-2230 will not allow any new clients to associate with the AP if the utilization exceeds the specied value. Select a utilization percentage between 100%, 80%, 60%, 40%, 20%, or 0%. When this network utilization threshold is reached, the device will pause for one minute to allow network congestion to dissipate.

Aging out: Use the drop-down menu to select the criteria of disconnecting the wire-

less clients. Available options are RSSI and Data Rate.

32D-Link DAP-2230 User Manual

Section 3 - Conguration

RSSI

Threshold:

Data Rate

Threshold:

ACL RSSI: Use the drop-down menu to Enable the function. When enabled, the de-

ACL RSSI

Threshold:

When RSSI is selected in the Aging out drop-down menu, select the percentage of RSSI here. When the RSSI of wireless clients is lower than the specied percentage, the device disconnects the wireless clients.

When Data Rate is selected in the Aging out drop-down menu, select the threshold of data rate here. When the data rate of wireless clients is lower than the specied number, the device disconnects the wireless clients.

vice denies the connection request from the wireless clients with the RSSI lower than the specied threshold below.

Set the ACL RSSI Threshold.

33D-Link DAP-2230 User Manual

Section 3 - Conguration

Multi-SSID

The device supports up to four multiple Service Set Identiers. In the Basic > Wireless section, you can set the Primary SSID. The SSID’s factory default setting is dlink. The SSID can be easily changed to connect to an existing wireless network or to establish a new wireless network.

Enable

Multi-SSID:

Band: This read-only value is the current band setting.

Index: You can select up to three multi-SSIDs. With the Primary SSID, you have a

SSID Service Set Identier (SSID) is the name designated for a specic wireless

SSID

Visibility:

Security: The Multi-SSID security can be Open System, WPA-Personal, WPA-

Check to enable support for multiple SSIDs.

total of four multi-SSIDs.

local area network (WLAN). The SSID’s factory default setting is dlink. The SSID can be easily changed to connect to an existing wireless network or to establish a new wireless network.

Enable or Disable SSID visibility. Enabling this feature broadcasts the SSID across the network, thus making it visible to all network users.

Enterprise, or 802.1x. For a detailed description of the Open System parameters, please go to page 26. For a detailed description of the WPAPersonal parameters, please go to page 27. For a detailed description of the WPA-Enterprise parameters, please go to page 28. For a detailed description of the 802.1x parameters, please go to page 29.

Priority: Check the Enable Priority box at the top of this window to enable. Select

the priority from the drop-down menu.

WMM (Wi-Fi

Multimedia):

Select Enable or Disable.

34D-Link DAP-2230 User Manual

Section 3 - Conguration

VLAN

VLAN List

The DAP-2230 supports VLANs. VLANs can be created with a Name and VID. Mgmt (TCP stack), LAN, Primary Multiple SSID, and WDS connection can be assigned to VLANs as they are physical ports. Any packet which enters the DAP-2230 without a VLAN tag will have a VLAN tag inserted with a PVID.

The VLAN List tab displays the current VLANs.

VLAN

Status:

Use the radio button to toggle between Enable or Disable. Next, go to the Add/Edit VLAN tab to add or modify an item on the VLAN List tab.

35D-Link DAP-2230 User Manual

Section 3 - Conguration

Port List

The Port List tab displays the current ports. If you want to congure guest and internal networks on a Virtual LAN (VLAN), the switch and DHCP server you are using must also support VLANs. As a prerequisite step, congure a port on the switch for handling VLAN tagged packets as described in the IEEE 802.1Q standard.

VLAN

Status:

Port Name: The name of the port is displayed in this column.

Tag VID: The Tagged VID is displayed in this column.

Untag VID: The Untagged VID is displayed in this column.

PVID: The Port VLAN Identier is displayed in this column.

Use the radio button to toggle to Enable. Next, go to the Add/Edit VLAN tab to add or modify an item on the VLAN List tab.

36D-Link DAP-2230 User Manual

Section 3 - Conguration

Add/Edit VLAN

The Add/Edit VLAN tab is used to congure VLANs. Once you have made the desired changes, click the Save button to let your changes take eect.

VLAN

Status:

VLAN ID: Provide an ID number between 1 and 4094 for the Internal VLAN.

VLAN

Name:

Use the radio button to toggle to Enable.

Enter the VLAN to add or modify.

37D-Link DAP-2230 User Manual

Section 3 - Conguration

PVID Setting

The PVID Setting tab is used to enable/disable the Port VLAN Identier Auto Assign Status as well as to congure various types of PVID settings. Click the Save button to let your changes take eect.

VLAN Status: Use the radio button to toggle between Enable and Disable.

PVID Auto

Assign Status:

Use the radio button to toggle PVID auto assign status to Enable.

38D-Link DAP-2230 User Manual

Section 3 - Conguration

Intrusion

The Wireless Intrusion Protection window is used to set APs as All, Valid, Neighborhood, Rogue, and New. Click the Save button to let your changes take eect.

AP List: The choices include All, Valid, Neighbor, Rogue, and New.

Detect: Click this button to initiate a scan of the network.

39D-Link DAP-2230 User Manual

Section 3 - Conguration

Schedule

The Wireless Schedule Settings window is used to add and modify scheduling rules on the device. Click the Save button to let your changes take eect.

Wireless

Schedule:

Name: Enter a name for the new scheduling rule in the eld provided.

Index: Select the SSID the schedule will apply to from the drop-down menu.

SSID: Enter the name of your wireless network (SSID).

Day(s): Toggle the radio button between All Week and Select Day(s). If the second

All Day(s): Check this box to have your settings apply 24 hours a day.

Start Time: Enter the start time for your rule. If you selected All Day, this option will be

End Time: Enter the end time for your rule.

Add: Click to add the rule to the list.

Schedule

Rule List:

Use the drop-down menu to enable the device’s scheduling feature.

option is selected, check the specic days you want to apply the rule to.

greyed out.

This section will display the list of created schedules.

Save: Click the Save button to save your created rules.

40D-Link DAP-2230 User Manual

Section 3 - Conguration

Internal RADIUS Server

The DAP-2230 features a built-in RADIUS server. Once you have nished adding a RADIUS account, click the Save button to have your changes take eect. The newly-created account will appear in this RADIUS Account List. The radio buttons allow the user to enable or disable the RADIUS account. Click the icon in the delete column to remove the RADIUS account. We suggest you limit the number of accounts to under 30.

User Name: Enter a name to authenticate user access to the internal RADIUS server.

Password: Enter a password to authenticate user access to the internal RADIUS server.

The length of your password should be 8~64.

Status: Toggle the drop-down menu between Enable and Disable.

RADIUS

Account List:

Displays the list of users.

41D-Link DAP-2230 User Manual

Section 3 - Conguration

ARP Spoong Prevention Settings

The ARP Spoong Prevention feature allows users to add IP/MAC address mapping to prevent ARP spoong attacks.

ARP

Spoong

Prevention:

Gateway

IP Address:

Gateway

MAC Address:

This check box allows you to enable the ARP spoong prevention function.

Enter a gateway IP address.

Enter a gateway MAC address.

42D-Link DAP-2230 User Manual

Section 3 - Conguration

Bandwidth Optimization

The Bandwidth Optimization window allows the user to manage the bandwidth of the access point and adjust the bandwidth for various wireless clients. After inputting a Bandwidth Optimization rule, click the Add button. To discard a Bandwidth Optimization Rule setting, click the Clear button. Click the Save button to let your changes take eect.

Enable

Bandwidth

Optimization:

Downlink

Bandwidth:

Uplink

Bandwidth:

Rule Type: Use the drop-down menu to select the type that is applied to the rule.

Allocate

average BW for

each station:

Allocate

maximum BW

for each station:

Use the drop-down menu to Enable the Bandwidth Optimization function.

Enter the downlink bandwidth of the device in Mbits per second.

Enter the uplink bandwidth of the device in Mbits per second.

Available options are: Allocate average BW for each station, Allocate maximum BW for each station, Allocate dierent BW for 11b/g/n stations, and Allocte specic BW for SSID.

AP will distribute average bandwidth for each client.

Specify the maximum bandwidth for each connected client. Reserve certain bandwidth for future clients.

Allocate

dierent BW

for b/g/n

stations:

The weight of 11b/g/n client are 10%/20%/70%. AP will distribute dierent bandwidth for 11b/g/n clients.

43D-Link DAP-2230 User Manual

Section 3 - Conguration

Allocate

specic BW

for SSID:

Band: Use the drop-down menu to toggle the wireless band 2.4 Ghz.

SSID Index: Use the drop-down menu to select the SSID for the specied wireless band.

Downlink

Speed:

Uplink

Speed:

All clients share the total bandwidth.

Enter the downlink speed limit in either Kbits/sec or Mbits/sec for the rule.

Enter the upload speed limit in either Kbits/sec or Mbits/sec for the rule.

44D-Link DAP-2230 User Manual

Section 3 - Conguration

AP Array

AP Array Scan

The AP Array window is used to create up to 32 APs on a local network to be organized into a single group in order to simplify management. Click the Save button to let your changes take eect. Central WiFiManager and AP Array are mutually exclusive functions.

Enable AP

Array:

AP Array

Name:

AP Array

Password:

Scan AP

Array List:

Connection

Status:

AP Array

List:

Select the check box to enable the AP array function. The three modes that are available are Master, Backup Master, and Slave. APs in the same array will use the same conguration. The conguration will sync the Master AP to the Slave AP and the Backup Master AP when a Slave AP and a Backup Master AP join the AP array.

Enter an AP array name for the group here.

Enter an AP array password for the group here. This password must be the same on all the APs in the group.

Click this button to initiate a scan of all the available APs currently on the network.

Display the AP array connection status.

This table displays the current AP array status for the following parameters: Array Name, Master IP, MAC, Master, Backup Master, Slave, and Total.

Current

Members:

This table displays all the current array members. The DAP-2230 AP array feature supports up to eight AP array members.

45D-Link DAP-2230 User Manual

Section 3 - Conguration

Conguration Settings

In the AP array conguration settings windows, users can specify which settings all the APs in the group will inherit from the master AP. Make the desired selections in this window and click the Save button to accept the changes.

Enable AP

Array

Conguration:

Wireless

Basic

Settings:

Wireless

Advanced

Settings:

Multiple

SSID &

VLAN:

Advanced

Functions:

Administration

Settings:

Select to Enable or Disable the AP array congure feature here.

Select this option to specify the basic wireless settings that the APs in the group will inherit.

Select this option to specify the advanced wireless settings that the APs in the group will inherit.

Select this option to specify the multiple SSIDs and VLAN settings that the APs in the group will inherit.

Select this option to specify the other advanced settings that the APs in the group will inherit.

Select this option to specify the administrative settings that the APs in the group will inherit.

46D-Link DAP-2230 User Manual

Section 3 - Conguration

Auto-RF

In this window, users can view and congure the automatic radio frequency settings as well as congure the auto-initiate period and threshold values. Click the Save button to accept the changes made.

Enable:

Auto-RF:

Initiate

Auto-RF:

Auto-Initiate: Select the Enable or Disable the auto-initiate feature here.

Auto-Initiate

Period:

RSSI

Threshold:

RF Report

Frequency:

Select to Enable or Disable the auto-RF feature here.

Click the Auto-RF Optimize button to initiate the auto-RF optimization feature.

After enabling the auto-initiate option, the auto-initiate period value can be entered here. This value must be between 1 and 24 hours.

Select the RSSI threshold value here. This value is listed in the drop-down menu in increments of 10% from 10% to 100%.

Enter the RF report frequency value here.

47D-Link DAP-2230 User Manual

Section 3 - Conguration

Load Balance

In this window, users can view and congure the AP array’s load balancing settings. Click the Save button to accept the changes made.

Enable Load

Balance:

Active

Threshold:

Select to Enable or Disable the load balance feature here.

Enter the active threshold value here.

48D-Link DAP-2230 User Manual

Section 3 - Conguration

Captive Portal Authentication

Captive Portal is a built-in web authentication server. When a client connects to an AP, the user’s web browser will be redirected to a web authentication page. In this conguration option, administrators can view and congure the Captive Portal settings.

Web Redirection Only

After selecting Web Redirection Only as the Authentication Type, you can congure the redirection website URL that will be applied to each wireless client that connects to this network.

Session

timeout

(1-1440):

Band: Select 2.4 Ghz.

SSID Index: Select the SSID for this Authentication.

Authentication

Type:

Web

Redirection

State:

URL Path : Select whether to use either HTTP or HTTPS here. After selecting either

Enter the session timeout value here. This value can be from 1 to 1440 minutes. By default, this value is 60 minutes.

Select the captive portal encryption type here. Options to choose from are Web Redirection, Username/Password, Passcode, Remote RADIUS, LDAP and POP3.

Web Redirection State is automatically enabled when Web Redirection Authentication is selected.

http:// or https://, enter the URL of the website that will be used in the space provided.

49D-Link DAP-2230 User Manual

Section 3 - Conguration

Username/Password

After selecting Username/Password as the Authentication Type, administrators can congure the Username and Password that each wireless client will be prompted for when requesting access to the network.

Session

timeout

(1-1440):

Band: Select 2.4 Ghz.

SSID Index: Select the SSID for this Authentication.

Authentication

Type:

Web

Redirection

State:

URL Path : Select whether to use either HTTP or HTTPS here. After selecting either

Username: Enter the username for the new account here.

Enter the session timeout value here. This value can be from 1 to 1440 minutes. By default, this value is 60 minutes.

Select the captive portal encryption type here. Options to choose from are

Web Redirection, Username/Password, Passcode, Remote RADIUS, LDAP

and POP3.

By default web redirection is disabled. Select enable to activate the website redirection feature.

http:// or https://, enter the URL of the website that will be used in the space provided.

Password: Enter the password for the new account here.

50D-Link DAP-2230 User Manual

Section 3 - Conguration

Passcode

After selecting Passcode as the Authentication Type, administrators can congure the Passcode that each wireless client will be prompted for when requesting access to the network. A passcode will be randomly generated upon clicking Add.

Session

timeout

(1-1440):

Band: Select 2.4 Ghz.

SSID Index: Select the SSID for this Authentication.

Authentication

Type:

Web

Redirection

State:

URL Path : Select whether to use either HTTP or HTTPS here. After selecting either

Passcode

Quantity:

Enter the session timeout value here. This value can be from 1 to 1440 minutes. By default, this value is 60 minutes.

Select the captive portal encryption type here. Options to choose from are

Web Redirection, Username/Password, Passcode, Remote RADIUS, LDAP

and POP3.

By default web redirection is disabled. Select enable to activate the website redirection feature.

http:// or https://, enter the URL of the website that will be used in the space provided.

Enter the number of passcodes to generate.

Duration: Enter the duration value, in hours, for the passcode(s).

Last Active

Day:

User Limit: Enter the maximum amount of users that can use this passcode at the same time

Select the year, month, day, and hour when this passcode will expire.

51D-Link DAP-2230 User Manual

Section 3 - Conguration

Remote Radius

After selecting Remote RADIUS as the Authentication Type, administrators can congure the Remote RADIUS authentication settings required to join the network.

Session

timeout

(1-1440):

Band: Select 2.4 Ghz.

SSID Index: Select the SSID for this Authentication.

Authentication

Type:

Web

Redirection

State:

URL Path : Select whether to use either HTTP or HTTPS here. After selecting either

Radius

Server:

Enter the session timeout value here. This value can be from 1 to 1440 minutes. By default, this value is 60 minutes.

Select the captive portal encryption type here. Options to choose from are

Web Redirection, Username/Password, Passcode, Remote RADIUS, LDAP

and POP3.

By default web redirection is disabled. Select enable to activate the website redirection feature.

http:// or https://, enter the URL of the website that will be used in the space provided.

Enter the RADIUS server’s IP address here

Radius Port: Enter the RADIUS server’s port number here

Radius Port: Enter the RADIUS server’s shared secret here

Remote

Radius

Type:

Select the remote RADIUS server type here.

52D-Link DAP-2230 User Manual

Section 3 - Conguration

LDAP

After selecting LDAP as the Authentication Type, administrators can congure the LDAP authentication settings required to join the network.

Session

timeout

(1-1440):

Band: Select 2.4 Ghz.

SSID Index: Select the SSID for this Authentication.

Authentication

Type:

Web

Redirection

State:

URL Path : Select whether to use either HTTP or HTTPS here. After selecting either

Server: Enter the LDAP server’s IP address or domain name here.

Enter the session timeout value here. This value can be from 1 to 1440 minutes. By default, this value is 60 minutes.

Select the captive portal encryption type here. Options to choose from are

Web Redirection, Username/Password, Passcode, Remote RADIUS, LDAP

and POP3.

By default web redirection is disabled. Select enable to activate the website redirection feature.

http:// or https://, enter the URL of the website that will be used in the space provided.

Port: Enter the LDAP server’s port number here.

Authenticate

Mode:

Username: Enter the LDAP server account’s username here.

Password: Enter the LDAP server account’s password here.

Select the authentication mode here. Options to choose from are Simple and TLS.

53D-Link DAP-2230 User Manual

Section 3 - Conguration

Base DN: Enter the administrator’s domain name here

Account

Attribute:

Identity: This string will be used to search for clients.

Enter the LDAP account attribute string here.

Enter the identity’s full path string here. Alternatively, select the Auto Copy checkbox to automatically add the generic full path of the web page in the identity eld.

54D-Link DAP-2230 User Manual

Section 3 - Conguration

POP3

After selecting POP3 as the Authentication Type, administrators can congure the POP3 authentication settings required to join the network.

Session

timeout

(1-1440):

Band: Select 2.4 Ghz.

SSID Index: Select the SSID for this Authentication.

Authentication

Type:

Web

Redirection

State:

URL Path : Select whether to use either HTTP or HTTPS here. After selecting either

Server: Enter the POP3 server’s IP address or domain name here.

Enter the session timeout value here. This value can be from 1 to 1440 minutes. By default, this value is 60 minutes.

Select the captive portal encryption type here. Options to choose from are

Web Redirection, Username/Password, Passcode, Remote RADIUS, LDAP

and POP3.

By default web redirection is disabled. Select enable to activate the website redirection feature.

http:// or https://, enter the URL of the website that will be used in the space provided.

Port: Enter the POP server’s port number here.

Connection

Type:

Select the connection type here; either None or SSL/TLS.

55D-Link DAP-2230 User Manual

Section 3 - Conguration

Login Page Upload

In this window, users can upload a custom login page picture that will be used by the captive portal feature. Click the Browse button to navigate to the image le, located on the managing computer and then click the Upload button to initiate the upload.

Upload

picture

from le:

Style List:

In this eld the path to the image le that will be uploaded will be displayed. Alternatively, the path can be manually entered here.

Select the wireless band and login style that will be used for each SSID. Click the Download button to download the login page template le and Click the Del button to delete the template le.

56D-Link DAP-2230 User Manual

Section 3 - Conguration

IP Filter

Enter the IP address or network address that will be used in the IP lter rule. For example, an IP address like 192.168.70.66 or a network address like 192.168.70.0. This IP address or network will be inaccessible to wireless clients on this network.

Wireless

Band:

IP Address: Enter the IP address or network address.

Subnet

Mask:

Upload IP

Filter File:

Download

IP Filter File:

Select the wireless band for MAC Bypass.

Enter the subnet mask of the IP address or networks address.

To upload an IP lter list le, click Browse and navigate to the IP lter list le saved on your computer, and then click Upload.

To download IP Filter list le, click Download and to save the IP Filter list.

57D-Link DAP-2230 User Manual

Section 3 - Conguration

MAC Bypass

The DAP-2230 features a wireless MAC Bypass. Once a MAC address is added to the bypass list, that client will skip the Captive Portal Authentication process when joining a network. Once an administrator is nished adjusting these settings, click the Save button to have the changes take eect.

Wireless

Band:

SSID Index: Select the SSID for MAC Bypass.

MAC

Address:

MAC

Address

List:

Upload File: To upload a MAC bypass list le, click Browse and navigate to the MAC bypass

Load MAC

File to Local

Hard Drive:

Select the wireless band for MAC Bypass.

Enter each MAC address that you wish to include in your bypass list and then click Add.

When a MAC address is entered, it appears in this list. Highlight a MAC address and click the Delete icon to remove it from this list.

list le saved on the managing computer, and then click Upload.

Click Download to save the MAC bypass list le.

58D-Link DAP-2230 User Manual

Section 3 - Conguration

DHCP Server

Dynamic Pool Settings

The DHCP address pool denes the range of the IP addresses that can be assigned to stations on the network. A Dynamic Pool allows wireless stations to receive an available IP with lease time control. If needed or required for the network, the DAP-2230 is capable of acting as a DHCP server.

Function

Enable/

Disable:

IP Assigned

From:

IP Pool

Range

(1-254):

Subnet

Mask:

Gateway: Enter the IP address of the gateway on the network.

WINS: Specify the Windows Internet Naming Service (WINS) server address for

Dynamic Host Conguration Protocol (DHCP) assigns dynamic IP addresses to devices on the network. This protocol simplies network management and allows new wireless devices to receive IP addresses automatically without the need to manually assign new IP addresses. Select Enable to allow the DAP-2230 to function as a DHCP server.

Input the rst IP address available for assignment on your network.

Enter the number of IP addresses available for assignment. IP addresses are increments of the IP address specied in the “IP Assigned From” eld.

All devices in the network must have the same subnet mask to communicate. Enter the submask for the network here.

the wireless network. WINS is a system that determines the IP address of a network computer that has a dynamically assigned IP address.

DNS: Enter the IP address of the Domain Name System (DNS) server. The DNS

server translates domain names such as www.dlink.com into IP addresses.

Domain

Name:

Lease Time : The lease time is the period of time before the DHCP server will assign new

Enter the domain name of the network, if applicable. (An example of a domain name is: www.dlink.com.)

IP addresses. (60-31536000 sec)

59D-Link DAP-2230 User Manual

Section 3 - Conguration

Static Pool Setting

A static pool allows specic IP addresses to be reserved to wireless stations.

Function

Enable/

Disable:

Assigned IP: Use the Static Pool Settings to reserve IP addresses to specic devices. The IP

Assigned

MAC Address:

Subnet Mask: Dene the submask of the IP address specied in the IP Assigned From eld.

Gateway: Specify the Gateway address for the wireless network.

WINS: Specify the Windows Internet Naming Service (WINS) server address for

Dynamic Host Conguration Protocol (DHCP) assigns IP addresses to wireless devices on the network. This protocol simplies network management and allows new wireless devices to receive IP addresses automatically without the need to manually assign IP addresses. Select Enable to allow the DAP-2230 to function as a DHCP server.

addresses assigned in the Static Pool list must NOT be in the same IP range as the Dynamic Pool. After you have assigned a static IP address to a device via its MAC address, click Save; the device will appear in the Assigned Static Pool at the bottom of the screen. You can edit or delete the device in this list.

Enter the MAC address of the device requesting association here.

the wireless network. WINS is a system that determines the IP address of a network computer with a dynamically assigned IP address, if applicable.

DNS: Enter the Domain Name System (DNS) server address for the wireless

network. The DNS server translates domain names such as www.dlink.com into IP addresses.

Domain

Name:

Specify the domain name for the network.

60D-Link DAP-2230 User Manual

Section 3 - Conguration

Current IP Mapping List

This window displays information about the current assigned DHCP dynamic and static IP address pools. This information is available when you enable DHCP server on the AP and assign dynamic and static IP address pools.

Current DHCP

Dynamic Prole:

Host Name: The host name of a device on the network that is assigned an IP address

Binding MAC

Address:

Assigned IP

Address:

Lease Time: The length of time that the dynamic IP address will be valid.

Current

DHCP Static

Pools:

Host Name: The host name of a device on the network that is assigned an IP address

These are IP address pools the DHCP server has assigned using the dynamic pool setting.

from the DHCP dynamic pool.

The MAC address of a device on the network that is assigned an IP address from the DHCP dynamic pool.

The current corresponding DHCP-assigned IP address of the device.

These are the IP address pools of the DHCP server assigned through the static pool settings.

from the DHCP dynamic pool.

Binding

MAC

Address:

Assigned IP

Address:

The MAC address of a device on the network that is within the DHCP static IP address pool.

The current corresponding DHCP-assigned static IP address of the device.

61D-Link DAP-2230 User Manual

Section 3 - Conguration

Filters

Wireless MAC ACL

Wireless

Band:

Access

Control List:

MAC

Address:

MAC

Address

List:

Upload ACL

File:

Displays the current wireless band rate.

Select Disable to disable the lters function.

Select Accept to accept only those devices with MAC addresses in the Access Control List. All other devices not on the list will be rejected.

Select Reject to reject the devices with MAC addresses on the Access Control List. All other devices not on the list will be accepted.

Enter each MAC address that you wish to include in your lter list, and click Add.

When you enter a MAC address, it appears in this list. Highlight a MAC address and click Delete to remove it from this list.

You may create an ACL list and upload it to the access point instead of manually entering the information. Once created, click the Browse button and locate your le. Select it and then click Upload.

Download

ACL File:

Click Download to export the ACL to a le on your computer.

62D-Link DAP-2230 User Manual

Section 3 - Conguration

WLAN Partition

Wireless

Band:

Link

Integrity:

Ethernet to WLAN

Access:

Internal

Station

Connection:

Displays the current wireless band rate.

Select Enable or Disable.

The default is Enable. When disabled, all data from the Ethernet port to associated wireless devices will be blocked. Wireless devices can still send data to the Ethernet port.

The default value is Enable, which allows stations to inter-communicate by connecting to a target AP. When disabled, wireless stations cannot exchange data through the AP.

63D-Link DAP-2230 User Manual

Section 3 - Conguration

Trac Control

Uplink/Downlink Settings

The uplink/downlink setting allows users to customize the downlink and uplink interfaces including specifying downlink/uplink bandwidth rates in Mbits per second. These values are also used in the QoS and Trac Manager windows. Once the desired uplink and downlink settings have been selected, click the Save button to let your changes take eect.

Downlink

Bandwidth:

Uplink

Bandwidth:

The downlink bandwidth in Mbits per second.

Uplink Bandwidth: The uplink bandwidth in Mbits per second.

64D-Link DAP-2230 User Manual

Section 3 - Conguration

QoS

Quality of Service (QoS) enhances the experience of using a network by prioritizing the trac of dierent applications. A QoS

Rule identies a specic message ow and assigns a priority to that ow. For most applications, the priority classiers ensure the right priorities and specic QoS Rules are not required. QoS supports overlapping rules. If more than one rule matches a specic message ow, the rule with the highest priority will be used.

QoS

(Quality of

Service):

HTTP: Allows the access point to recognize HTTP transfers for many common audio

Automatic: When enabled, this option causes the access point to automatically attempt

Enable this option if you want to allow QoS to prioritize your trac Priority Classiers.

and video streams and prioritize them above other trac. Such streams are frequently used by digital media players.

to prioritize trac streams that it does not otherwise recognize, based on the behavior that the streams exhibit. This acts to de-prioritize streams that exhibit bulk transfer characteristics, such as le transfers, while leaving interactive trac, such as gaming or VoIP, running at a normal priority.

65D-Link DAP-2230 User Manual

Section 3 - Conguration

Trac Manager

The trac manager feature allows users to create trac management rules that specify how to deal with listed client trac and specify downlink/uplink speed for new trac manager rules. Click the Save button to let your changes take eect.

Trac

Manager:

Unlisted

Client

Trac:

Downlink

Bandwidth:

Uplink

Bandwidth:

Use the drop-down menu to Enable the trac manager feature.

Select Deny or Forward to determine how to deal with unlisted client trac.

The downlink bandwidth in Mbits per second. This value is entered in the Uplink/Downlink Setting window.

The uplink bandwidth in Mbits per second. This value is entered in the Uplink/ Downlink Setting window.

66D-Link DAP-2230 User Manual

Section 3 - Conguration

Status

Device Information

This read-only window displays the conguration settings of the DAP-2230, including the rmware version and the device's MAC address.

67D-Link DAP-2230 User Manual

Section 3 - Conguration

Client Information

This window displays the wireless client information for clients currently connected to the DAP-2230. The following information is available for each client communicating with the DAP-2230.

SSID: Displays the SSID of the client.

MAC: Displays the MAC address of the client.

Band: Displays the wireless band that the client is connected to.

Authentication: Displays the type of authentication being used.

Signal: Displays the client's signal strength.

Power

Saving

Mode:

Displays the status of the power saving feature.

68D-Link DAP-2230 User Manual

Section 3 - Conguration

WDS Information

This window displays the Wireless Distribution System information for clients currently connected to the DAP-2230. The following information is available for each client communicating with the DAP-2230.

Name: Displays the SSID of the client.

MAC: Displays the MAC address of the client.

Authentication: Displays the type of authentication being used.

Signal: Displays the client's signal strength.

Status: Displays the status of the power saving feature.

69D-Link DAP-2230 User Manual

Section 3 - Conguration

Channel Analyze

Wireless

Band:

Detect: Click the Detect button to scan.

AP List: This will list the transmitting channels and quality.

2.4 Ghz

70D-Link DAP-2230 User Manual

Section 3 - Conguration

Statistics

Ethernet

This page displays transmitted and received count statistics for packets and bytes.

71D-Link DAP-2230 User Manual

Section 3 - Conguration

WLAN Trac

This page displays wireless network statistics for data throughput, transmitted and received frames, and frame errors.

72D-Link DAP-2230 User Manual

Section 3 - Conguration

Log

View Log

The AP’s embedded memory displays system and network messages including a time stamp and message type. The log information includes but is not limited to the following items: cold start AP, upgrading rmware, client associate and disassociate with AP, and web login. The web page holds up to 500 logs.

73D-Link DAP-2230 User Manual

Section 3 - Conguration

Log Settings

Log Server/

IP Address:

Log Type: Check the box for the type of activity you want to log. There are three types:

EU directive

Syslog Server

Settings:

Notication:

Outgoing Mail Server (SMTP):

Authentication: Check to enable authentication.

SSL / TLS: Check to enable SSL/TLS authentication.

From Email

Address:

Enter the IP address of the server you would like to send the DAP-2230 log to.

System Activity, Wireless Activity, and Notice.

Enter the EU Directive Log Server IP Address.

Check to enable Email notication.

Select the SMTP server from the drop-down menu.

Enter the “From” email address.

To Email Address: Enter the destination email address.

Email Server

Address:

SMTP Port: Enter the SMTP port.

Username: Enter your email username.

Enter the Email Server Address.

74D-Link DAP-2230 User Manual

Section 3 - Conguration

Password: Enter your email password.

Conrm

Password:

Schedule: Select when to send the log to your email (in hours). You will receive an email

Enter your email password again.

when the log is full too.

75D-Link DAP-2230 User Manual

Section 3 - Conguration

Maintenance

Administration Settings

Check one or more of the ve main categories to view the various hidden administrator parameters and settings displayed on the next ve pages.

76D-Link DAP-2230 User Manual

Section 3 - Conguration

Limit Administrator

Each of the ve main categories display various hidden administrator parameters and settings.

Limit

Administrator

VLAN ID:

Limit

Administrator

IP Range: Enter the IP address range that the administrator will be allowed to log in

Check the box provided and the enter the specific VLAN ID that the administrator will be allowed to log in from.

Check to enable the Limit Administrator IP address.

IP:

from and then click the Add button.

77D-Link DAP-2230 User Manual

Section 3 - Conguration

System Name Settings

Each of the ve main categories display various hidden administrator parameters and settings.

System

Name:

Location The physical location of the device, e.g. 72nd Floor, D-Link HQ.

The name of the device. The default name is D-Link DAP-2230.

78D-Link DAP-2230 User Manual

Section 3 - Conguration

Login Settings

Each of the ve main categories display various hidden administrator parameters and settings.

Name:

Old

Password:

New

Password:

Conrm

Password:

Enter a user name. The default is admin.

When changing your password, enter the old password here.

When changing your password, enter the new password here. The password is case-sensitive. “A” is a dierent character than “a.” The length should be between 0 and 12 characters.

Enter the new password a second time for conrmation purposes.

79D-Link DAP-2230 User Manual

Section 3 - Conguration

Console Settings

Each of the ve main categories display various hidden administrator parameters and settings.

Status: Status is enabled by default. Uncheck the box to disable the console.

Console

Protocol:

Timeout: Set to 1 Min, 3 Mins, 5 Mins, 10 Mins, 15 Mins or Never.

Select the type of protocol you would like to use, Telnet or SSH.

80D-Link DAP-2230 User Manual

Section 3 - Conguration

SNMP Settings

Each of the ve main categories display various hidden administrator parameters and settings.

Status: Check the box to enable the SNMP functions. This option is disabled by

default.

Public

Community

String:

Private

Community

String:

Trap Status: Check the box to enable Trap Status.

Trap Server IP: Enter the Trap Server IP address.

Enter the public SNMP community string.

Enter the private SNMP community string.

81D-Link DAP-2230 User Manual

Section 3 - Conguration

Ping Control

Status: Check the box to enable Ping control. Ping works by sending ICMP “echo

request” packets to the target host and listening for ICMP echo response replies. The default is enabled. If not enabled, the access point will not reply to pings.

82D-Link DAP-2230 User Manual

Section 3 - Conguration

Central WiFiManager Settings

The Central WiFiManager section is used to congure and manage a set of APs on the network into a single group in order to simplify management. Central WiFiManager and AP Array may not be used simultaneously.

Enable Central

WiFiManager:

Select to enable or disable the Central WiFiManager.

83D-Link DAP-2230 User Manual

Section 3 - Conguration

Firmware and SSL Certication Upload

This page allows the user to perform a rmware upgrade. Be sure to check the support.dlink.com website periodically for the latest rmware updates to keep your product up to date with the latest features.

Upload

Firmware

From Local

Hard Drive:

Language

Pack

Upgrade:

Upload SSL

Certication

From Local

Hard Drive:

The current rmware version is displayed above the le location eld. After downloading the most recent version of the firmware for the DAP-2230 from http://support.dlink.com to your local computer, use the Browse button to locate the rmware le on your computer. Click Upload to update the rmware version. Please don’t turn the power o while upgrading.

You may load a language pack to display the utility in another language. Click Browse to locate the language pack le on your local computer. After selecting and opening the le, click Upload to upload the le to the DAP-2230.

Click Browse to locate the SSL Certication le on your local computer. After selecting and opening the le, click Upload to upload the le to the DAP-2230.

84D-Link DAP-2230 User Manual

Section 3 - Conguration

Conguration File Upload

Upload File: Click the Browse button to locate a previously saved conguration le

on your local computer. After selecting the le, click Upload to apply the conguration settings to the DAP-2230.

Download

Conguration

File:

Click Download to save the current DAP-2230 conguration to your local computer.

85D-Link DAP-2230 User Manual

Section 3 - Conguration

Time and Date

Current

Time:

Enable NTP

Server:

NTP Server: Enter the NTP server URL or IP address.

Time Zone: Use the drop-down menu to select your correct Time Zone.

Enable

Daylight

Saving:

Daylight

Saving

Dates:

Set the Date

and Time

Manually:

Displays the current time and date settings.

Check to enable the AP to get system time from an NTP server.

Check the box to Enable Daylight Saving Time.

Use the drop-down menu to select the correct Daylight Saving oset.

You can either manually set the time for your AP here, or you can click the Copy Your Computer’s Time Settings button to copy the time from the computer you are using (Make sure that the computer’s time is set correctly).

86D-Link DAP-2230 User Manual

Section 3 - Conguration

System

System Settings

Restart the

Device:

Restore

to Factory

Default

Settings:

Click Restart to restart the DAP-2230.

Click Restore to restore the DAP-2230 back to factory default settings.

87D-Link DAP-2230 User Manual

Section 3 - Conguration

Help: Scroll down the Help page for topics and explanations.

Help

88D-Link DAP-2230 User Manual

Section 2 - InstallationSection 4 - Security

Wireless Security

This section will show you the dierent levels of security you can use to protect your data from intruders. The DAP-2230 oers the following types of security:

• WEP (Wired Equivalent Privacy)

• WPA-Personal (Wi-Fi Protected Access)

• WPA-Enterprise (Wi-Fi Protected Access)

89D-Link DAP-2230 User Manual

Section 2 - InstallationSection 4 - Security

What is WEP?

WEP, or Wired Equivalent Privacy, is a Wi-Fi security protocol that encrypts transmitted data. WEP is an older protocol that is not believed to be as eective anymore.

WEP uses a passphrase or key to authenticate your wireless connection. For 64-Bit WEP, the key is an alpha-numeric password that is 10 hex digits or an ASCII password consisting of 5 text characters. The hex digits are either numbers from 0 to 9 or letters from A to F. For 128-Bit WEP, the key is an alpha-numeric password that is 26 hex digits or an ASCII password with 13 text characters.

90D-Link DAP-2230 User Manual

Section 2 - InstallationSection 4 - Security

Congure WEP

It is recommended to enable encryption on your wireless access point before your wireless network adapters. Please establish wireless connectivity before enabling encryption. Your wireless signal may degrade when enabling encryption due to the added overhead.

1. Log into the web-based conguration by opening a web browser and entering the IP address of the access point (dlinkap. local). Click on Setup and then click Wireless Setup on the left side.

2. Next to Security Mode, select WEP.

Note: Choosing WEP means the device will only operate in Legacy wireless mode (802.11B/G) and will not provide 802.11N

performance.

3. Next to WEP Encryption, select 64 Bit(10 hex digits), 64 Bit(5 ASCII characters), 128 Bit(26 hex digits) or 128 Bit(13 ASCII characters).

4. Next to WEP Key 1, enter a set of digits or letters from A to F, or a string of text.

5. Next to Authentication, select Both or Shared Key.

6. Click Save Settings at the top of the window to save your settings. If you are conguring the access point with a wireless adapter, you will lose connectivity until you enable WPA-PSK on your adapter and enter the same passphrase as you did on the access point.

91D-Link DAP-2230 User Manual

Section 2 - InstallationSection 4 - Security

What is WPA?

WPA, or Wi-Fi Protected Access, is a Wi-Fi standard that was designed to improve the security features of WEP (Wired Equivalent Privacy).

The 2 major improvements over WEP:

• Improved data encryption through the Temporal Key Integrity Protocol (TKIP). TKIP scrambles the keys using a hashing algorithm and, by adding an integrity-checking feature, ensures that the keys haven’t been tampered with. WPA2 is based on 802.11i and uses Advanced Encryption Standard (AES) instead of TKIP.

• User authentication, which is generally missing in WEP, through the extensible authentication protocol (EAP). WEP regulates access to a wireless network based on a computer’s hardware-specic MAC address, which is relatively simple to be snied out and stolen. EAP is built on a more secure public-key encryption system to ensure that only authorized network users can access the network.

WPA-PSK/WPA2-PSK uses a passphrase or key to authenticate your wireless connection. The key is an alpha-numeric password between 8 and 63 characters long. The password can include symbols (!?*&_) and spaces. This key must be the exact same key entered on your wireless bridge or access point.

WPA/WPA2 incorporates user authentication through the Extensible Authentication Protocol (EAP). EAP is built on a more secure public key encryption system to ensure that only authorized network users can access the network.

92D-Link DAP-2230 User Manual

Section 2 - InstallationSection 4 - Security

Congure WPA/WPA2 Personal

1. Log into the web-based conguration by opening a web browser and entering the IP address of the access point (dlinkap. local). Click on Setup and then click Wireless Setup on the left side.

2. Next to Security Mode, select WPA-Personal.

3. Next to WPA Mode, select Auto(WPA or WPA2), WPA2 only, or WPA only.

4. Next to Cipher Type, select TKIP, AES, or TKIP and AES.

5. Next to Pre-Shared Key, enter a key. The key is entered as a passphrase in ASCII format at both ends of the wireless connection. The passphrase must be between 8-63 characters.

93D-Link DAP-2230 User Manual

Section 2 - InstallationSection 4 - Security

Congure WPA/WPA2 Enterprise

1. Log into the web-based conguration by opening a web browser and entering the IP address of the access point (dlinkap. local). Click on Setup and then click Wireless Setup on the left side.

2. Next to Security Mode, select WPA-Enterprise.

3. Next to WPA Mode, select Auto(WPA or WPA2), WPA2 only, or WPA only.

4. Next to Cipher Mode, select TKIP, AES, or Auto.

5. Next to RADIUS Server IP Address, enter the IP Address of your RADIUS server.

6. Next to RADIUS Server Port, enter the port you are using with your RADIUS server. 1812 is the default port.

7. Next to RADIUS Server Shared Secret, enter the security key.

8. Click Advanced to enter settings for a secondary RADIUS Server.

9. Click Save Settings to save your settings.

94D-Link DAP-2230 User Manual

Section 5 - Connecting to a Wireless Network

Connect to a Wireless Network

Using Windows® XP

Windows® XP users may use the built-in wireless utility (Zero Conguration Utility). The following instructions are for Service Pack 2 users. If you are using another company’s utility or Windows® 2000, please refer to the user manual of your wireless adapter for help with connecting to a wireless network. Most utilities will have a “site survey” option similar to the Windows® XP utility as seen below.

If you receive the Wireless Networks Detected bubble, click on the center of the bubble to access the utility.

Right-click on the wireless computer icon in your system tray (lower-right corner next to the time). Select View Available Wireless Networks.

The utility will display any available wireless networks in your area. Click on a network (displayed using the SSID) and click the Connect button.

If you get a good signal, but cannot access the Internet, check you TCP/IP settings for your wireless adapter. Refer to the Networking Basics section in this manual for more information.

95D-Link DAP-2230 User Manual

D-link DAP-2230 User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual

Preface

Package Contents

System Requirements

Introduction

Features

Hardware Overview

Top Panel

Hardware Overview

Bottom Panel

Physical Installation

Before You Begin

Connect to your Network

Method 1 - Powered by PoE Switch

Method 2 - Powered by PoE Injector

Method 3 - DC Adapter

Mounting the AP

Wireless Installation Considerations

Four Operational Modes

Save and Activate Settings

Basic Settings

Wireless

Access Point mode

WDS with AP mode

WDS mode

Wireless Client mode

Authentication Types

Open System/Shared Key Authentication

WPA/WPA2-Personal Authentication

WPA/WPA2-Enterprise Authentication

802.1x Authentication

IPv6

Advanced Settings

Performance

Wireless Resource Control

Multi-SSID

VLAN

VLAN List

Port List

Add/Edit VLAN

PVID Setting

Intrusion

Schedule

Internal RADIUS Server

Bandwidth Optimization

AP Array

AP Array Scan

Auto-RF

Load Balance

Captive Portal Authentication

Web Redirection Only

Username/Password

Username/Password

Passcode

Remote Radius

LDAP

POP3

Login Page Upload

Login Page Upload

IP Filter

MAC Bypass

DHCP Server

Dynamic Pool Settings

Static Pool Setting

Current IP Mapping List

Filters

Wireless MAC ACL

WLAN Partition

Uplink/Downlink Settings

Status

Device Information

Client Information

WDS Information

Channel Analyze

Statistics

Ethernet

View Log