D-LINK DAP-2622 User guide

NUCLIAS CONNECT
DAP-2622 User Guide
2020 |
Business Class Networking
V 1.00
D-Link DAP-2622 User Manual
Table of Contents
Introduction ................................................................................... 4
Nuclias Connect Key Features .................................................. 5
Package Contents .........................................................................6
System Requirements ................................................................. 6
LEDs ................................................................................................... 7
Connections ................................................................................... 7
Hardware Setup ............................................................................8
Method 1 - PoE with PoE Switch or Router .................. 8
Method 2 - PoE without PoE Switch or Router ................9
Wireless ..........................................................................................12
Access Point Mode .............................................................12
WDS with AP Mode ............................................................14
WDS Mode ............................................................................16
Wireless Client Mode .........................................................18
Wireless Client Mode .........................................................19
Wireless Security .................................................................20
Wired Equivalent Privacy (WEP) ..............................20
Wi-Fi Protected Access (WPA / WPA2)....................21
LAN ..........................................................................................23
IPv6 ..........................................................................................24
Advanced Settings .....................................................................25
Performance .........................................................................26
Wireless Resource Control .......................................................28
Multi-SSID ..............................................................................30
VLAN ........................................................................................32
VLAN List ..........................................................................32
Port List .............................................................................33
Add/Edit VLAN ...............................................................34
PVID Settings ..................................................................35
Intrusion .................................................................................36
Schedule ................................................................................37
Internal RADIUS Server ..................................................... 38
ARP Spoong Prevention ................................................39
Bandwidth Optimization .................................................40
Captive Portal .......................................................................42
Authentication Settings - Web Redirection Only 42
Authentication Settings - Username/Password .44
Authentication Settings - Passcode .......................46
Authentication Settings - Remote RADIUS ..........48
Authentication Settings - LDAP ...............................50
Authentication Settings - POP3 ...............................52
Login Page Upload .......................................................54
MAC Bypass .....................................................................55
DHCP Server .........................................................................56
Dynamic Pool Settings ................................................56
Static Pool Setting ........................................................57
Current IP Mapping List ..............................................58
2
D-Link DAP-2622 User Manual
Filters .......................................................................................59
Wireless MAC ACL .........................................................59
WLAN Partition ..............................................................60
IP Filter Settings .............................................................61
Trac Control...............................................................................62
Uplink/Downlink Setting .................................................62
QoS...........................................................................................63
Trac Manager .................................................................... 64
Status ..............................................................................................65
Device Information ............................................................66
Client Information ..............................................................67
WDS Information Page .....................................................68
Stats Page ......................................................................................69
Ethernet Trac Statistics ..................................................69
WLAN Trac Statistics .......................................................70
Log ...................................................................................................71
View Log .................................................................................71
Nuclias Connect Setting ...................................................78
Firmware and SSL Upload ................................................ 79
Conguration File Upload ...............................................80
Time and Date Settings ....................................................81
Conguration and System.......................................................82
System Settings ...........................................................................83
Help .................................................................................................84
Log Settings ..........................................................................72
Maintenance Section ................................................................74
Administration .............................................................................75
Limit Administrator ............................................................75
System Name Settings ......................................................76
Login Settings ......................................................................76
Console Settings .................................................................76
Ping Control Setting ..........................................................77
LED Settings..........................................................................77
DDP Control Setting ..........................................................78
Country Settings .................................................................78
3
D-Link DAP-2622 User Manual

Nuclias Connect

Introduction

Nuclias Connect is D-Link’s centralized management solution for Small-to-Medium-Sized Business (SMB) networks. Nuclias Connect makes it easier to analyze, automate, congure, optimize, scale, and secure your network — delivering the convenience of an Enterprise-wide management solution at an SMB price. Nuclias Connect gives you the nancial and technical exibility to expand from a small network to a larger one (up to 1,000 APs), while retaining a robust and centralized management system. And with its intuitive Graphical User Interface (GUI), a wealth of enhanced AP features, and a setup wizard that supports 11 languages, Nuclias Connect minimizes the hassle of deployment, conguration, and administration.
Deployable on a Windows server (or Linux via Docker), PC, or Smartphone (via lite management app) the Nuclias Connect free-to-download software is capable of managing up to 1,000 Access Points (APs) without licensing charges, coupled with an inexpensive optional hardware controller (the Hub) suitable for remote locations. Through software-based monitoring and remote management of all wireless Access Points (APs) on your network, Nuclias Connect oers tremendous exibility compared to traditional hardware-based unied management systems. Conguration can be done remotely. Network trac analytics are available at a glance (in whole or in part). Load Balancing, Airtime Fairness, and Localized Throttling are enabled.
Nuclias Connect supports multi-tenancy, so network admins can grant localized management authority for local networks. In addition, because APs can support 8 SSIDs per radio (16 SSIDs per dual band APs), administrators have the option of using one SSID to create a guest network for visitors.
Nuclias Connect provides direct AP discovery and provisioning when it shares the same Layer-2/Layer-3 network with a given AP, allowing users to nd APs and import proles with minimum eort, which can be applied as needed to groups or individual APs for even more eective conguration.
Since Nuclias Connect’s software operates transparently on the network, an AP can be deployed anywhere in an NAT environment. Admins can provide & manage a variety of distributed deployments, including setting & admin account conguration for each deployment.
Nuclias Connect allows for multiple user authentications while enabling specic access control congurations for each SSID, giving admins the option of conguring separate internal networks for dierent subnets, while enabling more advanced Value-Added Services, such as Captive Portal or Wi-Fi Hotspot.
4
D-Link DAP-2622 User Manual

Nuclias Connect Key Features

Free-to-Download Management Software
Searchable Event Log and Change Log
License-Free Access Points
Trac Reporting & Analytics
Authentication via Customizable Captive Portal, 802.1x and RADIUS Server, POP3, LDAP, AD
Remote Cong. & Batch Cong.
Multilingual Support
Intuitive Interface
Multi-Tenant & Role-Based Administration
Payment Gateway (PayPal) Integration and Front-Desk Ticket Management
For more information on how to use Nuclias Connect with DAP-2622, please refer to the Nuclias Connect User Guide.
5
D-Link DAP-2622 User Manual

Package Contents

• DAP-2622 Nuclias Connect AC1200 Wave 2 Wall-Plated Access Point
• Power Adapter
• Mounting Plate and Hardware
• Ethernet Cable
Note: Using a power supply with a dierent voltage rating than the one included with the DAP-2622 will cause damage and void the warranty for this product.

System Requirements

y Computer with Windows®, Macintosh®, or a Linux-based operating system with an installed Ethernet Adapter y Internet Explorer 11, Safari 7, Firefox 28, or Google Chrome 33 and above (for web-based conguration)
6
D-Link DAP-2622 User Manual

Hardware Overview

LEDs Connections

1
5
1 Power/Status
Solid Red Indicates the access point has malfunctioned.
Blinking Red This LED will blink during boot-up.
Solid Green
Indicates that the DAP-2622 is working properly.
3
4
2
2 LAN (PoE) Port
3 Lan (PoE Out) Port Gigabit RJ-45 port for data and PSE out.
4 Ethernet LAN Port Gigabit RJ-45 port for data.
5 Reset Button
Connect to a Power over Ethernet (PoE) switch or router via an Ethernet cable.
Press and hold for ve seconds to reset the access point to the factory default settings. Press and hold for ten seconds to reboot the access point.
7
D-Link DAP-2622 User Manual

Basic Installation

Hardware Setup

To power the access point, you can use one of the following 2 methods:
Method 1 - Use if you have a PoE switch or router Method 2 - Use if you have a PoE injector and do not have a PoE-capable switch or router

Method 1 - PoE with PoE Switch or Router

Plug in one end of your Ethernet cable into the LAN port of the DAP-2622’s back panel, and the other end into the port on a switch.
DAP-2622
Congure the Access Point
1. Connect the access point and your computer to the same PoE switch. Manage the access point from the computer.
2. Enter dap2622.local in the address eld of your browser.
3. Log in to the Administration Web pages. The default login information is:
Username: admin Password: admin
PoE Switch
Computer
8
D-Link DAP-2622 User Manual

Method 2 - PoE without PoE Switch or Router

1. Connect one end of an Ethernet cable into the Data In port on the PoE base unit (not included) and the other end into one port on your switch, router, or computer.
2. Connect one end of an Ethernet cable into the P+Data Out port on the PoE base unit and the other end into the LAN (PoE) port on the access point.
3. Use the supplied power adapter. Connect the power adapter to the Power In receptor on the PoE adapter.
4. Connect the power cable to the power adapter and then connect the other end into a power outlet.
DAP-2622
PoE Adapter
5. Enter dap2622.local in the address eld of your browser.
6. Log in to the Administration Web pages. The default login information is: Username: admin Password: admin
Power Adapter
PC
Switch or Router
9
D-Link DAP-2622 User Manual

Setup Wizard

The rst login instance displays the System Settings window which requires you to change the password used to access the web UI. Additional settings include the System Time and System Country functions.
After logging in to the user interface, ll in the New Password and Conrm New Password elds.
In the System Time function, select Using Network Time Protocol (NTP) or Manually to dene the system time. If required, click the Daylight Sav- ing Oset drop-down menu and select the value (minutes).
y Setting NTP System Time: Before trying to congure NTP, perform a ping test with the NTP server. In the NTP Server eld, enter the NTP server
to use. Then click the Time Zone drop-down menu and select the appropriate time zone.
y Setting System Time Manually: From the System Date drop-down menu, select the Year, Month, and Day along with the Hour and Minutes
appropriate for the AP.
y Enable Daylight Saving: Click the radio button to enable the daylight saving time (DST) function. Set the DST start and end time by clicking
on the drop-down menus and setting the Month, Week, Day, Hour, and Minute of the DST starting days.
y System Country: Click the drop-down menu to select your country.
Once the settings are congured, click the Update button to accept the conguration and proceed to the main interface menu page.
10
D-Link DAP-2622 User Manual

Web User Interface

The DAP-2622 supports an elaborate web user interface where the user can congure and monitor the device. Launch a web browser, type dap2622.local in the address eld and then press Enter to login. Most of the congurable settings are located in the left menu of the web GUI which contains sections called Basic Settings, Advanced Settings and Status.
11
D-Link DAP-2622 User Manual

Wireless

On the wireless settings page, you can setup the basic wireless conguration for the access point. The user can choose from 4 dierent wireless modes:
Access Point - Used to create a wireless LAN WDS with AP - Used to connect multiple wireless networks while still functioning as a wireless access point WDS - Used to connect multiple wireless networks Wireless Client - Used when the access point needs to act as a wireless network adapter for an Ethernet-enabled device

Access Point Mode

Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Auto Channel Selection:
Select either 2.4 GHz or 5 GHz from the drop-down menu.
Select Access Point from the drop-down menu.
Service Set Identier (SSID) is the name designated for a specic wireless local area network (WLAN). The SSID’s factory default setting is dlink. The SSID can be easily changed to connect to an existing wireless network or to establish a new wireless network. The SSID can be up to 32 characters and is case-sensitive.
Select Enable to broadcast the SSID across the network, thus making it visible to all network users. Select Disable to hide the SSID from the network.
This feature when enabled automatically selects the channel that provides the best wireless performance. The channel selection process only occurs when the AP is booting up. To manually select a channel, set this option to Disable and select a channel from the drop-down menu.
12
D-Link DAP-2622 User Manual
Channel:
Channel Width:
Authentication:
To change the channel, rst toggle the Auto Channel Selection setting to Disable, and then use the drop-down menu to make the desired selection.
Note: The wireless adapters will automatically scan and match the wireless settings.
Click the drop-down menu to select 20 MHz, Auto 20/40 MHz or Auto 20/40/80 MHz. Select 20 MHz if you are not using any
802.11n wireless clients. Auto 20/40 MHz allows you to connect to both 802.11n and 802.11b/g or 802.11a wireless devices on your network.
Use the drop-down menu to choose Open System, Shared Key, WPA-Personal, WPA-Enterprise, or 802.1x.
• Select Open System to communicate the key across the network (WEP).
• Select Shared Key to limit communication to only those devices that share the same WEP settings. If multi-SSID is enabled, this option is not available.
• Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.
• Select WPA-Enterprise to secure your network with the inclusion of a RADIUS server.
• Select 802.1X if your network is using port-based Network Access Control.
13
D-Link DAP-2622 User Manual

WDS with AP Mode

Wireless Band:
Operation Mode:
Network Name (SSID):
Auto Channel Selection:
Channel:
Select either 2.4GHz or 5GHz from the drop-down menu.
WDS with AP mode is selected from the drop-down menu.
Service Set Identier (SSID) is the name designated for a specic wireless local area network (WLAN). The SSID’s factory default setting is dlink. The SSID can be easily changed to connect to an existing wireless network or to establish a new wireless network.
Enabling this feature automatically selects the channel that will provide the best wireless performance. This feature is not supported in WDS with AP mode. The channel selection process only occurs when the AP is booting up.
All devices on the network must share the same channel. To change the channel, use the drop-down menu to make the desired selection. (Note: The wireless adapters will automatically scan and match the wireless settings.)
Channel Width:
Click the drop-down menu to select 20 MHz, Auto 20/40 MHz or Auto 20/40/80 MHz. Select 20 MHz
if you are not using any 802.11n wireless clients. Auto 20/40 MHz allows you to connect to both
802.11n and 802.11b/g or 802.11a wireless devices on your network.
14
D-Link DAP-2622 User Manual
AP MAC Address:
Site Survey:
Authentication:
Enter the MAC address of the AP on your network that will serve as a bridge to wirelessly connect multiple networks.
Click on the Scan button to search for available wireless networks, then click on the available network that you want to connect to.
Use the drop-down menu to choose Open System or WPA-Personal.
• Select Open System to communicate the key across the network.
• Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.
15
D-Link DAP-2622 User Manual

WDS Mode

Wireless Band:
Mode:
Network Name (SSID):
Auto Channel Selection:
Channel:
Channel Width:
Select either 2.4GHz or 5GHz from the drop-down menu.
WDS is selected from the drop-down menu.
Service Set Identier (SSID) is the name designated for a specic wireless local area network (WLAN). The SSID’s factory default setting is dlink. The SSID can be easily changed to connect to an existing wireless network or to establish a new wireless network.
Enabling this feature automatically selects the channel that will provide the best wireless performance. This feature is not supported in WDS mode.
All devices on the network must share the same channel. To change the channel, use the drop-down menu to make the desired selection.
Click the drop-down menu to select 20 MHz, Auto 20/40 MHz or Auto 20/40/80 MHz. Select 20 MHz if you are not using any 802.11n wireless clients. Auto 20/40 MHz allows you to connect to both
802.11n and 802.11b/g or 802.11a wireless devices on your network.
AP MAC Address:
Enter the MAC address of the AP on your network that will serve as a bridge to wirelessly connect multiple networks.
16
D-Link DAP-2622 User Manual
Site Survey:
Authentication:
Click on the Scan button to search for available wireless networks, then click on the available network that you want to connect with.
Use the drop-down menu to choose Open System or WPA-Personal.
Select Open System to communicate the key across the network.
Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.
17
D-Link DAP-2622 User Manual

Wireless Client Mode

Wireless Band:
Mode:
Network Name (SSID):
Auto Channel Selection:
Channel:
Channel Width:
Select either 2.4 GHz or 5 GHz from the drop-down menu.
Wireless Client is selected from the drop-down menu.
Service Set Identier (SSID) is the name designated for a specic wireless local area network (WLAN). The SSID’s factory default setting is dlink. The SSID can be easily changed to connect to an existing wireless network.
Enabling this feature automatically selects the channel that will provide the best wireless performance. This feature is not supported in Wireless Client mode.
The channel used will be displayed, and matches the AP that the DAP-2622 is connected to when set to Wireless Client mode.
Click the drop-down menu to select 20 MHz, Auto 20/40 MHz or Auto 20/40/80 MHz. Select 20 MHz if you are not using any 802.11n wireless clients. Auto 20/40 MHz allows you to connect to both
802.11n and 802.11b/g or 802.11a wireless devices on your network.
Site Survey:
Authentication:
Click on the Scan button to search for available wireless networks, then click on the available network that you want to connect with.
Will be explained in the next topic.
Check the box to enable the Wireless MAC Clone function.
Click the drop-down menu to select Auto or Manual.
18
D-Link DAP-2622 User Manual

Wireless Client Mode

Enable:
MAC Source:
MAC Address:
Check the box to enable the Wireless MAC Clone function.
Click the drop-down menu to select Auto or Manual.
When MAC Source is set to Manual, click Scan to nd the MAC address to clone.
19
D-Link DAP-2622 User Manual

Wireless Security

There are mainly two forms of wireless encryption, called Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA). WEP was the rst security method developed. It is a low-level encryption but better than no encryption. WPA is a newer encryption standard, and with the more advanced WPA2 standard wireless networks have nally reached a point where their security is strong enough to give users peace of mind.

Wired Equivalent Privacy (WEP)

WEP provides two variations, called Open System and Shared Key.
Open System will send a request to the access point and if the key used matches the one congured on the access point, the access point will return a “success”
message back to the wireless client. If the key does not match the one congured on the access point, the access point will deny the connection request from the wireless client.
Shared Key will send a request to the access point and if the key used matches the one congured on the access point, the access point will send a challenge to the client. The client will then again send a conrmation of the same key back to the access point where the access point will either return a success or a denial packet back to the wireless client.
Encryption:
Use the radio button to disable or enable encryption.
Key Type*:
Key Size:
Key Index (1-4):
Select HEX* or ASCII.**
Select 64 Bits or 128 Bits.
Select the 1st through the 4th key to be the active key.
Key:
Input up to four keys for encryption. You will select one of these keys in the Key Index drop-down menu.
*Hexadecimal (HEX) digits consist of the numbers 0-9 and the letters A-F. **ASCII (American Standard Code for Information Interchange) is a code that represents English letters using numbers ranging from 0-127.
20
D-Link DAP-2622 User Manual

Wi-Fi Protected Access (WPA / WPA2)

WPA was created by the Wi-Fi Alliance to address the limitations and weaknesses found in WEP. This protocol is mainly based on the 802.11i standard. There are also two variations found in WPA called WPA-Personal (PSK) and WPA-Enterprise (EAP).
WPA-EAP requires the user to install a RADIUS server on the network for authentication. WPA-Personal does not require the user to install a RADIUS server on the network.
WPA-PSK is a weaker form of authentication when compared with WPA-EAP, but WPA-PSK is far more secure than WEP.
WPA2 is an upgraded form of WPA. WPA2 solves some security issues found in WPA. Similar to WPA, WPA2 has two variations, called WPA2­Personal (PSK) and WPA2-Enterprise (EAP).
WPA Mode:
Cipher Type:
Group Key Update:
PassPhrase:
When WPA-Personal is selected, you must also select a WPA mode from the drop-down menu: AUTO (WPA or WPA2), WPA2 Only, or WPA Only. WPA and WPA2 use dierent algorithms. AUTO (WPA or WPA2) allows you to use both WPA and WPA2.
When you select WPA-Personal, you must also select AUTO, AES, or TKIP from the pull-down menu.
Select the interval during which the group key will be valid. The default value of 3600 is recommended.
When you select WPA-Personal, please enter a passphrase in the corresponding eld.
21
D-Link DAP-2622 User Manual
WPA Mode:
Cipher Type:
Group Key Update Interval:
Network Access Protection:
RADIUS Server:
RADIUS Port:
When WPA-Enterprise is selected, you must also select a WPA mode from the drop-down menu:
AUTO (WPA or WPA2), WPA2 Only, or WPA Only. WPA and WPA2 use dierent algorithms.
AUTO (WPA or WPA2) allows you to use both WPA and WPA2.
When WPA-Enterprise is selected, you must also select a cipher type from the drop-down menu: Auto, AES, or TKIP.
Select the interval during which the group key will be valid. 3600 is the recommended value as a lower interval may reduce data transfer rates.
Enable or disable Microsoft Network Access Protection.
Enter the IP address of the RADIUS server.
Enter the RADIUS port.
RADIUS Secret:
Account Server:
Account Port:
Account Secret:
Enter the RADIUS secret.
Enter the IP address of the account server.
Enter the account port.
Enter the account secret.
22
D-Link DAP-2622 User Manual
LAN
LAN is short for Local Area Network. This is your internal network. These are the IP settings of the LAN interface for the DAP-2622. These settings may be referred to as private settings. You may change the LAN IP address if needed. The LAN IP address is private to your internal network and cannot be seen on the Internet.
Get IP From:
IP Address:
Subnet Mask:
Default Gateway:
DNS:
Click the drop-down menu to select IP address setting mode.
Static IP (Manual): Select this setting to assign a static IP address to the device. Dynamic IP (DHCP): Select this setting to obtain an IP address from a DHCP server on the network.
Enter the IP address to assign a static IP address.
Enter the subnet mask. All devices in the network must share the same subnet mask.
Enter the IP address of the gateway/router in your network.
Enter a DNS server IP address. This is usually the local IP address of your gateway/router.
23
D-Link DAP-2622 User Manual

IPv6

Enable IPv6:
Get IP From:
IP Address:
Prex:
Default Gateway:
Check to enable IPv6.
Choose Auto to acquire IPv6 address automatically or use Static to set IPv6 address manually. When Auto is selected, the other elds here will be grayed out.
Enter the LAN IPv6 address used here.
Enter the LAN subnet prex length value used here.
Enter the LAN default gateway IPv6 address used here.
24
D-Link DAP-2622 User Manual

Advanced Settings

In the Advanced Settings section, the user can congure advanced settings concerning Performance, Multiple SSID, VLAN, Security, Quality of Service, AP Array, Web Redirection, DHCP Server, Filters and Scheduling. The following pages will explain settings found in this section in more detail.
25
D-Link DAP-2622 User Manual

Performance

On the Performance Settings page, you can congure more advanced settings concerning the wireless signal and hosting.
Wireless Band:
Wireless:
Wireless Mode:
Data Rate*:
Beacon Interval (40-500):
Select either 2.4GHz or 5GHz.
Use the drop-down menu to turn the wireless function on or o.
Click the drop-down menu to select the wireless mode. 2.4GHz band supports: Mixed 802.11b, 802.11g, 802.11n; Mixed 802.11b,
802.11g; and 802.11n Only. 5GHz band supports: Mixed 802.11n,
802.11a; 802.11a Only; 802.11n Only; and Mixed 802.11ac.
Please note that when backwards compatibility is enabled for legacy (802.11a/g/b) clients, degradation of 802.11n wireless performance is expected.
When Wireless Mode is set to Mixed 802.11b, 802.11g (for 2.4GHz) and 802.11a Only (for 5GHz), click the drop-down menu to indicate the base transfer rate of wireless adapters on the wireless LAN. The AP will adjust the base transfer rate depending on the base rate of the connected device. If there are obstacles or interference, the AP will derate the transfer rate.
Beacons are packets sent by an access point to synchronize a wireless network. Specify a value in milliseconds. The default (100) is recommended. Setting a higher beacon interval can help to save the power of wireless clients, while setting a lower one can help a wireless client connect to an access point faster.
DTIM Interval (1-15):
Select a Delivery Trac Indication Message setting between 1 and 15. 1 is the default setting. DTIM is a countdown informing clients of the next window for listening to broadcast and multicast messages.
26
Loading...
+ 60 hidden pages