D-LINK DIS3650AP User guide

Download

NUCLIAS CONNECT

DIS-3650AP User Guide

2022 | Business Class Networking

V 1.00

Table of Contents

Nuclias Connect .......................................................................................... 4

Introduction ...................................................................................................... 4

Nuclias Connect Key Features ....................................................................5

Package Contents ...........................................................................................6

System Requirements ....................................................................................6

Hardware Overview ................................................................................... 7

LED Indicators ................................................................................................... 7

Interface Connectors ................................................................................. 8

Top ........................................................................................................................ 8

Back ...................................................................................................................... 8

Installation ................................................................................................... 9

Using Power over Ethernet (PoE) ...................................................... 9

Conguration .............................................................................................. 9

Using Nuclias Connect ......................................................................... 9

Nuclias Connect App Conguration ...............................................9

Manual Conguration ........................................................................10

Mounting ...................................................................................................11

LAN Port Waterproof Enclosure ......................................................11

Install Enclosure Onto The Articulation Pole ..............................11

Installation for Wall ..............................................................................12

Installation for Pole ..............................................................................12

Mounting for Pole 1~ 3” (25.4~76.2mm) ..................................13

Install Articulation Pole with The T-formed Bracket ................13

Installation for DIN Rail ....................................................................14

Setup Wizard .............................................................................................16

Web User Interface ...................................................................................17

Wireless .............................................................................................................18

Access Point Mode ...............................................................................18

WDS with AP Mode .............................................................................20

WDS Mode ..............................................................................................22

Wireless Client Mode ..........................................................................24

Wireless Security ..................................................................................25

Wired Equivalent Privacy (WEP) ...............................................25

Wi-Fi Protected Access (WPA/WPA2/WPA3) ........................26

LAN ............................................................................................................28

IPv6 ............................................................................................................29

Advanced Settings ........................................................................................30

Performance ..........................................................................................31

Wireless Resource Control ..........................................................................33

Multi-SSID ...............................................................................................35

VLAN .........................................................................................................37

VLAN List ..........................................................................................37

Port List .............................................................................................38

Add/Edit VLAN ................................................................................39

PVID Settings ..................................................................................40

Intrusion ..................................................................................................41

Schedule ..................................................................................................42

Internal RADIUS Server ......................................................................43

ARP Spoong Prevention ..................................................................44

Bandwidth Optimization ...................................................................45

Hotspot 2.0 .............................................................................................47

Hotspot .............................................................................................47

Interworking ...................................................................................48

WAN Metrics .................................................................................... 49

LIST .....................................................................................................50

OSU .....................................................................................................51

Captive Portal ........................................................................................53

Authentication Settings-Web Redirection Only ................. 53

Authentication Settings- Username/Password ..................55

Authentication Settings- Passcode .........................................57

Authentication Settings- Remote RADIUS ...........................59

Authentication Settings- LDAP ................................................61

Authentication Settings- POP3 ................................................63

MAC Bypass .....................................................................................66

DHCP Server ...........................................................................................67

Dynamic Pool Settings ................................................................67

Static Pool Setting .........................................................................68

Current IP Mapping List ..............................................................69

Filters ........................................................................................................70

Wireless MAC ACL .........................................................................70

IP Filter Settings .............................................................................71

WLAN Partition ...............................................................................72

Trac Control .................................................................................................73

Uplink/Downlink Setting ...................................................................73

QoS ............................................................................................................74

Trac Manager .....................................................................................75

Status .................................................................................................................76

Device Information ..............................................................................77

Client Information ................................................................................78

WDS Information Page .......................................................................79

Statistics ............................................................................................................80

Ethernet Trac Statistics ...................................................................80

WLAN Trac Statistics ........................................................................81

Log ...................................................................................................................... 82

View Log ..................................................................................................82

Log Settings ...........................................................................................83

Maintenance Section ...................................................................................84

Administration ...............................................................................................85

Limit Administrator .............................................................................85

System Name Settings .......................................................................86

Console Settings ...................................................................................87

Ping Control Settings ..........................................................................87

LED Settings ...........................................................................................87

Country Settings...................................................................................87

DDP Settings ..........................................................................................88

Nuclias Connect Settings ..................................................................88

Firmware and SSL Upload .................................................................89

Conguration File Upload .................................................................90

Time and Date Settings ......................................................................91

Conguration and System .........................................................................92

System Settings .............................................................................................93

Help ....................................................................................................................94

Knowledge Base .......................................................................................95

Wireless Basics ................................................................................................95

Wireless Installation Considerations ......................................................96

Troubleshooting ....................................................................................... 97

Why can’t I access the web-based conguration utility? .......97

What can I do if I forgot my password? ........................................97

How to check your IP address? ........................................................98

How to statically assign an IP address? ........................................99

Technical Specications ........................................................................100

Antenna Patterns ...................................................................................101

Nuclias Connect

Introduction

Nuclias Connect is D-Link’s centralized management solution for Small-to-Medium-Sized Business (SMB) networks. Nuclias Connect makes it easier to analyze, automate, congure, optimize, scale, and secure your network — delivering the convenience of an Enterprise-wide management solution, at an SMB price. Nuclias Connect gives you the nancial and technical exibility to expand from a small network to a larger one (up to 1,000 APs), while retaining a robust and centralized management system. And with its intuitive Graphical User Interface (GUI), a wealth of enhanced AP features, and a setup wizard that supports 11 languages, Nuclias Connect minimizes the hassle of deployment, conguration, and administration tasks.

Deployable on Windows server (or Linux via Docker), PC, or Smartphone (via lite management app) the Nuclias Connect free-to-download software is capable of managing up to 1,000 Access Points (APs) without licensing charges, coupled with an inexpensive optional hardware controller (The Hub) suitable for remote locations. Through software-based monitoring and remote management of all wireless Access Points (APs) on your network, Nuclias Connect oers tremendous exibility compared to traditional hardware-based unied management systems. Conguration can be done remotely. Network trac analytics are available at a glance (in whole or in part). Load Balancing, Airtime Fairness, and Localized Throttling are enabled.

Nuclias Connect supports multi-tenancy, so network admins can grant localized management authority for local networks. In addition, because APs can support 8 SSIDs per radio (16 SSIDs per dual band APs), administrators have the option of using one SSID to create a guest network for visitors.

Nuclias Connect provides direct AP discovery and provisioning when it shares the same Layer-2/Layer-3 network with a given AP, allowing users to nd APs and import proles with minimum eort, which can be applied as needed to groups or individual APs for even more eective conguration.

Since Nuclias Connect’s software operates transparently on the network, an AP can be deployed anywhere in an NAT environment. Admins can provide & manage a variety of distributed deployments, including setting & admin account conguration for each deployment.

Nuclias Connect allows for multiple user authentications while enabling specic access control congurations for each SSID, giving admins the option of conguring separate internal networks for dierent subnets, while enabling more advanced Value-Added Services, such as Captive Portal or Wi-Fi Hotspot.

Nuclias Connect

Nuclias Connect Key Features

• Free-to-Download Management Software

• Searchable Event Log and Change Log

• License-Free Access Points

• Trac Reporting & Analytics

• Authentication via Customizable Captive Portal, 802.1x and RADIUS Server, POP3, LDAP, AD

• Remote Cong. & Batch Cong.

• Multilingual Support

• Intuitive Interface

• Multi-Tenant & Role-Based Administration

• Payment Gateway (Paypal) Integration and Front-Desk Ticket Management

For more information on how to use Nuclias Connect with DIS-3650AP, please refer to the Nuclias Connect User Guide.

Nuclias Connect

• DIS-3650AP Access Point

• Quick Start Guide

• Mounting kit (Wall/Pole/DIN Rail Mount)

- Articulation Pole x 1

- T-form Bracket x 1

- M8x40 Screw Bolts x 1

- M6 Screw x 4

- M8 Nut x 1

- Washer (M8 x 1 ; M6 x 4)

- Spring Washer (M8 x 1 ; M6 x 4)

- Stainless Hose Clamp x 2

- Anchors plastic screws x 4

- Stainless screws x 4

- DIN Rail mounting kit

Package Contents

System Requirements

y Computers with Windows®, Macintosh®, or Linux-based operating systems with an Ethernet Adapter y Internet Explorer 11, Safari 7, Firefox 28, or Google Chrome 33 and above (for web-based conguration)

Hardware Overview

LED Indicators

Green (Solid) - Device operational

1 Power/Status

2 2.4

3 5G

4 LAN (PoE) Indicates whether a device is connected to LAN and receiving power on the PoE port.

Red (Flashing) - Device booting up/Device malfunctioned Red (Solid) - Device boot up has failed

Solid green - 2.4GHz is enabled Blinking green - data transmission

Solid green - 5GHz is enabled Blinking green - data transmission

Interface Connectors

Top

1 2 3

Back

1 LAN(PoE)

2 CONSOLE

3 Reset

Gigabit RJ-45 port for data and Power over Ethernet (PoE) power.

Connect an RJ-45 Ethernet console for CLI control (Option)

Press and hold for 10 seconds to factory reset the device

1 DIN rail Adapter Connect DIN rail kit to mount it on DIN-Rail.

2 Wall/Pole Mount

3 Grounding Wire Connector for the grounding wire.

Mount to connect to the mounting plate on a wall or a pole.

Installation

Using Power over Ethernet (PoE)

Use a standard Ethernet cable to connect the LAN(PoE) port on the DIS-3650AP to a PoE power source device such as an 802.3at PoE switch or PoE injector.

Conguration

Using Nuclias Connect

The DIS-3650AP is designed to be managed through Nuclias Connect. Refer to the Nuclias Connect Manual for detailed conguration instructions.

Note: D-Link recommends manually conguring the device before mounting it.

Nuclias Connect App Conguration

1. Download the free Nuclias Connect app from the App Store or Google Play by searching for Nuclias Connect or by scanning the QR code below.

2. Open the Nuclias Connect app and follow the onscreen instructions to discover and set up your device.

Conguration

Manual Conguration

Note: The management computer, DHCP server and DIS-3650AP must be in the same subnet.

Use one of the following methods to access the web user interface:

Connecting through Ethernet

1. Use an Ethernet cable to connect the DIS-3650AP to the switch or router the management computer is connected to.

2. Manage the access point from a computer. Enter dis3650ap.local. in the address eld of your browser.

3. Log in to the administration user interface. The default login information is

Username: admin Password: admin

Connecting Wirelessly

1. Connect the management computer to the default SSID of the DIS-3650AP, “dlink”.

2. Manage the access point from a computer. Enter dis3650ap.local. in the address eld of your browser.

3. Log in to the administration user interface. The default login information is

Username: admin Password: admin

Mounting

LAN Port Waterproof Enclosure

Connect an Ethernet Cable to the LAN(PoE) port on the DIS-3650AP. Use the LAN Port Waterproof Enclosures to seal the ports.

Install Enclosure Onto The Articulation Pole

Attach the articulation pole to back of AC using M5x16 screws & washers.

Mounting

Installation for Wall

Fix the T-from Bracket to the wall by using the wood / gyprock screws.

Installation for Pole

Mounting for Recommended Pole Dia.: 1.5~2”(38.1~50.8mm)

(A)

(A) The diameter of the Pole is too large Will result in the failure to install

smoothly, the diameter is too small and the clamping force is insucient. * Pole diameter Max.: 2.1”(53.3mm) Min.: 1.0”(25.4mm)

(B) To minimize bolts crosstalk, the bolts should gradually increasing load

and parallel tighten.

(B)

Mounting

Mounting for Pole 1~ 3” (25.4~76.2mm)

Fix the T-from Bracket to the pole by using the stainless hose clamp.

Install Articulation Pole with The T-formed Bracket

After nishing the previous two steps, x the articulation pole to the T-formed bracket by using M8x40 bolts, nut, spring washer and washer.

Mounting

Installation for DIN Rail

The DIS-3650AP can be mounted on a standard DIN rail using the included DIN mounting kit. Use the following instructions to install the DIS-3650AP on a rail:

1. Install a Din rail kit on enclosure. Check that the DIN rail kit is installed properly using two screws on each end.

2. Position the DIS-3650AP against the rail, then tilt it upwards and hook the DIN rail clip on the back of the device against the rail. Snap the device into place to complete the installation.

Mounting

3. A grounding wire is to protect your device from lightning strikes and the buildup of static electricity. Attach the grounding wire to the DIS-3650AP using the included screw(M3.9 * 7.8 mm).

4. Tighten the grounding wire (green-and-yellow, 18AWG) to the DIS-3650AP until it is securely attached.

5. Attach the other end of the grounding wire to either the wall or pole mount. Ensure that the wall or pole mount is connected to an electrical ground.

Setup Wizard

The rst login instance displays the System Settings window which requires a change in password. Additional settings include the System Time and System Country functions. After logging in to the user interface, ll in the New Password and Conrm New Password elds. In the System Time function, select Using Network Time Protocol (NTP) or Manually to dene the system time. If required, click the Daylight Sav- ing Oset drop-down menu and select the value (minutes).

y Setting NTP System Time: Before trying to congure NTP check, perform a ping test with the NTP server. In the NTP Server eld, enter the NTP

server to use. Then click the Time Zone drop-down menu and select the appropriate time zone.

y Setting System Time Manually: From the System Date drop-down menu, select the Year, Month, and Day along with the Hour and Minutes ap-

propriate for the AP.

y Enable Daylight Saving: Click the radio button to enable the daylight savings time (DST) function. Set the DST start (24 hours) and end (24

hours) time by clicking on the drop-down menus and setting the Month, Week, Day, Hour, and Minute of the DST starting days.

Once the settings are congured, click Update button to accept the conguration and proceed to the main interface menu page.

Web User Interface

The DIS-3650AP supports an elaborate web user interface where the user can congure and monitor the device. Launch a web browser, type in http://dis2650ap.local and then press Enter to login. The default username and password is: admin Most of the congurable settings are located in the menu on the left side of the web GUI which contains sections called Basic Settings, Advanced Settings and Status.

Web User Interface

Wireless

On the wireless settings page, you can setup the basic wireless conguration for the access point. The user can choose from 4 dierent wireless modes:

• Access Point - Used to create a wireless LAN

• WDS with AP - Used to connect multiple wireless networks while still functioning as a wireless access point

• WDS - Used to connect multiple wireless networks

• Wireless Client - Used when the access point needs to act as a wireless network adapter for an Ethernet enabled device

Access Point Mode

Wireless Band:

Mode:

Network Name (SSID):

SSID Visibility:

Auto Channel Selection:

Select either 2.4 GHz or 5 GHz from the drop-down menu.

Select Access Point from the drop-down menu.

Service Set Identier (SSID) is the name designated for a specic wireless local area network (WLAN). The SSID’s factory default setting is dlink. The SSID can be easily changed to connect to an existing wireless network or to establish a new wireless network. The SSID can be up to 32 characters and is case-sensitive.

Select Enable to broadcast the SSID across the network, thus making it visible to all network users. Select Disable to hide the SSID from the network.

This feature when enabled automatically selects the channel that provides the best wireless performance. The channel selection process only occurs when the AP is booting up. To manually select a channel, set this option to Disable and select a channel from the drop-down menu.

Web User Interface

Channel:

Channel Width:

Authentication:

802.11k/v/r:

To change the channel, rst toggle the Auto Channel Selection setting to Disable, and then use the drop-down menu to make the desired selection.

Note: The wireless adapters will automatically scan and match the wireless settings.

Allows you to select the channel width you would like to operate in. Select 20 MHz if you are not using any 802.11n wireless clients. Auto 20/40 MHz allows you to connect to both 802.11n and 802.11b/g or 802.11a wireless devices on your network.

Use the drop-down menu to choose Open System, Shared Key, WPA-Personal, WPA-Enterprise, or 802.1x.

• Select Open System to communicate the key across the network (WEP).

• Select Shared Key to limit communication to only those devices that share the same WEP settings. If multi-SSID is enabled, this option is not available.

• Select WPA-Personal to secure your network using a password and dynamic key. No RADIUS server is required.

• Select WPA-Enterprise to secure your network with the inclusion of a RADIUS server.

• Select 802.1X if your network is using port-based Network Access Control.

• Select Enhance Open to secure your network by using Opportunistic Wireless Encryption technology.

Use the drop-down menu to choose to enable or disable 802.11k/v/r

Web User Interface

WDS with AP Mode

Wireless Band:

Mode:

Network Name (SSID):

SSID Visibility:

Auto Channel Selection:

Select either 2.4GHz or 5GHz from the drop-down menu.

WDS with AP mode is selected from the drop-down menu.

Enable or Disable SSID visibility. Enabling this feature broadcasts the SSID across the network, thus making it visible to all network users.

Enabling this feature automatically selects the channel that will provide the best wireless performance. This feature is not supported in WDS with AP mode. The channel selection process only occurs when the AP is booting up.

Channel:

Channel Width:

All devices on the network must share the same channel. To change the channel, use the drop-down menu to make the desired selection. (Note: The wireless adapters will automatically scan and match the wireless settings.)

802.11a wireless devices on your network.

Web User Interface

Remote AP MAC

Address:

Site Survey:

Authentication:

Enter the MAC addresses of the APs on your network that will serve as bridges to wirelessly connect multiple networks.

Click on the Scan button to search for available wireless networks, then click on the available network that you want to connect with.

Use the drop-down menu to choose Open System, or WPA-Personal.

• Select Open System to communicate the key across the network.

• Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.

Web User Interface

WDS Mode

Wireless Band:

Mode:

Network Name (SSID):

Auto Channel

Selection:

Channel:

Channel Width:

Select either 2.4GHz or 5GHz from the drop-down menu.

WDS is selected from the drop-down menu.

Enabling this feature automatically selects the channel that will provide the best wireless performance. This feature is not supported in WDS mode.

All devices on the network must share the same channel. To change the channel, use the drop-down menu to make the desired selection.

Use the drop-down menu to choose 20 MHz or Auto 20/40 MHz.

Remote AP MAC

Address:

Enter the MAC addresses of the APs on your network that will serve as bridges to wirelessly connect multiple networks.

Web User Interface

Site Survey:

Authentication:

Click on the Scan button to search for available wireless networks, then click on the available network that you want to connect with.

Use the drop-down menu to choose Open System, or WPA-Personal.

• Select Open System to communicate the key across the network.

• Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.

Web User Interface

Wireless Client Mode

Wireless Band:

Mode:

Network Name (SSID):

SSID Visibility:

Auto Channel Selection:

Channel:

Select either 2.4 GHz or 5 GHz from the drop-down menu.

Wireless Client is selected from the drop-down menu.

This option is unavailable in Wireless Client mode.

Enabling this feature automatically selects the channel that will provide the best wireless performance. This feature is not supported in Wireless Client mode.

The channel used will be displayed, and matches the AP that the DIS-3650AP is connected to when set to Wireless Client mode.

Channel Width:

Site Survey:

Authentication:

Use the drop-down menu to choose 20 MHz or Auto 20/40 MHz.

Click on the Scan button to search for available wireless networks, then click on the available network that you want to connect with.

Will be explained in the next topic.

Web User Interface

Wireless Security

Wireless security is a key concern for any wireless network installed. Wireless networks will broadcast it’s presence for anyone to connect to it. Today, wireless security has advanced to a level where it is virtually impenetrable. There are mainly two forms of wireless encryption and they are called Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA). WEP was the rst security method developed. It is a low level encryption but better than no encryption. WPA is the newest encryption protocol. With the advanced WPA2 standard wireless networks have nally reach a point where the security is strong enough to give users the peace of mind when installing wireless networks.

Wired Equivalent Privacy (WEP)

WEP provides two variations called Open System and Shared Key.

Open System sends a request to the access point and if the key used matches the one congured on the access point, the access point will return a success

message back to the wireless client. If the key does not match the one congured on the access point, the access point will deny the connection request from the wireless client.

Shared Key sends a request to the access point and if the key used matches the one congured on the access point, the access point will send a challenge to the client. The client will then again send a conrmation of the same key back to the access point where the access point will either return a successful or a denial packet back to the wireless client.

Encryption:

Use the radio button to disable or enable encryption.

Key Type*,**:

Key Size:

Key Index (1-4):

Select HEX or ASCII.

Select 64 Bits or 128 Bits.

Select the 1st through the 4th key to be the active key.

Key:

Input up to four keys for encryption. You will select one of these keys in the Key Index drop-down menu.

**Hexadecimal (HEX) digits consist of the numbers 0-9 and the letters A-F. *ASCII (American Standard Code for Information Interchange) is a code that represents English letters using numbers ranging from 0-127.

Web User Interface

Wi-Fi Protected Access (WPA/WPA2/WPA3)

WPA was created by the Wi-Fi Alliance to address the limitations and weaknesses found in WEP. This protocol is mainly based on the 802.11i standard. There are also two variations found in WPA called WPA-Personal (PSK) and WPA-Enterprise (EAP).

WPA-Enterprise requires the user to install a Radius Server on the network for authentication. WPA-Personal does not require the user to install a Radius Server on the network.

Comparing WPA-PSK with WPA-EAP, WPA-PSK is seen as a weaker authentication but comparing WPA-PSK to WEP, WPA-PSK is far more secure than WEP. WPA-EAP is the highest level of wireless security a user can use for wireless today.

WPA3 is an upgrade of WPA2. WPA3 yet again solves some possible security issues found in WPA2.

DIS-3650AP supports WPA/WPA2 Enterprise and WPA3 Personal only, it does not support WPA3 Enterprise due to hardware limitation.

WPA Mode:

Cipher Type:

Group Key Update:

Pass Phrase:

When WPA-Personal is selected for Authentication type, you must also select a WPA mode from the drop-down menu: AUTO (WPA or WPA2), WPA2 Only, WPA, WPA2 and WPA3 use dierent algorithms. AUTO (WPA or WPA2) allows you to use both WPA and WPA2, and WPA2 or WPA3 allows you to use both of WPA2 and WPA3.

When you select WPA-Personal, you must also select AUTO, AES, or TKIP from the pull down menu.

Select the interval during which the group key will be valid. The default value of 1800 is recommended.

When you select WPA-Personal, please enter a Pass Phrase in the corresponding eld.

Web User Interface

WPA Mode:

Cipher Type:

Group Key Update Interval:

Network Access Protection:

When WPA-Enterprise is selected, you must also select a WPA mode from the drop-down menu: AUTO (WPA or WPA2), WPA2 Only, WPA, WPA2 and WPA3 use dierent algorithms. AUTO (WPA or WPA2) allows you to use both WPA and WPA2, and WPA2 or WPA3 allows you to use both of WPA2 and WPA3.

When WPA-Enterprise is selected, you must also select a cipher type from the drop-down menu: Auto, AES, or TKIP. (DIS-3650AP supports WPA/ WPA2 Enterprise only and it does not support WPA3 Enterprise)

Select the interval during which the group key will be valid. 1800 is the recommended value as a lower interval may reduce data transfer rates.

Enable or disable Microsoft Network Access Protection.

RADIUS Server:

RADIUS Port:

RADIUS Secret:

Account Server:

Account Port:

Account Secret:

Enter the IP address of the RADIUS server.

Enter the RADIUS port.

Enter the RADIUS secret.

Enter the IP address of the Account Server.

Enter the Account port.

Enter the Account secret.

Web User Interface

LAN

LAN is short for Local Area Network. This is considered your internal network. These are the IP settings of the LAN interface for the DIS-3650AP. These settings may be referred to as private settings. You may change the LAN IP address if needed. The LAN IP address is private to your internal network and cannot be seen on the Internet.

Get IP From:

IP Address:

Subnet Mask:

Default Gateway:

DNS:

Dynamic IP (DHCP) is chosen here. Choose this option if you have a DHCP server in your network. When Dynamic IP (DHCP) is selected, the other elds here will be grayed

out. Please allow about 2 minutes for the DHCP client to be functional once this selection is made. If you wish to assign a static IP address to the DIS-3650AP, choose Static IP (Manual).

Assign a static IP address that is within the IP address range of your network.

Enter the subnet mask. All devices in the network must share the same subnet mask.

Enter the IP address of the gateway/router in your network.

Enter a DNS server IP address. This is usually the local IP address of your gateway/router.

Web User Interface

IPv6

Enable IPv6:

Get IP From:

IP Address:

Prex:

Default Gateway:

Check to enable the IPv6

Auto is chosen here. Choose this option the DIS-3650AP can get IPv6 address automatically or use Static to set IPv6 address manually.

Other elds here will be grayed out when Auto is selected.

Enter the LAN IPv6 address used here.

Enter the LAN subnet prex length value used here.

Enter the LAN default gateway IPv6 address used here.

Web User Interface

Advanced Settings

In the Advanced Settings Section users can congure advanced settings concerning Performance, Multiple SSID, VLAN, Security, Quality of Service, AP Array, Web Redirection, DHCP Server, Filters and Scheduling. The following pages will explain settings found in the Advanced Settings section in more detail.

Web User Interface

Performance

On the Performance Settings page users can congure more advanced settings concerning the wireless signal and hosting.

Wireless Band:

Wireless:

Wireless Mode:

Data Rate*:

Select either 2.4GHz or 5GHz.

Use the drop-down menu to turn the wireless function On or O.

The dierent combinations of clients that can be supported include Mixed 802.11n, 802.11g and 802.11b, Mixed 802.11g and 802.11b and 802.11n Only in the 2.4 GHz band and Mixed 802.11n, 802.11a,

802.11a only, and 802.11n Only in the 5 GHz band. Please note that when backwards compatibility is enabled for legacy (802.11a/g/b) clients, degradation of 802.11n (draft) wireless performance is expected.

Indicate the base transfer rate of wireless adapters on the wireless LAN. The AP will adjust the base transfer rate depending on the base rate of the connected device. If there are obstacles or interference, the AP will step down the rate. This option is enabled in Mixed 802.11g and 802.11b mode (for 2.4 GHz) and 802.11a only mode (for 5 GHz). The choices available are Best (Up to 54), 54, 48, 36, 24, 18, 12, 9, 6 for 5 GHz and Best (Up to 54), 54, 48, 36, 24, 18, 12, 9, 6, 11, 5.5, 2 or 1 for 2.4 GHz.

Beacon Interval (40-

500):

DTM Interval (1-15):

Beacons are packets sent by an access point to synchronize a wireless network. Specify a value in milliseconds. The default (100) is recommended. Setting a higher beacon interval can help to save the power of wireless clients, while setting a lower one can help a wireless client connect to an access point faster.

Select a Delivery Trac Indication Message setting between 1 and 15. 1 is the default setting. DTIM is a countdown informing clients of the next window for listening to broadcast and multicast messages.

Web User Interface

Transmit Power:

WMM (Wi-Fi

Multimedia):

Ack Time Out

(2.4 GHZ, 64~200):

Short GI:

IGMP Snooping:

Multicast Rate:

This setting determines the power level of the wireless transmission. Transmitting power can be adjusted to eliminate the overlapping of wireless area coverage between two access points where interference is a major concern. For example, if wireless coverage is intended for half of the area, then select 50% as the option. Use the drop-down menu to select 100%, 50%, 25%, or

12.5%.

WMM stands for Wi-Fi Multimedia. Enabling this feature will improve the user experience for audio and video applications over a Wi-Fi network.

To eectively optimize throughput over long distance links enter a value for Acknowledgement Time Out between 25 and 200 microseconds for 5 GHz or from 64 to 200 microseconds in the 2.4 GHz in the eld provided.

Select Enable or Disable. Enabling a short guard interval can increase throughput. However, be aware that it can also increase the error rate in some installations due to increased sensitivity to radio-frequency installations.

Select Enable or Disable. Internet Group Management Protocol allows the AP to recognize IGMP queries and reports sent between routers and an IGMP host (wireless STA). When IGMP snooping is enabled, the AP will forward multicast packets to an IGMP host based on IGMP messages passing through the AP.

Adjust the multicast packet data rate here. The multicast rate is supported in AP mode, (2.4 GHZ and 5 GHZ) and WDS with AP mode, including Multi-SSIDs.

Multicast Bandwidth

Control :

Maximum Multicast

Bandwidth :

HT20/40 Coexistence :

Transfer DHCP Oer

to Unicast :

PMF:

Adjust the multicast packet data rate here. The multicast rate is supported in AP mode, and WDS with AP mode, including MultiSSIDs

Set the multicast packets maximum bandwidth pass through rate from the Ethernet interface to the Access Point.

Enable this option to reduce interference from other wireless networks in your area. If the channel width is operating at 40MHz and there is another wireless network’s channel over-lapping and causing interference, the Access Point will automatically change to 20MHz.

Enable to transfer the DHCP Oer to Unicast from LAN to WLAN, suggest to enable this function if stations number is larger than 30.

Enable this option to help protect clients against forged management frames spoofed from other devices that might otherwise disrupt a valid user session.

Web User Interface

Wireless Resource Control

The Wireless Resource Control window is used to congure the wireless connection settings so that the device can detect the best wireless connection in your environment.

Airtime Fairness:

Wireless band:

Band Steering:

Band Steering Age:

Band Steering

Dierence:

Enable airtime fairness to help regulate downlink airtime.

Select 2.4GHz or 5GHz.

Use the drop-down menu to Enable the 5G Preferred function. When the wireless clients support both

2.4GHz and 5GHz and the 2.4GHz signal is not strong enough, the device will use 5G as higher priority.

Enter the time in seconds to specify the interval of updating information.

The 5G preferred dierence value is equal to the number of 5GHz wireless client connections minus the number of 2.4GHz wireless client connections. If the number of 5GHz wireless client connections minus the number of 2.4GHz wireless client connections exceed this value, the extra 5GHz wireless client connections will be forced to connect to the 2.4GHz band and not the 5GHz band.

Band Steering

Refuse Number:

Connection Limit:

Enter the maximum 5G connection attempts allowed before the 5G preferred function will be disabled for the wireless station connection.

Select Enable or Disable. This is an option for load balancing. This determines whether to limit the number of users accessing this device. The exact number is entered in the User Limit eld below. This feature allows the user to share the wireless network trac and the client using multiple APs. If this function is enabled and when the number of users exceeds this value, or the network utilization of this AP exceeds the percentage that has been specied, the DIS-3650AP will not allow clients to associate with the AP.

Web User Interface

User Limit:

11n Preferred:

Network Utilization:

Aging out:

RSSI Threshold:

Data Rate Threshold:

ACL RSSI:

Set the maximum amount of users that are allowed access (zero to 64 users) to the device using the specied wireless band. The default setting is 20.

Use the drop-down menu to Enable the 11n Preferred function. The wireless clients with 802.11n protocol will have higher priority to connect to the device.

Set the maximum utilization of this access point for service. The DIS-3650AP will not allow any new clients to associate with the AP if the utilization exceeds the value the user species. Select a utilization percentage between 100%, 80%, 60%, 40%, 20%, or 0%. When this network utilization threshold is reached, the device will pause one minute to allow network congestion to dissipate.

Use the drop-down menu to select the criteria of disconnecting the wireless clients. Available options are RSSI and Data Rate.

When RSSI is selected in the Aging out drop-down menu, select the percentage of RSSI here. When the RSSI of wireless clients is lower than the specied percentage, the device disconnects the wireless clients.

When Data Rate is selected in the Aging out drop-down menu, select the threshold of data rate here. When the data rate of wireless clients is lower than the specied number, the device disconnects the wireless clients.

Use the drop-down menu to Enable the function. When enabled, the device denies the connection request from the wireless clients with the RSSI lower than the specied threshold below.

ACL RSSI Threshold:

Set the ACL RSSI Threshold.

Web User Interface

Multi-SSID

This device supports up to four multiple Service Set Identiers. You can set the Primary SSID under Basic > Wireless. The SSID’s factory default setting is dlink. The SSID can be easily changed to connect to an existing wireless network or to establish a new wireless network.

Enable Multi-

SSID:

Enable Priority:

Band:

Index:

SSID:

SSID Visibility:

Security:

Check to enable support for multiple SSIDs.

Check to enable support for SSID priority level.

Select 2.4GHz or 5GHz.

You can select up to seven multi-SSIDs. With the Primary SSID, you have a total of eight multi-SSIDs.

Enable or Disable SSID visibility. Enabling this feature broadcasts the SSID across the network, thus making it visible to all network users.

The Multi-SSID security can be Open System, WPAPersonal, or WPA-Enterprise. For a detailed description of the Open System parameters please go to page 23. For a detailed description of the WPA-Personal parameters please go to page 24. For a detailed description of the WPA-Enterprise parameters please go to page 25.

Priority:

WMM (Wi-Fi

Multimedia):

Select the priority level of the SSID selected.

WMM stands for Wi-Fi Multimedia. Enabling this feature will improve the user experience for audio and video applications over a Wi-Fi network.

Web User Interface

Encryption:

Key Type:

Key Size:

Key Index (1-4):

Key:

WPA Mode:

Cipher Type:

Group Key Update Interval:

Pass Phrase:

When you select Open System, toggle between Enable and Disable. If Enable is selected, the Key Type, Key Size, Key Index (1~4), Key, and Conrm Keys must also be congured.

Select HEX or ASCII.

Select 64-bit or 128-bit.

Select from the 1st to 4th key to be set as the active key.

Input up to four keys for encryption. You will select one of these keys in the Key Index drop-down menu.

When you select either WPA-Personal or WPA-Enterprise, you must also choose a WPA mode from the drop-down menu: AUTO (WPA or WPA2), WPA2 Only, WPA Only, WPA2 or WPA3, or WPA3 only. WPA, WPA2 and WPA3 use dierent algorithms. AUTO (WPA or WPA2) allows you to use both WPA and WPA2, and WPA2 or WPA3 allows you to use both of WPA2 and WPA3.

Select Auto, AES, or TKIP from the drop-down menu.

Select the interval during which the group key will be valid. The default value of 1800 seconds is recommended.

When you select WPA-Personal, please enter a Pass Phrase in the corresponding eld.

Conrm Pass Phrase:

RADIUS Server:

RADIUS Port:

RADIUS Secret:

When you select WPA-Personal, please re-enter the Pass Phrase entered in the previous item in the corresponding eld.

When you select WPA-Enterprise, enter the IP address of the RADIUS server. In addition, you must congure RADIUS Port and RADIUS Secret.

Enter the RADIUS port.

Enter the RADIUS secret.

Web User Interface

VLAN

VLAN List

The DIS-3650AP supports VLANs. VLANs can be created with a Name and VID. Mgmt (TCP stack), LAN, Primary/Multiple SSID, and WDS connection can be assigned to VLANs as they are physical ports. Any packet which enters the DIS-3650AP without a VLAN tag will have a VLAN tag inserted with a PVID. The VLAN List tab displays the current VLANs.

VLAN Status:

VLAN Mode:

Use the radio button to toggle to Enable. Next, go to the Add/Edit VLAN tab to add or modify an item on the VLAN List tab.

The current VLAN mode is displayed.

Web User Interface

Port List

The Port List tab displays the current ports. If you want to congure the guest and internal networks on a Virtual LAN (VLAN), the switch and DHCP server you are using must also support VLANs. As a prerequisite step, congure a port on the switch for handling VLAN tagged packets as described in the IEEE 802.1Q standard.

VLAN Status:

Port Name:

Tag VID:

Untag VID:

PVID:

Use the radio button to toggle to Enable. Next, go to the Add/Edit VLAN tab to add or modify an item on the VLAN List tab.

The name of the port is displayed in this column.

The Tagged VID is displayed in this column.

The Untagged VID is displayed in this column.

The Port VLAN Identier is displayed in this column.

Web User Interface

Add/Edit VLAN

The Add/Edit VLAN tab is used to congure VLANs. Once you have made the desired changes, click Save to have your changes take eect.

VLAN Status:

VLAN ID:

VLAN Name:

Use the radio button to toggle to Enable.

Provide a number between 1 and 4094 for the Internal VLAN.

Enter the VLAN to add or modify.

Web User Interface

PVID Settings

The PVID Setting tab is used to enable/disable the Port VLAN Identier Auto Assign Status as well as to congure various types of PVID settings. Click Save button to have your changes take eect.

VLAN Status:

PVID Auto Assign Status:

Use the radio button to toggle between Enable and Disable.

Use the radio button to toggle PVID auto assign status to Enable.

Web User Interface

Intrusion

The Wireless Intrusion Protection window is used to classify APs as Valid, Neighborhood, Rogue, or a New group. Click Save for the changes to take eect.

Wireless Band: Click the drop-down menu to select the wireless

band, 2.4GHz or 5GHz.

Detect: Click Detect to initiate a scan of the network.

AP List: Click the drop-down menu to select All, Valid,

Neighbor, Rogue, and New.

The following is a denition of the listed AP categories:

y Valid: An AP which is authenticated to the net-

work with encryption is classied as valid.

y Neighbor: A detected AP with a weak signal

strength is classied as a suspect neighbor.

y Rogue: An AP that has been installed on the

secure network without explicit authorization.

y New: An alternative category. From the AP List select a detected AP and click Set as Valid, Set as Neighborhood, Set as Rogue, or Set as New to manually dene the category type for the AP. Alternatively, click the radio button to mark all new access points as valid or rogue.

Web User Interface

Schedule

The Wireless Schedule Settings window is used to add and modify scheduling rules on the device. Click Save for your changes to take eect.

Wireless Schedule:

Name:

Index:

SSID:

Day(s):

All Day(s):

Start Time:

Use the drop-down menu to enable the device’s scheduling feature.

Enter a name for the new scheduling rule in the eld provided.

Use the drop-down menu to select the desired SSID.

This read-only eld indicates the current SSID in use. To create a new SSID, go to the Wireless Settings window (Basic Settings > Wireless).

Toggle the radio button between All Week and Select Day(s). If the second option is selected, check the specic days you want the rule to be eective on.

Check this box to have your settings apply 24 hours a day.

Enter the beginning hour and minute, using a 24-hour clock.

End Time:

Enter the ending hour and minute, using a 24-hour clock.

Web User Interface

Internal RADIUS Server

The DIS-3650AP features a built-in RADIUS server. Once you have nished adding a RADIUS account, click the Save to have your changes take eect. The newly-created account will appear in this RADIUS Account List. The radio buttons allow the user to enable or disable the RADIUS account. Click the icon in the delete column to remove the RADIUS account. We suggest you limit the number of accounts to below 30.

User Name:

Password:

Status:

RADIUS Account List:

Enter a name to authenticate user access to the internal RADIUS server.

Enter a password to authenticate user access to the internal RADIUS server. The length of your password should be 8~64.

Toggle the drop-down menu between Enable and Disable.

Displays the list of users.

Web User Interface

ARP Spoong Prevention

The ARP Spoong Prevention feature allows users to add IP/MAC address mapping to prevent ARP Spoong attack.

ARP Spoong Prevention:

Gateway IP Address:

Gateway MAC Address:

This check box allows you to enable the ARP Spoong prevention function.

Enter a gateway IP address.

Enter a gateway MAC address.

Web User Interface

Bandwidth Optimization

The Bandwidth Optimization window allows the user to manage the bandwidth of the device and arrange the bandwidth for various wireless clients. When the Bandwidth Optimization rule is nished, click the Add button. To discard the Add Bandwidth Optimization Rule settings, click the Clear button. Click Save button to have your changes take eect.

Enable Bandwidth

Optimization:

Downlink Bandwidth:

Uplink Bandwidth:

Allocate average BW

for each station:

Allocate maximum BW

for each station:

Allocate dierent BW

for a/b/g/n stations:

Allocate specic BW

for SSID:

Use the drop-down menu to Enable the Bandwidth Optimization function.

Enter the downlink bandwidth of the device in Mbits per second.

Enter the uplink bandwidth of the device in Mbits per second.

AP will distribute the average bandwidth for each client.

Specify the maximum bandwidth for each connected client. Reserve certain bandwidth for future clients.

The weight of 11b/g/n and 11a/n client are 10%/20%/70% ; 20%/80%. AP will distribute dierent bandwidth for 11a/b/g/n clients.

All clients share the total bandwidth.

Rule Type:

Use the drop-down menu to select the type that is applied to the rule. Available options are:

Allocate average BW for each station, Allocate maximum BW for each station, Allocate dierent BW for 1a/b/g/n stations, and Allocte specic BW for SSID.

Web User Interface

Band:

SSID Index:

Downlink Speed:

Uplink Speed:

Use the drop-down menu to toggle the wireless band between 2.4GHz and 5GHz.

Use the drop-down menu to select the SSID for the specied wireless band.

Enter the download speed limit in either Kbits/sec or Mbits/sec for the rule.

Enter the upload speed limit in either Kbits/sec or Mbits/sec for the rule.

Web User Interface

Hotspot 2.0

Hotspot 2.0 (HS2) is a new networking standard designed to make the process of connecting to public wireless hotspots easier and more secure with seamless authentication and encryption between your device and access points. This is based on the IEEE 802.11u standard and uses WPA2Enterprise for authentication between clients and access points.

Band: Specify Either 2.4 GHz or 5 GHz from the drop down list.

SSID Index: Specify from drop down list the SSID index.

Hotspot

Hotspot 2.0:

OSEN:

Allow Cross

Connection:

Manage P2P:

DGAF:

Proxy ARP:

L2TIF:

Choose enable to turn on hotspot 2.0 function.

Enable OSU Server-only authenticated layer-2 Encryption Network (OSEN) to indicate that the hotspot uses a OSEN network type.

Choose enable to allow cross connection for clients.

Choose enable to allow P2P.

This option congures the Downstream Group Addressed Forwarding. Choose enable to allow AP to forward downstream groupaddressed frames.

Choose enable to allow proxy ARP.

Choose enable to allow Layer 2 Traffic Inspection and Filtering.

Web User Interface

Interworking

Interworking:

Access Network Type:

Internet:

ASRA:

ESR:

Venue Group:

Venue Type:

Venue Name:

Choose enable to turn on interworking function.

Specify type of network.

Choose to enable or disable Internet access for this network.

Choose enable if the network has Additional Steps required for Access.

Choose enable to indicate that emergency services are reachable through this device.

Specify group venue belongs to.

Specify type of venue.

Specify name of venue. Choose from the drop down list a language used in the name.

HESSID:

Specify a homogenous extended service set (ESS) ID that can be used to identify a specic service provider network.

Web User Interface

WAN Metrics

WAN Link Status:

WAN Symmetric Link:

WAN At Capacity:

WAN Metrics DL Speed:

WAN Metrics UL Speed:

Information about the status of the Access Point’s WAN connection.

Set to 1 if the WAN link is symmetric (upload and download speeds are the same), or set to 0 if not.

Set to 1 if the Access Point or the network is at its max capacity, or set to 0 if not.

The downlink speed of the WAN connection set in kbps. If the downlink speed is not known, set to 0.

The uplink speed of the WAN connection set in kbps. If the uplink speed is not known set to 0.

Web User Interface

LIST

Network Auth Type:

IP Address Type

Avilability:

Domain Name List:

Roaming Consortium:

Nai Realm List:

3gpp Cellular Network:

Connection Capability:

Identies whether this is an unsecured network.

Identifies IP address version and type that the Hotspot Operator uses and that would be allocated and available to a mobile device after it authenticates to the network.

List one or more domain names for the entity operating the AP.

Identifies service providers or groups of roaming partners whose security credentials can be used to connect to a network.

List of all NAI realms available through the BSS.

Identies the 3GPP cellular networks available through the AP.

Identifies the availability of common IP protocols (TCP, UDP, IPsec) and ports (21, 80, 443, 5060).

Operator Friendly

Name:

QoS Map:

Identies the Hotspot venue operator.

Bit set to indicate support for QoS mapping from 802.11 to external networks.

Web User Interface

OSU

OSU SSID:

OSU Server URI:

OSU Method List:

OSU Cong:

OSU language:

OSU Friendly Name:

Specify the SSID that the device will associate and connect to when accessing the OSU server.

Specify the Uniform Resource Identier (URI) of the OSU Server.

Spcify preferred list of encoding methods that the OSU server supports in order of priority.

Choose from drop down list which conguration set to use.

Choose from drop down list language to use.

Specify a list of one or more names in dierent languages which will allow the device to display the OSU Friendly Name in alternative languages based on the language slected in the setting of the mobile device.

OSU Nai:

OSU Service Description:

OSU Icon Language:

Specify OSU Network Access Identier.

Choose the service description lagnuage from drop down list. Specify the service provider’s descrption of service oering.

Choose icon language from drop down list.

Web User Interface

OSU Icon Name:

OSU Icon Width:

OSU Icon Height:

OSU Icon Type:

OSU Icon File Path:

Specify icon name.

Specify width of the icon, in pixels.

Spcify length of the icon, in pixels.

Speciy icon le type, where the icon type is any mim-type graphic format.

Specify location of icon le.

Web User Interface

Captive Portal

Authentication Settings-Web Redirection Only

The Captive Portal is a built-in web authentication server. When a station connects to an AP, the web browser will be redirected to a web authentication page. In this window, user can view and congure the Captive Portal settings. After selecting Web Redirection Only as the Authentication Type, we can congure the redirection website URL that will be applied to each wireless client in this network.

Session

timeout(1-1440) :

Band :

SSID Index :

Authentication Type :

Web Redirection State :

URL Path :

IPIF Status :

Enter the session timeout value here. This value can be from 1 to 1440 minutes. By default, this value is 60 minutes.

Select 2.4GHz or 5GHz.

Select the SSID for this Authentication.

Select the captive portal encryption type here. Options to choose from are Web Redirection, Username/Password, Passcode, Remote RADIUS, LDAP and POP3. In this section we’ll discuss the Web Redirection option.

Default setting is Enable when select Web Redirection Only.

Select whether to use either HTTP or HTTPS here. After selecting either http:// or https://, enter the URL of the website that will be used in the space provided.

Select to Enable or Disable the Captive Portal with its IP interface feature here.

VLAN Group :

Get IP From :

Enter the VLAN Group ID here.

Static IP (Manual) is chosen here. Choose this option if you do not have a DHCP server in your network, or if you wish to assign a static IP address to the DIS3650AP. When Dynamic IP (DHCP) is selected, the other elds here will be grayed out. Please allow about 2 minutes for the DHCP client to be functional once this selection is made.

Web User Interface

IP Address :

Subnet Mask :

Gateway :

DNS :

Assign a static IP address that is within the IP address range of your network.

Enter the subnet mask. All devices in the network must share the same subnet mask.

Enter the IP address of the gateway/router in your network.

Enter a DNS server IP address. This is usually the local IP address of your gateway/router.

Web User Interface

Authentication Settings- Username/Password

After selecting Username/Password as the Authentication Type, we can congure the Username/Password authentication that will be applied to each wireless client in this network.

Session

timeout(1-1440) :

Band :

SSID Index :

Authentication Type :

Web Redirection State :

URL Path :

Enter the session timeout value here. This value can be from 1 to 1440 minutes. By default, this value is 60 minutes.

Select 2.4GHz or 5GHz.

Select the SSID for this Authentication.

Default is Disable or select Enable to enable the website redirection feature.

Select whether to use either HTTP or HTTPS here. After selecting either http:// or https://, enter the URL of the website that will be used in the space provided.

IPIF Status :

VLAN Group :

Get IP From :

Select to Enable or Disable the Captive Portal with its IP interface feature here.

Enter the VLAN Group ID here.

Static IP (Manual) is chosen here. Choose this option if you do not have a DHCP server in your network, or if you wish to assign a static IP address to the DIS-3650AP. When Dynamic

Web User Interface

IP (DHCP) is selected, the other elds here will be grayed out. Please allow about 2 minutes for the DHCP client to be functional once this selection is made.

IP Address :

Subnet Mask :

Gateway :

DNS :

Username:

Password:

Assign a static IP address that is within the IP address range of your network.

Enter the subnet mask. All devices in the network must share the same subnet mask.

Enter the IP address of the gateway/router in your network.

Enter a DNS server IP address. This is usually the local IP address of your gateway/router.

Enter the username for the new account here.

Enter the password for the new account here.

Web User Interface

Authentication Settings- Passcode

After selecting Passcode as the Authentication Type, we can congure the Passcode authentication that will be applied to each wireless client in this network.

Session

timeout(1-1440) :

Band :

SSID Index :

Authentication Type :

Web Redirection State :

URL Path :

IPIF Status :

Enter the session timeout value here. This value can be from 1 to 1440 minutes. By default, this value is 60 minutes.

Select 2.4GHz or 5GHz.

Select the SSID for this Authentication.

Default is Disable or select Enable to enable the website redirection feature.

Select whether to use either HTTP or HTTPS here. After selecting either http:// or https://, enter the URL of the website that will be used in the space provided.

Select to Enable or Disable the Captive Portal with its IP interface feature here.

VLAN Group :

Get IP From :

Enter the VLAN Group ID here

Web User Interface

grayed out. Please allow about 2 minutes for the DHCP client to be functional once this selection is made.

IP Address :

Subnet Mask :

Gateway :

DNS :

Passcode Quantity:

Duration:

Last Active Day:

User Limit:

Assign a static IP address that is within the IP address range of your network.

Enter the subnet mask. All devices in the network must share the same subnet mask.

Enter the IP address of the gateway/router in your network.

Enter a DNS server IP address. This is usually the local IP address of your gateway/router.

Enter the number of ticket that will be used here.

Enter the duration value, in hours, for this passcode.

Select the last active date for this passcode here. Year, Month and Day selections can be made.

Enter the maximum amount of users that can use this passcode at the same time

Web User Interface

Authentication Settings- Remote RADIUS

After selecting Remote RADIUS as the Authentication Type, we can congure the Remote RADIUS authentication that will be applied to each wireless client in this network.

Session

timeout(1-1440) :

Band :

SSID Index :

Authentication Type :

Web Redirection State :

URL Path :

IPIF Status :

Enter the session timeout value here. This value can be from 1 to 1440 minutes. By default, this value is 60 minutes.

Select 2.4GHz or 5GHz.

Select the SSID for this Authentication.

Select the captive portal encryption type here. Options to choose from are Web Redirection, Username/ Password, Passcode, Remote RADIUS, LDAP and POP3. In this section we’ll discuss the Remote RADIUS option.

Default is Disable or select Enable to enable the website redirection feature.

Select whether to use either HTTP or HTTPS here. After selecting either http:// or https://, enter the URL of the website that will be used in the space provided.

Select to Enable or Disable the Captive Portal with its IP interface feature here.

VLAN Group :

Get IP From :

Enter the VLAN Group ID here

Static IP (Manual) is chosen here. Choose this option if you do not have a DHCP server in your network, or if you wish to assign a static IP address to the DIS-3650AP. When Dynamic IP (DHCP) is selected, the other elds here will be grayed out. Please allow about 2 minutes for the DHCP client to be functional once this selection is made.

Web User Interface

IP Address :

Subnet Mask :

Gateway :

DNS :

Radius Server:

Radius Port:

Remote Radius Type:

Assign a static IP address that is within the IP address range of your network.

Enter the subnet mask. All devices in the network must share the same subnet mask.

Enter the IP address of the gateway/router in your network.

Enter a DNS server IP address. This is usually the local IP address of your gateway/router.

Enter the RADIUS server’s IP address here

Enter the RADIUS server’s port number here

Enter the RADIUS server’s shared secret here

Select the remote RADIUS server type here. Currently, only SPAP will be used.

Web User Interface

Authentication Settings- LDAP

After selecting LDAP as the Authentication Type, we can congure the LDAP authentication that will be applied to each wireless client in this network.

Session

timeout(1-1440) :

Band :

SSID Index :

Authentication Type :

Web Redirection State :

URL Path :

IPIF Status :

VLAN Group :

Enter the session timeout value here. This value can be from 1 to 1440 minutes. By default, this value is 60 minutes.

Select 2.4GHz or 5GHz.

Select the SSID for this Authentication.

Select the captive portal encryption type here. Options to choose from are Web Redirection, Username/Password, Passcode, Remote RADIUS, LDAP and POP3. In this section we’ll discuss the LDAP option.

Default is Disable or select Enable to enable the website redirection feature.

Select whether to use either HTTP or HTTPS here. After selecting either http:// or https://, enter the URL of the website that will be used in the space provided.

Select to Enable or Disable the Captive Portal with its IP interface feature here.

Enter the VLAN Group ID here.

Get IP From :

IP Address :

Assign a static IP address that is within the IP address range of your network.

Web User Interface

Subnet Mask :

Gateway :

DNS :

Server:

Port:

Authenticate Mode:

Username:

Password:

Base DN:

Account Attribute:

Identity:

Enter the subnet mask. All devices in the network must share the same subnet mask.

Enter the IP address of the gateway/router in your network.

Enter a DNS server IP address. This is usually the local IP address of your gateway/router.

Enter the LDAP server’s IP address or domain name here.

Enter the LDAP server’s port number here.

Select the authentication mode here. Options to choose from are Simple and TLS.

Enter the LDAP server account’s username here.

Enter the LDAP server account’s password here.

Enter the administrator’s domain name here.

Enter the LDAP account attribute string here. This string will be used to search for clients.

Enter the identity’s full path string here. Alternatively, select the Auto Copy checkbox to automatically add the generic full path of the web page in the identity eld.

Web User Interface

Authentication Settings- POP3

After selecting POP3 as the Authentication Type, we can congure the POP3 authentication that will be applied to each wireless client in this network.

Session

timeout(1-1440) :

Band :

SSID Index :

Authentication Type :

Web Redirection State :

URL Path :

Enter the session timeout value here. This value can be from 1 to 1440 minutes. By default, this value is 60 minutes.

Select 2.4GHz or 5GHz.

Select the SSID for this Authentication.

Select the captive portal encryption type here. Options to choose from are Web Redirection, Username/Password, Passcode, Remote RADIUS, LDAP and POP3. In this section we’ll discuss the POP3 option.

Default is Disable or select Enable to enable the website redirection feature.

Select whether to use either HTTP or HTTPS here. After selecting either http:// or https://, enter the URL of the website that will be used in the space provided.

IPIF Status :

VLAN Group :

Get IP From :

Select to Enable or Disable the Captive Portal with its IP interface feature here.

Enter the VLAN Group ID here.

Static IP (Manual) is chosen here. Choose this option if you do not have a DHCP server in your network, or if you wish to assign a static IP address to the DIS-3650AP. When Dynamic IP

Web User Interface

(DHCP) is selected, the other elds here will be grayed out. Please allow about 2 minutes for the DHCP client to be functional once this selection is made.

IP Address :

Subnet Mask :

Gateway :

DNS :

Server:

Port:

Connection Type:

Assign a static IP address that is within the IP address range of your network.

Enter the subnet mask. All devices in the network must share the same subnet mask.

Enter the IP address of the gateway/router in your network.

Enter a DNS server IP address. This is usually the local IP address of your gateway/router.

Enter the POP3 server’s IP address or domain name here.

Enter the POP server’s port number here.

Select the connection type here. Options to choose from are None and SSL/TLS.

Web User Interface

Login Page Upload

In this window, users can upload a custom login web page that will be used by the captive portal feature. Click the Browse button to navigate to the login style, located on the managing computer and then click the Upload button to initiate the upload.

Upload Login Style

From Local Hard Drive:

In this eld the path to the login style le that will be uploaded, will be displayed. Alternatively, the path can be manually entered here.

Select the wireless band and login style that will be used in each SSID here. Click Download button to download the template le for login page and Click Del button to delete the template le.

Web User Interface

MAC Bypass

The DIS-3650AP features a wireless MAC Bypass. Once a user is nished with these settings, click Save for changes to take eect.

Wireless Band:

SSID Index:

MAC Address:

MAC Address List:

Upload File:

Load MAC File to Local

Hard Driver:

Select the wireless band for MAC Bypass.

Select the SSID for MAC Bypass.

Enter each MAC address that you wish to include in your bypass list, and click Add.

When a MAC address is entered, it appears in this list.

Highlight a MAC address and click the Delete icon to remove it from this list.

To upload a MAC bypass list le, click Browse and navigate to the MAC bypass list le saved on the computer, and then click Upload.

To download MAC bypass list le, click Download and to save the MAC bypass list.

Web User Interface

DHCP Server

Dynamic Pool Settings

The DHCP address pool denes the range of the IP address that can be assigned to stations in the network. A Dynamic Pool allows wireless stations to receive an available IP with lease time control. If needed or required in the network, the DIS-3650AP is capable of acting as a DHCP server.

Function Enable/Disable:

IP Assigned From:

The Range of Pool (1-254):

Subnet Mask:

Gateway:

WINS:

Dynamic Host Configuration Protocol (DHCP) assigns dynamic IP addresses to devices on the network. This protocol simplies network management and allows new wireless devices to receive IP addresses automatically without the need to manually assign new IP addresses. Select Enable to allow the DIS-3650AP to function as a DHCP server.

Input the rst IP address available for assignment on your network.

Enter the number of IP addresses available for assignment. IP addresses are increments of the IP address specied in the “IP Assigned From” eld.

All devices in the network must have the same subnet mask to communicate. Enter the subnet mask for the network here.

Enter the IP address of the gateway on the network.

Specify the Windows Internet Naming Service (WINS) server address for the wireless network. WINS is a system that determines the IP address of a network computer that has a dynamically assigned IP address.

DNS:

Domain Name:

Lease Time:

Enter the IP address of the Domain Name System (DNS) server. The DNS server translates domain names such as www.dlink.com into IP addresses.

Enter the domain name of the network, if applicable. (An example of a domain name is: www.dlink.com.)

The lease time is the period of time before the DHCP server will assign new IP addresses.

Web User Interface

Static Pool Setting

The DHCP address pool denes the range of IP addresses that can be assigned to stations on the network. A static pool allows specic wireless stations to receive a xed IP without time control.

Function Enable/Disable:

Assigned IP:

Assigned MAC Address:

Dynamic Host Configuration Protocol (DHCP) assigns IP addresses to wireless devices on the network. This protocol simplifies network management and allows new wireless devices to receive IP addresses automatically without the need to manually assign IP addresses. Select Enable to allow the DIS-3650AP to function as a DHCP server.

Use the Static Pool Settings to assign the same IP address to a device every time you start up. The IP addresses assigned in the Static Pool list must NOT be in the same IP range as the Dynamic Pool. After you have assigned a static IP address to a device via its MAC address, click Apply; the device will appear in the Assigned Static Pool at the bottom of the screen. You can edit or delete the device in this list.

Enter the MAC address of the device requesting association here.

Subnet Mask:

Gateway:

WINS:

DNS:

Domain Name:

Dene the subnet mask of the IP address specied in the “IP Assigned From” eld.

Specify the Gateway address for the wireless network.

Specify the Windows Internet Naming Service (WINS) server address for the wireless network. WINS is a system that determines the IP address of a network computer with a dynamically assigned IP address, if applicable.

Enter the DNS server address for your wireless network.

Specify the domain name for the network.

Web User Interface

Current IP Mapping List

This window displays information about the current assigned DHCP dynamic and static IP address pools. This information is available when you enable DHCP server on the AP and assign dynamic and static IP address pools.

Current DHCP Dynamic

Prole:

Binding MAC Address:

Assigned IP Address:

Lease Time:

Current DHCP Static Pools:

Binding MAC Address:

Assigned IP Address:

These are IP address pools the DHCP server has assigned using the dynamic pool setting.

The MAC address of a device on the network that is assigned an IP address from the DHCP dynamic pool.

The current corresponding DHCP-assigned IP address of the device.

The length of time that the dynamic IP address will be valid.

These are the IP address pools of the DHCP server assigned through the static pool settings.

The MAC address of a device on the network that is within the DHCP static IP address pool.

The current corresponding DHCP-assigned static IP address of the device.

Binding MAC Address:

Assigned IP Address:

The MAC address of a device on the network that is assigned an IP address from the DHCP dynamic pool.

The current corresponding DHCP-assigned static IP address of the device.

Web User Interface

Filters

Wireless MAC ACL

This page allows the user to congure Wireless MAC ACL settings for access control.

Wireless Band:

Access Control List:

MAC Address:

MAC Address List:

Current Client

Information:

Displays the current wireless band rate.

Select Disable to disable the lters function.

Select Accept to accept only those devices with MAC addresses in the Access Control List. All other devices not on the list will be rejected.

Select Reject to reject the devices with MAC addresses on the Access Control List. All other devices not on the list will be accepted.

Enter each MAC address that you wish to include in your lter list, and click Apply.

When you enter a MAC address, it appears in this list. Highlight a MAC address and click Delete to remove it from this list.

This table displays information about all the current connected stations.

Upload ACL File:

Download ACL File:

Upload the user’s own ACL File here.

Download currenty ACL list to local hard drive.

Web User Interface

IP Filter Settings

Enter the IP address or network address that will be used in the IP lter rule. For example, an IP address like 192.168.70.66 or a network address like 192.168.70.0. This IP address or network will be inaccessible to wireless clients in this network.

Wireless Band: Click the drop-down menu to select the

wireless band, 2.4GHz or 5GHz.

SSID Index: Click the drop-down menu to select the SSID

for the IP lter.

Filter State: Click the drop-down menu to enable or

disable the lter state. By default this feature is disabled.

IP Address: Enter the IP address or network address.

Subnet Mask: Enter the subnet mask of the IP address or

networks address.

IP Address List: When an IP address is entered, it appears in

the list. Highlight a IP address and click Delete icon to remove it from the list.

Upload IP Filter File: To upload a IP lter list le, click Choose File

and navigate to the IP lter list le saved on the computer, and then click Upload.

Download IP Filter File: To download IP Filter list le, click Download

and to save the IP lter list.

Web User Interface

This page allows the user to congure a WLAN Partition.

WLAN Partition

Wireless Band:

Link Integrity:

Ethernet WLAN Access:

Internal Station

Connection:

Displays the current wireless band.

Select Enable or Disable. If the Ethernet connection between the LAN and the AP is disconnected, enabling this feature will cause the wireless segment associated with the AP to be disassociated from the AP.

The default is Enable. When disabled, all data from the Ethernet to associated wireless devices will be blocked. Wireless devices can still send data to the Ethernet.

The default value is Enable, which allows stations to intercommunicate by connecting to a target AP. When disabled, wireless stations cannot exchange data on the same Multi-SSID. In Guest mode, wireless stations cannot exchange data with any station on your network.

Web User Interface

Trac Control

Uplink/Downlink Setting

The uplink/downlink setting allows users to customize the downlink and uplink interfaces including specifying downlink/uplink bandwidth rates in Mbits per second. These values are also used in the QoS and Trac Manager windows. Once the desired uplink and downlink settings are nished, click the Save button to have your changes take eect.

Downlink Bandwidth:

Uplink Bandwidth:

The downlink bandwidth in Mbits per second.

The uplink bandwidth in Mbits per second.

Web User Interface

QoS

Quality of Service (QoS) enhances the experience of using a network by prioritizing the trac of dierent applications. The DIS-3650AP supports four priority levels. Once the desired QoS settings are nished, click the Save to have your changes take eect.

Enable QoS:

Downlink Bandwidth:

Uplink Bandwidth:

Check this box to allow QoS to prioritize trac. Use the drop-down menus to select the four levels of priority. Click the Save button when you are nished.

Downlink Bandwidth: The downlink bandwidth in Mbits per second. This value is entered in the Uplink/Downlink Setting window.

Uplink Bandwidth: The uplink bandwidth in Mbits per second. This value is entered in the Uplink/Downlink Setting window.

Web User Interface

Trac Manager

The trac manager feature allows users to create trac management rules that specify how to deal with listed client trac and specify downlink/ uplink speed for new trac manager rules. Click the Save to have your changes take eect.

Trac Manager:

Unlisted Client Trac:

Downlink Bandwidth:

Uplink Bandwidth:

Name:

Client IP (optional):

Client MAC (optional):

Use the drop-down menu to Enable the trac manager feature.

Select Deny or Forward to determine how to deal with unlisted client trac.

The downlink bandwidth in Mbits per second. This value is entered in the Uplink/ Downlink Setting window.

The uplink bandwidth in Mbits per second. This value is entered in the Uplink/Downlink Setting window.

Enter the name of the trac manager rule.

Enter the client IP address of the trac manager rule.

Enter the client MAC address of the trac manager rule.

Downlink Speed:

Uplink Speed:

Enter the downlink speed in Mbits per second.

Enter the uplink speed in Mbits per second.

Web User Interface

Status

In the Status Section the user can monitor and view conguration settings of the access point. Here the user can also view statistics about client information, WDS information and more. The following pages will explain settings found in the Status section in more detail.

Web User Interface

Device Information

This page displays the current information like rmware version, Ethernet and wireless parameters, as well as the information regarding CPU and memory utilization.

Device Information: This read-only window displays the

conguration settings of the DIS-3650AP, including the firmware version and the device’s MAC address.

Web User Interface

Client Information

This page displays the associated clients SSID, MAC, band, authentication method, signal strength, RSSI, and power saving mode for the DIS-3650AP network.

Client Information:

SSID:

MAC:

Band:

Authentication:

RSSI:

Power Saving Mode:

This window displays the wireless client information for clients currently connected to the DIS-3650AP.

Displays the SSID of the client.

Displays the MAC address of the client.

Displays the wireless band that the client is connected to.

Displays the type of authentication being used.

Displays the client’s signal strength.

Displays the status of the power saving feature.

Web User Interface

WDS Information Page

This page displays the access points SSID, MAC, band, authentication method, signal strength, and status for the DIS-3650AP’s Wireless Distribution System network.

WDS Information:

Name:

MAC:

Authentication:

Signal:

Status:

This window displays the Wireless Distribution System information for clients currently connected to the DIS-3650AP.

Displays the SSID of the client.

Displays the MAC address of the client.

Displays the type of authentication being used.

Displays the client’s signal strength.

Displays the status of the power saving feature.

Web User Interface

Statistics

Ethernet Trac Statistics

Displays wired interface network trac information.

Ethernet Trac Statistics: This page displays transmitted and received

count statistics for packets and bytes.

Web User Interface

WLAN Trac Statistics

Displays throughput, transmitted frame, received frame, and WEP frame error information for the AP network.

WLAN Trac Statistics: This page displays wireless network

statistics for data throughput, transmitted and received frames, and frame errors.

Web User Interface

Log

View Log

The AP’s embedded memory holds logs here. The log information includes but is not limited to the following items: cold start AP, upgrading rmware, client associate and disassociate with AP, and web login. The web page holds up to 500 logs.

View Log: The AP’s embedded memory displays

system and network messages including a time stamp and message type. The log information includes but is not limited to the following items: cold start AP, upgrading rmware, client associate and disassociate with AP, and web login. The web page holds up to 500 logs.

Web User Interface

Log Settings

Enter the log server’s IP address to send the log to that server. Check or uncheck System Activity, Wireless Activity, or Notice to specify what kind of log type you want it to log.

Log Server / IP Address: Enter the IP address of the log server.

Log Type: Check the boxes to select the log type.

Log Server / IP Address: Enter the IP address of the EU directive Syslog

server.

Email Notication: Check the box to enable sending email

notication.

Outgoing mail server

(SMTP):

Authentication: Check the box to enable the authentication

SSL/TLS: Check the box to enable the SSL/TLS function.

From Email Address: Enter the email address.

To Email Address: Enter the email address.

Email Server Address: Enter the email server address.

SMTP Port: Enter the SMTP port.

User Name: Enter the name of the new user entry.

Password: Enter the password set for the email

Conrm Password: Retype the password entry to conrm the

Schedule: Click the drop-down menu to set email log

Click the drop-down menu to select the SMTP server type, options include: Internal, Gmail, Hotmail.

of the email notication.

notication.

password.

schedule.

Web User Interface

Maintenance Section

Web User Interface

Administration

Limit Administrator

Check one or more of the ve main categories to display the various hidden administrator parameters and settings displayed on the next ve pages. Each of the nine main categories display various hidden administrator parameters and settings. Click Save when done.

Limit Administrator VLAN

ID:

Limit Administrator IP:

IP Range:

Check the box provided and the enter the specic VLAN ID that the administrator will be allowed to log in from.

Check to enable the Limit Administrator IP address.

Enter the IP address range that the administrator will be allowed to log in from and then click the Add button.

Web User Interface

System Name Settings

Each of the ve main categories display various hidden administrator parameters and settings.

System Name:

Location:

MDNS Name:

The name of the device. The default name is D-Link DIS-3650AP.

The physical location of the device, e.g. 72nd Floor, D-Link HQ.

Enter the name of the multicast DNS. The default name is dis2650ap.

Login Settings

Each of the ve main categories display various hidden administrator parameters and settings.

User Name:

Old Password:

Enter a user name. The default is admin.

When changing your password, enter the old password here.

New Password:

Conrm Password:

When changing your password, enter the new password here. The password is case-sensitive. “A” is a dierent character than “a.” The length should be between 0 and 12 characters.

Enter the new password a second time for conrmation purposes.

Web User Interface

Console Settings

Each of the ve main categories display various hidden administrator parameters and settings.

Status:

Console Protocol:

Time-out:

Choose to enable or disable ping function.

Enable: Click to disable. (By default it is enabled.)

Choose to enable or disable LED status.

Status is enabled by default. Uncheck the box to disable the console.

Select the type of protocol you would like to use, Telnet or SSH.

Set to 1 Min, 3 Mins, 5 Mins, 10 Mins, 15 Mins or Never.

Ping Control Settings

LED Settings

LED Status: Choose corresponding radio button to

Select your country.

Select a Country: Choose from the drop down list the

enable or disable LED Status.

Country Settings

country your device is located.

Web User Interface

DDP Settings

Choose to enable or disable DDP.

Status: Click to disable. (By default it is enabled.)

Nuclias Connect Settings

Choose to enable or disable Nuclias Connect.

Enable Nuclias Connect: Choose from drop down list to enable or

disable Nuclias Connect.

Web User Interface

Firmware and SSL Upload

This page allows the user to perform a rmware upgrade. A Firmware upgrade is a function that upgrade the running software used by the access point. This is a useful feature that prevents future bugs and allows for new features to be added to this product. Please go to your local D-Link website to see if there is a newer version of the rmware available.

Upload Firmware from

Local Hard Drive:

Language Pack Upgrade:

Upload SSL Certication

from Local Hard Drive:

The current rmware version is displayed above the le location eld. After the latest rmware is downloaded, click on the “Choose File” button to locate the new rmware. Once the le is selected, click on the “Open” and “Update” button to begin updating the rmware. Please don’t turn the power o while upgrading.

You can upload an updated language pack from the device here. Click on the “Choose File” button to locate the new language pack. Once the le is selected, click on the “Open” and “Update” button to being updating the language les.

After you have downloaded a SSL certication to your local drive, click “Choose File.” Select the certication and click “Open” and “Upload” to complete the upgrade. You can upload a SSL Key in the same way.

Web User Interface

Conguration File Upload

This page allows the user to backup and recover the current conguration of the access point in case of a unit failure.

Conguration File Upload

and Download:

Upload Conguration File:

Download Conguration

File:

Upload Nuclias Connect

Network File:

You can upload and download conguration les of the access point.

Browse to the saved conguration le you have in local drive and click “Open” and “Upload” to update the conguration.

Click “Download” to save the current conguration le to your local disk. Note that if you save one conguration le with the administrator’s password now, after resetting your DIS-3650AP and then updating to this saved conguration le, the password will be gone.

Browse to the saved conguration le you have in local drive and click “Open” and “Upload” to update the Nuclias Connect Network le.

Web User Interface

Time and Date Settings

Enter the NTP server IP, choose the time zone, and enable or disable daylight saving time.

Current Time:

Enable NTP Server:

NTP Server:

Time Zone:

Enable Daylight

Saving:

Daylight Saving

Dates:

Set the Date and

Time Manually:

Displays the current time and date settings.

Check to enable the AP to get system time from an NTP server from the Internet.

Enter the NTP server IP address.

Use the drop-down menu to select your correct Time Zone.

Check the box to enable Daylight Saving Time.

Use the drop-down menu to select the correct Daylight Saving oset.

A user can either manually set the time for the AP here, or click the Copy Your Computer’s Time Settings button to copy the time from the computer in use (Make sure that the computer’s time is set correctly).

Web User Interface

Conguration and System

These options are the remaining option to choose from in the top menu. Conguration allows the user to save and activate or discard the congurations done. System allows the user to restart the unit, perform a factory reset or clear the language pack settings. Logout allows the user to safely log out from the access point’s web conguration. Help allows the user to read more about the given options to congure without the need to consult the manual. The following pages will explain settings found in the conguration and system section in more detail.

Web User Interface

System Settings

On this page the user can restart the unit, perform a factory reset of the access point or clear the added language pack.

Restart the Device:

Restore to Factory Default

Settings:

Clear Language Pack:

Click Restart to restart the DIS-3650AP.

Click Restore to restore the DIS-3650AP back to factory default settings.

Click to clear the current Language pack running.

Web User Interface

Help

The help page is useful to view a brief description of a function available on the access point in case the manual is not present.

Help: Scroll down the Help page for topics and

explanations.

Knowledge Base

Wireless Basics

D-Link wireless products are based on industry standards to provide high-speed wireless connectivity that is easy to use within your home, business or public access wireless networks. D-Link wireless products provides you with access to the data you want, whenever and wherever you want it. Enjoy the freedom that wireless networking can bring to you.

WLAN use is not only increasing in both home and oce environments, but in public areas as well, such as airports, coee shops and universities. Innovative ways to utilize WLAN technology are allowing people to work and communicate more eciently. Increased mobility and the absence of cabling and other types of xed infrastructure have proven to be benecial to many users.

Wireless adapter cards used on laptop and desktop systems support the same protocols as Ethernet adapter cards, allowing wireless users to use the same applications as those used on a wired network.

People use WLAN technology for many dierent purposes:

• Mobility - productivity increases when people can have access to data in any location within the operating range of their WLAN. Management decisions based on real-time information can signicantly improve the eciency of a worker.

• Low implementation costs - WLANs are easy to set up, manage, change and relocate. Networks that frequently change can benet from WLAN’s ease of implementation. WLANs can operate in locations where installation of wiring may be impractical.

• Installation and network expansion - by avoiding the complications of troublesome cables, a WLAN system can be fast and easy during installation, especially since it can eliminate the need to pull cable through walls and ceilings. Wireless technology provides more versatility by extending the network beyond the home or oce.

• Inexpensive solution - wireless network devices are as competitively priced as conventional Ethernet network devices. The DIS-3650AP saves money by providing users with multi-functionality congurable in four dierent modes.

• Scalability - Congurations can be easily changed and range from Peer-to-Peer networks, suitable for a small number of users to larger Infrastructure networks to accommodate hundreds or thousands of users, depending on the number of wireless devices deployed.

Knowledge Base

Wireless Installation Considerations

The D-Link Access Point lets you access your network using a wireless connection from virtually anywhere within the operating range of your wireless network. Keep in mind, however, that the number, thickness and location of walls, ceilings, or other objects that the wireless signals must pass through, may limit the range. Typical ranges vary depending on the types of materials and background RF (radio frequency) noise in your home or business. The key to maximizing wireless range is to follow these basic guidelines:

1. Keep the number of walls and ceilings between the access point and other network devices to a minimum. Each wall or ceiling can reduce your adapter’s range from 3-90 feet (1-30 meters.) Position your devices so that the number of walls or ceilings is minimized.

2. Be aware of the direct line between network devices. A wall that is 1.5 feet thick (.5 meters), at a

3. 45-degree angle appears to be almost 3 feet (1 meter) thick. At a 2-degree angle it looks over 42 feet (14 meters) thick! Position devices so that the signal will travel straight through a wall or ceiling (instead of at an angle) for better reception.

4. Building Materials make a dierence. A solid metal door or aluminum studs may have a negative eect on the range. Try to position access points, wireless routers, and computers so that the signal passes through drywall or open doorways. Materials and objects such as glass, steel, metal, walls with insulation, water (sh tanks), mirrors, le cabinets, brick, and concrete will degrade your wireless signal.

5. Keep your product away (at least 3-6 feet or 1-2 meters) from electrical devices or appliances that generate RF noise.

6. If you are using 2.4GHz cordless phones or X-10 (wireless products such as ceiling fans, lights, and home security systems), your wireless connection may degrade dramatically or drop completely. Make sure your 2.4GHz phone base is as far away from your wireless devices as possible. The base transmits a signal even if the phone in not in use.

Troubleshooting

This chapter provides solutions to problems that can occur during the installation and operation of the DIS-3650AP. Read the following descriptions if you are having problems. (The examples below are illustrated in Windows® XP. If you have a dierent operating system, the screenshots on your computer will look similar to the following examples.)

Why can’t I access the web-based conguration utility?

When entering the IP address of the D-Link access point (192.168.0.50 for example), you are not connecting to a website on the Internet or have to be connected to the Internet. The device has the utility built-in to a ROM chip in the device itself. Your computer must be on the same IP subnet to connect to the web-based utility.

• Make sure you have an updated Java-enabled web browser. We recommend the following:

• Internet Explorer 7.0 or higher, Chrome, Firefox, or Safari 4 or higher

• Verify physical connectivity by checking for solid link lights on the device. If you do not get a solid link light, try using a dierent cable or connect to a dierent port on the device if possible. If the computer is turned o, the link light may not be on.

• Disable any internet security software running on the computer. Software rewalls such as Zone Alarm, Black Ice, Sygate, Norton Personal Firewall, and Windows® rewall may block access to the conguration pages. Check the help les included with your rewall software for more information on disabling or conguring it.

• Congure your Internet settings:

Go to Start > Settings > Control Panel. Double-click the Internet Options Icon. From the Security tab, click the button to restore the settings to their defaults. Click the Connection tab and set the dial-up option to Never Dial a Connection. Click the LAN Settings button. Make sure nothing is checked. Click OK. Go to the Advanced tab and click the button to restore these settings to their defaults. Click OK three times. Close your web browser (if open) and open it.

• Access the web management. Open your web browser and enter the IP address of your D-Link access point in the address bar. This should open the login page for your the web management.

• If you still cannot access the conguration, unplug the power to the access point for 10 seconds and plug back in. Wait about 30 seconds and try accessing the conguration. If you have multiple computers, try connecting using a dierent computer.

What can I do if I forgot my password?

If you forgot your password, you must reset your access point. Unfortunately, this process will change all your settings back to the factory defaults.

To reset the access point, locate the reset button (hole) on the rear panel of the unit. With the access point powered on, use a paperclip to hold the button down for 10 seconds. Release the button and the access point will go through its reboot process. Wait about 30 seconds to access the access point. The default IP address is 192.168.0.50. When logging in, the username is admin and leave the password box empty.

Troubleshooting

How to check your IP address?

After you install your network adapter, by default, the TCP/IP settings should be set to obtain an IP address from a DHCP server (i.e. wireless router) automatically. To verify your IP address, please follow the steps below.

Click on Start > Run. In the run box type cmd and click OK.

At the prompt, type ipcong and press Enter.

This will display the IP address, subnet mask, and the default gateway of your adapter.

If the address is 0.0.0.0, check your adapter installation, security settings, and the settings on your router. Some rewall software programs may block a DHCP request on newly installed adapters.

If you are connecting to a wireless network at a hotspot (e.g. hotel, coee shop, airport), please contact an employee or administrator to verify their wireless network settings.

Troubleshooting

How to statically assign an IP address?

If you are not using a DHCP capable gateway/router, or you need to assign a static IP address, please follow the steps below:

Step 1:

Windows® 2000: Click on Start > Settings > Control Panel > Network Connections Windows XP: Click on Start > Control Panel > Network Connections Windows Vista®: Click on Start > Control Panel > Network and Internet > Network and Sharing Center > Manage network connections

Step 2:

Right-click on the Local Area Connection which represents your network adapter and select Properties.

Step 3:

Highlight Internet Protocol (TCP/IP) and click Properties.

Step 4:

Click Use the following IP address and enter an IP address that is on the same subnet as your network or the LAN IP address on your router. Example: If the router’s LAN IP address is 192.168.0.1, make your IP address 192.168.0.X where X is a number between 2 and 99. Make sure that the number you choose is not in use on the network. Set Default Gateway the same as the LAN IP address of your router (192.168.0.1). Set Primary DNS the same as the LAN IP address of your router (192.168.0.1). The Secondary DNS is not needed or you may enter a DNS server from your ISP.

Step 5:

Click OK twice to save your settings.

Technical Specications

Standards

• IEEE 802.11ac

• IEEE 802.11n

• IEEE 802.11g

• IEEE 802.11a

• IEEE 802.3b

• IEEE 802.3u

• IEEE 802.3ab

• IEEE 802.3az

• IEEE 802.3af

Network Management

• Web Browser interface (HTTP, Secure HTTP (HTTPS))

• Nuclias Connect

Security

• WPA™ Personal/Enterprise

• WPA2™ Personal/Enterprise

• WPA3™ Personal

• WEP™ 64-/128-bit

LED Displays

• PWR/2.4G/5G/LAN

Temperature

• Operating: -20˚C to 65˚C

• Storing: -40˚C to 80˚C

Humidity

• Operating: 10%~90% (non-condensing)

• Storing: 5%~95% (non-condensing)

Certications

• FCC

• CE

• LVD

Dimensions

• 220.46 x 127.46 x 72.54 mm (8.67 x 5.01 x 2.85 in)

Wireless Frequency Range

• 2.4 to 2.4835 GHz and 5.15 to 5.85 GHz**

Operating Voltage

• 56V/0.54A PoE Adapter or 802.3at PoE

Antenna Type

• 2x Detachable 3 dBi @2.4GHz and 5dBi @5GHz Omni antennas

100

D-LINK DIS3650AP User guide

Specifications and Main Features

Frequently Asked Questions

User Manual

Nuclias Connect

Introduction

Nuclias Connect Key Features

Package Contents

System Requirements

Hardware Overview

LED Indicators

Interface Connectors

Back

Installation

Using Power over Ethernet (PoE)

Using Nuclias Connect

Mounting

LAN Port Waterproof Enclosure

Install Enclosure Onto The Articulation Pole

Installation for Wall

Installation for Pole

Mounting for Pole 1~ 3” (25.4~76.2mm)

Install Articulation Pole with The T-formed Bracket

Installation for DIN Rail

Setup Wizard

Web User Interface

Wireless

Access Point Mode

WDS with AP Mode

WDS Mode

Wireless Client Mode

Wireless Security

Wired Equivalent Privacy (WEP)

Wi-Fi Protected Access (WPA/WPA2/WPA3)

IPv6

Advanced Settings

Performance

Wireless Resource Control

Multi-SSID

VLAN

VLAN List

Port List

Add/Edit VLAN

PVID Settings

Intrusion

Schedule

Internal RADIUS Server

Bandwidth Optimization

Hotspot 2.0

Hotspot

Interworking

WAN Metrics

LIST

Captive Portal

Authentication Settings-Web Redirection Only

Authentication Settings- Username/Password

Authentication Settings- Passcode

Authentication Settings- Remote RADIUS

Authentication Settings- LDAP

Authentication Settings- POP3

Login Page Upload

MAC Bypass

DHCP Server

Dynamic Pool Settings

Static Pool Setting

Current IP Mapping List

Filters

Wireless MAC ACL

IP Filter Settings

WLAN Partition

Uplink/Downlink Setting

Status

Device Information

Client Information

WDS Information Page

Statistics

View Log

Log Settings

Maintenance Section

Administration