How it Works
IP-COM
Loading...
AC3000-64
User Manual
109 pgs2.97 Mb0

IP-COM AC3000-32, AC3000, AC3000-64 User Manual

1
Network Setting
Network Setting ........................................................................................................................................................... 1
1 Network Setting ............................................................................................................................................................. 2
2 IP Routing ..................................................................................................................................................................... 59
3 Example of Network Setting ........................................................................................................................................ 74
2
1 Network Setting
Network Setting includes: Interface Settings, Interface and DHCP Server, Internet Settings, NAT Rule,
WAN Interface Settings, and Multi-WAN Policy.
Note: If you want to configure NAT rules, WAN interface settings, and multi-WAN policies, create WAN interfaces on the Interface Settings page first.
1.1 Interface Settings
1.1.1 Overview
AC3000-32 provides 4 physical ports. AC3000 and AC3000-64 provides 4 physical ports by default, and you can add physical ports as required.
By default, all the physical ports are VLAN interfaces. You can change some of them to WAN interfaces. A physical port can only be set to either a WAN interface or a VLAN interface.
ி VLAN Interface
It is used to connect to local users and APs. You can set a VLAN ID for each VLAN interface.
Note: Every VLAN interface of the AC has no PVID, no matter it has a VLAN ID or not. For a VLAN interface, if VLAN ID=0, the VLAN interface can transmit and receive only data packets without tags. If VLAN ID≠0, the VLAN interface can only transmit and receive data packets with the tag matching the VLAN ID.
By default, fit APs have no management VLAN ID (VLAN ID=0), and the physical ports of fit APs have no PVID. In distributed forwarding mode, when the AC delivers an SSID policy with a VLAN ID to
an AP, the management VLAN ID of the AP remains 0, but the PVID of the physical port of the AP is set to 0. In centralized forwarding mode, when the AC delivers an SSID policy with a VLAN ID to an AP, no management VLAN ID or PVID is assigned to the AP.
ி WAN Interface
It is used to connect to the internet. When you set a physical port as a WAN interface, you can configure internet settings and NAT rules for the WAN interface to allow computers connected to the specified VLAN interfaces to access the internet through the WAN interface.
3
If you create WAN interfaces, the AC enables NAT function and functions as a gateway. The network topology is as follows.
1.1.2 Configuring Interface Settings
By default, the AC provides a VLAN interface named "default". The VLAN interface contains all physical ports of the AC and its VLAN ID is 0. See the following figure.
Creating a VLAN Interface
1. Log in to the web UI of the AC and choose Network Setting > Network Setting > Interface
Settings.
2. Click Add.
3. Configure the parameters in the window.
Interface Type: Select VLAN Interface.  Physical Port: Select one or more physical ports belonging to the VLAN Interface.  Interface Name: Set a unique name for the VLAN interface.
WAN Interface
VLAN
Interface
Core Switch
PoE Switch
User
User
Internet
4
VLAN ID: Set a VLAN ID for the VLAN interface.
4. Click Save.
Parameter Description
Parameter
Description
Interface Type
Select an interface type for the configured rule. VLAN Interface: It is used to connect to local computers or APs. The AC allows a maximum of 512
VLAN interfaces.
WAN Interface: It is used to connect to the internet.
Physical Port
Select the physical ports belonging to the VLAN interfaces.
A VLAN interface can include multiple physical ports. A physical port can belong to
multiple VLAN interfaces. One WAN interface matches only one physical port.
A physical port can be set only as either a VLAN interface or a WAN interface.
Interface Name
Enter a unique name for the interface. Only Chinese characters, letters, digits, underscores, and dashes are allowed. The interface name
cannot be blank. The range is 1 - 16 characters. After you save the configured rule, the interface name cannot be changed.
VLAN ID
It is applicable to VLAN interfaces. Set a VLAN ID for the configured VLAN interface. The range is 0 - 4094. “0” indicates that the VLAN
interface allows data packets that are not tagged to pass through. For more information, refer to VLAN
Interface.
5
End: After you create a VLAN interface, you can choose Network Setting > Network Setting >
Interface Settings to view the VLAN interface. See the following figure.
Creating a WAN Interface
A WAN interface can contain only one physical port. A physical port configured as a VLAN interface cannot be set as a WAN interface. If you want to create a WAN interface on a physical port, remove the physical port from its VLAN interface first.
Procedure:
1. Log in to the web UI of the AC and go to Network Setting > Network Setting > Interface Settings.
2. Find the VLAN interface such as "default" and click .
3. Physical Port: Deselect the check box of the physical port, such as "eth3".
4. Click Save.
When the physical port is removed from the VLAN interface, you can set the physical port to a WAN interface.
6
Procedure:
1. Choose Network Setting > Network Setting > Interface Settings and click Add.
2. Configure the parameters in the window.
Interface Type: Select WAN Interface. Physical Port: Select the physical port such as "eth3".  Interface Name: Set a name such as "wan0".
3. Click Save.
End: After you create a WAN interface, you can choose Network Setting > Network Setting >
Interface Settings to view the WAN interface. See the following figure. The eth3 port is set to a WAN
interface.
If you want to create more WAN interfaces, repeat the procedure. The AC supports creating a maximum of N-1 WAN interfaces. N is the number of the physical ports of the AC.
Modifying an Interface
1. Choose Network Setting > Network Setting > Interface Settings.
2. Find the interface to be modified and click .
7
3. Modify the parameters except Interface Name as required.
4. Click Save.
Deleting an Interface
When you delete an interface, all configurations of the interface are deleted, such as Interface and DHCP
Server, Internet Settings, and NAT Rule.
The default VLAN interface cannot be deleted.
Procedure:
1. Choose Network Setting > Network Setting > Interface Settings.
2. Click corresponding to the interface.
1.1.3 Example of VLAN Interface Application
Networking Requirement
You need the AC to manage three APs on three different VLANs.
Assumption:
All the APs are restored to the factory settings.  All the APs are connected to access ports of the switch, as shown in the following network
topology.
Network Topology
Switch
8
Procedure
I. Configure the Switch
Configure the 802.1Q VLAN function on the switch. See the following table.
Switch Port
Connected to
VLAN ID
Port Type
PVID
1
AP1 1 Access
1 2 AP2 2 Access
2 3 AP3 3 Access
3
24
AC
1,2,3
Trunk
1
II. Configure the AC
According to the networking requirement, all the APs have no PVID or VLAN ID, and will obtain IP addresses from the AC.
Procedure:
Step 1: Configure VLAN Interface
Choose Network Setting > Network Setting > Interface Settings, and configure three VLAN interfaces used to communicate with the three APs.
1. Configure the VLAN interface used to communicate with AP1.
According to the networking requirement, the VLAN ID of the VLAN interface is 0, so you can use the default VLAN interface.
2. Configure the VLAN interface used to communicate with AP2.
1) Click Add.
2) Configure the parameters in the window.
Interface Type: Select "VLAN Interface".  Physical Port: Select the physical port connected to the switch, which is "eth0".  Interface Name: Set a name, such as "vlan2".
9
VLAN ID: Enter the ID of the VLAN of AP2, which is "2".
3) Click Save.
3. Configure the VLAN interface used to communicate with AP3.
1) Click Add.
2) Configure the parameters in the window.
Interface Type: Select "VLAN Interface".  Physical Port: Select the physical port connected to the switch, which is "eth0".  Interface Name: Set a name, such as "vlan3".  VLAN ID: Enter the ID of the VLAN of AP2, which is "3".
3) Click Save.
10
When you complete the step 1, the VLAN interface configurations are displayed. See the following figure.
Step 2: Configuring the Interfaces and DHCP Servers
On the Network Setting > Network Setting > Interface and DHCP Server page, configure three DHCP servers on the created interfaces respectively. The DHCP servers are used to assign IP addresses to AP1, AP2, and AP3.
1. Configure the DHCP server used to assign an IP address to AP1
According to step 1, AP1 uses the default VLAN interface to connect to the AC, so you can use the default DHCP server to assign an IP address to AP1.
To Identify the DHCP server more easily, you can change the remark of the DHCP server to "AP1". See the following figure.
2. Configure the DHCP server used to assign IP address to AP2
1) Click Add.
2) Configure the parameters in the window.
VLAN Interface: Select "vlan2".  IP Address: Set an IP address for the VLAN interface, such as "192.168.20.1".  Subnet Mask: You can keep the default value.  DHCP Server: Select "Enable".  Remark: Set a name for the DHCP server, such as "AP2".  Primary DNS: In this example, you can set the primary DNS IP address "192.168.20.1" as the
DHCP server IP address.
11
Start IP: Set the start IP address of the DHCP server pool, such as "192.168.20.100".  End IP: Set the end IP address of the DHCP server, such as "192.168.20.200".
3) Click Save.
3. Configure the DHCP server used to assign IP address to AP3
1) Click Add.
2) Configure the parameters in the window.
VLAN Interface: Select "vlan3".  IP Address: Set an IP address for the VLAN interface, such as "192.168.30.1".  Subnet Mask: You can keep the default value.  DHCP Server: Select "Enable".  Remark: Set a name for the DHCP server, such as "AP3".  Primary DNS: In this example, you can set the primary DNS IP address as the DHCP server IP
address "192.168.30.1".
Start IP: Set the start IP address of the DHCP server pool, such as "192.168.30.100".  End IP: Set the end IP address of the DHCP server, such as "192.168.30.200".
3) Click Save.
12
After the configuration is complete of the three DHCP servers is complete, you can view the information. See the following figure.
Verification
After all the configurations are complete, AP1 obtains an IP address on the network segment of
192.168.10.0/24, AP2 obtains an IP address on the network segment of 192.168.20.0/24, and AP3
obtains an IP address on the network segment of 192.168.30.0/24. All the three APs are managed successfully by the AC.
13
Appendix: VLAN Process
Condition
Actions about AP1
Actions about AP2
Actions about AP3
When the switch’s access
port receives packets from an AP, it will
Add tag: VLAN 1.
Add tag: VLAN 2.
Add tag: VLAN 3.
When the switch’s trunk
port transmits packets, it will
Remove the tag and forward the packets, because VLAN ID=PVID=1.
Keep the tag and forward the packets, because VLAN ID≠PVID.
Keep the tag and forward the packets, because VLAN
ID≠PVID.
When the AC’s eth0 port
receives packets, the packets’ status are
Untagged
With tag: VLAN ID 2
With tag: VLAN ID 3
The VLAN ID that the eth0 port of the AC must allow to pass through
VLAN ID 0
VLAN ID 2
VLAN ID 3
When the AC’s eth0 port
transmits packets, the packets’ status are
Untagged
With tag: VLAN ID 2
With tag: VLAN ID 3
When the switch’s trunk
port receives packets from the AC, it will
Add tag: VLAN 1. Because it receives untagged packets.
Keep tag and forward the packets. Because it receives tagged packets.
Keep tag and forward the packets. Because it receives tagged packets.
When the switch’s access port transmits packets to an AP, it will
Remove the tag and forward the packets, because VLAN ID=PVID=1.
Remove the tag and forward the packets, because VLAN ID=PVID=2.
Remove the tag and forward the packets, because VLAN ID=PVID=3.
Switch
14
1.2 Interface and DHCP Server
1.2.1 Overview
The AC allows a maximum of 512 VLAN interfaces. On the Interface and DHCP Server page, you can set IP addresses and DHCP servers for VLAN interfaces.
ி IP Address of VLAN Interface
Each IP address of a VLAN interface is a management IP address of the AC. You can use them to log in to the web UI of the AC.
The IP address of a VLAN interface is also used to communicate with devices that are in the same VLAN network with the interface. For example, a switch is connected to a VLAN interface of the AC and the IP address of the switch is 192.168.0.1/24. To enable the AC and the switch communicate with each other, you can set an IP address in the network segment 192.168.0.0/24 for the VLAN interface.
ி DHCP Server of VLAN Interface
You can enable the DHCP server of a VLAN interface to assign IP addresses, subnet mask, gateway, and DNS address to APs or users connected to the VLAN interface.
1.2.2 Configuring Interface and DHCP Server
The AC provides one default interface and DHCP server rule. See the following figure.
Creating an Interface and DHCP Server Rule
1. Log in to the web UI of the AC and go to Network Setting > Network Setting > Interface and
DHCP Server.
2. Click Add.
3. Configure the parameters in the window.
4. Click Save.
15
Parameter Description
Parameter
Description
VLAN Interface
Select the VLAN interface to which the rule is to be applied.
IP Address
Set an IP address for the VLAN interface. The users belonging to the same VLAN network with the interface can use the IP address to log in to the web UI of the AC to manage the AC.
The AC supports creating a maximum of 32 IP addresses for each VLAN interface. For each rule of interface and DHCP server, you can enable the DHCP server to assign IP addresses to users or APs, or disable the DHCP server.
Subnet Mask
Set the subnet mask for the VLAN interface. It is used to specify the network segment of the VLAN interface.
DHCP Server
Enable or disable the DHCP server of the VLAN interface. If you enable the DHCP server, set the following parameters. When you disable the DHCP server, skip the following parameters.
The DHCP server parameters are described as follows.
16
Parameter Description
Parameter
Description
Assign IP to
Specify whether you want the DHCP server to assign IP addresses to users or APs.
AP: The DHCP server only assigns IP addresses to IP-COM fit APs.  User: The DHCP server only assigns IP addresses to users instead of IP-COM fit APs.
You are recommended to enable at lease one DHCP server for assigning IP addresses to APs.
Other DHCP servers on the network may also assign IP addresses to APs. If so, to make the AC
manage the APs, ensure that the route between the IP address of the VLAN interface and the
IP address of the APs are reachable.
Remark
Set a description for the DHCP server.
Gateway
Set the gateway IP address assigned to users or APs by the DHCP server. If you already configure WAN interfaces and internet settings on the AC, you can set the gateway IP
address as the IP address of the VLAN interface to ensure the internet connectivity for users. Otherwise, set the gateway as the LAN IP address of the upstream router.
Primary DNS
Set the primary DNS address assigned to users or APs by the DHCP server. To ensure that users or APs can access the internet, the DNS address must be a correct DNS server
17
Parameter
Description
address or a DNS proxy server address.
Do not set the DNS IP address as the IP address of the VLAN interface of the AC, because the
AC without WAN interface settings is not a DNS proxy.
Secondary DNS
(Optional) Set the secondary DNS address assigned to users or APs by the DHCP server. You can keep this value blank.
Start IP
The start IP address of the IP address pool of the DHCP server.
End IP
The end IP address of the IP address pool of the DHCP server.
The start and end IP addresses must belong to the network segment of the IP address of the
VLAN interface.
Lease Time
Set the effective period of IP addresses assigned to DHCP clients (users or APs) by the DHCP server.
When half of the lease time elapses, the DHCP client sends a DHCP request to the DHCP server to extend the lease expiration time. If the request succeeds, the expiration time is extended. Otherwise, the client sends the request again when 87.5% of the lease time elapses. If the second request succeeds, the expiration time is extended. Otherwise, the client must request an IP address from the DHCP server after the lease time expires.
When the expiration time elapses, if the client does not send a DHCP request, the DHCP server releases the IP address.
Collision Detect
If the function is enabled, before assigning an IP address, the DHCP server checks whether the IP address is in use.
If no, the DHCP server assigns the IP address to a DHCP client. If yes, the DHCP server checks the availability of other IP addresses until finding an available IP address.
AP MAC Binding
Enabling this function can avoid ARP deception. If this function is enabled, the AC only saves valid APs’ MAC addresses to its ARP table and drops
other MAC addresses. In this way, the AC avoids ARP deception and ensures proper communication over the network.
End: After the configuration is complete, you can choose Network Setting > Network Setting >
Interface and DHCP Server to view the information. See the following figure.
18
Modifying an Interface and DHCP Server Rule
1. Log in to the web UI of the AC and go to Network Setting > Network Setting > Interface and
DHCP Server.
2. Find the item to be modified, click .
3. Modify the parameters, except "VLAN Interface", in the window.
4. Click Save.
Deleting an Interface and DHCP Server Rule
1. Log in to the web UI of the AC and go to Network Setting > Network Setting > Interface and
DHCP Server.
2. Find the item to be modified, click .
The default IP address can be deleted. If you delete the default IP address, use other IP addresses to manage the AC.
19
1.2.3 Example of Interface and DHCP Server
Networking Requirement
The AC has succeeded in managing the APs. The users connected to the APs need to obtain IP addresses from the AC to access the internet.
Assumption:
Before the configuration, the APs have no management VLAN ID. The SSID policy of the APs
uses the centralized forwarding mode.
The LAN IP address of the router is 192.168.100.50.  The router is a DNS proxy server.  All users belong to VLAN 100.
Network Topology
Internet
Router
Switch
User
20
Procedure
I. Configure the Switch
In centralized forwarding mode, data of VLAN 100 from the users is encapsulated and invisible to the switch. So there is no need to set the ports connected to the APs. The VLAN configuration of the other ports of the switch is shown as follows.
The port connected to
VLAN ID
Port Type
PVID
AC
1,100
Trunk
1
Router
100
Access
100
II. Configure the AC to Deliver SSID Policy
Procedure:
Step 1: Create VLAN Interface
1. Log in to the web UI of the AC and go to Network Setting > Network Setting > Interface Settings.
2. Click Add.
3. Configure the parameters in the window.
Interface Type: Select "VLAN Interface".  Physical Port: Select the physical port connected to the switch, which is "eth0".  Interface Name: Set a name for the VLAN interface, such as "vlan100".  VLAN ID: Enter the VLAN ID of the users' VLAN network, which is "100".
4. Click Save.
21
Step 2: Configure Interface and DHCP Server
1. Log in to the web UI of the AC and go to Network Setting > Network Setting > Interface and
DHCP Server.
2. Click Add.
3. Configure the parameters in the window.
VLAN Interface: Select the configured VLAN interface from Step 1, which is "vlan100".  IP Address: Set an IP address for the VLAN interface, such as "192.168.100.1".  Subnet Mask: You can keep the default value.  DHCP Server: Select "Enable".  Assign IP to: Select "User".  Remark: Set a name for the DHCP server, such as "user".  Gateway: In this example, enter the LAN IP address of the router: 192.168.100.50.  Primary DNS: Set a correct DNS server address or a DNS proxy server address. In this example, it
is "192.168.100.50".
Start IP: Set a start IP address of the DHCP address pool, such as "192.168.100.100".  End IP: Set an end IP address of the DHCP address pool, such as "192.168.200.100".
4. Click Save.
22
The gateway is the LAN IP address 192.168.100.50 of the router instead of the IP address of the VLAN interface of the AC.
Step 3: Create SSID Policy
1. Choose Wireless Policy > SSID Policy > SSID Policy.
2. Click Add.
3. Configure the parameters in the window.
Policy: Set a name for the SSID policy, such as "vlan100".  SSID: Set a name for the wireless network, such as "vlan100".  Security Mode: Select a security mode for the wireless network, such as "WPA2-PSK".  Encryption: It is recommended to select "AES".  Password: Set a password for wireless network, such as "12345678".  Forwarding Mode: Select "Centralized".  VLAN Interface: Select the configured VLAN interface "vlan100".
4. Click Save.
23
Step 4: Create SSID Group
1. Choose AP Management > SSID Group.
2. Click Add.
3. Configure the parameters in the window.
SSID Group: Set a name for the SSID group, such as "vlan100".  SSID Policy: Select the configured SSID policy from Step 3, which is "vlan100".
4. Click Save.
24
Step 5: Create AP Group
1. Choose AP Management > AP Group.
2. Click Add.
3. Configure the parameters in the window.
AP Group: Set a name for the AP group, such as "vlan100".  SSID Group: Select the configured SSID group from Step 4, which is "vlan100".
4. Click Save.
25
Step 6: Batch Group
1. Choose AP Management > Modify AP.
2. Select the APs that need the SSID policy and click "Batch Group".
3. Group: Select the configured AP group from Step 5, which is "vlan100".
4. Click Save.
After the configuration is complete, the AC delivers the settings of the AP group to the APs and the APs reboot. Please wait 1 - 2 minutes for the APs to get online.
Verification
When users connect to the wireless network "vlan100", they can access the internet by obtaining IP addresses on the network segment 192.168.100.0/24, and their gateway and DNS address are
192.168.100.50.
1.3 Internet Settings
1.3.1 Overview
Through this function, you can connect the AC to the internet. After the AC is connected to the internet, it can:
Manage APs in the internet.
Synchronize the system time of the AC with the internet time to ensure that the time-related
functions of the AC work properly.
26
1.3.2 Configuring Internet Settings
Whether you create WAN interfaces or not, you can configure internet settings for the AC. For how to configure internet settings, refer to WAN Interface Is Not Created or WAN Interface Is Created.
WAN Interface Is Not Created
Before configuring the internet settings, go to Network Setting > Network Setting > Interface and DHCP Server and create an IP address on the VLAN interface to communicate with the gateway configured in the
internet settings. For details, refer to Example of Internet Settings.
Configuring the Internet Settings
1. Choose Network Setting > Network Setting > Internet Settings.
2. Click Add.
3. Configure the parameters in the window.
4. Click Save.
27
Parameter Description
Parameter
Description
Gateway
The default gateway of the AC. You must configure at lease one IP address of a VLAN interface to belong to the network segment of the gateway so as to make the AC and the gateway communicate with each other.
The gateway is generally the LAN IP address of the upstream router.
Primary DNS
The correct DNS server address or DNS proxy server address. If the upstream router is DNS proxy server, you can set the primary DNS server as the LAN IP address of the router. Otherwise, contact the ISP to obtain the correct DNS address.
Secondary DNS
The correct DNS server address or DNS proxy server address. It is optional.
End: After the configuration is complete, you can choose Network Setting > Network Setting >
Internet Settings to view the configured rule. See the following figure.
Besides, the AC generates a default route. You can choose Network Setting > IP Routing to view the route. See the following figure.
Modifying the Internet Settings
1. Choose Network Setting > Network Setting > Internet Settings.
2. Click the icon on the "Action" column.
3. Configure the parameters in the window.
4. Click Save.
Deleting the Internet Settings
1. Choose Network Setting > Network Setting > Internet Settings.
2. Click the icon on the "Action" column.
28
WAN Interface Is Created
After creating the WAN interface, you can configure the internet settings. Before configuring the internet settings, you need to recognize your internet connection type by referring to the following table or contacting your ISP.
Internet Connection Type
Remark
PPPoE
The ISP provides you a PPPoE user name and password.
DHCP
The ISP does not provide you any account information, or the ISP tells you that the internet connection type is "DHCP".
Static IP
The ISP provides you some fixed IP addresses, such as IP address, subnet mask, gateway, and DNS address.
PPPoE
1. Choose Network Setting > Network Setting > Internet Settings and find the WAN interface to be
configured.
2. Internet Connection Type: Select "PPPoE".
3. Bandwidth: Enter the bandwidth provided by your ISP. If you are uncertain, contace your ISP.
4. Username/Password: Enter the user name and password provided by your ISP.
5. Click OK.
6. Click Connect.
Wait a moment. When the Internet Connection Status is displayed as "Connected", the AC is successfully connected to the internet. Besides, the AC generates a default route. You can choose Network Setting > IP Routing to view the route. See the following figure.
29
If the AC cannot connect to the internet, choose Network Setting > Network Setting > WAN Interface
Settings and try modifying the WAN Interface Settings.
DHCP
1. Choose Network Setting > Network Setting > Internet Settings and find the WAN interface to be
configured.
2. Internet Connection Type: Select "DHCP".
3. Bandwidth: Enter the bandwidth provided by your ISP. If you are uncertain, contace your ISP.
4. Click OK.
5. Click Connect.
Wait a moment. When the Internet Connection Status is displayed as "Connected", the AC is successfully connected to the internet. Besides, the AC generates a default route. You can choose Network Setting > IP Routing to view the route. See the following figure.
If the AC cannot connect to the internet, choose Network Setting > Network Setting > WAN Interface
Settings and try modifying the WAN Interface Settings.
Static IP
1. Choose Network Setting > Network Setting > Internet Settings and find the WAN interface to be
configured.
2. Internet Connection Type: Select "Static IP".
3. Bandwidth: Enter the bandwidth provided by your ISP. If you are uncertain, contace your ISP.
4. IP Address/Subnet Mask/Gateway/Primary DNS/Secondary DNS: Enter the fixed IP addresses
provided by your ISP.
5. Click OK.
6. Click Connect.
Loading...
+ 79 hidden pages
Buy Points How it Works FAQ Contact Us Questions and Suggestions Privacy Policy Cookie Policy Terms of Use