Lancom IAP-822 User Manual

Wireless LAN

LANCOM IAP-822

Dual-radio industrial 11ac WLAN access point with up to 867 Mbps

The LANCOM IAP-822 is a powerful 11ac WLAN industrial access point. It provides fast WLAN to 11n clients in

the 2.4-GHz frequency band and also to the increasing number of modern 11ac-enabled devices in the 5-GHz

band with up to 867 Mbps. In combination with an extended temperature range of -20 to +50 °C and a dust-proof

housing, the access point is ideal for demanding environments such as logistic surroundings, sheltered outdoor

areas or installations at mobile machines.

a

Dual concurrent WLAN – parallel operation at 2.4 and 5 GHz with up to 867 Mbps with IEEE 802.11ac

a

Robust full metal housing with protection rating IP-50 for maximum reliability in rough environments

a

Reliable even at demanding temperatures (-20° to +50°C)

a

Dynamic WLAN optimization thanks to LANCOM Active Radio Control (ARC)

a

Powerful WLAN diagnostics with Spectral Scan

a

Professional security features such as IEEE 802.1X

a

Zero-touch deployment with a LANCOM WLAN controller or the LANCOM Management Cloud

a

Easy and secure integration of external users with the Public Spot Option

DATASHEET

LANCOM IAP-822

Dual concurrent WLAN with up to 867 Mbps

The LANCOM IAP-822 offers one wireless radio module for

11ac WLAN and another for 11n WLAN. This provides fast

WLAN to 11n clients in the 2.4-GHz frequency band and also

the increasing number of modern 11ac-enabled devices in

the 5-GHz band.

Robust full metal housing

Thanks to the resistant full metal housing the industrial access

point convinces even in rough environments with a heavy

dust occurrence with a high robustness. Thus, the device is

optimally protected against external influences and ideally

suits for WLAN applications in warehouses or covered event

areas.

Extended temperature range

Thanks to an extended temperature range from -20 °C to

+50 °C the device offers a reliable radio connection and a

high WLAN availability even at extreme conditions.

Active Radio Control for dynamic radio-field

optimization

The LANCOM IAP-822 supports the WLAN optimization

concept LANCOM Active Radio Control. This intelligent

combination of innovative features included with the LCOS

operating system – such as Adaptive Noise Immunity, RF

Optimization, and Client Steering – sustainably increases

WLAN performance and supports administrators with

professional tools for WLAN management.

LANCOM security for wireless networks

With numerous integrated security features, such as IEEE

802.1X, the LANCOM IAP-822 provides optimal security for

networks. As a result, employees and visitors all benefit from

security policies in the network.

Zero-touch deployment

By supporting zero-touch deployment, the LANCOM IAP-822

is quickly and easily integrated and configured without having

to access the configuration UI. In combination with a WLAN

controller or the LANCOM Management Cloud the access

point receives an appropriate configuration immediately after

network authentication.

Secure integration of external users

In combination with the LANCOM Public Spot Option, the

LANCOM IAP-822 is ideal for operating hotspots. Users

benefits from a hotspot that is secure and easy-to-use, while

hotspot operators can be sure that their own network

remains separate from the hotspot.

Maximum future viability

LANCOM products are designed for a service life of several

years and are equipped with hardware dimensioned for the

future. Even reaching back to older product generations,

updates to the LANCOM Operating System – LCOS – are

available several times a year, free of charge and offering

major features.

Powerful WLAN diagnostics with Spectral Scan

The LANCOM IAP-822 uses Spectral Scan to search the

surrounding radio field for sources of interference. This

professional tool for efficient WLAN troubleshooting is a

combination of hardware and software features. It identifies

and graphically represents sources of interference, so helping

the administrator to initiate countermeasures.

DATASHEET

LANCOM IAP-822

WLAN product specifications

2400-2483.5 MHz (ISM) and 5150-5700 MHz (depending on country-specific restrictions)Frequency band 2.4 GHz and 5 GHz

Data rates IEEE 802.11ac/n

Data rates IEEE 802.11n

Data rates IEEE 802.11a/ h

Data rates IEEE 802.11b/g

Output power at radio module, 5 GHz and
per transmit chain

and per transmit chain

Max. allowed radiation power (EIRP), 5 GHz

GHz

Receiver sensitivity 5 GHz

Radio channels 5 GHz

Supported WLAN standards

IEEE standards

Standard IEEE 802.11ac

Standard IEEE 802.11n

Supported features

WLAN operating modes

Modes

Security

Encryption options

867 Mbps according to IEEE 802.11ac with MCS9 (fallback to 6,5 Mbps with MCS0). Compatible to IEEE 802.11ac/n/a, IEEE 802.11
ac/n, IEEE 802.11n/a compatibility mode or pure IEEE 802.11ac, pure IEEE 802.11n, pure IEEE 802.11a mode and data rates selectable

300 Mbps according to IEEE 802.11n with MCS15 (fallback to 6,5 Mbps with MCS0). Compatible to IEEE 802.11a/n, IEEE 802.11g/n,
IEEE 802.11b/g/n or IEEE 802.11b/g compatibility mode or pure IEEE 802.11n, pure IEEE 802.11a, IEEE 802.11g or pure IEEE 802.11b
mode and data rates selectable

54 Mbps (fallback to 48, 36 , 24, 18, 12, 9, 6 Mbps, Automatic Rate Selection), fully compatible with TPC (adjustable power output)
and DFS (automatic channel selection, radar detection) and data rates selectable

54 Mbps to IEEE 802.11g (fallback to 48, 36, 24, 18, 12, 9, 6 Mbps, Automatic Rate Selection) compatible to IEEE 802.11b (11, 5.5,
2, 1 Mbps, Automatic Rate Selection), IEEE 802.11b/g compatibility mode or pure IEEE 802.11g or pure IEEE 802.11b and data rates
selectable

Up to 150 m (up to 30 m in buildings)Range IEEE 802.11a/b/g *

IEEE 802.11a/h: +17 dBm @ 54 MBit/s; IEEE 802.11an/ac: +16 dBm @ (MCS7, 20 MHz), +15 dBm @ (MCS7, 40 MHz), +15 dBm (MCS9,
20 MHz), +14 dBm (MCS9, 40/80 MHZ)

IEEE 802.11b/g: +18 dBm @ 54 MBit/s, IEEE 802.11n: +16 dBm @ (MCS7, 20 MHz), +16 dBm @ (MCS7, 40 MHz)Output power at radio module, 2.4 GHz

IEEE 802.11a/h: Up to 30 dBm / 1000 mW EIRP (depending on national regulations on channel usage and subject to further obligations
such as TPC and DFS)

IEEE 802.11b/g: Up to 20 dBm / 100 mW EIRP (transmission power control according to TPC)Max. allowed radiation power (EIRP), 2.4

Transmission power reduction in software in 1 dB steps to min. 0.5 dBmMinimum transmission power

IEEE 802.11a/h: -80 dBm @ 54 MBit/s, IEEE 802.11an/ac: -75 dBm @ (MCS7, 20/40MHz), -71 dBm @ (MCS9, 20/40 MHz), -68 dBm
(MCS9, 80 MHz)

IEEE 802.11b/g: -80 dBm @ 54 MBit/s, IEEE 802.11n: -77 dBm @ (MCS7, 20 MHz), -75 dBm @ (MCS7, 40 MHz)Receiver sensitivity 2.4 GHz

Up to 26 non-overlapping channels (available channels and further obligations such as automatic DFS dynamic channel selection
depending on national regulations)

Up to 13 channels, max. 3 non-overlapping (depending on country-specific restrictions)Radio channels 2.4 GHz

Up to 15 independent WLAN networksMulti-SSID

Up to 65 clients (recommended), 512 clients (max.)**Concurrent WLAN clients

The effective distances and transmission rates that can be achieved are depending of the onsite RF conditions*) Note

The 11ac WLAN module supports max. 128 clients, this specification refers to the combination with the 11n radio module.**) Note

IEEE 802.11ac, IEEE 802.11n, IEEE 802.11a, IEEE 802.11g, IEEE 802.11b, IEEE 802.11i, IEEE 802.1X, IEEE 802.11u, IEEE 802.11r (Fast
Roaming), IEEE 802.11w (Protected Management Frames), WME and U-APSD/WMM Power Save as defined in IEEE 802.11e, IEEE

802.11h, IEEE 802.11d

2x2 MIMO, 80 MHz channels, QAM-256Supported features

2x2 MIMO, 40-MHz channel, 20/40MHz coexistence mechanisms in the 2.4 GHz band, MAC aggregation, Block Acknowledgement,
STBC (Space Time Block Coding), LDPC (Low Density Parity Check), MRC (Maximal Ratio Combining), Short Guard Interval

WLAN access point (standalone, WLC or Lightweight Controller architectur managed), WLAN bridge (P2P or P2MP) (standalone or
AutoWDS*), (standalone, WLC or Lightweight Controller architectur managed), WLAN client mode, transparent WLAN client mode

IEEE 802.1X (WPA2-Enterprise), IEEE 802.11i (WPA2-Personal), Wi-Fi Certified™ WPA2™, WPA, WEP, IEEE 802.11w (Protected
Management Frames), LEPS (LANCOM Enhanced Passphrase Security)

LCOS 9.20

DATASHEET

LANCOM IAP-822

Security

Encryption

RADIUS/EAP-server

Others

LANCOM Active Radio Control

Roaming

Roaming

Layer 2 features

Protocols

Layer 3 features

Firewall

Security

IPv4 services

IPv6 protocols

AES:CCMP (Advanced Encryption Standard with Counter Mode and Cipher Block Chaining Message Authentication Code Protocol),
TKIP (Temporal Key Integrity Protocol), RC4 (only used by WEP)

EAP-TLS, EAP-TTLS/MSCHAPv2, PEAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-AKA Prime, EAP-FASTEAP types (authenticator)

User administration MAC-based, rate limiting, passphrases, VLAN user based, authentication of IEEE 802.1X clients via EAP-TLS,
EAP-TTLS, EAP-MD5, EAP-GTC, PEAP, MSCHAP or MSCHAPv2

WLAN protocol filters, IP-redirection of any packet received over the WLAN interface, IEEE 802.1X supplicant, background scanning,
client detection ("rogue WLAN client detection"), Wireless Intrusion Detection System (WIDS)

Steering of WLAN clients to the ideal access pointClient Steering*

Selection of optimal WLAN channels by the administratorManaged RF Optimization*

Better WLAN throughput due to immunity against interferencesAdaptive Noise Immunity

Monitoring your WLAN for sources of interferenceSpectral Scan

Dynamic selection of the optimal WLAN channelAdaptive RF Optimization

Improved utilization of the WLAN bandwidthAirtime Fairness

Only in installations with WLAN controller*) Note

IAPP (Inter Access Point Protocol), IEEE 802.11r (Fast Roaming), OKC (Opportunistic Key Caching), Fast Client Roaming (only in operating
mode client modus)

4.096 IDs based on IEEE 802.1q, dynamic assignment, Q-in-Q taggingVLAN

WME based on IEEE 802.11e, Wi-Fi Certified™ WMM®Quality of Service

SSID based, WLAN client basedRate limiting

IGMP-SnoopingMulticast

Ethernet over GRE-Tunnel (EoGRE), ARP-Lookup, LLDP, DHCP option 82, IPv6-Router-Advertisement-Snooping, DHCPv6-Snooping,
LDRA (Lightweight DHCPv6 Relay Agent), Spanning Tree, Rapid Spanning Tree, ARP, Proxy ARP, BOOTP, DHCP

Stateful inspection firewall including paket filtering, extended port forwarding, N:N IP address mapping, paket tagging, user-defined
rules and notifications

Traffic shaping, bandwidth reservation, DiffServ/TOS, packetsize control, layer-2-in-layer-3 taggingQuality of Service

Intrusion Prevention, IP spoofing, access control lists, Denial of Service protection, detailed settings for handling reassembly,
session-recovery, PING, stealth mode and AUTH port, URL blocker, password protection, programmable reset button

PAP, CHAP, MS-CHAP, and MS-CHAPv2PPP authentication mechanisms

VRRP (Virtual Router Redundancy Protocol), analog/GSM modem backupHigh availability / redundancy

IPv4-, IPv6-, NetBIOS/IP multiprotokoll router, IPv4/IPv6 dual stackRouter

ARF (Advanced Routing and Forwarding) up to separate processing of 16 contextsRouter virtualization

HTTP and HTTPS server for configuration by web interface, DNS client, DNS server, DNS relay, DNS proxy, dynamic DNS client, DHCP
client, DHCP relay and DHCP server including autodetection, NetBIOS/IP proxy, NTP client, SNTP server, policy-based routing

DHCPv6 client, DHCPv6 server, DHCPv6 relayIPv6 services

WEBconfig, HTTP, HTTPS, SSH, Telnet, DNS, TFTP, firewall, RAS dial-inIPv6 compatible LCOS applications

DNS, HTTP, HTTPS, ICMP, NTP/SNTP, NetBIOS, PPPoE (server), RADIUS, RADSEC (secure RADIUS), RTP, SNMP, SNMPv3, TFTP, TACACS+IPv4 protocols

NDP, stateless address autoconfiguration (SLAAC), stateful address autoconfiguration (DHCPv6), router advertisements, ICMPv6,
DHCPv6, DNS, HTTP, HTTPS, PPPoE, RADIUS, SMTP

VDSL, ADSL1, ADSL2 or ADSL2+ additional with external DSL modem at an ETH portWAN operating mode

LCOS 9.20

DATASHEET

LANCOM IAP-822

Layer 3 features

WAN protocols

Interfaces

External antenna connectors

Hardware

Management and monitoring

Management functions

Monitoring functions

Declarations of conformity*

Scope of delivery

Power supply unit

Support

Options

LANCOM Warranty Advanced Option M

PPPoE, Multi-PPPoE, ML-PPP, GRE, EoGRE, PPTP (PAC or PNS), L2TPv2 (LAC or LNS) and IPoE (using DHCP or no DHCP), RIP-1, RIP-2,
VLAN, IPv6 over PPP (IPv6 and IPv4/IPv6 dual stack session), IP(v6)oE (autokonfiguration, DHCPv6 or static)

6to4, 6in4, 6rd (static and over DHCP), Dual Stack Lite (IPv4-in-IPv6-Tunnel)Tunneling protocols (IPv4/IPv6)

1 x 10/100/1000BASE-T autosensing (RJ-45), PoE (Power over Ethernet)Ethernet port

1 x 10/100BASE-T autosensing (RJ-45)Ethernet port

Four reverse SMA connectors for external LANCOM AirLancer Extender antennas or for antennas from other vendors. Please respect
the restrictions which apply in your country when setting up an antenna system. For information about calculating the correct antenna
setup, please refer to www.lancom-systems.eu

Temperature range -20° to +50 °C; humidity up to 95%; non-condensingEnvironment

12,95 Watts, incl. PoE-InjectorPower consumption (max)

Robust metal housing, IP 50 protection class, for wall, mast and top-hat rail mounting, 210 x 152 x 33 mm (length x width x depth)Housing

LANconfig, WEBconfig, WLAN controller, LANCOM Layer 2 management (emergency management)Management

Alternative boot configuration, voluntary automatic updates for LCMS and LCOS, individual access and function rights up to 16
administrators, RADIUS and RADSEC user management, remote access (WAN or (W)LAN, access rights (read/write) adjustable seperately),
SSL, SSH, HTTPS, Telnet, TFTP, SNMP, HTTP, access rights via TACACS+, scripting, timed control of all parameters and actions through
cron job

Two stored firmware versions, incl. test mode for firmware updatesFirmSafe

LANmonitor, WLANmonitor, LSM (LANCOM Large Scale Monitor)Monitoring

Device SYSLOG, SNMPv2c, extensive LOG and TRACE options, PING and TRACEROUTE for checking connections, internal logging buffer
for firewall events

Extensive Ethernet, IP and DNS statistics; SYSLOG error counter, accounting information exportable via LANmonitor and SYSLOGMonitoring statistics

EN 60950-1, EN 301 489-1, EN 301 489-17CE

EN 301 8935 GHz WLAN

EN 300 3282.4 GHz WLAN

IPv6 Ready GoldIPv6

You will find all declarations of conformity in the products section of our website at www.lancom-systems.eu*) Note

Hardware Quick Reference (EN, DE), Installation Guide (DE/EN)Manual

1 Ethernet cable, 3 mCable

Mounting kit for wall mountingMounting Kit

External power adapter (230 V), NEST 12 V/1.5 A DC/S, coaxial power connector 2.1/5.5 mm bayonet, temperature range from -5 to
+45° C, LANCOM item no. 110723 (EU)/LANCOM item no 110829 (UK) (not included in bulk delivery)

3 years support via hotline and Internet KnowledgeBaseWarranty

Regular free updates (LCOS operating system and LANCOM Management System) via InternetSoftware updates

Option to extend the manufacturer´s warranty from 3 to 5 years, item no. 10711LANCOM Warranty Basic Option M

Option to extend the manufacturer´s warranty from 3 to 5 years and replacement of a defective device on the next working day, item
no. 10716

LCOS 9.20

WLAN 2

Ant 1

WLAN 2

Ant 2

Config (Com) Reset ETH2 ETH1 (1G) DC 12V

DATASHEET

LANCOM IAP-822

Options

LANCOM Public Spot

Accessories

LANCOM WLAN controllers

LANCOM Serial Adapter Kit

Power over Ethernet Injector

Item number(s)

Gehäusezeichnung

Hotspot option for LANCOM access points and the LANCOM 17xx series for user authentication (up to 64), versatile access (via voucher,
e-mail, SMS), including a comfortable setup wizard, secure separation of guest access and internal network, item no. 60642

LANCOM WLC-4006+, item no. 62035 (EU), item no. 62036 (UK) and item no. 62037 (US), LANCOM WLC-4025+, item no. 61378,
item no. 61379 and item no. 61384 (US), LANCOM WLC-4100, item no. 61369 (EU) and item no. 61377 (UK), LANCOM WLC Basic
Option for Routers, item no. 61639

AirLancer IN-T180ag, item no. 61245External antenna, indoor use

AirLancer AN-RPSMA-NJ adapter to connect ON Antennas to LANCOM Indoor Access Points and IAPs, item no. 61259Adapter

AirLancer Extender SA-LAN surge arrestor (LAN cable), item no. 61213Surge arrestor (LAN cable)

LANCOM IAP Mount for cap rail and pole mounting, item no. 61647LANCOM IAP Mount

For the connection of V.24 modems with AT command set and serial interface for the connection to the LANCOM COM interface, incl.
serial cable and connection plug, item no. 61500

1-port PoE injector with Gigabit support, integrated power supply, compatible with the standard IEEE 802.3af/at, item no. 61738 (EU)
and 61739 (UK)

61757 (EU), 61758 (UK)LANCOM IAP-822

61760LANCOM IAP-822, 5-piece bulk

LCOS 9.20

www.lancom-systems.de

LANCOM Systems GmbH I Adenauerstr. 20/B2 I 52146 Würselen I Deutschland I E-Mail [e-mail]

LANCOM, LANCOM Systems and LCOS are registered trademarks. All other names or descriptions used may be trademarks or registered trademarks of their owners. Subject to change without notice. No liability for

technical errors and/or omissions. 03/16