Lancom OAP-822 User Manual

Wireless LAN

LANCOM OAP-822

Dual-radio outdoor 11ac WLAN access point for professional outdoor WLAN
applications – in parallel in the 2.4-GHz and 5-GHz frequency bands

The LANCOM OAP-822 features two radio modules for parallel operation in the 2.4- and 5-GHz frequency bands.

Connectors for external antennas mean that it offers maximum flexibility for outdoor wireless applications.

a

Dual concurrent WLAN – parallel operation at 2.4 and 5 GHz with up to 300 Mbps with IEEE 802.11n and

867 Mbps with IEEE 802.11ac

a

Four external antenna connectors

a

Robust IP66 protective housing – reliable even at extreme temperatures (-33°C to +70°C)

a

Dynamic WLAN optimization thanks to LANCOM Active Radio Control (ARC)

a

Professional security features such as IEEE 802.1X

a

IPSec-VPN support with LANCOM OAP VPN Option

a

Zero-touch deployment with a LANCOM WLAN controller or LSR

a

Easy and secure integration of external users with the LANCOM Public Spot option

a

Connectors for Gigabit Ethernet with Power over Ethernet as per IEEE 802.3af and Fast Ethernet

DATASHEET

LANCOM OAP-822

Dual concurrent WLAN with up to 867 Mbps

The LANCOM OAP-822 features two WLAN radio modules

for the simultaneous operation at 2.4 and 5 GHz and offers

a wide range of options for outdoor applications: The quick

and easy setup of modern outdoor hotspots, professional

WLAN coverage of open spaces, or even high-speed P2P

links for connecting to remote buildings in the 5-GHz band

via IEEE 802.11ac with a net data rate of up to 250 Mbps.

Maximum reliability in all weathers

The LANCOM OAP-822 has a robust IP-66 protective housing,

making it fully dust proof and water-jet resistant. It

withstands temperatures between -33°C and +70°C to

guarantee reliable operations even under extreme conditions.

Active Radio Control for dynamic radio-field

optimization

The LANCOM OAP-822 supports the WLAN optimization

concept LANCOM Active Radio Control. This intelligent

combination of innovative features included with the LCOS

operating system - such as Band Steering, Adaptive Noise

Immunity, Adaptive RF Optimization, and Client Steering -

sustainably increases WLAN performance and supports

administrators with professional tools for WLAN

management.

LANCOM security for wireless networks

With numerous integrated security features, such as IEEE

802.1X, this outdoor access point provides optimal security

for networks. Administrators and employees alike benefit

from professional security policies on the network.

Support for zero-touch deployment

Quick and easy network integration of the access points as

well as automatic assignment of the configuration - without

manual configuration. For WLAN controller or LSR-based

installations, the access point receives an appropriate

configuration immediately after network authentication.

Secure integration of external users

In combination with the LANCOM Public Spot option, the

LANCOM OAP-822 is ideal for operating hotspots. Users

benefits from a hotspot that is secure and easy-to-use, while

hotspot operators can be sure that their own network

remains separate from the guest network.

Wireless freedom

Thanks to IEEE 802.11ac, the LANCOM OAP-822 supports

highly powerful point-to-point links with up to 867 Mbps

for wide coverage of open spaces and secure interconnection

of remote buildings. Setting up a wireless network of this

type spares you the need for laborious cable installations and

expensive leased lines.

Maximum future-proofing

The LANCOM OAP-822 supports the high-speed WLAN

standard IEEE 802.11ac, so that you are well equipped for

future challenges. LANCOM products are designed for a

service life of several years and are equipped with hardware

dimensioned for the future. Even reaching back to older

product generations, updates to the LANCOM Operating

System - LCOS - are available several times a year, free of

charge and offering major features.

Optional VPN functionality

The LANCOM OAP VPN Option upgrades the outdoor access

points of the OAP-8xx series with VPN functionality. This

way, maintanance and management can be conducted

remotely via an encrypted IPSec VPN tunnel. Furthermore, a

trusted WLAN can be provided via a securely encrypted VPN

tunnel to the company headquarters.

DATASHEET

LANCOM OAP-822

WLAN product specifications

2400-2483.5 MHz (ISM) and 5150-5700 MHz (depending on country-specific restrictions)Frequency band 2.4 GHz and 5 GHz

Data rates IEEE 802.11ac/n

Data rates IEEE 802.11n

Data rates IEEE 802.11a/ h

Data rates IEEE 802.11b/g

Range (outdoor / P2P)

Output power at radio module, 5 GHz and
per transmit chain

and per transmit chain

Max. allowed radiation power (EIRP), 5 GHz

GHz

Receiver sensitivity 5 GHz

Radio channels 5 GHz

Multi-SSID

PRP

Supported WLAN standards

IEEE standards

Standard IEEE 802.11ac

Standard IEEE 802.11n

Supported features

WLAN operating modes

Modes

867 Mbps according to IEEE 802.11ac with MCS9 (fallback to 6,5 Mbps with MCS0). Compatible to IEEE 802.11ac/n/a, IEEE 802.11
ac/n, IEEE 802.11n/a compatibility mode or pure IEEE 802.11ac, pure IEEE 802.11n, pure IEEE 802.11a mode and data rates selectable

300 Mbps according to IEEE 802.11n with MCS15 (fallback to 6,5 Mbps with MCS0). Compatible to IEEE 802.11a/n, IEEE 802.11g/n,
IEEE 802.11b/g/n or IEEE 802.11b/g compatibility mode or pure IEEE 802.11n, pure IEEE 802.11a, IEEE 802.11g or pure IEEE 802.11b
mode and data rates selectable

54 Mbps (fallback to 48, 36 , 24, 18, 12, 9, 6 Mbps, Automatic Rate Selection), fully compatible with TPC (adjustable power output)
and DFS (automatic channel selection, radar detection) and data rates selectable

54 Mbps to IEEE 802.11g (fallback to 48, 36, 24, 18, 12, 9, 6 Mbps, Automatic Rate Selection) compatible to IEEE 802.11b (11, 5.5,
2, 1 Mbps, Automatic Rate Selection), IEEE 802.11b/g compatibility mode or pure IEEE 802.11g or pure IEEE 802.11b and data rates
selectable

The actual range depends on the environmental conditions. The Antenna Distance Calculator on www.lancom.de provides information
on the possible data rates and distances.

IEEE 802.11a/h: +17 dBm @ 54 MBit/s; IEEE 802.11an/ac: +16 dBm @ (MCS7, 20 MHz), +15 dBm @ (MCS7, 40 MHz), +15 dBm (MCS9,
20 MHz), +14 dBm (MCS9, 40/80 MHZ)

IEEE 802.11b/g: +18 dBm @ 54 MBit/s, IEEE 802.11n: +16 dBm @ (MCS7, 20 MHz), +16 dBm @ (MCS7, 40 MHz)Output power at radio module, 2.4 GHz

IEEE 802.11a/h: Up to 30 dBm / 1000 mW EIRP (depending on national regulations on channel usage and subject to further obligations
such as TPC and DFS)

IEEE 802.11b/g: Up to 20 dBm / 100 mW EIRP (transmission power control according to TPC)Max. allowed radiation power (EIRP), 2.4

Transmission power reduction in software in 1 dB steps to min. 0.5 dBmMinimum transmission power

IEEE 802.11a/h: -80 dBm @ 54 MBit/s, IEEE 802.11an/ac: -75 dBm @ (MCS7, 20/40MHz), -71 dBm @ (MCS9, 20/40 MHz), -68 dBm
(MCS9, 80 MHz)

IEEE 802.11b/g: -80 dBm @ 54 MBit/s, IEEE 802.11n: -77 dBm @ (MCS7, 20 MHz), -75 dBm @ (MCS7, 40 MHz)Receiver sensitivity 2.4 GHz

Up to 26 non-overlapping channels (available channels and further obligations such as automatic DFS dynamic channel selection
depending on national regulations)

Up to 13 channels, max. 3 non-overlapping (depending on country-specific restrictions)Radio channels 2.4 GHz

Up to 31 (Simultaneous use of up to 16 independent WLAN networks at WLAN interface 1 and up to 15 independent WLAN networks
at WLAN interface 2.

Up to 65 clients (recommended), 512 clients (max.)**Concurrent WLAN clients

Packet loss of point-2-point connections can be reduced by using the Parallel Redundancy Protocol with dual radio access points due
to parallel data transmissions

The 11ac WLAN module supports max. 128 clients, this specification refers to the combination with the 11n radio module.**) Note

IEEE 802.11ac, IEEE 802.11n, IEEE 802.11a, IEEE 802.11g, IEEE 802.11b, IEEE 802.11i, IEEE 802.1X, IEEE 802.11u, IEEE 802.11r (Fast
Roaming), IEEE 802.11w (Protected Management Frames), WME and U-APSD/WMM Power Save as defined in IEEE 802.11e, IEEE

802.11h, IEEE 802.11d

2x2 MIMO, 80 MHz channels, QAM-256Supported features

2x2 MIMO, 40-MHz channel, 20/40MHz coexistence mechanisms in the 2.4 GHz band, MAC aggregation, Block Acknowledgement,
STBC (Space Time Block Coding), LDPC (Low Density Parity Check), MRC (Maximal Ratio Combining), Short Guard Interval

WLAN access point (standalone, WLC or Lightweight Controller architectur managed), WLAN bridge (P2P or P2MP) (standalone or
AutoWDS*), (standalone, WLC or Lightweight Controller architectur managed), WLAN client mode, transparent WLAN client mode

LCOS 9.18

DATASHEET

LANCOM OAP-822

Security

Encryption options

Encryption

RADIUS/EAP-server

Others

LANCOM Active Radio Control

Roaming

Roaming

Layer 2 features

Protocols

Layer 3 features

Firewall

Security

IPv4 services

IEEE 802.1X (WPA2-Enterprise), IEEE 802.11i (WPA2-Personal), Wi-Fi Certified™ WPA2™, WPA, WEP, IEEE 802.11w (Protected
Management Frames), LEPS (LANCOM Enhanced Passphrase Security)

AES:CCMP (Advanced Encryption Standard with Counter Mode and Cipher Block Chaining Message Authentication Code Protocol),
TKIP (Temporal Key Integrity Protocol), RC4 (only used by WEP)

EAP-TLS, EAP-TTLS/MSCHAPv2, PEAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-AKA Prime, EAP-FASTEAP types (authenticator)

User administration MAC-based, rate limiting, passphrases, VLAN user based, authentication of IEEE 802.1X clients via EAP-TLS,
EAP-TTLS, EAP-MD5, EAP-GTC, PEAP, MSCHAP or MSCHAPv2

WLAN protocol filters, IP-redirection of any packet received over the WLAN interface, IEEE 802.1X supplicant, background scanning,
client detection ("rogue WLAN client detection"), Wireless Intrusion Detection System (WIDS)

Steering of WLAN clients to the ideal access pointClient Steering*

Steering of 5GHz clients to the corresponding high-performance frequency bandBand Steering

Selection of optimal WLAN channels by the administratorManaged RF Optimization*

Better WLAN throughput due to immunity against interferencesAdaptive Noise Immunity

Monitoring your WLAN for sources of interferenceSpectral Scan

Dynamic selection of the optimal WLAN channelAdaptive RF Optimization

Improved utilization of the WLAN bandwidthAirtime Fairness

Only in installations with WLAN controller*) Note

IAPP (Inter Access Point Protocol), IEEE 802.11r (Fast Roaming), OKC (Opportunistic Key Caching), Fast Client Roaming (only in operating
mode client modus)

4.096 IDs based on IEEE 802.1q, dynamic assignment, Q-in-Q taggingVLAN

WME based on IEEE 802.11e, Wi-Fi Certified™ WMM®Quality of Service

SSID based, WLAN client basedRate limiting

IGMP-SnoopingMulticast

Ethernet over GRE-Tunnel (EoGRE), ARP-Lookup, LLDP, DHCP option 82, IPv6-Router-Advertisement-Snooping, DHCPv6-Snooping,
LDRA (Lightweight DHCPv6 Relay Agent), Spanning Tree, Rapid Spanning Tree, ARP, Proxy ARP, BOOTP, DHCP

Stateful inspection firewall including paket filtering, extended port forwarding, N:N IP address mapping, paket tagging, user-defined
rules and notifications

Traffic shaping, bandwidth reservation, DiffServ/TOS, packetsize control, layer-2-in-layer-3 taggingQuality of Service

Intrusion Prevention, IP spoofing, access control lists, Denial of Service protection, detailed settings for handling reassembly,
session-recovery, PING, stealth mode and AUTH port, URL blocker, password protection, programmable reset button

PAP, CHAP, MS-CHAP, and MS-CHAPv2PPP authentication mechanisms

VRRP (Virtual Router Redundancy Protocol), analog/GSM modem backupHigh availability / redundancy

IPv4-, IPv6-, NetBIOS/IP multiprotokoll router, IPv4/IPv6 dual stackRouter

ARF (Advanced Routing and Forwarding) up to separate processing of 16 contextsRouter virtualization

HTTP and HTTPS server for configuration by web interface, DNS client, DNS server, DNS relay, DNS proxy, dynamic DNS client, DHCP
client, DHCP relay and DHCP server including autodetection, NetBIOS/IP proxy, NTP client, SNTP server, policy-based routing

DHCPv6 client, DHCPv6 server, DHCPv6 relayIPv6 services

WEBconfig, HTTP, HTTPS, SSH, Telnet, DNS, TFTP, firewall, RAS dial-inIPv6 compatible LCOS applications

RIPv2Dynamic routing protocol

LCOS 9.18

DATASHEET

LANCOM OAP-822

Layer 3 features

DNS, HTTP, HTTPS, ICMP, NTP/SNTP, NetBIOS, PPPoE (server), RADIUS, RADSEC (secure RADIUS), RTP, SNMP, TFTP, TACACS+IPv4 protocols

IPv6 protocols

WAN protocols

Interfaces

Hardware

Housing

Management and monitoring

Monitoring functions

Declarations of conformity*

Scope of delivery

Support

NDP, stateless address autoconfiguration (SLAAC), stateful address autoconfiguration (DHCPv6), router advertisements, ICMPv6,
DHCPv6, DNS, HTTP, HTTPS, PPPoE, RADIUS, SMTP

VDSL, ADSL1, ADSL2 or ADSL2+ additional with external DSL modem at an ETH portWAN operating mode

PPPoE, Multi-PPPoE, ML-PPP, GRE, EoGRE, PPTP (PAC or PNS), L2TPv2 (LAC or LNS) and IPoE (using DHCP or no DHCP), RIP-1, RIP-2,
VLAN, IPv6 over PPP (IPv6 and IPv4/IPv6 dual stack session), IP(v6)oE (autokonfiguration, DHCPv6 or static)

6to4, 6in4, 6rd (static and over DHCP), Dual Stack Lite (IPv4-in-IPv6-Tunnel)Tunneling protocols (IPv4/IPv6)

1 x 10/100/1000BASE-T autosensing (RJ-45), PoE (Power over Ethernet)Ethernet port

1 x 10/100/1000BASE-T autosensing (RJ-45)Ethernet port

Four N connectorsExternal antenna connectors

Via Power over Ethernet, compliant with IEEE 802.3afPower supply

Temperature range -33° to +70 °CEnvironment

12,95 Watts, incl. PoE-InjectorPower consumption (max)

Robust metal housing, IP 66 protection rating, ready for wall and pole mounting, 3 LEDs for status display, please note: device must
not be mounted in salt water environments without a suitable protective housing; Dimensions 255 × 250 × 80 mm (length x width x
depth)

LANconfig, WEBconfig, LSR (LANCOM Large Scale Rollout), WLAN controller, LANCOM Layer 2 management (emergency management)Management

Alternative boot configuration, voluntary automatic updates for LCMS and LCOSManagement functions

Two stored firmware versions, incl. test mode for firmware updatesFirmSafe

LANmonitor, WLANmonitor, LSM (LANCOM Large Scale Monitor)Monitoring

Device SYSLOG, SNMPv2c, extensive LOG and TRACE options, PING and TRACEROUTE for checking connections, internal logging buffer
for firewall events

Extensive Ethernet, IP and DNS statistics; SYSLOG error counter, accounting information exportable via LANmonitor and SYSLOGMonitoring statistics

EN 60950-1, EN 301 489-1, EN 301 489-17CE

EN 301 8935 GHz WLAN

EN 300 3282.4 GHz WLAN

IPv6 Ready GoldIPv6

You will find all declarations of conformity in the products section of our website at www.lancom-systems.eu*) Note

Hardware Quick Reference (EN, DE), Installation Guide (DE/EN)Manual

Data medium with management software (LANconfig, LANmonitor, WLANmonitor, LANCAPI) and documentationCD/DVD

Water-resistant, UV-resistant Ethernet PoE cable with water-resistant screw connector, 15mCable

Mounting kit for wall and pole mountingMounting Kit

Four 3 dBi dipole dual-band antennasAntenna

Via Power over Ethernet compliant with IEEE 802.3af, 1 x PoE Injector suppliedPower supply unit

3 years support via hotline and Internet KnowledgeBaseWarranty

Regular free updates (LCOS operating system and LANCOM Management System) via InternetSoftware updates

LCOS 9.18

PWR

ETH1 (PoE)

Reset

DATASHEET

LANCOM OAP-822

Options

Option to extend the manufacturer´s warranty from 3 to 5 years, item no. 10712LANCOM Warranty Basic Option L

LANCOM Warranty Advanced Option L

LANCOM OAP VPN

LANCOM Public Spot

Accessories

LANCOM WLAN controllers

Power over Ethernet Injector

Item number(s)

Gehäusezeichnung

Option to extend the manufacturer´s warranty from 3 to 5 years and replacement of a defective device on the next working day, item
no. 10717

Option for the extension of the LANCOM OAP-8xx series with IPSec VPN functionality, 5 active VPN channels enable the secure
maintenance and management of OAPs, and the provision of confidential WLANs via a VPN connection to the company headquarters,
item no. 61635

Hotspot option for LANCOM access points and the LANCOM 17xx series for user authentication (up to 64), versatile access (via voucher,
e-mail, SMS), including a comfortable setup wizard, secure separation of guest access and internal network, item no. 60642

LANCOM WLC-4006+, item no. 62035 (EU), item no. 62036 (UK) and item no. 62037 (US), LANCOM WLC-4025+, item no. 61378,
item no. 61379 and item no. 61384 (US), LANCOM WLC-4100, item no. 61369 (EU) and item no. 61377 (UK), LANCOM WLC Basic
Option for Routers, item no. 61639

AirLancer Extender O-D80g, item no. 61221, AirLancer Extender O-D60a, item no. 61222, AirLancer Extender O-D9a, item no. 61224External antenna, outdoor use

AirLancer cable NJ-NP 3m, item no. 61230, AirLancer cable NJ-NP 6m, item no. 61231, AirLancer cable NJ-NP 9m, item no. 61232Antenna cable

AirLancer SN-ANT surge arrestor (2.4 and 5 GHz), to be integrated between Access Point and antenna, item no. 61258Surge arrestor (antenna cable)

AirLancer Extender SA-5L surge arrestor (2.4 and 5 GHz), to be integrated between Access Point and antenna, item no. 61553Surge arrestor (antenna cable)

AirLancer Extender SA-LAN surge arrestor (LAN cable), item no. 61213Surge arrestor (LAN cable)

LANCOM OAP Ethernet cable (30 m), item no. 61347LAN cable (outdoor)

1-port PoE injector with Gigabit support, integrated power supply, compatible with the standard IEEE 802.3af/at, item no. 61738 (EU)
and 61739 (UK)

The polarization diversity antennas require 2 cables and surge arrestors*) Note

61662LANCOM OAP-822

LCOS 9.18

www.lancom-systems.de

LANCOM Systems GmbH I Adenauerstr. 20/B2 I 52146 Würselen I Deutschland I E-Mail [e-mail]

LANCOM, LANCOM Systems and LCOS are registered trademarks. All other names or descriptions used may be trademarks or registered trademarks of their owners. Subject to change without notice. No liability for

technical errors and/or omissions. 01/16