Pepwave OfficePoint is an enterprise grade 802.11b/g Wi-Fi access point with centralized management
system. It is a powerful solution for building wireless networks for all business needs. Each Pepwave
OfficePoint is loaded with essential features such as Multiple SSID, VLAN, AutoMesh and Guest Protect.
One Pepwave OfficePoint can masquerade up to 4 different access points. Each virtual access point can
have its own security policy (e.g. WPA, WPA2, etc.) and authentication mechanism (e.g. 802.1x, open,
captive portal, etc), to facilitate building your network much faster, easier and more cost-effective than
ever before. Pepwave OfficePoint comes with a high-power Wi-Fi transmitter which greatly enhances
coverage and performance.
This manual applies to Pepwave OfficePoint indoor models 200, 400 and outdoor models 400-DX.
Pepwave OfficePoint acts as a bridge between the wireless and the wired Ethernet interface. A typical
setup is as follows:
5.1 Installation Procedures
1. Attach the antenna to the Pepwave OfficePoint unit.
2. Connect the LAN port on the unit with the backbone network using an Ethernet cable. The port
could auto sense the cable is straight-through or cross-over.
3. Connect the power adapter to the power connector of the unit, and then plug in the power adapter.
4. Wait for the status LED to turn green.
5. Connect a PC to the backbone network, and configure the IP address of the PC to be any IP
address between 192.168.0.4 and 192.168.0.254, with subnet mask of 255.255.255.0.
6. With Microsoft Internet Explorer 6 or above, or Mozilla Firefox 2.0 or above, connect to the URL
https://192.168.0.3.
7. When prompted, enter the default admin login ID and password, admin and public respectively.
8. After logging in, the following Information main page appears. Please go to Configure > System
to facilitate further configuration of the Pepwave OfficePoint unit.
This field shows the name of the system entered in the configuration.
This field shows the location entered in the configuration.
This shows the current IP used on the system.
This shows the time of day in respect to the time zone selected.
Up Time
Click on the Detail link beside the Network IP Information to check the following system information: IP
Address Mode, IP Address, Subnet Mask, Default Gateway, DNS Server.
Click on the Info link to check the following wireless information: Web Portal Login, Wireless Network
Firewall, MAC Filter, Bandwidth Control, Layer 2 Isolation.
This indicates the number of wireless networks.
This indicates the number of associated clients.
This shows which 802.11 channel the system is using.
This shows which SSID the client is associated.
This setting shows whether or not the ESSID of the virtual AP can be scanned
by Wi-Fi clients.
This setting shows the wireless authentication and encryption methods.
This setting shows the VLAN ID tagged on all outgoing packets generated from
the virtual AP.
This shows the detailed BSSIDs.
Click on the Stat link to check the following networking statistics: Packets Sent, Bytes Sent, Packets Received, Bytes Received.
A user-specified name for the location of the access point.
This value can be retrieved via SNMP.
This option specifies the time region to be used for representing the time on
the system.
System Settings - Basic
User Manual
Pepwave OfficePoint Series
Domain Name
Keep Default IP With this option disabled, default IP 192.168.0.3 of the device will be disabled.
IP Address Mode
Static IP Address
Subnet Mask
Default Gateway
DNS Server
Domain name can be set for wireless clients to have a readable name for the
web management.
The options are Automatic and Manual.
Automatic: IP address of the Pepwave OfficePoint unit is acquired from a
DHCP server on the Ethernet segment.
Manual: A user-specified IP address is used.
PPPoE: IP address is obtained through PPPoE. PPPoE is only supported on
Router mode, please refer to the below table: System Settings - Advanced
for more details.
IP Address Mode – Manual
This specifies the unique IP address for the Pepwave OfficePoint unit to
communicate on the Ethernet segment.
This IP address is distinct from the admin IP address 192.168.0.3 on the
Ethernet segment.
This setting specifies the subnet mask of the Pepwave OfficePoint unit.
This setting specifies the default gateway of the Pepwave OfficePoint unit.
This is the DNS server address to be used by the Pepwave OfficePoint unit for
resolving host names.
IP Address Mode – PPPoE
PPPoE Username
PPPoE Password
PPPoE Service
Name
This specifies the username required in order to connect via PPPoE to acquire
Internet connectivity. The information is typically determined by and can be
obtained from the ISP.
This specifies the password required in order to connect via PPPoE to acquire
Internet connectivity. The information is typically determined by and can be
obtained from the ISP.
This is a PPPoE parameter which is provided by the ISP.
Manual Router Settings will only be available when the AP Mode in the previous section had been
selected as Router mode. You can use the OfficePoint as a DHCP server for other devices behind.
LAN IP
LAN Subnet Mask
IP Start Range
IP Stop Range
Subnet Mask
Broadcast Address
Gateway
DNS 1
DNS 2
DNS 3
Lease Time
DHCP Server Parameters
This setting specifies the DHCP server IP address.
This setting specifies the subnet mask of the DHCP server.
This setting specifies the first address in the range of IP addresses to be
assigned to DHCP clients.
This setting specifies the last address in the range of IP addresses to be
assigned to DHCP clients.
This setting specifies the subnet mask to be used by DHCP clients.
This setting specifies the broadcast address to be used by DHCP clients.
This setting specifies the default routing gateway to be used by DHCP clients.
This setting specifies the IP address of the primary DNS Server to be offered
to DHCP clients.
This setting specifies the IP address of the secondary DNS Server to be
offered to DHCP clients.
This setting specifies the IP address of the tertiary DNS Server to be offered to
DHCP clients.
This setting specifies the length of time throughout which an IP address of a
DHCP client remains valid. Upon expiration of the Lease Time, the assigned IP
address will no longer be valid and the renewal of the IP address assignment
will be required.
Upon selecting Wireless Networks under Configure section from the navigation bar on the left, the
following shows the configured SSID available on the system:
General Wireless Networks Settings
Wireless Network
SSID
Security Policies
Default VLAN ID
Status
MAC Address
(BSSID)
Portal
To add a new virtual AP, click the Add button. To modify the settings for a virtual AP, click the link Edit on
the right of the desired WLAN SSID, upon which the following Wireless Network Details is displayed.
Click on the Info link to check the following networking statistics: Broadcast SSID, MAC Filter,
Bandwidth Control, Layer 2 Isolation.
The SSID of the virtual Access Point (AP).
Shows the configured wireless authentication and encryption methods.
This setting specifies the VLAN ID to be tagged on all outgoing packets
generated from the virtual AP (i.e. packets that travel from the Wi-Fi segment,
through the Pepwave OfficePoint unit to Ethernet segment via the LAN port).
If 802.1x is enabled, a per-user VLAN ID can be specified in the authentication
reply from the Radius server. If it is set, the value specified via Default VLAN
ID will be overridden.
Shows whether the virtual AP is enabled or disabled.
Shows the detailed BSSIDs.
Shows if the InControl Guest Portal is enabled. Please refer to section 7.2.2 for
details.
This shows if the Broadcast SSID feature of this network is enabled.
This shows if the MAC Filter feature of this network is enabled.
This shows if the Bandwidth Control feature of this network is enabled.
This shows if the Layer 2 Isolation feature of this network is enabled.
User Manual
Pepwave OfficePoint Series
7.2.1 Wireless Network Details - Basic
Wireless Networks Details - Basic
Enable
Wireless Network
SSID
Broadcast SSID
Security Level
Select Yes to enable the virtual AP, or No to disable the virtual AP.
By default, the virtual AP is enabled.
This setting specifies the SSID of the virtual AP to be scanned by Wi-Fi clients.
This setting specifies whether or not the ESSID of the virtual AP can be
scanned by Wi-Fi clients.
Note that the BSSID (i.e. the MAC address of the virtual AP) cannot be hidden
from the scan. To associate with the virtual AP, clients must specify the
correct ESSID upon association.
Broadcast SSID is enabled by default.
This setting configures the wireless authentication and encryption methods.
Available options are: Open - No Encryption, Static WEP, 802.1X, WPA-TKIP,
WPA2-AES:CCMP.
Selecting Open - No Encryption disables encryption.
For details on the other options, please refer to:
The configuration of 802.1X parameters enables Radius-based 802.1X authentication with a dynamic
WEP key. Once selected, Radius Server Setting will be available.
The configuration screen is as follows:
802.1x Parameters
This setting selects between v1 or v2 of the 802.1x EAPOL.
When v1 is selected, both v1 and v2 clients can associate with the access
point. However, when v2 is selected, only v2 clients can associate with the
802.1X Version
access point.
Most modern wireless clients support v2. In the event that there are stations
that do not support v2, select the option v1.
By default, the value of the setting is v2.
WEP Key Size The setting can be configured as either 40 bits or 104 bits.
This setting specifies the length of time throughout which the broadcast key
remains valid. Upon expiration of Re-keying Period, the broadcast key will no
Re-keying Period
longer be valid and the renewal of the broadcast key will be required.
The default is 14400 seconds (i.e. 4 hours).
A value of 0 disables re-keying.
7.2.1.3 WPA parameters
The configuration of WPA parameters enables WPA-TKIP or WPA2-AES.
To enable WPA and W PA-PSK, configure WPA-TKIP. To enable WPA2 and WPA2-PSK, configure
WPA2-AES.
When WPA or WPA2 is configured, Radius-based 802.1x authentication with TKIP encryption method is
enabled. Under this configuration, the Pre-Shared Key option should be disabled.
The security level of this method is known to be very high.
When WPA-PSK or WPA2-PSK is configured, a Pre-Shared Key, or Passphrase, is used for data
encryption and authentication. Under this configuration, the Pre-Shared Key option should be enabled.
Key length must be between 8 and 63 characters (inclusive).
The security level of this method is known to be high.
When 802.1x authentication is configured, the Radius server specified by this
setting will be used for authentication and accounting.
This is the secret for accessing the Radius server.
This specifies the UDP port number for the Authentication port of the Radius
server.
This specifies the UDP port number for the Accounting port of the Radius
server.
This setting specifies the Radius server to used for authentication and
accounting in the event that the host specified by Primary Host is unavailable.
This specifies the maximum number of retry for RADIUS authentication.
By default, it is set as 3.
This specifies the time interval in second between each RADISU request
attempt. Note that the request time interval would be doubled every
retransmission.
Simply registering the devices with Pepwave InControl, users can apply configurations, firmware, and
monitor network activity remotely through this centralized management system. For more details, you can
refer to Pepwave website at:
Tip: How to Set Up OfficePoint Guest Portal in InControl
To set up Guest Portal, you need to (1) enable guest portal function and (2) create guest accounts and
set up portal page.
Step One: Enable Guest Portal
1. Log in InControl using your username and password. <https://incontrol.pepwave.com/>
2. Click "Configuration" tab and find the desired configuration profile.
http://www.pepwave.com/products/incontrol/.
3. To find your wireless network, click "Wireless" tab, check the box next to "Wireless Networks"
and click "More..." button.
(Note: If you have not added a wireless network, you can click "New wireless network..." to set
up a new one.)
5. On the "Edit a wireless network" screen, click "Web Portal Login" tab. Click "Enable" to enable
the Web Portal Login function. Click "OK" to continue.
7. Click the "Web Admin" tag, and setup the web access as follows:
Web Access Protocol: HTTPS
Management Port: 443
HTTP to HTTPS Redirection: Enable
Click Save button to save the settings.
Step Two: Create Guest Accounts and Set Up Portal Page
8. Go to "Guest Portal and Accounts" by clicking on the link at the left panel.
9. You can generate more than one account at one time. Change the parameters in the fields No.
of accounts to be generated, Username prefix, Sequence number suffix and Time Quota.
Default time limit is set to 24 hours. You can change the time limit.
11. You should now have some guest accounts generated as shown in the table "Unused Guest
Accounts". You can download the accounts information in CSV file by clicking the "All",
"Generated today" or "Not generated today" links.
12. A standard portal page will be generated automatically after guest accounts are generated
(http://guest.pepwave.com). You can customize the portal page by clicking on the "Portal Page
Customization" tab. In the screen upload your logo image and enter message for guests. You
can preview your portal page and then publish the portal page.
Your guest accounts and portal page are now ready for use.
This option enables the settings to Block all private IPs / Custom Subnet /
Block Exception.
If you have selected Block all private IPs or Custom Subnet, these IPs /
Subnets will be blocked no matter what "Firewall Mode" selected. When Block
Exception is selected, IPs entered will be excluded from the blocking list.
Private IP -- This includes the commonly known private IPs:
192.168.0.0 - 192.168.255.255
172.16.0.0 - 172.31.255.255
10.0.0.0 - 10.255.255.255
Custom Subnet -- This includes user specified IP subnets to be blocked.
Block Exception – Only IPs specified will NOT be blocked.
This option enables the settings to control upstream and downstream limits.
You can select to either control the bandwidth usage Per VAP or Per Client.
This setting specifies the maximum number of clients that can be connected to
the OfficePoint simultaneously. By default, it is set to unlimited (which is 0 in
number).
This setting specifies three options: Lockdown, Flexible, and Disable.
Lockdown – Block all traffic except for the pre-defined exceptions;
Flexible – Allow all traffic except for the pre-defined exceptions;
Disable – Firewall mode is disabled. (Default option)
This setting specifies the exceptions when Lockdown or Flexible Firewall
Mode is selected. Exceptions can be added by types, including Port, Domain,
IP Address, MAC Address, Application /Service.
User Manual
Pepwave OfficePoint Series
7.2.4 MAC Filter
The settings allow administrator to control the access through Mac address filtering.
Available options are: None, Deny all except listed, Accept all except listed.
Fixed will forced all data packets to be transmitted into the selected transmit
rate. Auto will automatically select the best transmit rate with a condition to
use the selected transmit rate as the minimum auto transmit rate.
This setting enables the filtering of multicast network traffic to the wireless
SSID.
This setting specifies the transmit rate to used for sending multicast network
traffic.
The OfficePoint will forward DHCP requests to a specified DHCP Server. This
option prevents broadcast messages from being propagated on the Ethernet
segment. Upon selecting this option, the DHCP Server IP address (or DHCP
Server settings) will be prompted.
This setting specifies the VLAN ID to be tagged on all outgoing packets
generated from the virtual AP (i.e. packets that travel from the Wi-Fi segment,
through the Pepwave OfficePoint unit to Ethernet segment via the LAN port).
If 802.1x is enabled and a per-user VLAN ID is specified in the authentication reply from the Radius server, then the value specified via Default VLAN ID will
be overridden.
The default value of this setting is 0. That means VLAN tagging is disabled
(instead of tagged with zero).
The 802.1p QoS value to be marked on all outgoing packets generated from
the virtual AP (i.e. packets that travel from the Wi-Fi segment, through the
Network Priority
(QoS)
Layer 2 Isolation
Pepwave OfficePoint unit to Ethernet segment via the LAN port).
If per-user or per-domain QoS value is specified, the Default Quality of
Service value will be overridden.
Possible values are Gold, Silver and Bronze.
Layer 2 is in reference to the second layer in the ISO Open System
Interconnect model.
When this option is enabled, clients on the same VLAN, SSID or subnet are
not allowed to communicate directly via the Layer 2 Protocol(s). Traffic is
passed to upper communication layer(s).
With this option disabled, clients on the same VLAN are allowed to
communicate with each other directly. (Windows network resources browsing
will be possible.)
Advanced Wireless Settings provides more options to fine tune the parameters on the system to achieve
the optimal performance.
7.3.1 Radio Settings
Three options are available:
802.11b/g: Pepwave OfficePoint accepts both 802.11b and 802.11g client
association requests.
Protocol
Operating Country
802.11b Only: Pepwave OfficePoint accepts only 802.11b client association
requests.
802.11g Only: Pepwave OfficePoint accepts only 802.11g client association
requests.
This setting specifies the country / region whose regulations the Pepwave
OfficePoint unit should follow.
If United States is selected, RF channels 1 to 11 are available. Maximum
transmission power is 26 dBm (400 mW) for models of MPW-4xx, or 23dBm
(200 mW) for models of MPW-2xx.
If Europe region is selected, RF channels 1 to 13 are available. Maximum
transmission power is 20 dBm (100 mW).
Radio Settings
This option selects the 802.11 channel to be utilized. Available options for
ting provides the option to set the wait time to receive
Pepwave OfficePoint Series
7.3.3 Performance Tuning
Beacon Rate
Beacon Interval
DTIM Period
RTS Threshold
Distance / Time
Convertor
Slot Time
ACK Timeout
CTS Timeout
802.11g Protection
Advanced Wireless Settings – Performance Tuning
This setting provides the option to send beacon in different transmit bit rate
and the bit rates are: 1Mbps, 2Mbps, 5.5Mbps, 6Mbps, 11Mbps.
This setting provides the option to set the time between each beacon send.
This setting provides the option to set the frequency for beacon to include
Delivery Traffic Indication Message, DTIM. The interval unit is in millisecond.
This setting provides the option to set the minimum packet size for the unit to
send an RTS using the RTS/CTS handshake. Setting zero would disable this
feature.
This is a convertor which will automatically adjust the Slot Time, ACK Timeout
and CTS Timeout based on the distance you have entered.
This setting provides the option to modify the unit wait time before it transmits.
This set
acknowledgement packet before doing retransmission.
This setting provides the option to specify the timeout for the unit to wait for
CTS response in the RTS/CTS handshake.
Enable this setting to in favor of 802.11g devices in mixed mode (11g and 11b)
networks.
AutoMesh provides a way to link APs together when wired cabling is not preferable. This also extends
the wireless coverage of the wireless network for the wireless clients.
Node Type
AutoMesh Number
Key
AutoMesh Settings
There are four options: Auto Detect, Wired, Wireless and Disable.
Auto Detect - the unit would check the connectivity to the default gateway via
wired Ethernet to determine the node type. If there is connectivity to the
default gateway, the unit would state its node type as gateway. Otherwise, the
unit would state its node type as node.
Wired- the unit is expected to be wire connected to provide public network
access to other wireless nodes.
Wireless - the unit would search for the best gateway or node wirelessly in
order to gain public network access.
Disable – the unit would not link to any AP.
This setting gives the encryption key to secure the data between APs.
You can click the link Hide / Show Passphrase to show or hidden the above
Upon selecting SNMP from the navigation bar on the left-hand-side of the Main Menu, the following page
is displayed to enable the configuration of SNMP server settings:
Server Name
SNMPv1
SNMPv2
SNMPv3
SNMP Trap
SNMP Trap
Receiver Name
SNMP Trap
IP Address
SNMP Settings
This setting specifies the name that identifies the SNMP server.
This setting specifies whether to enable or disable the support for Version 1 of
SNMP.
This setting specifies whether to enable or disable the support for Version 2 of
SNMP.
This setting specifies whether to enable or disable the support for Version 3 of
SNMP.
SNMP Trap is a message initiated from a client and sent to the PolePoint
device.
Once this option is enabled, the following two options for SNMP Trap will be
available for configuration.
This setting specifies the name that identifies the SNMP Trap Receiver.
This setting specifies the IP address of the SNMP Trap Receiver.
Upon selecting Web Administration from the navigation bar on the left-hand-side of the Main Menu, the
tabs of configuring the management interface are displayed.
7.6.1 Web Access Settings
The selection Web Access Settings configures the protocol and TCP port number of the web server.
If HTTPS is enabled, HTTP to HTTPS Redirection option will be provided.
7.6.2 Admin Username
The selection Admin Username configures the administrator username for entering Web Admin Interface.
To change to the Username, enter the new username into the Username input fields.
The selection Admin Password configures the administrator password for entering Web Admin Interface.
To change to the password, enter the same new password into the New Password and New Password
(Retype) input fields.
7.6.4 Web Administration
The selection Disable Web Administration turns off the access to Web Administration Interface.
After being turned off, Web Administration Interface can be re-enabled using SNMP.
Select this comment to download debugging information from the Pepwave
OfficePoint unit.
In the event of technical issues, to facilitate prompt resolution by technical
support from Pepwave, please send along with a debug file with the support
request.
This option is for rebooting the Pepwave OfficePoint unit.
The following procedure restores the settings of Pepwave OfficePoint indoor device to factory defaults:
1. Power on the unit, wait for 1 minute until the Status LED turns green.
2. Press and hold the reset button on the rear panel for at least 5 seconds, then release.
3. The Status LED will blink, and then the unit will automatically reboot.
4. 4. Wait for 1 minute or until the Status LED turns green, upon which the settings of Pepwave
OfficePoint will have been restored to the factory defaults.
By default, the unit will acquire an IP address from a DHCP server.
10.2 OfficePoint Outdoor Series
There are two ways to restore the Pepwave OfficePoint outdoor device to default settings.
If you are able to access the web admin interface, go to the “CPE Setup” page, and click the Restore and Reboot button.
Otherwise, you can power up the unit and wait for about 1 min. Then push the Reset Button at the panel
side of the unit and then hold it for 5 seconds. The unit will restore the settings to factory default and
reboot.
Federal Communication Commission Interference Statement
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant
to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful
interference in a residential installation. This equipment generates, uses and can radiate radio frequency
energy and, if not installed and used in accordance with the instructions, may cause harmful interference
to radio communications. However, there is no guarantee that interference will not occur in a particular
installation. If this equipment does cause harmful interference to radio or television reception, which can
be determined by turning the equipment off and on, the user is encouraged to try to correct the
interference by one of the following measures:
1) Reorient or relocate the receiving antenna.
2) Increase the separation between the equipment and receiver.
3) Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
4) Consult the dealer or an experienced radio/TV technician for help.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:
(1) This device may not cause harmful interference, and (2) this device must accept any interference
received, including interference that may cause undesired operation.
FCC Caution: Any changes or modifications not expressly approved by the party responsible for
compliance could void the user's authority to operate this equipment.
IMPORTANT NOTE
FCC Radiation Exposure Statement
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment.
This equipment should be installed and operated with minimum distance 20cm between the radiator &
your body.
This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.