USER MANUAL - N2
Contents
1. Security Setup Network Name SSID SSID Service Set Identification must be assigned to all wireless devices in your network Considering your wireless network security Security Mode Select the security method and then configure the required parameters Options Disabled WEP AUTO WPA PSK WPA2 PSK WPA Auto PSK WPA WPA2 WPA Auto 802 1X Default Disabled SETTINGS PPTP 1 Select PPTP if you are using PPTP service to gain connection to the Internet Wide Area Network WAN Settings Cable Dynamic IP DHCP 7 Static Fixed IP DHCP Mode PPPoE ADSL PPTP L2TP inet wc dns op 11 ca Server IP Sets the PPTP server IP Address Default pptp server User Name Sets the PPTP user name for the WAN port Password Sets a PPTP password for the WAN port Address Mode Sets a PPTP network mode Default Dynamic IP Operation Mode Enables and configures the keep alive time o Primary DNS Server The IP address of the Primary Domain Name Server A DNS maps numerical IP addresses to domain names and can be used to identify network hosts by familiar names instead of the IP addresses To specify a DNS server type the IP addresses in the text field provided Otherwise leave the text field blank Secondary DNS Server The IP address of the Secondary Domain Name Server 3 SSID NAME lll Hide Disable x Done wireless back Network Name SSI2. 192 168 3 1 255 255 255 0 te IP Address Sets the static IP address Subnet Mask Sets the static IP subnet mask Default 255 255 255 0 Default Gateway The IP address of a router that is used when the requested destination IP address is not on the local subnet Primary DNS Server The IP address of the Primary Domain Name Server A DNS maps numerical IP addresses to domain names and can be used to identify network hosts by familiar names instead of the IP addresses To specify a DNS server type the IP addresses in the text field provided Otherwise leave the text field blank Secondary DNS Server The IP address of the Secondary Domain Name Server PPTP pptp server pptp user Static IP Keep Alive Ka Server Sets the PPTP server IP Address Default pptp server User Name Sets the PPTP user name for the WAN port Password Sets a PPTP password for the WAN port Address Mode Sets a PPTP network mode Default Dynamic IP Operation Mode Enables and configures the keep alive time o Primary DNS Server The IP address of the Primary Domain Name Server A DNS maps numerical IP addresses to domain names and can be used to identify network hosts by familiar names instead of the IP addresses To specify a DNS server type the IP addresses in the text field provided Otherwise leave the text 29 field blank Secondary DNS Server
3. The IP address of the Secondary Domain Name Server IPSec to Pv4 F a 3 x A 1 accCONN EN E we gt c Verify the desire settings and use scroll down for more options IPSec Connection Type Use drop down menu to select from Road Warrior Tunnel Host to Host Tunnel Subnet to Subnet Tunnel Host to Host Transport Pass trough Drop or Reject Default setting is Road Warrior Tunnel IPSec Authentication Use drop down menu to select from SHA 1 or MDS Default setting is SHA1 SA Connection Life Time Specify how often each SA should be rekeyed measured in hour Local IP address Subnet Gateway Local end point IP address Subnet and Gateway IP address IPSec Operation Mode Use drop down menu to select from Add Route Start Manual or Ignore Default setting is Add IKE Key Retry Specify maximum retry limits for negotiate key to Internet Key Exchange Peer IP address Subnet Gateway Remote end point IP address Subnet and Gateway IP address 30 L2TP Static IP Keep Alive Server IP Sets the L2TP server IP Address Default I2tp server User Name Sets the L2TP user name for the WAN port Password Sets a L2TP password for the WAN port Address Mode Sets a L2TP network mode Default Dynamic IP Operation Mode Enables and configures the keep alive time Prim
4. ADSL E PPPoE ADSL v Keep Alive i 1492 User Name Sets the PPPOE user name for the WAN port Password Sets a PPPoE password for the WAN port Verify Password Prompts you to re enter your chosen password o Operation Mode Enables and configures the keep alive time and configures the on demand idle time secure ssid 1 title SSID NAME E Hide al Disable v Disable Done wireless back Security Setup Network Name SSID SSID Service Set Identification must be assigned to all wireless devices in your network Considering your wireless network security Security Mode Select the security method and then configure the required parameters Options Disabled WEP AUTO WPA PSK WPA2 PSK WPA Auto PSK WPA WPA2 WPA Auto 802 1X Default Disabled SETTINGS STATIC FIXED IP 1 Select Static Fixed IP if your Internet service provider ISP to be permanent address on the Internet A Static IP address is a number in the form of a dotted quad Wide Area Network WAN Settings 2E Cable Dynamic IP DHCP B DHCP Mode Cable Dynamic IP DHCP ME PPPoE ADSL PPTP L2TP inet wc dns op Wide Area Network WAN Settings IN Static Fixed IP Static Mode DNS Settings Optional IP Address Sets the static IP address Subnet Mask Sets the static IP subnet mask Default 255 255 255 0 Default Gateway The IP address of a router that is used when
5. Defaults Reboot System Reboot Now Reboot System If you want to reboot the OUTDOOR AP CPE click the Reboot Now Button 20 ADVANCED SETTINGS The Advanced Settings section is provided for configuration of Time Zone DDNS UPnP SNMP and SSH Time Zone Settings DDNS Settings UPNP Settings SNMP Settings SSH Settings PC Sync with host GMT 12 00 International Date Line Duc EN Time Zone Settings The Time Zone Settings allows you to configure update and maintain the correct time on the OUTDOOR AP CPE s internal system clock SNTP Server Enter the address of an SNTP server to receive time updates SNTP synchronization minutes Specify the interval between SNTP server updates Time Zone Settings DDNS Settings UPNP Settings SNMP Settings SSH Settings Dyndns org freedns afraid org www zoneedit com ip y Cancel DDNS Settings DDNS lets you assign a fixed host and domain name to dynamic Internet IP address It is useful when you are hosting your own website FTP server or other server behind the OUTDOOR AP CPE Before using this feature you need to sign up for DDNS service at www dyndns org a DDNS service provider User Name Sets the DDNS user name for the connection Password Sets a DDNS password for the connection HostName The host name that you selected from the DDNS service provider Time Zone Settings DDNS Settings UPNP Settings SNMP S
6. Hex no preset value Note If WEP authentication is selected for WDS communication you will then only have one set of encryption for the entire channel WPA amp WPA2 Wi Fi Protected Access WPA was introduced as an interim solution for the vulnerability of WEP pending the adoption of a more robust wireless security standard WPA2 includes the complete wireless security standard but also offers backward compatibility with WPA SSID NAME ll Hide Ir WPA v TKIP CCMP AES Auto WPA Clients using WPA for authentication WPA2 Clients using WPA2 for authentication WPA Auto Clients using WPA or WPA2 for authentication WPA Algorithms Selects the data encryption type to use Default is determined by the Security Mode selected TKIP Uses Temporal Key Integrity Protocol TKIP keys for encryption WPA specifies TKIP as the data encryption method to replace WEP TKIP avoids the problems of WEP static keys by dynamically changing data encryption keys 4 AES Uses Advanced Encryption Standard AES keys for encryption WPA2 uses AES Counter Mode encryption with Cipher Block Chaining Message Authentication Code CBC MAC for message integrity The AES Counter Mode CBCMAC Protocol AESCCMP provides extremely robust data confidentiality using a 128 bit key Use of AES CCMP encryption is specified as a standard requirement for WPA2 Before implementing WPA2 in the network be sure client d
7. page displays The Home page top menu bar shows the Status Easy Setup Advanced and Language Address 00 C0 CA 60 B8 AD dress 192 168 2 1 LAN Netmask 255 255 255 0 dress 00 C0 CA 60 B8 AC re Version V2 1 2012 03 23 15 55 System Time Mon 09 Apr 2012 20 39 12 on Mode AP Router mode EASY SETUP The Easy Setup is designed to help you to configure the basic settings required to get the OUTDOOR AP CPE up and running There are only a few basic steps you need to set up the OUTDOOR AP CPE to get the connection Click on Easy Setup to bring up the wizard Please select an Operation Mode v Please select an Operation Mode Nex AP Router AP Bridge Client Router Client Bridge OPERATION MODE AP ROUTER In AP Router mode your OUTDOOR AP CPE unit is turned to a wireless router and wireless interface will become the LAN side if your PC is connected to the PoE port the management IP will change to the LAN IP 192 168 2 1 The remote management will be automatically turned on to allow you managing the device from the PoE LAN port Please select an Operation Mode Please select an Operation Mode AP Router AP Bridge Client Router Client Bridge SETTINGS PPPoE ADSL 1 Select PPPoE to be assigned automatically from an Internet service provider ISP through a DSL modem using Point to Point Protocol over Ethernet PPPOE Cable Dynamic IP DHCP Static Fixed IP Cable Dynamic IP DHCP PPPoE
8. the requested destination IP address is not on the local subnet Primary DNS Server The IP address of the Primary Domain Name Server A DNS maps numerical IP addresses to domain names and can be used to identify network hosts by familiar names instead of the IP addresses To specify a DNS server type the IP addresses in the text field provided Otherwise leave the text field blank Secondary DNS Server The IP address of the Secondary Domain Name Server 3 SSID NAME M Hide Done wireless back Security Setup Network Name SSID SSID Service Set Identification must be assigned to all wireless devices in your network Considering your wireless network security Security Mode Select the security method and then configure the required parameters Options Disabled WEP AUTO WPA PSK WPA2 PSK WPA Auto PSK WPA WPA2 WPA Auto 802 1X Default Disabled SETTINGS CABLE DYNAMIC IP DHCP 1 Select Cable Dynamic IP DHCP if your Internet service provider ISP use a DHCP service to assign your Router an IP address when connecting to the Internet Cable Dynamic IP DHCP Static Fixed IP Static Fixed IP 10 Wide Area Network WAN Settings Cable Dynamic IP DHCP Le DHCP Mode OEE DHCP inet wc dns op The host name that you selected from the DHCP service provider 3 secure ssid 1 title IUE SSID NAME ll Hide Boise Disable Done wireless back
9. the virtual WPS button SSID I Security Settings E Hide WPS Summary ID SSID NAME ll E WPA PSK ZE TKIP CCMP AES Auto 60 WPS SSID The service set identifier for the unit AP PIN Displays the PIN Code for the Wireless Router WPS Name WPS name for connecting to the device 38 Security Mode Selects between methods of broadcasting the WPS beacon to network clients wanting to join the network WPA Algorithms Selects the data encryption type to use Default is determined by the Security Mode selected TKIP Uses Temporal Key Integrity Protocol TKIP keys for encryption WPA specifies TKIP as the data encryption method to replace WEP TKIP avoids the problems of WEP static keys by dynamically changing data encryption keys AES Uses Advanced Encryption Standard AES keys for encryption WPA2 uses AES Counter Mode encryption with Cipher Block Chaining Message Authentication Code CBC MAC for message integrity The AES Counter Mode CBCMAC Protocol AESCCMP provides extremely robust data confidentiality using a 128 bit key Use of AES CCMP encryption is specified as a standard requirement for WPA2 Before implementing WPA2 in the network be sure client devices are upgraded to WPA2 compliant hardware Auto Uses either TKIP or AES keys for encryption WPA and WPA2 mixed modes allow both WPA and WPA2 clients to associate to a common SSID In mixed mode the unicast encrypt
10. 2 4GHz 802 11N Outdoor AP CPE User Guide TABLE OF CONTENTS NER RR 3 HARDWARE DESCRIPTION tenten entente que RU aq RENE 3 HARDWARE INSTALLATION sssasiaesiesaacdsaasanwi vxtecanetsianiaaeaterannisaannnei siaenatstanbeasanenenntaane 4 INITIAL CONFIGURATION cccccccccsssseccceseessssssceeeessuseccsussseeeessueseccuessuueessueeessuseseuaeeaeens 6 CONNECTING TO THE LOGIN PAGE eese eene nnn nnns ee antt assa sesenta 6 SAUS AGB eenen EE E 6 mc feni m 7 OPERATION MODE AP ROUTER ccccesssssccccceeeceesssseessseceeseceesseseessseeeseeeesseaes 7 SETTINGS F POE AW ol V espesor nennen 8 SETTINGS STATIC FIXED P PESE Ur 9 SETTINGS CABLE DYNAMIC IP DHCP essere 10 SETTINGS PPIP ee ener 11 NAE M 13 OPERATION MODE AP BRIDGE eene nennen nnne nnns 14 OPERATION MODE CLIENT 15 OPERATION MODE CLIENT 16 ADVANCED SETUP 18 MANAGEMENT decent ccaseunsasccnnacnsandetvesncatacaseqaentescqnvacanandehcaaneetacnsentantasaeasacasanse 19 ADVANCED SETTINGS ciem HD eNIR TRI NI QUIM EUEERO IND PRU M RIEN DIM MM EU f 21 OPERATION dece 22 FIREWALL CONFIGURATION inte 23 MAC IP PORT FILTERING enen E
11. AN are on the same subnet Consequently NAT is no longer used and services that are running on the original network Operation Mode Setup Client Bridge Please select an Operation Mode Nex AP Router AP Bridge Client Router 16 2 Press Site Survey button and look for available wireless network then click on the SSID that you attempt to connect to it MikroTik_B is the SSID that we are going to connect in this example Press Next button when finished prof currently Pofile List No Wireless Profile Rules prof profile setup Infarstrature Le Site Survey Disabled basic ack timeout settings Em basic miles 1 1 basic km 35 E dBm mi Seed sso o Aufhewbcabon lt mm D a ER SL EE fer ree eee a ee pra mr q SS Ss vy RE Encrypt IP Network Type ou md na bute amandae ended s UM 4 v Alta 10 AP 121 00 00 CA 60 48 62 Mb s 50 94 di 6 WPA2 Personal COMP In rast 15 ef gt MX 4298 71 1 9 89 dim 56 WPALP Personal IKIP LMP 3 Now it shows the Profile Name SSID BSSID and encryption type received from your target network and press Next button to finish the wizard Select Profe 5 0 SSH Authentication Encryption Network Type SET Auto TKIP CCMP v nn basc mies 1 1 basic km dam en 17 ADVANCED SETUP In the Advanced Manual Ba
12. D SSID Service Set Identification must be assigned to all wireless devices in your network Considering your wireless network security Security Mode Select the security method and then configure the required parameters Options Disabled WEP AUTO WPA PSK WPA2 PSK WPA Auto PSK WPA WPA2 WPA Auto 802 1X Default Disabled 12 SETTINGS L2TP 1 Select L2TP if you are using PPTP service to gain connection to the Internet Cable Dynamic IP DHCP Static Fixed IP Cable Dynamic IP DHCP PPPoE ADSL PPTP L2TP Server IP Sets the L2TP server IP Address Default I2tp_server User Name Sets the L2TP user name for the WAN port Password Sets a L2TP password for the WAN port Address Mode Sets a L2TP network mode Default Dynamic IP Operation Mode Enables and configures the keep alive time 6 66406 Primary DNS Server The IP address of the Primary Domain Name Server A DNS maps numerical IP addresses to domain names and can be used to identify network hosts by familiar names instead of the IP addresses To specify a DNS server type the IP addresses in the text field provided Otherwise leave the text field blank Secondary DNS Server The IP address of the Secondary Domain Name Server 3 13 SSID NAME M Hide Disable x Done wireless back Network Name SSID SSID Service Set Identification must be assigned to all wireless devic
13. ary DNS Server The IP address of the Primary Domain Name Server A DNS maps numerical IP addresses to domain names and can be used to identify network hosts by familiar names instead of the IP addresses To specify a DNS server type the IP addresses in the text field provided Otherwise leave the text field blank Secondary DNS Server The IP address of the Secondary Domain Name Server LAN In this section the LAN settings are configured based on the IP Address and Subnet Mask The IP address is also used to access this Web based management interface It is recommended to use the default settings if you do not have an existing network 00 C0 CA 60 B8 AC 192 168 2 1 255 255 255 0 DHCP Server v 192 168 2 100 192 168 2 199 One day Apply Cancel 31 IP Address The IP address of OUTDOOR AP CPE on the local area network Default 192 168 2 1 Subnet Mask The subnet mask of OUTDOOR AP CPE on the local area network DHCP Server The DHCP Server is to assign private IP address to the OUTDOOR AP CPE in your local area network LAN The default LAN IP address is 192 168 2 1 changing IP address will also change the DHCP server s IP subnet ADVANCED ROUTING In this section allow to configure routing feature in the OUTDOOR AP CPE 1 IN Disable Destination The IP address of packets that can be routed Type Defines the type of destination Host Signal IP addres
14. authentication that is manually entered on the access point and all wireless clients Data encryption keys are automatically generated by the access point and distributed to all clients connected to the network SSID NAME lll uide al TKIP CCMP AES Auto 2 Apply WPA PSK Clients using WPA with a Pre shared Key are accepted for authentication WPA2 PSK Clients using WPA2 with a Pre shared Key are accepted for authentication WPA Auto PSK Clients using WPA or WPA2 with a Preshared 36 Key are accepted for authentication The default data encryption type is TKIP AES WPA Algorithms Selects the data encryption type to use Default is determined by the Security Mode selected TKIP Uses Temporal Key Integrity Protocol TKIP keys for encryption WPA specifies TKIP as the data encryption method to replace WEP TKIP avoids the problems of WEP static keys by dynamically changing data encryption keys 4 AES Uses Advanced Encryption Standard AES keys for encryption WPA2 uses AES Counter Mode encryption with Cipher Block Chaining Message Authentication Code CBC MAC for message integrity The AES Counter Mode CBCMAC Protocol AESCCMP provides extremely robust data confidentiality using a 128 bit key Use of AES CCMP encryption is specified as a standard requirement for WPA2 Before implementing WPA2 in the network be sure client devices are upgraded to WPA2 compliant hardware 4 Au
15. ckets that don t match the rules are accepted Default Dropped MAC Address Specifies the MAC address to block or allow traffic from DIP Specifies the destination IP address to block or allow traffic from SIP Specifies the source IP address to block or allow traffic from Protocol Specifies the destination port type TCP UDP or ICMP o Destination Port Range Specifies the range of destination port to block traffic from the specified LAN IP address from reaching Source Port Range Specifies the range of source port to block traffic from the specified LAN IP address from reaching Action Specifies if traffic should be accepted or dropped Default Accept Comment Enter a useful comment to help identify the filtering rules Current Filtering rules The Current Filter Table displays the configured IP 23 addresses and ports that are permitted or denied access to and from gt The table entry number MAC Address Displays a MAC address to filter Destination IP Address DIP Displays the destination IP address Source IP Address SIP Displays the source IP address Protocol Displays the protocol type Destination Port Range DPR Displays the destination port range Source Port Range SPR Displays the source port range Action Displays if the specified traffic is accepted or dropped VON ON ON ON V WV Comment Displays a useful commen
16. es in your network Considering your wireless network security Security Mode Select the security method and then configure the required parameters Options Disabled WEP AUTO WPA PSK WPA2 PSK WPA Auto PSK WPA WPA2 WPA Auto 802 1X Default Disabled OPERATION MODE AP BRIDGE 1 In this mode bridge your OUTDOOR AP CPE to another Access Point Please select an Operation Mode Nex AP Router AP Bridge Client Bridge SSID NAME ll Hide Done wireless back Network Name SSID SSID Service Set Identification must be assigned to all wireless devices in your network Considering your wireless network security Security Mode Select the security method and then configure the required parameters Options Disabled Open Shared WEP AUTO WPA PSK WPA2 PSK WPA PSK WPA2 PSK WPA WPA2 WPA1_WPA2 802 1X Default Disabled 14 OPERATION MODE CLIENT ROUTER In the Client Router mode is also known as WISP The OUTDOOR AP CPE wireless side is connected to the remote AP Base Station as in Client Infrastructure mode Between the wireless and LAN is the IP sharing router function This is used to share Client Router connection The WAN is on the wireless side Operation Mode Setup ZI Client Router Please select an Operation Mode Nex AP Router AP Bridge Client Bridge 2 Press Site Survey button and look for available wireless network then click on the SSID that you attempt to connect t
17. ettings SSH Settings UPNP Settings UPnP permits network devices to discover other network device s preference and establish functional network services for data sharing communication and entrainment Default setting is Disabled 21 Time Zone Settings DDNS Settings UPNP Settings SNMP Settings SSH Settings Disable public rivate SNMP Settings Managing devices on IP networks Default setting is Disabled Time Zone Settings DDNS Settings UPNP Settings SNMP Settings SSH Settings m SSH Settings Secure Shell Enable your OUTDOOR AP CPE unit to access secure shell SSH based network device Default setting is Disabled OPERATION MODE The Operation Mode content four modes AP Bridge AP Router Client Router and Client Bridge Advanced AP Router AP Router AP Bridge Client Router Client Bridge AP Bridge The wired Ethernet and wireless are bridged together Once the mode is selected all WAN related functions will be disabled AP Router The WAN port is used to connect with ADSL Cable modem and the wireless is used for your private WLAN The NAT is existed between the 2 RJ45 ports and all wireless clients share the same public IP address through the WAN port to ISP The default IP configuration for WAN port is DHCP client Client Router The OUTDOOR AP CPE will behave just the same as the client mode for wireless function However router functions are added betwee
18. evices are upgraded to 35 WPA2 compliant hardware 4 Auto Uses either TKIP or AES keys for encryption WPA and WPA2 mixed modes allow both WPA and WPA2 clients to associate to a common SSID In mixed mode the unicast encryption type TKIP or AES is negotiated for each client Key Renewal Interval Sets the time period for automatically changing data encryption keys and redistributing them to all connected clients RADIUS Server Configures RADIUS server settings IP Address Specifies the IP address of the RADIUS server Port The User Datagram Protocol UDP port number used by the RADIUS server for authentication messages Range 1024 65535 Default 1812 Shared Secret A shared text string used to encrypt messages between the access point and the RADIUS server Be sure that the same text string is specified on the RADIUS server Do not use blank spaces in the string Maximum length 20 characters WPA PSK amp WPA2 PSK Wi Fi Protected Access WPA was introduced as an interim solution for the vulnerability of WEP pending the adoption of a more robust wireless security standard WPA2 includes the complete wireless security standard but also offers backward compatibility with WPA For small home or office networks WPA and WPA2 provide a simple personal operating mode that uses just a pre shared key for network access The WPA Pre Shared Key WPA PSK mode uses a common password phrase for user
19. h user that requires network access The WPA and WPA2 enterprise security modes use 802 1X as the method of user authentication IEEE 802 1X can also be enabled on its own as a security mode for 37 user authentication When 802 1X is used a RADIUS server must be configured and be available on the connected wired network SSID Security Settings SSID NAME lll Hide DSL RADIUS Server Configures RADIUS server settings IP Address Specifies the IP address of the RADIUS server Port The User Datagram Protocol UDP port number used by the RADIUS server for authentication messages Range 1024 65535 Default 1812 Shared Secret A shared text string used to encrypt messages between the access point and the RADIUS server Be sure that the same text string is specified on the RADIUS server Do not use blank spaces in the string Maximum length 20 characters Wi Fi PROTECTED SETUP WPS Wi Fi Protected Setup WPS is designed to ease installation and activation of security features in wireless networks WPS has two basic modes of operation Push button Configuration PBC and Personal Identification Number PIN The WPS PIN setup is optional to the PBC setup and provides more security The WPS button on the Wireless Router can be pressed at any time to allow a single device to easily join the network The WPS Settings page includes configuration options for setting WPS device PIN codes and activating
20. ion type TKIP or AES is negotiated for each client Key Renewal Interval Sets the time period for automatically changing data encryption keys and redistributing them to all connected clients Pass Phrase The WPA Preshared Key can be input as an ASCII string an easy to remember form of letters and numbers that can include spaces or Hexadecimal format Range 8 63 ASCII characters or exactly 64 Hexadecimal digits 39
21. level of security preventing unauthorized access to the network and encrypting data transmitted between wireless clients and an access point WEP uses static shared keys fixed length hexadecimal or alphanumeric strings that are manually distributed to all clients that want to use the network When you select to use WEP be sure to define at least one static WEP key for user authentication or data encryption Also be sure that the WEP shared keys are the same for each client in the wireless network SSID NAME ll Hide lal WEP AUTO x security Set Country Code x 1 la ASC WEP AUTO Allows wireless clients to connect to the network using Open WEP uses WEP for encryption only or Shared WEP uses WEP for authentication and encryption Encrypt Type Selects WEP for data encryption OPEN mode only Security Key Index Selects the WEP key number to use for authentication or data encryption If wireless clients have all four WEP keys configured to the same values you can change the encryption key to any of the settings without having to update the client keys 34 WEP Keys Sets WEP key values The user must first select ASCII or hexadecimal keys Each WEP key has an index number Enter key values that match the key type and length settings Enter 5 alphanumeric characters or 10 hexadecimal digits for 64 bit keys or enter 13 alphanumeric characters or 26 hexadecimal digits for 128 bit keys Default
22. n the wireless WAN side and the Ethernet LAN side Therefore the WSIP subscriber can share the WISP connection without the extra router Client Bridge The OUTDOOR AP CPE will behave just the same as Wireless adapter With Client Bridges the WLAN and the LAN are on the same subnet Consequently NAT is no longer used and services that are running on the original 22 network FIREWALL CONFIGURATION MAC IP PORT FILTERING MAC IP Port filtering restricts connection parameters to limit the risk of intrusion and defends against a wide array of common hacker attacks MAC IP Port filtering allows the unit to permit deny or proxy traffic through its MAC addresses IP addresses and ports The OUTDOOR AP CPE allows you define a sequential list of permit or deny filtering rules This device tests ingress packets against the filter rules one by one A packet will be accepted as soon as it matches a permit rule or dropped as soon as it matches a deny rule If no rules match the packet is either accepted or dropped depending on the default policy setting Advanced English MAC IP Port Filtering Enables or disables MAC IP Port Filtering Default Disable Default Policy When MAC IP Port Filtering is enabled the default policy will be enabled If you set the default policy to Dropped all incoming packets that don t match the rules will be dropped If the policy is set to Accepted all incoming pa
23. o it Alfa B is the SSID that we are going to connect in this example Press Next button when finished prof currently Pofile List prof profile setup MEM n 1 107170lljliI ISPbPb b Mjlb Profile Name Infarstrature SSID Lo BSSID optional Security Mode basic ack timeout settings basic distance M basic miles 1 1 basic km Power ou eum Tik Select Profe sso _____Encryptioe Mae Tune Sw ms p a prot wireless site survey eel Select SSID SSID Rate Signal Strength Channel Authentication Encryption Network Type i 4 i tamus seer beent ert oe en eer at i anran Set os m eo on pl 00 C0 CA SF 40 C2 11 Mb s Alta 1 94 89 dim 6 WPAI lersonal infrastructure d Laser 3 Now it shows the Profile Name SSID BSSID and encryption type received from your target network and press Next button to continue 15 ETP Auto TKIPICCMP basic mites 1 1 basa km dam 4 Finally you need to tell the system about IP address received from WAN DHCP Hostname and DNS Server then press Next button to finish the wizard Wide Area Network WAN Settings Cable Dynamic IP DHCP DHCP Mode inet wc dns op OPERATION MODE CLIENT BRIDGE In the Client Bridge mode your OUTDOOR AP CPE will behave just the same as Wireless adapter With Client Bridges the WLAN and the L
24. oaded for free There is no need to upgrade the firmware unless the new firmware has a new feature you want to use However when experiencing problems caused by the Router rather than the configuration you can try to upgrade the firmware 2 When you upgrade the Router s firmware you may lose its current configurations so before upgrading the firmware please write down some of your customized settings to avoid losing important settings 3 Do not turn off the Router or press the Reset button while the firmware is being upgraded otherwise the Router may be damaged 19 4 The Router will reboot after the upgrading has been finished Adminstrator Settings Firmware Upgrade EE Li einn Load Factory Defaults Reboot System Export Settings Click the Export Button to download current router configuration to your PC Import Settings Click the Import Button to browse for the configuration file that is currently saved on your PC Click Import to overwrite all current configurations with the one in the configuration file Adminstrator Settings Firmware Upgrade Configuration Load Factory Defaults Load Default Load Factory Defaults If you have problems with OUTDOOR AP CPE which might be a result from changing some settings but you are unsure what settings exactly you can restore the factory defaults by click the Load Default Button Adminstrator Settings Firmware Upgrade Configuration Load Factory
25. ord then click Add Current Host Filters Displays current Host filter Adda Host Filter Enters the keyword for a host filtering Delete a Host Filter Deletes a Host filter entry from the list Webs URL Filter Settings BAVC USS Godse 27 NETWORK SETTINGS WAN In this section there are several connection types to choose from Static IP DHCP PPPoE PPTP and L2TP If you are unsure of your connection method please contact your Internet Service Provider CABLE DYNAMIC IP DHCP Cable Dynamic IP DHCP v DHCP 73 r3 Hostname Specifies the host name of the DHCP client Primary DNS Server The IP address of the Primary Domain Name Server A DNS maps numerical IP addresses to domain names and can be used to identify network hosts by familiar names instead of the IP addresses To specify a DNS server type the IP addresses in the text field provided Otherwise leave the text field blank Secondary DNS Server The IP address of the Secondary Domain Name Server PPPoE ADSL PPPoE ADSL Keep Alive Le 773 CED User Name Sets the PPPOE user name for the WAN port Password Sets a PPPoE password for the WAN port Verify Password Prompts you to re enter your chosen password o Operation Mode Enables and configures the keep alive time and configures the on demand idle time 28 STATIC IP FIXED IP Static Fixed IP Le
26. ping packets received on the WAN port SPI Firewall SIP firewall help to keep track of the state of network connections such as TCP streams UDP communication traveling across it It is programmed to distinguish legitimate packets for different types of connections Only packets matching a known active connection will be allowed by the firewall others will be rejected Network Address Translation NAT is the process of modifying IP address information in IP packet headers while in transit across a traffic routing device 26 CONTENT FILTERING The OUTDOOR AP CPE provides a variety of options for blocking Internet access based on content URL and host name bt Webs Host Filter Settings Http s i O Web URL Filter Settings By filtering inbound Uniform Resource Locators URLs the risk of compromising the network can be reduced URLs are commonly used to point to websites By specifying a URL or a keyword contained in a URL traffic from that site may be blocked Current URL Filters Displays current URL filter Adda URL Filter Adds a URL filter to the settings Delete a URL Filter Deletes a URL filter entry from the list Web Host Filter Settings Allows Internet content access to be restricted based on web address keywords and web domains A domain name is the name of a particular web site For example for the address www HOST com the domain name is HOST com Enter the Keyw
27. plays a useful comment to identify the nature of the port to be forwarded DMZ DMZ is to specified host PC on the local network to access the Internet without any firewall protection Some Internet applications such as interactive games or video conferencing may not function properly behind the firewall By specifying a Demilitarized Zone DMZ host the PC s TCP ports are completely exposed to the Internet allowing open two way communication The host PC should be assigned a static IP address which is mapped to its MAC address and this must be configured as the DMZ IP address Apply DMZ Settings Sets the DMZ status Default Disable DMZ IP Address Specifies an IP address on the local network allowed unblocked access to the WAN 25 FIREWALL Firewall functions which will help to protect your network and computer You can utilized firmware functions to protect your network from hackers and malicious intruders Remote Management Port BARNI Translation Disable Remote Management via WAN allow or deny to manage the router from anywhere on the Internet Remote Management Port The port that you will use to address the management from the Internet For example if you specify port 2020 then to access the OUTDOOR AP CPE from Internet you would use a URL of the form http XXX XXX XXx xxx 2020 Ping from WAN Filter When Allow the OUTDOOR AP CPE does not respond to
28. r it includes all the settings such as firmware upgrade LAN WAN and wireless settings that change the RF behaviors It is important to read through this section before attempting to make changes Management Advanced Settings Operation Mode System Log Pj A antent Filtering Network Settings WAN LAN VLAN DHCP Static Leases Advanced Routing Wireless Settings Basic Advanced 18 MANAGEMENT The Management section is provided for configuration of administrative needs such as language type user name Password firmware upgrade export and import settings load factory defaults and reboots system Adminstrator Settings Firmware Upgrade Configuration Load Factory Defaults Reboot System admin Password The new password must not exceed 32 characters in length and must not include any spaces Enter the new password a second time to confirm it Adminstrator Settings Firmware Upgrade Configuration Load Factory Defaults Reboot System V2 2 2012 04 02 13 31 PEs eS EFR Software Version This displays the current firmware version To upgrade the Router s firmware follow these instructions below 1 Download a more recent firmware upgrade file from our website 2 Type the path and file name of the update file into the File field Or click the Browse button to locate the update file 3 Click the Upgrade button Note 1 New firmware versions are posted at our website and can be downl
29. r Eo tices EE tmn ieri ELI GERI EIUS 23 VIRTUAL SERVER SETTINGS cccccsccssssssssesssseeeeeesccsceuuesssseessseeeesssseaaaass 24 p V 25 FIR AA 9 COOooe e 26 CONTENT FILTERING ssssessssssrrrrsssssrerrrrrrssssrrrrreressssetrrrreresessrrrereeressssrrrreen 27 NETWORK Nope E nst 28 WA 28 FE 31 ADVANCED ROUTING 32 danst 33 2 33 SECURIT RR e 34 INTRODUCTION The unit is a IEEE 802 11b g n wireless outdoor AP CPE which support data rates up to 150Mbps It is rain and splash proof when install in upright position OUTDOOR AP CPE also integrated high gain patch antenna and passive PoE for simplify installation Note Only use 15VDC Passive PoE 24VDC Passive PoE might damage the device HARDWARE DESCRIPTION Below are OUTDOOR AP CPE hardware descriptions Reset Button PoE LAN WAN LAN 4 1 1 Wall Mount Hole A Option Pole Mount Holders Wall Mount Hole HARDWARE INSTALLATION How to open the sliding door Unlatch the weatherproof Slide the weatherproof sliding sliding door from the rear of door downwards by griping the base to open onto the indented surface of the wea
30. s Net Portion of Network Netmask Displays the subnetwork associated with the destination Gateway Defines the packets destination next hop Interface Select interface to which a static routing subnet is to be applied Comment Help identify the routing RIP Enable or disable the RIP Routing Information Protocol for the WAN or LAN interface o 32 WIRELESS SETTINGS BASIC Access Point Le coron Set country Code O ZZZ CEN mites km SSID NAME lil uide Disable Le apoy Wireless On Off Enables or Disable the radio Default Turn On Wireless Mode There are 4 wireless mode those are Access Point WDS Access Point WDS Repeater and WDS Client Note If WEP authentication is selected for WDS communication you will then only have one set of encryption for the entire channel Network Name SSID The name of the wireless network service provided by the OUTDOOR AP CPE Clients that want to connect to the network must set their SSID to the same as that of OUTDOOR AP CPE Multiple SSID One additional VAP interface supported on the device Frequency Channel The radio channel that the OUTDOOR AP CPE uses to communicate with wireless clients Network Mode Defines the radio operating mode 33 SECURITY SSID NAME M Hide Disable w Disable WPA2 PSK WPA AUTO WPA AUTO PSK 802 1x WIRED EQUIVALENT PRIVACY WEP WEP provides a basic
31. t to identify the filter rules VIRTUAL SERVER SETTINGS Virtual Server sometimes referred to as Port Forwarding is the act of forwarding traffic from one network node to another based on received protocol port number This technique can allow an external user to reach a port on a private IP address inside a LAN from the outside through a NAT enabled router Protocol TCP amp UDP Comment Apply Reset Virtual Server Selects between enabling or disabling port forwarding the virtual server Default Disable IP Address Specifies the IP address of a server on the local network to allow external access Private Port The protocol port number on the local server Public Port The protocol port number on the router s WAN interface 24 Protocol Specifies the protocol to forward either TCP UDP or TCP amp UDP Comment Enter a useful comment to help identify the port forwarding service on the network Current Virtual Servers in System The Current Port Forwarding Table displays the entries that are allowed to forward packets through the OUTDOOR AP CPE s firewall gt The table entry number gt Address The IP address of a server on the local network to allow external access gt Port Mapping displays the port mapping for the server gt Protocol Displays the protocol used for forwarding this port gt Comment Dis
32. therproof sliding door and the rear How to close the sliding door Align the base with the Slide the weatherproof weatherproof sliding door sliding door upwards until it clicks into place How to tie the strap on the pole Mounting and Radio forward Diagram Standard Pole Mount Option Adjust Antenna L Mount Option Wall Mount INITIAL CONFIGURATION The OUTDOOR AP CPE outdoor 2 4GHz AP CPE offers a user friendly web based management interface for the configuration of all the unit s features Any PC directly attached to the unit can access the management interface using a web browser such as Internet Explorer version 6 0 or above CONNECTING TO THE LOGIN PAGE It is recommended to make initial configuration changes by connecting a PC directly to the OUTDOOR AP CPE s LAN port The OUTDOOR AP CPE has a default IP address of 192 168 2 1 and a subnet mask of 255 255 255 0 You must set your PC IP address to be on the same subnet as the OUTDOOR AP CPE that is the PC and OUTDOOR AP CPE addresses must both start 192 168 2 x To access the OUTDOOR AP CPE s management GUI interface follow these steps 1 Use your web browser to connect to the management interface using the default IP address of 192 168 2 1 2 Log into the interface by entering the default username admin and password admin then click OK STATUS PAGE After logging in to the web interface the Status
33. to Uses either TKIP or AES keys for encryption WPA and WPA2 mixed modes allow both WPA and WPA2 clients to associate to a common SSID In mixed mode the unicast encryption type TKIP or AES is negotiated for each client Pass Phrase The WPA Preshared Key can be input as an ASCII string an easy to remember form of letters and numbers that can include spaces or Hexadecimal format Range 8763 ASCII characters or exactly 64 Hexadecimal digits Key Renewal Interval Sets the time period for automatically changing data encryption keys and redistributing them to all connected clients IEEE 802 1X AND RADIUS IEEE 802 1X is a standard framework for network access control that uses a central RADIUS server for user authentication This control feature prevents unauthorized access to the network by requiring an 802 1X client application to submit user credentials for authentication The 802 1X standard uses the Extensible Authentication Protocol EAP to pass user credentials either digital certificates user names and passwords or other from the client to the RADIUS server Client authentication is then verified on the RADIUS server before the client can access the network Remote Authentication Dial in User Service RADIUS is an authentication protocol that uses software running on a central server to control access to RADIUS aware devices on the network An authentication server contains a database of user credentials for eac
Download Pdf Manuals
Related Search