Home

airOS 7 User Guide - Ubiquiti Networks

1. z dBm Auto Adjust Distance Auto Adjust Distance Distance 7 miles 0 6 km Distance 7 miles 0 6 km Max TX Rate Ato el Max TX Rate At SI S Ubiquiti Networks Inc 10 airOS97 User Guide Chapter 3 Wireless Access Point PTMP Not available for PowerBeam ac Station PTMP If you have multiple client devices to and Nanobeam ac models due to their narrow connect to an AP configure the client devices as Station beamwidth antennas If you have a single device to act PTMP mode The client devices act as the subscriber as an AP in a Point to MultiPoint PtMP link configure stations while they are connecting to the AP which it as Access Point PTMP mode The device functions as an must be in Access Point PTMP mode The AP s SSID is AP that connects multiple client devices client devices used and all traffic to and from the network devices must be in Station PTMP mode connected to the Ethernet interface is forwarded to the AP and other wireless stations Basic Wireless Settings Basic Wireless Settings Wireless Mode Access Point PTMP Wireless Mode Station PTMP SSID 5AC SSID 5AC SELECT Country Lock to AP MAC Channel Width 77 40 MHz Country Frequency List MHz C Channel Width 7 Auto 20 40 MHz Frequency MHz 5735 Frequency List MHz C Calculate EIRP Limit L
2. There is no network segmentation and the broadcast domain is the same Bridge mode does not block any broadcast or multicast traffic You can configure additional firewall settings for Layer 2 packet filtering and access control WLAN and LAN interfaces belong to the same network segment and share the same IP address space They form the virtual bridge interface while acting as bridge ports The device features IP settings for management purposes Router mode The device operates in Layer 3 to perform routing and enable network segmentation wireless clients and the WAN interface are on a different IP subnet Router mode blocks broadcasts and can pass through multicast packet traffic You can configure additional firewall settings for Layer 3 packet filtering and access control The device can act as a DHCP server and use Network Address Translation Masquerading which is widely used by APs NAT acts as the firewall between the LAN and WAN 16 airOS 7 User Guide In Advanced view any interface can be selected as the WAN or the LAN but typical functionality is as follows Station The WLAN functions as the WAN and the Ethernet port functions as the LAN Access Point The Ethernet port functions as the WAN and the WLAN functions as the LAN Each wired or wireless interface on the WAN or LAN has its own IP address For example Router mode is used in a typical Customer Premises Equipment CPE insta
3. 255 255 255 0 DHCP Server DISABLED ENABLED RELAY UPnP O Add LAN LAN Interface In Simple view the interface is displayed Select the interface used for LAN connection In Advanced view click Del to remove the interface If there is no interface selected select an interface from the Add LAN drop down list and click Add IP Address The IP address of the LAN interface In case the LAN interface is the bridge all the bridge ports i e Ethernet and WLAN interfaces will be considered as local network interfaces This IP will be used for routing of the local network it will be the gateway IP for all the devices on the local network This IP address can be used for management of the device Netmask Defines the device IP classification for the chosen IP address range 255 255 255 0 is a typical netmask value for Class C networks which support the IP address range of 192 0 0 x to 223 255 255 x A Class C network netmask uses 24 bits to identify the network alternative notation 24 and 8 bits to identify the host The netmask is used to identify the subnet to which an IP address belongs S Ubiquiti Networks Inc Chapter 4 Network MTU Available in Simple view The Maximum Transmission Unit MTU is the maximum frame size in bytes that a network interface can transmit or receive The default is 7500 DHCP Server The built in DHCP server assigns IP addresses to clients connected to the LAN interface Disab
4. 40 DNE Tet 41 Beie EE 41 Appendix A Contact Information 42 Ubiquiti Networks Support EE 42 S Ubiquiti Networks Inc airOS97 User Guide Chapter 1 Overview aros LOGIN Rocket 5AC Lite Please login to manage your wireless device Username Password Beta Cha pter 1 ge Ove rview This User Guide describes the airOS operating system version 7 1 which works with all airMAX ac Series products provided by Ubiquiti Networks Introduction Welcome to airOS 7 the latest evolution of the airOS Configuration Interface by Ubiquiti Networks Sporting an all new design for improved usability airOS is the revolutionary operating system for Ubiquiti airMAX ac Supported Products products offering the following powerful wireless features Note Full backward compatibility with M Series product versions is not supported at this time but is planned for a future release airOS v7 1 supports the following airMAX ac Series airMAX ac Protocol Support product versions Long Range Point to Point PtP Link Mode Selectable Channel Width 10 20 30 40 50 60 80 MHz Automatic Channel Selection e Rocket ac e NanoBeam ac e PowerBeam ac For more information visit www ubnt com e Transmit Power Control Automatic Manual Automatic Distance Selection ACK Timing airOS v7 1 Network Modes Strongest WPA2 security airOS v7 1 supports the following network modes Usability enhancements incl
5. Firewall on page 6 4 Port Forward on page 6 D DHCP Leases on page 6 Device Model Displays the model name of the device Device Name Displays the customizable name or identifier of the device The Device Name also known as host name is displayed in registration screens and discovery tools S Ubiquiti Networks Inc 5785 5735 5815 MHz 80 MHz P 39 dBm s Chapter 2 Main E gt LOGOUT AIRTIME LAN SPEED 1000Mbps Full DATE 11 26 2014 12 25 37 AM UPTIME 00 25 46 TM Capacity Throughput e 4 D Tx 640 Mbps lll ax 609 Mbps Bl Latency 0 ms 43 41 dBm 2 8x 256QAM 2x2 1 8x 256QAM 2x2 ms Remote Constellation Diagram POWER 44 dBm e EA Ea SHOW EB Ry BE KA SA ka 94 X oi CH est WA OA a AIME TSM HIR aE IE r EPA VAW Ay REDS ir amp XNR 32dB A Peeve awed SA Ke sge seh oe Sg Ka Ce hb ee www FA b RW V mo aa 4 ar n S CINR dB Signal Noise and Interference Local Remote Bl Avg Signal 41 dBm J E interference Noise 76 dBm Bl Noise Floor 85 d m 0 o ueulloped 4Y gt gt u o gt he s2 6 8 A We ad ASA ow a me k 12 16 Version Displays the airOS firmware version Network Mode Displays the network operating mode Bridge or Router The default setting is Bridge Configure the Network Mode on the Network tab Memory Displays the percentage of memory currently being used CPU Displays the percentage o
6. SHOW Accounting Server Li Accounting Server IP Port 1813 Accounting Server Secret SHOW Auth Server IP Port In the first field enter the IP address of the RADIUS authentication server RADIUS is a networking protocol providing centralized Authentication Authorization and Accounting AAA management for computers to connect to and use a network service In the second field enter the UDP port of the RADIUS authentication server The most commonly used port is 1812 but this may vary depending on the RADIUS server you are using Auth Server Secret Enter the password A shared secret is a case sensitive text string used to validate communication between two RADIUS devices Show Click Show if you want to view the characters of the Auth Server Secret Accounting Server If you are using an accounting server select this option Accounting Server IP Port If the Accounting Server is enabled enter the IP address of the accounting server S Ubiquiti Networks Inc Chapter 3 Wireless In the second field enter the UDP port of the RADIUS accounting server The most commonly used port is 1813 but this may vary depending on the RADIUS server you are using Accounting Server Secret If the Accounting Server is enabled enter the password A shared secret is a case sensitive text string used to validate communication between two RADIUS devices Show Click Show if you want to view the characters of the Accou
7. For example if the device has four LEDs and the signal strength on the Main tab fluctuates around 63 dBm then the LED threshold values can be set to the following 70 65 62 and 60 airOS 7 User Guide Note The character is outside of the field and should not be used for the signal strength value specification The following tables list the default threshold values for devices with two three four or six LEDs Two LEDs DY VF LUl A a Te B LES LED Three LEDs Default Threshold Value LED Four LEDs LED Default Threshold Value Six LEDs LED DIAC A a Te ATELE 88 dBm i 65 dBm 1 2 3 5 S Ubiquiti Networks Inc Chapter 3 Wireless Advanced The Advanced section configures advanced wireless settings Only technically advanced users who have sufficient knowledge about WLAN technology should use the advanced wireless settings These settings should not be changed unless you know the effects the changes will have on the device Advanced Aggregation Frames 32 airMAX Station Priority Base Aggregation Frames This option allows the device to send multiple frames per single access to the medium by combining frames together into one larger frame It creates the larger frame by combining smaller frames with the same physical source destination endpoints and traffic class QOS into one large frame with a common MAC header To spe
8. Host Displays the hostname identifier or IP address of the hop host IP Displays the IP address of the hop host Response Displays the round trip times from the device to the hop host There are three packets sent per hop so there should be three round trip times displayed If there is no response from the hop host within the timeout interval of 5 seconds is displayed 39 airOS 7 User Guide Speed Test This utility allows you to test the connection speed between two airOS 7 devices that are using firmware version 7 1 or above You can use the Speed Test tool to estimate a preliminary throughput between two network devices I If traffic shaping is enabled on either device then the Speed Test results will be limited accordingly Speed Test Select Destination IP specify manually EG Remote WEB port User Direction 10 Duration Eo 1 seconds AVG RX AVG TOTAL 0 00 Mbps 0 00 Mbps 0 00 Mbps You have two options Select a remote system IP from the drop down list which is generated automatically Select specify manually and enter the IP address in the field displayed below Click the G icon to refresh the list of remote system IP addresses Enter the remote web port of the airOS device to establish a TCP IP based throughput test for example specify port 443 if HTTPS is enabled on the remote device The default is 80 Enter the administrator username Enter the remote syste
9. amp 94 ib fwa ee n Za E e e 12 oo e 5 amp o ZS ok Ehe p Ka ge EA w e Tools gt k 9 a A Info e bw d RS ge EA fa 5929229 SA E E e ee g dg e e e EF e eee OW Det HINN aes MO gen ege gege pw N a Ge ka ee E E e Aa e DL HRH Oh VA O RAR AAA o 49 ge ge A A kA e A eng e RN e e ge 6 A ee g Ah 2 ene CEWHNNMTNNRNHNNMWWN Ki d e gt Ki RE e ga 94 S g vie A eo Na b A eg A ZS bg eee 1v RR 24h ene et oO v y99 9A395339232592959 QAM X ww 4 qedwRYY Ogee wee E d ap bet A ge Modo pa ee ba e oo p E Log Chapter 2 Main The Main page displays a summary of the link status information current values of the basic configuration settings depending on the operating mode network settings and information and traffic statistics Device The Device section displays basic identifying and status information on the device DEVICE MODEL Rocket 5AC PTP MEMORY 22 AIRTIME 0 0 DEVICE NAME Rocket SAC PTP CPU El 1196 LAN SPEED 1000Mbps Full VERSION v7 1 CABLE LENGTH 20m DATE 11 26 2014 12 25 37 AM NETWORK MODE Bridge CABLE SNR 30 dB UPTIME 00 25 46 By default the Device section is minimized click to display the following additional information 4 Interfaces on page 5 4 PPPoE Information on page 5 ARP Table on page 5 4 Bridge Table on page 5 4 Routes on page 6 4
10. A D Aas tyetettutnt ttoh oe j b ftn a4svATavy be Caete teo thbt nt9t 285 oth apesss bks seegpkbke Q a9obtetatrse d tech ek ae eek hae eee dabatcecatunses If Cy yag Vuw hbteots q o5 Ua Coven enee sree Hen 0 lo QR VY S VA V4 VIA t stas erasers he 0 OO ete ete te ee ew ene amp bites esiatiueoeta 0 0O e wen eee eve gaea Ss gp 9 5 ep ege geen g eeaegeet eesaased eb CC NC o4 9 biwv 4qtt 4h eeo rbktettano ttitt 0 0 UVstt Khhnuntwskbtewo SSgetsrtstsedsten gt ER SR RTE Re eae ew In Access Point PTMP mode the section also displays information on the stations connected to the AP Rocket 5AC Lite 704 18 06 4E 9B 69 D Local Constellation Diagram CINR dB Remote Constellation Diagram CINR dB E 32 d m 168791979 942979 479 9999 3 33 38dBm 34219 59 49 95790 9 9 4 ERIK SRS SET AW EDS __ ee eh eee Ree eR BR EY CON Ax OR AU RES EH Ba Ww posu oh wo po d wo dod ywa rka lw u 4oet9 9 29584A8 9599 eer eevee 29429 ERUIT JY F bo ko oc6ew 4 w ak 6 4 amp 45494 5 6h e 4 4 UwA4 k i tt9t xdT 459 Wo 4 hc Uk oh ox AU S EW Vesa A KKK WAR e wow dx 4 38 x Wo pd gy hx wV aAt t tt 4Aae ietsh A d 979252 9 9 45V w 9 4 amp v955tv v eass5 e9tvwvay 99922959 an jj set Rare a ron eae ee 949 4 44A RSR RI dh dm om BK A o Car ow am
11. If the cable length is less than 20 m 66 ft lt 20 meters is displayed Displays the pair identifier A represents pins 4 and 5 B represents pins 3 and 6 C represents pins 1 and 2 D represents pins 7 and 8 Displays the SNR Signal to Noise Ratio value in dB Click Start to start the test 40 airOS 7 User Guide The results are displayed in the following columns Status Displays the test result LINK UP OPEN or SHORTED Distance to Fault m Displays the number of meters to the fault in the cable pair If there is no fault then O is displayed Info Click at the bottom left corner of the page to open the Device Information window which gives a textual summary of the information displayed on the Main page Device Information X WIRELESS Wireless Mode Access Point PTP SSID 5AC WLANO MAC 04 18 D6 4E E2 1B Security WPA2 Distance 0 1 miles 0 2 km Frequency 5735 5725 5765 MHz Channel Width 40 MHz RX Signal 47 dBm Chain 0 Chain 1 48 54 dBm TX Rate 8x 256QAM 2x2 RX Rate 8x 256QAM 2x2 WIRELESS REMOTE DETAILS Device Model Rocket 5AC Lite Device Name Rocket 5AC Lite STA1 Version v7 1 devel Last IP 0 0 0 0 Connection Time 00 37 46 Desired priority High Priority High Signal TX RX 48 47 dBm Chain 0 Chain 1 48 55 dBm Noise Floor 96 dBm Isolated Capacity TX RX 295 Mbps 295 Mbps airTime TX RX 0 0 0 0 Latency 0 TX Power 26 d
12. if you enable nvert for the specified Source IP a b c d then the filtering criteria will be applied to all the packets sent from any Source IP except a b c d 25 airOS 7 User Guide Source Port Enter the source port of the packet specified within the packet header Usually it is the port of the host system application that sends the packets Invert Select this option to invert the Source Port Select this option to invert the Source Port filtering criterion For example if you enable nvert for the specified Source Port 2500 then the filtering criteria will be applied to all the packets sent from any Source Port except 2500 Destination IP Mask Enter the destination IP of the packet specified within the packet header Usually it is the IP of the system which the packet is addressed to The mask is in slash notation also known as CIDR format For example if you enter 192 168 1 0 24 you are entering the range of 192 168 1 0 to 192 168 1 255 Invert Select this option to invert the Destination IP Mask filtering criterion For example if you enable Invertfor the specified Destination IP a b c d then the filtering criteria will be applied to all the packets sent to any Destination IP except a b c d Destination Port Enter the destination port of the packet specified within the packet header Usually it is the port of the host system application which the packet is addressed to Invert Select this option
13. Maximum Transmission Unit MTU which is the maximum frame size in bytes that a network interface can transmit or receive The default is 7500 IP Address Displays the IP address of the interface RX Bytes Displays the total amount of data in bytes received by the interface RX Errors Displays the number of receive errors TX Bytes Displays the total amount of data in bytes transmitted by the interface TX Errors Displays the number of transmit errors Refresh To update the information click Refresh PPPoE Information Available if PPPoE is enabled in Router mode Click PPPoE to display information on the PPPoE connection if PPPoE has been configured on the Network page for detailed information see PPPoE on page 21 INTERFACES PPPOE INFORMATION ARP TABLE ROUTES l FIREWALL PORT FORWARD DHCP LEASES pppoe user CONNECTION TIME 00 05 15 192 168 44 48 BYTES TRANSMITTED 3336 3 26 kBytes 192 168 44 49 BYTES RECEIVED 1999 1 95 kBytes 192 168 44 11 TX RX PACKET 56 28 192 168 44 22 TX RX COMPRESSION RATIO 1 1 Username Displays the username used to connect to the PPPoE server Local IP Address Displays the IP address of the local PPPoE tunnel endpoint Remote IP Address Displays the IP address of the remote PPPoE tunnel endpoint Primary DNS IP Displays the IP address of the primary DNS server Secondary DNS IP Displays the IP address of the secondary DNS server Connection
14. P RR ERES 18 LAN Network Seu EE EE 22 JR RI e e e Ee 23 E E EEEE E E E E E TEE T EE EE E E EEE 23 VEAN Ee 24 Bridge en 24 SI NEE 25 ciel P 26 Port FOIW and e EE 26 Multicast Routing Bel e hve anacudh cower warned ioa nans dd S peu See pw resina e auae 27 Traffic ShapiNg RR 28 A Ubiquiti Networks Inc i airOS 7 User Guide Table of Contents Chapter 5 Services ccc cece cece ence III 29 aim iia OG T HN 29 cvs E E rHREWWRE 30 lee c EPEERRNTL DIT 31 NTP CIEN EE 31 PYNE DN EE 31 Dy SIC LOG EE 32 BIS NEIE e EE 32 Chapter 6 System 33 Firmware Update EE 33 Bloc erm 33 pu M 34 Pato dise MARET TOT TI tT I D DE 34 SySLel AGCOBTIIS coco ee PEDE PRU S ELE EE EIE es 34 Bore EE EE 35 Device E 8 ei eca nri Yo exeo die tob me P ore Rr RE RE PIS ERPEPS UNUS EI RER EE SR 35 Configuration Ee e EE 35 Chapter 7 Tools and Information 36 cl au 36 GEHEIERT 38 cjr A 38 DISCOV EY eor E EEEE E E score cues Pe dept eee sees mene RUNE Eee aC ME 38 uim aceet ee 39 lee e c n 39 sacado P 40 o a
15. Point PTP mode only Displays the MAC address of the station Last IP Displays the last IP address of the access point or station Distance Available in Station PTP and Station PTMP modes Displays the current distance between devices in kilometers and miles for Acknowledgement ACK frames With Auto Adjust enabled the device s auto acknowledgement timeout algorithm dynamically optimizes the frame acknowledgement timeout value without user intervention RX Signal Displays the last received wireless signal level RX Chain 0 1 Displays the wireless signal level in dBm of each signal Noise Floor Displays the current value in dBm of the environmental noise any non WiFi signal such as cordless phones microwaves etc the receiver hears on the operating frequency airOS considers the Noise Floor while evaluating the signal quality Signal to Noise Ratio SNR RSSI The value mean depends on the signal strength above the Noise Floor Latency Displays the latency value in ms for wireless frames TX Power Displays the transmit power level in dBm Connection Time Displays the association time of the connected access point or station The time is expressed in days hours minutes and seconds Desired Priority Available in Station PTMP mode only Displays the requested airMAX station priority level that is configured on the Wireless page for more details see airMAX Station Priority on page 15 Priority Available
16. Time Displays the total elapsed time of the PPPoE connection Bytes Transmitted Displays the total number of bytes transmitted over the PPPoE connection Bytes Received Displays the total number of bytes received over the PPPoE connection TX RX Packets Displays the total number of packets transmitted and received S Ubiquiti Networks Inc Chapter 2 Main TX RX Compression Ratio Displays the compression ratio of transmitted and received data Refresh To update the information click Refresh ARP Table Click ARP Table to list all entries in the Address Resolution Protocol ARP table currently recorded on the device ARP is used to associate each IP address to the unique hardware MAC address of each device on the network It is important to have unique IP addresses for each MAC address or else there will be ambiguous routes on the network REFRESH IP Address Displays the IP address assigned to a network device MAC Address Displays the MAC address of the device Interface Displays the interface that connects to the device Refresh To update the information click Refresh Bridge Table Available in Bridge mode only Click Bridge Table to display the entries in the system Bridge Table 4 Note A bridge is a logical device used to connect different physical or virtual network interfaces bridge ports Wireless Ethernet VLAN A bridge table shows a list of all learned MAC addresses for a brid
17. When enabled you can change the MAC address of the respective interface This is especially useful if your ISP only assigns one valid IP address and it is associated to a specific MAC address This is usually used by cable operators or some WISPs MAC Address Enter the MAC address you want to clone to the respective interface This becomes the new MAC address of the interface 20 airOS 7 User Guide PPPoE Point to Point Protocol over Ethernet PPPoE is a virtual private and secure connection between two systems that enables encapsulated data transport Subscribers sometimes use PPPoE to connect to Internet Service Providers ISPs typically DSL providers Select PPPoE to configure a PPPoE tunnel You can configure only the WAN interface as a PPPoE client because all the traffic will be sent via this tunnel After the PPPoE connection is established the device will obtain the IP address default gateway IP and DNS server IP address from the PPPoE server The broadcast address is used to discover the PPPoE server and establish the tunnel If there is a PPPoE connection established then the IP address of the PPP interface will be displayed on the Main tab next to the PPP interface statistics otherwise a Not Connected message and Reconnect button will be displayed To re connect a PPPoE tunnel click Reconnect WAN IP Address DHCP STATIC PPPOE Username Password SHOW Service Name Fallback IP
18. channel spectrum widths 40 MHz 30 MHz 20 MHz and 10 MHz Station PTP Supported wireless channel spectrum widths Auto 20 40 80 MHz recommended 60 MHz 50 MHz 30 MHz and 10 MHz Station PTMP Supported wireless channel spectrum widths Auto 20 40 MHz recommended 30 MHz and 10 MHz Frequency List MHz The use of this option varies depending on the Wireless Mode Access Point PTP or Access Point PTMP Multiple frequencies are available to avoid interference between nearby APs The frequency list varies depending on the selected Country and Channel Width options Once enabled click Edit to open the Frequency List window Frequency List X F Select All 5745 LI 5765 5785 _ 5805 Select the frequencies and click OK or click Cancel to close the window without any selections Station PTP or Station PTMP This restricts scanning to only the selected frequencies The benefits are faster scanning as well as filtering out unwanted APs in the results The Site Survey tool will look for APs using only the selected frequencies Once enabled click Edit to open the Frequency List window Frequency List X 3 Select All 5735 O 5740 5745 _ 5750 O 5755 L 5760 LI 5765 5770 O 5775 C 5780 O 5785 _ 5790 5795 LJ 5800 LJ 5805 _ 5810 O 5815 5820 O 5825 5830 O 5835 O 5840 Select the frequencies that you want to scan and click OK or click Cancel to close the window without any selections air
19. if it were the only station on the network airOS 7 User Guide airTime TX RX Displays the transmit and receive airtime percentage values The airtime is the percentage of the time the radio resource is utilized in the specified direction TX RX Desired Priority Displays the requested airMAX station priority level that is configured on the Wireless page for details see airMAX Station Priority on page 15 Priority Available in Station PTMP mode only Displays the current operating priority of the station Note The Priority may be lower than the configured Desired Priority The AP automatically lowers the priority depending upon RF conditions and performance Connection Time Displays the total time elapsed for the connection Last IP Displays the station s last IP address Action Displays available options for this station For example click Kick to drop the connection to this station RF Performance The RF Performance section displays persistent RF Error Vector Magnitude EVM constellation diagrams Carrier to Interference plus Noise Ratio CINR histograms and Signal Noise and Interference time series plots Pe tveed 2 35 9 9 49449 9 B t 44a4kbavbe k va44 ec h l buad 4 0 0 0 ee tgeesgtesgsen 0 0 ak ee e tkskt zkReb e9 2897446 6794 t ab ka page e gg ggeag eegeeng XE G6 8h 4 6 tage A E kal Rei e D
20. in Station PTMP mode only Displays the current operating priority of the station Note The Priority may be lower than the configured Desired Priority The AP automatically lowers the priority depending upon RF conditions and performance Average Capacity TX RX Available in Station PTP and Station PTMP modes Displays the average transmit and receive capacity of the access point in Mbps Isolated Capacity TX RX Available in Access Point PTP mode only Displays the capacity that the station would have if it were the only station on the network Airtime TX RX Displays the transmit and receive airtime values The airtime is the averaged wireless bandwidth utilization percentage of theoretical transmission maximum for both failed and successful transmission attempts S Ubiquiti Networks Inc Chapter 2 Main Reconnect To establish the wireless link to the AP or station again click Reconnect Access Point PTMP Mode In Access Point PTMP mode airOS displays a table with statistics for all stations that are connected to the device Search Columns Showing 1 to 1 of 1 entries You can modify this table as follows To filter the list of stations enter a string in the Search box and press Enter PC or return Mac Only stations with matching text will be displayed To sort the table on a particular column click the column heading each click toggles the sort order To select which columns appear in
21. only station connected to the AP Local Remote Constellation Diagram Provides a real time visual depiction of the modulation for the local or remote device The modulation which can be 1x BPSK 2x QPSK 4x 16 QAM 8x 64 QAM or 16x 256 OAM adjusts dynamically as the system adapts to changing conditions The plotted points appearance indicates the signal quality tightly defined points indicate higher signal quality while diffuse points indicate lower signal quality CINR dB These histograms display the CINR in dB for the local and remote devices The CINR is a measure of signal quality It is the median value of how high the signal is over the combined interference and noise In each histogram the color shows the distribution of CINR values the darker the color the greater the number of occurrences of that value Signal Noise and Interference Displays a time based plot of the system signal noise and interference levels in dBm for both the local and remote devices The power and CINR levels for the local and remote devices are also displayed above each constellation diagram airOS97 User Guide Chapter 3 Wireless WIRELESS Basic Wireless Settings Wireless Security Wireless Mode Security Network SSID Signal LED Thresholds Services Country System Channel Width 7 LEDO LED1 LED2 Thresholds dBm 7 e ES 80 73 Frequency MHz Advanced Frequency List MH
22. the destination network or destination host Gateway Displays the IP address of the appropriate gateway Netmask Displays the netmask for the destination network 255 255 255 255 for a host destination and 0 0 0 0 for the default route Note The default route is the route used when no other routes for the destination are found in the routing table Interface Displays the interface to which packets for a particular route will be sent Refresh To update the information click Refresh Firewall Available if Firewall is enabled on the Network page Click Firewall to list all the entries in the firewall table Bridge table filter Bridge chain FIREWALL entries 1 policy ACCEPT p IPv4 i eth ip src 192 168 10 14 ip proto icmp j DROP pcnt 0 bcnt 0 REFRESH By default there are no firewall rules If the device is operating in Bridge mode the table lists active firewall entries in the FIREWALL chain of the standard ebtables filter table If the device is operating in Router mode the table lists active firewall entries in the FIREWALL chain of the standard iptables filter table IP and MAC level access control and packet filtering in airOS are implemented using an ebtables bridging or iptables routing firewall that protects the resources of a private network from outside threats by preventing unauthorized access and filtering specified types of network communication S Ubiquiti Ne
23. the table click Columns select all columns to be displayed deselect all columns to be hidden and then click OK The table contains the following information use the table s horizontal scroll bar to view all the fields Station MAC Displays the MAC address of the station Device Model Displays the model name of the station Device Name Displays the station s host name The device name can be changed on the System tab Signal TX RX Displays the transmit and receive signal levels in dBm Signal per Chain Displays the last received wireless signal level per chain Noise The Noise value represents the AP noise level Latency Displays the latency value in ms Distance Displays the current distance between devices in kilometers and miles for Acknowledgement ACK frames With Auto Adjust enabled the device s auto acknowledgement timeout algorithm dynamically optimizes the frame acknowledgement timeout value without user intervention TX Rate Displays the data rate of the last transmitted packet RX Rate Displays the data rate of the last received packet TX RX Bytes Displays the total number of bytes transmitted and received from the station during the connection uptime TX RX Packets per Second Displays the mean value of the transmitted and received packet rates TX Power Displays the remote station transmit power in dBm Isolated Capacity TX RX Displays the transmit and receive capacity that the station would have
24. various colors to probability levels from O least likely to occur to 1 most likely to occur S Ubiquiti Networks Inc Chapter 7 Tools and Information Waterfall View WATERFALL VIEW This time based graph shows the aggregate energy collected since the start of the airView session for each frequency The power of the energy in dBm is displayed across the frequency span and a new row is inserted every few seconds The energy color designates the amplitude or strength of the signal Cooler colors represent lower energy levels with blue representing the lowest levels in that frequency bin and warmer colors yellow orange or red represent higher energy levels in that frequency bin The legend at the top right corner provides a numerical guide associating the various colors to power levels in dBm The low end of that legend left is always adjusted to the calculated noise floor and the high end right is set to the highest detected power level since the start of the airView session Ambient Noise Level AMBIENT NOISE LEVEL This time based graph shows the ambient energy in dBm as a function of frequency The energy color designates the amplitude or strength of the ambient noise Cooler colors represent lower energy levels with blue representing the lowest levels in that frequency bin and warmer colors yellow orange or red represent higher energy levels in that frequency bin The legend at t
25. 192 168 10 1 b Fallback NetMask j 255 255 255 0 MTU MRU 1492 1492 Encryption CQ NAT Z NAT Protocol sip 4 PPTP Lo FIP 7 RTSP ko Block management access C DMZ C Auto IP Aliasing Q MAC Address Cloning C Username Enter the username to connect to the PPPoE server this must match the username configured on the PPPoE server Password Enter the password to connect to the PPPoE server this must match the password configured on the PPPoE server Show Click Show if you want to view the characters of the password Service Name Enter the name of the PPPoE service This must match the service name configured on the PPPoE server Fallback IP Enter the IP address for the device to use if the PPPoE server does not assign an IP address Fallback Netmask Enter the netmask for the device to use if the PPPoE server does not assign a netmask S Ubiquiti Networks Inc Chapter 4 Network MTU MRU The size in bytes of the Maximum Transmission Unit MTU and Maximum Receive Unit MRU used for data encapsulation during transfer through the PPP tunnel The default value is 1492 Encryption Enables the use of Microsoft Point to Point Encryption MPPE MTU Available in Simple view The Maximum Transmission Unit MTU is the maximum frame size in bytes that a network interface can transmit or receive The default is 7500 NAT Network Address Translation NAT is an IP masquerading technique that hides privat
26. 51 too many clients or check airMAX mode Nov 13 09 53 22 EE End check Nov 13 09 53 29 wireless athO Authenticated Station 04 18 d6 4e e2 3d Successful Nov 13 09 53 29 hostapd ath0 STA 04 18 d6 4e e2 3d IEEE 802 11 associated Nov 13 09 53 29 wireless athO Registered node 04 18 D6 4E E2 3D Nov 13 09 53 31 hostapd ath0 STA 04 18 d6 4e e2 3d WPA pairwise key handshake completed RSN Nov 13 10 16 03 syslog Retry in 604800 sec Nov 13 10 16 03 syslog Retry in 604800 sec Nov 13 10 38 57 wireless athO Scan request completed Nov 13 10 53 18 hostapd ath0 STA 04 18 d6 4e e2 3d WPA group key handshake completed RSN Nov 13 11 00 54 init process bin lighttpd D E SLT i Scheduling for restart Nov 13 11 00 54 init Run bin lighttpd D f etcAighttpd Nov 13 11 00 54 init starting pid 8558 tty dev null Enger D f etc ighttpd conf 4 REFRESH CLEAR Click Refresh to update the display with the most recent information Click Clear to clear the system log S Ubiquiti Networks Inc Chapter 7 Tools and Information 41 airOS 7 User Guide Appendix A Contact Information Ubiquiti Networks Support Ubiquiti Support Engineers are located around the world and are dedicated to helping customers resolve software hardware compatibility or field issues as quickly as possible We strive to respond to support inquiries within a 24 hour period Online Resources Support support ubnt com Community commu
27. Add or Edit a Static Route The Route window opens Route X Enabled Target Network IP Netmask Gateway IP Comment SC Enabled Select this option to enable the specific static route All the added static routes are saved in the system configuration file however only the enabled static routes are active on the device Target Network IP Enter the IP address of the destination e Netmask Enter the netmask of the destination Gateway IP Enter the IP address of the gateway Comment You can enter a brief description of the purpose for the static route Click OK to save changes or click Cancel to close the window without saving changes Port Forwarding Available in Router mode only Port forwarding allows specific ports of the hosts on the local network to be forwarded to the external network WAN This is useful for a number of applications such as FTP servers VoIP gaming that require different host systems to be seen using a single common IP address port Click the Port Forwarding section to display its contents Enabled 4 Enabled Select this option to enable port forwarding functionality Enabled Enables the specific port forwarding rule All the added port forwarding rules are saved in the system configuration file however only the enabled port forwarding rules are active on the device 26 airOS 7 User Guide Interface Displays the interface to which th
28. Bm Log Click at the bottom left corner of the page to open the System Log window which provides a record of events on the system System Log X Nov 13 09 53 15 system Start Nov 13 09 53 15 syslogd started BusyBox v1 19 4 Nov 13 09 53 15 init Run usr bin wevent s Nov 13 09 53 15 init starting pid 512 y eric lusr bin twevent s Nov 13 09 53 15 init Run bin hostapd etc aaat cig Nov 13 09 53 15 init starting pid 513 tty dev null bin hostapd etc aaa1 cfg Nov 13 09 53 15 FileSystem Start check Nov 13 09 53 15 init Run bin lighttpd ER t letc lighttpd cont Nov 13 09 53 15 init starting pid 517 tty dev null oin lighttpd D f etc Alighttpd conf Nov 13 09 53 16 init Run bin dropbear F d etc persistent dropbear des host key r etc persistent dropbear rk host key p 22 Nov 13 09 53 16 init starting pid 518 tty dev null bin dropbear F d etc persistent dropbear des host key r etc persistent dropbear rsa Nov 13 09 53 16 init Run bin ubntspecd t a i wifi j airview1 Nov 13 09 53 16 init starting pid 519 tty dev null bin ubntspecd t a i wifil j airview1 Nov 13 09 53 16 wireless athO Set Mode Master Nov 13 09 53 16 init Run green a Nov 13 09 53 16 dropbear 518 Not backgroundi Nov 13 09 53 17 wireless athO Authenticated Station i ohoresetopsech Successful 1 Successful Nov 13 09 53 20 wireless athO Association refused to 04 18 d6 4e e3
29. Down Change the order of the firewall rule entries Order is important in the firewall rules list as packets traverse the firewall rules sequentially Delete Remove a firewall rule Add or Edit a Firewall Rule The Firewall Rule window opens Firewall Rule X Enabled Target ACCEPT Interface ANY IP Type IP Source IP Mask Invert Source Port Invert Destination IP Mask Invert L Destination Port Invert Comment WER Enabled Select this option to enable the specific firewall rule All the added firewall rules are saved in the system configuration file however only the enabled firewall rules are active on the device Target To allow packets to pass through the firewall unmodified select ACCEPT To block packets select DROP Interface Select the appropriate interface where the firewall rule is applied To apply the firewall rule to all interfaces select ANY IP Type Select which specific Layer 3 protocol type IP ICMP TCP or UDP should be filtered Source IP Mask Enter the source IP of the packet specified within the packet header Usually it is the IP of the host system that sends the packets The mask is in slash notation also known as CIDR format For example if you enter 192 168 1 0 24 you are entering the range of 192 168 1 0 to 192 168 1 255 Invert Select this option to invert the Source IP Mask filtering criterion For example
30. GHz 04 18 D6 4E 00 C5 D nn Q JBaZ 7 tes airMAX AC 84 98 5 805 04 18 D6 4E 01 05 Performance_11AC testap1 airMAX AC 89 98 5 835 04 18 D6 4E 9C 7E ubnt ac test PowerBeam SAC 620 airMAX AC 68 98 5 735 Scanned Frequencies In Station PTP or Station PTMP mode you can change the frequency list for details see Frequency List MHz on page 12 Search As you enter keywords the Search field automatically filters the device results The Site Survey tool reports the following for each result MAC Address Displays the MAC address of the wireless interface of the device SSID Displays the wireless network name S Ubiquiti Networks Inc Chapter 7 Tools and Information Device Name Displays the hostname or identifier of the device Radio Mode Displays the technology used by the device airMAX AC for airMAX ac devices Encryption Displays the encryption method WPA2 or NONE Signal Noise dBm Displays the signal strength and noise values Frequency GHz Displays the frequency used by the device Scan To refresh the site survey results click Scan Discovery The Device Discovery tool searches for all Ubiquiti devices on your network Device Discovery Search od MAC Address Device Name 04 18 D6 4E 01 1E Rocket 5AC PTP ubnt1 Rocket SAC PTP 04 18 D6 4C C9 73 Rocket SAC PTP Rocket 5AC PTP ES Showing 1 to 2 of 2 entries Search As you enter keywords the Search field automatically f
31. Management Ports is disabled by default the device is accessible from the WAN port If DMZ Management Ports is enabled all management ports will be forwarded to the device so you ll only be able to access the device from the LAN side The default values of the management ports are Management Method HTTP HTTPS 80 443 TCP SSH 22 TCP Telnet 23 TCP SNMP 161 UDP Discovery 10001 UDP airView 18888 TCP DMZIP Enter the IP address of the local host network device The DMZ host device will be completely exposed to the external network Auto IP Aliasing If enabled automatically generates an IP address for the corresponding WLAN LAN interface The generated IP address is a unique Class B IP address from the 169 254 X Y range netmask 255 255 0 0 which is intended for use within the same network segment only The Auto IP always starts with 169 254 X Y with X and Y as the last two octets from the MAC address of the device For example if the MAC is 00 15 6D A3 04 FB then the generated unique Auto IP will be 169 254 4 251 The Auto IP Aliasing setting can be useful because you can still access and manage devices even if you lose misconfigure or forget their IP addresses Because an Auto IP address is based on the last two octets of the MAC address you can determine the IP address of a device if you know its MAC address MAC Address Cloning When enabled you can change the MAC address of the respective interface This is especi
32. OS 7 User Guide Frequency MHz Available in Access Point PTP or Access Point PTMP mode only The default Auto allows the device to automatically select the frequency You can specify a frequency from the drop down list Calculate EIRP Limit This option should remain enabled so it forces the transmit output power to comply with the regulations of the selected country If enabled you cannot set EIRP above the amount allowed per regulatory domain different maximum output power levels and antenna gains are allowed for each regulatory domain or country The available frequencies depend on the product as well as the regulations of the selected country Antenna Only applicable to the PowerBeam ac models The default is the antenna included for the PowerBeam ac model 620 29 dBi PBE 5AC 620 or 500 27 dBi PBE 5AC 500 If you are not using a dish reflector then select Feed only 3 dBi Antenna Gain Only applicable to devices with external antenna connectors Enter the antenna gain in dBi With Calculate EIRP Limit enabled Antenna Gain calculates the TX power backoff needed to remain in compliance with local regulations The Antenna Gain setting complements the Cable Loss setting they both affect the TX power of the device Cable Loss Only applicable to devices with external antenna connectors Enter the cable loss in dB In case you have high amounts of cable loss you may increase the TX power while remaining in complianc
33. Password Device Discovery Discovery CDP Chapter De Services response replies If the defined number of replies is not received the tool reboots the device The Services page configures system management services Ping Watchdog SNMP servers web SSH Telnet Ping Watchdog NTP DDNS system log and device discovery Ping Watchdog oO Ping Watchdog IP Address To Ping Ping Watchdog sets the device to continuously ping a user defined IP address it can be the Internet gateway m 9 for example If it is unable to ping under the user defined constraints then the device will automatically reboot This option creates a kind of fail proof mechanism Failure Count To Reboot Startup Delay 300 seconds Ping Watchdog is dedicated to continuous monitoring of the specific connection to the remote host using the Ping tool The Ping tool works by sending ICMP echo request packets to the target host and listening for ICMP echo Save Support Info S Ubiquiti Networks Inc 29 airOS 7 User Guide Ping Watchdog Select this option to enable use of Ping Watchdog IP Address To Ping Enter the IP address of the target host to be monitored by Ping Watchdog Ping Interval Enter the time interval in seconds between the ICMP echo requests that are sent by Ping Watchdog The default value is 300 seconds Startup Delay Enter the initial time delay in seconds until the first ICMP echo request is sent by Ping Wa
34. SSID which depends upon the wireless mode selected In Station modes this displays the SSID of the AP the device is associated with In Access Point modes this displays the SSID configured on the device using the Wireless tab Configure the SSID on the Wireless page See SSID on page 11 for additional details WLANO MAC Displays the MAC address of the device as seen on the wireless network AP MAC Available in Station modes This displays the MAC address of the AP the device is associated with Security Displays the wireless security method being used on the device If None is displayed then wireless security has been disabled Distance Available in Access Point PTP mode only Displays the current distance between devices in kilometers and miles for Acknowledgement ACK frames Changing the distance value will change the ACK Acknowledgement timeout accordingly The ACK timeout specifies how long the device should wait for an acknowledgement from a partner device confirming frame reception before it concludes that there has been an error and resends the frame You can adjust the Distance value 44 on the Wireless page see Distance on page 13 TX RX Bytes Displays the number of bytes transmitted and received in bytes Connections Available in Access Point PTMP mode only Displays the number of stations that are connected to the device S Ubiquiti Networks Inc Chapter 2 Main Frequenc
35. TU 1500 Speed Auto Enabled Select this option to enable the interface Interface Displays the name of the interface MTU Enter the desired MTU value The default is 7500 Speed Available only if the interface is Ethernet Select the appropriate option Auto 100Mbps Full 100Mbps Half 10Mbps Full or 10Mbps Half We recommend using the default setting Auto which is the only mode that supports gigabit 1000 Mbps speed In Auto mode the device automatically negotiates transmission parameters such as speed and duplex with its counterpart In this process the networked devices first share their capabilities and then choose the fastest transmission mode they both support Click OK to save changes or click Cancel to close the window without saving changes S Ubiquiti Networks Inc Chapter 4 Network IP Aliases Available in Advanced view You can configure IP aliases for the network interfaces for management purposes For example you may need multiple IP addresses one private IP address and one public IP address for a single device If a CPE uses PPPoE the CPE obtains a public PPPoE address but the network administrator assigns an internal IP alias to the device This way the network administrator can manage the device internally without going through the PPPoE server Click the P Aliases section to display its contents IP Aliases Enabled 4 Interface IP Address Netmask Comment No data a
36. a specific MAC address Select Select the AP from the list and click Select for association Scan Click Scan to refresh the list of available wireless networks Selected SSIDs must be visible have compatible channel bandwidth and security settings and must be compatible with airMAX AC technology In addition f Access Point PTMP mode is selected on a station operating in Station PTP mode the station s mode will automatically be changed to Station PTMP mode the following warning will be displayed Wireless Mode Warning New wireless mode selected f Access Point PTP is selected on a station operating in Station PTMP mode the station s mode will automatically be changed to Station PTP mode the following warning will be displayed Wireless Mode Warning New wireless mode selected The list of Scanned Frequencies for the Site Survey is determined by the Frequency List option if the option is enabled Lock to AP MAC Available in Station PTP or Station PTMP mode only This allows the station to always maintain a connection to an AP with a specific MAC address This is useful as sometimes there can be multiple APs using the same SSID Enter a MAC address in the Lock to AP MAC field and the station will lock to the AP with this specific MAC address and not roam between several APs with the same SSID Country Each country has their own power level and frequency regulations To ensure the device operates under t
37. ach packet and address it to a group of computers that want to receive it This technique addresses packets to a group of receivers rather than to a single receiver It relies on the network to forward the packets to the hosts that need to receive them Common routers isolate all the broadcast thus multicast traffic between the local and external networks however the device provides multicast traffic pass through functionality Click the Multicast Routing Settings section to display its contents Multicast Routing Settings Enabled Multicast Upstream BRIDGEO Available Interfaces LANO ADD Selected Interfaces Multicast Downstream lt REMOVE Enabled Select this option to enable multicast packet pass through between local and external networks while the device is operating in Router mode Multicast intercommunication is based on Internet Group Management Protocol IGMP Multicast Upstream Select the source of multicast traffic Multicast Downstream Enter the destination s of multicast traffic Add Select an Available Interface and click Add e Remove Select a Selected Interface and click Remove 27 airOS 7 User Guide Traffic Shaping Available in Advanced view Traffic Shaping controls bandwidth from the perspective of the client Bursting allows fast downloads when a user downloads small files for example viewing different pages of a website but prevents a user from using excessive b
38. ake changes the Pending changes section is displayed at the bottom of the page and lists all pages where changed settings have not been saved Pending changes Network X System X To cancel the unsaved changes on a specific page click the page s name Use the buttons on the right to perform operations on all unsaved changes You have three options TEST CHANGES X REVERT CHANGES v SAVE CHANGES Test Changes Click Test Changes to try changes without saving them You have two options Apply Click Apply to save changes Discard Click Discard to cancel changes Note If you do not click Apply within 180 seconds the countdown is displayed the device times out and resumes its earlier configuration Revert Changes Click Revert Changes to cancel all changes on all pages Save Changes Click Save Changes to immediately apply and save changes S Ubiquiti Networks Inc Chapter 1 Overview airOS 7 User Guide aros DEVICE MODEL Rocket SAC PTP Wireless DEVICE NAME Rocket SAC PTP VERSION v7 1 CABLE LENGTH Network NETWORK MODE Bridge CABLE SNR Services System WIRELESS MODE Access Point PTP FREQUENCY SSID ubnt CHANNEL WIOTH WLANO MAC 04 18 D6 6C 00 BB RX SIGNAL SECURITY none 0 1 miles 0 2 km 250K 205K RX CHAIN 0 1 DISTANCE TX RATE TX RX BYTES RX RATE Local Constellation Diagram POWER 41dBm CNR 34dB CINR dB 0 16 _ eae Cas 3 SE TE SE SE IE IF TE
39. ally useful if your ISP only assigns one valid IP address and it is associated to a specific MAC address This is usually used by cable operators or some WISPs MAC Address Enter the MAC address you want to clone to the respective interface This becomes the new MAC address of the interface airOS 7 User Guide Static Assign static IP settings to the device Note IP settings should be consistent with the address space of the device s network segment WAN IP Address DHCP STATIC PPPOE IP Address 192 168 200 91 KZ Netmask 255 255 255 0 e Gateway IP 192 168 200 1 Primary DNS IP 192 168 99 1 Secondary DNS IP MTU 1500 NAT La NAT Protocol sip PPTP Lei FTP Lei RTSP Block management access C DMZ O Auto IP Aliasing Q MAC Address Cloning O IP Address Enter the IP address of the device This IP will be used for device management purposes Netmask The netmask defines the address space of the device s network segment The 255 255 255 0 or 24 netmask is commonly used on many Class C IP networks Gateway IP Typically this is the IP address of the host router which provides the point of connection to the Internet This can be a DSL modem cable modem or WISP gateway router The device directs data packets to the gateway if the destination host is not within the local network Primary DNS IP Enter the IP address of the primary DNS Domain Name System s
40. an place the cursor at a specific frequency to highlight that frequency across the three spectral views each of which represents different data airView WAVEFORM VIEW Probabili 3 Gegen d 92 M 95 O8 5750 MHz hes ui p Pid T Facit Pana Grp mam m eei x WATERFALL VIEW er dBm 25 A0 5750 MHz 5100 5200 AMBIENT NOISE LEVEL 5750 MHz These are the three views 4 Waveform View on page 37 44 e Waterfall View on page 37 44 Ambient Noise Level on page 37 Waveform View WAVEFORM VIEW P ili wm Mel 0 02 04 06 08 1 d ii m v a T Aire ww m is zen Alt k olin A a Vu Ld 51 5300 5500 5600 ET This activity based graph shows the aggregate energy collected since the start of the airView session The power of the energy in dBm is shown across the frequency span Cooler colors such as blue and darker colors represent energy of a specific strength and frequency appearing at a relatively low occurrence rate whereas increasingly warmer colors from green to yellow to orange to red represent energy of a specific strength and frequency appearing at a higher rate of occurrence Note Energy is the power ratio in decibels dB of the measured power referenced to one milliwatt mW The spectral view over time essentially displays the steady state RF energy signature of a given environment The legend at the top right corner provides a numerical guide associating the
41. an reset the device to default settings through Configuration Management Reset to Factory Defaults on this page S Ubiquiti Networks Inc Chapter 6 System Date Settings Date Settings Time Zone GMT Western Europe Startup Date C Startup Date Time Zone Select the appropriate time zone according to Greenwich Mean Time GMT Startup Date To change the device s startup date select this option and then specify the date You have two options Manual Enter the startup date Calendar Click the i icon to display the monthly calendar Then click the startup date 4 November 2014 Su Mo Tu We Th Fr Sa 16 17 18 19 20 21 22 23 24 25 26 27 28 29 System Accounts You can change the administrator password to protect your device from unauthorized changes We recommend that you change the default administrator password during the very first system setup System Accounts CHANGE Change Password Administrator Username Enter the name of the administrator Change Password Click Change to change the administrator password The Change Password window opens Change Password X Current Password Y S Verify New Password CANCEL 34 airOS 7 User Guide Current Password Enter the current password for the administrator account This is required to change the Password or Administrator Username New Password Enter the new password for the administrator account airOS 7 wi
42. an throughput value The statistics are updated automatically The capacity is the expected maximum rate at which data can be transmitted over the channel accounting for protocol overhead and interference Access Point Info and Station Info If you maximize the Link section by clicking S Link airOS displays additional information on any connected devices The type of information depends on the mode Access Point PTP Station PTP and Station PTMP Modes In Access Point PTP mode the Station Info section displays Statistics on the connected station TION INFO Rocket SAC PTP RX SIGNA NS 43 dBm ONNECTION TIME 00 43 20 Rocket SAC PTP WX CHAIN 50 44 ATED CAPACITY TX RX 564 Mbps 625 Mbps A NOIS 92 dBm AIRTIME TX RX 0 0 0 0 04 18 D6 4E 01 1E ATENCY 0 ms 192 168 1 20 X POW 27 dBm RECONNE CT In Station PTP and Station PTMP modes the Access Point Info section displays statistics on the connected AP ACCESS POINT INFO Rocket 5AC Lite RX SIGNAL BE 32dBm CONNECTION TIME 00 01 36 Rocket 5AC Lite RX CHAIN 0 1 32 38 AVERAGE CAPACITY TX RX 295 Mbps 295 Mbps v1 NOISE FLOOR 94 dBm AIRTIME TX RX 0 0 0 0 0 ms 0 1 miles 0 2 km TX POWER 27 dBm airOS 7 User Guide The following information is displayed Device Model Displays the model of the AP or station Device Name Displays the host name of the AP or station Version Displays the firmware version of airOS on the AP or station MAC Address Available in Access
43. andwidth when downloading large files for example streaming a movie As Layer 3 QoS you can limit the traffic at the device at the interface level based on a rate limit you define Each interface has two types of traffic Ingress traffic entering the interface Egress traffic exiting the interface We recommend using Traffic Shaping to control egress traffic because it is more efficient in the egress direction When an interface accepts ingress traffic it cannot control how quickly the traffic arrives the sending device controls that traffic However when an interface sends out egress traffic it can control how quickly the traffic exits Bursting allows the bandwidth to spike higher than the maximum bandwidth you configure in the ngress and Egress Rate settings for a short period of time Once the Ingress or Egress Burst volume of data is used up the throughput drops back down to the corresponding Ingress or Egress Rate setting maximum bandwidth you have set For example you have the following conditions Egress Burst is set to 2048 kBytes Egress Rate is set to 512 kbit s Actual maximum bandwidth is 1024 kbit s Bursting allows 2048 kBytes to pass at 1024 kbit s before throttling down to 512 kbit s Click the Traffic Shaping section to display its contents Traffic Shaping Enabled 4 Interface Ingress Ingress Rate kbps Ingress Burst kB Egress Egress Rate kbps Egress Burst kB Action ADD E
44. ated at considerably different distances from the AP they are associated with the distance to the farthest station should be set on the AP side Distance To specify the distance value in miles or kilometers use the slider or manually enter the value The signal strength and throughput fall off with range Changing the distance value will change the ACK timeout value accordingly Max TX Rate Defines the maximum rate at which the device should transmit wireless packets The default is Auto the rate algorithm selects the best data rate depending on link quality conditions We recommend that you use the Auto option especially if you are having trouble getting connected or losing data ata higher rate in this case the lower data rates will be used automatically To set a specific maximum rate select one of the following 1x BPSK 2x QPSK 4x 16QAM 6x 64QAM or 8x 256QAM Wireless Security In Access Point PTP or Access Point PTMP mode configure the wireless security settings that will be used by the devices on your wireless network In Station PTP or Station PTMP mode enter the security settings of the AP that the device is associated with Security airOS 7 supports the following wireless security methods None and WPA2 AES Follow the instructions for your selected method None If you want an open network without wireless security select None Wireless Security Security None Note Not using w
45. ation bar Tools Click to display the list of network administration and monitoring tools airView on page 36 4 Align Antenna on page 38 4 Site Survey on page 38 4 Discovery on page 38 4 Ping on page 39 4 Traceroute on page 39 Speed Test on page 40 4 Cable Test on page 40 Info Click to display device information refer to Info on page 41 Log Click to display log information refer to Log on page 41 S Ubiquiti Networks Inc airView The airView Spectrum Analyzer allows you to identify noise signatures so you can plan your wireless network to optimize RF performance and minimize interference airView constantly monitors RF environmental noise and displays energy data points in multiple spectral views at a rapid frame rate Powered by a second dedicated radio airView runs 10096 in the background without disabling the wireless link airView Probabili xA WAVEFORM VIEW VOR Os BE OA OS OA d NI NS Int II M baa ha HJ II n T 3 4 I db ET i j m x ntl e L Si d PG E ET H s T NV AIM elen T Ltrs lea p 5100 5200 j I 5300 i i 5400 l 5500 5600 5700 5800 5900 WATERFALL VIEW Power dBm 105 5100 5200 5700 5800 AMBIENT NOISE LEVEL Power dBm 105 36 airOS 7 User Guide Use the controls in the upper right corner to maximize or close the airView window You c
46. c bridge network All the added bridge networks are saved in the system configuration file however only the enabled bridge networks are active on the device Interface Displays the name of the interface 24 airOS 7 User Guide STP Select this option to enable the STP feature Multiple interconnected bridges create larger networks Spanning Tree Protocol STP eliminates loops from the topology while finding the shortest path within a network If enabled the device bridge communicates with other network devices by sending and receiving Bridge Protocol Data Units BPDU STP should be disabled default setting when the device is the only bridge on the LAN or when there are no loops in the topology as there is no need for the bridge to use STP in this case Ports Select the appropriate ports for your bridge network Virtual ports are available if you have created VLANs Add Select an Available Port and click Add Remove Select a Selected Port and click Remove Comment You can enter a brief description of the purpose for the bridge network Click OK to save changes or click Cancel to close the window without saving changes Firewall Available in Advanced view You can configure firewall rules for the network interfaces All active firewall entries are stored in the FIREWALL chain of the ebtables filter table in Bridge mode or the iptables filter table in Router mode The ebtables table is a transparentl
47. cess to Management Information Base MIB objects and functions as an embedded password The device supports a read only S Ubiquiti Networks Inc Chapter 5 Services community string authorized management stations have read access to all the objects in the MIB except the community strings but do not have write access The device supports SNMP v1 The default is public Contact Enter the name of the contact who should be notified in case of emergency Location Enter the physical location of the device Web Server This section manages the Web Server parameters Web Server Web Server Secure Connection HTTPS La Secure Server Port 443 Server Port 80 15 minutes Session Timeout Web Server HTTP service is enabled by default Secure Connection HTTPS Secure HTTPS mode is enabled by default Secure Server Port If secure HTTPS mode is enabled enter the TCP IP port of the web server The default is 443 Server Port If HTTP mode is enabled enter the TCP IP port of the web server The default is 80 Session Timeout Enter the maximum timeout before the session expires Once a session expires you must log in again using the username and password The default is 15 minutes SSH Server This section manages the SSH Server parameters SSH Server SSH Server Y Password Authentication Authorized Keys mm SSH Server SSH access to the device is enabled by default Server Port Ente
48. cify the number of frames that will be combined in the new larger frame use the slider The default is 32 airMAX Station Priority Available in Station PTMP mode only It defines the number of time slots or amount of airtime assigned to each client By default the AP gives all active clients the same amount of time However if the clients are configured with different priorities the AP will give clients more or less time depending on the priority Note airMAX Station Priority only functions in Station PTMP mode only airMAX Station Priority options include High 4time slots 4 1 ratio Medium 3 time slots 3 1 ratio Base 2time slots Default setting for clients 2 1 ratio Low 1 time slot 1 1 ratio Clients with a higher priority have access to more of the AP s airtime providing higher possible throughput and lower latency when sharing with other active clients For example if there are 3 clients 1 set to Base 1 set to Medium and 1 set to High the Base client will get 2 time slots the Medium client will get 3 time slots and the High client will get 4 time slots airOS 7 User Guide alrOS Main Network Role Wireless Network Mode Services Configuration Mode System Configuration Mode Management Network Settings Management IP Address DHCP STATIC IP Address 192 168 1 21 Netmask 255 255 255 0 Gateway IP 192 168 1 1 Primary DNS IP Se
49. condary DNS IP MTU STP Management VLAN Tools gt Auto IP Aliasing Info Chapter 4 Network Log o Cem Chapter 4 Network The Network page allows you to configure bridge or routing functionality and IP settings Network Role airOS v7 1 supports Bridge and Router modes Network Mode Select the Network Mode of the device the mode depends on network topology requirements Bridge mode is adequate for very small networks Larger networks have significantly more traffic and need to be managed by a device in Router mode to keep broadcast traffic within its respective broadcast domain and prevent it from overloading the overall traffic in the network Bridge The device acts as a transparent bridge operates in Layer 2 like a managed switch and usually has only one IP address for management purposes only Network Role Network Mode Bridge 3 Router The device contains two networks or subnets a Wide Area Network WAN and a LAN Each wired or wireless interface on the WAN or LAN has an IP address Network Role Network Mode Roter S Ubiquiti Networks Inc The following summarizes the differences between Bridge and Router modes Bridge mode The device forwards all network management and data packets from one network interface to the other without any intelligent routing For simple applications this provides an efficient and fully transparent network solution
50. d by default this option automatically checks for firmware updates To manually check for an update click Check Now If an update is found click Download to download the update Otherwise click Dismiss to cancel S Ubiquiti Networks Inc Chapter 6 System Upload Upload Firmware Date Settings Time Zone GMT Western Europe Startup Date Q Startup Date Location Latitude Longitude Configuration Management Back Up Configuration DOWNLOAD Upload Configuration Reset to Factory Defaults After you click Download the Ubiquiti Firmware License Agreement window appears Click Agree to accept the terms of the license agreement On the System page click Update to upload the downloaded firmware to the device A WARNING Do not power off do not reboot and do not disconnect the device from the power supply during the firmware update process as these actions will damage the device Upload The device firmware update is compatible with all configuration settings The system configuration is preserved while the device is updated with a new firmware version However we recommend that you back up your current system configuration before updating the firmware Upload BROWSE Upload Firmware Upload Firmware Click Browse to locate the new firmware file Select the file and click Open to upload the file 33 airOS 7 User Guide The upl
51. default The device can be discovered by other Ubiquiti devices or by the Ubiquiti Device Discovery tool which you can download from http www ubnt com download CDP Select this option to enable Cisco Discovery Protocol CDP communications so the device can send out CDP packets to share its information S Ubiquiti Networks Inc Chapter 5 Services 32 airOS 7 User Guide airOS Main Firmware Update Wireless Firmware Version Network Build Number Services Check for Updates EEN Automatically cHecK Now Device Device Model RSAC Lite Device Name Rocket 5AC Lite AP Interface Language English External Reset System Accounts Administrator Username ubnt Change Password CHANGE Device Maintenance Reboot Device REBOOT Support Info DOWNLOAD Tools gt Info Log Chapter 6 System The System page contains administrative options This page enables the administrator to reboot the device reset it to factory defaults upload new firmware back up or update the configuration and configure the administrator account Firmware Update This section manages the firmware maintenance Firmware Update l Firmware Version v7 1 Build Number 25994 Check for Updates v Automatically CHECK NOW Firmware Version Displays the current firmware version Build Number Displays the build number of the firmware version Check for Updates Enable
52. e Virtual Local Area Networks VLANs Click the VLAN Network section to display its contents VLAN Network Enabled Displays the status of the VLAN Yes or No Interface Displays the name of the interface VLAN ID Displays the VLAN identifier Comment Displays a brief description of the purpose for the VLAN Add Click Add to create a VLAN Go to the Add or Edita VLAN section below Action After a VLAN has been created you have the following options Edit Make changes to a VLAN Go to the Add or Edit a VLAN section below Delete Remove a VLAN A VLAN configured as the management interface cannot be deleted Add or Edit a VLAN The VLAN window opens VLAN X Enabled Interface WLANO VLAN ID Comment Enabled Select this option to enable the specific VLAN All the added VLANs are saved in the system configuration file however only the enabled VLANs are active on the device Interface Select the appropriate interface VLAN ID Enter the VLAN ID a unique value assigned to each VLAN at a single device every VLAN ID represents a different VLAN The VLAN ID range is 2 to 4094 Comment You can enter a brief description of the purpose for the VLAN Click OK to save changes or click Cancel to close the window without saving changes S Ubiquiti Networks Inc Chapter 4 Network Bridge Network Available in Advanced view You can create one or more bridge networks if you
53. e network IP address space on the LAN interface behind a single public IP address on the WAN interface NAT is implemented using the masquerade type firewall rules NAT firewall entries are stored in the iptables nat table Specify static routes to allow packets to pass through the airOS device if NAT is disabled NAT Protocol To disable NAT traversal for the SIP PPTP FTP or RSTP protocols uncheck the respective box es Block management access To block device management from the WAN interface check this box This feature makes Router mode more secure if the device has a public IP address DMZ DMZ Demilitarized Zone specifically allows one computer device behind NAT to become demilitarized so all ports from the public network are forwarded to the ports of this private network similar to a 1 1 NAT e DMZ Management Ports The airOS device responds to requests from the external network as if it were the host device that is specified with the DMZ IP address DMZ Management Ports is disabled by default the device is accessible from the WAN port If DMZ Management Ports is enabled all management ports will be forwarded to the device so you ll only be able to access the device from the LAN side The default values of the management ports are Management Method HTTP HTTPS 80 443 TCP SSH 22 TCP Telnet 23 TCP SNMP 161 UDP Discovery 10001 UDP airView 18888 TCP e DMZIP Enter the IP address of the local host network de
54. e port forwarding rule will be applied Private IP Displays the IP address of the local host that needs to be accessible from the external network Private Port Displays the TCP or UDP port of the application running on the local host The specified port will be accessible from the external network Type Displays the Layer 3 protocol IP type that needs to be forwarded from the local network Source IP Mask Displays the IP address and netmask of the source device Public IP Mask Displays the public IP address and netmask of the device that will accept and forward the connections from the external network to the local host Public Port Displays the TCP or UDP port of the device that will accept and forward the connections from the external network to the local host Comment Displays a brief description of the port forwarding functionality such as FTP server web server or game server Add Click Add to create a port forwarding rule Go to the Add or Edit a Static Route section below Action After port forwarding rule has been created you have the following options Edit Make changes to a port forwarding rule Go to the Add or Edit a Port Forwarding Rule section below Delete Remove a port forwarding rule Add or Edit a Port Forwarding Rule The Port Forward window opens Port Forward X Enabled Interface WLANO Private IP L Private Port Type TCP Source IP Ma
55. e with local regulations The Cable Loss setting complements the Antenna Gain setting they both affect the TX power of the device Output Power Defines the maximum average transmit output power in dBm of the device To specify the output power use the slider or manually enter the output power value The transmit power level maximum is limited according to country regulations If the device has an internal antenna then Output Power is the output power delivered to the internal antenna Auto Adjust Distance Enabled by default We recommend keeping this option enabled Every time the station receives a data frame it sends an ACK Acknowledgement frame to the AP if transmission errors are absent If the AP does not receive the ACK frame within the set timeout it re sends the frame The same occurs when the AP receives a data frame but the station does not receive the ACK frame within the set timeout The timeout value depends on the value of the Distance option If too many data frames are re sent whether the ACK timeout is too short or too long then there is a poor connection and throughput performance drops The device has an auto acknowledgement timeout algorithm which dynamically optimizes the frame acknowledgement timeout value without user intervention This critical feature is required for stabilizing long distance outdoor links S Ubiquiti Networks Inc Chapter 3 Wireless If two or more stations are loc
56. erver This is used for management purposes only Secondary DNS IP Enter the IP address of the secondary DNS server This entry is optional and used only if the primary DNS server is not responding It is used for management purposes only MTU Available in Simple view The Maximum Transmission Unit MTU is the maximum frame size in bytes that a network interface can transmit or receive The default is 7500 NAT Network Address Translation NAT is an IP masquerading technique that hides private network IP address space on the LAN interface behind a single public IP address on the WAN interface NAT is implemented using the masquerade type firewall rules NAT firewall entries are stored in the iptables nat table Specify static routes to allow packets to pass through the airOS device if NAT is disabled S Ubiquiti Networks Inc Chapter 4 Network NAT Protocol To disable NAT traversal for the SIP PPTP FTP or RSTP protocols uncheck the respective box es Block management access To block device management from the WAN interface check this box This feature makes Router mode more secure if the device has a public IP address DMZ DMZ Demilitarized Zone specifically allows one computer device behind NAT to become demilitarized so all ports from the public network are forwarded to the ports of this private network similar to a 1 1 NAT e DMZ Management Ports The airOS device responds to requests from the exter
57. ets to send for the ping test Packet Size Enter the size of the packet Start Click Start to start the test After the test is completed the Ping tool reports the following information for each packet sent Host Displays the IP address of the remote host Time Displays the round trip time in ms TTL Displays the Time To Live TTL the number of hops allowed before the ping test fails Results The Ping tool reports packet loss statistics and round trip time evaluation PacketLoss Displays the percentage of packets lost and number of packets received Min Displays the minimum round trip time in ms Avg Displays the average round trip time in ms Max Displays the maximum round trip time in ms S Ubiquiti Networks Inc Chapter 7 Tools and Information Traceroute The Traceroute tool traces the hops from the device to a specified destination host name or IP address Use this tool to find the route taken by ICMP packets across the network to the destination host Traceroute Destination Host Resolve IP Addresses d HOST RESPONSE No data available Destination Host Enter the host name or IP address of the destination host Resolve IP Addresses Select this option to resolve and print hop IP addresses symbolically rather than numerically Start Click Start to start the test After the test is completed the Traceroute tool reports the following information for each hop Displays the hop number
58. evice Interface Select the appropriate interface Ingress Select this option to enable the ingress values Rate Enter the maximum bandwidth value in kilobits per second for traffic entering the specified interface Burst Enter the data volume in kilobytes that is allowed before the ingress maximum bandwidth applies Egress Select this option to enable the egress values Rate Enter the maximum bandwidth value in kilobits per second for traffic exiting the specified interface Burst Enter the data volume in kilobytes that is allowed before the egress maximum bandwidth applies Click OK to save changes or click Cancel to close the window without saving changes 28 airOS97 User Guide Chapter 5 Services aros SERVICES Main Ping Watchdog SNMP Agent Wireless 2 Ping Watchdog SNMP Agent Network IP Address To Ping SNMP Community Ping Interval 300 seconds Contact Startup Delay 300 seconds Location Failure Count To Reboot Save Support Info Web Server SSH Server Web Server SSH Server Secure Connection HTTPS Server Port Secure Server Port Password Authentication Server Port il Authorized Keys Session Timeout minutes Telnet Server NTP Client Telnet Server NTP Client Server Port 23 NTP Server Dynamic DNS System Log Dynamic DNS System Log Service Remote Log Host Name Remote Log IP Address Username Remote Log Port
59. f CPU capacity currently being used Cable Length Displays the length of the cable attached to the device Cable SNR Displays the cable Signal to Noise Ratio SNR in dBm A value of 0 indicates that the cable is not connected or the Ethernet port is down Airtime Displays the average wireless bandwidth usage calculated using the sum of all successful and failed transmissions as a percentage of the maximum theoretical bandwidth utilization LAN Speed Displays the Ethernet port mode speed duplex mode such as 7000Mbps Full or 100Mbps Full Date Displays the current system date and time the format is browser and location dependent The system date and time is retrieved from the Internet using NTP Network Time Protocol The NTP Client is disabled by default on the Services page The device doesn t have an internal clock and the date and time may be inaccurate if the NTP Client is disabled or the device isn t connected to the Internet Uptime This is the total time the device has been running since the latest reboot when the device was powered up or software upgrade The time is displayed in days hours minutes and seconds airOS 7 User Guide Interfaces Click Interfaces to display the name MAC address MTU IP address and traffic information for the device s interfaces REFRESH Interface Displays the name of the interface MAC Address Displays the MAC address of the interface MTU Displays the
60. ge REFRESH Bridge The name of the bridge MAC Address Displays the learned MAC address of a network device on a specific bridge port Interface Displays the network interface bridge port on which the MAC address is located airOS can forward packets only to the specified port of the device eliminating redundant copies and transmits Aging Timer Displays aging time for each address entry in seconds After a specific timeout if the device has not seen a packet coming from a listed address it will delete that address from the Bridge Table Refresh To update the information click Refresh airOS 7 User Guide Routes Click Routes to list all the entries in the system routing table Destination 4 Gateway Netmask Interface 0 0 0 0 192 168 1 1 0 0 0 0 BRIDGEO 169 254 0 0 0 0 0 0 255 255 0 0 BRIDGEO 192 168 1 0 0 0 0 0 255 255 255 0 BRIDGEO airOS examines the destination IP address of each data packet traveling through the system and chooses the appropriate interface to forward the packet to The system choice depends on static routing rules the entries that are registered in the system routing table Static routes to specific hosts networks or the default gateway are set up automatically according to the IP configuration of all the airOS Configuration Interfaces Note Static routes also can be added manually For more information refer to Static Routes on page 26 Destination Displays the IP address of
61. he necessary regulatory compliance rules you must select the country where your device will be used The country is selected upon initial login as described in Getting Started on page 2 The channels frequencies and output power limits will be tuned according to the regulations of the selected country Note For the Country setting U S product versions are restricted to a choice of Canada Puerto Rico or the U S to ensure compliance with FCC IC regulations Channel Width Displays the spectral width of the radio channel You can use this option to control the bandwidth consumed by your link Using higher bandwidth increases throughput Using lower bandwidth does the following Reduces throughput proportional to the reduction in channel size For example as 40 MHz increases possible speeds by 2x the half spectrum channel 10 MHz decreases possible speeds by 2x S Ubiquiti Networks Inc Chapter 3 Wireless Increases the number of available non overlapping channels so networks have better scalability Increases the Power Spectral Density PSD of the channel so you can increase the link distance more robust links over long distances Available channel widths depend on the selected Wireless Mode Here are the options for each mode Access Point PTP Supported wireless channel spectrum widths 80 MHz 60 MHz 50 MHz 40 MHz 30 MHz 20 MHz and 10 MHz Access Point PTMP Supported wireless
62. he top right corner provides a numerical guide associating the various colors to power levels in dBm 37 airOS 7 User Guide Align Antenna Use this tool to point and optimize the antenna in the direction of maximum link signal The Antenna Align Tool window reloads every second Antenna Align Tool Signal Level Chain 0 Chain 1 47 54 dBm Noise Level 96 dBm Max Signal Signal Level Displays the signal strength of the last received packet Note If the Signal Level is not at its maximum then a vertical line on the right indicates the maximum gain Chain Displays the wireless signal level in dBm of each chain if there is more than one chain The number of chains is device specific Noise Level Displays the background noise level in dBm when the wireless signal is received Max Signal Displays the maximum signal strength in dBm Use the slider to adjust the range of the Signal Level meter to be more sensitive to signal fluctuations it changes an offset of the maximum indicator value Site Survey The Site Survey tool searches for wireless networks in range on all supported frequencies Site Survey Scanned Frequencies 5 735GHz 5 74GHz 5 745GHz 5 75GHz 5 755GHz 5 76GHz 5 765GHz 5 77GHz 5 775GHz 5 78GHz 5 785GHz 5 79GHz 5 795GHz 5 8GHz 5 805GHz 5 81GHz 5 815GHz 5 82GHz 5 825GHz 5 83GHz 5 835GHz 5 84GHz Search GD MAC Address E Device Name Radio Mode Signal Noise dBm Frequency
63. i Calculate EIRP Limit La Antenna Gain 0 l dBi Antenna Gain 0 dBi Cable Loss 0 dB Cable Loss 0 dB Output Power c 27 dBm Output Power 27 dBm Auto Adjust Distance Is Auto Adjust Distance Distance e 0 4 miles 0 6 km EC Distance 0 4 miles 0 6 km Max TX Rate Auto gt Max TX Rate Auto Station PTP If you have a client device to connect to an AP in a Point to Point PtP link configure the client device as Station PTP mode The client device acts as the subscriber station while connecting to the AP the AP must be in Access Point PTP mode The AP s SSID is used and all traffic to and from the network devices connected to the Ethernet interface is forwarded to the AP SSID If the device is operating in Access Point PTP or Access Point PTMP mode specify the wireless network name or SSID Service Set Identifier used to identify your WLAN All the client devices within range will receive broadcast messages from the AP advertising this SSID If the device is operating in Station PTP or Station PTMP mode specify the SSID of the AP the device is associated with There can be several APs with an identical SSID Select Available in Station PTP or Station PTMP mode only To display the list of available APs click Select Basic Wireless Settings Wireless Mode Station PTP 2 SSID ubnt SELECT Site Survey Lock to AP MAC Scanned Freq
64. iguration are displayed in the web management interface Discard Click Discard to cancel Reset to Factory Defaults Click Reset to reset the device to the factory default settings This option will reboot the device and all factory default settings will be restored We recommend that you back up your current system configuration before resetting the device to its defaults 35 airOS 7 User Guide ailrOS Main Firmware Update Wireless Firmware Version Network Build Number Services Check for Updates oe Now Automatically CHECK NOW Device Device Model RSAC Lite Device Name Rocket 5AC Lite AP Interface Language English External Reset La System Accounts airView 25 Administrator Username ubnt Align Antenna cxe Change Password CHANGE Site Survey Discovery 3 Device Maintenance Ping Traceroute Reboot Device REBOOT Speed Test Support Info DOWNLOAD Cable Test Chapter 7 Tools and Information Upload Upload Firmware Date Settings Time Zone GMT Western Europe Startup Date Q Startup Date Location Latitude Longitude Configuration Management Back Up Configuration DOWNLOAD Upload Configuration Reset to Factory Defaults Chapter 7 Tools and Information Each page of the airOS interface contains links to tools and information in the lower half of the navig
65. ilters the device results The Device Discovery tool reports the following for each result MAC Address Displays the MAC address or hardware identifier of the device Device Name Displays the hostname or identifier of the device Mode Displays the operating mode of the wireless device AP or STA Station SSID Displays the wireless network name Product Displays the product name Firmware Displays the version number of the device s firmware IP Address Displays the IP address of the device To access a device configuration through its web management interface click the device s IP address Scan To refresh the device discovery results click Scan 38 airOS 7 User Guide Ping You can ping other devices on the network directly from the device The Ping tool uses Internet Control Message Protocol ICMP packets to check the preliminary link quality and packet latency estimation between two network devices Network Ping X Packet Count L Packet Size CHEE Select Destination IP specify manually EG RESULTS No data available PACKET LOSS 0 96 0 OF 0 PACKETS RECEIVED MIN 0 ms Select Destination IP You have two options Select a remote system IP from the drop down list which is generated automatically Select specify manually and enter the IP address in the field displayed below Click the C icon to refresh the list of remote system IP addresses Packet Count Enter the number of pack
66. ink layer filtering tool used on bridge interfaces that allows the filtering of network traffic passing through a bridge Packets are processed by sequentially traversing the firewall rules Click the Firewall section to display its contents Enabled Select this option to enable firewall functionality Enabled Displays the status of the firewall rule Enabled Yes or Disabled No Position Displays the order of the firewall rules Target Displays the firewall action for packets Accept or Drop Interface Displays the interfaces specified by the firewall rule IP Type Displays the specific Layer 3 protocol type P ICMP TCP or UDP being filtered Source IP Mask Displays the source IP mask of the packet that traverses the firewall rule Source Port Displays the source port of the packet that traverses the firewall rule Destination IP Mask Displays the destination IP mask of the packet that traverses the firewall rule S Ubiquiti Networks Inc Chapter 4 Network Destination Port Displays the destination port of the packet that traverses the firewall rule Comment Displays a brief description of the purpose for the firewall rule Add Click Add to create a firewall rule Go to the Add or Edit a Firewall Rule section below Action After a firewall rule has been created you have the following options Edit Make changes to a firewall rule Go to the Add or Edit a Firewall Rule section below Upand
67. ireless security may compromise the security of your wireless network WPA2 AES To secure your wireless network select WPA2 AES which is WPA2 Wi Fi Protected Access 2 security mode with AES Advanced Encryption Standard support only AES is also known as CCMP Counter Mode with Cipher Block Chaining Message Authentication Code Protocol which uses the AES algorithm Wireless Security Security WPA2 AES WPA Authentication PSK WPA Preshared Key SHOW airOS 7 User Guide WPA Authentication Specify one of the following WPA key selection methods PSK Pre shared Key method selected by default e EAP EAP Extensible Authentication Protocol IEEE 802 1x authentication method This method is commonly used in enterprise networks PSK Wireless Security Security WPA2 AES WPA Authentication PSK WPA Preshared Key SHOW WPA Preshared Key Specify a passphrase The preshared key is an alpha numeric password between 8 and 63 characters long Show Click Show if you want to view the characters of the WPA Preshared Key EAP Available options depend on the wireless mode as follows EAP Access Point PTP or Access Point PTMP Mode The options below apply in Access Point PTP or Access Point PTMP mode only Wireless Security Security WPA2 AES WPA Authentication EAP Auth Server IP Port 1812 Auth Server Secret
68. is used to configure a specific aspect of the Ubiquiti device ER Main on page 4 displays device and link status statistics and network monitoring and RF performance data 44 Wireless on page 10 configures wireless settings including the wireless mode Service Set Identifier SSID channel and frequency output power and wireless security Network on page 16 configures the network operating mode Internet Protocol IP settings IP aliases VLANs packet filtering bridging and routing routines and traffic shaping Services on page 29 configures system management services Ping Watchdog Simple Network Management Protocol SNMP servers web SSH Telnet Network Time Protocol NTP client Dynamic Domain Name System DDNS client system log and device discovery 44 System on page 33 controls system maintenance routines including firmware update date settings administrator account management location management device maintenance and configuration backup You can also change the language of the web management interface airOS97 User Guide The lower half of the navigation bar contains links to additional tools and information Tools and Information on page 36 displays a list of network administration and monitoring tools Info on page 41 displays device information s Log on page 41 displays system log messages airOS Notifications Pending Changes When you m
69. its binary form it provides a mapping to define which portions of the IP address range are used for the network and which portions are used for host devices The netmask defines the address space of the device s network segment The 255 255 255 0 or 24 netmask is commonly used on many Class C IP networks Gateway IP Enter the IP address of the gateway device Typically this is the IP address of the host router which provides the point of connection to the Internet This can be a DSL modem cable modem or WISP gateway router The device directs data packets to the gateway if the destination host is not within the local network Note In Bridge mode the gateway IP address used for management purposes only should be from the same address space on the same network segment as the device Primary DNS IP Enter the IP address of the primary DNS Domain Name System server This is used for management purposes only Secondary DNS IP Enter the IP address of the secondary DNS server This entry is optional and used only if the primary DNS server is not responding It is used for management purposes only MTU Available in Simple view Enter the desired MTU value The default is 7500 STP Available in Simple view Select this option to enable the STP feature Multiple interconnected bridges create larger networks Spanning Tree Protocol STP eliminates loops from the topology while finding the shortest path within a
70. led The device does not assign local IP addresses DHCP Server DISABLED ENABLED RELAY Enabled The device assigns IP addresses to client devices on the local network DHCP Server DISABLED ENABLED l RELAY Range Start 1216842 ER Range End 192 168 1 254 Netmask 255 255 255 0 Lease Time 600 DNS Proxy Enable Range Start and End Determines the range of IP addresses assigned by the DHCP server Netmask Defines the device IP classification for the chosen IP address range 255 255 255 0 is a typical netmask value for Class C networks which support an IP address range of 192 0 0 x to 223 255 255 x A Class C network netmask uses 24 bits to identify the network alternative notation 24 and 8 bits to identity the host The netmask is used to identify the subnet to which an IP address belongs Lease Time Defines the duration for which IP addresses assigned by the DHCP server are valid Increasing the time ensures client operation without interruption but could introduce potential conflicts Decreasing the lease time avoids potential address conflicts but might cause more slight interruptions to the client while it acquires a new IP address from the DHCP server The time is expressed in seconds DNS Proxy If this option is enabled the device LAN port will act as the Domain Name System DNS proxy server and will forward DNS requests from hosts on the local network to the real DNS serve
71. ll indicate that the password is Too Short if it has fewer than eight characters As you enter the new password airOS will indicate its strength Weak Normal or Strong Note The password length is 4 characters minimum and 63 characters maximum we recommend using at least 8 characters Verify New Password Re enter the new password for the administrator account Change Click Change to save the new password Cancel Click Cancel to discard the new password Location Latitude and longitude define the device s coordinates Location Latitude Longitude Latitude Enter the latitude of the device s location Valid values for latitude are 90 to 90 Longitude Enter the longitude of the device s location Valid values for longitude are 180 to 180 Device Maintenance This section manages the device maintenance routines reboot and support information reports Device Maintenance Reboot Device REBOOT Support Info DOWNLOAD Reboot Device Click Reboot to initiate a full reboot cycle of the device Reboot is the same as the hardware reboot which is similar to the power off and power on cycle The system configuration stays the same after the reboot cycle completes Any changes that have not been applied are lost Support Info Click Download to generate and download a support information file that Ubiquiti support engineers can use when providing customer support This file only needs to be gene
72. llation The device acts as the demarcation demarc point between the CPE and Wireless Internet Service Provider WISP with the wireless interface of the device connecting to the WISP There can be only one WAN interface but there can be many LAN interfaces The following diagram shows the NanoBeam ac at a residence wirelessly connecting to a WISP tower NanoBeam ac WISP Tower Configuration Mode The Network page has two views Simple and Advanced Configuration Mode Configuration Mode Simple S Simple The following basic configuration settings are available advanced configuration settings are hidden Network Role on page 16 4 Configuration Mode on page 17 The following settings are available in Bridge mode only 4 Management Network Settings on page 17 The following settings are available in Router mode only 44 WAN Network Settings on page 18 44 LAN Network Settings on page 22 Port Forwarding on page 26 Multicast Routing Settings on page 27 S Ubiquiti Networks Inc Chapter 4 Network Advanced Displays the advanced configuration settings in addition to the basic configuration settings 4 Management Network Settings on page 17 Router mode only 44 Interfaces on page 23 4 IP Aliases on page 23 4 VLAN Network on page 24 4 Bridge Network on page 24 4 Firewall on page 25 4 Static Ro
73. m access credentials required for communication between two airOS devices Administrator username and password are required to establish the TCP IP based throughput test Enter the administrator password Select one of three directions e Estimates the incoming RX and outgoing TX throughput at the same time e Estimates the incoming RX throughput nit Estimates the outgoing TX throughput Enter the number of seconds the test should last The default is 30 seconds Click Start to start the test S Ubiquiti Networks Inc Chapter 7 Tools and Information The results are displayed on a speedometer dial and in five result categories Speed Test Select Destination IP specify manually t G 192 168 1 21 Remote WEB port User Password Direction Duration AVG RX AVG TOTAL 137 92 Mbps 137 81 Mbps 275 73 Mbps MAX RX 137 92Mbps 137 81 Mbps Displays the estimated average of incoming throughput Displays the estimated average of outgoing throughput Displays the estimated average of aggregate throughput Displays the maximum of incoming throughput Displays the maximum of outgoing throughput Cable Test The Cable Test tool is a diagnostics tool for checking your Ethernet cabling to see if any of the wires are incorrectly connected Cable Test X CABLE LENGTH SNR dB STATUS DISTANCE TO FAULT m lt 20 meters 30 30 12345678 30 30 Displays the length of the cable
74. nabled Select this option to enable bandwidth control on the device Enabled Displays the status of the rule Enabled Yes or Disabled No Interface Displays the name of the interface Ingress Displays the ngress status Enabled or Disabled Ingress Rate kbps Displays the maximum ingress bandwidth Ingress Burst kB Displays the maximum amount of data in kilobytes allowed to burst beyond the ngress Rate Egress Displays the Egress status Enabled or Disabled Egress Rate kbps Displays the maximum egress bandwidth Egress Burst kB Displays the maximum amount of data in kilobytes allowed to burst beyond the Egress Rate S Ubiquiti Networks Inc Chapter 4 Network Add Click Add to create a traffic shaper rule Go to the Add or Edit a Traffic Shaper Rule section below Action After a traffic shaper rule has been created you have the following options Edit Make changes to a traffic shaper rule Go to the Add or Edit a Traffic Shaper Rule section below Delete Remove a traffic shaper rule Add or Edit a Traffic Shaper Rule The Traffic Shaper Rule window opens Traffic Shaper Rule X Enabled Interface WLANO Ingress ka Rate kbps Burst 0 kB Egress La Rate kbps Burst 0 kB RE Enabled Select this option to enable the specific rule All the added rules are saved in the system configuration file however only the enabled rules are active on the d
75. nal network as if it were the host device that is specified with the DMZ IP address DMZ Management Ports is disabled by default the device is accessible from the WAN port If DMZ Management Ports is enabled all management ports will be forwarded to the device so you ll only be able to access the device from the LAN side The default values of the management ports are Management Method HTTP HTTPS 80 443 TCP SSH 22 TCP Telnet 23 TCP SNMP 161 UDP Discovery 10001 UDP airView 18888 TCP DMZIP Enter the IP address of the local host network device The DMZ host device will be completely exposed to the external network Auto IP Aliasing If enabled automatically generates an IP address for the corresponding WLAN LAN interface The generated IP address is a unique Class B IP address from the 169 254 X Y range netmask 255 255 0 0 which is intended for use within the same network segment only The Auto IP always starts with 169 254 X Y with X and Y as the last two octets from the MAC address of the device For example if the MAC is 00 15 6D A3 04 FB then the generated unique Auto IP will be 169 254 4 251 The Auto IP Aliasing setting can be useful because you can still access and manage devices even if you lose misconfigure or forget their IP addresses Because an Auto IP address is based on the last two octets of the MAC address you can determine the IP address of a device if you know its MAC address MAC Address Cloning
76. need complete Layer 2 transparency This is similar to using a switch all traffic flows through a bridge in one port and out another port regardless of VLANs or IP addresses For example if you want to use the same IP subnet on both sides of a device then you create a bridge network There are many different scenarios that could require bridged interfaces so the Bridge Network section is designed to allow flexibility Click the Bridge Network section to display its contents Bridge Network Enabled Displays the status of the bridge network Enabled Yes or Disabled No Interface Displays the name of the interface STP Displays the STP status Enabled or Disabled Ports Displays the ports used for the bridge network Comment Displays a brief description of the purpose for the bridge network Add Click Add to create a bridge network Go to the Add or Edit a Bridge Network section below Action After a bridge network has been created you have the following options Edit Make changes to a bridge network Go to the Add or Edit a Bridge Network section below Delete Remove a bridge network A bridge configured as a management interface cannot be deleted Add or Edit a Bridge Network The Bridge Network window opens Bridge X Enabled Interface BRIDGE2 STP O Available Ports Selected Ports ADD Ports REMOVE Comment RE Enabled Select this option to enable the specifi
77. network If enabled the device bridge communicates with other network devices by sending and receiving Bridge Protocol Data Units BPDU STP should be disabled default setting when the device is the only bridge on the LAN or when there are no loops in the topology as there is no need for the bridge to use STP in this case S Ubiquiti Networks Inc Chapter 4 Network Management VLAN Available in Simple view Select this option to automatically create a management Virtual Local Area Network VLAN If this option is enabled the device will not be accessible from other VLANs including tagged VLANs VLAN ID Enter a unique VLAN ID from 2 to 4094 Auto IP Aliasing Select this option to automatically generate an IP address for the corresponding WLAN LAN interface The generated IP address is a unique Class B IP address from the 169 254 X Y range netmask 255 255 0 0 which is intended for use within the same network segment only The Auto IP always starts with 169 254 X Y with X and Y as the last two octets from the MAC address of the device For example if the MAC is 00 15 6D A3 04 FB then the generated unique Auto IP will be 169 254 4 251 The Auto IP Aliasing setting can be useful because you can still access and manage devices even if you lose misconfigure or forget their IP addresses Because an Auto IP address is based on the last two octets of the MAC address you can determine the IP address of a device if you k
78. ng Lease Hostname 00 1E EC 9A B5 EE 192 168 161 56 00 06 30 n500 REFRESH MAC Address Displays the client s MAC address IP Address Displays the client s IP address Remaining Lease Displays the remaining time of the leased IP address assigned by the DHCP server Hostname Displays the device name of the client Refresh To update the information click Refresh Configure DHCP on the Network page See DHCP on page 19 for additional details airOS 7 User Guide Link The Link section displays link information and statistics for the device as well as all access points APs or stations to which it is connected Capacity Throughput Latency 0 ms By default the Link section is minimized as shown above click to maximize the section and display the information described in Access Point Info and Station Info on page 7 Wireless Mode Displays the operating mode of the radio interface airOS supports four operating modes not all products support all modes Station PTP Station PTMP Access Point PTP and Access Point PTMP The default setting is device specific Configure the Wireless Mode on the Wireless tab see Basic Wireless Settings on page 10 for additional details Any airMAX ac series device may operate in only one of these modes at a time For example if the device is running in an Access Point mode it cannot simultaneously run in a Station mode SSID Displays the wireless network name
79. nity ubnt com Downloads downloads ubnt com 2580 Orchard Parkway San Jose CA 95131 www ubnt com 2015 Ubiquiti Networks Inc All rights reserved Ubiquiti Ubiquiti Networks the Ubiquiti U logo the Ubiquiti beam logo airMAX airOS airView NanoBeam PowerBeam and Rocket are trademarks or registered trademarks of Ubiquiti Networks Inc in the United States and in other countries WPA and WPA2 are trademarks of the Wi Fi Alliance All other trademarks are the property of their respective owners S Ubiquiti Networks Inc Appendix A Contact Information Al021815 42
80. now its MAC address Router Mode Management Interface Available in Advanced view Select the interface used for management Management Network Settings v Y Management Interface LANO WAN Network Settings Available in Router mode only WAN Network Settings WAN Interface LANO WAN IP Address Lt i STATIC PPPOE DHCP Fallback IP 192 168 1 10 DHCP Fallback Netmask 255 255 255 0 MTU 1500 NAT o Block management access DMZ Auto IP Aliasing O O MAC Address Cloning Q WAN Interface Select the interface used for connection to the external network Internet WAN IP Address The IP address of the WAN interface connected to the external network You can use this IP address for routing and device management purposes airOS 7 User Guide The device can use one of the following DHCP on page 19 44 Static on page 20 44 PPPoE on page 21 DHCP The external DHCP server assigns a dynamic IP address gateway IP address and DNS address to the device WAN IP Address DHCP static PPPOE DHCP Fallback IP 192 168 1 10 DHCP Fallback Netmask 255 255 255 0 NAT La NAT Protocol SIP Lo PPTP M FIP Lo RTSP Loi Block management access DMZ DMZ Management Ports DMZ IP Auto IP Aliasing MAC Address Cloning MAC Address IM DHCP Fallback IP Enter the IP address for the device
81. nting Server Secret EAP Station PTP or Station PTMP Mode The options below apply in Station PTP or Station PTMP mode only Wireless Security Security WPA2 AES WPA Authentication EAP EAP Type EAP TTLS MSCHAPV2 WPA Anonymous Identity WPA User Name TE WPA User Password SHOW EAP Type Select the authentication protocol EAP TTLS or EAP PEAP and the inner authentication protocol MSCHAPV2 WPA Anonymous Identity Enter the identification credential used by the supplicant for EAP authentication in unencrypted form WPA User Name Enter the identification credential used by the supplicant for EAP authentication WPA User Password Enter the password credential used by the supplicant for EAP authentication Show Click Show if you want to view the characters of the WPA User Password Signal LED Thresholds You can configure the LEDs on the device to light up when received signal levels reach the values defined in the following fields This allows a technician to easily deploy an airOS 7 CPE without logging into the device for example for antenna alignment operation Signal LED Thresholds LEDO LED1 LED2 LED3 ee Sr el PS Thresholds dBm Thresholds dBm The number of LEDs is device specific and the default values vary depending on the number of LEDs The specified LED will light up if the signal strength reaches the value set in the field
82. oaded firmware file is displayed You have two options Update Click Update to confirm After the device reboots the firmware update process will be completed Discard Click Discard to cancel If the firmware update is in process you can close the firmware update window but this does not cancel the firmware update Please be patient as the firmware update routine can take three to seven minutes You cannot access the device until the firmware update routine is completed A WARNING Do not power off do not reboot and do not disconnect the device from the power supply during the firmware update process as these actions will damage the device Device The Device Name host name is the system wide device identifier The SNMP agent reports it to authorized management stations The Device Name will be used in popular router operating systems registration screens and discovery tools Device Device Model RSAC Lite Device Name Interface Language Engish zs External Reset Device Model Displays the abbreviated model name of the device Device Name Enter a host name or identifier for the device Interface Language Select the language used in the web management interface English is the default language External Reset Select this option to enable remote PoE reset functionality To prevent an accidental reset to default settings disable this option disables the remote PoE reset functionality Note You c
83. on initial login the Terms of Use appear on the login screen Enter ubnt in the Username and Password fields and select the appropriate choices from the Country and Language drop down lists Check the box next to l agree to these terms of use and click Login aros LOGIN Password 4 Upon subsequent login the standard login screen appears Enter ubnt in the Username and Password fields and click Login aros LOGIN k Please login to manage your wireless device Username Password Note To enhance security we recommend that you change the default login on the System page For details go to System Accounts on page 34 S Ubiquiti Networks Inc Chapter 1 Overview airMAX ac Series Product Verification The airOS Configuration Interface will display the following logo in the lower left corner of the screen if the product is genuine I A GENUINE X PRODUCT If the authenticity of the Ubiquiti product cannot be verified airOS will display the error message below Please contact Ubiquiti at supporte ubnt com regarding this product Initialization Error An initialization error has occurred Please contact us at support ubnt com with the support info file and reference error code A12 To get support info file press here Navigation The airOS Configuration Interface contains five main pages listed in the navigation bar on the left side of the interface Each web based management page
84. p wX XXX Es x qq amp Ones Ra beeen A ertgpepebsgegesg Ae 95 59 2 v 95 549 The RF Performance section contains the following information Signal Available in Access Point PTMP mode Displays the signal level in dBm RX Chain 0 1 Available in Access Point PTMP mode Displays the wireless signal level in dBm of each chain Remote RX Signal Available in Access Point PTMP mode Displays the received signal level at the station in dBm Remote RX Chain 0 1 Available in Access Point PTMP mode Displays the wireless signal level in dBm of each chain on the remote device S Ubiquiti Networks Inc Chapter 2 Main Remote TX Power The transmit power level of the remote device TX Bytes Available in Access Point PTMP mode Displays the total amount of data in bytes transmitted and received by the station during the connection time TX RX Airtime Available in Access Point PTMP mode Displays the transmit and receive airtime values The airtime is the averaged wireless bandwidth utilization percentage of theoretical transmission maximum for both failed and successful transmission attempts TX Capacity Available in Access Point PTMP mode Displays the transmit capacity in Mbps that the station would have if it were the only station on the network RX Capacity Available in Access Point PTMP mode Displays the receive capacity in Mbps that the station would have if it were the
85. r This option is enabled by default If disabled specify the following Primary DNS Enter the IP address of the primary DNS server Secondary DNS Enter the IP address of the secondary DNS server Relay Relays DHCP messages between DHCP clients and DHCP servers on different IP networks DHCP Server DISABLED ENABLED RELAY DHCP Server IP Agent ID 22 airOS 7 User Guide DHCP Server IP Enter the IP address of the DHCP server that should get the DHCP messages Agent ID Enter the identifier of the DHCP relay agent UPnP Enables Universal Plug and Play UPnP network protocol for gaming video chat conferencing and other applications Add LAN Select an interface and then click Add Interfaces Available in Advanced view You can configure a different MTU for any interface If it is an Ethernet interface you can also configure the speed Click the Interfaces section to display its contents Interfaces Enabled 4 Interface MTU Speed Action Yes WLANO 1500 f emm Yes BRIDGEO 1500 tom Yes LANO 1500 Auto EDIT Enabled Displays the status of the interface Enabled Yes or Disabled No Interface Displays the name of the interface MTU Displays the MTU value Speed Displays the speed and duplex mode of the Ethernet interface Action Click Edit to change the Enabled status MTU or Speed The Interface window opens Interface X Enabled Interface LANO M
86. r the TCP IP port of the SSH server The default is 22 Password Authentication Enabled by default You must authenticate using administrator credentials to grant SSH access to the device otherwise an authorized key is required 30 airOS 7 User Guide Authorized Keys Click Edit to import a public key file for SSH access to the device instead of using an admin password The SSH Authorized Keys window opens SSH Authorized Keys x Import Public Key File BROWSE Enabled Type Key Comment Action No keys available Browse Use this option to add a new key Click Browse to locate the new key file Select the file and click Open to import the file for SSH access Enabled Select this option to enable the specific key All of the added keys are saved in the system configuration file however only the enabled keys are active on the device Type Displays the type of key Key Displays the key Comment You can enter a brief description of the key You can edit this field for multiple keys at the same time Action You have the following options Remove Deletes a public key file OK Click OK to save changes Cancel Click Cancel to discard changes Telnet Server This section manages the Te net Server parameters Telnet Server Telnet Server C Server Port Telnet Server Select this option to enable Telnet access to the device Server Port Enter the TCP IP port of the Telnet server The defa
87. r the user name of the DDNS account Password Enter the password of the DDNS account Show Click Show to display the password characters 31 airOS 7 User Guide System Log Every logged message contains at least a system time and specific service name that generates the system event Messages from different services have different contexts and different levels of detail Usually error warning or informational system service messages are reported however more detailed debug level messages can also be reported The more detailed the system messages reported the greater the volume of log messages generated System Log System Log Remote Log C Remote Log IP Address Remote Log Port System Log Enabled by default The device runs the registration routine of system log syslog messages Remote Log Select this option to enable the syslog remote sending function System log messages are sent to a remote server which is specified in the Remote Log IP Address and Remote Log Port fields Remote Log IP Address Enter the host IP address that receives syslog messages Properly configure the remote host to receive syslog protocol messages Remote Log Port Enter the TCP IP port that receives syslog messages 514 is the default port for commonly used system message logging utilities Device Discovery This section manages the Device Discovery parameters Device Discovery Discovery La CDP D Discovery Enabled by
88. rated at their request S Ubiquiti Networks Inc Chapter 6 System Configuration Management This section manages the device configuration routines and the option to reset the device to factory default settings The device configuration is stored in a plain text file cfg file You can back up restore or update the system configuration file Configuration Management Back Up Configuration DOWNLOAD Upload Configuration BROWSE Reset to Factory Defaults RESET Back Up Configuration Click Download to download the current system configuration file Note We strongly recommend that you save the configuration file in a secure location because the configuration file includes confidential information such as WPA2 keys in plain text Upload Configuration Click Browse to locate the new configuration file Select the file and click Open to upload the file We recommend that you back up your current system configuration before uploading the new configuration Note Use only configuration files for the same type of the device Behavior may be unpredictable if you mix configuration files from different types of devices For example upload an R5AC Lite configuration file to an RBAC Lite do NOT upload an R5AC Lite configuration file to an RSAC PTP The uploaded configuration file is displayed You have two options Apply Click Apply to confirm After the device reboots the settings of the new conf
89. sk 0 0 0 0 0 Public IP Mask 0 0 0 0 0 Public Port Comment Enabled Select this option to enable the specific static route All the added static routes are saved in the system configuration file however only the enabled static routes are active on the device Interface Select the interface to which the port forwarding rule will be applied S Ubiquiti Networks Inc Chapter 4 Network Private IP Enter the IP address of the local host that needs to be accessible from the external network Private Port Enter the TCP or UDP port of the application running on the local host The specified port will be accessible from the external network Type Enter the Layer 3 protocol IP type that needs to be forwarded from the local network Source IP Mask Enter the IP address and netmask of the source device Public IP Mask Enter the public IP address and netmask of the device that will accept and forward the connections from the external network to the local host Public Port Enter the TCP or UDP port of the device that will accept and forward the connections from the external network to the local host Comment Enter a brief description of the port forwarding functionality such as FTP server web server or game server OK Click OK to save changes Cancel Click Cancelto discard changes Multicast Routing Settings Available in Router mode only With a multicast design applications can send one copy of e
90. tchdog The default value is 300 seconds The Startup Delay value should be at least 60 seconds as the network interface and wireless connection initialization takes a considerable amount of time if the device is rebooted Failure Count to Reboot Enter the number of ICMP echo response replies If the specified number of ICMP echo response packets is not received continuously Ping Watchdog will reboot the device The default value is 3 Save Support Info Select this option to generate a support information file in case the Ping Watchdog will reboot the device SNMP Agent Simple Network Management Protocol SNMP is an application layer protocol that facilitates the exchange of management information between network devices Network administrators use SNMP to monitor network attached devices for issues that warrant attention The device contains an SNMP agent which does the following Provides an interface for device monitoring using SNMP Communicates with SNMP management applications for network provisioning Allows network administrators to monitor network performance and troubleshoot network problems SNMP Agent SNMP Agent C SNMP Community Contact Location For the purpose of equipment identification configure the SNMP agent with contact and location information SNMP Agent Select this option to enable the SNMP agent SNMP Community Enter the SNMP community string It is required to authenticate ac
91. to use if an external DHCP server is not found DHCP Fallback Netmask Enter the netmask for the device to use if an external DHCP server is not found MTU Available in Simple view The Maximum Transmission Unit MTU is the maximum frame size in bytes that a network interface can transmit or receive The default is 7500 NAT Network Address Translation NAT is an IP masquerading technique that hides private network IP address space on the LAN interface behind a single public IP address on the WAN interface NAT is implemented using the masquerade type firewall rules NAT firewall entries are stored in the iptables nat table Specify static routes to allow packets to pass through the airOS device if NAT is disabled NAT Protocol To disable NAT traversal for the SIP PPTP FTP or RSTP protocols uncheck the respective box es Block management access To block device management from the WAN interface check this box This feature makes Router mode more secure if the device has a public IP address DMZ DMZ Demilitarized Zone specifically allows one computer device behind NAT to become demilitarized so all ports from the public network are forwarded to the ports of this private network similar to a 1 1 NAT S Ubiquiti Networks Inc Chapter 4 Network e DMZ Management Ports The airOS device responds to requests from the external network as if it were the host device that is specified with the DMZ IP address DMZ
92. to invert the Destination Port filtering criterion For example if you enable nvert for the specified Destination Port 23 then the filtering criteria will be applied to all the packets sent to any Destination Port except 23 Comment You can enter a brief description of the purpose for the firewall rule Click OK to save changes or click Cancel to close the window without saving changes Static Routes Available in Advanced view You can manually add static routing rules to the system routing table you can set a rule that a specific target IP address or range of IP addresses passes through a specific gateway Click the Static Routes section to display its contents Static Routes Enabled 4 Target Network IP Netmask Gateway IP Comment tin No data available Enabled Displays the status of the route Enabled Yes or Disabled No Target Network IP Displays the IP address of the destination Netmask Displays the netmask of the destination Gateway IP Displays the IP address of the gateway Comment Displays a brief description of the purpose for the static route S Ubiquiti Networks Inc Chapter 4 Network Add Click Add to create a static route Go to the Add or Edit a Static Route section below Action After a static route has been created you have the following options Edit Make changes to a static route Go to the Add or Edit a Static Route section below e Delete Remove a static route
93. tworks Inc Chapter 2 Main Refresh To update the information click Refresh Configure firewall rules on the Network page See Firewall on page 25 Bridge mode or Firewall on page 25 Router mode for additional details Port Forward Available if Port Forwarding is enabled in Router mode Click Port Forward to list all port forwarding rules Chain PORTFORWARD 1 references n pkts bytes target prot opt in out source ge destination e n out source DNAT udp athe 0 0 0 0 0 0e 0 0 0 e udp dpt 5 to 192 168 100 10 REFRESH Port forwarding allows you to connect to a specific service such as an FTP server or web server Port forwarding creates a transparent tunnel through a firewall NAT granting access from the WAN side to the specific network service running on the LAN side Chain PortForward Displays active port forward entries in the PREROUTING chain of the standard iptables nat table while the device is operating in Router mode Refresh To update the information click Refresh Configure port forwarding rules on the Network page See Port Forwarding on page 26 for additional details DHCP Leases Available if DHCP is enabled on the Network page Click DHCP Leases to display the current status of the IP addresses assigned by the device s DHCP server to its local Clients INTERFACES PPPOE INFORMATION ARP TABLE ROUTES FIREWALL PORT FORWARD DHCP LEASES MAC Address 4 IP Address Remaini
94. ude Transparent Layer 2 Bridge Dynamic Configuration Changes Router EES SEER airOS v7 1 Wireless Modes HTML5 Technology Optimization for Mobile Devices airOS v7 1 supports the following wireless modes Access Point PtP Access Point Point to MultiPoint PtMP Station PtP Station PtMP Detailed Device Statistics Comprehensive Array of Diagnostic Tools including Ethernet Cabling Test RF Diagnostics and airView Spectrum Analyzer Channel selection varies by product model S Ubiquiti Networks Inc 1 airOS 7 User Guide System Requirements Microsoft Windows 7 Windows 8 Linux or Mac OS X Web Browser Mozilla Firefox Apple Safari Google Chrome or Microsoft Internet Explorer 11 or above Note The minimum supported version is Microsoft Internet Explorer 9 For best results we recommend using version 11 or above Getting Started To access the airOS Configuration Interface perform the following steps 1 Configure the Ethernet adapter on your computer with a static IP address on the 192 168 1 x subnet for example IP address 792 168 1 100 and subnet mask 255 255 255 0 2 Launch your web browser Enter https 192 168 1 20 in the address field Press Enter PC or Return Mac https 192 168 1 20 Note airOS 7 does not support legacy products such as AirRouter Legacy support will be provided in the future through firmware upgrade 3 Up
95. uencies 5 735GHz 5 74GHz 5 745GHz 5 75GHz 5 755GHz 5 76GHz 5 765GHz 5 77GHz 5 775GHz 5 78GHz 5 785GHz 5 79GHz 5 795GHz 5 8GHz 5 805GHz 5 81GHz 5 815GHz 5 82GHz 5 825GHz 5 83GHz 5 835GHz 5 84GHz Country Selectable SSID s must be visible have compatible channel bandwidth and security settings and must be compatible with airMAX AC technology Search QD MAC Address E Device Name Encryption Signal Noise dBm Frequency GHz Channel Width Auto 20 40 80 MHz 04 18 D6 4E 01 05 Performance 11AC Rocket SAC PTP a WPA2 89 96 5 835 Frequency List MHz C 04 18 D6 4E 9C 7E ubnt ac test PowerBeam SAC 620 E NONE 67 96 5 735 04 18 D6 4E E2 1B SAC Rocket SAC Lite AP a NONE 45 96 5 735 04 18 D6 92 72 AF ubnt123 Rocket SAC PTMP ai NONE 59 96 5 78 Calculate EIRP Limit La Antenna Gain 0 dBi Cable Loss 0 Output Power The Site Survey tool will search for available wireless geb x lt networks in range on all supported channels and allow Distance 7 04 miles 0 6 km you to select one for association In case the selected network uses encryption you ll need to configure the Max TX Rate Auto Wireless Security settings S Ubiquiti Networks Inc 11 airOS 7 User Guide Search Enter the keyword to search for the desired AP Lock to AP Select the AP from the list Click Lock to AP to allow the station to always maintain a connection to an AP with
96. ult is 23 S Ubiquiti Networks Inc Chapter 5 Services NTP Client Network Time Protocol NTP is a protocol for synchronizing the clocks of computer systems over packet switched variable latency data networks You can use it to set the real system time on the device If the System Log option is enabled then the system time is reported next to every log entry that registers a system event NTP Client NTP Client C NTP Server NTP Client Select this option to enable the device to obtain the system time from a time server on the Internet NTP Server Enter the IP address or domain name of the NTP server The default is O ubnt pool ntp org Dynamic DNS Domain Name System DNS translates domain names to IP addresses each DNS server on the Internet holds these mappings in its respective DNS database Dynamic Domain Name System DDNS is a network service that notifies the DNS server in real time of any changes in the device s IP settings Even if the device s IP address changes you can still access the device through its domain name Dynamic DNS Dynamic DNS Q Service Host Name Username Password Dynamic DNS Select this option to enable the device to communicate with the DDNS server Service If available select your DDNS service provider from the drop down list Host Name Enter the host name of the device that has to be updated on the DDNS server For example sample ddns com Username Ente
97. utes on page 26 44 Traffic Shaping on page 28 Management Network Settings Bridge Mode Management Network Settings DHCP STATIC DHCP Fallback IP 192 168 1 10 Management IP Address DHCP Fallback Netmask MTU STP Management VLAN VLAN ID Auto IP Aliasing Management Interface Available in Advanced view Select the interface used for management Management IP Address Keep the default DHCP if the device obtains an IP address from its DHCP server or click Static if the device uses a static IP address DHCP The local DHCP server assigns a dynamic IP address gateway IP address and DNS address to the device DHCP STATIC DHCP Fallback IP 192 168 1 10 Management IP Address DHCP Fallback Netmask DHCP Fallback IP Enter the IP address for the device to use if a DHCP server is not found DHCP Fallback Netmask Enter the netmask for the device to use if a DHCP server is not found Static Assign static IP settings to the device Note IP settings should be consistent with the address space of the device s network segment airOS 7 User Guide DHCP STATIC IP Address 192 168 1 20 Gateway IP 192 168 1 1 Management IP Address Primary DNS IP I Secondary DNS IP IP Address Enter the IP address of the device This IP will be used for device management purposes Netmask Enter the netmask of the device When the netmask is expanded into
98. vailable ADO Enabled Displays the status of the IP alias Yes or No Interface Displays the name of the interface IP Address Displays the alternative IP address Netmask Displays the network address space identifier for the IP alias Comment Displays a brief description of the purpose for the IP alias Add Click Add to create an IP alias Refer to Add or Edit an IP Alias on page 23 Action After an IP alias has been created you have the following options Edit Make changes to an IP alias Refer to Add or Edit an IP Alias on page 23 Delete Remove an IP alias Add or Edit an IP Alias The P Alias window opens IP Alias X Enabled Interface BRIDGEO ERRORES ee eee Comment I Rc red Em Enabled Select this option to enable the specific IP alias All the added IP aliases are saved in the system configuration file however only the enabled IP aliases are active on the device Interface Select the appropriate interface IP Address Enter the alternative IP address for the interface This can be used for routing or device management purposes Netmask Enter the network address space identifier for the IP alias 23 airOS 7 User Guide Comment You can enter a brief description of the purpose for the IP alias Click OK to save changes or click Cancel to close the window without saving changes VLAN Network Available in Advanced view You can create multipl
99. vice The DMZ host device will be completely exposed to the external network 21 airOS 7 User Guide Auto IP Aliasing If enabled automatically generates an IP address for the corresponding WLAN LAN interface The generated IP address is a unique Class B IP address from the 169 254 X Y range netmask 255 255 0 0 which is intended for use within the same network segment only The Auto IP always starts with 169 254 X Y with X and Y as the last two octets from the MAC address of the device For example if the MAC is 00 15 6D A3 04 FB then the generated unique Auto IP will be 169 254 4 251 The Auto IP Aliasing setting can be useful because you can still access and manage devices even if you lose misconfigure or forget their IP addresses Because an Auto IP address is based on the last two octets of the MAC address you can determine the IP address of a device if you know its MAC address MAC Address Cloning When enabled you can change the MAC address of the respective interface This is especially useful if your ISP only assigns one valid IP address and it is associated to a specific MAC address This is usually used by cable operators or some WISPs MAC Address Enter the MAC address you want to clone to the respective interface This becomes the new MAC address of the interface LAN Network Settings Available in Router mode only LAN Network Settings LAN Interface DEL IP Address 10 10 1091 SEA Netmask
100. wu UBIQUITI N E T WORKS al OS 7 Operating System for Ubiquiti airMAX ac Series Products Release Version 7 1 USER GUIDE airOS97 User Guide Table of Contents Table of Contents Chapter 1 Overview III 1 Intro dc COT T oe naw FREUE REESE a UM RF aep UN ORE UU HUE Vt EEREN 1 SUDBOLTBdPIOOUEES ooo EE EE 1 airOS v7 1 NOBVOICIMIDOGBS LL xad ou VOR AERE d EATER saci h aod eR OS oo LG RESCUE ees 1 airOS v7 1 Wireless Modes EE 1 System e UE nn EE 2 Getting e E T P 2 airMAX ac Series Product Verification cc cece cece cece eee e tenet eeeeeaeees 2 Kerg Lei EE 2 aros NOUNCIHONS EE 3 Chapter 2 Main bc iius os mr RRERAS EU EPOPSPREEXAT E UE EE EE A 4 pru T PP 4 CR perea EE EE E E E E EE ES ES 7 DS ed EE 9 Chapter 3 Wireless e 10 Basic Wireless Settings ves esaweaewerstenebere ey v FREE Eae esed n va RA RE 10 Wireless SECUN A e nea E pata eR a admo Tarea dread ob Race RP Ee hats T3 Signal CED ThESSEIOICIS S scrvtan neers ee dcace oa nis nod c Dart dereud oath bee sneer aes 14 e gno S aig eae Foe 15 Chapter 4 Network 00 c cc ccc ccc cece II 16 Netwoik ROIG o reece gana en ene besa ded cutee aa ead vata sm bane edis dits 16 Configuration MOU is oe xxt ek CO RV REIR FUE UID PREGA AIT E 17 Management Network Gettng s ehh 17 WAN Network Settings visse V pee mide a ENDE neq vx
101. y Displays the actual operating frequency center and operating frequency range in MHz which depends on the channel width being used If DFS is displayed next to the frequency this indicates that the selected channel has DFS Dynamic Frequency Selection capabilities Channel Width This is the spectral width of the radio channel used by the device airOS v7 1 supports 10 20 30 40 50 60 and 80 MHz however available channel widths are device specific Default values are as follows Access Point PTP mode Default is 80 MHz Access Point PTMP mode Default is 40 MHz Station PTP mode Default is Auto 20 40 80 MHz Station PTMP mode Default is Auto 20 40 MHz RX Signal Not available in Access Point PTMP mode Displays the received signal level in dBm RX Chain 0 1 Not available in Access Point PTMP mode Displays the wireless signal level in dBm of each chain TX Rate Not available in Access Point PTMP mode Displays the transmit data rate 7x BPSK 1x1 2x QPSK 1x1 4x 16QAM 2x2 6x 64QAM 2x2 and 8x 256QAM 2x2 RX Rate Not available in Access Point PTMP mode Displays the received data rate 7x BPSK 1x1 2x OPSK 1x1 4x 16QAM 2x2 6x 64QAM 2x2 and 8x 256QAM 2x2 Capacity Throughput Displays the current data transmission rate data reception rate and latency in graphical and numerical form The chart scale and throughput dimension bps Kbps Mbps change dynamically depending on the me
102. z Calculate EIRP Limit Aggregation Frames Antenna Gain Cable Loss Output Power a dBm Auto Adjust Distance Distance miles 0 6 km Max TX Rate 2 Tools gt Info Log Wireless Mode Specify the Wireless Mode of the device The mode depends on the product model and network topology requirements airOS v7 1 supports the following modes Chapter 3 Wireless The Wireless page contains everything needed to set up the wireless part of the link including the wireless mode SSID channel and frequency output power data rates and wireless security Access Point PTP If you have a single device to act as an access point AP in a Point to Point PtP link configure it as Access Point PTP mode The device functions as an AP that connects a single client device the client device which must be in Station PTP mode Basic Wireless Settings Configure the basic wireless settings Antenna Gain Antenna Gain Basic Wireless Settings Basic Wireless Settings Wireless Mode Access Point PTP Wireless Mode Access Point PTP Country United States Country United S A Channel Width 7 80 MHz Channel Width 7 80 MHz Frequency List MHz O Frequency List MHz CQ Frequency MHz Auto Frequency MHz Auto 4 Calculate EIRP Limit La Calculate EIRP Limit Cable Loss ice ee i dB Cable Loss Gor ea dB Output Power dBm Output Power

airOS 7 User Guide - Ubiquiti Networks

Contents

Download Pdf Manuals

Related Search

Related Contents