NP731 User Guide
Contents
1. O Logout NetCommWireless gt g gt N 5 i System AP Firewall Utilities Status Operating Mode Network Interface Management CAPWAP IPv6 General Home gt System gt System Information System Information Name NetComm NP731 Description Outdoor Dual Band WiFi N Access Point Location Australia Time Device Time 2000 01 01 20 10 59 Time Zone GMT 10 00 Canberra Melbourne Sydney v Time O Enable NTP Manually set up NTP Server 1 0 netcomm pool ntp org NTP Server 2 1 netcomm pool ntp org FIELD DESCRIPTION System Information Name This is aname to identify the access point on the network and is a mandatory field An optional field used to describe the access point This is useful for identification purposes where multiple access points are Description being used An optional field that describes the location of the access point This is useful for identification purposes where multiple access Location points are being used Device Time Displays the time on the device NP731 User Guide www netcommwuwireless com 14 Ver 1 0 gt gt NetCommWireless Operating Mode The Operating Mode tab allows you to select between Access Point or CPE mode To change the mode of operation select the desired option and then click the Save button Click the OK button on the pop up confirmation window to reboot the access point so that the change ca2. 2 48 29 5 88 35 07 Plot AP O LAN Interface MAC Address IP Address Subnet Mask Gateway capwap Status 00 1F D4 03 1B 28 192 168 1 254 255 255 255 0 192 168 1 1 Disabled Firewall WDS Link Status N 5 Utilities Status Event Log Monitor System Overview amp Radio Status MAC Address 00 1F D4 03 1B 29 Band 802 11g n Channel 6 TX Power 20 dBm AP Status Profile BSSID ESSID Security Online Tun Name Type Clients VAP 1 00 1F D4 03 1 NetComma Open 0 x n IPv6 Status Disabled WWww netcommwireless com Ver 1 0 E gt NetCommWireless System Overview LAN Interface Radio Status AP Status IPv6 CAPWAP WWww netcommwireless com Ver 1 0 FIELD System Name Firmware Version Build Number Location Site Device Time System Up Time CPU RAM Usage MAC Address IP Address Subnet Mask Gateway MAC Address Band Channel Tx Power Profile Name BSSID ESSID Security Type Online Clients Tunnel Status DESCRIPTION The system name given to the access point The current firmware version in use on the AP The build number of the firmware in use on the AP The location of the AP The site code of the AP The current system time on the AP The amount of time that the AP has been in operation Displays the CPU RAM utilization The MAC address of the LAN interface The IP address of the LAN interface The Subnet Mask of the LAN inte
3. Reboot Upload Certificate Channel Analysis Y Background Scan Home gt Utilities gt Conf guration Backup amp Restore Configuration Backup amp Restore Reset to Default Reset Backup System Settings Backup Restore System Settings Browse No file selected Restore NP731 User Guide www netcommwuwireless com 42 Ver 1 0 gt gt NetCommWireless System Upgrade This page allows the system administrator to upgrade the firmware of the access point There are two methods by which the access point may be upgraded via the web user interface or via TFTP server NetCommWireless g gt N A BS System AP Firewall Jril ties Status Change Password Backup amp Restore System Upgrade Reboot Upload Certificate Channel Analysis Background Scan Home gt Utilities gt system Upgrade System Upgrade Current Version 1 00 00 Current Build Number 1 6 1 7852 File Name Browse No file selected Upload Upgrade by TFTP IP Address Port File Name Apply Reboot This page is used to reboot the access point The access point may require a reboot when configuration changes are made NetCommWireless g gt 4p System AP Firewall Jril ties Status Change Password Backup amp Restore System Upgrade Reboot Upload Certificate Channel Analysis Background Scan Home gt Utilities gt Reboot the System Reboot the System Reboot may take several min
4. gt NetCommWireless FIELD DESCRIPTION Advanced Wireless Settings Request To Send RTS Threshold determines the packet size at which the system issues a request to send before sending the fragment to prevent the hidden node problem The RTS mechanism is activated if the packet exceeds the value provided A lower RTS Threshold setting can be useful in areas where many client devices are associating with the AP or in areas where the clients are far apart and can detect on the AP but RTS Threshold not each other Input the DTIM Interval that is generated within the periodic beacon at a specified frequency A higher DTIM DTIM Period allows the wireless client to save energy but lowers throughput This is the maximum number of transmission retries the AP will attempt when packet transmission is dropped before deciding the client is out of transmission reach When transmission retries fail for the configured number of times the access point drops the clients to optimize performance for other connected clients Consecutive Dropped Packets When enabled the access point s wireless network is visible to clients during a network scan If disabled the SHIGE ei wireless client must know the SSID of the access point in order to connect to it When enabled clients may not communicate with one another and may only communicate with the access Wireless Station Isolation point Inter Access Point Protocol IAPP is a protocol by which acces
5. 4136 Vigo M44 M4s Ms2 Mss Meso Moes Mioo M104 wiog M112 4 116 120 O124 O 128 132 136 Miao WWww netcommwireless com Ver 1 0 NP731 User Guide a gt gt NetCommWireless FIELD DESCRIPTION Advanced Wireless Settings Request To Send RTS Threshold determines the packet size at which the system issues a request to send before sending the fragment to prevent the hidden node problem The RTS mechanism is activated if the RTS Threshold packet exceeds the value provided A lower RTS Threshold setting can be useful in areas where many client devices are associating with the AP or in areas where the clients are far apart and can detect on the AP but not each other When enabled you are able to select the interval at which the NP731 performs a background scan for the Roaming RSSI You may also configure the RSSI threshold that determines when the NP731 switches between access points Choose Scan and Connect Channels When enabled you are able to select the bands and channels that the NP731 will scan for Access Control This page allows the administrator to configure a maximum number of clients and to specify an access control method NetCommWireless g gt y a BS System AP Firewall Utilities Status Site Survey Hotspot 2 0 N VAP Overview General VAP Config Security j Repeater Advanced Access Control Home gt Wireless gt access Control Settings Access Control
6. Access Point Target audience This guide is intended to be used by wireless service providers or network administrators to set up a network environment using the NP731 system It contains step by step procedures and graphic examples to guide IT staff or individuals with some network system knowledge to complete the installation Prerequisites Before continuing with the installation of your NP731 please confirm that you have the following A device with a working Ethernet network adapter DI Wireless client device s if using the NP731 to create a wireless network DI A web browser such as Internet Explorer Mozilla Firefox or Google Chrome D Notation The following symbols are used in this user guide A The following note requires attention A The following note provides a warning ey The following note provides useful information NP731 User Guide www netcommwuwireless com 4 Ver 1 0 gt NetCommWireless Product introduction Product overview Designed to meet the needs of today s most demanding wireless LAN deployments the NP731 offers a solution to create a reliable and scalable wireless network The NP731 is an outdoor device that will operate in access point repeater and WDS bridge mode Its rugged IP68 rated metal housing is weatherproof pressure balancing water tight and rust resistant making it an ideal solution for deployments in harsh conditions such as outdoor or industrial environmen
7. Settings Profile Name VAP 1 v Maximum Number of Clients 128 Range 1 256 per RF card Access Control Type Disable Access Control v FIELD DESCRIPTION Access Control Settings Maximum Number of Clients Specifies the maximum number of clients that may connect to the access point Ne Cas GENO DO Allows you to specify an access control type Available options are Disabled MAC ACL Allow List MAC ACL yP Deny List and RADIUS ACL NP731 User Guide www netcommwireless com 30 Ver 1 0 gt gt NetCommWireless MAC ACL Allow List When selecting MAC ACL Allow List only the client devices identified by their MAC addresses listed in the Allow List are granted access to the system The administrator can temporarily block any allowed MAC address by checking Disable NetCommWireless y a 5 System AF Firewall Utilities Status VAP Overview General VAP Config Security Repeater Advanced Access Control Site Survey Hotspot 2 0 Home gt Wireless gt Access Control Settings Access Control Settings Profile Name VAP 1 v Maximum Number of Clients 128 Range 1 256 per RF card Access Control Type MAC ACL Allow List v No MAC Address State 1 O Disable O Enable 2 O Disable O Enable 3 O Disable O Enable 4 O Disable Enable 5 O Disable O Enable 6 O Disable Enable 7 O Disable O Enable 8 O Disable O Enable 9 O Disable O Enable 10 O Disable O Enab
8. broadband dial up or VPN connection or set up a router or access point Troubleshoot problems Diagnose and repair network problems or get troubleshooting information 3 Click on the Properties button WWww netcommwireless com Ver 1 0 Connecton IPv4 Connectivity No network access IPv Connectivity No network access Media State Enabled Duration 00 10 55 Speed 1 0 Gbps Sent A Received zd l 805 807 135 NP731 User Guide 11 gt NetCommWireless 4 Select Internet Protocol Version 4 TCP IPv4 and then click on the Properties button Connect using iy Realtek PCle GBE Family Controller This connection uses the following items G05 Packet Scheduler a Microsoft Network Adapter Multiplexor Protocol wit Microsoft LLDP Protocol Driver wi Link Layer Topology Discovery Mapper O Driver Link Layer Topology Discovery Responder Intemet Protocol Version 6 TCP Pv6 AS Intemet Protocol Version 4 TCP IP w4 nstall Uninstall Descriniion Transmission Control Protocol Intemet Protocol The default wide area network protocol that provides communication across diverse interconnected networks 5 Select the Use the following IP address option then enter an IP address between the range of 192 168 1 2 and 192 168 1 253 In the Subnet mask field enter 255 255 255 0 Click the OK button You can get IP settings assigned automatically if your network suppo
9. gt gt NetCommWireless Utilities The Utilities pages provide administrators with various means of maintaining the system Change Password Using this page you may change the administrator account password or the user account password A maximum of 32 alpha numeric characters are allowed in a password When you have finished making changes click the Save button to have them take effect The user account is not able to modify many settings and is generally used for users to monitor the status of the access point Logout NetCommWvireless 8 O A amp System AP Firewall Utilities Status Change Password Backup amp Restore System Upgrade Reboot Upload Certificate Channel Analysis Background Scan Home gt Utilities gt Change Password Change Password Name admin New Password up to 32 characters Re enter New Password Name user New Password up to 32 characters Re enter New Password Backup amp Restore This function is used to back up and restore the configuration of the access point To back up the NP731 settings click the Backup button then choose a location to save the configuration file To restore the configuration file to the access point click the Browse button and locate the file then click the Restore button 9 Logout NetCommWireless 8 A a System AP Firewall Jtilities Status Change Password Backup amp Restore System Upgrade
10. mobile device can selectively authenticate to its preferred networks Lists one or more domain names for the entity operating the AP This is critical for Hotspot 2 0 network Domain Name List selection policy as it identifies the operator of the network It indicates to the mobile device whether it is at home or connected to a visitor hotspot Roaming Consortium Organizational Identifier Identifies BGPP cellular networks available through the AP Specifically this field identifies the Public Land Mobile Network PLMN ID comprised of the Mobile Country Code MCC and Mobile Network Code MNC of the mobile operator Cellular Network Information List PLMN www netcommwuwireless com NP731 User Guide Ver 1 0 So on gt NetCommWireless Firewall Firewall List The NP731 features a layer 2 firewall which provides an extra level of security on possible threats coming from or going to WLAN interfaces Logout NetCommWireless g gt N a Z System AP AMATENI Utilities Status gt Firewall List Service Advanced Home gt Firewall gt Layer 2 Firewall Settings Layer 2 Firewall Settings Enable Layer 2 Firewall O Disable Enable No State Action Name EtherType Remark Setting 1 C DROP CDP and VTP IEEE_8023 Del Ed In Mv 2 L DROP STP IEEE_8023 Del Ed In Mv 3 DROP GARP IEEE 8023 Del Ed In Mv 4 C DROP RIP IPv4 Del Ed In Mv D L DROP HSRP IPv4 Del Ed In Mv 6 E DROP OSPF IP
11. the Enable option then click the Manage Certificates button to display the Upload Certificate page See below for details ACI The IP address of the access controller The access point attempts to discover the controllers from the top down so if the first address is not reachable it will attempt to find the second controller and so on Manage Certificates Use the Browse button to locate the appropriate certificate files on your computer then click the Save button to save your settings NP731 User Guide www netcommwuireless com 18 Ver 1 0 gt gt NetCommWireless NetCommWvireless eS System AP Firewall Utilities Status N a Change Password Backup amp Restore System Upgrade Reboot Upload Certificate Channel Analysis Background Scan Home gt Utilities gt Upload Certificate Upload Certificate Upload Private Key Upload Certificate Upload Trusted Certificate Use Default Certificate IPv6 The access point supports both IPv4 and IPv6 address schemes IPv6 is disabled by default but can be enabled on this screen When it is enabled you can choose whether the access point should have a static IP address or be assigned a DHCP address NetCommWireless y a 2 WAG AP Firewall Utilities Status General Operating Mode Network Interface Management CAPWAP IPv6 Home gt System gt IPv6 Configuration IPv6 Configuration Status Disable O Enable M
12. wireless networks in range This is done in the background and does not affect normal operation Logout gt gt E System AP Firewall ws E Status Change Password Backup amp Restore System Upgrade Reboot Upload Certificate Channel Analysis Background Scan Home gt Utilities gt Background Scan Background Scan SSID MAC Signal Strength Channel 84 11 45 13 63 11 47 13 53 13 62 1i 83 6 66 6 57 4 57 13 95 11 95 1 62 11 42 13 77 6 43 13 72 6 56 6 63 6 95 9 43 11 50 11 66 6 66 8 66 1 50 1 58 1 60 1 62 1 64 1 63 1 59 1 59 1 39 1 71 1 81 1 56 1 71 1 56 1 75 1 62 1 53 1 51 1 78 1 76 1 Scan Now Go O O l www netcommwireless com NP731 User Guide Ver 1 0 45 A gt gt NetCommWireless Status The Status pages provide information about the current status of the access point s many functions Overview Upon logging in to the access point you are presented at the Overview tab of the Status page This page gives an overview of the settings and status of the access point NP731 User Guide 46 NetCommWireless g gt System Overview Interfaces Associated Clients Home gt Status gt System Overvi OP System System Name Firmware Version Build Number Location Site Device Time System Up Time CPU RAM Usage Operating Mode AP NetComm NP731 1 00 00 1 6 1 7852 Australia EN E 2000 01 01 02 48 08 O days
13. 136 40 v44 v48 vi 52 vi 56 60 Vv 64 100 4 104 108 M112 116 M120 M124 M128 M132 M1136 V 140 Scan Result Scan SSID MAC Address Protocol Channel Rate Signal Security Setup Connect www netcommwuireless com NP731 User Guide Ver 1 0 39 A gt gt NetCommWireless Hotspot 2 0 The NP731 may be used as a hotspot providing WiFi access to the public NetCommWireless y a System AP Firewall Utilities Status VAP Overview General VAP Config Security Repeater Advanced Access Control Site Survey Hotspot 2 0 Home gt Wireless gt Hotspot 2 0 Hotspot 2 0 Profile Name VAP 1 Status Disable Enable Internet Access Disable Enable Access Network Type Private network Venue Information Group Unspecified Type Unspecified Venue Name List 1 Eng ish 2 English 3 English 4 English 5 English Network Auth Type Not configured Roaming Consortium Organizational Identifier m IP Address Type ipva Address Not Available IPv6 Address Not Available NAI Realm List dit EAP method pa m a dit EAP method N m UJ m a dit EAP method dit EAP method D m a dit EAP method u m Domain Name List 1 Cellular Network Information List PLMN 1 NP731 User Guide www netcommwireless com 34 Ver 1 0 E gt NetCommWireless FIELD DESCRIPTION Hotspot 2 0 Enable of disable the hotspot fu
14. ARP payload fields Use this field to specify any notes particular to this rule Inserting a rule Select the In option to create a new rule in the selected slot Destination Moving a rule Select the Mv next to the desired rule to move it up or down the list to alter its priority The Move Rule screen is displayed and you are able to move the rule before or after a specified rule number Click the Save button when you have finished NetCommWireless eS u A E System AROEN Utilities Status Firewall List Service Y Advanced Home gt Firewall List gt Move Rule Move Rule ID 1 Moveto O Before After ID 1 50 NP731 User Guide www netcommwuwireless com 38 Ver 1 0 a gt gt NetCommWireless IP Port Forwarding CPE mode only NetCommWireless E E Firewal Utilities Status System IP Port Forwarding DMZ Home gt Firewall gt 1P Port Forwarding IP Port Forwarding Service Name External Port Range Internal IP Address Protocol ns TCP UDP Add IP Port Forwarding Item E External Port Internal IP Address Protocol State Delete Edit Name Range FIELD DESCRIPTION Displays the details of the current services available Click Delete to remove the specified service Click Edit RoR Rornwardng to configure the current setting DMZ CPE mode only The DMZ Demilitarized Zone allows one local computer or server used as a DMZ Host to be exposed to the Internet for spec
15. Cipher Suite The cipher suite is the encryption method used Group Key Update Period The time interval in seconds for the group key to be renewed RADIUS Server Settings Primary Secondary NP731 User Guide www netcommwuwireless com 26 Ver 1 0 E gt NetCommWireless Repeater Settings The NP731 access point is capable of using WDS or Universal Repeater mode to extend wireless network coverage If WDS is enabled the AP can support up to 8 WDS links to its peer APs per radio WDS NetCommWireless N amp System AP Firewall Utilities Status VAP Overview General VAP Config Security Advanced Access Control Site Survey Hotspot 2 0 Home gt Wireless gt Repeater Settings Repeater Settings Repeater Type WDS v WES WDS Profile WDS Link 1 y WDS Disable v WDS Link Address Please use it as the peer s Remote AP MAC Address Remote AP MAC Address Security Type None v CAPWAP Tunnel Interface O FIELD DESCRIPTION WDS GABWAP Turnet interac When selected this designates WDS traffic to pass through the CAPWAP tunnel established between the AP and the controller www netcommwireless com NP731 User Guide Ver 1 0 27 a gt gt NetCommWireless Universal Repeater NetCommWireless g gt gt y a 5 System AP Firewall Utilities Status VAP Overview General VAP Config Security Repeater Advanced Access Control Site Survey Hotsp
16. E E A ETIA E 4 alice EIEE E E PEATE E E A A NR E AT AE EAA A T AT A EEEE A A A RR 4 T Me AIMS E ea EOE EEE E E OA 4 PE e E E E E E E E E RR SP 4 POr e E E O E E E eaten cieocies 4 FrOQUEE NOOU Oae E E 5 POUC ONONO N od a LA E 5 Package CO I Sea pnts cee EEE E E RED AE EEE EAE E AEE E E A EA E E ENA EAEE E 5 E NO eee Ee E AR E E ARS EE E SR 6 HardWare mois qd 04 sissisriss r erener rE ENE ia RR RR DRE TR EE Oa OA RR AROS RR ERR 7 BOOTE AN er aE E E E E E E AE EE EE salen acute diria in da e ias ia o peca T E Eo of AI Ne Eeee E E E E E E O O RR 8 Faro ANS S AO Tr a a pa a a Eai 9 A E O e E E R E sda cate enernnentacant 10 Accessing the Ir fon oS User Merate sueca uusasraindia iE AANE 11 Setting te IP address olyour canpana a eE SEREEN EEA a o ia 11 LOCA A O MENE a Erien EO EA EAE EE RR AEE EE A E EE E NE AE AE OAAR 18 PR WANG Sh OU LOM calcaneus nace de verse emer wens perenne EOE 14 CO os e Meese ches beset RO DO SR DR RN aren dee ced sda SR OR 14 o o A AD RAR VEN se oe E RR O RES ADD RD A ASR A DR RE to ee 20 FUG VY ara ORDER RR RARE RO REDOR RP EST SUNT UR PER RI RT NR ES E ARES RD RE RD SD RR a ER 36 MEUM Vs sso chester bt E E ade beatae att nears 42 ho e FA PAD RR neice ND DR E DRA RR DS E RD RR PR O NE E be oeseneees 46 www netcommwireless com NP731 User Guide Ver 1 0 o gt NetCommWireless Overview Introduction This document provides you all the information you need to set up configure and use the Outdoor Dual Band WiFi N
17. affic for the VAP to pass through the CAPWAP tunnel established between the AP and NP731 User Guide WWww netcommwireless com 22 Ver 1 0 gt gt NetCommWireless Security Each VAP profile can be configured with independent wireless authentication and data encryption methods A description of each of the security types is listed below Open When security type is set to Open the access point provides no encryption or authentication for clients connecting to the VAP NetCommWvireless g gt N o System AR VAP Overview General VAP Config Security Home gt Wireless gt Security Settings Security Type WEP Repeater Firewall Utilities Status Advanced Access Control Site Survey Hotspot 2 0 Security Settings Profile Name VAP 1 v Open v 802 11r roaming Wired Equivalent Privacy WEP is a data encryption mechanism based on a 64 bit 128 bit or 152 bit shared key algorithm NetCommWireless gt N o System SE VAP Overview General VAP Config Security Home gt Wireless gt Security Settings Security Type 802 11 Authentication WEP Key Length WEP Key Format WEP Key Index WEP Keys www netcommuwireless com Ver 1 0 Repeater Firewall Utilities Status Advanced Access Control Site Survey Hotspot 2 0 Security Settings Profile Name VAP 1 v WEP y 802 11r roaming Note The WEP keys are global sett
18. annel or adjacent channel reaches the configured threshold in the AP switches to a different channel WME Configuration Access priority can be configured using different parameters Transmission Rate When the transmission rate drops below the configured threshold the client is dropped This ensures high throughput Threshold for all clients VAP Configuration This section provides configuration of each virtual access point with settings such as Profile Name ESSID and VLAN ID NetCommWireless e A gt B System AE Firewall Utilities Status N a f fe f i s VAP Overview General VAP Config Security Repeater Advanced Access Control Site Survey Hotspot 2 0 Home gt Wireless gt VAP Configuration VAP Configuration Profile Name VAP 1 v VAP Disable O Enable Profile Name VAP 1 ESSID NetCommAP A1 VLAN ID O Disable Enable VLAN ID 1 4094 CAPWAP Tunnel Interface go FIELD DESCRIPTION VAP Configuration Enables or disables the selected VAP Profile Name The profile name of the virtual access point for identification and management purposes ESSID The Extended Service Set ID serves as an identifier for clients to associate with the specific VAP VLAN ID The NP731 supports tagged VLANs virtual LANs To enable the VLAN function each VAP should be given a unique VLAN ID between the range of 1 and 4094 CAPWAP Tunnel Interface o o to designate tr
19. ated against possible threats like DHCP starvation attack ping Additionally the trusted DHCP server IP MAC can be specified to prevent rogue DHCP servers When enabled ARP packets are validated against ARP spoofing e Proxy ARP when enabled AP replies to ARP requests on behalf of the downlink stations The ARP table maintained by the access point is used as a look up table upon receipt of an ARP request from the AP uplink Adversely without Proxy ARP ARP requests are broadcast down in the AP s wireless network causing inefficiencies Force DHCP when enabled the AP only learns MAC IP pair information through DHCP packets Since devices configured with static IP addresses do not send DHCP traffic any clients with ARP Inspection static IP addresses will be blocked from internet access unless its MAC IP pair is listed and enabled in the Static Trust List Trust List Broadcast when enabled this let s other Aps with L2 firewall feature to learn the trusted MAC IP pairs to issue ARP requests Static Trust List used to add MAC or MAC IP pairs of devices that are trusted to issue ARP requests Other network nodes can still send their ARP requests however if their IP appears on the static list with a different MAC their ARP requests will be dropped to prevent eavesdropping VAP Isolation within RF Clients on different VAPs on the same RF card are isolated NP731 User Guide 41 WWww netcommwireless com Ver 1 0 a
20. ded in an endless loop between switches Enabling Layer2 STP Management Services When this is enabled management traffic from the system is tagged with a VLAN ID To access the VLAN traffic must VLAN for Management be tagged with the same VLAN ID SNMP Configuration E is enabled an administrator can obtain system information and configure settings of the access point System Log When enabled the access point can log system activity to a remote syslog server Management IP List Select this option to edit the Management IP list NP731 User Guide 16 WWww netcommwireless com Ver 1 0 gt gt NetCommWireless SNMP Account List The System allow 5 SNMP users with Read or Read amp Write access Use the SNMP Account List page to configure access rights Y Logout NetCommWireless g y A WAG AP Firewall Utilities Status General Operating Mode Network Interface Management CAPWAP IPv6 Home gt System gt Management Services gt SNMP Account List SNMP Account List SNMP User List Name Access Authority eo Authentication Password Read Only MD5 v Read Only MDS v Read Only MD5 v Read Only MD5 v Read Only v MDS v Management IP List The administrator can grant access to the web management interface by specifying a list of IP addresses or ranges of IP addresses These addresses may be LAN or WAN addresses Use this
21. e EtherType Interface DSAP SSAP Type Source Destination 1 CDP and VTP IEEE802 3 v 6 From To VAPI v aa 2000 ie IPv4 0800 MAC Address Mask MAC Address 01 00 0C CC CC CC Mask Action O Block Pass Remark www netcommuwireless com Ver 1 0 NP731 User Guide of a gt NetCommWireless FIELD DESCRIPTION This is only displayed when EtherType is IEEE 802 3 The value can be further specified for fields in the 802 2 DSAP SSAP LLC frame header hes This is only displayed when EtherType is IEEE802 3 This field is used to indicate the type of encapsulated yp traffic VLAN ID This is only displayed when EtherType is 802 1Q The VLAN ID is provided to associate with certain VLAN tagging traffic This is only displayed when EtherType is 802 10 Indicates the priority level with associated VLAN traffic Encapsulated Type This is only displayed when EtherType is 802 1Q Used to indicate the type of encapsulated traffic This is only displayed when EtherType is ARP RARP This list can be used to specify the ARP Opcode in the Opcode ARP header anita MAC address mask indicates the source MAC IP address mask indicates the source IP address when EtherType is IPv4 ARP IP MAC and Mask indicate the ARP payload fields MAC address mask indicates the destination MAC IP address mask indicates the destination IP address when Ether Type is IPv4 ARP IP MAC and Mask indicate the
22. e cipher suite is the encryption method used When 802 11r is enabled click the Configure button to display 802 11r Roaming Settings You can select a PSK Hex or a passphrase as the key format Hex Enter the key value as the pre shared key The format and number of characters is dependent on the Pre shared Key Type The time interval in seconds for the group key to be renewed NP731 User Guide 25 a gt gt NetCommWireless WPA Enterprise When selected this option provides RADIUS authentication and data encryption NetCommWireless g gt System AP Firewall Utilities Status A Bs f f f VAP Overview General y VAP Config Security Repeater Advanced Access Control Site Survey Hotspot 2 0 3 Home gt Wireless gt Security Settings Security Settings Profile Name VAP 1 v Security Type WPA Enterprise v _ 802 11r roaming Cipher Suite WPA2 v Group Key Update Period 86400 second s Primary RADIUS Server Host Domain Name IP Address Authentication Port 1812 j Secret Key Accounting Service 6 Disable O Enable Accounting Port 1813 Accounting Interim Update Interval 60 second s Secondary RADIUS Server Host Domain Name IP Address Authentication Port Secret Key Accounting Service 6 Disable Enable Accounting Port Accounting Interim Update Interval second s FIELD DESCRIPTION Security Settings
23. es gt NetCommWireless NP731 Outdoor Dual Band WiFi N Access Point gt NetCommWireless Copyright Copyright 2014 NetComm Wireless Limited All rights reserved The information contained herein is proprietary to NetComm Wireless No part of this document may be translated transcribed reproduced in any form or by any means without prior written consent of NetComm Wireless A Note This document is subject to change without notice Save our environment When this equipment has reached the end of its useful life it must be taken to a recycling centre and processed separately from domestic waste The cardboard box the plastic contained in the packaging and the parts that make up this device can be recycled in accordance with regionally established regulations Never dispose of this electronic equipment along with your household waste You may be subject to penalties or sanctions under the law Instead ask for disposal instructions from your municipal government Please be responsible and protect our environment This manual covers the following products NP731 Outdoor Dual Band WiFi N Access Point DOCUMENT VERSION DINIS 1 0 Initial document release 972015 NP731 User Guide www netcommwireless com 2 Ver 1 0 gt NetCommWireless Table of contents TDG 9 COMEN S een emer ea aa Se ene on I eS ete ee oe ee E Me nce een oe are eee 3 E DA E EE EEEE NE IENEN eects S en UN ENSA CARD E ERR AN A
24. ess point s network interface and the IP multicast host Registration information is recorded and sorted into Ethernet IGMP Snooping multicast groups The internal switch forwards traffic only to those ports that request multicast traffic Adversely without IGMP snooping multicast traffic is treated like broadcast traffic with packets forwarded to all ports causing network inefficiencies Enables or disables the Layer2 Spanning Tree Protocol If the access point is set up to bridge other network Layer2 STP can lower undesired occurrences of broadcast storms Management Management services such as VLAN SNMP and the System log may be configured via this page 9 Logout NetCommWireless E JA y a AP Firewall Utilities General Operating Mode Y Network interface Management CAPWAP N IPv6 Home gt System gt Management Services VLAN for Management FIELD Management Services Disable Enable VLAN ID 1 4094 SNMP Configuration Disable Enable Community String Read Write Edit SNMPv3 User List Trap e Disable Enable Server IP System Log O Disable 6 Enable SYSLOG Server IP 127 0 0 1 Server Port 514 SYSLOG Level Debug v Management IP List Edit Management IP List DESCRIPTION components this option can be enabled to prevent undesired loops because a broadcasting storm may occur in a multi switch environment where broadcast packets are forwar
25. ground wire Used to connect the NP731 to either the PoE injector or to a router providing Power over Ethernet PoE www netcommuwireless com Ver 1 0 NP731 User Guide 7 A gt NetCommWireless Top Panel DESCRIPTION Connect antennas here Use both antennas in conjunction for 802 11n MIMO optimized N type connectors performance NP731 User Guide www netcommwuwireless com 8 Ver 1 0 gt NetCommWireless Hardware Installation The following diagram illustrates the basic network topology that should be used for testing and configuration Powerpoint PoE a Injector P D OUT Data IN Laptop 1 Connect the two Dual band antennas to the primary and secondary N type antenna connectors on the NP731 2 Unscrew the weather seal from the PoE port and disassemble it so that it is in three parts A B C 3 Place the Ethernet cable through the bottom piece A first as shown below www netcommwuwireless com NP731 User Guide Ver 1 0 9 on gt NetCommWireless 4 Open the middle piece B and slide the Ethernet cable into it Take care to orient the middle piece as shown below 5 Place the third piece C over the top with the same orientation as shown below 6 Connect the weather sealed end of the Ethernet cable to the Ethernet port of the NP731 Screw part A onto the Ethernet port of the NP731 Connect the other end of the Ethernet cable to the P D OUT port of the PoE injector 7 Co
26. ial purpose Internet services such as functioning as a web server External users can access the DMZ host without authentication NetCommWireless Se w a E ONENI Utilities Status System IP Port Forwarding DMZ Home gt Firewall gt Demilitarized Zone Demilitarized Zone State O Disable Enable Internal IP Address pi www netcommwuwireless com NP731 User Guide Ver 1 0 39 a gt gt NetCommWireless FIELD DESCRIPTION Demilitarized Zone State Select Enable to activate this function or Disable to de activate it Fill in the internal IP address to allow the system to forward traffic other than those listed in the specific Internal IP Address ae IP Port Forwarding list Service The administrator can add or delete firewall services here The services in this list become options that are selectable in the firewall rules when EtherType is set to IPv4 The access point provides a list of rules to block or pass traffic of layer 3 or above These services are available to choose from a drop down list of layer2 firewall rules on the Edit page The first 28 entries are default settings and may not be deleted but may be disabled Click the Save button to save your changes when you have finished NetCommWireless g gt 5 A 5 Firewall Utilities Status System Firewall List Service Advanced Home gt Firewall gt Firewall Service Firewall Service No Name Descri
27. ing for all virtual APs The key value will apply to all VAPs Open System Shared Key Auto O 64bits 128 bits 152 bits 6 asctt Hex 1v 1 2 NP731 User Guide 23 A gt gt NetCommWireless FIELD DESCRIPTION Security Settings 802 11 Authentication Select from Open System Shared Key or Auto WEP Key Length Select from 64 bit 128 bit 152 bit key length WEP Key Format Select from ASCII or Hex format for the WEP key Select a key index from 1 4 The WEP key index is a number that specifies which WEP key will be used for the WEP Key Index e encryption of wireless frames during data transmission WEP Keys Provide the pre defined WEP key value the system supports up to 4 sets of WEP keys 802 1X When 802 1X authentication is selected RADIUS authentication and Dynamic WEP are provided 9 Logout NetCommWvireless do a A 9 g gt System AP Firewall Utilities Status TA gt y gt 1 E q s VAP Overview General VAP Config Y Security Repeater Advanced Access Control Site Survey Hotspot 2 0 Home gt Wireless gt security Settings Security Settings Profile Name VAP 1 v Security Type 802 1X v 802 11r roaming Dynamic WEP Disable Enable WEP Key Length 64 bits 128 bits Rekeying Period 300 second s Primary RADIUS Server Host Domain Name IP Address Authentication Port 1812 n Secret Key i Accounting Service Disable Enab
28. it Disabled Edit Disabled Edit Disabled Edit Disabled Edit Disabled Edit Disabled Edit Disabled Edit Disabled Edit Disabled Edit Disabled Edit Disabled Edit Disabled Edit Disabled Edit Disabled Edit www netcommwuwireless com Ver 1 0 E gt gt NetCommWireless General Here you can configure the general AP wireless settings NetCommWireless g gt System AP VAP Overview General Home gt Wireless gt General Settings Band Protocol Short Preamble Short Guard Interval Channel Width Channel Width Extension Channel Max Transmit Rate Transmit Power ACK Timeout Beacon Interval Airtime Fairness Packet Delay Threshold Idle Timeout _ gt Z Status N A Firewall Utilities VAP Config Security Repeater Advanced Access Control Site Survey Hotspot 2 0 General Settings 2 4GHz 802 11g 802 11n y pure 11n Disable O Enable Disable 9 Enable 40 MHz v Above 6 y Auto v Levell v 0 0 255 0 Auto Unit 4 micro seconds 100 millisecond s 100 500 Disable O Fair Access Preferred Access o millisecond s 100 5000 0 Disable 300 second s 15 999 Interference Detection Adjacent Channel Utilization Threshold 0 60 99 O Disable Latency 10 second s 10 999 Co Channel Utilization Threshold 0 60 99 O Disable Invalid Packet Rate 90 60 99 Latency 10 sec
29. le First Prev Next Last total 100 www netcommwireless com Ver 1 0 NP731 User Guide 31 a gt gt NetCommWireless MAC ACL Deny List When selecting MAC ACL Allow List all clients except those listed in the Deny List are granted access to the system The administrator can temporarily allow any denied MAC address by checking Disable NetCommWireless q y System AF Firewall Utilities Status VAP Overview General VAP Config Security Repeater Advanced Access Control Site Survey Hotspot 2 0 Home gt Wireless gt Access Control Settings Access Control Settings Profile Name VAP 1 v Maximum Number of Clients 128 Range 1 256 per RF card Access Control Type MAC ACL Deny List v No MAC Address State 1 O Disable Enable 2 O Disable Enable 3 O Disable Enable 4 O Disable Enable 5 Disable Enable 6 O Disable Enable 7 O Disable Enable 8 Disable JEnable 9 O Disable O Enable 10 O Disable Enable First Prev Next Last total 100 NP731 User Guide www netcommwuwireless com 32 Ver 1 0 gt gt NetCommWireless RADIUS ACL Authenticate incoming MAC addresses by an external RADIUS server Use these settings to specify the address port and secret key to the RADIUS server NetCommWireless g gt y 2 System AP Firewall Utilities Status VAP Overview General VAP Config Security Repeater Advanced Acces
30. le Accounting Port 1813 ia Accounting Interim Update Interval 60 second s Secondary RADIUS Server Host Domain Name IP Address Authentication Port Secret Key Accounting Service 6 Disable Enable Accounting Port Accounting Interim Update Interval second s FIELD DESCRIPTION Dynamic WEP Dynamic WEP a x security type Dynamic WEP is always enabled to automatically generate WEP keys for WEP Key Length Select a key length from 64 bit or 128 bit Re keying Period The time interval in seconds for the dynamic WEP key to be updated NP731 User Guide www netcommwireless com 24 Ver 1 0 E gt NetCommWireless WPA Personal WPA Personal is a pre shared key authentication method NetCommWvireless gt System AR VAP Overview General VAP Config Security Repeater Advanced Access Control Site Survey Hotspot 2 0 Home gt Wireless gt Security Settings Security Type Cipher Suite Roaming Target AP List Pre shared Key Type Pre shared Key Group Key Update Period J A Firewall Utilities Security Settings Profile Name VAP 1 v WPA Personal v 802 11r roaming WPA2 v Configure O PSK Hex 64 chars Passphrase 8 63 chars 86400 second s C Status FIELD DESCRIPTION Cipher Suite Roaming Target AP List Pre shared Key Type Pre shared Key Group Key Update Period www netcommuwireless com Ver 1 0 Th
31. localhost crond 1509 USER root pid 702 cmd etc rc d rc systime sync ntp Jan 1 04 02 01 logd localhost crond 1509 USER root pid 459 cmd etc rc d rc systime sync ntp Jan 1 03 02 01 logd localhost crond 1509 USER root pid 4006 cmd etc rc d rc systime sync ntp Jan 1 02 03 36 logd localhost hostapd ath0ap0 IEEE 802 11 Fetching hardware channel rate support not supported Jan 1 02 02 01 logd localhost crond 1509 USER root pid 1913 cmd etc rc d rc systime sync ntp Jan 1 01 59 50 logd localhost hostapd ath0ap0 IEEE 802 11 Fetching hardware channel rate support not supported Jan 1 01 58 05 logd localhost hostapd athOapO IEEE 802 11 Fetching hardware channel rate support not supported Jan 1 01 57 01 logd localhost hostapd ath0ap0 IEEE 802 11 Fetching hardware channel rate support not supported Jan 1 01 51 07 logd localhost hostapd athOapO IEEE 802 11 Fetching hardware channel rate support not supported Jan 1 01 49 38 logd localhost hostapd athOapO IEEE 802 11 Fetching hardware channel rate support not supported Jan 1 01 02 01 logd localhost crond 1509 USER root pid 2836 cmd etc rc d rc systime sync_ntp Jan 1 00 02 01 logd localhost crond 1509 USER root pid 2600 cmd etc rc d rc systime sync_ntp Jan 1 00 00 02 logd localhost crond 1509 crond busybox 1 12 4 started log level 8 Jan 1 00 00 01 syslogd started BusyBox v1 12 4 NP731 User Guide www netcommwuwireless com 50 Ver 1 0 gt gt NetCommWireless Monit
32. ly repeat one of those bands O 2 Access Point mode the NP731 connects to an existing router via Ethernet and provides a wireless signal for wireless devices This is useful in situations where there is no existing wireless access point or where you wish to provide a wireless signal to a remote area up to 100 metres from where the router is located Lt o Internet Ethernet cable 2 4 5GHz PC up to 100m Router E Smartphone ey Note The NP731 provides wireless connectivity on the 2 4GHz or 5GHz band but not on both bands simultaneously 3 CPE mode the NP731 connects wirelessly to a remote network and provides access to that network to clients connected via Ethernet Use of a switch is required for multiple clients 4 WDS mode the NP731 connects to up to 16 other NP731 units to create a wireless mesh network This is similar to repeater mode but in WDS mode the NP731 uses a single MAC address to provide seamless roaming NP731 User Guide www netcommwuwireless com 6 Ver 1 0 ee gt NetCommWireless Hardware overview Bottom Panel 1 4 4 A z OE ee ee o ma ea ry Vg a WP Yor ES gli EL ee be EM Lie at a o CLIA Y EGE Rae jabs NAME DESCRIPTION Ventilation Valve Due to fluctuations in temperature and humidity water vapour inside the unit may condense This valve provides ventilation to prevent moisture from building up inside the unit Used to attach the
33. n take effect When set to CPE mode the NP731 becomes a DHCP server operating on the 192 168 20 X address range and retrieves a DHCP client address for the WAN interface Logout NetCommWvireless e p y a 2 WG AP Firewall Utilities Status General Operating Mode Network Interface Management CAPWAP IPv6 Home gt System gt Operating Mode Operating Mode Operating Mode 6 AP Mode CPE Mode Network Interface The Network Interface tab provides you with the ability to configure network settings NetCommWireless N A Se System AP Firewall Utilities Status General Operating Mode Network Interface Management CAPWAP IPv6 Home gt System gt Network Settings Network Settings Mode O Static DHCP Renew IP Address 192 168 1 254 H Netmask 255 255 255 0 z Default Gateway 192 168 1 1 ii Primary DNS Server 192 168 1 1 Alternate DNS Server Ethernet IGMP Snooping O Disable Enable Layer2 STP Disable v www netcommwireless com NP731 User Guide Ver 1 0 15 A gt NetCommWireless FIELD Network Settings Mode DESCRIPTION an IP address Netmask Default Gateway and Primary DNS Server Specifies whether the access point should use a Static IP or a DHCP address When Static is selected you must specify Enables or disables the IGMP Snooping function When enabled the access point forwards IGMP traffic transferred via the acc
34. nction Internet Access When enabled the wireless clients are allowed access to the internet Private Home and Enterprise Networks Private and Guest Access Enterprises offering guest connectivity Chargeable Public Network Available to all but requires a fee Access Network Type Free Public Network Available to all without fees Personal Device Network For peripherals in an ad hoc mode Emergency Services Test Experimental Wild Card The Group Type of the venue is selected here This identifies the general class of the venue and the specific Venue Information ae type of venue within each group Venue Name List The name of the venue for the network which may be useful to end users for network selection The additional steps to acquire access for an unsecure network Acceptance of terms and conditions Network Authentication Type Online enrolment supported HTTP HTTPS redirection DNS redirection A roaming consortium is a group of service providers with which a user s credentials can be used for authentication Roaming consortiums are identified by an organization identifier Ol that is assigned by the IEEE similar to the first half of a MAC address An Ol is often 24 bits in length but can also be 36 bits IP Address Type IPv4 or IPv6 An NAI Realm identifies the proper authentication server or domain for the user s authentication exchange NAI Realm List By discovering which authentication realms are supported by a network a
35. nnect one end of another Ethernet cable to the DATA IN port of the PoE injector and the other end of the cable to a computer 8 Connect the power cord to the PoE injector and power it on Alternative configuration When you have completed the configuration of the NP731 you can connect it to a PoE switch to provide power and data connectivity The following diagram illustrates the alternative network topology Powerpoint PoE Switch P D OUT Data IN Laptop NP731 User Guide WWww netcommwireless com 10 Ver 1 0 gt NetCommWireless Accessing the NP731 s user interface The NP731 offers a web based configuration page After completing the hardware installation above the NP731 can be configured through a computer using a web browser with JavaScript enabled The NP731 has a static IP address of 192 168 1 254 To access the web management interface you must set the IP address of your computer to be within the range of 192 168 1 2 to 192 168 1 253 Setting the IP address of your computer To set the IP address of your computer LP E Open the Control Panel then select Network and Sharing Center Select the Ethernet connection for the Unidentified network View your basic network information and set up connections View your active networks k access ETs Unidentified network Access type Public network Connections Change your networking settings a Set up a new connection or network Set up a
36. ode Static DHCP www netcommwireless com NP731 User Guide Ver 1 0 19 a gt gt NetCommWireless AP The AP section provides configuration options for the access point function The NP731 supports up to sixteen Virtual Access Points VAPs Each VAP can have its own settings e g ESSID VLAN ID security settings etc VAP Overview This page displays a summary of the virtual access points and their statuses To use more than one virtual access point the NP731 must have repeater mode disabled See the Repeater section for more information NP731 User Guide 20 NetCommWireless AP Se System VAP Overview General Home gt Wireless gt vap O VAP No 10 11 12 13 14 15 16 VAP Config Security ESSID NetCommAP A1 NetCommAP A2 NetCommAP A3 NetCommAP A4 NetCommAP A5 NetCommAP A6 NetCommAP A7 NetCommAP A8 NetCommAP A9 NetCommAP A10 NetCommAP A11 NetCommAP A12 NetCommAP A13 NetCommAP A14 NetCommAP A15 NetCommAP A16 Repeater VAP Overview State Enabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Advanced Firewall Access Control Security Type Open Open Open Open Open Open Open Open Open Open Open Open Open Open Open Open Utilities Status Site Survey Hotspot 2 0 MAC ACL Advanced Settings Disabled Edit Disabled Ed
37. ond s 10 999 WME Configuration Configure Transmission Rate Threshold 0 kbps 0 Disable FIELD DESCRIPTION General Settings Select the desired wireless band Available options are Disabled 2 4GHz or 5GHz Select the appropriate wireless protocol 802 11a 802 11b 802 119 802 11b 802 119 802 119 802 11n Protocol 802 11a 802 11n 802 11ac or select Disable if the wireless function is not required Select the Pure 11n option to Short Preamble enable 802 11n only The short preamble with a 56 bit synchronization field can improve WLAN transmission efficiency Select Enable to use Short Preamble or Disable to use Long Preamble The guard interval is the space between symbols characters being transmitted to eliminate inter symbol interference In order to further boost throughput with 802 11n the short guard interval is half of what it used to be Short Guard Interval Channel Width aos channel width increases the bandwidth available This option only appears when a protocol using 802 11n is Channel Width Extension This option restricts the channel selection when 40MHz channel width is selected Use the drop down list to select a channel for the WiFi network The default channel is 6 For North America you may Channel l select channels 1 to 11 while channels 1 to 13 are available for Europe Max Transmit Rate This is the maximum wireless transmission rate When set to Auto the access point will use the highest pos
38. or This page gives a summary of the CPU utilization memory usage associated station numbers TX rate distribution airtime utilization and short retries Overview Home gt Status www netcommwuwireless com Ver 1 0 NetCommWireless g gt 4p y e System AP Firewall Utilities SENTE Interfaces Associated Clients Link Status Event Log Monitor itor Monitor Category CPU and Memory v Draw From Year 2015 v Month 01 v Day 08 v Hour 15 v Minute 08 v To Year 2015 v Month O01 v Day 09 v Hour 15 v Minute 08 v Yi CPU Usage M Free Memory Cached Memory CPU and Memory 1 0 9 0 8 0 7 wA w 0 6 o c 0 5 o 0 4 iE 0 3 0 2 0 1 0 16 00 18 00 20 00 22 00 09Jan 02 00 04 00 06 00 08 00 10 00 12 00 14 00 CPU Usage Free Memory Cached Memory NP731 User Guide 51
39. or Home gt Status gt Wireless Clients Associated Client Status Update Interval Never v Client List jea Idie al Real Associated VAP ESSID MAC Address RSSI E Time Time a Disconnect Ratio Time secs secs www netcommuireless com NP731 User Guide Ver 1 0 48 o gt NetCommWireless FIELD DESCRIPTION Real Time Kb RSSI Uplink Downlink rates etc Link Status This page displays the status of the wireless link between the NP731 and the upper bound access point NetCommWireless e y A gt 5 System AP Firewall Utilities SENTE 4 J Overview Interfaces Associated Clients lee Status Event Log Monitor Home gt Status gt Repeater Status Repeater Status Update Interval Never v Universal Repeater SSID Status Enabled TX Rate O Mbits SNR 94 TX Count N A Packets TX Error N A Packets Encryption None WWww netcommwireless com Ver 1 0 A real time plot of each associated client s traffic information including packets in out traffic in out in NP731 User Guide 49 a gt NetCommWireless Event Log The event log provides a record of system activities The administrator can monitor the system status by checking this log NetCommWireless e y A gt System AP Firewall Utilities SENTE Overview Interfaces Associated Clients Link Status Event Log Monitor Home gt Status gt Event Log Event Log Jan 1 05 02 01 logd
40. ot 2 0 Home gt Wireless gt Repeater Settings Repeater Settings Repeater Type Universal Repeater Y WES The SSID of Upper Bound AP ig Current wireless channel of the system is set at 6 Repeater connection may fail if the system is set to connect to upper AP with different channels Security Type None y FIELD DESCRIPTION Repeater Settings The SSID of Upper Bound AP Enter the SSID of the upper bound AP for the uplink connection Security Type You can configure a security type for this connection but it must be the same as the upper bound AP Advanced AP mode The Advanced Wireless Settings page provides configuration options for data transmission settings These parameters can be fine tuned to improve communication performance if a poor connection occurs NetCommWireless e y a B System AP Firewall Utilities Status Home gt Wireless gt Advanced Wireless Settings Advanced Wireless Settings Profile Name VAP 1 v RTS Threshold 2346 1 2346 DTIM period 1 1 15 Consecutive Dropped Packets 5 2 50 O Disable Broadcast SSID Disable O Enable Wireless Station Isolation O Disable Enable IAPP Disable O Enable Multicast to Unicast Conversion O Disable O Enable Multicast Broadcast Rate 5 5M vw Management Frame Rate 5 5M vw Receiving RSSI Threshold 0 0 100 0 Disable NP731 User Guide www netcommwireless com 28 Ver 1 0 o gt
41. page to configure the IP addresses that are allowed access o Logout NetCommWireless g gt y a 2 System AP Firewall Utilities Status General Operating Mode Network Interface Management CAPWAP Y IPv6 Home gt System gt Management Services gt Management IP List Management IP List Management IP List x IP Address Segment w e IP Address Segment 0 0 0 0 0 0 0 0 www netcommwuwireless com Ver 1 0 NP731 User Guide 17 A gt gt NetCommWireless CAPWAP CAPWAP is a standard interoperable protocol that enables a controller to manage a collection of wireless access points There are 5 methods of auto AP discovery namely DNS SRV DHCP option Broadcast Multicast and Static NetCommWireless g gt System AP Firewall Utilities Status a E General Operating Mode Network Interface Management CAPWAP IPv6 Home gt System gt CAPWAP Configuration CAPWAP Configuration CAPWAP Disable O Enable Certificate Date Check Disable Enable Manage Certificates DNS SRV Discovery Disable Enable Domain Name Suffix DHCP Option Discovery Disable Enable Broadcast Discovery Disable Enable Multicast Discovery Disable Enable Static Discovery Disable Enable Pri AC Address Remark 1 2 3 4 5 FIELD DESCRIPTION CAPWAP Configuration CAPWAP Enables or disables the CAPWAP function Ce iae Deo Cred To enable this select
42. ption Delete 1 ALL ALL 2 ALL TCP TCP Source Port 065535 Destination Port 065535 3 ALL UDP UDP Source Port 0 65535 Destination Port 0 65535 4 ALL ICMP ICMP 5 FTP TCP UDP Destination Port 20 21 6 HTTP TCP UDP Destination Port 80 7 HTTPS TCP UDP Destination Port 443 8 POP3 TCP Destination Port 110 9 SMTP TCP Destination Port 25 10 DHCP UDP Destination Port 67 68 First Prev Next Last total 29 Add NP731 User Guide www netcommwireless com 40 Ver 1 0 o gt NetCommWireless Advanced This page provides additional settings for firewall rules NetCommWireless g gt y a BS System AP ANATEL Utilities Status Firewall a q Rs Home gt Firewall gt advanced Firewall Settings Advanced Firewall Settings Trust Interface M vAp1 VAP2 VAP3 VAP4 VAPS C VAP6 C VAP7 C VAP8 C VAP9 VAP10 C VAP11 VAP12 VAP13 VAP14 VAP15 VAP16 DHCP Snooping Disable Enable ARP Inspection Disable Enable Proxy ARP e Disable Enable Force DHCP e Disable Enable Trust List Broadcast e Disable Enable Static Trust List e Disable Enable VAP Isolation within RF Disable Enable FIELD DESCRIPTION Advanced Firewall Settings Teenie Each VAP interface can be checked individually to mark as trusted interfaces Security enforcements on DHCP ARP like DHCP snooping and ARP inspection are carried out on non trusted interfaces DICE Sa oo When enabled DHCP packets are valid
43. rface The Gateway of the LAN interface The MAC address of the wireless radio The radio band in use The channel in use The transmission power of the wireless radio The profile name of the access point Basic Service Set ID Extended Service Set ID Security type of the virtual access point The number of online clients The status of the used tunnel Enabled Disabled Enable Disabled NP731 User Guide A7 A gt gt NetCommWireless Interfaces This page displays the traffic information per interface Click the Plot button to display the traffic information in a graph format NetCommWvireless eS N o System AP Firewall Utilities SENTE Overview Interfaces Associated Clients Link Status Event Log Monitor Home gt Status gt Interface Traffic Interface Traffic Update Interval Never v Interface List Interface Traffic Out KB Packets Out Traffic In KB Packets In Real Time Uplink 17929 20124 1343 11988 Plot VAP 1 2 14 0 0 Plot Associated Clients The administrator can remotely oversee the status of all associated clients on this page When a low signal to noise ratio is found here the administrator can tune the corresponding parameters or investigate the settings of associated clients to improve network performance NetCommWvireless eS y i o System AP Firewall Utilities SENTE Overview Interfaces Associated Clients Link Status Event Log Monit
44. rts this capability Otherwise you need to ask your network administrator for the appropriate IP settings Default gateway Obtain DNS server address automatically Use the following DNS server addresses Alternate DNS server validate settings upon exit 6 Close the Ethernet Properties and Ethernet Status windows NP731 User Guide www netcommwuwireless com 12 Ver 1 0 gt NetCommWireless Logging in to the NP731 To access the NP731 s user interface 1 Open a web browser and enter http 192 168 1 254 into the address bar Press Enter The login page of the NP731 is displayed NetCommWireless Username Password 2 Enter admin into both the Username and Password fields then click the Login button www netcommwuwireless com NP731 User Guide Ver 1 0 13 on gt NetCommWireless Advanced configuration The device s interface consists of 5 main menu items listed along the top of the screen System AP Firewall Utilities and Status You can select any of these menu items to reveal additional sub menus System The System menu provides the configuration of network related settings General The General tab includes configuration options for System Information to identify the access point as well as NTP server configuration The fields marked with a red asterisk are mandatory fields and must contain some data in order for the access point to function correctly
45. s Control Site Survey Hotspot 2 0 Home gt Wireless gt Access Contre Settings Access Control Settings Profile Name VAP 1 v Maximum Number of Clients 128 Range 1 256 per RF card Access Control Type RADIUS ACL y Primary RADIUS Server Note These settings will also apply to security settings which use RADIUS Server for this VAP Host Domain Name IP Address Authentication Port 1812 1 65535 Secret Key Secondary RADIUS Server Host Authentication Port Secret Key Site Survey The access point can scan for available wireless networks within its range The administrator can then select a network to connect to This option is only available when the AP is in CPE mode or when one of the repeater modes is enabled Select the desired channels to scan and then press the Scan Button Click the Setup button next to the desired network then enter the required authentication details in the section that appears below NetCommWireless g gt N 5 System AF Firewall Utilities Status General Advanced Security Site Survey Home gt Wireless gt site Surve Scan Setting Channel Selector All 2 4 GHz LJ5 GHz DFS 2 4GHz list 1 2 3 v4 vi5 vi6 417 ig ig 10 viii v12 vi 13 5GHz list 17
46. s points share information about the stations APP connected to them When enabled the system automatically broadcasts information about associated wireless stations to its peer access points Multicast to Unicast Conversion When enabled the access point intelligently forwards traffic only to those ports that request multicast traffic Multicast Broadcast Rate Allows the configuration of multicast broadcast packet bandwidth This feature controls the bandwidth for Management Frames Higher rates result in shorter transmission Management Frame Rate range Receiving RSSI Threshold To ensure quality connection speeds a wireless client will not be allowed to connect unless it meets the configured minimum RSSI threshold Advanced CPE Mode In CPE mode the Advanced tab allows for configuration of advanced wireless settings such as RTS Threshold Roaming and the ability to specify particular channels to use NetCommWireless Se a 5 System AP Firewall Utilities Status General Y Advanced Security Site Survey Home gt Wireless gt Advanced Wireless Settings Advanced Wireless Settings RTS Threshold 2346 1 2346 Roaming O Disable O Enable Background Scanning Period 300 10 600 seconds Roaming Check RSSI Threshold 15 15 85 Choose Scan and Connect Channels Disable Enable Channel Selector Lal 2 4 GHz O5 GHz Lipes 2 4GHz list Ml 1 w2 M3 v4 Ms Me M7 Ms M Mio Wii liz M13 5GHz list
47. sible rate The signal strength transmitted by the access point Each level signifies are decrement of 1dBm from the highest power Transmit power Level 1 is the highest transmission power level 2 is the highest power minus 1dBm and so on Indicates a period of time when the system waits for an acknowledgment frame sent back from a station without ACK Timeout one retransmission www netcommwuwireless com NP731 User Guide Ver 1 0 21 a gt NetCommWireless Beacon Interval Indicates how often the beacon signal is sent from the access point When multiple protocols are enabled e g 802 11b 802 119 they can occupy airtime and affect throughput for Airtime Fairness 802 11n devices When this option is enabled the access point ensures all devices with different band compatibilities have the same air time When set to Preferred Airtime priority is given to devices using the 802 11n protocol When the access point is busy transmitting to a client which is busy or out of range it is delayed from transmitting to Packet Delay Threshold other clients When this option is enabled this transmission queue flushing mechanism drops packets and immediately begins to process others if the queue has been processed for more than x milliseconds Idle Timeout The time after which a client disconnects when inactivity reaches the configured amount of time in seconds icaarance Denni When utilization latency and invalid packet rate of the current ch
48. ts With its multi mode set up the device can be used in many instances to increase and enhance wireless coverage Package contents The NP731 package includes DESCRIPTION NetComm Wireless NP731 Outdoor Dual Band WiFi N Access Point Dual band 5dBi Outdoor Omni Antennas Ground wire green PoE injector 10m RJ45 Outdoor grade Ethernet cable Detachment tool for RJ45 connector Mounting kit Quick Start Guide a Not pictured Warranty Card If any of these items are missing or damaged please contact NetComm Wireless Support immediately The NetComm Wireless Support website can be found at http support netcommwireless com We recommend that you keep the original packaging materials in case repair or maintenance is necessary This will protect the NP731 from damage during transport www netcommwuwireless com NP731 User Guide 5 Ver 1 0 A gt NetCommWireless System concept The NP731 has four modes of operation 1 Repeater mode default the NP731 repeats the wireless signal of your existing network to provide coverage to a greater area of your premises Ld ee 2 4 5GHz PC j NP731 Router Smartphone Note The NP731 can only rebroadcast the wireless network using the same band i e if the router is broadcasting on 2 4GHz the NP731 can only repeat the signal on 2 4GHz Additionally if the router broadcasts on both 2 4GHz and 5GHz simultaneously the repeater may on
49. utes to complete The Admin Login Page will be shown after system boots up Reboot NP731 User Guide 43 www netcommwireless com Ver 1 0 A gt gt NetCommWireless Upload Certificate This page allows administrators to upload security certificates for use with CAPWAP NetCommWireless N P 2 System AP Firewall Jrilities Status Change Password Backup amp Restore System Upgrade Reboot Upload Certificate Channel Analysis Background Scan Home gt Utilities Upload Certificate Upload Certificate Upload Private Key Upload Certificate Upload Trusted Certificate Use Default Certificate Channel Analysis This tool is for use by administrators to chart the channel dynamics It presents a spectrogram density graph and other charts to detect interference from other Bluetooth microwave and cordless devices NetCommWireless y A 2 System AP Firewall Jrilities Status Change Password Backup amp Restore System Upgrade Reboot Upload Certificate Channel Analysis Background Scan Home Utilities Channel Analysis Channel Analysis Analyzer Configuration Disable D Enable RF Band 92 4 GHz O5 GHz NP731 User Guide www netcommwuwireless com 44 Ver 1 0 gt gt NetCommWireless Background Scan The background scan function can be used in conjunction with the channel analysis tool for diagnostics Press the Scan Now button to trigger the AP to scan for
50. v4 Del Ed In Mv Fd ACCEPT BOOTPS IPv4 Del Ed In Mv 8 DROP Multicast ALL Del Ed In Mv 9 Del Ed In Mv 10 Del Ed In Mv First Prev Next Last total 50 SAVE CLERR The firewall list may contain up to 20 rules The table below describes the fields of the firewall list FIELD DESCRIPTION Layer 2 Firewall Settings No The number determines the priority of the rule in the firewall list When a rule is checked it is enabled Rules which are not checked are disabled There are 4 actions available Del Click to delete the rule Setting Ed Click to edit the rule In Click to insert a rule Mv Click to move the rule NP731 User Guide www netcommwuireless com 36 Ver 1 0 gt gt NetCommWireless Deleting a specific rule Select the Del option next to the rule you wish to delete then click the Save button NetCommWireless g gt System AP Firewall List Service Y Advanced Home gt Firewall gt Layer 2 Firewall Settings Remove rule Editing a specific rule 5 A E Utilities Status Layer 2 Firewall Settings 1 Select the Ed option next to the rule you wish to edit Adjust the settings you desired then click the Save button when you have finished NetCommWvireless eS System Firewall List Service Advanced Home gt Firewall List gt Layer 2 Firewall Configuration 5 s Utilities Status Layer 2 Firewall Configuration Rule ID Rule nam
Download Pdf Manuals
Related Search