Tube-2HQP 1
.4GHz 802.11b/g/n Outdoor AP/CPE User Guide TABLE OF CONTENTS INTRODUCTION ............................................................................................................... 3 HARDWARE DESCRIPTION ..................................................................................... 3 HARDWARE INSTALLATION ..................................................................................... 3 INITIAL CONFIGURATION.................................................................................
CONTENT FILTERING .................................................................................... 25 NETWORK SETTINGS............................................................................................ 27 WAN ............................................................................................................ 27 LAN .............................................................................................................. 30 ADVANCED ROUTING ...........................................
INITIAL CONFIGURATION The TUBE-2HQP, outdoor 2.4GHz AP/CPE offers a user-friendly web-basedmanagement interface for the configuration of all the unit’s features. Any PC directly attached to the unit can access the management interface usinga web browser, such as Internet Explorer (version 6.0 or above). CONNECTING TO THE LOGIN PAGE It is recommended to make initial configuration changes by connecting aPC directly to the TUBE-2HQP’s Ethernet port. The TUBE-2HQPhas a default IP address of 192.168.2.
STATUS PAGE After logging in to the web interface, the Status page displays. The Homepage top-menu-bar shows the Status, Easy Setup, Advanced and Language. EASY SETUP The Easy Setup is designed to help you to configure the basic settings required to get the TUBE-2HQPup and running. There are only a fewbasic steps you need to set up theTUBE-2HQPto get the connection.
If you want to configure a router connection, please selectAP Router If you want to configure to an access point, please select AP Bridge If you want to configure to WISP, please select Client Router If you want to configure to WiFi client, please select Client Bridge OPERATION MODE–AP ROUTER Choose menu “Easy Setup” and select AP Router if you want to configure a router connection. NOTE: The Ethernet port will convert into WAN port requiring you to configure your CPE via WLAN.
2) ◆User Name — Sets the PPPoE user name for the WAN port. ◆Password — Sets a PPPoE password for the WAN port. ◆Verify Password — Prompts you to re-enter your chosen password. ◆Operation Mode — Enables and configures the keep alive time and configures the on-demand idle time. 3) Security Setup NetworkName (SSID)—SSID (Service Set Identification) must be assigned to all wireless devices in your network. Considering your wireless network security.
2) ◆IP Address—Sets the static IP address. ◆Subnet Mask—Sets the static IP subnet mask. (Default: 255.255.255.0) ◆Default Gateway—The IP address of a router that is used when the requested destination IP address is not on the local subnet. ◆Primary DNS Server—The IP address of the Primary Domain Name Server. A DNS maps numerical IP addresses to domain names and can be used to identify network hosts by familiar names instead of the IP addresses.
parameters. (Options: Disabled, WEP-AUTO, WPA-PSK, WPA2-PSK, WPA-Auto-PSK, WPA, WPA2, WPA-Auto, 802.1X; Default: Disabled) SETTINGS – CABLE/DYNAMIC IP (DHCP) 1) Select Cable/Dynamic IP (DHCP), if your Internet service provider (ISP) use a DHCP service to assign your Router an IP address when connecting to the Internet. 2) The host name that you selected from the DHCP service provider.
SETTINGS – PPTP 1) Select PPTP, if you are using PPTP service to gain connection to the Internet. 2) ◆Server IP — Sets the PPTP server IP Address. (Default: pptp_server) ◆User Name — Sets the PPTP user name for the WAN port. ◆Password — Sets a PPTP password for the WAN port. ◆Address Mode — Sets a PPTP network mode. (Default: Dynamic IP) ◆Operation Mode — Enables and configures the keep alive time. ◆Primary DNS Server — The IP address of the Primary Domain Name Server.
Network Name (SSID) —SSID (Service Set Identification) must be assigned to all wireless devices in your network. Considering your wireless network security. Security Mode — Select the security method and then configure the required parameters. (Options: Disabled, WEP-AUTO, WPA-PSK, WPA2-PSK, WPA-Auto-PSK, WPA, WPA2, WPA-Auto, 802.1X; Default: Disabled) SETTINGS – L2TP 1) Select L2TP, if you are using PPTP service to gain connection to the Internet. 2) ◆Server IP — Sets the L2TP server IP Address.
◆Operation Mode — Enables and configures the keep alive time. ◆Primary DNS Server — The IP address of the Primary Domain Name Server. A DNS maps numerical IP addresses to domain names and canbe used to identify network hosts by familiar names instead of the IP addresses. To specify a DNS server, type the IP addresses in the text field provided. Otherwise, leave the text field blank. ◆Secondary DNS Server — The IP address of the Secondary DomainName Server.
Network Name (SSID) —SSID (Service Set Identification) must be assigned to all wireless devices in your network. Considering your wireless network security. Security Mode — Select the security method and then configure the required parameters. (Options: Disabled, Open, Shared, WEP-AUTO, WPA-PSK, WPA2-PSK, WPA-PSK_WPA2-PSK, WPA, WPA2, WPA1_WPA2, 802.1X; OPERATION MODE–CLIENT ROUTER In the Client Router mode is also known as WISP.
Now, it shows theProfile Name, SSID, BSSID, and encryption type received from your target network and press Next button to continue.
Hostname, and DNS Server then press Next button to finish the wizard. OPERATION MODE–CLIENT BRIDGE In the Client Bridgemode yourTUBE-2HQPwill behave just the same as Wireless adapter. With Client Bridges, the WLAN and the LAN are on the same subnet. Consequently, NAT is no longer used and services that are running on the original network.
3) Now, it shows theProfile Name, SSID, BSSID, and encryption type received from your target network and press Next button to finish the wizard. ADVANCED SETUP Inthe Advanced Manual Bar, it includes all the settings such as firmware upgrade, LAN, WAN and wireless settings that change the RF behaviors. read through this section before attempting to make changes.
MANAGEMENT The Management section is provided for configuration of administrative needs such as language type, user name / Password, firmware upgrade, export and import settings, load factory defaults and reboots system.
◆Password — The new password must not exceed 32 characters in length and must not include any spaces. Enter the new password a second time to confirm it. ◆Software Version - This displays the current firmware version. To upgrade the Router's firmware, follow these instructions below: 1. Download a more recent firmware upgrade file from our website. 2. Type the path and file name of the update file into the File field. Or click the Browse button to locate the update file. 3. Click the Upgrade button.
◆Export Settings — Click the Export Button to download current router configuration to your PC. ◆Import Settings — Click the Import Button to browse for the configuration file that is currently saved on your PC. Click Import to overwrite all current configurations with the one in the configuration file.
◆Time Zone Settings— The Time Zone Settings allows you to configure, update and maintain the correct time on the TUBE-2HQP’s internal system clock. ◆SNTP Server — Enter the address of an SNTP server to receive time updates. ◆SNTP synchronization (minutes) — Specify the interval between SNTP server updates. DDNS Settings — DDNS lets you assign a fixed host and domain name to dynamic Internet IP address. It is useful when you are hosting your own website, FTP server, or other server behind the TUBE-2HQP.
SSH Settings–Secure Shell. Enable your TUBE-2HQPunit to access secure shell (SSH) based network device. Default setting is Disabled. OPERATION MODE The Operation Mode content four modes: AP Bridge, AP Router, Client Router and Client Bridge. ◆AP Bridge— The wired Ethernet and wireless are bridged together. Once the mode is selected, all WAN related functions will be disabled. ◆AP Router—The Ethernet port will convert into WAN port requiring you to configure your CPE via WLAN.
and defends against a wide array of common hacker attacks. MAC/IP/Port filtering allows the unit to permit, deny or proxy traffic through its MAC addresses, IP addresses and ports. The TUBE-2HQPallows you define a sequential list of permit or deny filtering rules. This device tests ingress packets against the filter rules one by one. A packet will be accepted as soon as it matches a permit rule, or dropped as soon as it matches a deny rule.
Action — Displays if the specified traffic is accepted or dropped. Comment — Displays a useful comment to identify the filter rules. VIRTUAL SERVER SETTINGS Virtual Server (sometimes referred to as Port Forwarding) is the act of forwarding traffic from one network node to another based on received protocol port number. This technique can allow an external user to reach a port on a private IP address (inside a LAN) from the outside through a NATenabled router.
Port Mapping — displays the port mapping for the server. Protocol — Displays the protocol used for forwarding this port. Comment — Displays a useful comment to identify the nature of the port to be forwarded. DMZ DMZ is to specified host PC on the local network to access the Internet without any firewall protection. Some Internet applications, such as interactive games or video conferencing, may not function properly behind the firewall.
◆Remote Management (via WAN)— allow or deny to manage the router from anywhere on the Internet. ◆Remote Management Port— The port that you will use to address the management from the Internet. For example, if you specify port 2020, then to access the TUBE-2HQPfrom Internet, you would use a URL of the form: http://xxx.xxx.xxx.xxx:2020/ ◆Ping from WAN Filter — When Allow, the TUBE-2HQPdoes not respond to ping packets received on the WAN port.
◆Web URL Filter Settings — By filtering inbound Uniform Resource Locators (URLs) the risk of compromising the network can be reduced. URLs are commonly used to point to websites. By specifying a URL or a keyword contained in a URL traffic from that site may be blocked. ◆Current URL Filters — Displays current URL filter. ◆Add a URL Filter — Adds a URL filter to the settings. ◆Delete a URL Filter — Deletes a URL filter entry from the list.
NETWORK SETTINGS WAN In this section, there are several connection types to choose from; Static IP, DHCP, PPPoE, PPTP and L2TP. If you are unsure of your connection method, please contact your Internet Service Provider. CABLE/DYNAMIC IP (DHCP) ◆Hostname — Specifies the host name of the DHCP client. ◆Primary DNS Server — The IP address of the Primary Domain Name Server.
STATIC IP (FIXED IP) ◆IP Address—Sets the static IP address. ◆Subnet Mask—Sets the static IP subnet mask. (Default: 255.255.255.0) ◆Default Gateway—The IP address of a router that is used when the requested destination IP address is not on the local subnet. ◆Primary DNS Server—The IP address of the Primary Domain Name Server. A DNS maps numerical IP addresses to domain names and can be used to identify network hosts by familiar names instead of the IP addresses.
◆Secondary DNS Server — The IP address of the Secondary Domain Name Server. IPSec Verify the desire settings and use scroll down for more options. ◆IPSec Connection Type –Use drop down menu to select from Road Warrior Tunnel, Host to Host Tunnel, Subnet to Subnet Tunnel, Host to Host Transport, Pass trough, Drop, or Reject. Default setting is Road Warrior Tunnel ◆IPSec Authentication– Use drop down menu to select from SHA-1, or MD5. Default setting is SHA1.
◆Server IP — Sets the L2TP server IP Address. (Default: l2tp_server) ◆User Name — Sets the L2TP user name for the WAN port. ◆Password — Sets a L2TP password for the WAN port. ◆Address Mode — Sets a L2TP network mode. (Default: Dynamic IP) ◆Operation Mode — Enables and configures the keep alive time. ◆Primary DNS Server — The IP address of the Primary Domain Name Server.
( Default: 192.168.2.1 ) ◆Subnet Mask— The subnet mask of TUBE-2HQPon the local area network ◆DHCP Server— The DHCP Server is to assign private IP address to the TUBE-2HQPin your local area network(LAN). The default LAN IP address is 192.168.2.1, changing IP address will also change the DHCP server’s IP subnet. ADVANCED ROUTING In this section, allow to configure routing feature in the TUBE-2HQP. ◆Destination — The IP addressof packets that can be routed. ◆Type— Defines the type of destination.
WIRELESS SETTINGS BASIC ◆Wireless On/Off — Enables or Disable the radio. (Default: Turn On) ◆Wireless Mode — There are 4 wireless mode, those are Access Point, WDS Access Point, WDS Repeater and WDS Client Note. If WEP authentication is selected for WDS communication, you will then only have one set of encryption for the entire channel. ◆Network Name (SSID) — The name of the wireless network service provided by the TUBE-2HQP.
SECURITY WIRED EQUIVALENTPRIVACY (WEP) WEP provides a basic level of security, preventing unauthorized access to the network, and encrypting data transmitted between wireless clients and an access point. WEP uses static shared keys (fixed-length hexadecimal or alphanumeric strings) that are manually distributed to all clients that want to use the network. When you select to use WEP, be sure to define at least one static WEP key for user authentication or data encryption.
◆WEP Keys — Sets WEP key values. The user must first select ASCII or hexadecimal keys. Each WEP key has an index number. Enter key values that match the key type and length settings. Enter 5 alphanumeric characters or 10 hexadecimal digits for 64-bit keys, or enter 13 alphanumeric characters or 26 hexadecimal digits for 128-bit keys. (Default: Hex, no preset value) Note. If WEP authentication is selected for WDS communication, you will then only have one set of encryption for the entire channel.
WPA2-compliant hardware. ■ Auto— Uses either TKIP or AES keys for encryption. WPA and WPA2 mixed modes allow both WPA and WPA2 clients to associate to a common SSID. In mixed mode, the unicast encryption type (TKIP or AES) is negotiated for each client. ◆Key Renewal Interval — Sets the time period for automatically changing data encryption keys and redistributing them to all connected clients. RADIUS Server — Configures RADIUS server settings.
Key are accepted for authentication. The default data encryption type is TKIP/AES. ◆WPA Algorithms — Selects the data encryption type to use. (Default is determined by the Security Mode selected.) ■ TKIP — Uses Temporal Key Integrity Protocol (TKIP) keys for encryption. WPA specifies TKIP as the data encryption method to replace WEP. TKIP avoids the problems of WEP static keys by dynamically changing data encryption keys. ■ AES — Uses Advanced Encryption Standard (AES) keys for encryption.
user authentication. When 802.1X is used, a RADIUS server must be configured and be available on the connected wired network. RADIUS Server — Configures RADIUS server settings. ◆IP Address — Specifies the IP address of the RADIUS server. ◆Port — The User Datagram Protocol (UDP) port number used by the RADIUS server for authentication messages. (Range: 1024-65535;Default: 1812) ◆Shared Secret — A shared text string used to encrypt messages between the access point and the RADIUS server.
◆Encryption Settings— Selects between methods of broadcasting the WPS beacon to network clients wanting to join the network: WPA Algorithms — Select the data encryption type to use. (Default is determined by the Security Mode selected.) ◆TKIP — Uses Temporal Key Integrity Protocol (TKIP) keys for encryption. WPA specifies TKIP as the data encryption method to replace WEP. TKIP avoids the problems of WEP static keys by dynamically changing data encryption keys.
Federal Communications Commission (FCC) Statement You are cautioned that changes or modifications not expressly approved by the part responsible for compliance could void the user’s authority to operate the equipment. This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: 1) this device may not cause harmful interference, and 2) this device must accept any interference received, including interference that may cause undesired operation of the device.
