User manual Revision 1.0 24 January 2013 Copyright © 2012 Deliberant www.deliberant.
Copyright © 2012 Deliberant This user’s guide and the software described in it are copyrighted with all rights reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form by any means without the written permission of Deliberant. Notice Deliberant reserves the right to change specifications without prior notice.
Le présent appareil est conforme aux CNR d'Industrie Canada applicables aux appareils radio exempts de licence.L'exploitation est autorisée aux deux conditions suivantes : (1) l'appareil ne doit pas produire de brouillage, et (2) l'utilisateur de l'appareil doit accepter tout brouillage radioélectrique subi, même si le brouillage est susceptible d'en compromettre le fonctionnement.
错误！文档中没有指定样式的文字。 Contents Copyright ............................................................................................................................................. 2 Notice .................................................................................................................................................. 2 Trademarks ......................................................................................................................................... 3 CONTENTS ...............
错误！文档中没有指定样式的文字。 Security Settings ....................................................................................................................................... 41 Advanced Wireless Settings...................................................................................................................... 42 Virtual AP .......................................................................................................................................43 Wireless ACL ...........................
错误！文档中没有指定样式的文字。 About this Guide Prerequisite Skills and Knowledge To use this document effectively, you should have a working knowledge of Local Area Networking (LAN) concepts and wireless Internet access infrastructures. Conventions Used in this Document The following typographic conventions and symbols are used throughout this document: Additional information that may be helpful but which is not required. Important information that should be observed.
错误！文档中没有指定样式的文字。 Abbreviation Description MAC Media Access Control Mbps Megabits per second MHz Megahertz MIMO Multiple Input, Multiple Output MSCHAPv2 Microsoft version of the Challenge-handshake authentication protocol, CHAP.
错误！文档中没有指定样式的文字。 To access the Web management interface, configure your PC with a static IP address on the 192.168.2.0 subnet with mask 255.255.255.0. Connect the AP device in to the same physical network as your PC. Open the Web browser and type the default IP address of the APC device https://192.168.2.66/ and the login page will be loaded.
错误！文档中没有指定样式的文字。 The initial login screen looks as follow: Step 5. Confirm the disclaimer of the APC. According to the chosen country the regulatory domain settings may differ. You are not allowed to select radio channels and RF output power values other the permitted values for your country and regulatory domain. Step 6. Enter the default password, and then press the Login button to enter the AP web management page.
错误！文档中没有指定样式的文字。 Step 7.
错误！文档中没有指定样式的文字。 Step 8. Navigate to the Configuration | Wireless tab, choose Access Point wireless mode with WDS enabled, specify the SSID with Broadcast enabled, Security parameters and IEEE mode and click Save&Apply: Step 9. Verify connection.
错误！文档中没有指定样式的文字。 The initial login screen looks as follow: Step 5. Confirm the disclaimer of the APC. According to the chosen country the regulatory domain settings may differ. You are not allowed to select radio channels and RF output power values other the permitted values for your country and regulatory domain. Step 6. Enter the default password, and then press the Login button to enter the APC web management page.
错误！文档中没有指定样式的文字。 Step 7.
错误！文档中没有指定样式的文字。 Step 8. Navigate to the Configuration | Wireless tab, choose Station WDS wireless mode, click Scan button near the SSID entry field to choose the SSID of the AP where the station will be associated to. Specify the Security parameters for the AP, check IEEE mode (these settings must conform with AP wireless settings) and click Save&Apply: Step 9. Verify connection. Navigate to the Status | Information page. The Information page will display wireless information of the link with AP.
错误！文档中没有指定样式的文字。 Network Operation Modes The device can operate as transparent Bridge or Router. Bridge Mode The device can act as a wireless network bridge and establish wireless links with other APs. In this mode all LAN port and Wireless interface will be a part of the Bridge. Figure 2 – Bridge Mode With a Bridge, all connected computers are in the same network subnet. The only data that is allowed to cross the bridge is data that is being sent to a valid address on the other side of the bridge.
错误！文档中没有指定样式的文字。 General Device Operation Web Management Structure The main web management menu is displayed after successfully login into the system (see the figure below). From this menu all essential configuration pages are accessed. The active menu tab is displayed in a different color: By default the Status | Information menu is activated where the main device information is displayed.
错误！文档中没有指定样式的文字。 Site Survey – information about other wireless networks in the local area. Delayed reboot – setup delayed reboot for APC unit. Ping – perform ping command. Traceroute – perform graphical traceroute command. Spectrum analyzer – check the signal strength on available channels.
错误！文档中没有指定样式的文字。 Configuration Guide This document contain product‘s powerful web management interface configuration description allowing setups ranging from very simple to very complex. Status Information The Information page displays a summary of status information of your device. It shows important information for the APC operating mode, network settings. System information – displays general information about the device.
错误！文档中没有指定样式的文字。 IP address – displays the IP address of the particular interface. MAC – displays the MAC address of the particular interface. Received – displays the number of received packets. RX errors – displays the number of the RX errors. Transmitted – displays the number of transmitted packets. TX errors – displays the number of the TX errors. DHCP leases – table displays information about leased DHCP addresses. This table appears only on AP which acts as Router and have DHCP server enabled.
错误！文档中没有指定样式的文字。 The Wireless statistics displays the receive/transmit statistics between AP and successfully associated wireless clients: Figure 5 – Access Point's Wireless Statistics In case the access point has more than one wireless interface (VAPs), the appropriate number of tables with information about connected wireless clients will be displayed. Peer MAC – displays MAC address of the successfully connected wireless client.
错误！文档中没有指定样式的文字。 ARP The ARP page displays the ARP (Address Resolution Protocol) table currently recorded on the device. Use Refresh button to reload ARP table results. Figure 7 – ARP Table Records Configuration Network The Configuration | Network page allows you to control the network configuration and settings of the device. First, the device operation mode must be defined to work as a bridge or router.
错误！文档中没有指定样式的文字。 When device is configured to operate in Bridge mode, only device LAN settings should be configured on the Network page: Figure 9 – Bridge Mode Settings IGMP snooping (only on AP or iPoll Bridge modes) – when enabled AP will passively snoop on IGMP Report and Leave packets transferred between it's clients and IP Multicast hosts. It checks IGMP packets passing through it, picks out the group registration information and generates internal L2 MAC forwarding table.
错误！文档中没有指定样式的文字。 VLAN to SSID Mapping Virtual Local Area Networks (VLANs) are logical groupings of network resources. Figure 10 - VLAN to SSID Mapping VLAN to SSID mapping – specify the VLAN ID for traffic tagging on required radio interface [2-4095]. The Station devices that associate using the particular SSID will be grouped into this VLAN. Management VLAN Available only on Bridge network mode. Access to the AP for management purposes can further be limited using VLAN tagging.
错误！文档中没有指定样式的文字。 Router Mode This section allows customizing parameters of the Router to suit the needs of network, including ability to use the built-in DHCP server. When device is configured to operate as Router, the following sections should be specified: WAN network settings, LAN network settings and LAN DHCP settings.
错误！文档中没有指定样式的文字。 WAN Settings WAN network settings include settings related to the WAN interface. The access type of the WAN interface can be configured as: Static IP, Dynamic IP, PPPoE client. WAN mode – choose Static IP to specify IP settings for device WAN interface: Figure 13 – Router WAN Settings: Static IP MAC address – specify the clone MAC address if required. The ISPs registers the MAC address of the router, and allows only that MAC address to connect to their network.
错误！文档中没有指定样式的文字。 WAN mode – choose Dynamic IP to enable DHCP client on the WAN side. This option does not need any parameters: Figure 14 – Routers WAN Settings: Dynamic IP MAC address – specify the clone MAC address if required. The ISPs registers the MAC address of the router, and allows only that MAC address to connect to their network.
错误！文档中没有指定样式的文字。 WAN mode – choose PPPoE to configure WAN interface to connect to an ISP via a PPPoE: Figure 15 – Routers WAN Settings: PPPoE client MAC address – specify the clone MAC address if required. The ISPs registers the MAC address of the router, and allows only that MAC address to connect to their network.
错误！文档中没有指定样式的文字。 Figure 16 – Router LAN Settings IP address – specify the IP address of the device LAN interface. Subnet mask – specify the subnet mask of the device LAN interface. LAN DHCP Settings DHCP mode – choose disabled to disable DHCP on LAN interface. Figure 17 – Router LAN Settings: DHCP Disabled DHCP mode – choose relay to enable DHCP relay. The DHCP relay forwards DHCP messages between subnets with different sublayer broadcast domains.
错误！文档中没有指定样式的文字。 Wireless The Wireless tab is divided in three sections: Basic, Security and Advanced configuration sections. The Basic section contains all parameters that required to configure in order have working wireless link. Security section is used to select authentication and encryption settings. Advanced section contains parameters allowing optimizing the link capacity. Before changing radio settings manually verify that your settings will comply with local government regulations.
错误！文档中没有指定样式的文字。 Wireless Mode: Access Point (auto WDS) Use Basic Wireless Settings to setup radio interface of the device. Figure 21 – Access Point Wireless Settings Basic Wireless Settings SSID – specify the SSID of the wireless network device. Broadcast SSID – enables or disables the broadcasting of the SSID for AP. IEEE mode – specify the wireless network mode. Channel width – The default channel bandwidth for 802.11 radio is 20MHz. The 802.
错误！文档中没有指定样式的文字。 Security Settings Both sides (AP and Station) of the link must have the same security settings. Device supports various authentication/encryption methods: Open – no encryption. WEP – 64bit and 128bit key. Personal – preshared key encryption with WPA/WPA2 using AES or TKIP. Enterprise – RADIUS server based authentication with WPA/WPA2 encryption using AES or TKIP (requires configured RADIUS server). UAM – Web browser based user authentication method.
错误！文档中没有指定样式的文字。 AP has possibility to configure Enterprise WPA/WPA2 encryption with RADIUS authentication. Properly configured AP will accept wireless stations requests and will send the information to configured RADIUS server for client authentication. Figure 25 – Security: Enterprise WPA/WPA2 Encryption The properly configured RADIUS server is required for Enterprise WPA/WPA2 encryption.
错误！文档中没有指定样式的文字。 Tx power – set the unit’s transmitting power at which the device will transmit data. The larger the distance, the higher transmit power is required. To set transmit power level use the slider or enter the value manually. When entering the transmit power value manually, the slider position will change according to the entered value. The maximum transmit power level is limited to the allowed value by country in which device is operating regulatory agency.
错误！文档中没有指定样式的文字。 Wireless Mode: Station Station WDS has the same wireless settings. The Station wireless settings a bit differ from the Access Point’s settings: there is possibility to scan SSID of the surrounding APs and choose the required one. Use Wireless Settings to setup radio interface of the device. Figure 27 – Station Wireless Settings Basic Wireless Settings SSID – specify the SSID of the wireless network device. Scan – click this button to scan for surrounding wireless networks.
错误！文档中没有指定样式的文字。 Security Settings Both sides (AP and Station) of the link must have the same security settings. Device supports various authentication/encryption methods: Open – no encryption. WEP – 64bit and 128bit key. Personal – preshared key encryption with WPA/WPA2 using AES or TKIP. Enterprise – RADIUS server based authentication with WPA/WPA2 encryption using AES or TKIP (requires configured RADIUS server).
错误！文档中没有指定样式的文字。 Figure 31 – Security: Enterprise WPA/WPA2 Encryption Encryption – choose WPA/WPA2 encryption type: AES – data encrypted with AES method; TKIP – data encrypted with TKIP method; EAP method – choose EAP method: EAP-TTLS-MSCHAPv2 PEAP/ MSCHAPv2 Identity – specify the identity of the authentication to the RADIUS server. Password – specify the password of the authentication to the RADIUS server.
错误！文档中没有指定样式的文字。 Fragmentation – specify the Fragmentation threshold using slider or enter the value manually [2562346 bytes]. This is the maximum size for a packet before data is fragmented into multiple packets. Setting the Fragmentation threshold too low may result in poor network performance. Only minor modifications of this value are recommended. RTS – specify the RTS threshold using slider or enter the value manually [0-2347 bytes].
错误！文档中没有指定样式的文字。 Figure 33 – iPoll Access Point’s Wireless Settings Basic Settings Use Basic section to setup basic operating settings of the iPoll Access Point’s radio. iPoll Access Point and iPoll Station will operate in 802.11n IEEE mode only. SSID – specify the SSID of the wireless network device. Broadcast SSID – enables or disables the broadcasting of the SSID for iPoll AP. Channel width – The default channel bandwidth for 802.11n radio is 20MHz. The 802.
错误！文档中没有指定样式的文字。 Security Settings Both sides (iPoll Access Point and iPoll Station) of the link must have the same security settings. The APC device working, in iPoll Access Point wireless mode, supports authentication/encryption methods listed below: Open – no encryption. Personal WPA – preshared key encryption with WPA using AES method. Personal WPA2 – preshared key encryption with WPA2 using AES method.
错误！文档中没有指定样式的文字。 Enable DFS – select to enable a radar detection. With enabled DFS, iPoll AP monitors the operating frequency for radar signals. If radar signals are detected on the channel, the unit randomly selects a different channel. Note that if APC is operating on channel where DFS is required, this option automatically will be enabled. Mode – choose the unit’s antenna operating mode: SISO – single input single output. The device will use only one antenna for data transfer.
错误！文档中没有指定样式的文字。 Wireless Mode: iPoll Station The iPoll Station is a wireless client mode which can connect to the iPoll Access Points. Figure 37 – iPoll Station's Wireless Settings Basic Settings Use this section to setup basic operating settings of the iPoll Station radio. iPoll Access Point and iPoll Station will operate in 802.11n IEEE mode only. SSID – specify the SSID of the wireless network device manually, or use Scan functionality.
错误！文档中没有指定样式的文字。 Open – no encryption. Personal WPA – preshared key encryption with WPA using AES method. Personal WPA 2 – preshared key encryption with WPA2 using AES method. By default there is no encryption enabled on the device: Figure 38 – iPoll Security: Open Personal WPA/WPA2 encryption must be specified with the pre-shared key: Figure 39 – iPoll Security: Private WPA/WPA2 Encryption Passphrase – specify the WPA or WPA2 passphrase [8-63 characters].
错误！文档中没有指定样式的文字。 Max data rate – select the device data transmission rates in Mbps from the drop-down list. The unit will attempt to transmit data at the highest data rate set. If there will be an interference encountered, the iPoll Station will step down to the highest rate that allows data transmission. Virtual AP Virtual AP functionality is available only in Access Point (auto WDS) wireless mode. Use the Configuration | Virtual AP page to configure to create up to 3 additional Virtual AP interfaces.
错误！文档中没有指定样式的文字。 Personal – preshared key encryption with WPA/WPA2 using AES or TKIP. Enterprise – RADIUS server based authentication with WPA/WPA2 encryption using AES or TKIP (requires configured RADIUS server). UAM – Web browser based user authentication method. UAM authentication is available only if Access Point is working in router mode. For UAM configuration details refer at the respective chapter Universal Access Method (UAM).
错误！文档中没有指定样式的文字。 Figure 44 – Traffic Shaping Configuration Limit all traffic Enable download shaping – select to enable limitation of the download traffic. Download limit, kbps – specify the maximum download (from wireless interface to Ethernet interface) bandwidth value in Kbps. Download burst, kbytes – specify the download burst size in kbytes. Enable upload shaping – select to enable limitation of the upload traffic.
错误！文档中没有指定样式的文字。 Port Forwarding Port forwarding is active only in Router network mode.. Port Forwarding, UPnP and DMZ is effective only if NAT is enabled. The Port forwarding section gives the ability to pass traffic behind an interface that has NAT enabled. For instance if the unit is in router mode with NAT enabled on the WAN interface, no devices on the outside of the WAN interface can see any private IPs on the LAN side of the unit.
错误！文档中没有指定样式的文字。 Static Routes Static routes is active only in Router network mode. A routing rule is defined by the destination subnet (Destination IP address and netmask) and/or gateway where to route the target traffic. To add a new static route, specify the following parameters: Figure 47 – Static Route Configuration Destination IP – specify the destination IP address. Netmask – specify destination netmask. Gateway – specify the gateway address for the route. 0.0.0.
错误！文档中没有指定样式的文字。 System alerts The device is able to send external alerts when there are system errors. The alerts can be sent via SNMP Traps or/and SMTP notifications. Figure 48 – Device Alerts Enable alerts – select to enable alert notifications on the system. System check interval, s – specify interval in seconds at which the device will send notifications of unexpected system behavior. System alerts: Wireless link status change – system will send notification on Wireless link status change.
错误！文档中没有指定样式的文字。 SNMP Traps Settings Manager address – specify the IP address or hostname of SNMP Trap receiver. Manager port – specify the port number of the Trap receiver. Default port number is 162. Trap community - specify the SNMP community string. This community string acts as password between SNMP manager and device by default Trap community string is "public". Use inform – select to wait for an acknowledgment from SNMP manager that trap was received.
错误！文档中没有指定样式的文字。 Link location – displays the physical location of the device. This name has the same value as Device location in the Device settings. Contact information – specify the identification of the contact person for this managed device, together with information on how to contact this person. R/O community – specify the read-only community name for SNMP version 1 and version 2c. The read-only community allows a manager to read values, but denies any attempt to change values.
错误！文档中没有指定样式的文字。 SSH Use this menu to manage access to the device via SSH port: Figure 53 – SSH Port Configuration Enabled – enable or disable SSH access to device. Port – the SSH service port. By default SSH port is 22. HTTP Use this menu to control HTTP connection on device web management: Figure 54 – HTTP Settings Enable management through HTTP – select tis option to enable or disable HTTP access to the device management. Port – specify HTTP port. Standard HTTP port is 80.
错误！文档中没有指定样式的文字。 System Administration For security reasons it is recommended to change the default administrator username and password as soon as possible. System menu allows you to manage main system settings and perform main system actions (reboot, restore configuration, etc.). The section is divided into further three sections: Device settings, Account settings and system functions.
错误！文档中没有指定样式的文字。 System functions Reboot device – reboot device with the last saved configuration. Reset device to factory defaults – click to restore unit's factory configuration. Resetting the device is an irreversible process. Current configuration and the administrator password will be set back to the factory default. Download troubleshooting file – click to download the troubleshooting file.
错误！文档中没有指定样式的文字。 Forward port – specify the port to which syslog messages will be forwarded [0-65535]. Default: 514. Forward message level – specify the level of the message which will be sent to the remote syslog server. The level determines the importance of the message and the volume of messages generated by the device. The levels are in order of increasing importance [emergency/alert/critical/error/warning/notice/information/debug]. Default: information.
错误！文档中没有指定样式的文字。 Firmware Upgrade To update your device firmware use the System | Firmware upgrade menu. Press Upload firmware, select the firmware file and click the Upload firmware button: Current version – displays version of the current firmware. Upload firmware – click the button to select the new firmware image for uploading it to the device. The device system firmware upgrade is compatible with all configuration settings.
错误！文档中没有指定样式的文字。 Tools Antenna Alignment The Antenna Alignment tool measures signal quality between the Station and AP. For best results during the antenna alignment test, turn off all wireless networking devices within range of the device except the device(s) with which you are trying to align the antenna. Watch the constantly updated display in the Alignment Test window as you adjust the antenna. Figure 59 – Antenna Alignment Start – press this button to start antenna alignment.
错误！文档中没有指定样式的文字。 Delayed Reboot This tool is extremely useful while tuning radio settings – once you defined hypothetic radio parameters and set them with Apply button (not written to the permanent memory), device starts operating with the new settings, and in case the link fails, device will be rebooted in specified minutes, thus the old settings will be set back. Figure 60 – Delayed Reboot Configuration Reboot after – specify time in minutes, after which the device will be rebooted.
错误！文档中没有指定样式的文字。 Traceroute This tool is a route-tracing utility used to determine the path that an IP packet has taken to reach a destination. This is useful when trying to find out why destination is unreachable, as you will be able to see where the connection fails. Figure 62 – Traceroute Results Destination IP or Hostname – specify hostname or IP address of the target host. Max Hops –Specifies the maximum number of hops to search for target. Start/Stop – click to start or stop traceroute tool.
错误！文档中没有指定样式的文字。 Spectrum Analyzer The Spectrum analyzer test displays detailed information about signal level of each APC unit’s antenna on each available frequency. This enables administrator choose the best available frequency/channel for the unit operation. The frequency list depends on the Country at which the unit is operating, and chosen channel width. Do not use the Spectrum analyzer on the remote unit of the link, as the connection to the device will be lost during the test.
错误！文档中没有指定样式的文字。 Universal Access Method (UAM) Universal Access Method (UAM) is a simple Web browser based user authentication method. On initial HTTP request to any Web site, client’s browser is redirected to the authentication page for login to the network. The login page can be served by internal Web server or by external Web Application Server. UAM Overview When using internal UAM, the Login page is the first page a client receives when he starts his Web browser and enters any URL.
错误！文档中没有指定样式的文字。 Use Security section on Wireless or VAP (depending on the interface on which the UAM will be configured) page for UAM configuration: choose the security option UAM: Figure 64 – UAM Settings RADIUS Settings NAS ID – specify the NAS identifier. RADIUS server 1 – specify the name or IP address of the primary RADIUS server. RADIUS server 2 – specify the name or IP address of the secondary RADIUS server. RADIUS secret – specify the RADIUS shared secret.
错误！文档中没有指定样式的文字。 Key – upload a PEM formatted private key file. Certificate – upload a PEM formatted certificate file. WISPr Settings WISPr location name – specify the WISPr location name. Operator name – specify the operator’s name Network name – specify the network name ISO country code – specify the country code in ISO standard. E.164 country code – specify the country code in E.164 standard. E.164 area code – specify the area code in E.164 standard.
错误！文档中没有指定样式的文字。 Appendix A) Resetting Device to Factory Defaults Device has the capability of being reset to defaults by pinging the device with a certain packet size when the radio is booting. During the startup of the device, when the drivers of the Ethernet interfaces are loaded, the discovery daemon is started. The daemon suspends startup process for 3 seconds and waits for ICMP "echo request" packet of length 369 bytes.
错误！文档中没有指定样式的文字。 B) RADIUS Attributes The following RADIUS attributes and messages are supported by the DLB APC. General Attributes Attribute Description User-name (1) Full username as entered by the user. User-Password (2) Used for UAM as alternative to CHAP-Password and CHAP-Challenge.
错误！文档中没有指定样式的文字。 Attribute Description Access-reject chilli will validate that the Message-Authenticator is correct. Acct-Interim-Interval (85) If present in Access-Accept chilli will generate interim accounting records with the specified interval (seconds). MS-MPPE-Send-Key (311,16) Used for WPA MS-MPPE-Recv-Key (311,17) Used for WPA WISPr Attributes Attribute Description WISPr-Location-ID (14122, 1) Location ID is set to the radiuslocationid option if present.
错误！文档中没有指定样式的文字。 Attribute Description disconnected.
