User Manual Light Industrial Access Point IWF2220 V1.
User’s Manual Light Industrial AP ENGLISH Copyright & Disclaimer Copyright The contents of this publication may not be reproduced in any part or as a whole, stored, transcribed in an information retrieval system, translated into any language, or transmitted in any form or by any means, mechanical, magnetic, electronic, optical, photocopying, manual, or otherwise, without the prior written permission of NEXCOM, INC. Disclaimer NEXCOM, INC.
User’s Manual Light Industrial AP ENGLISH ● Increase the separation between the equipment and receiver. ● Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. ● Consult the dealer or an experienced radio/TV technician for help. FCC Caution: Any changes or modifications not expressly approved by the party responsible for compliance could void the user’s authority to operate this equipment. This device complies with Part 15 of the FCC Rules.
User’s Manual Light Industrial AP ENGLISH This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. Warning! You are cautioned that changes or modifications not expressly approved by the party responsible for compliance could void your authority to operate the equipment. 1. Handling the unit: carry the unit with both hands and handle it with care. 2.
User’s Manual Table of Contents 1. Light Industrial AP ENGLISH Before You Start ..................................................................................................................................6 1.1 Preface .................................................................................................................................................6 1.2 Document Conventions .................................................................................................................
User’s Manual Light Industrial AP ENGLISH 7.4.4 Reboot ............................................................................................................................ 74 7.4.5 Upload Certificate .......................................................................................................... 75 7.4.6 Channel Analysis ............................................................................................................ 75 7.5 Status ...............................................
User’s Manual Light Industrial AP ENGLISH 1. Before You Start 1.1 Preface This manual is intended for using by system integrators, field engineers and network administrators to help them set up Access Points in their network environments. It contains step by step procedures and pictures to guide users with basic network system knowledge to complete the installation. 1.2 Document Conventions Represents essential steps, actions, or messages that should not be ignored.
User’s Manual Light Industrial AP ENGLISH 1.3 Package Content The standard package of IWF2220 includes: NEXCOM IWF2220 x1 CD-ROM (with User’s Manual and QIG) x1 Ethernet Cable x1 Power cord x1 Power Adaptor (12V) x1 Detachable Antenna x4 It is recommended to keep the original packing materials for possible future shipment when repair or maintenance is required. Any returned product should be packed in its original packaging to prevent damage during delivery.
User’s Manual Light Industrial AP ENGLISH 2. System Overview and Getting Started 2.1 Introduction of NEXCOM Access Points Indoor – IWF2220 The NEXCOM’s Enterprise Access Point IWF Series are embedded with 802.11 a/b/g/n MIMO technology, designed for seamless wireless connectivity in enterprise or industrial environments of all dimensions. IWF2220 features dual radio RF cards to offer flexible implementations needed for the growing wireless networking applications.
User’s Manual Light Industrial AP ENGLISH 2.2 Hardware Description This section depicts the hardware information including all panel description. IWF2220 Front Panel IWF2220 Front Panel 9 Copyright © NEXCOM, INC.
User’s Manual Light Industrial AP ENGLISH Rear Panel IWF2220 Rear Panel Press once to restart the system; to reset the system to factory default settings, hold for more than 5 seconds. 1 Restart / Reset 2 WES Button (RF B) WDS Easy Setup. Press the button to build up a WDS link with another peer. 4 WDS links can be set up per RF card. Note that the WES Button only runs on the 5 GHz RF Card B. 3 LAN 1~4 Ports The ports for connections with LAN side devices.
User’s Manual Light Industrial AP ENGLISH 2.3 Hardware Installation Please follow the steps mentioned below to install the hardware of IWF2220: Step 1. Place the IWF2220 at the best location. The best location is usually at the center of your intended wireless network. Step 2. Connect the IWF2220 to your network device. Connect one end of the Ethernet cable to the Uplink port of IWF2220 and the other end of the cable to a switch, a router, or a hub.
User’s Manual Light Industrial AP ENGLISH 2.4 Access Web Management Interface NEXCOM Access Points support web-based configuration. When hardware installation is complete, the AP can be configured through a PC by using a web browser. The default values of the AP’s LAN IP Address and Subnet Mask are: IP Address: 192.168.1.1 Subnet Mask: 255.255.255.
User’s Manual Light Industrial AP ENGLISH Administrator Login Page After a successful login into AP, a System Overview page of the Web Management Interface (WMI) will appear. The Web Management Interface - System Overview Page To logout, simply click on the Logout button at the upper right hand corner of the interface to return to the Administrator Login Page. Click OK to logout. 13 Copyright © NEXCOM, INC.
User’s Manual Light Industrial AP ENGLISH Logout Prompt For security reasons, it is strongly recommended to change the administrator’s password upon the completion of all configuration settings Please follow the following steps to change the administrator’s password: Change Password Page Click on the Utilities icon on the main menu, and select the Change Password tab.
User’s Manual Light Industrial AP ENGLISH 3. Connect your AP to your Network The following instructions depict how to establish the wireless coverage of your network. The AP will connect to the network through its LAN port and provide wireless access to your network. After having prepared the AP’s hardware for configuration, set the TCP/IP settings of administrator’s computer to have a static IP Address of 192.168.1.10 and Subnet Mask of 255.255.255.0.
User’s Manual Light Industrial AP ENGLISH Web Management Interface Main Page (System Overview) From here, click on the System icon to get to the following page. On this Page you can make entries to the Name, Description, and Location fields as well as set the device’s time. System Information Page There are two methods of setting up the time: Manual (indicated by the option Set Date & Time) and NTP. The default is Manual and requires individual setup every time the system starts up.
User’s Manual Light Industrial AP ENGLISH NTP Setup Step 2: Configuring the AP’s Network Settings While still on this Page, click on the Network Interface tab to begin configuration of the network settings.
User’s Manual Light Industrial AP ENGLISH Wireless General Settings Page On this page, choose the RF card you would like to set up and select the band in which the AP is to broadcast its signal. The rest of the fields are optional and can be configured at another time. Click SAVE if any changes have been made. Note: •For IWF2220, the RF Card A supports only 2.4GHz bands (b/g/n) and RF Card B supports only 5GHz bands (a/n). 18 Copyright © NEXCOM, INC.
User’s Manual Light Industrial AP ENGLISH Step 4: Configuring Wireless Coverage (VAP-1) To set up the AP’s wireless access, refer to the following VAP-1 configuration (other VAP configuration can refer to the same setup steps as done for VAP-1). Click on the Overview tab to proceed. Virtual AP Overview Page On this page click the hyperlink in the row and column that corresponds with VAP-1’s State. This will bring up the following page. 19 Copyright © NEXCOM, INC.
User’s Manual Light Industrial AP ENGLISH VAP Configuration Page (RF Card A : VAP-1 shown) The desired VAP profile can be selected from the drop-down menu of Profile Name and VAP-1 configuration will serve as an example for all other VAPs. Before proceeding further, please make sure that the VAP field is marked Enable; afterwards, enter an ESSID to represent the WLAN associated with AP’s VAP-1.
User’s Manual Light Industrial AP ENGLISH 4. Adding Virtual Access Points The AP possesses the feature of multi-ESSID; namely, it can behave as multiple virtual access points, providing different levels of services from the same physical AP device. Please click on the Wireless icon to review the VAP Overview page.
User’s Manual Light Industrial AP ENGLISH VAP Configuration Page (VAP-1 shown) Please select the desired RF card and VAP profile from the drop-down menu of Profile Name. Choose Enable for the VAP field. Pick a descriptive Profile Name and an appropriate ESSID for clients to associate to. A VLAN ID can be provided to indicate the traffic through this particular VAP. It may allow further management/control (e.g. access rights and Internet usage, etc) of each VAP with a management gateway.
User’s Manual Light Industrial AP ENGLISH 5. Securing the AP Different VAP may require different levels of security. These instructions will guide the user through setting up different types of security for a particular VAP. Simply repeat the following steps for other VAP with security requirement. Step 1: Ensure the intended VAP is Enabled VAP Overview Page On the VAP Overview page, check the table to confirm the VAP State. If it is Enabled, skip to Step 2.
User’s Manual Light Industrial AP ENGLISH VAP Configuration Page (RF Card A : VAP-1 as shown for example) Select Enable for the VAP field and click SAVE. Click the Overview tab to return to the previous table to begin the next step. Step 2: Configure Security Settings for your VAP The following instructions will guide the user to set up wireless security with a specific VAP. If only restricted access of certain MAC addresses is desired, skip to Step3.
User’s Manual Light Industrial AP ENGLISH Security Settings Page ( RF Card A : VAP-1 shown ) Select the desired Security Type from the drop-down menu, which includes None, WEP, 802.1X, WPA-PSK, and WPA-RADIUS. 802.11g+802.11n band does not support WEP nor WPA-PSK running TKIP. When the Security Type is set as such, the RF is only able to run ‘g’ band. 25 Copyright © NEXCOM, INC.
User’s Manual Light Industrial AP ENGLISH None: Authentication is not required and data is not encrypted during transmission when this option is selected. This is the default setting as shown in the following figure. Security Settings: None WEP: WEP (Wired Equivalent Privacy) is a data encryption mechanism with key length selected from 64-bit, 128-bit, or 152-bit. Security Settings: WEP 802.11 Authentication: Select from Open System, Shared Key, or Auto. 26 Copyright © NEXCOM, INC.
User’s Manual Light Industrial AP ENGLISH WEP Key Length: Select a key length from 64-bit, 128-bit, 152-bit. WEP Key Format: Select from ASCII or Hex format for the WEP key. WEP Key Index: Select a key index from 1 through 4. The WEP key index is a number that specifies which WEP key is used for the encryption of wireless frames during data transmission. WEP Keys: Provide the pre-defined WEP key value; the system supports up to 4 sets of WEP keys. 802.1X: When 802.
User’s Manual o Light Industrial AP ENGLISH Re-keying Period: The time interval for the dynamic WEP key to be updated; the time unit is in seconds. RADIUS Server Settings (A redundant server can also be added to the system): o Host: Enter the IP address or domain name of the RADIUS server. o Authentication Port: The port number used by the RADIUS server. Specify a port number or use the default, 1812. o Secret Key: The secret key for the system to communicate with the RADIUS server.
User’s Manual Light Industrial AP ENGLISH WPA-PSK: Provides shared key authentication in WPA data encryption. Security Settings: WPA-PSK Cipher Suite: Select an encryption method from TKIP (WPA), AES (WPA), TKIP (WPA2), AES (WPA2), or Mixed. Pre-shared Key Type: Select a pre-shared key type: PSK (Hex) or Passphrase. Pre-shared Key: Enter the key value for the pre-shared key; the format of the key value depends on the key type selected.
User’s Manual Light Industrial AP ENGLISH WPA-RADIUS: Authenticates users by RADIUS and provides WPA data encryption. Security Settings: WPA-RADIUS WPA Settings: o Cipher Suite: Select an encryption method from TKIP (WPA), AES (WPA), TKIP (WPA2), AES (WPA2), or Mixed. o Group Key Update Period: The time interval for the Group Key to be renewed; the time unit is in seconds. RADIUS Server Settings: o Host: Enter the IP address or domain name of the RADIUS server.
User’s Manual Light Industrial AP ENGLISH RADIUS server every interval period. When these configurations are finished and MAC restriction is not needed, click SAVE and Reboot the system. Otherwise, click on the Overview tab and proceed to the next step. Step 3: Configuring MAC ACL (Access Control List) Clicking on the hyperlink corresponding with intended VAP in the MAC ACL column will bring the user to the Access Control Settings page.
User’s Manual Light Industrial AP ENGLISH MAC ACL Allow List An empty Allow List means that there are no allowed MAC addresses. Make sure at least the MAC of the modifying system is included (e.g. network administrator’s computer). 3) MAC ACL Deny List: This means that all client devices are granted with access to the system except those listed in the Deny List (“denied MAC addresses”). The administrator can allow any denied MAC address to connect to the system temporarily by checking Enable.
User’s Manual Light Industrial AP ENGLISH MAC ACL Deny List RADIUS ACL: Authenticate incoming MAC addresses by an external RADIUS server. When RADIUS ACL is selected, all incoming MAC addresses will be authenticated by an external RADIUS server. Please note that each VAP MAC ACL and its security type (shown on the Security Settings page) share the same RADIUS configuration. 33 Copyright © NEXCOM, INC.
User’s Manual Light Industrial AP ENGLISH RADIUS ACL Click SAVE and Reboot upon completing the related configurations to take effect. 34 Copyright © NEXCOM, INC.
User’s Manual Light Industrial AP ENGLISH 6. Creating a WDS Bridge between two APs WDS link creation is convenient for extending network coverage where running wires is not an option, effectively transferring the traffic to the other end of WLAN/LAN through the AP. Since this is a peer to peer connection, both APs will be configured the same way.
User’s Manual Light Industrial AP ENGLISH Step 2: Prevent Loops when Connecting Multiple APs When many APs are linked in this manner, undesired loops may form to lower overall WLAN performance. To prevent such occurrence, please make sure Layer 2 STP is enabled. To turn on this feature, please click on the System icon and the Network Interface tab. Network Settings Page Please select Enable in the field labeled Layer2 STP. This will prevent data from looping or creating a broadcast storm.
User’s Manual Light Industrial AP ENGLISH 1. Click on the Wireless button on the main menu. 2. Select the Repeater Settings tab. 3. Choose WDS as the Repeater Type. 4. Choose the desired WDS profile: (a) Enable WDS. (b) Enter the MAC Address (peer AP) and then Click SAVE. If you are using another NEXCOM APs as the peer AP, simply repeat the above-mentioned steps to configure another peer AP(s). 37 Copyright © NEXCOM, INC.
User’s Manual Light Industrial AP ENGLISH 7. Web Management Interface Configuration This chapter will guide the user through the AP’s detailed settings. The following table shows all the User Interface (UI) functions of NEXCOM’s Enterprise Access Points. The Web Management Interface (WMI) is the page where the status is displayed, control is issued and parameters are configured. In the Web Management Interface; there are two main interface areas: Main Menu and Working Area.
User’s Manual Light Industrial AP ENGLISH Overview Associated Clients Status WDS Link Status Event Log Note: On each configuration page, you may click SAVE to save the changes of your configured settings, but you must reboot the system for the changes to take effect. After clicking SAVE, the following message will appear: “Some modification has been saved and will take effect after Reboot.” All online users will be disconnected during reboot or restart. 39 Copyright © NEXCOM, INC.
User’s Manual Light Industrial AP ENGLISH 7.1 System Upon clicking the System icon, users can utilize this section for general configurations of the devices (e.g. Time Setup, Network Configurations, and System Logs). This section includes the following functions: General, Network Interface, Port, Management, CAPWAP and IPv6. 7.1.
User’s Manual Light Industrial AP ENGLISH 1) Enable NTP: By selecting Enabled NTP, the AP can synchronize its system time with the NTP server automatically. When this method is chosen, at least one NTP server's IP address or domain name must be provided. NTP Time Configuration Fields Generally, networks should have a common NTP server (internal or external). If there isn’t, locate a nearby NTP server on the web.
User’s Manual Light Industrial AP ENGLISH 7.1.2 Network Interface On this page, the network settings of the device can be configured; fields with a red asterisk (i.e. IP Address, Netmask, Default Gateway, and Primary DNS Server) are mandatory. Network Settings Page Mode: Determine the way to obtain the IP address, by DHCP or Static. Static: The administrator can manually set up the static LAN IP address. All required fields are marked with a red asterisk.
User’s Manual Light Industrial AP ENGLISH 7.1.3 Port The physical Ethernet ports of the AP can be configured to append a VLAN tag for upstream delivery. VLAN ID: Enable selected implies that network traffic sent upstream from this LAN port will be tagged with the VLAN ID configured in the field below. Disable selected implies that traffic from this LAN port will not be tagged with a VLAN ID.
User’s Manual Light Industrial AP ENGLISH 7.1.4 Management The management services (e.g. VLAN for Management, SNMP, and System log) can be configured here. Management Services Page VLAN for Management: When this is enabled, management traffic from the system will be tagged with a VLAN ID. In other words, administrator who wants to access the WMI must send management traffic with the same VLAN ID such as connecting to a specific VAP with the same VLAN ID.
User’s Manual Light Industrial AP ENGLISH SNMP Configuration: By enabling the SNMP function, the administrator can obtain the system information remotely. SNMP Configuration Fields Enable/ Disable: Enable or Disable this function. Community String: The community string is required when accessing the Management Information Base (MIB) of the system. o Read: Enter the community string to access the MIB with Read privilege.
User’s Manual Light Industrial AP ENGLISH 7.1.5 CAPWAP CAPWAP is a standard interoperable protocol that enables a controller to manage a collection of wireless access points. There are 5 methods of auto AP discovery, namely DNS SRV, DHCP option, Broadcast, Multicast, and Static. Please refer to the Web page at System > CAPWAP.
User’s Manual Light Industrial AP ENGLISH 7.1.6 IPv6 The NEXCOM Access Point supports IPv6 and IPv4 dual stack addressing capability. IPv6 by default is disabled but it can be enabled on this tab page. Mode: There are two options for acquiring an IPv6 address for this device. Static: Configuring IPv6 address manually via this option if you have already acquired a permanent IPv6 address for operation. DHCP: Acquire IPv6 address automatically from upstream server. 47 Copyright © NEXCOM, INC.
User’s Manual Light Industrial AP ENGLISH 7.2 Wireless This section includes the following functions: VAP Overview, General, VAP Configuration, Security, Repeater, Advanced, and Access Control. The NEXCOM Access Point supports up to eight Virtual Access Points (VAPs) per RF card. Each VAP can have its own settings (e.g. ESSID, VLAN ID, security settings, etc.). With such VAP capabilities, different levels of service can be configured to meet network requirements. 7.2.
User’s Manual Light Industrial AP ENGLISH VAP – State Page Security Type: The hyperlink showing the security type links to the Security Settings Page. VAP – Security Type Page MAC ACL: The hyperlink showing Allow or Disable links to the Access Control Settings Page. 49 Copyright © NEXCOM, INC.
User’s Manual Light Industrial AP ENGLISH VAP – MAC ACL Page Advanced Settings: The advanced settings hyperlink links to the Advanced Wireless Settings Page. VAP – Advanced Settings Page 7.2.2 General AP’s general wireless settings can be configured here: 50 Copyright © NEXCOM, INC.
User’s Manual Light Industrial AP ENGLISH AP General Settings Page RF Card Name: Select one RF card for further configuration. Band: Select an appropriate wireless band: 802.11a, 802.11b, 802.11g, 802.11b+802.11g, 802.11g+802.11n, 802.11a+802.11n or select Disable if the wireless function is not required. Pure 11n: Enable 802.11n network only. Short Preamble: The short preamble with a 56-bit synchronization field can improve WLAN transmission efficiency.
User’s Manual Light Industrial AP ENGLISH The system will use the highest possible rate when Auto is selected. Please note that MCS0 ~ MCS15 are transmit rates only for n bands. Transmit Power: The signal strength transmitted from the system can be selected among Auto, Highest, High, Medium, Low, and Lowest from the drop-down menu. ACK Timeout: It indicates a period of time when the system waits for an Acknowledgement frame sent back from a station without retransmission.
User’s Manual Light Industrial AP ENGLISH *Please note that available values above will vary depending on the regulation of different countries. 53 Copyright © NEXCOM, INC.
User’s Manual Light Industrial AP ENGLISH 7.2.3 VAP Configuration This section provides configuration of each Virtual Access Point with settings such as Profile Name, ESSID, and VLAN ID. VAP Configuration Page To enable specific VAP, select the VAP from the drop-down list of Profile Name. The basic settings of each VAP are collected in the profile as follows: VAP: Enable or Disable this VAP. Profile Name: The profile name of a specific RF card and its VAP for identity / management purposes.
User’s Manual Light Industrial AP ENGLISH 7.2.4 Security The Access Point supports various wireless authentication and data encryption methods in each VAP profile. With this, the administrator can provide different service levels to clients. The security type includes None, WEP, 802.1X, WPA-PSK, and WPA-RADIUS. None: Authentication is not required and data is not encrypted during transmission when this option is selected. This is the default setting as shown in the following figure.
User’s Manual Light Industrial AP ENGLISH 802.11 Authentication: Select from Open System, Shared Key, or Auto. WEP Key Length: Select a key length from 64-bit, 128-bit, or 152-bit. WEP Key Format: Select a WEP key format from ASCII or Hex. WEP Key Index: Select a key index from 1~4. The WEP key index is a number that specifies which WEP key will be used for the encryption of wireless frames during data transmission.
User’s Manual o Light Industrial AP ENGLISH Authentication Port: The port number used by the RADIUS server. Specify a port number or use the default, 1812. o Secret Key: The secret key for the system to communicate with the RADIUS server. o Accounting Service: Enabling this option allows accounting of login and logouts through the RADIUS server. o Accounting Port: The port number used by the RADIUS server for accounting purposes. Specify a port number or use the default, 1813.
User’s Manual Light Industrial AP ENGLISH Security Settings: WPA-RADIUS WPA Settings: o Cipher Suite: Select an encryption method from TKIP (WPA), AES (WPA), TKIP(WAP2), AES (WAP2), or Mixed. o Group Key Update Period: The time interval for the Group Key to be renewed; the time unit is in seconds. RADIUS Server Settings (Primary/Secondary): o Host: Enter the IP address or domain name of the RADIUS server. o Authentication Port: The port number used by the RADIUS server.
User’s Manual Light Industrial AP ENGLISH 7.2.5 Repeater NEXCOM Access Points are capable of utilizing WDS to extend wireless network coverage. If WDS is enabled, the AP can support up to 4 WDS links to its peer APs. Security Type (None, WEP, or WPA/PSK) can be configured to decide which encryption is to be used for WDS connections respectively.
User’s Manual Light Industrial AP ENGLISH 7.2.6 Advanced The advanced wireless settings for the Access Point’s VAP (Virtual Access Point) profiles allow customization of data transmission settings. The administrator can tune the following parameters to improve network communication performance if a poor connection occurs. Advanced Wireless Settings Page RTS Threshold: Enter a value between 1 and 2346.
User’s Manual Light Industrial AP ENGLISH WMM: The default is Disable. Wi-Fi Multimedia (WMM) is a Quality of Service (QoS) feature that prioritizes wireless data packets based on four access categories: voice, video, best effort, and background. Applications without WMM and applications that do not require QoS are assigned to the best-effort category, which receives a lower priority than that of voice and video.
User’s Manual Light Industrial AP ENGLISH 7.2.7 Access Control On this page, the network administrator can restrict the total number of clients connected to the Access Point, as well as specify particular MAC addresses that can or cannot access the device. Access Control Settings Page Maximum Number of Clients The NEXCOM Access Point supports various methods of authenticating clients for wireless LAN access. The default policy is unlimited access without any authentication requirement.
User’s Manual Light Industrial AP ENGLISH Access Control Type The administrator can restrict the wireless access of client devices based on their MAC addresses. Disable Access Control: When Disable is selected, there is no restriction for client devices to access the system. MAC ACL Allow List: When selecting MAC ACL Allow List, only the client devices (identified by their MAC addresses) listed in the Allow List (“allowed MAC addresses”)are granted access to the system.
User’s Manual Light Industrial AP ENGLISH MAC ACL Deny List: When selecting MAC ACL Deny List, all client devices are granted access to the system except those listed in the Deny List (“denied MAC addresses”). The administrator can allow any denied MAC address to connect to the system temporarily by checking Disable. Deny List 64 Copyright © NEXCOM, INC.
User’s Manual Light Industrial AP ENGLISH RADIUS ACL: Authenticate incoming MAC addresses by an external RADIUS. When RADIUS ACL is selected, all incoming MAC addresses will be authenticated by an external RADIUS. Please note that each VAP’s MAC ACL and its security type (shown on the Security Settings page) share the same RADIUS configuration. RADIUS ACL 65 Copyright © NEXCOM, INC.
User’s Manual Light Industrial AP ENGLISH 7.3 Firewall The system provides an added security feature, Layer2 Firewall, in addition to the typical AP security. Layer2 Firewall offers a firewall function that is tailored specifically for Layer2 traffic, providing another choice of shield against possible security threats coming from/going to WLAN (AP interfaces); hence, besides firewall policies configured on gateways, this extra security feature will assist to mitigate possible security breach.
User’s Manual Light Industrial AP ENGLISH >>To delete a specific rule, Del in the Setting column of firewall list will lead to the following page for removal confirmation. After the SAVE button is clicked and system is rebooted, the rule will be removed. >>To edit a specific rule, Ed in the Setting column of the firewall list will lead to the following page for detail configuration. From this page, the rule can be edited from scratch or from an existing rule for revision.
User’s Manual Light Industrial AP ENGLISH Action: The rule can be chosen to be Block or Pass. Remark: Any note of this rule can be specified here. When the configuration for firewall rule is completed; please click SAVE and Reboot system to let the firewall rule take effect. >>To insert a specific rule, In in the Setting column of the firewall list will lead to the following page for detail configuration with rule ID for the current inserted rule.
User’s Manual Light Industrial AP ENGLISH 69 Copyright © NEXCOM, INC.
User’s Manual Light Industrial AP ENGLISH 7.3.2 Service The administrator can add or delete firewall services here; the services in this list will become options to choose in firewall rule (when EtherType is IPv4). The Access Point provides a list of rules to block or pass traffic of layer-3 or above protocols. These services are available to choose from a drop-down list of layer2 firewall rule edit page with Ether Type IPv4.
User’s Manual Light Industrial AP ENGLISH 7.3.3 Advanced At Firewall > Advanced, more advanced settings on firewall rules can be configured, providing extra security enhancement against DHCP and ARP traffic traversing the available interfaces of the system. Trust Interface: Each VAP interface can be checked individually to mark as trusted interfaces; security enforcements on DHCP/ARP like DHCP snooping and ARP inspection will be carried out on non-trusted interfaces.
User’s Manual Light Industrial AP ENGLISH 7.4 Utilities The following utility features on this page allow the administrator to maintain the system: Change Password, Backup & Restore, System Upgrade, Reboot, Upload Certificate, Channel Analysis. 7.4.1 Change Password To protect the Web Management Interface from unauthorized access, it is highly recommended to change the administrator’s password to a secure password.
User’s Manual Light Industrial AP ENGLISH Backup & Restore Page Reset to Default: Click Reset to load the factory default settings of the Access Point. A pop-up Page will appear to reconfirm the request to reboot the system. Click OK to proceed, or click Cancel to cancel the reboot request. Reboot Confirmation Prompt A warning message as displayed below will appear during the reboot period. The system power must be kept on before the completion of the reboot process.
User’s Manual Light Industrial AP ENGLISH 7.4.3 System Upgrade The Access Point provides a web firmware upload / upgrade feature. The administrator can download the latest firmware from the website and save it on the administrator’s PC. To upgrade the system firmware, click Browse to choose the new firmware file you downloaded onto your PC and then click Upload to execute the process.
User’s Manual Light Industrial AP ENGLISH Reboot Page 7.4.5 Upload Certificate This function is used to configure a valid certificate for security validation required in CAPWAP. Upload Certificate: It provides flexibility to support customer’s own Certificate, Private Key, or Trusted Certificate for a means of security verification for CAPWAP or other security needs to ensure the authenticity of this AP to other network entities.
User’s Manual Light Industrial AP ENGLISH Bluetooth devices, Microwave devices, Cordless phones, and etc. • Note: • • • Please be reminded that when Channel Analysis is in progress, the RF card loses its capability to serve clients and kicks off current users. The browser used to implement Channel Analysis should have Java Runtime Environment installed beforehand, or it would not display any information. The system only allows 1 operator to use this function at one time.
User’s Manual Light Industrial AP ENGLISH 7.5 Status This page is used to view the current condition and state of the system and it includes the following functions: Overview, Associated Clients, WDS Link Status and Event Log. 7.5.1 Overview The System Overview page provides an overview of the system status for the administrator. System Overview Page 77 Copyright © NEXCOM, INC.
User’s Manual Light Industrial AP ENGLISH Table 3 Status Page's Organizational Layout Item Description System Name The system name of the Access Point. The current firmware version of the Access Firmware Version Point. The current firmware build number of the Build Number Access Point. System Location The location of the Access Point. Site The site of the Access Point. Device Time The system time of the Access Point. The time that the system has been in System Up Time operation.
User’s Manual Light Industrial AP ENGLISH Associated Client Status Page Associated VAP: The name of a VAP (Virtual Access Point) that the client is associated with. ESSID: The Extended Service Set ID which the client is associated with. MAC Address: The MAC address of associated clients. SNR: The Signal to Noise Ratio of respective client’s association. Idle Time: Time period that the associated client is inactive for; the time unit is in seconds.
User’s Manual Light Industrial AP ENGLISH 7.5.4 Event Log The Event Log provides a record of system activities. The administrator can monitor the system status by checking this log. Event Log Page Each line in the log represents an event record; in each line, there are 4 fields: Date / Time: The time & date when the event happened. Hostname: Indicates which host recorded this event. Note that all events on this page are local events, so the hostname in this field is always the same.
User’s Manual Light Industrial AP ENGLISH Process name: Indicate the event generated by the running instance. Description: Description of the event. To save the file locally, click SAVE LOG; to clear all of the records, click CLEAR. P/N: V10020130328 81 Copyright © NEXCOM, INC.
