Pepwave AP One Series: AP One AC Mini AC0P APO-AC-MINI PismoAC0P July 2019 COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. Copyright © 2016 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are trademarks of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.
Table of Contents COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. Copyright © 7/11/16 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are trademarks of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.
COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. Copyright © 2016 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are trademarks of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.
1 Introduction and Scope Our AP Series of enterprise-grade 802.11b/g/n Wi-Fi access points is engineered to provide fast, dependable, and flexible operation in a variety of environments, all controlled by an easy-to-use centralized management system.
2 Product Features and Benefits Key features and benefits of AP Series access points: High-powered Wi-Fi transmitter enhances coverage and lowers cost of ● ownership. Independent security policies and encryption mechanisms for each virtual ● access point allow fast, flexible, cost-effective network builds. Centralized management via InControl reduces maintenance expense and ● time. ● WDS support allows secure and fast network expansion.
3.1 AP One AC mini 1 x AP One mini 1 x Omni-directional antenna 1 x Power supply 1 x Instruction sheet 4 Hardware Overview 4.1 AP One AC mini Front View Rear Panel View LED Indicators Status RED – Access point initializing GREEN – Access point ready OFF – 2.4/5GHz Wi-Fi radio off BLINKING – AP sending/receiving data Wi-Fi GREEN – 2.4/5GHz Wi-Fi radio on Note that this model includes a 2.
5 Installation Your access point acts as a bridge between wireless and wired Ethernet interfaces. A typical setup follows: 5.1 Installation Procedures COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. Copyright © 2016 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are trademarks of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.
1. Connect the Ethernet port on the unit to the backbone network using an Ethernet cable. The port should auto sense whether the cable is straight-through or crossover. 2. Connect the power adapter to the power connector of the unit. Plug the power adapter into a power source. 3. Wait for the status LED to turn green. 4. Connect a PC to the backbone network. Configure the IP address of the PC to be any IP address between 192.168.0.4 and 192.168.0.254, with a subnet mask of 255.255.255.0. 5.
The Dashboard section contains a number of displays to keep you up-to-date on your access point’s status and operation. Remote assistance can also be enabled here. 6.1 General This section contains WAN status and general device information. WAN When your access point is connected to a WAN, this field displays the WAN IP address. For more information, click the Details… link, which displays the following: IP Address Status This field displays the current WAN connection status.
Device Information Model Firmware Uptime This field displays your access point’s model number. The firmware version currently running on your access point appears here. This field displays your access point’s uptime since the last reboot or shutdown. COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. Copyright © 7/11/16 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are trademarks of Pepwave Ltd.
6.2 AP This section displays a variety of information about your wireless network. AP Status Wireless Network SSID Radio Security Policy This field displays your access point’s SSID. The radio frequency currently used by your access point appears here. If you’re using the AP One AC mini or the AP One In-Wall and have configured both radios, this displays both radios in use. This field displays the security policy your access point is currently using.
Channel VLAN MAC Address (BSSID) The channel currently used by your access point is displayed in this field. If your access point is using a VLAN ID for management traffic, it will appear here. A value of 0 indicates that a VLAN ID is not being used. Your access point’s MAC address appears here. If you’re using the AP One AC mini and have configured both radios, this displays a MAC address for both the 2.4GHz and 5GHz radio.
7 Configuration 7.1 System The options on the System tab control login and security settings, firmware upgrades, SNMP settings, and other settings. 7.1.1 Admin Security The Admin Security section allows you to set up your access point’s name, password, security settings, and other options. Admin Security AP Name Enter a name to identify your access point. This name can be retrieved via SNMP. COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. Copyright © 2016 Pepwave Ltd.
Location Enter a name to identify the location of your access point. This name can be retrieved via SNMP. Admin User Name This field specifies the administrator username of the web admin. It is set as admin by default. Admin Password This field allows you to specify a new administrator password. The default password is public. Confirm Admin Password Re-enter the admin password. Web Admin Interface Check this box to turn on the web administration interface, which allows remote AP management.
Language Choose a language for the administration interface. 7.1.2 Firmware The Firmware section lets you check the firmware version currently used by your access point, as well as check for and install new firmware via online download. You can also upgrade your firmware using a firmware file stored locally. To check for new firmware, click the Check for Firmware button. If new firmware is available, your access point will automatically download and install it.
Time Zone Time Server Time region used by the system. All choices are based on UTC. To choose a time server other than the default, enter the URL here. To restore the default time server, click the Default button. 7.1.4 Event Log The section allows you to turn on event logging at a specified remote syslog server. Event Log Remote Syslog Check this box to turn on remote system logging. Remote Syslog Host Enter the IP address or hostname of the remote syslog server, as well as the port number.
7.1.5 SNMP SNMP, or simple network management protocol, is an open standard that can be used to collect information about your access point. The SNMP section offers a range of settings to control simple network management protocol access. SNMP Settings SNMP Device Name SNMP Port This field shows the AP name defined at System>Admin Security. This option specifies the port which SNMP will use. The default port is 161. SNMPv1 This option allows you to enable SNMP version 1.
SNMPv3 This option allows you to enable SNMP version 3. To add a community for either SNMPv1 or SNMPv2c, click the Add SNMP Community button in the Community Name table, which displays the following screen: SNMP Community Settings Community Name Enter a name for the SNMP community. IP Address/IP Mask These settings specify a subnet from which access to the SNMP server is allowed. Enter the subnet address here (e.g., 192.168.1.0) and select the appropriate subnet mask.
SNMPv3 User Settings SNMPv3 User Name Enter a user name to be used in SNMPv3. Select one of the following valid authentication protocols: Authentication Protocol ● NONE ● HMAC-MD5 HMAC-SHA ● When HMAC-MD5 or HMAC-SHA is selected, an entry field will appear for the password. Authentication Password Enter a password to use with the selected authentication protocol. Confirm Authentication Password Re-enter the authentication password.
Controller Management Settings Controller Management Controller Type Check this box to enable remote management. Select Auto, InControl, or AP Controller as your remote AP management method. When Auto is selected, your access point will automatically choose the appropriate mode. 7.1.7 Configuration In section, you can manage and backup access point configurations, as well as reset your access point to its factory configuration.
Settings. Download Active Configurations Upload Configurations Click Download to backup the current active settings. To restore or change settings based on a configuration file, click Choose File to locate the configuration file on the local computer, and then click Upload. The new settings can then be applied by clicking the Apply Changes button on the page header, or you can cancel the procedure by pressing discard on the main page of the web admin interface. 7.1.
Wireless network settings, including the name of the network (SSID) and security policy, can be defined and managed in this section. Click New SSID to create a new network profile, or click the existing network profile to modify its settings. SSID Settings Enable Radio Selection SSID Check this box to enable wireless SSID. Available only on the AP One AC mini, this setting, shown below, allows you to enable or disable either of the two on-board radios.
Broadcast SSID Data Rate This setting specifies whether or not Wi-Fi clients can scan the SSID of this wireless network. Broadcast SSID is enabled by default. Select Auto to allow your access point to set the data rate automatically, or select Fixed and choose a rate from the drop-down menu. Click the MCS Index link to display a reference table containing MCS and matching HT20 and HT40 values. Multicast Filter This setting enables the filtering of multicast network traffic to the wireless SSID.
Security Settings Security Policy This setting configures the wireless authentication and encryption methods. Available options are Open (No Encryption), WEP, 802.1X, WPA2 – Personal, WPA2 – Enterprise, WPA/WPA2 - Personal, and WPA/WPA2 – Enterprise. To allow any Wi-Fi client to access your AP without authentication, select Open (No Encryption). Details on each of the available authentication methods follow. WEP Key Size Select 40 bits (64-bit WEP) or 104 bits (128-bit WEP).
802.1X 802.1X Version WEP Key Size Re-keying Period Choose v1 or v2 of the 802.1x EAPOL. When v1 is selected, both v1 and v2 clients can associate with the access point. When v2 is selected, only v2 clients can associate with the access point. Most modern wireless clients support v2. For stations that do not support v2, select v1. The default is v2. Select 40 bits (64-bit WEP) or 104 bits (128-bit WEP). This option specifies the length of time throughout which the broadcast key remains valid.
802.1X Version Choose v1 or v2 of the 802.1x EAPOL. When v1 is selected, both v1 and v2 clients can associate with the access point. When v2 is selected, only v2 clients can associate with the access point. Most modern wireless clients support v2. For stations that do not support v2, select v1. The default is v2. COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. Copyright © 7/11/16 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are trademarks of Pepwave Ltd.
Web Portal Login Web Portal Select Enable to turn on your access point’s built-in web portal functionality. Authentication Method Choose Open Access to allow users to connect without authentication or RADIUS to require authentication. If RADIUS is selected, you’ll be given the opportunity to select a RADIUS security method in the next field. RADIUS Security Select PAP, EAP-TTLS PAP, EAP-TTLS MSCHAPv2, or PEAPv0 EAP-MSCHAPv2.
a timer for each user that begins after the quota has been reached. Allowed Domains / IPs To whitelist a domain or IP address, enter the domain name / IP address here and click . To delete an existing entry, click the button next to it. Allowed Client IPs To whitelist a client IP address, enter the IP address here and click existing entry, click the button next to it. .
RADIUS Server Settings Host Secret Authentication Port Enter the IP address of the primary RADIUS server and, if applicable, the secondary RADIUS server. Enter the RADIUS shared secret for the primary server and, if applicable, the secondary RADIUS server. Enter the UDP authentication port(s) used by your RADIUS server(s) or click the Default button to enter 1812. Accounting Port Enter the UDP accounting port(s) used by your RADIUS server(s) or click the Default button to enter 1813.
Guest Protect Block LAN Access Check this box to block access from the LAN. Custom Subnet To specify a subnet to block, enter the IP address and choose a subnet mask from the drop-down menu. To add the blocked subnet, click . To delete a blocked subnet, click . Block Exception To create an exception to a blocked subnet (above), enter the IP address and choose a subnet mask from the drop-down menu. To add the exception, click . To delete an exception, click .
Limit Client Downstream Limit unlimited upstream bandwidth. Enter a value in kpbs to limit connected clients’ downstream bandwidth. Enter 0 to allow unlimited downstream bandwidth. Firewall Settings Firewall Mode Choose Flexible – Allow all except… or Lockdown – Block all except… to turn on the firewall, then create rules for the firewall exceptions by clicking . See the discussion below for details on creating a firewall rule. To delete a rule, click the associated button.
Subnet Mask MAC Address If you have chosen MAC Address as your firewall rule type, enter the MAC address identifying the machine to allow or deny. 7.2.2 Settings Basic access point operation settings, such as the protocol and channels used, as well as scanning interval and other advanced settings, can be defined and managed in this section. AP Settings Choose 802.11ng or 802.11na as your access point’s Wi-Fi protocol. Protocol Operating Country The AP One AC mini provides the 802.
If European region is selected, RF channels 1 to 13 will be available. The ● maximum transmission power will be 20 dBm (100 mW). NOTE: Users are required to choose an option suitable to local laws and regulations. Per FCC regulation, the country selection is not available on all models marketed in the US. All US models are fixed to US channels only. There are three options: 20 MHz, 40 MHz, and 20/40 MHz. With this feature enabled, the Wi-Fi system can use two channels at once.
Threshold Distance / Time Convertor Slot Time This slider and text entry field can be used to interactively set slot time. This field provides the option to modify the unit wait time before your access point transmits. The default value is 9μs. ACK Timeout Set the wait time to receive an acknowledgement packet before retransmitting. The default value is 48μs. Frame Aggregation With this feature enabled, throughput will be increased by sending two or more data frames in a single transmission.
Scanning Interval Scanning Time Scheduled Radio Availability WMM This setting controls the interval, in seconds, that your access point scans for nearby networks. This setting specifies the time, in milliseconds, that your access point scans any particular channel while searching for nearby networks. Click Custom Schedule to specify radio availability schedule options or select Always On to make the radio continuously available.
MAC Address Encryption 7.3 Enter the MAC address of the access point with which to form a WDS link. Select AES to enable encryption for WDS peer connections. Selecting None disables encryption. Network The settings on the AP tab control WAN and LAN settings, as well as allow you to set up PepVPN profiles. 7.3.1 WAN This section provides basic and advanced WAN settings. Basic Keep Default IP When enabled, this option maintains 192.168.0.3 as your access point’s IP address.
Default Gateway DNS Server Enter the IP address of the default gateway to the internet. Enter the DNS server address that your access point will use to resolve host names. Advanced Management VLAN ID Spanning Tree Protocol This field specifies the VLAN ID to tag to management traffic, such as AP-to-AP controller communication traffic. The value is 0 by default, meaning that no VLAN tagging will be applied.
router mode. IP Settings IP Address Enter the LAN IP address and subnet mask to assign to your access point on the LAN. DHCP Server Settings COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. Copyright © 7/11/16 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are trademarks of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.
DHCP Server Check to enable the DHCP server feature of your access point. Enabling DHCP is the best option for most users. The following options will be enabled once you have checked and enabled the DHCP server. IP Range Enter the first and last IP addresses of the range of addresses that your access point will make available to DHCP clients. The default range is from 192.168.1.100 to 192.168.1.200, with 24-bit subnet mask.
Port Forwarding section. Port Forwarding Service Name IP Protocol Enter a name for the new port forwarding rule. Valid values for this setting consist of alphanumeric and underscore “_” characters only. The IP Protocol setting, along with the Port setting, specifies the protocol of the service as TCP, UDP, ICMP, or IP. Traffic that is received by your access point via the specified protocol at the specified port(s) is forwarded to the LAN hosts specified by the Servers setting.
IP Address setting. For example, with IP Protocol set to TCP, and Port set to Port Mapping, Service Port 80, and Map to Port 88, TCP traffic on Port 80 is forwarded to the configured server via Port 88. Server IP Address Enter the LAN IP address of the server that handles requests for the forwarded service. 7.3.3 PepVPN PepVPN securely connects one or more remote sites to the site running your access point. To set up PepVPN, first give your site a local PepVPN ID. To modify an existing local ID, click .
Once you’ve specified a local ID, click the New Profile button to configure PepVPN. PepVPN Profile Settings Enable Name Check this box to enable PepVPN. Enter a name to represent this profile. The name can be any combination of alphanumeric characters (0-9, A-Z, a-z), underscores (_), dashes (-), and/or nonleading/trailing spaces ( ). Encryption By default, VPN traffic is encrypted with 256-bit AES. If Off is selected on both sides of a VPN connection, no encryption will be applied.
addresses until it succeeds in making a connection. If the field is empty, your access point will wait for connection from the remote peer. Therefore, at least one of the two VPN peers must specify this value. Otherwise, VPN connections cannot be established. Layer 2 Bridging When this check box is unchecked, traffic between local and remote networks will be IP forwarded. To bridge the Ethernet network of an Ethernet port on a local and remote network, select Layer 2 Bridging.
The ping utility is located at System>Tools>Ping. 8.2 Traceroute The traceroute test tool traces the routing path to the specified IP address. The traceroute test utility is located at System>Tools>Traceroute. 8.3 Nslookup The nslookup tool is used to test DNS name servers. The nslookup utility can be found at System>Tools>Nslookup. COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. Copyright © 7/11/16 Pepwave Ltd. All Rights Reserved.
9 Monitoring Device Status The displays available on the Status tab help you monitor device data, client activity, rogue device access, and more. COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. Copyright © 2016 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are trademarks of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.
9.1 Device Here you can access a variety of data about your access point, download a diagnostic report, and check MAC addresses. To download a diagnostic report, click the Download link. 9.2 Client List The Client List displays all currently connected clients. Use the Expand and Collapse buttons to control the amount of data displayed. 9.3 WDS Info COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. Copyright © 7/11/16 Pepwave Ltd. All Rights Reserved.
Here you can monitor the status of your wireless distribution system (WDS) and track activity by MAC address. If you’re using the AP One AC mini, this section will display information for both the 2.4GHz and 5GHz radios. 9.4 Portal If you’ve turned on your access point’s captive portal, client connection data will appear here. Use the Expand and Collapse buttons to control the amount of data displayed. 9.5 Rogue AP COPYRIGHT & TRADEMARKS Specifications are subject to change without notice.
This section displays a list of nearby suspected rogue access points. 9.6 Event Log The Event Log displays a list of all events associated with your access point. Check Auto Refresh to refresh log entries automatically. Click the Clear Log button to clear the log. COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. Copyright © 7/11/16 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are trademarks of Pepwave Ltd.
10 Restoring Factory Defaults The following procedure restores the settings of your access point to factory defaults: ● Power on the unit and wait for one minute. ● Press and hold the reset button for at least five seconds, then release. ● The unit will automatically reboot. Wait for one minute or until the status LED turns green, upon which the ● settings of the device will have been restored to the factory defaults. By default, the unit will acquire an IP address from a DHCP server.
11 Appendix Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
ISED Warning Statement Industry Canada Statement This device complies with Industry Canada’s licence-exempt RSSs. Operation is subject to the following two conditions:(1) This device may not cause interference; and(2) This device must accept any interference, including interference that may cause undesired operation of the device. Le présent appareil est conforme aux CNR d'Industrie Canada applicables aux appareils radio exempts de licence.
The availability of some specific channels and/or operational frequency bands is country dependent and is firmware programmed at the factory to match the intended destination. www.pepwave.com COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. Copyright © 7/11/16 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are trademarks of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.
