8 AP Use the controls on the AP tab to set the wireless SSID and AP settings, as well as wireless distribution system (WDS) settings. 8.1 Wireless SSID Wireless network settings, including the name of the network (SSID) and security policy, can be defined and managed in this section. Click New SSID to create a new network profile, or click the existing network profile to modify its settings. SSID Settings Enable Radio Selection Check this box to enable wireless SSID.
enable or disable either of the two on-board radios. Band Steering SSID Broadcast SSID Data Rate This setting, shown below, allows you to reduce 2.4 GHz band overcrowding, AP with band steering steers clients capable of 5 GHz operation to 5 GHz frequency. Force - Clients capable of 5 GHz operation are only offered with 5 GHz frequency. Prefer - Clients capable of 5 GHz operation are encouraged to associate with 5 GHz frequency. If the clients insist to attempt on 2.4 GHz frequency, 2.
Layer 2 Isolation Maximum Number of Clients Refers to the second layer in the ISO Open System Interconnect model. When this option is enabled, clients on the same VLAN, SSID, or subnet are isolated to that VLAN, SSID, or subnet, which can enhance security. Traffic is passed to the upper communication layer(s). By default, the setting is disabled. The maximum number of clients that can simultaneously connect to your access point, or enter 0 to allow unlimited Wi-Fi clients.
WPA2 – Enterprise 802.1X Version Choose v1 or v2 of the 802.1x EAPOL. When v1 is selected, both v1 and v2 clients can associate with the access point. When v2 is selected, only v2 clients can associate with the access point. Most modern wireless clients support v2. For stations that do not support v2, select v1. The default is v2. WPA/WPA2 – Personal Passphrase Enter a passphrase of between 8 and 63 alphanumeric characters to create a passphrase used for data encryption and authentication.
Captive Portal Login Captive Portal Select Enable to turn on your access point’s built-in captive portal functionality. Authentication Method Choose Open Access to allow users to connect without authentication or RADIUS to require authentication. If RADIUS is selected, you’ll be given the opportunity to select a RADIUS security method in the next field. RADIUS Security Select PAP, EAP-TTLS PAP, EAP-TTLS MSCHAPv2, or PEAPv0 EAP-MSCHAPv2.
Concurrent Login Access Quota Check this box to allow users to have more than one logged in session active at a time. Enter a value in minutes to limit access time on a given login or enter 0 to allow unlimited use time on a single login. Likewise, enter a value in MB for the total bandwidth allowed or enter 0 to allow unlimited bandwidth on a single login. Inactive Timeout Enter a value in minutes to logout following the specified period of inactivity or enter 0 to disable inactivity logouts.
RADIUS Server Settings Host Secret Authentication Port Enter the IP address of the primary RADIUS server and, if applicable, the secondary RADIUS server. Enter the RADIUS shared secret for the primary server and, if applicable, the secondary RADIUS server. Enter the UDP authentication port(s) used by your RADIUS server(s) or click the Default button to enter 1812. Accounting Port Enter the UDP accounting port(s) used by your RADIUS server(s) or click the Default button to enter 1813.
Guest Protect Block LAN Access Custom Subnet Block Exception Block PepVPN Check this box to block access from the LAN. To specify a subnet to block, enter the IP address and choose a subnet mask from the drop-down menu. To add the blocked subnet, click click . . To delete a blocked subnet, To create an exception to a blocked subnet (above), enter the IP address and choose a subnet mask from the drop-down menu. To add the exception, click exception, click . .
Downstream Limit Client Upstream Limit Client Downstream Limit Enter a value in kbps to limit the wireless network’s downstream bandwidth. Enter 0 to allow unlimited downstream bandwidth. Enter a value in kbps to limit connected clients’ upstream bandwidth. Enter 0 to allow unlimited upstream bandwidth. Enter a value in kbps to limit connected clients’ downstream bandwidth. Enter 0 to allow unlimited downstream bandwidth.
fields will vary. Protocol / Port Choose TCP or UDP from the Protocol drop-down menu to allow or deny traffic using either of those protocols. From the Port drop-down menu, choose Any Port to allow or deny TCP or UDP traffic on any port. Choose Single Port and then enter a port number in the provided field to allow or block TCP or UDP traffic from that port only.
ARP Request Control ARP request control is a Broadcast filter feature which: ˗ blocks all broadcast traffic, ˗ relays DHCP requests, ˗ responds to ARP requests asking the MAC address of the gateway Default handling Choose between Bypass or Drop (default Bypass) Custom Action Add IP/ MAC address pairs to this field to either: REPLY : The AP replies to the MAC address itself according to the config DNAT : The AP can translate the destination MAC address from a broadcast to a particular MAC address 8.
AP Settings Protocol Operating Country Choose 802.11ng or 802.11n/ac as your access point’s Wi-Fi protocol. The AP One AC mini provides the 802.11ng protocol for the 2.4 GHz band and the 802.11n/ac protocol for the 5GHz band, as shown below. This drop-down menu specifies the national / regional regulations the AP should follow. If a North American region is selected, RF channels 1 to 11 will be available and the maximum transmission power will be 26 dBm (400 mW).
US. All US models are fixed to US channels only. Channel Width Channel Output Power Antenna Gain Beacon Rate Beacon Interval This option defines which channel width the radio will use: 20MHz - Supports clients with 20MHz capability. This is the default value for 802.11ng. 40MHz - Supports clients with 20/40MHz capability. 20/40MHz - Supports clients with 20/40 MHz capability. The radio will fall back to 20MHz if it detects APs that only support 20MHz. This is the default value for 802.11na.
transmits. The default value is 9Njs. ACK Timeout Set the wait time to receive an acknowledgement packet before retransmitting. The default value is 48Njs. Frame Aggregation With this feature enabled, throughput will be increased by sending two or more data frames in a single transmission. Aggregation Length This field is only available when Frame Aggregation is enabled. It specifies the frame length for frame aggregation. By default, it is set to 50000.
Scanning Time Scheduled Radio Availability WMM 8.3 This setting specifies the time, in milliseconds, that your access point scans any particular channel while searching for nearby networks. Click Custom Schedule to specify radio availability schedule options or select Always On to make the radio continuously available. This checkbox enables Wi-Fi Multimedia (WMM), also known as Wireless Multimedia Extensions (WME), on your access point. The default is enabled.
Encryption 9 Select AES to enable encryption for WDS peer connections. Selecting None disables encryption. System Tab 9.1 Admin Security Admin Settings Devicer Name Location Admin User This field allows you to define a name for this Peplink Balance unit. By default, Device Name is set as Model_XXXX, where XXXX refers to the last 4 digits of the serial number of that unit. field to add Location name Admin User Name is set as admin by default, but can be changed.
