Pepwave AP One Series: AP One AC mini / AP One In-Wall / AP One 300M / AP One Flex 300M Pepwave AP Pro Series: AP Pro / AP Pro 300M / AP Pro Duo June 2015 COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. Copyright © 2015 Pepwave Ltd. All Rights Reserved. Pepwave and the Pepwave logo are trademarks of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered trademarks of their respective owners.
User Manual Table of Contents 1 Introduction and Scope.......................................................................................................... 4 2 Product Features and Benefits ............................................................................................ 5 3 Package Contents..................................................................................................................... 6 3.1 AP One AC mini .........................................................
User Manual 7.2 AP ........................................................................................................................................... 29 7.2.1 Wireless SSID.................................................................................................................. 29 7.2.2 Settings............................................................................................................................. 39 7.2.3 WDS ....................................................
User Manual 1 Introduction and Scope Our AP Series of enterprise-grade 802.11b/g/n/ac Wi-Fi access points is engineered to provide fast, dependable, and flexible operation in a variety of environments, all controlled by an easy-to-use centralized management system.
User Manual 2 Product Features and Benefits Key features and benefits of AP Series access points: High-powered Wi-Fi transmitter enhances coverage and lowers cost of ownership. Independent security policies and encryption mechanisms for each virtual access point allow fast, flexible, cost-effective network builds. Centralized management via InControl reduces maintenance expense and time. WDS support allows secure and fast network expansion.
User Manual 3 Package Contents 3.1 AP One AC mini 1 x AP One mini 1 x Omni-directional antenna 1 x Power supply 1 x Instruction sheet 3.2 AP One Enterprise 1 x AP One mini 1 x Omni-directional antenna 1 x Power supply 1 x Instruction sheet 3.3 AP One In-Wall 1 x AP One In-Wall 1 x Mounting kit 1 x Instruction sheet http://www.pepwave.
User Manual 3.4 AP One 300M 1 x AP One 300M 2 x Omni-directional antennas 1 x Power supply 1 x Instruction sheet 3.5 AP One Flex 300M 1 x AP One Flex 300M 1 x Instruction sheet 3.6 AP Pro / AP Pro 300M / AP Pro Duo 1 x AP Pro / AP Pro 300M / AP Pro Duo 1 x Instruction sheet 1 x Installation guide http://www.pepwave.
User Manual 4 Hardware Overview 4.1 AP One AC mini Front View Rear Panel View LED Indicators RED – Access point initializing Status GREEN – Access point ready OFF – 2.4/5GHz Wi-Fi radio off BLINKING – AP sending/receiving data Wi-Fi GREEN – 2.4/5GHz Wi-Fi radio on Note that this model includes a 2.4GHz Wi-Fi radio and a 5GHz Wi-Fi radio that can operate simultaneously to increase speed and reduce interference. http://www.pepwave.
User Manual 4.2 AP One Enterprise Front View Rear View Side View LED Indicators OFF – No device connected to Ethernet port BLINKING – Ethernet port sending/receiving data WAN 1 ON – Powered-on device connected to Ethernet port Note that WAN 1 displays the status of the uplink connection http://www.pepwave.
User Manual AP One Enterprise Installation Guide 1) Install the plastic screw hollows 43mm apart, and then screw the mounting platform into the screw hollows. 2) Insert AP into the slotted areas and twist clockwise. http://www.pepwave.
User Manual 4.3 AP One In-Wall Front View (US) Front View (International) Rear Panel View Top View LED Indicators RED – Access point initializing Status GREEN – Access point ready OFF – 2.4/5GHz Wi-Fi radio off BLINKING – AP sending/receiving data GREEN – 2.4/5GHz Wi-Fi radio on WLAN 1/2 Note that this model includes a 2.4GHz Wi-Fi radio and a 5GHz Wi-Fi radio that can operate simultaneously to increase speed and reduce interference. WLAN1 displays the status of the 2.
User Manual 4.4 AP One 300M Front View Rear Panel View LED Indicators On – Power On Power OFF – Power Off RED – Access point initializing Status GREEN – Access point ready OFF – 2.4/5GHz Wi-Fi radio off BLINKING – AP sending/receiving data Wireless GREEN – 2.4/5GHz Wi-Fi radio on Note that this model can operate in either 2.4GHz or 5GHz mode, depending on Wi-Fi radio settings. http://www.pepwave.
User Manual 4.5 AP One Flex 300M Front View Rear Panel View Connector Panel (Inside the Lid) LED Indicators RED – Access point initializing Status GREEN – Access point ready OFF – No device connected to Ethernet port LAN BLINKING – Ethernet port sending/receiving data ON – Powered-on device connected to Ethernet port Number of connected clients (1-10, 11-20, 21-30, 31-40) http://www.pepwave.
User Manual 4.6 AP Pro / AP Pro 300M / AP Pro Duo Front/Top View http://www.pepwave.
User Manual 5 Installation Your access point acts as a bridge between wireless and wired Ethernet interfaces. A typical setup follows: http://www.pepwave.
User Manual 5.1 Installation Procedures 1. Connect the Ethernet port on the unit to the backbone network using an Ethernet cable. The port should auto sense whether the cable is straightthrough or crossover. 2. Connect the power adapter to the power connector of the unit. Plug the power adapter into a power source. 3. Wait for the status LED to turn green. 4. Connect a PC to the backbone network. Configure the IP address of the PC to be any IP address between 192.168.0.4 and 192.168.0.
User Manual 6 Using the Dashboard The Dashboard section contains a number of displays to keep you up-to-date on your access point’s status and operation. Remote assistance can also be enabled here. 6.1 General This section contains WAN status and general device information. WAN When your access point is connected to a WAN, this field displays the WAN IP address. For more information, click the Details… link, which displays the following: IP Address Status http://www.pepwave.
User Manual Device Information Model Firmware Uptime This field displays your access point’s model number. The firmware version currently running on your access point appears here. This field displays your access point’s uptime since the last reboot or shutdown. http://www.pepwave.
User Manual 6.2 AP This section displays a variety of information about your wireless network. AP Status Wireless Network SSID Radio Security Policy Channel http://www.pepwave.com This field displays your access point’s SSID. The radio frequency currently used by your access point appears here. If you’re using the AP One AC mini or the AP One In-Wall and have configured both radios, this displays both radios in use. This field displays the security policy your access point is currently using.
User Manual VLAN MAC Address (BSSID) If your access point is using a VLAN ID for management traffic, it will appear here. A value of 0 indicates that a VLAN ID is not being used. Your access point’s MAC address appears here. If you’re using the AP One AC mini and have configured both radios, this displays a MAC address for both the 2.4GHz and 5GHz radio.
User Manual 7 Configuration 7.1 System The options on the System tab control login and security settings, firmware upgrades, SNMP settings, and other settings. 7.1.1 Admin Security The Admin Security section allows you to set up your access point’s name, password, security settings, and other options. Admin Security AP Name Enter a name to identify your access point. This name can be retrieved via SNMP. Location Enter a name to identify the location of your access point.
User Manual Admin Password Confirm Admin Password This field allows you to specify a new administrator password. The default password is public. Re-enter the admin password. Web Admin Interface Check this box to turn on the web administration interface, which allows remote AP management. Security Choose HTTP or HTTPS as the protocol to use when accessing the web admin interface. To automatically redirect HTTP access to HTTPS, check HTTP to HTTPS Redirection.
User Manual 7.1.2 Firmware The Firmware section lets you check the firmware version currently used by your access point, as well as check for and install new firmware via online download. You can also upgrade your firmware using a firmware file stored locally. To check for new firmware, click the Check for Firmware button. If new firmware is available, your access point will automatically download and install it.
User Manual 7.1.4 Event Log The section allows you to turn on event logging at a specified remote syslog server. Event Log Remote Syslog Check this box to turn on remote system logging. Remote Syslog Host Enter the IP address or hostname of the remote syslog server, as well as the port number. http://www.pepwave.
User Manual 7.1.5 SNMP SNMP, or simple network management protocol, is an open standard that can be used to collect information about your access point. The SNMP section offers a range of settings to control simple network management protocol access. SNMP Settings SNMP Device Name SNMP Port This field shows the AP name defined at System>Admin Security. This option specifies the port which SNMP will use. The default port is 161. SNMPv1 This option allows you to enable SNMP version 1.
User Manual To add a community for either SNMPv1 or SNMPv2c, click the Add SNMP Community button in the Community Name table, which displays the following screen: SNMP Community Settings Community Name Enter a name for the SNMP community. IP Address/IP Mask These settings specify a subnet from which access to the SNMP server is allowed. Enter the subnet address here (e.g., 192.168.1.0) and select the appropriate subnet mask.
User Manual Confirm Authentication Password Privacy Protocol Access Mode Status Re-enter the authentication password. Select None or CBC-DES as the SNMPv3 privacy protocol. When CBC-DES is selected, an entry field will appear for the password. Select Read Only or Read and Write as the SNMPv3 access mode. Use these controls to enable or disable SNMPv3 access. 7.1.6 Controller In the Controller section, you can set up Peplink InControl or AP Controller remote management.
User Manual 7.1.7 Configuration In section, you can manage and backup access point configurations, as well as reset your access point to its factory configuration. Backing up your access point’s settings immediately after successful initial setup is strongly recommended. Configuration Restore Configuration to Factory Settings The Restore Factory Settings button resets the configuration to factory default settings.
User Manual 7.1.8 Reboot This section provides a reboot button for restarting the system. For maximum reliability, your access point can equip with two copies of firmware, and each copy can be a different version. You can select the firmware version you would like to reboot the device with. The firmware marked with (Running) is the current system boot up firmware. Please note that a firmware upgrade will always replace the inactive firmware partition. 7.
User Manual Click New SSID to create a new network profile, or click the existing network profile to modify its settings. SSID Settings Enable Radio Selection SSID Broadcast SSID Data Rate Check this box to enable wireless SSID. Available only on the AP One AC mini, this setting, shown below, allows you to enable or disable either of the two on-board radios. This setting specifies the AP SSID that Wi-Fi clients will see when scanning.
User Manual connected to the network. Default VLAN ID VLAN Pooling VLAN Pool This setting specifies the VLAN ID to be tagged on all outgoing packets generated from this wireless network (i.e., packets that travel from the Wi-Fi segment through your access point to the Ethernet segment via the LAN port). If 802.1x is enabled and a per-user VLAN ID is specified in authentication reply from the Radius server, then the value specified by Default VLAN ID will be overridden.
User Manual WEP Key Size Select 40 bits (64-bit WEP) or 104 bits (128-bit WEP). Key Format Choose ASCII or Hex format for the WEP key. ASCII can be applied only to encryption keys that are manually entered. Hex can be applied to encryption keys that are manually entered or automatically generated. Passphrase Enter a series of alphanumeric characters, and then click Generate Key to create a WEP key using the passphrase. Encryption Key The generated WEP key appears here.
User Manual WPA/WPA2 – Personal Passphrase Enter a passphrase of between 8 and 63 alphanumeric characters to create a passphrase used for data encryption and authentication. Click Hide / Show Passphrase to toggle visibility. WPA/WPA2 – Enterprise 802.1X Version Choose v1 or v2 of the 802.1x EAPOL. When v1 is selected, both v1 and v2 clients can associate with the access point. When v2 is selected, only v2 clients can associate with the access point. Most modern wireless clients support v2.
User Manual Web Portal Login Web Portal Select Enable to turn on your access point’s built-in web portal functionality. Authentication Method Choose Open Access to allow users to connect without authentication or RADIUS to require authentication. If RADIUS is selected, you’ll be given the opportunity to select a RADIUS security method in the next field. RADIUS Security Select PAP, EAP-TTLS PAP, EAP-TTLS MSCHAPv2, or PEAPv0 EAP-MSCHAPv2.
User Manual Allowed Domains / IPs To whitelist a domain or IP address, enter the domain name / IP address here and click Allowed Client IPs To whitelist a client IP address, enter the IP address here and click existing entry, click the button next to it. . To delete an existing entry, click the button next to it. . To delete an Access Control Restricted Mode MAC Address List The settings allow administrator to control access using Mac address filtering.
User Manual RADIUS Server Settings Host Secret Authentication Port Enter the IP address of the primary RADIUS server and, if applicable, the secondary RADIUS server. Enter the RADIUS shared secret for the primary server and, if applicable, the secondary RADIUS server. Enter the UDP authentication port(s) used by your RADIUS server(s) or click the Default button to enter 1812. Accounting Port Enter the UDP accounting port(s) used by your RADIUS server(s) or click the Default button to enter 1813.
User Manual Guest Protect Block LAN Access Check this box to block access from the LAN. To specify a subnet to block, enter the IP address and choose a subnet mask from the Custom Subnet drop-down menu. To add the blocked subnet, click click . . To delete a blocked subnet, To create an exception to a blocked subnet (above), enter the IP address and choose a Block Exception Block PepVPN subnet mask from the drop-down menu. To add the exception, click an exception, click . .
User Manual Downstream Limit unlimited downstream bandwidth. Firewall Settings Choose Flexible – Allow all except… or Lockdown – Block all except… to turn on Firewall Mode the firewall, then create rules for the firewall exceptions by clicking . See the discussion below for details on creating a firewall rule. To delete a rule, click the associated button. To turn off the firewall, select Disable. Firewall Rule Name Enter a descriptive name for the firewall rule in this field.
User Manual 7.2.2 Settings Basic access point operation settings, such as the protocol and channels used, as well as scanning interval and other advanced settings, can be defined and managed in this section. AP Settings Choose 802.11ng or 802.11na as your access point’s Wi-Fi protocol. The AP One AC mini provides the 802.11ng protocol for the 2.4 GHz band and the 802.11ac protocol for the 5GHz band, as shown below.
User Manual This drop-down menu selects the 5GHz 802.11 channel to be used. If Auto is set, the system will perform channel scanning based on the scheduled time set and choose the most suitable channel automatically. Channel Output Power Beacon Rate Beacon Interval The AP One AC mini allows setting channels on the 2.4GHz and 5GHz bands, as shown below. This drop-down menu determines the power at which your access point will broadcast.
User Manual Client Signal Strength Threshold This field determines the minimum acceptable client signal strength, specified in megawatts. If client signal strength does not meet this minimum, the client will not be allowed to connect. Advanced Features Discover Nearby Networks Scanning Interval Scanning Time Scheduled Radio Availability WMM Check this box to enable network discovery. Note that setting Channel to Auto will activate this feature automatically.
User Manual 7.2.3 WDS A wireless distribution system (WDS) provides a way to link access points when wires are not feasible or desirable. A WDS can also extend wireless network coverage for wireless clients. Note that your access point’s channel setting should not be set to Auto when using WDS. To create a new WDS, click Add. WDS Enable MAC Address Encryption Check this box to enable WDS. Enter the MAC address of the access point with which to form a WDS link.
User Manual 7.3 Network The settings on the AP tab control WAN and LAN settings, as well as allow you to set up PepVPN profiles. 7.3.1 WAN This section provides basic and advanced WAN settings. Basic Keep Default IP When enabled, this option maintains 192.168.0.3 as your access point’s IP address. IP Address Mode IP Address Mode options are Automatic and Manual. In Automatic mode, the IP address of your access point is acquired from a DHCP server on the Ethernet segment.
User Manual Advanced Management VLAN ID Spanning Tree Protocol This field specifies the VLAN ID to tag to management traffic, such as AP-to-AP controller communication traffic. The value is 0 by default, meaning that no VLAN tagging will be applied. NOTE: change this value with caution as alterations may result in loss of connection to the AP controller.
User Manual 7.3.2 LAN This section offers a variety of settings that affect your access point’s operation on the LAN, such as settings for DHCP, DMZ, and port forwarding. Note that the following settings will be available only when your access point is operating in router mode. IP Settings IP Address Enter the LAN IP address and subnet mask to assign to your access point on the LAN. http://www.pepwave.
User Manual DHCP Server Settings DHCP Server Check to enable the DHCP server feature of your access point. Enabling DHCP is the best option for most users. The following options will be enabled once you have checked and enabled the DHCP server. IP Range Enter the first and last IP addresses of the range of addresses that your access point will make available to DHCP clients. The default range is from 192.168.1.100 to 192.168.1.200, with 24-bit subnet mask.
User Manual DMZ DMZ DMZ IP Check this box to forward traffic sent to the WAN IP address to the DMZ IP address. Enter an IP address clients will use to connect to the DMZ. To create a port forwarding rule, first click the Add Service button, located in the Port Forwarding section. Port Forwarding Service Name IP Protocol Port Enter a name for the new port forwarding rule. Valid values for this setting consist of alphanumeric and underscore “_” characters only.
User Manual Single Port: Traffic that is received by your access point via the specified protocol at the specified port is forwarded via the same port to the servers specified by the Server IP Address setting. For example, with IP Protocol set to TCP, and Port set to Single Port and Service Port 80, TCP traffic received on port 80 is forwarded to the configured servers via port 80.
User Manual To set up PepVPN, first give your site a local PepVPN ID. To modify an existing local ID, click . Once you’ve specified a local ID, click the New Profile button to configure PepVPN. PepVPN Profile Settings Enable Name Check this box to enable PepVPN. Enter a name to represent this profile. The name can be any combination of alphanumeric characters (0-9, A-Z, a-z), underscores (_), dashes (-), and/or nonleading/trailing spaces ( ).
User Manual unique peer ID number in the Remote ID field. Pre-shared Key Remote IP Address / Host Names (Optional) This optional field becomes available when Pre-shared Key is selected as the VPN Authentication method, as explained above. Pre-shared Key defines the pre-shared key used for this particular VPN connection. The VPN connection's session key will be further protected by the pre-shared key. The connection will be up only if the pre-shared keys on each side match.
User Manual 8 Tools 8.1 Ping The ping test tool tests connectivity pinging the specified destination IP address. The ping utility is located at System>Tools>Ping. 8.2 Traceroute The traceroute test tool traces the routing path to the specified IP address. The traceroute test utility is located at System>Tools>Traceroute. http://www.pepwave.
User Manual 8.3 Nslookup The nslookup tool is used to test DNS name servers. The nslookup utility can be found at System>Tools>Nslookup. http://www.pepwave.
User Manual 9 Monitoring Device Status The displays available on the Status tab help you monitor device data, client activity, rogue device access, and more. 9.1 Device Here you can access a variety of data about your access point, download a diagnostic report, and check MAC addresses. To download a diagnostic report, click the Download link. 9.2 Client List The Client List displays all currently connected clients. Use the Expand and Collapse buttons to control the amount of data displayed.
User Manual 9.3 WDS Info Here you can monitor the status of your wireless distribution system (WDS) and track activity by MAC address. If you’re using the AP One AC mini, this section will display information for both the 2.4GHz and 5GHz radios. 9.4 Portal If you’ve turned on your access point’s captive portal, client connection data will appear here. Use the Expand and Collapse buttons to control the amount of data displayed. http://www.pepwave.
User Manual 9.5 Rogue AP This section displays a list of nearby suspected rogue access points. 9.6 Event Log The Event Log displays a list of all events associated with your access point. Check Auto Refresh to refresh log entries automatically. Click the Clear Log button to clear the log. http://www.pepwave.
User Manual 10 Restoring Factory Defaults The following procedure restores the settings of your access point to factory defaults: Power on the unit and wait for one minute. Press and hold the reset button for at least five seconds, then release. The unit will automatically reboot. Wait for one minute or until the status LED turns green, upon which the settings of the device will have been restored to the factory defaults. By default, the unit will acquire an IP address from a DHCP server.
User Manual 11 Appendix Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment.
www.pepwave.com Contact Us: Sales http://www.pepwave.com/contact/sales/ Support http://www.pepwave.com/contact/ Business Development and Partnerships http://www.pepwave.
