Page 1
AX3000 Wi-Fi 6 Long-Range Access Point User Guide V1.0...
Page 2
Tenda does not assume any liability that may occur due to the use or application of the product described herein. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information and recommendations in this document do not constitute a warranty of any kind, express or implied.
Page 3
Preface Thank you for choosing Tenda! Please read this user guide before you start. This user guide walks you through all functions on the AX3000 Wi-Fi 6 long-range access point. Conventions The typographical elements that may be found in this document are defined as follows.
Page 4
(Toll Free: Mon - Fri 9 am - 6 pm PST) Hong Kong: 00852-81931998 www.tendacn.com Website Revision History Tenda is constantly searching for ways to improve its products and documentation. The following table indicates any changes that might have been made since the i29 was introduced. Version Date Description V1.0...
Contents Log in to the Web UI ........................1 1.1 Login ............................1 1.2 Logout ............................3 Web UI operations .......................... 4 2.1 Layout ............................4 2.2 Frequently-used buttons ......................5 Quick setup ............................. 6 3.1 Overview ..........................6 3.2 Quick setup ..........................7 Status ..............................
Page 6
6.5.2 Configuring access control ..................52 6.5.3 Example of configuring access control ................ 53 6.6 QVLAN settings ........................54 6.6.1 Overview ........................54 6.6.2 Configure the QVLAN function ................... 56 6.6.3 Example of configuring QVLAN ................... 57 Tools .............................. 60 7.1 Date &...
Log in to the Web UI Login Step 1 Connect your computer to the AP or the switch connected to the AP with an Ethernet cable. Step 2 Ensure that the IP address of the management computer is in the same network segment of the AP.
Page 8
DHCP server. Under such circumstance, check the new IP address of the AP at the client list of the DHCP server first, and use the new IP address to log in to the web UI of the AP. If an Tenda AC (including Tenda router that supports AP management) has already been deployed ...
Log in to the web UI of the AP. You can configure the AP now. Logout After logging in to the web UI of the AP, if no operations are performed during the Login Timeout Interval, the system will log out automatically. In addition, you can click Logout on the upper right corner to safely exit from the web UI.
Web UI operations Layout The web UI of the AP consists of four sections, including the level-1, and level-2 navigation bars, tab page area, and the configuration area. See the following figure. Functions or parameters displayed in gray on the web UI are not supported yet or cannot be modified under the current configurations.
Frequently-used buttons The following table describes the frequently-used buttons available on the web UI of the AP. Button Description Used to refresh the current page. Used to save the configuration on the current page and enable the configuration to take effect. Used to modify the current configuration on the current page back to the original configuration.
Quick setup Overview In the Quick Setup module, you can set up the AP in a quick way to enable internet access for your wireless devices such as smart phones and tablets. AP supports only the AP mode. In this mode, AP connects to the internet using Ethernet cables and transforms wired signals to wireless signals for wireless coverage.
Quick setup Before configuration, ensure that the upstream router has connected to the internet. Step 1 Choose Quick Setup. Step 2 Choose the Radio Band you wish to configure, for example, 2.4 GHz. Step 3 Set a wireless network name (primary SSID) in the SSID box.
Status System status The System Status page allows you to check the System Status and LAN Port Status of the AP. To access the page, choose Status > System Status. Parameter description Parameter Description It specifies the name of the AP. Device Name You can modify it on LAN Setup...
Page 15
Parameter Description MAC Address It specifies the physical address of the AP’s LAN port. It specifies the IP address of the AP and it is also the management IP address of the AP, which can be used to log in to the web UI. IP Address You can modify it on LAN Setup...
Wireless status The Wireless Status page allows you to check RF Status and SSID Status of the AP. To access the page, choose Status > Wireless Status. Parameter description Parameter Description It specifies whether the wireless function of the AP is enabled. It specifies the network mode currently enabled by the AP on each Network Mode RF Status...
Traffic statistics The Traffic Statistics page allows you to check statistical information about traffic based on SSIDs. To access the page, choose Status > Traffic Statistics. Parameter description Parameter Description SSID It specifies the wireless network name. Received Traffic It specifies the total number of bytes received by a wireless network. Received Packets (Qty.) It specifies the total number of packets received by a wireless network.
Client list The Client List page allows you to view wireless clients connected to each SSID of the AP and their basic information. To access the page, choose Status > Client List. Parameter description Parameter Description Select the SSID from the drop-down list menu to view client information connected SSID to it.
Internet settings The LAN Setup page allows you to check the MAC address of the LAN port of AP, modify the IP address obtaining method of the AP, modify device name, and modify Ethernet mode. To access the page, choose Internet Settings > LAN Setup.
Page 20
Parameter description Parameter Description MAC Address It specifies the MAC address of the AP’s LAN port. It specifies IP address obtaining method of the AP. Static IP: You are required to set related parameters manually. This method is suitable for scenarios where only one or several APs are deployed. DHCP (Dynamic IP Address): The AP automatically obtains related parameters from ...
Wireless SSID 6.1.1 Overview The SSID page allows you to set SSID-related parameters of the AP. To access the page, choose Wireless > SSID. Parameter description Parameter Description It specifies the SSID to be configured. SSID On each band, the first displayed SSID is the primary SSID.
Page 22
Parameter Description It specifies the status of the selected SSID. Status primary SSID is enabled by default and you can enable other SSIDs manually. After this function is enabled, users can access only the internet but cannot access the Guest Network LAN.
Page 23
only 54 Mbps. Therefore, this security mode is not recommended. Parameter description Parameter Description It specifies the authentication type for the WEP security mode. The options include Open and Shared. The options share the same encryption process. Open: It specifies that authentication is not required and data exchanged is ...
Page 24
WPA-PSK, WPA2-PSK, and WPA-PSK & WPA2-PSK adopt a pre-shared key for authentication, while the AP generates another key for data encryption. This prevents the vulnerability caused by static WEP keys, and makes the three security modes suitable for ensuring security of home WiFi networks.
Page 25
still widely used currently. In order to allow wireless devices that do not support WPA3 to access the WPA3 network, the AP supports the WPA3-SAE transition mode, which means that the mixed encryption mode of WPA2-PSK and WPA3-SAE is adopted to ensure both compatibility and security. Parameter description Parameter Description...
Page 26
Parameter Description It specifies the automatic update interval of a WPA key for data encryption. A shorter interval results in higher data security. Key Update Interval The value 0 indicates that a WPA key is not updated. WPA and WPA2 ...
Page 27
Parameter description Parameter Description Select security mode. Security Mode WPA: The wireless network adopts the WPA enterprise security mode. WPA2: The wireless network adopts the WPA2 enterprise security mode. RADIUS Server It specifies the IP address of the RADIUS server for client authentication. RADIUS Port It specifies the port number of the RADIUS server for client authentication.
6.1.2 Example of SSID configurations Example of setting up an open wireless network Networking requirement In a hotel lounge, guests can connect to the wireless network without a password and access the internet through the WiFi network. Internet PoE switch Router LAN port WAN port...
Page 29
---- End Verification Wireless devices can connect to the FREE wireless network without a password.
Page 30
Example of setting up a wireless network encrypted with PSK Networking requirement A hotel wireless network with a certain level of security must be set up through a simply procedure. In this case, WPA, WPA2-PSK or WPA-PSK & WPA2-PSK security mode is recommended. Assume that the SSID is hotel, the Wifi password is UmXmL9UK.
Page 31
---- End Verification Wireless devices can connect to the hotel wireless network with the password UmXmL9UK.
Page 32
Example of setting up a wireless network encrypted with WPA or WPA2 Networking requirement A highly secure wireless network is required and a RADIUS server is available. In this case, WPA or WPA2 mode is recommended. Assume that the IP address of the RADIUS server is 192.168.0.200, the RADIUS password is 12345678, the port number for authentication is 1812, and the SSID is hot_spot.
Page 33
Step 6 Set RADIUS Server, RADIUS Port, and RADIUS Key to 192.168.0.200, 1812, and 12345678 respectively. Step 7 Set Encryption Algorithm to AES. Step 8 Click Save to apply your settings. Configure the RADIUS client. Windows 2003 is used as an example to describe how to configure the RADIUS client.
Page 34
Step 1 Configure RADIUS client In the Computer Management dialog box, double-click Internet Authentication Service, right-click RADIUS Clients, and choose New RADIUS Client. Enter a RADIUS client name (device name of the AP is recommended) and the IP address of the AP, and click Next. IP address of the AP...
Page 35
Enter 12345678 in the Shared secret and Confirm shared secret text boxes, and click Finish. Shared secret should be the same as that specified by RADIUS Password on the AP. Step 2 Configure a remote access policy. Right-click Remote Access Policies and choose New Remote Access Policy.
Page 36
In the New Remote Access Policy Wizard dialog box that appears, click Next. Enter a policy name and click Next.
Page 37
Select Ethernet and click Next. Select Group and click Add.
Page 38
Enter 802.1x in the Enter the object names to select text box, click Check Names, and click OK. Select Protected EAP (PEAP) and click Next.
Page 39
Click Finish. The remote access policy is created. Right-click root and choose Properties. Select Grant remote access permission, select NAS-Port-Type matches "Ethernet" AND, and click Edit.
Page 40
Select Wireless – Other, click Add, and click OK. Click Edit Dial-in Profile, click the Authentication tab, configure settings as shown in the following figure, and click OK. When a message appears, click No. Step 3 Configure user information. Create a user and add the user to group 802.1x.
Page 41
Configure your wireless device. Windows 7 is taken as an example to describe the procedure. Step 1 Choose Start > Control Panel, click Network and Internet, click Network and Sharing Center, and click Manage wireless networks. Step 2 Click Add. Step 3 Click Manually create a network profile.
Page 42
Step 4 Enter wireless network information, select Connect even if the network is not broadcasting, and click Next. Same as the security mode of the SSID of the Step 5 Click Change connection settings.
Page 43
Step 6 Click the Security tab, select Microsoft: Protected EAP (PEAP), and click Settings. Step 7 Deselect Validate server certificate and click Configure.
Page 44
Step 8 Deselect Automatically use my Windows logon name and password (and domain if any) and click OK. Step 9 Click Advanced settings.
Page 45
Step 10 Select User or computer authentication and click OK. Step 11 Click Close.
Page 46
Step 12 Click the network icon in the lower-right corner of the desktop and choose the wireless network of the AP, such as hot_spot in this example.
Page 47
Step 13 In the Windows Security dialog box that appears, enter the user name and password on the RADIUS server and click OK. ---- End Verification Wireless devices can connect to the wireless network named hot_spot.
RF settings The RF Settings page allows you to configure advanced settings about the AP. To access the page, choose Wireless > RF settings.
Page 49
Parameter description Parameter Description Wireless Network It specifies whether to enable the wireless function of the AP. It specifies the country or region where the AP is used. This parameter helps comply Country/Region with channel regulations of the country or region. It specifies the wireless network mode of the AP.
Page 50
Parameter Description It specifies the wireless channel bandwidth of the AP. 20 MHz: It indicates that the AP can use only 20 MHz channel bandwidth. 40 MHz: It indicates that the AP can use only 40 MHz channel bandwidth. ...
RF optimization The RF Optimization page allows you to modify the radio parameters to optimize performance. To access the page, choose Wireless > RF Optimization. You are recommended to retain the default settings if without the professional guidance to prevent degrading wireless performance of the AP.
Page 52
Parameter Description It specifies whether to enable the air interface scheduling function of the AP. Air Interface If this function is enabled, the same download time is assigned to users experiencing Scheduling different download rates, ensuring a better experience for high-rate users. Multi-User Multiple-Input Multiple-Output.
Page 53
The prioritize 5 GHz function takes effect only on the condition that the wireless both of the 2.4 GHz and 5 GHz are enabled, and the two bands share the same SSID, security mode and password. Air Interface Scheduling In mixed wireless rates environment, the traditional FIFO (First-in First-out) allocates more air interface time to clients with low transmission capacity and low spectrum efficiency, reducing the system throughput of each AP then the system utilization.
6.4.1 Overview 802.11 networks offer wireless access services based on the Carrier Sense Multiple Access with Collision Avoidance (CSMA/CA) channel competition mechanism, which allows all wireless clients to fairly compete for channels. All the services implemented over wireless networks share the same channel competition parameters.
Page 55
WMM assigns each AC a set of EDCA parameters for channel contention, including: Arbitration Inter Frame Spacing Number (AIFSN): Different from the fixed distributed inter-frame spacing (DIFS) specified in the 802.11 protocol family, AIFSN varies across ACs. A greater AIFSN indicates a longer backoff period. See AIFS in the following figure. Contention window minimum (CWmin) and contention window maximum (CWmax) specify the ...
6.4.2 Configuring WMM settings The WMM function of the corresponding radio band cannot be set to Disable in the following cases: The network mode of the AP at 2.4 GHz is 11b/g/n or 11b/g/n/ax The network mode of the AP at 5 GHz is 11a/n, 11ac or 11a/n/ac/ax. ...
Access control 6.5.1 Overview The access control function enables you to allow or disallow the wireless devices to access the wireless network of the AP based on their MAC addresses. The AP supports the following 2 filter modes: Forbid only: It indicates that only the wireless devices with the specified MAC addresses cannot ...
Parameter description Parameter Description SSID It specifies the wireless network to which the rule applies. Access Control It specifies whether to enable this function. Set access control mode. It indicates that only the wireless clients on the wireless Forbid only: ...
6.5.3 Example of configuring access control Networking requirement A wireless network whose SSID is VIP under the 5 GHz radio band has been set up in a company. Only a few members are allowed to connect to the wireless network. The Access Control function of the AP is recommended.
QVLAN settings 6.6.1 Overview The AP supports 802.1Q VLANs and is applicable in a network environment where 802.1Q VLANs have been defined. By default, the QVLAN function is disabled. If the QVLAN function is enabled, tagged data received by a port of the AP is forwarded to the other ports of the VLAN corresponding to the VID in the data, whereas untagged data received by a port of the AP is forwarded to the other ports of the VLAN corresponding to the PVID of the port that receives the data.
Page 61
Parameter description Parameter Description QVLAN It specifies whether to enable the QVLAN function of the AP. PVID It specifies the ID of the default native VLAN of the trunk port of the AP. It specifies the ID of the AP management VLAN. Management VLAN After changing the management VLAN, you can manage the AP only after connecting your computer or AP controller to the new management VLAN.
6.6.2 Configure the QVLAN function Step 1 Choose Wireless > QVLAN Settings. Step 2 Enable QVLAN function. Step 3 Change the parameters as required. Generally, you only need to change the 2.4 GHz SSID VLAN ID and 5 GHz SSID VLAN ID settings. Step 4 Click Save.
6.6.3 Example of configuring QVLAN Networking requirement A hotel has the following WiFi network coverage requirements: Guests are allowed to connect to VLAN2 and only able to access the internet. Hotel staffs are allowed to connect to VLAN3 and only able to access the intranet. ...
Page 64
Configuration procedure Step 1 Configure the AP. Choose Wireless > QVLAN Settings. Enable QVLAN. Modify the VLAN ID of the SSIDs at 2.4 GHz band. Set the VLAN ID of internet to 2, oa to 3, and VIP to 4 respectively. Click Save.
Page 65
Step 2 Configure the switch. Create IEEE 802.1q VLANs described in the following table on the switch. Port Connected To Accessible VLAN ID Port Type PVID 1, 2, 3, 4 Trunk Internal server 3, 4 Trunk Router 2, 4 Trunk Retain the default settings of other ports.
Tools Date & time This section allows you to set the system time login timeout interval of your AP. 7.1.1 System time The System Time page allows you to set the system time. To access the page, choose Tools > Date & Time > System Time. Ensure that the system time of the AP is correct, so that time-based functions can take effect properly.
Parameter description Parameter Description Time Setup It specifies the modes to set the system time. Time Zone It specifies the standard time zone of the region in which the AP locates. Manual You can manually set the system time of the AP. If you choose this option, you need to set the system time each time after the AP reboots.
Maintenance The Maintenance page allows you to reboot reset upgrade firmware, back up or restore settings, and control LED indicator. 7.2.1 Reboot Rebooting the AP disconnects all connections. You are recommended to reboot the AP in spare time. Manual reboot If a parameter does not take effect or the AP does not work properly, you can try rebooting the AP manually to resolve the problem.
Page 69
---- End After the configurations, the AP will automatically reboot in a day. Configuring the AP to Reboot Schedule Step 1 Click Tools > Maintenance > Reboot Schedule. Step 2 Enable Reboot Schedule. Step 3 Set Type to Reboot Schedule. Step 4 Select the day or days when the AP reboots, such as Monday to Friday.
7.2.2 Reset If you cannot locate a fault of the AP or forget the password of the web UI of the AP, you can reset the AP to restore its factory settings and then configure it again. When the factory settings are restored, your configuration is lost. Therefore, you need to ...
7.2.3 Upgrade firmware This function enables you to upgrade the AP’s firmware to get more functions and higher stability. To ensure a correct upgrade and avoid damage: Make sure the new firmware is applicable to the AP. Keep a proper power supply to the AP during the upgrade. ...
7.2.4 Backup/restore The backup function allows you to back up the current configuration of the AP to a local computer. The restore function allows you to restore the AP to a previous configuration. If the AP enters the optimum condition after you greatly change the configuration of the AP, you are recommended to back up the new configuration, so that you can restore it after upgrading or resetting the AP.
Page 73
Step 3 Click Backup. ---- End A configuration file named APCfm.cfg will be downloaded. If the prompt “This type of file can harm your computer. Do you want to keep APCfm.cfg anyway?” appears, click “Keep”. Restoring a configuration Step 1 Click Tools >...
Page 74
Step 3 Click Restore. Step 4 Choose the configuration file you backed up. ---- End The AP restores the configurations successfully when the progress bar is done.
7.2.5 LED indicator control This function enables you to turn on/off the LED indicator of the AP. By default, the LED indicator is turned on. Turn off the LED indicator On the Tools > Maintenance > Maintenance page, click Turn off all LED indicators. After the configurations, the LED indicator is turned off and no longer displays the working status of the AP.
Page 76
Turn on the LED indicator On the Tools > Maintenance > Maintenance page, click Turn on all LED indicators. After the configurations, the LED indicator lights up again and you can judge the working status of the AP.
Account 7.3.1 Overview The Account page allows you to modify the information of the login account to keep unauthorized users from entering the web UI and modifying configurations, thus protecting the wireless network. To access the configuration page, choose Tools > Account. AP supports two account types: Administrator and Guest.
7.3.2 Modifying the password and user name of login account Step 1 Click Tools > Account. Step 2 Click beside the account to be modified. Step 3 If the account to be modified is a Guest, enable the Guest Account first. Otherwise, go to the next step.
System Log The logs of the AP record various events that occur and the operations that users perform after the AP starts. In case of a system fault, you can refer to the logs during troubleshooting. The Logs page allows you to view system logs. To access the page, choose Tools >...
Diagnostic tool With the diagnostic tool, you can detect the connection status and connection quality of a network. Assume that you need to check the connection quality between the AP and its upstream router (IP address: 192.168.1.1). Procedure: Step 1 Choose Tools >...
Uplink check 7.6.1 Overview In AP mode, the AP connects to its upstream network using the Ethernet port (LAN port). If a critical node between the LAN port and the upstream network fails, the AP as well as the wireless devices connected to the AP cannot access the upstream network.
7.6.2 Configuring uplink detection Step 1 Choose Tools > Uplink Detection. Step 2 Enable Uplink Detection. Step 3 Select an operation you want the AP to perform. Step 4 Enter the IP address of the host to be pinged in Host1 to Ping or Host2 to Ping, such as the IP address of the switch or router directly connected to the Ethernet port of the AP.
Appendix Default parameter values The following table lists the default parameter values of the AP. Parameter Default Value Login IP address 192.168.0.254 Login User Name Administrator admin|admin |Password Quick Setup Working Mode The default IP address of the LAN port is 192.168.0.254.
Acronyms and Abbreviations Acronym or Full Spelling Abbreviation Access Point Controller (Network Equipment) Access Category (WMM settings) Acknowledge Advanced Encryption Standard AIFSN Arbitration Inter Frame Spacing Number Access Point APSD Automatic Power Save Delivery Address Resolution Protocol Best Effort Background CAT5e Category 5 Ethernet CSMA/CA...
Page 85
Acronym or Full Spelling Abbreviation Management Information Base MU-MIMO Multi-User Multiple-Input Multiple-Output Network Management System Network Time Server Object Identifier Power-over-Ethernet Point to Point Protocol PVID Port-based VLAN ID QVLAN IEEE 802.11q VLAN RADIUS Remote Authentication Dial-In User Service Radio Frequency RSSI Received Signal Strength Indicator Request To Send...
Need help?
Do you have a question about the AX3000 and is the answer not in the manual?
Questions and answers