11mbps wireless lan inter-building access point (40 pages)
Summary of Contents for Netkrom Airnet
Page 1
AIRNET 300Mb 802.11b/g/n Indoor High Power Access Point User’s Manual September, 2010 Page 1 of 83...
Page 2
Disclaimer Netkrom Technologies, Inc. provides this manual without warranty of any kind, expressed or implied, including but not limited to the implied warranties of merchantability and fitness for a particular purpose. Netkrom Technologies, Inc. may make improvements and/or changes to the product and/or specifications of the product described in this manual, without prior notice.
Page 3
FCC NOTICE This device has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This device generates uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
Page 4
Declaration of Conformity Netkrom Technologies, Inc. declares the following: Product Name: AIRNET 300Mbps 802.11b/g/n Indoor High Power Access Point 802.3af PoE Model No.: AIR-AP600GHP conforms to the following Product Standards: This device complies with the Electromagnetic Compatibility Directive (89/336/EEC) issued by the Commission of the European Community.
Overview the Product Introduction The high-performance Wireless Network Access Point (AP) AIR-AP600GHP is designed for enterprise and public access applications. Embedded with the Atheros chipset, it boosts network robustness, stability and wider network coverage. Based on 802.11n (Draft 2.0), the AIR-AP600GHP supports high-speed data transmission of up to 300Mbps.
Features and Benefits Point-to-Point & Point-to-MultiPoint Support Point-to-Point and Point-to-MultiPoint communication between different buildings enables you to bridge wireless clients while unifying the networks. Virtual AP (Multiple SSID) Virtual AP implements mSSID (Multi-SSID). This allows a single wireless card to be set up with multiple virtual AP connections with different SSIDs or BSSID (Basic Service Set Identifier) and security modes.
Operation Modes and Connection Examples Access Point and Access Point WDS Mode The Access Point Mode is the default mode of the AIR-AP600GHP. It enables the bridging of wireless clients to wired network infrastructure and enables transparent access and communication with each other. The illustration below shows a typical resources sharing application example using this device.
Page 10
Station Mode In Station mode the AIR-AP600GHP acts as a wireless client. When connected to an access point, it creates a network link between the Ethernet network connected at the AIR-AP600GHP, and the wireless Ethernet network connected at the access point. In this example the workgroup PCs on the Ethernet network connected to the Station device can access the printer across the wireless connection to the access point where the printer is connected.
Page 11
Station WDS Mode Station WDS mode is similar to Station mode. The difference is that Station WDS must connect to an access point configured as Access Point WDS mode. Station WDS is mainly used for point-to–point connection between 2 buildings or locations as far as several kilometers away.
Router Mode In Router Mode, the AIR-AP600GHP also operates as a router. Either the wireless or Ethernet can be setup as WAN connection to a broadband modem. Wireless as WAN is known as Station + Router mode and Ethernet as WAN is known as AP + Router mode.
Page 13
PPP over Ethernet (PPPoE) When using ADSL services provided by your ISP support PPPoE connection. Repeater WDS Mode Repeater WDS Mode is mainly used to extend the wireless range and coverage of the wireless network allowing access and communications over places generally difficult for wireless clients to connect to the network.
Device Panel Views and Descriptions Front View Features Status and Indications Static ON: Power is being supplied to the device. POWER LED Off: Power is not being supplied to the device. ETHERNET Steady ON: Link is established between device and the network.
Hardware Installation Package Contents Take a moment to ensure you have all of the following parts in your AIRNET 300Mb 802.11b/g/n Indoor High Power Access Point installation kit before you begin installing the product. If any parts are missing, please contact your local vendor or contact us at 305-4182232.
Setup Requirements CAT5/5e Networking Cable. • At least 1 computer installed with a web browser and a wired or wireless • network interface adapter. All network nodes installed with TCP/IP and properly configured IP address • parameters. Using power adapter to supply power to the unit Connect the external antenna to the SMA connector of the access point.
Page 18
Attach the power adapter to the main electrical supply, and connect the power plug into the socket of the access point. Turn ON the power supply and power ON your PC. Notice that the LEDs: Power and Port have lighted up. This indicates that connection has been established successfully between your access point and your PC.
Using a Standard 802.3af PoE to supply power to the unit The access point can be powered using a standard 802.3af PoE. This accessory supplies operational power to the wireless AP via the Ethernet cable connection. The installation process is described below. Connect the external antenna to the SMA connector of the access point.
Page 20
Next, connect one end of the Ethernet cable to the standard 802.3af PoE and the other end of the cable to your PC’s Ethernet network adapter. Once you have finished configuring your access point, you can connect the standard 802.3af PoE’s RJ45 Ethernet cable end to your network device, such as to a switch or hub.
Wall Mounting Screw the mount onto the unit. Align the unit and mount to the wall. Using the mount as a guide, make 2 marks and drill 2 holes into the wall. Secure the unit and mount to the wall. Page 21 of 83...
Page 22
Configure the IP Address After setting up the hardware you need to assign an IP address to your PC so that it is in the same subnet as the access point. For Windows 95/98/98SE/ME/NT From your desktop, right-click the Network Neighborhood icon and select Properties. Select the network adapter that you are using, then right-click and select Properties.
Page 23
To verify that the IP address has been correctly assigned to your PC, go to the Start menu, select Run, and enter the command: winipcfg. Select the Ethernet adapter from the drop-down list and click OK. PC is now setup with proper IP address to communicate with the access point. Page 23 of 83...
Page 24
For Windows XP/2000 Go to your desktop, right-click on the My Network Places icon and select Properties. Right-click the network adapter icon and select Properties. Highlight Internet Protocol (TCP/IP) and click on the Properties button. Select the Use the following IP address radio button.
Page 25
Click on the OK button to close all windows. To verify that the IP address has been correctly assigned to your PC, go to the Start menu, Accessories, select Command Prompt, and type the command: ipconfig/all PC is now setup with a proper IP address to communicate with the access point. Page 25 of 83...
Access the Web Interface Access with uConfig The UConfig utility provides direct access to the web interface. Insert the Product CD into your CD-ROM drive, the CD will autorun. From the section, select to install the utility to your hard disk. After installation double-click on the icon and click on the button.
Page 27
Select the access point from the products list and click on the button. To retrieve and display the latest device(s) in the list, click on the button. Do not exit the uConfig program while accessing the web-based interface as this will disconnect you from the device.
Page 28
At the login prompt, enter the User Name and Password. The default are : User Name : admin Password : password It then opens the device home page. The Status page. Page 28 of 83...
ccess with a Web Browser Launch your Web browser. e.g. MS Internet Explorer, FireFox, Netscape, etc.. For MS IE, under the tab, select Open the tab and in the section disable all the option boxes. Click on the button to update the changes. At the bar type in http://192.168.168.1 and press on your keyboard.
Page 30
At the login prompt, enter the User Name and Password. The default are : User Name : admin Password : password It then opens the device home page. The Status page. Page 30 of 83...
Navigation Main Menu Bar Page displays current status of the device and the statistical Status: information. Basic Wireless: Page contains the controls for a wireless network configuration, while covering basic wireless settings which define operating mode, associating details and data security options. Basic Network: Page covers the configuration of network operating mode, IP settings and network services (i.e.
Basic Network Tab Click BASIC NETWORK from the menu bar to open the page as show below. Network Mode: Bridging and Routing Network Mode: Select between Bridge (default) and Router mode. LAN Setup LAN Mode: Static: (default) lets you enter a specific IP address for the device. Default IP address is 192.168.168.1 DHCP Client: when set let device learn the IP address automatically from the network.
Page 33
DHCP Fallback IP: Should device in DHCP Client mode failed to obtain an IP address from the DHCP server, user can access device using this temporary fallback IP address. DHCP Mode: None: function di s abled DHCP Server: Check to enable. Device act IP address distribution server automatically issue IP address and other network information to the DHCP Client request them.
Page 34
DHCP Reservations Click Add to enter for each device the IP address and MAC address. All DHCP active lease devices are displayed in the Status tab page from the More Status selection. Domain Name Server Entry The Primary and Secondary DNS IP addresses entry is for device operation to resolve domain name to reach certain servers like internet time server and other services that use domain name.
Basic Wireless Tab Under the tab, there is the selection of 4 radios. Fig 2.1 Basic Wireless Tab Currently device supports only one 802.11n radio card. Select RADIO 1 to configure. Basic Wireless Tab contains all the wireless setup, which is necessary for the operator to setup the wireless part of the link.
Wireless Mode There are 5 modes available. Access Point This mode can be connected to Station mode, and then forwards all the traffic to the network devices connected to the Ethernet devices of the Station. Access Point WDS This mode can be connected to Station WDS mode. Using WDS protocol, it allows a client or station device to bridge wireless traffic transparently.
Access Point Parameters Settings Fig 2.3 Basic Wireless Settings (Access Point/ Access Point WDS) Local AP-ESSID This is the Service Set Identifier used to identify the operator’s wireless LAN. It should be specified while operating in Access Point or Access Point WDS mode. All the client devices within its range will receive broadcast messages from the access point advertising this SSID.
Guard Interval: Guard band between packets. For long distant connection, select Long for better pe rformance. Channel – Frequency This is frequency selection you can set for device to operate on. The frequency range available depends on the country domain you select in Country Code. For 5GHz frequency range some have DFS characteristics earmarked by regulations.
Station Parameters Settings Fig 2.4 Basic Wireless Settings (Station/Station WDS) This options below are only available in Station, Station WDS and Repeater WDS modes unless otherwise stated. Wireless Mode: Station Remote AP-ESSID This is the Service Set Identifier used by station to seek and connect to the access point of same the SSID identifier.
Page 40
Country Code Different countries have different power levels and also frequency selections. To ensure device operation follows regulatory compliance rules, the operator should make sure that correct country code where device will be used, is selected. The channel list, output power limits, IEEE 802.11 and Channel Spectrum Width modes will be tuned according to the regulations of the selected country.
Wireless Security All the wireless security settings are set under this section. The operation of the Keys is the same for ALL the Wireless modes. WPA or WPA2 Authentication Fig 2.7 WPA (Access Point/Access Point WDS/Repeater WDS) WPA PSK PSK (Default) – WPA or WPA2 with Pre-shared Key method. Cipher Type TKIP - Temporal Key Integrity Protocol which uses RC4 encryption algorithm.
Page 42
WPA + EAP Fig 2.8 WPA + EAP EAP – WPA or WPA2 with EAP (Extensible Authentication Protocol) Firmware supported options for clients are: EAP-TTLS and EAP-PEAP Cipher Type TKIP - Temporal Key Integrity Protocol which uses RC4 encryption algorithm. AES - Advanced Encryption Standard (AES) algorithm.
Page 43
WPA EAP-TTLS and WPA EAP-PEAP Fig 2.8 WPA (Station /Station WDS/Repeater WDS) This applies to the following modes only, when WPA or WPA2, with EAP is selected. Station, Station WDS, Repeater WDS mode. Identity Identification credential used by the wpa-supplicant for EAP authentication. User Name: Identification credential used by the wpa-supplicant for EAP tunneled authentication in...
Page 44
IEEE802.1x Settings The operation of the Keys is the same for ALL the modes. ** Note: Operating with IEEE802.1x security will limit AP to maximum wireless link speed of 54Mbps only. Fig. 2.8 IEEE802.1X (Access Point/Access Point WDS/ Repeater WDS) This option apply to the following modes only, when WPA EAP or IEEE802.1x .
Fig 2.6 WEP The operation of the Keys is the same for ALL the modes. ** Note: Operating with WEP security will limit AP to maximum wireless link speed of 54Mbps only. Authentication Type: Open Authentication – (Default) No authentication. Recommend to use this standard option over shared authentication.
Virtual Access Point (VAP) Virtual AP (VAP) implements mSSID (Multi-SSID) whereby a single wireless card can be setup with up to 3 virtual SSID of BSSID connections in the VAP setup page. Each VAP can be set with different security authentication mode. Fig 2.11 Virtual AP (Only Available in Access Point/ Access Point WDS Mode) All VAPs are created from the same radio they all share the same wireless channel, country code, channel spectrum width and transmit power.
Advance Wireless Tab Click Advanced Wireless tab from menu and select RADIO 1 to open the page below. Long Range Parameters Setup Advanced wireless page let you setup outdoor long distant connection parameters. Long Range Parameters: Check to enable parameters. Beacon Interval: (default is 100 ms) Define the time interval (in millisecond) the beacon to broadcast.
Page 48
Noise Immunity: Check to enable. When enabled, it automatically adjusts the signal/noise level for best performance. In low noise environment it is recommended to turn off this function. Signal Strength Indicator (RSSI): The default values are LED1-Red (10), LED2-Yellow (20), LED3-Green (40) Each LEDs when turn on indicates the RSSI signal strength has hit over the value.
Advanced Network Tab Click Advanced Network tab from menu to open the page below. *Note: This tab will not open when the device is in Bridge node. To open page, first enable Router mode in Basic Network (We recommend to use first Station Mode, set an Static IP on WAN interface, and set a Remote Management Port, before going directly to Router mode.
Spanning Tree Setup Spanning Tree Protocol: Default is disabled. Check on box to enable. Root Priority: Default value is 32768. Smaller value has higher priority. Root Hello Time: Default time is 2 seconds. Root Forward Delay: Default is 15 seconds Root Maximum Age: Default is 20 seconds Changing to lower time can caused high overheads to the network.
Page 51
Adding an entry from Custom Server Entry from Custom Server box lets you enter the other port number service for an application and new applications. Custom Server also lets you enter a different public and private port service Server Type: Enter a brief name for the application. This info helps you track the application for that port number you set.
Firewall Setup Firewall Setup: Default is disabled. Check on box to enable. For configuration refer to Appendix section. Comment: enter a brief name for the service. Policy: select Accept or Deny for the apply rule IP Type: select ICMP, TCP, and UDP packet type to check Source IP/Mask: enter the source IP address and Netmask Is the source IP of the packet (specified within the packet header), usually it is the IP of the host system which sends the packets;...
Multicast Routing Setup Disabling this option disallows video streaming over the Internet. Click Apply to complete setup. Remote Management Setup To enable Remote Management, set Remote Http Port to an unused port number. It is recommended that you avoid using port number 80 as it is blocked by some ISPs. To disable Remote Management, set Remote Http Port to 0 In Router mode with Access Point Mode, Remote Management is disabled and the Ethernet port becomes a WAN port.
Services Tab Click Services tab from menu to open the page below. Services section provides varieties of useful and enhanced functions to help assist device operations. Page 54 of 83...
Ping Watchdog Enable Ping Watchdog: Default is disabled. Check on box to enable. IP Address To Ping: Target IP address do ping test monitor. Ping Interval: Default is 5 seconds (minimum). This is Ping test duration. Startup Delay: Default is 60 seconds (minimum). One time delay after device startup.
SNMP Setup Enable SNMP: Default is disabled. Check on box to enable. Read Only Password: Password to query device. Engine ID: Default is 800007e5BD00002704D000007c Enable SNMP Trap: Default is disabled. Check on box to enable. Trap Destination IP: Enter the IP to send the info when trap is triggered. Community: Enter the SNMP community string.
Telnet Access Setup Enable Telnet Server: Default is enabled. Remove check on box to disable. Server Port: Default is 23. Enter new preferred port number. SSH Access Setup Enable SSH Server: Default is disabled. Check on box to enable. Server Port: Default is 22.
System Tab The System Page contains Administrative options. This page enables administrator to customize, reboot the device, set it to factory defaults, upload a new firmware, backup or update the configuration and configure administrator’s credentials. Firmware Upgrade Use this section to find out current software version and update the device with the new firmware. The device firmware update is compatible with all configuration settings.
Host Name Host Name is the system wide device identifier. It is reported by SNMP Agent to authorized management stations. Host Name will be represented in popular Router Operating Systems registration screens and discovery tools. Host Name: specifies the system identity. Change button saves the Host Name if activated.
Configuration Management Backup Configuration: click Download button to export the current configuration to a file. Upload Configuration: click Browse button to navigate to and select the new configuration file or specify the full path to the configuration file location. Activating the Upload button will transfer new configuration file to the system. New configuration will be effective after the Apply button is activated and system reboot cycle is completed.
Status Page The Status Page displays a summary of link status information, current values of basic configuration settings (depending on operating mode), network settings and traffic statistics of all the interfaces. Status Reporting Main Uptime: displays device up time since boot up. The time is expressed in days, hours, minutes and seconds.
LAN Setting LAN MAC: displays the MAC address of the device LAN (Ethernet) interface. LAN Mode: displays the mode used, either static or DHCP client. LAN IP Address: displays the current IP address of the LAN (Ethernet) interface. LAN Gateway IP Address: displays the IP address of the gateway used in LAN. LAN Pri.
Clients Connection Status in AP Status Info All clients connected to AP can be view from AP Status page. Below is an example of a client connection status info. Click to refresh client connection statistics and status page. Signals strength at the left and right port of radio card can be view with more accurately while adjusting the antenna to get a more balanced reception.
Station Connection Info Status Info Click to refresh client connection statistics and status page. WLAN Connected Status: MAC Address: displays the MAC address of the current active WLAN card. Signal Strength: displays the received wireless signal level of opposite connected device. TX Rate and RX Rate: displays the current 802.11 data transmission (TX) and data reception (RX) rate while operating in Station mode.
Page 65
Rx Invalid Crypt value represents the number of transmitted and received packets which were encrypted with the wrong encryption key and failed the decryption routines. It can be used to detect invalid wireless security settings and encryption break attempts. Rx Invalid Frag value represents the number of packets missed during transmission and reception. These packets were dropped due to re-assembling failure as some link layer fragments of the packet were lost.
More Status In More Status option contains some useful tools and additional status pages. Ping Utility – a ping tool to test the connectivity between devices. ARP Table display a list of MAC addresses of the connected devices Bridge Table display a list the devices connect to the bridge interface DHCP Active Lease Table display a list of IPs addresses leased to all computers.
VLAN Tab This setup lets you create virtual local network connection through the device Ethernet only and over wireless connections. By default VLAN mode is disabled and checked on No Vlan VLAN Switch To setup VLAN network check on Vlan Switch To add a Tag VLAN ID for Ethernet port, type in the ID number select Tag and click Add To add a Tag VLAN ID for MAIN wireless SSID, type in the ID number select Tag and click Add To add a Tag VLAN ID for VAP1 wireless SSID, type in the ID number select Tag and click Add...
VLAN Management Vlan management lets you control and limit only clients connection of same tag vlan ID group be open AP device web page. * Note:- Vlan Management works only in tag vlan pass-through mode. i.e. Vlan Switch is disabled. When Vlan Switch is enabled or configured, Vlan Management function stops operation.
Appendix I - Network This section provides more detailed explanation on the network operation modes in general. The Network Page allows the administrator to setup bridge or routing functionality. Device can operate in bridge or router mode. The IP configuration as described below is required for device management purposes.
Page 70
Bridge IP Address: The device can be set for static IP or can be set to obtain an IP address from the DHCP server it is connected to. One of the IP assignment modes must be selected: DHCP: choose this option to assign the dynamic IP address, Gateway and DNS address by the local DHCP server.
Page 71
Spanning Tree Protocol: Multiple interconnected bridges create larger networks using the IEEE 802.1d Spanning Tree Protocol (STP), which is used for finding the shortest path within network and to eliminate loops from the topology. If the STP is turned on, the Bridge device will communicate with other network devices by sending and receiving Bridge Protocol Data Units (BPDU).
Appendix II – Wireless with Router Mode This section provides more details on wireless with router function. The role of the LAN and WLAN interface will change accordingly to the Wireless Mode while the device is operating in Router mode: Wireless interface and all the wireless clients connected are considered as the internal •...
Page 73
Gateway IP: This is the IP address of the host router which resides on the external network and provides the point of connection to the next hop towards the internet. This can be a DSL modem, Cable modem, or a WISP gateway router. The device will direct all the packets to the gateway if the destination host is not within the local network.
Page 74
Port Forwarding Settings Port Forwarding: Port forwarding allows specific ports of the hosts residing in the internal network to be forwarded to the external network. This is useful for number of applications such as FTP servers, gaming, etc. where different host systems need to be seen using a single common IP address/port.
Page 75
Bridge mode Firewall Configuration Settings Firewall functionality on any router interface can be enabled using the "Enable Firewall" option. Router Firewall rules can be configured, enabled or disabled while using Firewall configuration window which is opened with the "Configure" button. Firewall entries can be specified by using the following criteria: Interface the interface (WLAN, LAN or PPP) where filtering of the incoming/passing-through packets is processed;...
Page 76
Enable DMZ: The Demilitarized zone (DMZ) can be enabled and used as a place where services can be placed such as Web Servers, Proxy Servers, and E-mail Servers such that these services can still serve the local network and are at the same time isolated from it for additional security.
Appendix III- Advanced Settings This section provides more explanation on advanced setting for routing and wireless settings. The Advanced options page allows you to manage advanced settings that influence on the device performance and behavior. The advanced wireless settings are dedicated for more technically advanced users who have a sufficient knowledge about wireless LAN technology.
Page 78
Fragmentation Threshold: specifies the maximum size for a packet before data is fragmented into multiple packets. The range is 256-2346 bytes, or word “off”. Setting the Fragmentation Threshold too low may result in poor network performance. The use of fragmentation can increase the reliability of frame transmissions. Because of sending smaller frames, collisions are much less likely to occur.
Page 79
Signal Strength LED Settings LED Thresholds Configuration The LED's for signal strength on the device can be made to light on when received signal levels reach the values defined in the following fields. This allows a technician to easily deploy a CPE without logging into the unit (i.e.
Appendix IV- Services This section provides more details on the system management services. Ping WatchDog The ping watchdog sets the device to continuously ping a user defined IP address (it can be the internet gateway for example). If it is unable to ping under the user defined constraints, the device will automatically reboot.
Page 81
NTP Client, Web, Telnet, SSH Server NTP Client: The Network Time Protocol (NTP) is a protocol for synchronizing the clocks of computer systems over packet-switched, variable-latency data networks. It can be used to set the device system time. System Time is reported next to the every System Log entry while registering system events if Log option is enabled.
Need help?
Do you have a question about the Airnet and is the answer not in the manual?
Questions and answers