IEEE a/ac/n/b/g Enterprise Access Points ECW5320 ECWO5320. Management Guide. Software Release v

(1)

M a n a g e m e n t G u i d e

ECW5320

ECWO5320

(2)

ECW5320 Indoor Enterprise Access Point

IEEE 802.11a/ac/n/b/g Dual Band Access Point with one 1000BASE-T (RJ-45 PoE-Input) Port, and two 100BASE-TX (RJ-45) Ports

ECWO5320 Outdoor Enterprise Access Point

IEEE 802.11a/ac/n/b/g Dual Band Access Point with one 1000BASE-T (RJ-45 PoE-Input) Port, and two 100BASE-TX (RJ-45) Ports

(3)

This guide includes detailed information on the access point (AP) software, including how to operate and use the management functions of the AP. To deploy this AP effectively and ensure trouble-free operation, you should first read the relevant sections in this guide so that you are familiar with all of its software features.

Who Should Read

This Guide?

This guide is for network administrators who are responsible for operating and maintaining network equipment. The guide assumes a basic working knowledge of LANs (Local Area Networks), the Internet Protocol (IP), and Simple Network

Management Protocol (SNMP).

How This Guide

is Organized

The organization of this guide is based on the AP’s main management interfaces. The web management interface is described in separate sections that follow the web menu. An introduction and initial configuration information is also provided. The guide includes these sections:

◆ Section I “Getting Started” — Includes an introduction to AP management and initial configuration settings.

◆ Section II “Web Configuration” — Includes all management options available through the web interface.

◆ Section III “Appendices” — Includes information on troubleshooting AP management access.

Documentation

This guide focuses on AP software configuration, it does not cover hardware installation of the AP. For specific information on how to install the AP, see the following guide:

Quick Start Guide

For all safety information and regulatory statements, see the following documents:

Quick Start Guide

(4)

Conventions

The following conventions are used throughout this guide to show information:

Note: Emphasizes important information or calls your attention to related features or instructions.

Caution: Alerts you to a potential hazard that could cause loss of data, or damage the system or equipment.

Warning: Alerts you to a potential hazard that could cause personal injury.

Revision History

This section summarizes the changes in each revision of this guide.

January 2016 Revision

(5)

How to Use This Guide

3 Contents 5

Figures 9

Tables 11

Section I

Getting Started 13

1 Introduction 15

Configuration Options 15

Network Connections 16

Connecting to the Web Interface 16

Setup Wizard 17

Main Menu 27 Status 28

Common Web Page Buttons 29

Section II

Web Configuration 31

(6)

Operation Mode 39

LAN Setting 40

DHCP Setting 41

4 Internet Settings

43

Cable/Dynamic IP (DHCP) 43

Static (Fixed IP) 44

PPPoE (ADSL) 45 PPTP 46 L2TP 47

5 Wireless Settings

49

Basic Settings 49 Advanced Settings 52

6 Static Routes

57 7 Firewall 59

Port Forwarding 59 DMZ Configuration 60 Access Control 61 Advanced Security 62

8 System Settings

63

Language Selection 64 System Log 64 NTP 65 Password 65 Maintenance 66

Rebooting the Access Point 66

Resetting the Access Point 66

Backing Up Configuration Settings 67

Restoring Configuration Settings 67

(7)

Section III

Appendices 69

A Troubleshooting 71

Problems Accessing the Management Interface 71

Using System Logs 71

(8)

(9)

Figure 1: Login Page 17

Figure 2: Select Your Country 17

Figure 3: Option Mode 18

Figure 4: Route to Internet 18

Figure 5: Bridge to Internet 19

Figure 6: Client Route 19

Figure 7: Cable / Dynamic IP (DHCP) 20

Figure 8: Static (Fixed IP) 20

Figure 9: PPPoE (ADSL) 21

Figure 10: PPTP 22

Figure 11: L2TP 22

Figure 12: Setting WIFI 2.4G 23

Figure 13: Setting WIFI 5G 26

Figure 14: Scanning WIFI 5G Networks 26

Figure 15: Status Overview 28

Figure 16: Status Clients 28

Figure 17: Status Statistics 29

Figure 18: Set Configuration Changes 29

Figure 19: System Information 33

Figure 20: Memory Status 34

Figure 21: WAN Information 34

Figure 22: LAN Information 35

Figure 23: Wireless Overview 36

Figure 24: Active Clients 37

Figure 25: Statistics 38

Figure 26: LAN Setting 40

Figure 27: DHCP Setting 41

Figure 28: DHCP Setting 41

(10)

Figure 30: Static (Fixed IP) 44

Figure 31: PPPoE (ADSL) 45

Figure 32: PPTP 46

Figure 33: L2TP 47

Figure 34: Basic Radio Configuration Status 50

Figure 35: Basic Radio Configuration Dialogue Box 51

Figure 36: Advanced Radio Configuration Dialogue Box 52

Figure 37: Static Route List 57

Figure 38: Route Setting 57

Figure 39: Port Forwarding List 59

Figure 40: Port Forwarding Configuration 60

Figure 41: DMZ Configuration 61

Figure 42: Access Control List 61

Figure 43: Access Control Configuration 61

Figure 44: Access Control Time Selection 62

Figure 45: Advanced Security 62

Figure 46: Language 64

Figure 47: System Log 64

Figure 48: NTP 65

Figure 49: Password 65

Figure 50: Maintenance 66

Figure 51: Reboot your device 66

Figure 52: Resetting to Defaults 66

Figure 53: Restoring Configuration Settings 67

(11)

Table 1: Radio Channels 53

Table 2: Tx Power 54

(12)

(13)

Getting Started

This section provides an overview of the access point, and introduces some basic concepts about wireless networking. It also describes the basic settings required to access the management interface.

This section includes these chapters:

(14)

(15)

The access point (AP) runs software that includes a network management agent. The agent offers a variety of management options, including SNMP and a web-based interface.

Configuration Options

The access point’s web agent allows you to configure AP parameters, monitor wireless connections, and display statistics using a standard web browser such as Internet Explorer 9.x, Mozilla Firefox 35, and Google Chrome 39, or later versions. The AP’s web management interface can be accessed from any computer attached to the network.

The AP’s management agent also supports SNMP (Simple Network Management Protocol). This SNMP agent permits the AP to be managed from any computer in the network using network management software.

The AP’s web interface and SNMP agent allow you to perform management functions such as:

◆ Set management access user names and passwords

◆ Configure IP settings

◆ Configure 2.4 GHz and 5 GHz radio settings

◆ Control access through wireless security settings

◆ Filter packets using Access Control Lists (ACLs)

◆ Download system firmware

◆ Download or upload configuration files

(16)

Network Connections

Prior to accessing the AP’s management agent through a network connection, you must first configure it with a valid IP address, subnet mask, and default gateway using the web interface or DHCP protocol.

The AP has a static default management address of 192.168.1.1 and a subnet mask of 255.255.255.0. If the AP’s default IP address is not compatible with your network or a DHCP server is not available, the AP’s IP address must be configured manually through the web interface.

First connect to the AP’s LAN 1 or LAN 2 port and log in to the web interface, as described in “Connecting to the Web Interface” on page 16. Follow the steps described in the “Setup Wizard” on page 17 to configure the basic settings. Then configure the AP with an IP address that is compatible with your network as described under “LAN Setting” on page 40.

Once the AP’s IP settings are configured for your network, you can access the AP’s management agent from anywhere within the attached network. The AP can be managed by any computer using a web browser, or from a network computer using SNMP network management software.

Connecting to the Web Interface

The AP offers a user-friendly web-based management interface for the

configuration of all the unit’s features. Any PC directly attached to the unit can access the management interface using a web browser, such as Internet Explorer 9.x, Mozilla Firefox 35 or later, and Google Chrome 39, or later versions.

You may want to make initial configuration changes by connecting a PC directly to one of the AP’s LAN ports. The AP has a default management IP address of

192.168.1.1 and a subnet mask of 255.255.255.0. You must set your PC IP address to be on the same subnet as the AP (that is, the PC and AP addresses must both start with192.168.1.x).

To access the AP’s web management interface, follow these steps:

1.

Use your web browser to connect to the management interface using the default IP address of 192.168.1.1.

(17)

Note: It is strongly recommended to change the default password the first time you access the web interface. For information on changing the user password, see “Password” on page 65.

Figure 1: Login Page

Setup Wizard

The Setup Wizard is designed to help you configure the basic settings required to get the AP up and running.

Step 1

Select Your Country – Select the access point’s country of operation from the

drop-down menu. You must set the AP’s country code to be sure that the radios operate according to permitted local regulations. That is, setting the country code restricts operation of the AP to the radio channels and transmit power levels permitted for wireless networks in the specified country.

Figure 2: Select Your Country

Caution: You must set the country code to the country of operation. Setting the country code ensures that the radios operate within the local regulations specified for wireless networks.

(18)

Step 2

Select Option Mode — Click Next, and select an a networking mode for an

AP route, AP bridge, or client route.

Figure 3: Option Mode

◆ AP Route — In this mode, the AP should be connected to Internet via an ADSL/

Cable Modem. Wired are wireless ports (ETH0, ETH1, WLAN0 and WLAN 1 are members of the LAN. NAT is enabled and PCs attached to the LAN ports share the same IP to ISP connection through the WAN port. In the following figure, Ethernet Port 0, Ethernet Port1, Wireless LAN 0 (5 GHz Radio), and Wireless LAN 1 (2.4 GHz Radio) are all included in the LAN. Traffic from these interfaces is routed across the access point through WAN Port 0 to the Internet. (This is also called route to Internet.) The connection type can be set up in the WAN page using PPPOE, DHCP client, PPTP client, L2TP client, or static IP.

(19)

◆ AP Bridge — Configures an interface as attached to the WAN (i.e., the Internet).

In the following figure, Ethernet Port 0 and Ethernet Port 1 are both attached to the WAN. The wireless interfaces are directly bridged to the wired Ethernet. (This is also called bridge to Internet.) All WAN-related functions are disabled, NAT is disabled, the firewall is disabled, and DHCP is disabled.

Figure 5: Bridge to Internet

◆ Client Route — All Ethernet ports are bridged together and the AP acts as a

wireless client connecting to the ISP’s access point. NAT is enabled and PCs attached to the Ethernet ports share the same IP to ISP connection through the wireless LAN.

Only one of the radios (2.4 GHz or 5 GHz) can connect to the ISP’s access point. The connection type can be set up in the WAN page using PPPOE, DHCP client, PPTP client, L2TP client, or static IP.

(20)

Step 3

Select WAN Configuration — Click Next, and select the method that the AP uses

to connect to an ISP through the WAN port. The AP supports five Internet connection methods.

◆ Cable / Dynamic IP (DHCP) — In many cases, setting the connection type to

dynamic is enough to complete the connection to your ISP.

Figure 7: Cable / Dynamic IP (DHCP)

This page includes the following items:

MTU – Sets the size of the maximum transmission unit (MTU) for IP packets sent

on an interface.

Host Name – Some dynamic connection types may require a host name. Enter

the host name in the space provided if you were assigned one by your ISP.

◆ Static (Fixed IP) — The Static IP address mode sets the AP to connect to the

Internet with a fixed IP address. If your ISP uses static IP addressing, you need an IP address, subnet mask, and ISP gateway address. Enter your information in the provided spaces.

(21)

on an interface.

IP Address – Specifies an IP address for the AP. Valid IP addresses consist of four

decimal numbers, 0 to 255, separated by periods.

Subnet Mask – Indicates the local subnet mask.

Default Gateway – The IP address of the default gateway, which is used if the

requested destination address is not on the local subnet.

If you have management stations, DNS, RADIUS, or other network servers located on another subnet, type the IP address of the default gateway router in the text field provided.

Primary/Secondary DNS Server – The IP address of the Domain Name Servers

on the network. A DNS maps numerical IP addresses to domain names and can be used to identify network hosts by familiar names instead of IP addresses.

◆ PPPoE (ADSL) — The Point-to-Point Protocol over Ethernet (PPPoE) is a

common WAN protocol that provides a secure “tunnel” connection between the service provider and the local network.

Figure 9: PPPoE (ADSL)

on an interface.

User Name – The user name specified by the service provider. (Range: 1-32

characters)

Password – The password specified by the service provider. (Range: 1-32

characters)

Service Name – The service name assigned for the PPPoE connection. The

(22)

◆ PPTP — The Point-to-Point Tunneling Protocol (PPTP) is a common WAN

protocol used for Virtual Private Networks (VPNs) that provides a secure “tunnel” connection between the service provider and the local network.

Figure 10: PPTP

on an interface.

characters)

VPN Server – The PPTP server’s IPv4 address assigned by your ISP.

◆ L2TP — The Layer 2 Tunneling Protocol (L2TP) is a common WAN protocol used

for Virtual Private Networks (VPNs) that provides a secure “tunnel” connection between the service provider and the local network.

Figure 11: L2TP

(23)

characters)

L2TP Server – the L2TP server’s IPv4 address assigned by your ISP.

Step 4

Setting WIFI 2.4G — Click Next, and set the SSID and encryption method for the

wireless 2.4G channel.

Figure 12: Setting WIFI 2.4G

SSID Choice – The name of the basic service set provided by a Virtual Access Point

(VAP) interface. Clients who want to connect to the network through the access point must set their SSID to the same as that of the AP’s VAP interface. Note that each radio supports 8 virtual access point (VAP) interfaces based on the SSIDs, referred to as VAP 0 ~ VAP 7, and are named Wireless2 - Wireless2.7 by default.

Encryption Settings – The wireless security method used for this VAP, including

association mode, encryption, and authentication. (Default: No Encryption) The following security options are supported:

◆ No Encryption – The VAP broadcasts a beacon signal including the configured

SSID. Wireless clients with an SSID setting of “any” can read the SSID from the beacon and automatically set their SSID to allow immediate connection.

◆ WEP Open System – The VAP broadcasts a beacon signal including the

configured SSID. Wireless clients with an SSID setting of “any” can read the SSID from the beacon and automatically set their SSID to allow immediate

connection.

■ _{WEP Key – WEP is used to encrypt data transmitted between wireless}

clients and the VAP. WEP uses static shared keys (fixed-length hexadecimal or alphanumeric strings) that are manually distributed to all clients that want to use the network.

(24)

security. For more robust wireless security, the access point provides Wi-Fi Protected Access (WPA) and WPA2 for improved data encryption and user authentication.

Be sure that the WEP shared keys are the same for each client in the wireless network. All clients share the same keys, which are used for data

encryption.

For 64-bit WEP, string length must be 5 ASCII characters (letters and numbers) or 10 hexadecimal digits. For 128-bit WEP, string length must be 13 ASCII characters (letters and numbers) or 26 hexadecimal digits.

◆ WEP Shared Key – The VAP broadcasts a beacon signal including the

configured SSID. Wireless clients with an SSID setting of “any” can read the SSID from the beacon and automatically set their SSID to allow immediate

connection if the WEP keys set by the client matches those set on the AP. When using this encryption option, the WEP keys are used both to authenticate the client and to encrypt the data transmitted.

■ _{WEP Key – WEP is used to authenticate wireless clients and encrypt data}

transmitted between clients and the VAP. WEP uses static shared keys (fixed-length hexadecimal or alphanumeric strings) that are manually distributed to all clients that want to use the network.

Be sure that the WEP shared keys are the same for each client in the wireless network. All clients share the same keys, which are used for authentication and data encryption.

For 64-bit WEP, string length must be 5 ASCII characters (letters and numbers) or 10 hexadecimal digits. For 128-bit WEP, string length must be 13 ASCII characters (letters and numbers) or 26 hexadecimal digits.

◆ WPA-PSK – For enterprise deployment, WPA requires a RADIUS authentication

server to be configured on the wired network. However, for small office

networks that may not have the resources to configure and maintain a RADIUS server, WPA provides a simple operating mode that uses just a pre-shared password for network access. The Pre-Shared Key mode uses a common password for user authentication that is manually entered on the access point and all wireless clients. The PSK mode uses the same TKIP packet encryption and key management as WPA in the enterprise, providing a robust and manageable alternative for small networks.

■ _{Cipher – Data encryption uses one of the following methods:}

■ _{Auto – The encryption method used by the client is discovered by the}

access point, The encryption methods that may be discovered using this option include AES/TKIP, AES, or TKP. (This is the default setting.)

■ _{AES (CCMP) – This method is used as the unicst encryption cipher.}

AES-CCMP is the standard encryption cipher required for WPA2.

(25)

■ _{AES/TKIP Mixed – This option of WPA2 with “TKIP or AES” allows you}

to run a mixed system: Those devices that can do WPA2 with AES will use that system, less advanced devices (such as PDA's) that can only do WPA will do WPA with TKIP

■ _{Key – WPA is used to encrypt data transmitted between wireless clients and}

the VAP. WPA uses static shared keys (fixed-length hexadecimal or

alphanumeric strings) that are manually distributed to all clients that want to use the network.

String length must be 8 to 63 ASCII characters (letters and numbers). No special characters are allowed.

◆ WPA2-PSK – Clients using WPA2 with a Pre-shared Key are accepted for

authentication.

WPA was introduced as an interim solution for the vulnerability of WEP pending the ratification of the IEEE 802.11i wireless security standard. In effect, the WPA security features are a subset of the 802.11i standard. WPA2 includes the now ratified 802.11i standard, but also offers backward compatibility with WPA. Therefore, WPA2 includes the same 802.1X and PSK modes of operation and support for TKIP encryption.

Refer to WPA-PSK for a description of encryption methods and the key.

◆ WPA-PSK / WPA2-PSK Mixed Mode – The TKIP/AES type is the only encryption

available for mixed WPA/WPA2 security. In mixed mode, the unicast encryption (TKIP or AES) is negotiated for each client as they associate with the network.

◆ WPA-EPA – WPA employs a combination of several technologies to provide an

enhanced security solution for 802.11 wireless networks. A RADIUS server is used for authentication, and can also be used for accounting.

Refer to WPA-PSK for a description of encryption methods.

RADIUS Settings

A RADIUS server must be specified for the access point to implement IEEE 802.1X network access control and Wi-Fi Protected Access (WPA) wireless security.

In addition, you can configure a RADIUS Accounting server to receive user-session accounting information from the access point. RADIUS Accounting can be used to provide valuable information on user activity in the network. This guide assumes that you have already configured RADIUS server(s) to support the access point. Configuration of RADIUS server software is beyond the scope of this guide, refer to the documentation provided with the RADIUS server software.

■ _{Radius Authentication Server – Specifies the IP address or host name of}

(26)

■ _{Radius Authentication Port – The UDP port number used by the RADIUS}

server for authentication messages. (Range: 1024-65535; Default: 1812)

■ _{Radius Authentication Secret — A shared text string used to encrypt}

messages be sent tween the access point and the RADIUS server. Be sure that the same text string is specified on the RADIUS authentication server. Do not use blank spaces in the string. (Maximum length: 255 characters)

◆ WPA2-EAP —WPA was introduced as an interim solution for the vulnerability

of WEP pending the ratification of the IEEE 802.11i wireless security standard. In effect, the WPA security features are a subset of the 802.11i standard. WPA2 includes the now ratified 802.11i standard, but also offers backward

compatibility with WPA. Therefore, WPA2 includes the same 802.1X and PSK modes of operation and support for TKIP encryption.

Refer to WPA-PSK for a description of encryption methods.

Refer to WPA-EAP for a information on configuring the RADIUS server.

Step 6

Setting WIFI 5G — Click Next, and set the SSID and encryption method for the

wireless 5G channel.

Figure 13: Setting WIFI 5G

Refer to Setting WIFI 2.4G for a description of the configuration options.

In addition to the configuration options for WIFI 2.4G, the Scan button can be used to display a listing of detected 5G networks as shown in the following example.

(27)

Main Menu

The web interface Main Menu provides access to all of the configuration settings available for the AP.

To configure settings, click the relevant Main Menu item. Each Main Menu item is summarized below with links to the relevant section in this guide where the configuration parameters are described in detail:

◆ Status — The status page shows basic settings for the AP, including a

description of the system, memory usage, Internet status, local network settings, wireless radio settings, connected clients, and traffic graphs. See “Status Information” on page 33.

◆ Network — Configures Internet, Ethernet, LAN, and Hotspot settings. See

“Network Settings” on page 39.

◆ Internet — Configures the protocol settings for the WAN port. See “Internet Settings” on page 43

◆ WIFI — Configures 5 GHz Radio, 2.4 GHz Radio, and VLAN settings. See

“Wireless Settings” on page 49.

◆ Routes — Configures static routes. See “Static Routes” on page 57.

◆ Firewall — Configures a firewall that controls the incoming and outgoing

network traffic based on an applied rule set. See “Firewall” on page 59.

◆ System — Configures System (designation and location), Maintenance (such as

(28)

Status

After logging in to the web interface, the status page displays. This page shows basic settings for the AP, including Internet status, local network settings, wireless radio status, client connections, and traffic graphs.

Figure 15: Status Overview

(29)

Figure 17: Status Statistics

Common Web Page

Buttons

The list below describes common buttons found on most of the web management pages:

◆ Save – Applies the new parameters and saves them to temporary RAM

memory. Also displays a message at the top of the screen to inform you that the changes have not yet been saved to Flash memory. The running configuration will not be saved upon a reboot unless you click the “Apply” button.

Figure 18: Set Configuration Changes

◆ Apply – Saves the current configuration so that it is retained after a restart.

◆ Revert – Cancels the newly entered settings and restores the originals.

◆ Welcome > Logout – Open the Welcome list and click Logout to end the web

(30)

(31)

Web Configuration

This section provides details on configuring the access point using the web browser interface.

This section includes these chapters:

◆ “Status Information” on page 33

◆ “Network Settings” on page 39

◆ “Wireless Settings” on page 49

(32)

(33)

The Status page displays information on the current system configuration, including Internet status, local network settings, wireless radio status, and traffic graphs.

Status Information includes the following sections:

◆ “System Information” on page 33

◆ “Memory Status” on page 34

◆ “WAN Information” on page 34

◆ “LAN Information” on page 35

◆ “Wireless Overview” on page 36

◆ “Active Clients” on page 37

◆ “Statistics” on page 38

System Information

The System Information section shows descriptive information about the AP.

Figure 19: System Information

The following items are displayed in this section:

◆ Model Name — The model number of the unit.

◆ Uptime — Length of time the management agent has been up.

◆ S/N — The serial number of the physical access point.

(34)

Memory Status

The Memory Status section shows information about memory usage.

Figure 20: Memory Status

◆ Total — The total amount of memory space, and the percentage in use.

◆ Free — The amount of free memory.

◆ Cached — The amount of cached memory in use.

◆ Buffered — The amount of buffered memory in use.

WAN Information

The WAN Information section shows information about the Internet connection.

Figure 21: WAN Information

◆ Connection — Shows if the WAN port is connected.

◆ Protocol — Shows the protocol used for IP address assignment.

(35)

◆ Mask — Network mask for IP subnet. This mask identifies the host address bits

used for routing to specific subnets.

◆ Gateway — IP address of the gateway router used to pass traffic between this

device and other network segments.

◆ MAC — MAC address assigned to this AP interface.

◆ DNS — The IP address of the Domain Name Servers on the network. A DNS

maps numerical IP addresses to domain names and can be used to identify network hosts by familiar names instead of the IP addresses.

LAN Information

The LAN Information section shows information about the local network connection.

Figure 22: LAN Information

◆ Protocol — Shows the protocol used for IP address assignment.

◆ IP — IP address of the Internet connection.

◆ Mask — Network mask for IP subnet. This mask identifies the host address bits

(36)

Wireless Overview

The Wireless Overview section shows information about the radio settings.

Figure 23: Wireless Overview

◆ Radio # — Indicates the 5 GHz (Radio 0) or 2.4 GHz (Radio 1) wireless interface.

◆ SSID — Service set identifier. Clients who want to connect to the wireless

network through an access point must set their SSIDs to the same as that of the access point.

◆ Mode — Indicates Master (Access Point) or Client.

◆ Channel — The radio channel the access point uses to communicate with

wireless clients. The available channels depend on the 802.11 Mode1_{, Channel} Bandwidth, and Country Code settings2_.

◆ Encryption — The encryption method configured on this interface.

(37)

Active Clients

The Active Clients section shows information about associated clients.

Figure 24: Active Clients

◆ Host Name — Client name.

◆ IP Address — The IP address assigned to the wireless client.

◆ MAC Address — The MAC address of the wireless client.

(38)

Statistics

The Statistics section shows the data rate for the Ethernet ports and wireless interfaces.

(39)

This chapter describes operation mode, the associated LAN settings, and the DHCP client list on the access point. It includes the following sections:

◆ “Operation Mode” on page 39

◆ “LAN Setting” on page 40

◆ “DHCP Setting” on page 41

◆ “DHCP Lease Time – The maximum amount of time a client can use an address assigned by the DHCP server. (Range: 1-168 hours; Default: 12 hours) DHCP Client List” on page 41

Operation Mode

The AP operation modes include AP Route, AP Bridge, and Client Route. These options determine how the wired and wireless clients connect to the Internet, and are described in Step 2 of the Setup Wizard, along with graphic examples. The Operation Mode includes the following options:

◆ AP Route – In this mode, the AP should be connected to Internet via an ADSL/

Cable Modem. Wired are wireless ports (ETH0, ETH1, WLAN0 and WLAN 1) are members of the LAN. NAT is enabled and PCs attached to the LAN ports share the same IP to ISP connection through the WAN port. The connection type can be set up in the WAN page using PPPoE, DHCP client, PPTP client, L2TP client, or static IP.

◆ AP Bridge – Configures an interface as attached to the Internet. Ethernet Port 0

and Ethernet Port 1 are both attached to the WAN. The wireless interfaces are directly bridged to the wired Ethernet. All WAN-related functions are disabled, NAT is disabled, the firewall is disabled, and DHCP is disabled.

◆ Client Route – All Ethernet ports (ETH0 andETH1) are bridged together and the

(40)

LAN Setting

The LAN Setting fields configure the basic Internet settings for the AP.

Figure 26: LAN Setting

The following items are displayed in this menu:

◆ IP Address – Specifies an IP address for the access point. Valid IP addresses

consist of four decimal numbers, 0 to 255, separated by periods. (Default: 192.168.1.1)

◆ Subnet Mask – Indicates the local subnet mask. (Default: 255.255.255.0)

◆ Default Gateway – The IP address of the default gateway, which is used if the

requested destination address is not on the local subnet.

If you have management stations, DNS, RADIUS, or other network servers located on another subnet, enter the IP address of the default gateway router in the text field provided.

◆ Clone MAC Address – Some ISPs limit Internet connections to the MAC

(41)

DHCP Setting

The DHCP Setting fields allow you configure DHCP service on the AP.

Figure 27: DHCP Setting

Configuration options include these items:

◆ Enable – Enables/disables DHCP service on this network. (Default: Enabled)

◆ DHCP Client Start – First address in the address pool. (Range: 1-254;

Default: x.x.x.100)

◆ DHCP Client End – Last address in the address pool. (Range: 1-254;

Default: x.x.x.150)

◆ DHCP Lease Time – The maximum amount of time a client can use an address

assigned by the DHCP server. (Range: 1-168 hours; Default: 12 hours) DHCP Client List

The DHCP Client List shows the host devices which have acquired an IP address from this AP’s DHCP server.

(42)

The following items are displayed in this list:

◆ IP Address – IP address assigned to host.

◆ MAC Address – MAC address of host.

◆ Time Expired – The amount of time (hours) this address has been assigned to a

(43)

This chapter describes the protocol settings for the WAN port. It includes the following sections:

◆ “Cable/Dynamic IP (DHCP)” on page 43

◆ “Static (Fixed IP)” on page 44

◆ “PPPoE (ADSL)” on page 45

◆ “PPTP” on page 46

◆ “L2TP” on page 47

Cable/Dynamic IP (DHCP)

The WAN Settings page for Cable/Dynamic IP (DHCP) is shown below.

Figure 29: Cable/Dynamic IP (DHCP)

The following items are displayed on this page:

Wide Area Network (WAN) Settings

◆ Protocol — Select Cable/Dynamic IP (DHCP).

◆ MTU — Sets the size of the maximum transmission unit (MTU) for packets sent

(44)

◆ Clone MAC Address — Some ISPs limit Internet connections to the MAC

address of one computer. This setting allows you to manually change the MAC address of the router’s WAN interface to match the computer’s MAC address.

DHCP Client

◆ Hostname — The host name associated with this client.

Static (Fixed IP)

The Static IP address mode sets the AP to operate with a fixed IP address to connect to the Internet. The WAN Settings page for Static (Fixed IP) is shown below.

Figure 30: Static (Fixed IP)

◆ Protocol — Select Static (Fixed IP).

on this interface. (Range: 1-1500 bytes; Default 1500 bytes)

(45)

Static IP

◆ IP Address — The IP address assigned to the AP’s WAN port by the ISP. Valid IP

addresses consist of four decimal numbers, 0 to 255, separated by periods. (Default: 192.168.1)

◆ Subnet Mask — The local subnet mask assigned to the AP’s WAN port by your

ISP. You can select standard address masks for class A (255.0.0.0), class B (255.255.0.0), class C (255.255.255.0), or a custom mask.

◆ Default Gateway — The IP address of the ISP’s gateway.

◆ Primary DNS Server — The IP addresses of the primary domain name server.

◆ Secondary DNS Server — The IP addresses of the secondary domain name

server.

PPPoE (ADSL)

The Point-to-Point Protocol over Ethernet (PPPoE) is a WAN protocol used for ADSL services. It provides a secure “tunnel” connection between the service provider and the local network. The WAN Settings page for PPPoE (ADSL) is shown below.

Figure 31: PPPoE (ADSL)

(46)

PPPoE

◆ User Name — The user name specified by the service provider. (Range: 1-32

characters)

◆ Password — The password specified by the service provider. (Range: 1-32

characters)

◆ Service Name — The service name assigned for the PPPoE connection. The

service name is normally optional, but may be required by some service providers. (Range: 1-32 alphanumeric characters)

PPTP

The Point-to-Point Tunneling Protocol (PPTP) is a WAN protocol used for Virtual Private Networks (VPNs) that provides a secure “tunnel” connection between the service provider and the local network. The WAN Settings page for PPTP is shown below.

(47)

◆ Protocol — Select PPTP.

PPTP Settings

◆ User Name — The user name assigned by your ISP.

◆ Password — The password assigned by your ISP.

◆ VPN Server — The PPTP server’s IPv4 address assigned by your ISP.

L2TP

The Layer 2 Tunneling Protocol (L2TP) is a WAN protocol used for Virtual Private Networks (VPNs) that provides a secure “tunnel” connection between the service provider and the local network. The WAN Settings page for L2TP is shown below.

(48)

◆ Protocol — Select L2TP.

L2TP Settings

◆ User Name — The user name assigned by your ISP.

◆ Password — The password assigned by your ISP.

(49)

This chapter describes wireless settings on the access point. It includes the following sections:

◆ “Basic Settings” on page 49

◆ “Advanced Settings” on page 52

Basic Settings

The IEEE 802.11 wireless interfaces include configuration options for radio signal characteristics and wireless security features.

The access point can operate in several radio modes, 802.11a/a+n/AC (5 GHz) or 802.11b+g/b+g+n (2.4 GHz). Supported modes depend on the access point model. Note that the dual-band access points can operate at 2.4 GHz and 5 GHz at the same time. The web interface identifies the radio configuration pages as:

◆ Wlan0 -5G — the 5 GHz 802.11a/n/AC radio interface

◆ Wlan1 -2.4G — the 2.4 GHz 802.11b/g/n radio interface

Each radio supports 8 virtual access point (VAP) interfaces based on the SSIDs, referred to as VAP 0 ~ VAP 7. Each VAP functions as a separate access point, and can be configured with its own Service Set Identification (SSID) and security settings. Traffic to specific VAPs can be segregated based on user groups or application traffic. The clients associate with each VAP in the same way as they would with separate physical access points. The AP supports up to a total of 127 wireless clients across all VAP interfaces per radio.

(50)

Figure 34: Basic Radio Configuration Status

The following items are displayed on this page: WLAN radio status for each VAP.

◆ Enabled — Shows if the wireless service on this VAP is enabled.

◆ SSID — The name of the basic service set used by a VAP interface.

◆ Encryption — Shows the type of encryption used on this interface.

◆ Country — The access point’s country of operation.

(51)

Click on the box for any of the VAPs to open the configuration dialogue box for basic radio settings

Figure 35: Basic Radio Configuration Dialogue Box

◆ Enabled — Enables or disables the wireless service on this interface.

◆ Mode — These options determine how the wired and wireless clients connect

to the Internet, and are described in Step 2 of the Setup Wizard, along with graphic examples. The AP supports the following options:

■ _{AP Route – In this mode, the AP should be connected to the Internet via an}

ADSL/Cable Modem. Wired are wireless ports (ETH0, ETH1, WLAN0 and WLAN 1 are members of the LAN. NAT is enabled and PCs attached to the LAN ports share the same IP to ISP connection through the WAN port. The connection type can be set up in the WAN page using PPPoE, DHCP client, PPTP client, L2TP client, or static IP. (This is the default setting.)

■ _{AP Bridge — Configures the LAN interface (ETH0 and ETH1) as attached to}

the WAN (i.e., the Internet). In the following figure, Ethernet Port 0 and Ethernet Port 1 are both attached to the WAN. The wireless interfaces are directly bridged to the wired Ethernet. (This is also called bridge to Internet.) All WAN-related functions are disabled, NAT is disabled, the firewall is disabled, and DHCP is disabled.

■ _{Client Route — All Ethernet ports are bridged together and the AP acts as}

a wireless client connecting to the ISP’s access point. NAT is enabled and PCs attached to the Ethernet ports share the same IP to ISP connection through the wireless LAN.

(52)

◆ SSID — The name of the basic service set used by a VAP interface. Clients that

want to connect to the network through the access point must set their SSID to the same as that of the access point’s VAP interface. (Default: ACN0.# (where # is 0-7) for 5 GHz, ACN1.# (where # is 0-7) for 2.4 GHz; Range: 1-32 characters)

◆ Hide SSID — Removes the SSID from beacon frames. Also known as network

cloaking, this security measure is less effective than using WPA or WPA2. There are many tools that allow you to “find” the supposedly “hidden” network name. (Default: Off )

◆ Encryption Settings — The encryption options are described under Step 4 in the Introduction. (Default: No Encryption)

Advanced Settings

This section includes configuration settings for the radio operating mode and related parameters.

Figure 36: Advanced Radio Configuration Dialogue Box

◆ Wireless Mode — Defines the radio operation mode.

■ _{Radio 0 (5 GHz Radio) — Default: 802.11 AC+n; Options: 802.11 AC+n,}

802.11 a+n, 802.11 a

■ _{Radio 1 (2.4 GHz Radio) — Default: 802.11g+n; Options: 802.11 b, 802.11 g,}

(53)

◆ Mode (Radio 0) — The access point provides a channel bandwidth of 20 MHz

by default giving an 802.11a connection speed of 54 Mbps and a 802.11n connection speed of up to 144 Mbps. Setting the HT Mode (or channel bandwidth) to 40 MHz (sometimes referred to as Turbo Mode) increases connection speed for 802.11a and 802.11n to 108 Mbps and 300 Mbps

respectively. Setting the VHT Mode (or channel bandwidth) to 80 MHz (referred to as Very High Throughput Mode) increases connection speed for 802.11n+ac to 867 Mbps. (Default: VHT80; Options: HT20, HT40, VHT80)

◆ HT Mode (Radio 1) — The access point provides a channel bandwidth of

20 MHz by default giving an 802.11g connection speed of 54 Mbps and a 802.11n connection speed of up to 144 Mbps, and ensures backward compliance for slower 802.11b devices. Setting the HT Mode (or channel bandwidth) to 40 MHz (sometimes referred to as Turbo Mode) increases connection speed for 802.11g and 802.11n to 108 Mbps and 300 Mbps respectively. (Default: HT40; Options: HT20, HT40)

◆ Channel — The radio channel the access point uses to communicate with

wireless clients. When multiple access points are deployed in the same area, set the channel on neighboring access points at least five channels apart to avoid interference with each other. For example, for 11g/n 20 MHz mode you can deploy up to three access points in the same area using channels 1, 6, 11. Note that wireless clients automatically set the channel to the same as that used by the access point to which it is linked. The available channels are dependent on the 802.11 Mode, Channel Bandwidth, and Country Code settings.

(Default: Radio 0 - Channel 36, Radio 1 - Channel 11)

Table 1: Radio Channels

Radio 0 (5 GHz) Radio 1 (2.4 GHz) Radio Channels*

* Supported channels depend on the 802.11 mode, channel bandwidth, and country code.

Frequency (GHz) Radio Channels Frequency (GHz)

(54)

◆ Tx Power — Adjusts the power of the radio signals transmitted from the access

point. The higher the transmission power, the farther the transmission range. Power selection is not just a trade off between coverage area and maximum supported clients. You also have to ensure that high-power signals do not interfere with the operation of other radio devices in the service area. (Default: 17 dBm for 5 GHz radio, 27 dBm for 2.4 GHz radio)

◆ ACK Timeout — Sets the acknowledgement timeout, which is used primarily

for long-distance connections. This timeout is used to make an adjustment for link distance. It is based on the amount of time, in microseconds, that it should take to transmit a frame to the other end of the link, be processed by the

Table 2: Tx Power

Power Radio 0 (5 GHz) Radio 1 (2.4 GHz)

(55)

receiving device, and have the ACK frame created and returned to the sending device. (Range: 0-255 microseconds; Default: 0 microseconds)

◆ Fragmentation Thresh. — Sets the maximum frame size above which packets

are fragmented. Using a lower threshold reduces the time required to transmit the frame, and therefore reduces the probability that it will be corrupted (at the cost of more data overhead). (Range: 256-2346 bytes; Default: 2346 bytes)

◆ RTS Threshold — Sets the packet size threshold at which a Request to Send

(RTS) signal must be sent to a receiving station prior to the sending station starting communications. The access point sends RTS frames to a receiving station to negotiate the sending of a data frame. After receiving an RTS frame, the station sends a CTS (clear to send) frame to notify the sending station that it can start sending data.

If the RTS threshold is set to 1, the access point always sends RTS signals. If set to 2346, the access point never sends RTS signals. If set to any other value, and the packet size equals or exceeds the RTS threshold, the RTS/CTS (Request to Send / Clear to Send) mechanism will be enabled.

(56)

(57)

This chapter describes how to configure static routes. You can set up static routes to ensure that all traffic for a specific destination network is forwarded to the LAN or WAN interface, for example, through a VPN tunnel. A maximum of 32 rules can be defined.

Figure 37: Static Route List

To enter a static route click on Add. The following configuration menu will be displayed.

Figure 38: Route Setting

Interface – The interface used to route data to the network specified by the

network address. (Options: LAN or WAN)

Target – IP address of the destination network, subnetwork, or host.

Subnet Mask – Network mask for the associated IP subnet. This mask identifies the

(58)

Gateway – IP address of the next hop router used for this route. If this AP is used to

connect your network to the Internet, the gateway IP is the AP's IP address. If you have a router handling your network's Internet connection, enter the IP address of that router instead.

Metric – An administrative distance used to indicate the cost of a route so that the

best route, among potentially multiple routes to the same destination, can be selected.

MTU – The size of the maximum transmission unit (MTU) for IP packets sent on an

(59)

This AP provides a firewall that controls the incoming and outgoing network traffic based on an applied rule set. A firewall establishes a barrier between a trusted, secure internal network and the Internet) which is assumed not to be secure and trusted.

The firewall supports the following functions:

◆ “Port Forwarding” on page 59

◆ “DMZ Configuration” on page 60

◆ “Access Control” on page 61

◆ “Advanced Security” on page 62

Port Forwarding

Port forwarding allows remote computers on the Internet (WAN) to connect to a service within your private local-area network (LAN). Services on the private network are connected to the AP LAN or communicate via the wireless LAN. The AP’s external interface is configured with a public IP address. Computers running services behind the AP, on the other hand, are invisible to hosts on the Internet as they each communicate only with a private IP address.

When configuring port forwarding, the network administrator sets aside one port number on the gateway for the exclusive use of communicating with a service in the private network, located on a specific host. External hosts must know this port number and the address of the gateway to communicate with the network’s internal service. Often, the port numbers of well-known Internet services, such as port number 80 for web services (HTTP), are used in port forwarding, so that common Internet services may be implemented on hosts within private networks.

(60)

To enter a port forwarding rule click on Add. The following configuration menu will be displayed.

Figure 40: Port Forwarding Configuration

◆ Enable — Enable or disable the service configured on this page.

◆ Name — Enter the name of a local network service. A list of common services

and associated ports can be found on various Internet sites, including http:// en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers.

◆ Protocol — Specify whether the protocol used by this service is TCP, UDP, or

either one.

◆ External Port — Enter the public TCP or UDP port number of the service.

◆ LAN IP Address — Enter the IP address of the local computer providing this

service.

◆ Internal Port — Enter the port number on the local computer to which the

request will be sent.

DMZ Configuration

(61)

Figure 41: DMZ Configuration

◆ Enable — Enable or disable the service configured on this page.

◆ IP Address — IP address of local computer which is directly exposed to the

external network; such as the Internet.

Access Control

The Access Control list sets a time range during which specified users (that is, local hosts) can access the Internet.

Figure 42: Access Control List

To configure an entry in the Access Control list, click on Add. The following configuration menu will be displayed.

(62)

◆ IP Address — IP address of host to whom access to the Internet is restricted to

a specified time.

◆ Day — Day of the week to which host can access the Internet. Click on one or

more days during which access is to be provided.

◆ Start Time — The time at which the host can start accessing the Internet.

◆ Stop Time — The time at which access to the Internet is terminated.

When setting the Start Time or Stop Time, use the slider button beneath Hour and Minute as shown in the following figure.

Figure 44: Access Control Time Selection

Advanced Security

The Advanced Security page includes several options for Denial of Service (DoS) protection.

Figure 45: Advanced Security

◆ Enable SYN Flood Attack Filtering — A SYN flood is a denial-of-service attack

in which an attacker sends a succession of SYN requests to the AP in an attempt to consume enough resources to make the system unresponsive to legitimate traffic. (Default: filtering enabled)

◆ Enable Drop Invalid Packets — Drops any invalid packets, such as those not

(63)

This chapter describes maintenance settings on the access point. It includes the following sections:

◆ “Language Selection” on page 64

◆ “System Log” on page 64

◆ “NTP” on page 65

◆ “Password” on page 65

(64)

Language Selection

The Language page is used to select the language used for the web interface.

Figure 46: Language

◆ Language — Specifies English.

System Log

The access point saves event and error messages to a local system log database. The log messages include the date and time, message type, and message details.

(65)

NTP

The NTP page displays the host name of servers to which NTP time requests are issued.

Figure 48: NTP

Password

The Password page sets the password for the system administrator.

Figure 49: Password

◆ New Password — The system administrator's password. (Range: 3-15 ASCII

characters, case sensitive, no special characters; Default: admin123)

(66)

Maintenance

The Maintenance page supports general maintenance tasks including rebooting the device, restoring factory defaults, backing up or restoring configuration settings, and upgrading firmware.

Figure 50: Maintenance

Rebooting the

Access Point

The “Reboot your device” page allows you to reboot the access point.

Figure 51: Reboot your device

Resetting the

Access Point

The “Reset to factory default settings” page allows you to reset the access point to the factory defaults. Note that all user configured information will be lost. You will have to re-enter the default user name and password to re-gain management access to this device.

(67)

Backing Up

Configuration

Settings

The “Download this device’s configuration settings” page allows you to back up the access point’s configuration to a management workstation. In Windows, a GNU Zip (*.tar.gz) file will be stored in the Downloads folder. This is a sample file name: backup-ACN-AP-2014-06-27.tar.gz

Restoring

Configuration

Settings

The “Restore the configuration settings of this device” page allows you to upload configuration settings from a management workstation to the access point. The specified file must be one that was previously backed up from the access point.

Figure 53: Restoring Configuration Settings

Click the Browse button to locate the configuration file, and then click the “Upload archive” button to begin restoring the configuration settings.

Upgrading Firmware

You can upgrade new access point software from a local file on the management workstation. New software may be provided periodically from your distributor. After upgrading new software, you must reboot the access point to implement the new code. Until a reboot occurs, the access point will continue to run the software it was using before the upgrade started. The access point supports dual software images, so if newly loaded software is corrupted, the alternate image will be used on the next reboot. Configuration settings are stored separately from the software, so the current settings will always be used for any new software. However, note that if the current configuration settings are corrupted, the system defaults will be used.

Figure 54: Upgrading Firmware

(68)

(69)

Appendices

This section provides additional information and includes these items:

(70)

(71)

Problems Accessing the Management Interface

Using System Logs

If a fault does occur, refer to the Quick Start Guide to ensure that the problem you encountered is actually caused by the AP. If the problem appears to be caused by the AP, follow these steps:

1.

Repeat the sequence of commands or other actions that lead up to the error.

2.

Make a list of the commands or circumstances that led to the fault. Also make a list of any error messages displayed.

3.

Record all relevant system settings.

4.

Display the log file through the System > System Log menu, and copy the information from the log file.

5.

Contact your distributor’s service engineer, and send a detailed description of the problem, along with all of the information mentioned in the above steps.

Table 3: Troubleshooting Chart

Symptom Action

Cannot connect using Telnet, web browser, or SNMP software

◆ Be sure the AP is powered up.

◆ Check network cabling between the management station and the AP.

◆ Check that you have a valid network connection to the AP and that intermediate switch ports have not been disabled.

◆ Be sure you have configured the AP with a valid IP address, subnet mask and default gateway.

◆ Be sure the management station has an IP address in the same subnet as the AP’s IP.

◆ If you are trying to connect to the AP using a tagged VLAN group, your management station, and the ports connecting intermediate switches in the network, must be configured with the appropriate tag.

◆ If you cannot connect using Telnet/SSH, you may have exceeded the maximum number of concurrent Telnet/SSH sessions permitted. Try connecting again at a later time.

(72)

(73)

A

ACK timeout

54 AES (CCMP)

24 AES/TKIP Mixed

25 AP bridge

39 AP route

39 AP route mode

18 authentication

24 pre-shared key

24

,

25 RADIUS server

24

,

25 WPA

24 WPA2

24

C

channel active

36 restrictions

17 selection

53 client route

39 clone MAC address

40 configuration settings restoring

67 saving

67 country code

36

,

53 selection

17 CTS, clear to send

55

D

demilitarized zone

60 DHCP

16 DHCP client list

41 DHCP setting, LAN

41 DMZ, demilitarized zone

60 DNS

35 DNS server

21 DoS protection

62 downloading software

67

E

encryption

23

F

firewall

59 access control

61 DoS protection

62 port forwarding

59 firmware displaying version

33 upgrading

67 fragmentation threshold

55

G

gateway address

16

,

35

,

40

,

71

H

host name

20

I

IEEE 802.11a/ac/n

49 configuring interface

52 radio channel

52 IEEE 802.11b/g/n

49 configuring interface

52 radio channel

52 IEEE 802.1X

25

,

26 initial configuration

16 introduction

15 IP address

16 configuring

16 DNS server

21

,

35 gateway

21

,

35

,

40 Internet connection

34

,

35 wireless client

37

L

L2TP

22

,

47

language selection, interface

64 log messages

64

M

(74)

N

network settings

39

NTP, network time protocol

65

O

open system

23

P

password default

16 PPPoE

46 pre-shared key

24 setting

65 port forwarding

59 PPPoE

21

,

45 PPTP

22

,

46 pre-shared key

24

R

radio channel active

36 configuring

53 RADIUS

24

,

25

configuring for IEEE 802.1X

25 configuring for WPA

25 rebooting

66

resetting, configuration settings

66 router mode

18 RTS request to send

55 threshold

55

S

shared key

23

,

24

,

25 SNMP

15 software displaying version

33 upgrading

67 SSID

23

,

24

,

36

,

49 static routes

57 status information memory

34 wireless

36 wireless clients

37 status page

28 subnet mask

16

,

40

,

71 system log

64

system software, upgrading

67

(75)

(76)

IEEE a/ac/n/b/g Enterprise Access Points ECW5320 ECWO5320. Management Guide. Software Release v

M a n a g e m e n t G u i d e

ECW5320

ECWO5320

ECW5320 Indoor Enterprise Access Point

ECWO5320 Outdoor Enterprise Access Point

Who Should Read

This Guide?

How This Guide

is Organized

Related

Documentation

Conventions

Revision History

How to Use This Guide

3

Contents 5

Figures 9

Tables 11

Section I

Getting Started 13

1 Introduction 15

Section II

Web Configuration 31

4 Internet Settings

43

5 Wireless Settings

49

6 Static Routes

57

7 Firewall 59

8 System Settings

63

Section III

Appendices 69

A Troubleshooting 71

Getting Started

Configuration Options

Network Connections

Connecting to the Web Interface

1.

Setup Wizard

Step 1

Step 2

Step 3

Step 4

Step 6

Main Menu

Status

Common Web Page

Buttons

Web Configuration

System Information

Memory Status

WAN Information

LAN Information

Wireless Overview

Active Clients

Statistics

Operation Mode

LAN Setting

DHCP Setting

Cable/Dynamic IP (DHCP)

Static (Fixed IP)

PPPoE (ADSL)

PPTP

L2TP

Basic Settings

Advanced Settings

Port Forwarding

DMZ Configuration

Access Control

Advanced Security

Language Selection

System Log

NTP

Password

Maintenance

Rebooting the

Access Point