AirMax DUO Lite - Access Point AIRLIVE - Free user manual and instructions
Find the device manual for free AirMax DUO Lite AIRLIVE in PDF.
| Product Type | Dual Radio Outdoor Access Point / Base Station |
| Model | AirMax DUO Lite |
| Brand | AirLive (OvisLink Corp.) |
| Wireless Standards | 802.11a (5GHz), 802.11b/g (2.4GHz); Supports Super-A, Turbo-A, Super-G |
| Radio Configuration | Dual radio: Radio 1 (11a only) + Radio 2 (11a/b/g dual band) |
| Maximum Output Power | 23dBm (200mW) for 11a; 20dBm for 11g/b |
| Antenna Connectors | 2 x N-Type female (external antennas) |
| Ethernet Ports | 2 x RJ-45 LAN ports (one with PoE input) |
| Power over Ethernet | IEEE 802.3af 48V PoE; includes PoE injector |
| Enclosure Rating | IP65 (dust and water resistant) |
| Mounting | Pole mount and wall mount kit included |
| Dimensions (Approx.) | 200 x 200 x 50 mm |
| Weight (Approx.) | 1.0 kg |
| Operating Modes | 14 modes: Dual AP, Duplex, Dual WDS, Separate Bridge, AP+Client, Client+AP, AP+WDS, WDS+AP, WDS+Gateway, Gateway+WDS, AP+Gateway, Gateway+AP, AP+WISP, WISP+AP |
| Security | WEP, WPA/WPA2-PSK, 802.1x, WPA-Auto, MAC ACL |
| Management Interfaces | HTTP, HTTPS, Telnet, SSH/SSH2, SNMP v1/v2 |
| Advanced Features | Multi-SSID (up to 4), VLAN tagging, WMM QoS, Bandwidth control (Total/Per-User), Site Survey, Signal Survey, ACK timeout adjustment |
| Firmware Upgrade | Via web interface or emergency recovery mode |
| Regulatory Compliance | FCC Part 15 Class B, CE; requires professional installation in US |
| Operating Temperature | Not specified; typical outdoor range -20°C to 50°C (assumed) |
| Spare Parts / Repairability | External antennas (N-type), PoE injector, mounting kit; no user-serviceable internal parts |
| Maintenance and Cleaning | Wipe exterior with dry cloth; ensure antenna connectors are clean and dry |
Frequently Asked Questions - AirMax DUO Lite AIRLIVE
User questions about AirMax DUO Lite AIRLIVE
0 question about this device. Answer the ones you know or ask your own.
Ask a new question about this device
Download the instructions for your Access Point in PDF format for free! Find your manual AirMax DUO Lite - AIRLIVE and take your electronic device back in hand. On this page are published all the documents necessary for the use of your device. AirMax DUO Lite by AIRLIVE.
USER MANUAL AirMax DUO Lite AIRLIVE
Powered by OvisLink Corp.
AirMax DUO Lite
802.11 a/b/g Dual Radio Base Station
User's Manual

Air Live®
Powered by OvisLink Corp.
Copyright & Disclaimer
No part of this publication may be reproduced in any form or by any means, whether electronic, mechanical, photocopying, or recording without the written consent of OvisLink Corp.
OvisLink Corp. has made the best effort to ensure the accuracy of the information in this user's guide. However, we are not liable for the inaccuracies or errors in this guide.
Please use with caution. All information is subject to change without notice
All Trademarks are properties of their respective holders.
Regulatory Information
Federal Communication Commission Interference Statement
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:
- Reorient or relocate the receiving antenna.
- Increase the separation between the equipment and receiver.
- Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
- Consult the dealer or an experienced radio/TV technician for help.
FCC Caution: To assure continued compliance, (example - use only shielded interface cables when connecting to computer or peripheral devices) any changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate this equipment. This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.
For product available in the USA/Canada market, only channel 1\~11 can be operated.
Selection of other channels is not possible.
IMPORTANT NOTE
FCC Radiation Exposure Statement:
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body.
This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.
FCC NOTICE: To comply with FCC part 15 rules in the United States, the system must be professionally installed to ensure compliance with the Part 15 certification. It is the responsibility of the operator and professional installer to ensure that only certified systems are deployed in the United States. The use of the system in any other combination (such as co-located antennas transmitting the same information) is expressly forbidden.

Bluetooth™
© 2012 OvisLink Corporation. All Rights Reserved.
Table of Contents
1. Introduction...... 1
1.1 Overview.... 1
1.2 How to Use This Guide.... 3
1.3 Firmware Upgrade and Tech Support 5
1.4 Feature 6
1.5 Wireless Operation Modes.... 7
1.5.1 Dual AP Mode....8
1.5.2 Duplex Mode 9
1.5.3 Dual WDS Bridge Mode....10
1.5.4 Separate Bridge Mode....11
1.5.5 AP + Client / Client + AP Mode 12
1.5.6 AP + WDS Bridge / WDS Bridge + AP Mode 13
1.5.7 WDS + Gateway / Gateway + WDS Mode....14
1.5.8 AP + Gateway / Gateway + AP Mode 16
1.5.9 AP + WISP / WISP + AP Mode 17
2. Installing the AirMax DUO Lite.... 19
2.1 Before You Start.... 19
2.2 Installing AirMax DUO Lite 19
2.3 Knowing Your AirMax DUO Lite 20
2.4 Hardware Installation 21
2.4.1. Pull out the PCBA of AirMax DUO Lite and connect the Ethernet cable to the PoE Port 22
2.4.2 Connect the Ethernet cable to the PoE Injector....24
2.5 Pole Mount/Wall Mount Installation 25
3. Configuring the AirMax DUO Lite.... 26
3.1 Important Information.... 26
3.2 Prepare Your PC.... 27
3.3 Management Interface.... 28
3.3.1 Web Management (HTTP): 28
3.3.2 Secured Web Management (HTTPS): 28
3.3.3 Command Line Interface (Telnet): 30
3.3.4 Secure Shell (SSH, SSH2): 31
3.3.5 SNMP Management: 33
3.4 Introduction to Web Management 34
3.4.1 Getting into Web Management....34
3.4.2 Welcome Screen and Login....37
3.5 Initial Configuration 39
3.5.1 Choose the wireless Operation Modes....39
3.5.2 Change the Device's IP Address 41
3.5.3 Change the Country Code 42
3.5.4 Set the Time and Date 44
3.5.5 Change System Management 45
3.5.6 Change Password 46
4. Wireless and WAN Settings 47
4.1 About AirMax DUO Lite Menu Structure 47
4.2 General Wireless Settings 49
4.2.1 Regulatory Domain....51
4.2.2 Network SSID 51
4.2.3 Site Survey 51
4.2.4 Signal Survey 53
4.2.5 Radio Mode (11a, SuperA, TurboA)....53
4.2.6 SuperA Option 54
4.2.7 Channel 54
4.2.8 Channel Width 56
4.2.9 Security Settings....57
4.2.10 Distance....63
4.2.11 Advance Settings 63
4.2.12 Access Control (ACL) 67
4.2.13 Multiple SSID....68
4.2.14 WMM QoS Setting 74
4.2.15 RADIUS Settings 78
4.2.16 Bandwidth Control 79
4.2.17 RSSI LED Threshold 85
4.3 AP Specific Settings.... 86
4.4 WDS Specific Settings 88
4.5 Client Mode Specific Settings 91
4.6 Gateway (AP Router) Specific Settings.... 94
4.6.1 WAN Port Settings....96
4.6.2 PPPoE Server Settings....98
4.6.3 DHCP Server Settings....99
4.6.4 Multiple DMZ 100
4.6.5 Virtual Server Settings....101
4.6.6 Special Applications....102
4.6.7 IP Filtering Settings....103
4.6.8 IP Routing Settings....104
4.6.9 Dynamic DNS Settings 106
4.6.10 Remote Management Settings 107
4.7 WISP Specific Settings ....108
4.7.1 WAN Port Settings....109
4.7.2 DHCP Server Settings.... 111
4.7.3 Multiple DMZ 112
4.7.4 Virtual Server Settings 113
4.7.5 Special Applications.... 114
4.7.6 IP Filtering Settings.... 115
4.7.7 IP Routing Settings 116
4.7.8 Dynamic DNS Settings 118
4.7.9 Remote Management Settings 119
4.8 Single Band Mode (2.4GHz Only)....120
4.8.1 Access Point Mode 121
4.8.2 Repeater Mode....121
4.8.3 WDS Bridge Mode....122
4.8.4 Bridge Infrastructure Mode 123
4.8.5 Client Infrastructure Mode 124
4.8.6 Client Ad Hoc Mode 125
4.8.7 WISP Router Mode....125
4.8.8 AP Router Mode 126
5. System Configuration....127
5.1 System Configuration ....127
5.1.1 Device IP Settings .... 127
5.1.2 Time Settings....129
5.1.3 Password Settings....130
5.1.4 System Management....130
5.1.5 SNMP Settings 132
5.1.6 Ping Watchdog 134
5.1.7 Firmware Upgrade....136
5.1.8 Configuration Save and Restore....137
5.1.9 Factory Default 138
5.1.10 Reboot System 138
5.1.11 AirMax DUO Lite Emergency Recovery 139
6. Device Status & Tools....141
6.1 Device Status....141
6.1.1 Device Information....141
6.1.2 Wireless Information.... 143
6.1.3 LAN Information....144
6.1.4 Internet Information....145
6.1.5 Wireless Client Table 146
6.1.6 System Log....147
6.1.7 Network Ping 148
6.1.8 Network Traceroute 149
7. Command Line Interface....150
7.1 System Commands ....151
7.2 Debugging Commands....153
7.3 Show Commands ....155
7.4 Set Commands....162
7.5 Enable/Disable Commands ....170
7.6 Add/Delete Commands....172
-
Frequent Asked Questions ....177
-
Specifications ....180
-
Wireless Network Glossary....184
1
Introduction

natural_image
White wireless device labeled 'AIF UVO' with two metallic connectors at the base (no additional text or symbols visible)1.1 Overview
The AirMax DUO Lite is the lightweight version of AirLive Base Station that incorporates everything we know about wireless - a feat from the company that invented the first multi-function AP. From its firm IP-65 case to the incredible easy-to-use AirLogic interface, it is meticulously designed inside out to be a powerful device you can use and rely on.
Dual Wireless + High Power + 2 LAN Ports
The AirMax DUO Lite is equipped with 2 high-powered Atheros radios. The radio 1 runs in the 11a 5GHz mode only while the radio 2 runs at the 11a/b/g dual band. AirLive adds high power amplifier to run the AP at 23dBm in 11a mode (200mW), that's 4 times the output power of normal 11a radio (50mW). In addition, 2 programmable LAN ports are available for multi-mode AP/Gateway configuration.
Multiple Operation Modes
The AirMax DUO Lite can operate in multiple wireless modes for different application environments such as Dual AP, Dual WDS, Duplex link aggregation, Separate Bridge, AP + Client, AP + WDS, WDS + Gateway, AP + Gateway, and AP + WISP. These modes can be changed and configured easily by the Web user interface.
802.3af PoE Port
AirMax DUO Lite is equipped with an 802.3af Power over Ethernet port. It thus can be powered by a PoE PSE and operate at up to 100 meter away.
VLAN & QoS
AirMax DUO Lite provides Multi-SSID to create different wireless networks using one AP. The TAG VLAN feature allows service provider to control service content of each SSID network all the way back to core router. The QoS feature allows prioritizing the different package according to the 802.11e WMM protocol and triple play (Voice, Video and Data). Bandwidth control feature allow AirMax DUO Lite to limit the bandwidth on distinct IP/MAC or on the total device.
IP65 Environmental Protection Enclosure
With IP-65 standard enclosure, AirMax DUO Lite is highly protected against dust and water. So that AirMax DUO Lite can be used in a hardened environment.
1.2 How to Use This Guide
AirMax DUO Lite is an advanced wireless Base Station with multiple functions. It is recommended that you read through the entire user's guide whenever possible. The user guide is divided into different chapters. You should read at least go through the first 3 chapters before attempting to install the device.
Recommended Reading
Chapter 1:
This chapter explains the basic information for AirMax DUO Lite. It is a must read.
Chapter 2:
This chapter is about hardware installation. You should read through the entire chapter.
Chapter 3:
3.1 Important Information
This section has information of default setting such as IP, Username, and Password.
3.3 Management Interface
This section introduces Web management, and Console management.
3.4 Introduction to Web Management
This section tells you how to get into the WebUI using HTTP
3.5 Initial Configuration
This section guides you through the essential initial configurations such as choosing operation mode, set device IP, password, and change frequency domain.
Chapter 4:
This chapter explains the Wireless and WAN settings via Web management.
Chapter 5:
This chapter explains System Configuration via Web management.
Chapter 6:
This chapter reveals the device status and explains the available tools
Chapter 7:
This chapter explains all of the management functions via CLI. If any trouble in using AirMax DUO Lite, you can refer to this chapter
Chapter 8:
If you have a question about AirMax DUO Lite that is not found on other part of this manual, you might find your answer here.
Chapter 9:
This chapter explains technical specification of AirMax DUO Lite.
Chapter 10:
Explanation on network technical terms from A to Z. Highly recommended for reference when you encounter an unfamiliar term
1.3 Firmware Upgrade and Tech Support
If you encounter a technical issue that can not be resolved by information on this guide, we recommend that you visit our comprehensive website support at www.airlive.com. The tech support FAQ are frequently updated with latest information.
In addition, you might find new firmware that either increase software functions or provide bug fixes for AirMax DUO Lite. You can reach our on-line support center at the following link:
http://www.airlive.com/support/support_2.jsp
Since 2009, AirLive has added the “Newsletter Instant Support System” on our website. AirLive Newsletter subscribers receive instant email notifications when there are new download or tech support FAQ updates for their subscribed AirLive models. To become an AirLive newsletter member, please visit: http://www.airlive.com/member/member_3.jsp

1.4 Feature
● 1x 108Mbps 11a Radio + 1x 108Mbps 11a/b/g Radio
● Supports Atheros Super-A and Super-G Wireless Transmission
● 23dBm 11a and 20dBm 11g/b Output Power
● 14 Wireless Multi-function Modes: Dual AP, Duplex, Dual WDS Bridge, Separate Bridge, AP + Client, Client + AP, AP + WDS Bridge, WDS Bridge + AP, WDS + Gateway, Gateway + WDS, AP + Gateway, Gateway + AP, AP + WISP, WISP + AP
● 2x N-Type Antenna connectors for external antennas
● Built from High Temperature resistant ABS material with Anti-UV protection
● Powered by 802.3af 48V PoE. 803.3af 48V PoE power adapter and DC Injector are included.
● Pole Mount/Wall Mount kit included for installation
● Total Bandwidth and Per-User Bandwidth Control
- Limit Bandwidth of HTTP, FTP, Torrent and eDunkey traffic in router mode
- Site Survey, RSSI signal Survey, and RSSI LED indicator.
● Multi-SSID, TAG VLAN, WMM, TOS
- ACK Timeout Adjustment for long distance connection.
● Emergency firmware recovery mode
Web, HTTPS, SSH/SSH2, Telnet, and SNMP managements
1.5 Wireless Operation Modes
The AirMax DUO Lite can perform as a multi-function wireless device. Through the AirLogic web interface, users can easily select which wireless mode they wish the AirMax DUO Lite to perform.
The AirMax DUO Lite provides 14 modes of wireless operational applications:
| Wireless Mode | Radio 1 (11a) | Radio 2 (11a or b/g) |
| Dual AP | Access Point | Access Point |
| Duplex | WDS Bridge | WDS Bridge |
| Dual WDS Bridge | WDS Bridge | WDS Bridge |
| Separate Bridge | WDS Bridge | WDS Bridge |
| AP + Client | Access Point | Wireless Client |
| Client + AP | Wireless Client | Access Point |
| AP + WDS Bridge | Access Point | WDS Bridge |
| WDS Bridge + AP | WDS Bridge | Access Point |
| WDS + Gateway | WDS Bridge | Gateway (AP Router) |
| Gateway + WDS | Gateway (AP Router) | WDS Bridge |
| AP + Gateway | Access Point | Gateway (AP Router) |
| Gateway + AP | Gateway (AP Router) | Access Point |
| AP + WISP | AP Router | WISP Bridge |
| WISP + AP | WISP Bridge | AP Router |
1.5.1 Dual AP Mode
In Dual AP mode, both wireless interface of AirMax DUO Lite are set as AP and provide hotspot service on each interface.

flowchart
graph TD
A["WH-5000A"] --> B["Internet"]
C["WLA-5000AP"] --> B
D["WLA-5200AP"] --> B
B --> E["WLA-5000AP"]
B --> F["WLA-5200AP"]
This Application provides wider coverage that difficult to be reached with a unique Omni antenna by using another adequate antenna such as sector antenna. It's particularly suitable for WISP to provide stable and high performance link.
■ The image in Dual AP mode diagrams helps to indicate the data flow related to the Wireless and the Ethernet ports.

flowchart
graph LR
A["AP"] --> B["LAN"]
C["POE"] --> D["LAN"]
E["AP"] --> F["LAN"]
G["AP"] --> H["LAN"]
I["Radio 1 802.11a"] --> J["LAN"]
K["Radio 2 802.11a/b/g"] --> L["LAN"]
style A fill:#f9f,stroke:#333
style C fill:#f9f,stroke:#333
style G fill:#f9f,stroke:#333
style I fill:#ccf,stroke:#333
style K fill:#ccf,stroke:#333
style B fill:#dfd,stroke:#333
style D fill:#dfd,stroke:#333
style F fill:#dfd,stroke:#333
style H fill:#dfd,stroke:#333
1.5.2 Duplex Mode
The duplex mode combines the two radios and double the bandwidth between AirMax DUO Lite

flowchart
graph TD
A["LAN"] --> B["Two LAN devices"]
B --> C["Double Link Speed"]
C --> D["LAN"]
style A fill:#f9f,stroke:#333
style D fill:#bbf,stroke:#333
note right of C Double Link Speed
This Application provides higher bandwidth between two locations than single radio does. When clients transmitting data which over the loading of single radio, the other radio shares the loading and make it able to transmit more data between the two AirMax DUO Lite.

flowchart
graph TD
subgraph Duplex
A["Bridge TX"] --> B["Radio 1 802.11a"]
B --> C["POE"]
B --> D["LAN"]
D --> E["Radio 2 802.11a/b/g"]
end
subgraph DoubleLinkSpeed
F["Bridge RX"] --> G["Radio 2 802.11a/b/g"]
G --> H["POE"]
G --> I["LAN"]
I --> J["Radio 1 802.11a"]
J --> K["POE"]
J --> L["LAN"]
end
style Duplex fill:#f9f,stroke:#333
style DoubleLinkSpeed fill:#bbf,stroke:#333
■ The image in Duplex mode diagram helps to indicate the data flow related to the Wireless and the Ethernet ports.
1.5.3 Dual WDS Bridge Mode
In Dual WDS Bridge mode, both wireless interface of AirMax DUO Lite are set as WDS Bridge and connect to remote network. When configured in the Dual WDS Bridge mode, AirMax DUO Lite allows solving discontinuous link due to geographical obstacles, shown as below and extension of distance between two WDS bridge nodes separated by a building.
Dual WDS

In this mode, the AP can act as a signal repeating station in a wireless backbone network. In addition, it can also function as directing station for NLOS application.
■ The image in Duplex WDS Bridge mode diagram helps to indicate the data flow related to the Wireless and the Ethernet ports.
Dual WDS Bridge

flowchart
graph LR
A["Radio 1<br>802.11a"] --> B["LAN"]
C["Radio 2<br>802.11a/b/g"] --> B
B --> D["POE"]
B --> E["LAN"]
D --> F["WDS"]
E --> G["WDS"]
style A fill:#f9f,stroke:#333
style C fill:#bbf,stroke:#333
style B fill:#dfd,stroke:#333
style D fill:#dfd,stroke:#333
style E fill:#dfd,stroke:#333
style F fill:#fff,stroke:#333
style G fill:#fff,stroke:#333
1.5.4 Separate Bridge Mode
The Separate Bridge Mode divides the AirMax DUO Lite into two single bridges. As shown in the following diagram, the two IP segments can not communicate or see each others.

flowchart
graph TD
A["Company"] -->|WHA-5500CPE| B["AirMax DUO Lite"]
B --> C["Enterprise Network"]
B --> D["WISP"]
C --> E["WHA-5500CPE"]
D --> E
E --> F["Client SOHO/HOME User"]
style A fill:#f9f,stroke:#333
style B fill:#ccf,stroke:#333
style C fill:#cfc,stroke:#333
style D fill:#fcc,stroke:#333
style E fill:#ffc,stroke:#333
style F fill:#cff,stroke:#333
In this application, both Radio 1 and Radio 2 are in WDS Bridge Mode.
■ The image in Separate WDS Bridge mode diagram helps to indicate the data flow related to the Wireless and the Ethernet ports.

flowchart
graph LR
A["Radio 1 802.11a"] --> B["LAN1"]
C["Radio 2 802.11a/b/g"] --> D["LAN2"]
E["POE"] --> F["LAN"]
G["Bridge"] --> H["Network Link"]
I["Separate Bridge"] --> J["Network Link"]
K["Network Link"] --> L["Network Link"]
M["Network Link"] --> N["Network Link"]
O["Network Link"] --> P["Network Link"]
1.5.5 AP + Client / Client + AP Mode
In this mode, one station works as an intermediate station. This enable the AP to link with remote stations using client mode, then distribute the signal to other clients using AP mode.
AP + Client

natural_image
Diagram showing five identical configurations of a device with three top-mounted devices connected to a central tower, each emitting sound waves (no text or labels present)In this application, Either Radio 1 or Radio 2 is in AP Mode, the other Radio is in Client mode.
■ The image in AP + Client / Client + AP mode diagram helps to indicate the data flow related to the Wireless and the Ethernet ports.

flowchart
graph LR
subgraph AP
A["AP"] --> B["LAN"]
C["Client"] --> D["LAN"]
end
subgraph Radio 1
E["Radio 1 802.11a"] --> F["LAN"]
G["POE"] --> H["LAN"]
I["LAN"] --> J["LAN"]
end
subgraph Radio 2
K["Radio 2 802.11a/b/g"] --> L["LAN"]
M["Client"] --> N["LAN"]
end
B --> F
H --> J
J --> L

flowchart
graph LR
A["Client"] --> B["LAN"]
B --> C["POE"]
C --> D["LAN"]
D --> E["LAN"]
E --> F["AP"]
G["Radio 1 802.11a"] --> H["LAN"]
I["Radio 2 802.11a/b/g"] --> J["LAN"]
H --> K["LAN"]
J --> L["LAN"]
K --> M["AP"]
L --> N["AP"]
style A fill:#f9f,stroke:#333
style G fill:#ff9,stroke:#333
style I fill:#ff9,stroke:#333
style J fill:#ff9,stroke:#333
style K fill:#ccf,stroke:#333
style L fill:#ccf,stroke:#333
1.5.6 AP + WDS Bridge / WDS Bridge + AP Mode
In this mode, one Radio works as Access Point and the other one is WDS Bridge.

In this mode, the AP can act as a signal repeating station in a wireless backbone network. In addition, it can also function as directing station for NLOS application.
The image in AP + WDS Bridge / WDS Bridge + AP mode diagram helps to indicate data flow related to the Wireless and the Ethernet ports.

flowchart
graph LR
A["AP"] --> B["LAN"]
C["WDS"] --> D["LAN"]
B --> E["POE"]
D --> F["POE"]
E --> G["Radio 1 802.11a"]
F --> H["Radio 2 802.11a/b/g"]
G --> I["Wireless"]
H --> J["Wireless"]
1.5.7 WDS + Gateway / Gateway + WDS Mode
In this mode, one radio acts as an AP router and the other a WDS bridge. One of the RJ-45 ports as the WAN interface to the internet.
GW + WDS

■ The remote location can access the internet by way of this Access Point which acts as a gateway device of the network.
■ The image in WDS + Gateway / Gateway + WDS mode diagram helps to indicate data flow related to the Wireless and the Ethernet ports.
WDS + Gateway

flowchart
graph LR
A["Radio 1 802.11a"] --> B["WAN"]
C["Radio 2 802.11a/b/g"] --> D["LAN"]
B --> E["POE"]
D --> F["LAN"]
G["WDS"] --> A
H["Gateway"] --> I["Radio 2"]
Gateway + WDS

flowchart
graph LR
A["Gateway"] --> B["WAN"]
B --> C["POE"]
C --> D["LAN NAT"]
D --> E["LAN"]
E --> F["Radio 1 802.11a"]
E --> G["Radio 2 802.11a/b/g"]
H["WDS"] --> I["Radio 2"]
style A fill:#f9f,stroke:#333
style H fill:#bbf,stroke:#333
1.5.8 AP + Gateway / Gateway + AP Mode
In this mode, one radio acts as an AP router and the other an Access Point. One of the RJ-45 ports as the WAN interface to the internet.

flowchart
graph TD
A["Client 1"] -->|AP| B["Client 2"]
B -->|WAN| C["Client 3"]
C -->|AP| A
style A fill:#f9f,stroke:#333
style B fill:#f9f,stroke:#333
style C fill:#f9f,stroke:#333
■ The remote location can access the internet by way of this Access Point which acts as a gateway device of the network.
■ The image in AP + Gateway / Gateway + AP mode diagram helps to indicate data flow related to the Wireless and the Ethernet ports.

flowchart
graph LR
subgraph WAN
A["AP"] --> B["POE"]
C["Radio 1 802.11a"] --> D["LAN"]
E["LAN NAT"] --> D
F["Radio 2 802.11a/b/g"] --> D
end
subgraph LAN
G["POE"] --> H["LAN"]
I["LAN"] --> H
J["Radio 2 802.11a/b/g"] --> H
end
K["Gateway"] --> L["AP + Gateway"]
style WAN fill:#f9f,stroke:#333
style LAN fill:#bbf,stroke:#333
style Railway fill:#dfd,stroke:#333

flowchart
graph LR
subgraph WAN
A["POE"] --> B["LAN"]
C["Radio 1 802.11a"] --> D["LAN NAT"]
end
subgraph LAN
E["LAN"] --> F["POE"]
G["Radio 2 802.11a/b/g"] --> H["LAN"]
end
I["Gateway + AP"] --> J["AP"]
K["AP"] --> L["AP"]
M["AP"] --> N["AP"]
style WAN fill:#f9f,stroke:#333
style LAN fill:#bbf,stroke:#333
1.5.9 AP + WISP / WISP + AP Mode
In this mode, one radio acts as an AP and the other acts as a client router. One of the RJ-45 ports as the WAN interface to the internet.

flowchart
graph TD
A["AirMax DUO Lite"] -->|Bridge mode (802.11a)| B["WHA-5500CPE"]
B -->|AP-Client 802.11g| C["AP-Client"]
C --> D["WAE-085GP WL-5470AP"]
D --> E["WAE-5018PA"]
E --> F["AirMax DUO Lite"]
F -->|Bridge mode (802.11a)| G["WHA-5500CPE"]
G -->|AP-Client 802.11a| H["WAE-5018PA"]
■ The remote location can access the Internet by way of this Access Point which acts as a gateway device of the network.
The image in AP + Gateway / Gateway + AP mode diagram helps to indicate data flow related to the Wireless and the Ethernet ports.

flowchart
graph LR
A["AP"] --> B["LAN"]
B --> C["POE"]
C --> D["NAT LAN"]
D --> E["LAN"]
E --> F["POE"]
F --> G["WISP WAN"]
H["Radio 1 802.11a"] --> I["NAT LAN"]
J["Radio 2 802.11a/b/g"] --> K["NAT LAN"]
L["AP + WISP"] --> M["Wireless Device"]

flowchart
graph LR
A["WISP WAN"] --> B["LAN"]
C["Radio 1 802.11a"] --> D["NAT LAN"]
E["POE"] --> F["LAN"]
G["Radio 2 802.11a/b/g"] --> H["LAN"]
I["AP"] --> J["LAN"]
K["WISP + AP"] --> L["AP"]
2
Installing the AirMax DUO Lite
This section describes the hardware features and the hardware installation procedure for the AirMax DUO Lite. For software configuration, please go to chapter 3 for more details.
2.1 Before You Start
It is important to read through this section before you install the AirMax DUO Lite.
The AirMax DUO Lite comes with everything you need to start installation with exception of the PoE Ethernet Cable. You can use a good quality CAT-5E graded Ethernet cable (shielded with anti-UV) according to the length you need.
The use of 5GHz spectrum, Turbo modes, and 5/10MHz channel bandwidth might be prohibited in some countries. Please consult with your country's telecom regulation first.
- You must set the distance parameter to make long distance connection work. Please refer to chapter 4 of this user's guide for details.
2.2 Installing AirMax DUO Lite
The AirMax DUO Lite package contains the following items:
■ 48VDC PoE injector kits
■ Pole/Wall mount kit
■ User Guide CD
■ Quick Start Guide
■ One AirMax DUO Lite main unit
2.3 Knowing Your AirMax DUO Lite
The main connectors are on the inside PCBA of AirMax DUO Lite. Once you pull out the PCBA, you will see those connectors on the top side of it.
Upside of the PCBA


Bottom side of AirMax DUO Lite

2.4 Hardware Installation
The following image shows the power installation of AirMax DUO Lite. Note that AirMax DUO Lite is IEEE802.3af compatible, you should use the packed POE kit or POE Switch for power injection.
2.4.1. Pull out the PCBA of AirMax DUO Lite and connect the Ethernet cable to the PoE Port


natural_image
Interior view of an electrical enclosure with blue and orange cables, no visible text or symbolsPut the cable into the cable tray

Plug the cable into the RJ-45 Port
2.4.2 Connect the Ethernet cable to the PoE Injector

flowchart
graph TD
A["AirMax DUO Lite"] --> B["Computer"]
B --> C["POE-48PBv2"]
C --> D["Ethernet Cable"]
D --> E["POE-48PBv2"]
E --> F["Power"]
style A fill:#f9f,stroke:#333
style B fill:#bbf,stroke:#333
style C fill:#dfd,stroke:#333
style D fill:#dfd,stroke:#333
style E fill:#dfd,stroke:#333
style F fill:#dfd,stroke:#333
2.5 Pole Mount/Wall Mount Installation

① AirMax DUO Lite body - 1pc
② M6 washer(φ16mm) - 4 pcs
③M6 S/W - 6 pcs
④ M6-16 screw - 4 pcs
⑤ M-Shaped mounting - 1 pc
⑥ Lock frame - 1 pc
⑦ M6 washer(φ12mm) - 2 pcs
⑧ M6-60 screw - 2 pcs
⑨5"/32-16 screw - 4 pcs
⑩ Plastic anchor - 4 pcs

3
Configuring the AirMax DUO Lite
The AirMax DUO Lite offers many different types of management interface. You can configure through standard web browser (http), secured web (https), command line (telnet), secured command shell (SSH, SSH2), and SNMP management. In this chapter, we will explain AirMax DUO Lite's available management interfaces and how to get into them. Then, we will provide the introduction on Web Management and recommended initial settings.
3.1 Important Information
The following information will help you to get start quickly. However, we recommend you to read through the entire manual before you start. Please note the password and SSID are case sensitive.
☐ The default IP address is: 192.168.1.1 Subnet Mask: 255.255.255.0
☐ When using Web UI, the login as follow:
- User name: admin
- Password: airlive
☐ When using telnet, the password is: airlive
☐ When using SSH/SSH2, the login as follow:
- Login : root
- Password: airlive
☐ The default radio mode for Wireless1 and Wireless2 is: 802.11a
☐ The default SSID for Radio 1 is: AirLive1
☐ The default SSID for Radio 2 is: AirLive 2
☐ The default wireless mode is : Dual AP Mode
After power on, please wait for 2 minutes for AirMax DUO Lite to finish boot up
☐ Please remember to click on "Apply" for new settings to take effect
☐ Please remember to enter the correct "Distance" parameter in wireless settings. Failure to do so can result in poor performance.
☐ The default country code is : United Kingdom
If you are living outside of EU, please go to Operation Mode->Setup->Regulatory Domain to change country.
Note: Before you starting hardware connection, you are advised to find an appropriate location to place the Access Point. Usually, the best place for the Access Point is at the center of your wireless network, with line of straight to all your wireless stations. Also, remember to adjust the antenna; usually the higher the antenna is placed; the better will be the performance.
3.2 Prepare Your PC
The AirMax DUO Lite can be managed remotely by a PC through either the wired or wireless network. The default IP address of the AirMax DUO Lite is 192.168.1.1 with a subnet mask of 255.255.255.0. This means the IP address of the PC should be in the range of 192.168.1.2 to 192.168.1.254.
To prepare your PC for management with the AirMax DUO Lite, please do the following:
- Connect your PC directly to the LAN port on the DC Injector of AirMax DUO Lite
- Set your PC's IP address manually to 192.168.1.100 (or other address in the same subnet)

You are ready now to configure the AirMax DUO Lite using your PC.
3.3 Management Interface
The AirMax DUO Lite can be configured using one the management interfaces below:
3.3.1 Web Management (HTTP):
You can manage your AirMax DUO Lite by simply typing its IP address in the web browser. Most functions of AirMax DUO Lite can be accessed by web management interface. We recommend using this interface for initial configurations. To begin, simply enter AirMax DUO Lite's IP address (default is 192.168.1.1) on the web browser. The default user name is "admin"; default password is "airlive".

3.3.2 Secured Web Management (HTTPS):
HTTPS is also using web browser for configuration. But all the data transactions are securely encrypted using SSL encryption. Therefore, it is a safe and easy way to manage your AirMax DUO Lite. We highly recommend WISP and service provider to use HTTPS for management.
To begin, simply enter https://192.168.1.1 on your web browser. A security alert screen from your browser will pop up. Please click "Continue to this website" to login AirMax DUO Lite.

After you pass the security warning screen, you will enter the secured web management interface. The default password is "airlive". Please ignore the "Certificate Error" warning icon, it just notice you that you are in an un-certificated site, you still can configure the AirMax DUO Lite without limitation.


For more information about Web Management and HTTPS, please make sure to read through "Introduction to Web Management" in this chapter, Chapter 4, and Chapter 5
3.3.3 Command Line Interface (Telnet):
AirMax DUO Lite can be managed through the command line interface (CLI). It is possible to write a text script file, and then paste it into the CLI to execute several commands at once. However, Telnet does not encrypt its message. Therefore, it is not secure. The default Telnet management port is TCP port 23.
To use the CLI, please open the command line window. Then type "telnet 192.168.1.1" to start.
![Command Prompt Microsoft Windows XP [Version 5.1.2600] (C) Copyright 1985-2001 Microsoft Corp. C:\Documents and Settings\Administrator>telnet 192.168.1.1](/content/2026/05/1084203/images/a146442ff5c4582fe83ff5475190a0760238f2a78025af6ae0a80975c1195fd8.jpg)
When asked for password, please enter "airlive".

To get a list of available command and their usage, please type "help" on the command prompt.
3.3.4 Secure Shell (SSH, SSH2):
SSH is an encrypted Command Line Interface that allows user to send text commands through SSL encryption. Therefore, it provides the added advantage of security comparing to Telnet. As with Telnet, the SSH and SSH2 provide the possibility to write a text script and paste into the CLI interface for multiple command execution. It also makes configuration change across many AirMax DUO Lites easier. The default management port for SSH/SSH2 is TCP/UDP port 22.
To manage via the SSH/SSH2 protocol, you would need a SSH client. Free SSH clients are widely available on the Internet. You can find where to download them by using Internet search engine such as Google. In this guide, we will use a popular SSH/Telnet utility call Putty.
Once you have download and install Putty. Please follow the figure below to make a connection with AirMax DUO Lite:
- Choose "SSH" as indicated in the diagram
- Enter the IP address of AirMax DUO Lite
- Click on "Open" to start the SSH session.

When the following screen appear, click on "Yes" to continue

When the following screen appears, please enter "root" for login. Then keyin the "airlive" as default password.

Now you are ready to enter commands

To get a list of available command and their usage, please type "help" on the command prompt.

For more information about Telnet and SSH configuration, please go to Chapter 7 Command Line Interface.
3.3.5 SNMP Management:
The AirMax DUO Lite support SNMPv1/v2 management. If you have SNMP management software, it can manage the AirMax DUO Lite. The AirMax DUO Lite's SNMP support is as followed:
■ SNMP v1/v2 support
■ SNMP Read/Write Community String
■ SNMP Trap support
■ MIB and MIB II Support
■ Ether-like MIB
■ IEEE802dot11 MIB
■ Private MIB
3.4 Introduction to Web Management
The AirMax DUO Lite offers both normal (http) and secured (https) Web Management interfaces. Their share the same interface and functions, and they can both be accessed through web browsers. The only difference is HTTPS are encrypted for extra security. Therefore, we will discuss them together as “Web Management” on this guide.
3.4.1 Getting into Web Management
Normal Web Management (HTTP)
To get into the Normal Web Management, simply type in the AirMax DUO Lite's IP address (default IP is 192.168.1.1) into the web browser's address field.

Secured Web Management (HTTPS)
To get into the Secured Web Management, just type “https://192.168.1.1” into the web browser’s address field. The “192.168.1.1” is AirMax DUO Lite’s default IP address. If the IP address is changed, the address entered in the browser should change also.

A security warning screen from your browser will then pop-up depending on the browser you use. Please follow step below to clear the security screen.
■ Internet Explorer: Select "Continue to this website" to proceed

■ Firefox:
- Select "or you can add an exception"

Secure Connection Failed
192.168.1.1 uses an invalid security certificate.
The certificate is not trusted because it is self signed. The certificate is not valid for any server names.
(Error code: sec_error_untrusted_issuer)
- This could be a problem with the server's configuration, or it could be someone trying to impersonate the server.
- If you have connected to this server successfully in the past, the error may be temporary, and you can try again later.

Or you can add an exception...
- Click on "Add Exception"

Secure Connection Failed
192.168.1.1 uses an invalid security certificate.
The certificate is not trusted because it is self signed. The certificate is not valid for any server names.
(Error code: sec_error_untrusted_issuer)
- This could be a problem with the server's configuration, or it could be someone trying to impersonate the server.
- If you have connected to this server successfully in the past, the error may be temporary, and you can try again later.
You should not add an exception if you are using an internet connection that you do not trust completely or if you are not used to seeing a warning for this server.
Get me out of here!
Add Exception...

- Click on "Get Certificate". Then, please enter AirMax DUO Lite's IP address. Finally, please click on "Confirm Security Exception."

3.4.2 Welcome Screen and Login
After the procedure above, the Welcome Screen will appear. Welcome Screen gives a brief introduction of the AirMax DUO Lite's main function category. By clicking on the function category, it will direct you to the corresponding web management menu.

- Wireless Settings: Click on this part will bring you to the wireless operation mode menu. The AirMax DUO Lite's wireless settings are different between wireless modes. Only functions that are applicable to the wireless mode will show to simplify configuration. For example, multiple SSID option is only workable for Access Point and AP Router mode. Therefore, the function will only appear in these 2 modes. For this reason, the first step to configure the AirMax DUO Lite is to select the wireless mode. The router mode specific functions are also in this menu category. For explanation of different wireless modes, please refer to Chapter 1.
■ System Configuration: All non-wireless and router mode settings are in this category. The system configurations including changing password, upload firmware, backup configuration, settings PING watchdog, and setting management interface. The default management timeout is 10 minutes; we recommend you should change password and management timeout during the first time login.
■ Tools: Discover network status using ping, traceroute tools.
■ Device Status: This section for monitoring the status of AirMax DUO Lite. It provides information on device status, Ethernet status, wireless status, wireless client table, and system log.
■ Help: This is the online help system for quick reference. We still recommend you to read this user's guide for more information.
TIPS: You can choose any menu categories to begin; you can switch to other menu later
After you click on the function category, the following screen will appear corresponding to the menu category you selected. The following example is when you selected the "System Configuration".

If you are placing the AirMax DUO Lite behind router or firewall, you might need to open virtual server ports to AirMax DUO Lite on your firewall/router
■ HTTP: TCP Port 80
■ HTTPS: TCP/UDP Port 443
This procedure is not necessary in most cases unless there is a router/firewall between your PC and AirMax DUO Lite.
3.5 Initial Configuration
We recommend users to browse through AirMax DUO Lite's web management interface to get an overall picture of the functions and interface. Below are the recommended initial configurations for first time login:
3.5.1 Choose the wireless Operation Modes
The wireless settings of AirMax DUO Lite are dependant on the wireless operation mode you choose. Therefore, the first step is to choose the operation mode. For explanation on when to use what operation mode, please refer to Chapter 1.
When you click on the "Wireless Settings" on the welcome screen or the "Operation Mode" on the top menu bar, the following screen will appear.

Follow the example below to change to "Client + AP" mode
- Select "Client + AP" mode
- Click on "change mode" button
- The AP will reboot, wait for about one minute

3.5.2 Change the Device's IP Address
The default IP address is at 192.168.1.1. You should change it to the same subnet as your network. Also, if you want to manage AirMax DUO Lite remotely, you have to set the Gateway and DNS server information.
To setup the IP settings for AirMax DUO Lite, please select "System Configuration" -> Device IP Settings". After entering the IP information, click on "Apply" to finish.

3.5.3 Change the Country Code
The legal frequency and channels in 5GHz spectrum varies between countries. The default country code is United Kingdom which should require no changes If you are living in Europe. If you are living outside EU, you should change the country code accordingly. In the example below, we will change the country code to United States which enables the use of 5.8GHz spectrum.
Step 1. Select "Operation Mode" -> "Setup"

Step 2. From the Regulatory Domain, please select your country and click on "Apply" to finish

3.5.4 Set the Time and Date
It is important that you set the date and time for your AirMax DUO Lite so that the system log will record the correct date and time information. Please go to "System Configuration" ->Time Settings. We recommend you choose "Enable NTP" so the time will be keep even after reboot. If your AirMax DUO Lite is not connected to Internet, please enter the time manually. Please remember to select your local time zone and click "Apply" to finish.

3.5.5 Change System Management
It is recommended that you change the system management settings first. Please go to "System Configuration"-> "System Management". The default web management timeout is 10 minutes; you can set to longer period if needed. For WISP administrators, you can consider turning off HTTP and Telnet for security purpose.

3.5.6 Change Password
You should change the password for AirMax DUO Lite at the first login. To change password, please go to "System Configuration" -> "Password Settings" menu.

4
Wireless and WAN Settings
In this chapter, we will explain about the wireless settings and router mode settings in web management interface. Please be sure to read through Chapter 3's "Introduction to Web Management" and "Initial Configurations" first. For system configurations, device status, and other non-wireless related settings; please go to Chapter 5.
4.1 About AirMax DUO Lite Menu Structure
The AirMax DUO Lite's web management menu is divided into 4 main sections: Operation Modes, System Configurations, Tools and Device Status. The main menus' options are always displayed on the top of the web management page. Within each main menu category, there are sub-menu options which are displayed on the side of the web
management page.
Top Menu Bar

Operation Mode: This menu is where you will find wireless and WAN settings. The AirMax DUO Lite's wireless settings are dependant on the wireless operation mode you choose; only the applicable wireless settings for selected operation mode are shown. For example; WAN port setting is available only for AP Router and WISP Router mode, it will only be shown in those modes. To access wireless settings, click on the "Setup" button within each operation mode. For explanation on different wireless modes, please refer to Chapter 1. We will talk about functions in this menu for this chapter.
System Configuration: All settings besides Wireless and WAN functions are in this category. The system configuration including changing password, upload firmware, backup configuration, settings PING watchdog, and setting management interface. We will talk about this menu's function in Chapter 5.
■ Tools: Discover network status using ping, traceroute and other tools
■ Device Status: This section for monitoring the status of AirMax DUO Lite. It provides information on device status, Ethernet status, wireless status, wireless client table, and system log.
■ Logout: Please make sure to Logout after you finish all settings.
4.2 General Wireless Settings
The wireless settings of AirMax DUO Lite are dependant on the wireless operation mode you choose. Therefore, the first step is to choose the operation mode. For explanation on when to use what operation mode, please refer to Chapter 1.
When you select "Wireless Settings" in the welcome screen, or click on the "Operation Mode" on the top menu; the following screen will appear:

■ Mode: The available wireless operation modes for AirMax DUO Lite. Select one and click on "Change Mode" button to switch between modes.
■ Setup: Click here to configure the Wireless and WAN (in router mode) settings.
Once you click on the "Setup" page, the wireless settings will appear

The AirMax DUO Lite device provides all 14 modes of wireless operational applications with:
| Wireless Mode | Radio 1 (11a) | Radio 2 (11a or b/g) |
| Dual AP | Access Point | Access Point |
| Duplex | WDS Bridge | WDS Bridge |
| Dual WDS Bridge | WDS Bridge | WDS Bridge |
| Separate Bridge | WDS Bridge | WDS Bridge |
| AP + Client | Access Point | Wireless Client |
| Client + AP | Wireless Client | Access Point |
| AP + WDS Bridge | Access Point | WDS Bridge |
| WDS Bridge + AP | WDS Bridge | Access Point |
| WDS + Gateway | WDS Bridge | Gateway (AP Router) |
| Gateway + WDS | Gateway (AP Router) | WDS Bridge |
| AP + Gateway | Access Point | Gateway (AP Router) |
| Gateway + AP | Gateway (AP Router) | Access Point |
| AP + WISP | AP Router | WISP Bridge |
| WISP + AP | WISP Bridge | AP Router |
4.2.1 Regulatory Domain
Operation Mode -> Setup -> Regulatory Domain
The legal frequency and channels in 5GHz spectrum varies between countries. Please select your country from here. There is a special domain called “Test Domain” which will show all the channels. It is for compatibility testing only. Please make sure the channel you used is allowed in your country when select this special domain.
4.2.2 Network SSID
Operation Mode -> Setup -> Network SSID
The SSID is the network name used to identify a wireless network. The SSID must be the same for all devices in the same wireless network. In AirMax DUO Lite, it is possible to create more than one SSID in AP and AP Router mode, please check the “Multiple SSID & VLAN” section in this chapter. Conversely, several access points on a network can have the same SSID. The SSID length is up to 32 characters. The default SSID is “airlive”.
■ Enable Radio 1/2: The default wireless is on. You can uncheck this box to disable wireless interface.
■ Disable SSID Broadcasting: If you check this box, the SSID will be hidden; only users who know the SSID can associate with this network.
4.2.3 Site Survey
Operation Mode -> Setup -> Site Survey
The Site Survey function in AirMax DUO Lite provides 4 important functions
- In Client and Bridge Infrastructure mode, site survey will scan for available AP network. Then allow user to select and connect to the AP. These greatly simplify the installation.
-
Once Site Survey displays the available AP or Bridge networks, you can select a particular SSID to display its RSSI value continuously. This function is called “Signal Survey”. Signal Survey can be used for antenna alignment.
-
For WDS Bridge mode, the Site Survey will scan for available AP and Bridge networks. User can then find the MAC address (BSSID) of the remote Bridges.
- For AP and AP router mode, the Site Survey allows administrator to check what channels are already occupied for choosing a cleaner channel.
When you click on Site Survey, the following screen will appear. It might take a few minutes to scan all the channels in the 5GHz spectrum.
Site Survey

■ Associate: Please choose a SSID before click on this button. This button is available only in Client Infrastructure or Bridge Infrastructure modes. Once you click on this button, AirMax DUO Lite will attempt to make a connection with the selected ESSID. If there is encryption needed, the AirMax DUO Lite will prompt you to enter the encryption key. Please make sure you enter the correct encryption key, the AirMax DUO Lite will not check whether the encryption key is correct.
■ RSSI: RSSI is a value to show the Receiver Sensitivity of the AirMax DUO Lite. In general, remote APs with stronger signal will display higher RSSI values. For RSSI value, the smaller the absolute value is, the stronger the signal. For example, “-50db” has stronger signal than “-80dB”. For long range connection, signal stronger than -60dB is considered as a good connection.
4.2.4 Signal Survey
Operation Mode -> Setup -> Site Survey -> Signal Survey
The Signal Survey will continuously display the RSSI value of the selected SSID for antenna alignment purpose. To use Signal Survey function, please enter the "Site Survey" function first; please refer to the instruction in the above section. Once you select the ESSID and click on the "Signal Survey" button, the following screen will appear.

■ BSSID: This is the remote AP's MAC address.
■ Channel: The current scanned channel
■ Signal Strength: This is the RSSI value. It will refresh itself every second. The smaller the absolute value of the RSSI, the stronger the signal. For example -38dbm is stronger than -70dBm.
4.2.5 Radio Mode (11a, SuperA, TurboA)
Operation Mode -> Setup -> Radio Mode
AirMax DUO Lite has 4 different options for WLAN transmission. All devices in the same network should use the same WLAN mode.
■ 11a mode (normal-A): This is the IEEE standard for WiFi operating in 5GHz frequency band. 11a is the most stable mode. If you are getting packet loss or disconnection using Super-A or Turbo-A mode. Please use 11a mode instead.
■ SuperA without Turbo: Super-A add Bursting, Compression, and Fast Frames to increase the speed over 11a mode. If you live in countries that prohibit the channel binding technology (i.e. Europe), you should choose “Super-A” If you need more speed than 11a mode. However, this mode is not as stable as 11a mode.
■ Super-A with Static Turbo: Turbo mode uses channel binding technology to increase the speed further over Super-A mode. This mode might not be allowed in countries that prohibit channel binding (i.e. some EU countries). This mode will always turn on the turbo mode in all conditions
■ Super-A with Dynamic Turbo: Dynamic Turbo mode will be turn on only when adjacent channel is not used. It is also known as intelligent turbo mode. This mode might not be allowed in countries that prohibit channel binding (i.e. some EU countries). In addition, this mode does not work in WDS Bridge mode.
4.2.6 SuperA Option
Operation Mode -> Setup -> SuperA Option
When you select Radio Mode with "Super-A", the SuperA Options will be available.
■ Bursting: Allow more data frame to be sent over given period of time by overhead reduction.
■ Compression: Increasing throughput by compressing data frame in real time
■ Fast Frame: Utilizing frame aggregation and removing interframe pauses to increase the throughput.
It is recommended to select all 3 options except for compatibility reasons with remote AP.
4.2.7 Channel
Operation Mode -> Setup -> Channel
The channel is the frequency range used by radio. In 802.11a standard, each channel occupies 20MHz width. For 2 wireless devices to connect, they must use the same channel. The number of available legal channels might be different between countries. For example, Channel 149 to 161 are available only to United States and a few other countries. If you are living outside EU, please change the country from the “Regulatory Domain” option in this page. Below is the table list of channels and frequency.
| Frequency Domain Channel Frequency (MHz) | ||
| 5.15 to 5.25GHzU-NII LowETSI Band1 | 36 | 5180 |
| 40 | 5200 | |
| 44 | 5220 | |
| 48 | 5240 | |
| 5.25 to 5.35GHzU-NII MidETSI Band1 | 52 | 5260 |
| 56 | 5280 | |
| 60 | 5300 | |
| 64 | 5320 | |
| 5.47 to 5.725GHzU-NII World WideETSI Band3 | 100 | 5500 |
| 104 | 5520 | |
| 108 | 5540 | |
| 112 | 5560 | |
| 116 | 5580 | |
| 120 | 5600 | |
| 124 | 5620 | |
| 128 | 5640 | |
| 132 | 5660 | |
| 136 | 5680 | |
| 140 | 5700 | |
■ Every 5MHz: Check this option will display all the channel numbers regardless of what channel width is elected. For example, when you select “20MHz” for channel width, check this option will display channels “36, 37, 38, 39, 40....” Instead of “36, 40, 44...etc). This allows you to use a non-standard channel to avoid interference or for privacy purpose.
4.2.8 Channel Width
Operation Mode -> Setup -> Channel Width
In 802.11a spec, each channel occupies 20MHz channel width. Therefore, each channel will jump by number of 4 (i.e. 36, 40, 44...etc). You can change the Channel Width to 40MHz (Turbo), 10MHz (Half) or 5MHz (Quarter) to either increase performance or reduce the interference problem.
■ Turbo (40MHz): Each channel will use 40MHz, double the normal size, to increase the performance by channel binding. This option is not allowed in countries inside EU
■ Normal (20MHz): This is the default channel width specified by IEEE 802.11a specification
■ Half (10MHz): Using this option would double the available channels for deployment in congested areas. However, the performance will also drop by half when using this option.
■ Quarter (5MHz): Using this option will increase the available channels by 4 times. It is a good choice for deployment in very congested areas. However, the performance will also drop greatly when using this option.
4.2.9 Security Settings
Operation Mode -> Setup -> Security Settings
Security settings allow you to use encryption to secure your data from eavesdropping. You can select different security policy to provide association authentication and/or data encryption. The AirMax DUO Lite features various security policies including WEP, 802.1x, WPA, WPA-PSK, WPA2, WPA2-PSK, WPA-Auto, and WPA-PSK-Auto. Please note not all security policies are available in all operation modes. For example, only WEP is available currently in WDS Bridge mode and Client Ad hoc mode. All wireless devices on the same network must use the same security policy. We recommend using WPA-PSK or WPA2-PSK whenever possible. For WDS Bridge and Client Ad hoc mode, we recommend using WEP-152 encryption.
WEP: WEP Encryption is the oldest and most available encryption method. However, it is also the least secure. Due to the limitation of the chipset, only WEP encryption is available for WDS Bridge Pure MAC mode and Client Ad-hoc mode.

■ Select one of the WEP key for wireless network: There are total of 4 possible keys for WEP encryption. You need to choose which key will be used for encryption. All wireless devices on the same network have to use the same settings. We recommend using WEP Key 1 as in default setting.
■ WEP Keys: Please enter the WEP keys used for encryption. You need to fill at least the "Select WEP Key". For example; if you choose "Encrypt Data with WEP Key 1" in the previous field, then it is necessary to fill WEP Key 1. The length of key is dependant on the Key Length and Key type you choose.
Key Length: The AirMax DUO Lite offers 64bit, 128 bit, and 152 bit for WEP key length. The longer the Key Length, the more secure the encryption is.
Key Type: 2 types are available: ASCII and HEX. ASCII is a string of ASCII code including alphabetical characters, space, signs and numbers (i.e. "airlivepass12"). HEX is a string of 16-bit hexadecimal digits (0..9, a, b, c, d, e, f). All wireless devices on the network must match the exact key length and Key type. Some Wireless clients only allow HEX type for WEP.
ASCII-64: This is a key with 64-bit key length of ASCII type. Please enter 5 ASCII Characters if you choose this option. For example, "passw"
HEX-64: This is a key with 64-bit key length of HEX type. Please enter 10 Hexadecimal digits if you choose this option. For example, "12345abcdef"
ASCII-128: This is a key with 64-bit key length of ASCII type. Please enter 13 ASCII Characters if you choose this option. For example, "airlivewepkey"
HEX-128: This is a key with 128-bit key length of HEX type. Please enter 26 Hexadecimal digits if you choose this option. For example, "1234567890abcdef1234567890"
ASCII-152: This is a key with 64-bit key length of ASCII type. Please enter 16 ASCII Characters if you choose this option. For example, "airlivewepkey123"
HEX-152: This is a key with 128-bit key length of HEX type. Please enter 32 Hexadecimal digits if you choose this option. For example, "1234567890abcdef1234567890abcdef"
802.1x: 802.1x allows users to leverage a RADIUS server to do association authentications. You can also enable dynamic WEP key (128 bit) to have data encryption. You do not have to enter the WEP key manually because it will be generated automatically and dynamically.

■ Rekey interval is time period that the system will change the key periodically. The shorter the interval is, the better the security is.
To Enable RADIUS Server:
■ Server IP: The IP address of the RADIUS server.
■ Port Number: The port number that your RADIUS server uses for authentication. The default setting is 1812.
■ Shared Secret: This is used by your RADIUS server in the Shared Secret field in RADIUS protocol messages. The shared secret configured in the AIRMAX DUO LITE must match the shared secret configured in the RADIUS server. The shared secret can contain up to 64 alphanumeric characters.
WPA, WPA2, WPA-AUTO: Wi-Fi Protected Access (WPA) introduces the Temporal Key Integrity Protocol (TKIP) that provides added security. WPA2 adds full support for 802.11i standard and the CCMP (AES Encryption). The WPA-AUTO tries to authenticate wireless clients using WPA or WPA2. All 3 requires a RADIUS server available in order to do authentication (same as 802.1x), thus there is no shared key required.
Security Settings
Select Security Policy:
WPA-AUTO

WPA-AUTO Encryption Type:
WPA-AUTO Group Rekey Interval:
Enable RADIUS Server
Server IP:
Port Number:
Shared Secret:

CCMP(AES)
Both

sec. (0 means disable rekey)

Apply
Help
■ Encryption Type: There are two encryption types TKIP and CCMP (AES). While CCMP provides better security than TKIP, some wireless client stations may not be equipped with the hardware to support it. You can select "Both" to allow TKIP clients and CCMP clients to connect to the Access Point at the same time.
■ Group Rekey Interval: A group key is used for multicast/broadcast data, and the re-key interval is time period that the system will change the group key periodically. The shorter the interval is, the better the security is. The default is 300 sec.
■ WPA-PSK, WPA2-PSK, WPA-PSK-Auto: Wi-Fi Protected Access (WPA) with Pre-Shared Key (PSK) provides better security than WEP keys. It does not require a RADIUS server in order to provide association authentication, but you do have to enter a shared key for the authentication purpose. The encryption key is generated automatically and dynamically. WPA2-PSK adds CCMP and AES encryption for even better security. WPA-PSK-AUTO tries to authenticate wireless clients using WPA-PSK or WPA2-PSK.

■ Pre-shared Key: This is an ASCII string with 8 to 63 characters. Please make sure that both the AIRMAX DUO LITE and the wireless client stations use the same key.
■ Encryption Type: There are two encryption types TKIP and CCMP (AES). While CCMP provides better security than TKIP, some wireless client stations may not be equipped with the hardware to support it. You can select “Both” to allow TKIP clients and CCMP clients to connect to the Access Point at the same time.
■ Group Rekey Interval: A group key is used for multicast/broadcast data, and the re-key interval is time period that the system will change the group key periodically. The shorter the interval is, the better the security is. The default is 300 sec.
4.2.10 Distance
Operation Mode -> Setup -> Distance
Please enter the distance to the remote wireless device here. The AirMax DUO Lite will then calculate the appropriate ACK Timeout value automatically. It is very important that you enter the correct distance for long distance connection. Failure to do so will result in poor performance.

4.2.11 Advance Settings
Operation Mode -> Setup -> Advance Settings
This page includes all the wireless settings that change the RF behaviors of AirMax DUO Lite. It is important to read through this section before attempting to make changes.
Advanced Wireless Settings
Radio1
Beacon Interval : 100 msec (range: 20-1000, default 100)
RTS Threshold : 2347 bytes (range: 0-2347, default 2347)
Fragmentation: 2346 bytes (range: 256-2346, default 2346)
DTIM Interval : 1 (range 1-255, default 1)
User Limitation: 100 (range: 0-100, unlimited 0, default 100)
Age Out Timer: 5 min. (range: 1-1000, default 5)
Transmit Power: Max -0dB (Reduce Tx Power between 0\~14 dB)
Rate Control: BEST ▼ Mbps
AckTimeOut (11a/SuperA/Turbo-11a): 25 μs(range: 10-255, default 25)
Enable 802.11d global roaming
ACK Calculator | Default | Apply
Help
■ Beacon Interval: Beacon Interval: The device broadcasts beacon frames regularly to announce its existence. The beacon Interval specifies how often beacon frames are transmitted in time unit of milliseconds. The default value is 100, and a valid value should be between 1 and 65,535.
■ RTS Threshold: RTS/CTS frames are used to gain control of the medium for transmission. Any unicast (data or control) frames larger than specified RTS threshold must be transmitted following the RTS/CTS handshake exchange mechanism. The RTS threshold should have a value between 256-2347 bytes, with a default of 2347. It is recommended that this value does not deviate from the default too much.
Fragmentation: When the size of a unicast frame exceeds the fragmentation threshold, it will be fragmented before the transmission. It should have a value of 256-2346 bytes, with a default of 2346. If you experience a high packet error rate, you should slightly decrease the Fragmentation Threshold.
DTIM Interval: The AirMax DUO Lite buffers packets for stations that operate in the power-saving mode. The Delivery Traffic Indication Message (DTIM) informs such power-conserving stations that there are packets waiting to be received by them. The DTIM interval specifies how often the beacon frame should contain DTIMs. It should have a value between 1 to 255, with a default value of 3.
■ User Limitation: This limitation applies to number of wireless clients the device can associate. If you need to serve wireless connection to large number of users in one location. You can deploy many APs and limit the number of wireless clients, so any additional wireless connection attempt will be rejected (therefore, redirect to other AP). The range of user limitation is from 1 to 100.
■ Age Out Timer: Set the age out timer for the wireless client. If there is no traffic from client for more than the timer, the wireless client will be dropped. The default is 300 sec. This function is available only for the Access Point and AP router mode.
■ Transmit Power: You can adjust the transmit output power of the AirMax DUO Lite's radio from 10dBm to 24dBm. The higher the output power, the more distance AirMax DUO Lite can deliver. However, it is advised that you use just enough output power so it will not create excessive interference for the environment. Also, using too much power at close distance can create serious performance drop due to signal distortion. At less than 200meter distance, the best output power is about 14dBm. At 2km distance; the best output power setting is 18dBm for "11a" and "Super-A without Turbo", 24dBm for "Super-A with Static/Dynamic Turbo".
■ Rate Control: Select here to change the Data Rate for the radio. Lower data rate sometimes provide longer distance. In most cases, however, we recommend to keep the setting at "Best".
■ AckTimeOut: When a packet is sent out from one wireless station to the other, it will wait for an Acknowledgement frame from the remote station. The station will only wait for a certain amount of time; this time is called the ACK timeout. If the ACK is NOT received within that timeout period then the packet will be re-transmitted resulting in reduced throughput. If the ACK setting is too high, then throughput will be lost due to waiting for the ACK Window to timeout on lost packets. If the ACK setting is too low then the ACK window will have expired and the returning packet will be dropped, greatly lowering throughput. By having the ability to adjust the ACK setting we can effectively optimize the throughput over long distance links.
The easiest way to enter AckTimeOut value is by entering the distance in "Operation Mode -> Setup -> Distance". The AirMax DUO Lite will then calculate and enter the correct value for you. Press the "Apply" button to begin the calculation.
■ AckTimeOut Calculator: Users may also use the ACK calculator to determine the AckTimeOut value before applying to AirMac DUO.
■ Enable Radio eXtended Range: XR is Atheros eXtended technology to increase range. When XR is turned on, the radio can increase the receiver sensitivity greatly. However, performance may be reduced significantly also. Use this mode only if you can trade more distance for lower performance.
■ Enable privacy separator: Select the check box to prohibit data transmission between client stations. This function is also known as “Client Isolation”.
■ Enable 802.1d STP: Enable the Spanning Tree Protocol to prevent forming a network loop. This option is especially important for WDS Bridge mode.
■ Enable 802.11d: Also known as “Global Roaming”. 802.11d is a standard for use in countries where systems using other standards in the 802.11 family are not allowed to operate.
4.2.12 Access Control (ACL)
Operation Mode -> Setup -> Access Control
The AirMax DUO Lite allows you to define a list of MAC addresses that are allowed or denied to access the wireless network. This function is available only for Access Point and AP Router modes.
Access Control Settings
This feature allows you to define a list of MAC addresses that are authorized to access or denied from accessing the wireless network.
Disable MAC address control list
No MAC address filtering is performed.
○ Enable GRANT address control list
Allow data traffic from devices listed in the table to access the network.
○ Enable DENY address control list
Deny/discard data traffic from devices listed in the table.
Apply
Mnemonic Name:
MAC Address:

(XX-XX-XX-XX-XX-XX)
Add
| Select | Name | MAC Address |
| - | - | - |
Delete selected
NOTE: Incorrect configuration may cause undesirable behavior. Please refer to the user manual for more details.
Help
■ Disable MAC address control list: When selected, no MAC address filtering will be performed.
■ Enable GRANT address control list: When selected, data traffic from only the specified devices in the table will be allowed in the network.
■ Enable DENY address control list: When selected, data traffic from the devices specified in the table will be denied/discarded by the network.
To add a MAC address into the table, enter a Mnemonic Name and the MAC Address, and then click Add. The table lists all configured MAC Filter entries.
To delete entries, check the corresponding Select boxes and then press Delete Selected.
4.2.13 Multiple SSID
Operation Mode -> Setup -> Multiple SSID
This function is available only for Access Point and AP Router modes. Multiple SSID allows AirMax DUO Lite to create up to 4 different wireless networks (SSID). It is also known as "Virtual AP" function. Each SSID can have its Encryption type, VLAN Tag, and TOS settings. In the following diagram, the AirMax DUO Lite uses Multiple SSID function to create separate Bridge and Client network. Each has its own encryption policies.

flowchart
graph TD
A["Bridge Network"] --> B["Bridge Infrastructure"]
B --> C["IP: 192.168.2.1/24"]
D["Client Network"] --> E["AP Mode"]
E --> F["IP: 192.168.1.1/24"]
G["Client Mode"] --> H["NB"]
H --> I["PC"]
style A fill:#f9f,stroke:#333
style D fill:#f9f,stroke:#333
style G fill:#ccf,stroke:#333
Configuring the Multiple SSID
When you click on the "Multiple SSID" button, the following screen will appear.

How to add a SSID
You can add up to 4 SSID in AirMax DUO Lite. Please follow the procedure below:
- Enter the SSID name (i.e. BridgeNet)
- Select the Security Policy (i.e. WPA-PSK)
- Enter the Security Key (i.e. BridgeNetKey).
- Click on "Apply" to add SSID
SSID Settings
This page lets you configure multiple SSIDs and corresponding QoS settings if QoS is enabled.
□ Enable VLAN for all SSIDs (All packets are tagged with VLAN ID)
□ Enable DiffServ Marking
Apply
| SSID Name | VLAN ID/Priority | Security | Radio |
| AirLive1 | - | None | 1 |
| AirLive2 | - | None | 2 |
Delete selected

Radio: SSID Name:
□ Disable SSID Broadcasting
Select Security Policy: WPA-PSK

Pre-shared Key (ASCII string):
WPA Encryption Type: WPA Group Rekey Interval:
BridgeNetKey



Help
How to Modify or Delete a SSID
Please follow the procedure below:
- Select the SSID you want to modify or delete
- The SSID's settings will be displayed in the box area. Modify any settings.
- Click on "Apply" to complete the modification
- Or click on "Delete Selected" to delete the SSID

Configure the VLAN and DiffServ Markings
When you check the Enable VLAN for All SSIDs and/or Enable DiffServ Marking, the following screen will appear:

■ Enable VLAN for All SSIDs: Once this function is enabled, you can specify an individual VLAN ID and priority tag for each SSID. The packets from a SSID will be forwarded to the Ethernet with the corresponding configured VLAN ID written. You need to click on the top "APPLY" button after making changes.
■ Enable DiffServ Marking: When this function is enabled, you can configure a DSCP value for each SSID. Then a packet from a station using this SSID will be forwarded with the DSCP value labeled. You need to click on the top "APPLY" button after making changes.
■ VLAN ID: Packets going out of this VLAN will be tagged with the VLAN ID Packets coming into the AP will be dropped if the VLAN Tag does not match. The valid range is between 0 to 4095. The VLAN ID "0" is the default VLAN group.
■ VLAN IP: Each SSID can be given with different VLAN IP group. Please notice that the management IP in the VLAN will also be changed. For example, if you define the VLAN IP to be 192.168.2.X subnet, then the AirMax DUO Lite's management IP in the group will change to 192.168.2.1.
■ VLAN IP NetMask: Define your VLAN IP scope here
■ 802.1p Priority: Define your 802.1p priority Tag here. Value from 0 to 7
■ Select DSCP TYPE: Assign the 6-digit DifferServ Code (DSCP) for the packets in the SSID network for QoS purpose. There are 8 preset values. To assign your own value, please select "Best Effort"
■ DSCP Value: When you select "Best Effort" DSCP Type, you can enter the 6-dgit DSCP Value here.
■ Select Security Policy: Select the encryption used for this SSID VLAN group. This policy can be different in each SSID VLAN group. For example, one SSID can be using WEP; the other policy can use WPA-PSK.

Once you enable the VLAN ID. The incoming packet from Ethernet port to your VLAN group must carry the same VLAN ID tag or the packet will be dropped.
4.2.14 WMM QoS Setting
Operation Mode -> Setup -> WMM QoS Setting
Wi-Fi Multimedia (WMM) is a standard to prioritize traffic for multimedia applications. The WMM Settings is to specify parameters on multiple data queue for better performance of differentiated wireless traffic like Voice-over-IP (VoIP), other types of audio, video, and streaming media as well as traditional IP data over the AP.

flowchart
graph LR
A["VO"] --> B["Voice (VoIP) Highest priority"]
C["VI"] --> D["Video (Internet Movie) High priority"]
E["BE"] --> F["Best Effort (Web) Medium priority"]
G["BK"] --> H["Background (E-mail) Lowest priority"]
I["AP Mode"] --> J["Internet"]
style I fill:#f9f,stroke:#333
style J fill:#ccf,stroke:#333
Configure the WMM QoS Parameters
QoS Settings
Enable WMM
WMM Parameters of Access Point
| AC TYPE | ECWMin | ECWMax | AIFS | TxopLimit-11a(μs) | ACM | Ack-policy |
| AC_BE(0) | 4 | 6 | 3 | 0 | ||
| AC_BK(1) | 4 | 10 | 7 | 0 | ||
| AC_VI(2) | 3 | 4 | 1 | 3008 | ||
| AC_VO(3) | 2 | 3 | 1 | 1504 |
WMM Parameters of Station
| AC TYPE | ECWMin | ECWMax | AIFS | TxopLimit-11a(μs) | ACM |
| AC_BE(0) | 4 | 10 | 3 | 0 | |
| AC_BK(1) | 4 | 10 | 7 | 0 | |
| AC_VI(2) | 3 | 4 | 2 | 3008 | |
| AC_VO(3) | 2 | 3 | 2 | 1504 |
Apply
Help
■ AC Type
The queue and associated priorities and parameters for transmission are as follows:
- Data 0 (Best Effort, BE): Medium priority queue, medium throughput and delay. Most traditional IP data is sent to this queue.
- Data 1 (Background, BK): Lowest priority queue, high throughput. Bulk data that requires maximum throughput and is not time-sensitive is sent to this queue (FTP data, for example):
- Data 2 (Video, VI): High priority queue, minimum delay. Time-sensitive data such as Video and other streaming media are automatically sent to this queue.
- Data 3 (Voice, VO): Highest priority queue, minimum delay. Time-sensitive data such as Voice over IP (VoIP) is automatically sent to this queue.
Packets in a higher priority queue will be transmitted before packets in a lower priority queue.
■ ECWmin and ECWmax
If an access point detects that the medium is in use, it uses the DCF random backoff timer to determine the amount of time to wait before attempting to access a given channel again. Each access point waits some random period of time between retries. The wait time (initially a random value within a range specified as the Minimum Contention Window increases exponentially up to a specified limit Maximum Contention Window.
The random delay avoids most of the collisions that would occur if multiple APs got access to the medium at the same time and tried to transmit data simultaneously. The more active users you have on a network, the more significant the performance gains of the backoff timer will be in reducing the number of collisions and retransmissions.

bar
| Backoff time in milliseconds | Value | |---|---| | Backoff⁴ = re-doubled | 7 | | Backoff² = MinCW doubled | 4 | | Initial Backoff = random number in range of MinCW | 1 |The random backoff used by the access point is a configurable parameter. To describe the random delay, a "Minimum Contention Window" (ECWMin) and a "Maximum Contention Window" (ECWMax) is defined.
- ECWmin: The value specified for the Minimum Contention Window is the upper limit of a range for the initial random backoff wait time. The number used in the random backoff is initially a random number between 0 and the number defined for the Minimum Contention Window.
- ECWmax: If the first random backoff time ends before successful transmission of the data frame, the access point increases a retry counter, and doubles the value of the random backoff window. The value specified in the Maximum Contention Window is the upper limit for this doubling of the random backoff. This doubling continues until either the data frame is sent or the Maximum Contention Window size is reached.

- AIFS
The Arbitration Inter-Frame Spacing (AIFs) specifies a wait time (in milliseconds) for data frames. 802.11e uses interframe spaces to regulate which frames get access to available channels and to coordinate wait times for transmission of different types of data. The AIFs ensures that multiple access points do not try sending data at the same time but instead wait until a channel is free. Valid values for AIFs are 1 through 255.
• Transmission Opportunity
The Transmission Opportunity (TXOP) is an interval of time when a WMM client station has the right to initiate transmissions onto the wireless medium. This value specifies (in milliseconds) the Transmission Opportunity (TXOP) for client stations; that is, the interval of time when a WMM client station has the right to initiate transmissions on the wireless network.

We recommend that you use the default settings on the WMM QoS page. Changing these values can lead to unexpected blockages of traffic on your wireless LAN, and the blockages might be difficult to diagnose.
4.2.15 RADIUS Settings
Operation Mode -> Setup -> Security Settings -> RADIUS Setting
RADIUS servers provide centralized authentication services to wireless clients. Two RADIUS servers can be defined: one acts as a primary, and the other acts as a secondary backup. If you choose to use 802.1x, WPA, or WPA2 as security policy, you might need to set the RADIUS server settings.

To Enable RADIUS Server:
■ Server IP: The IP address of the RADIUS server.
■ Port Number: The port number that your RADIUS server uses for authentication. The default setting is 1812.
■ RADIUS Type: RADIUS
■ Shared Secret: This is used by your RADIUS server in the Shared Secret field in RADIUS protocol messages. The shared secret configured in the AIRMAX DUO LITE must match the shared secret configured in the RADIUS server. The shared secret can contain up to 64 alphanumeric characters.
■ RADIUS Server Reattempt Period: The number of times the AIRMAX DUO LITE should attempt to contact the primary server before giving up
4.2.16 Bandwidth Control
Operation Mode -> Setup -> Bandwidth Control
Bandwidth Control can limit the maximum speed of entire wireless interface or individual device. It is also known as Traffic Shaping. The AirMax DUO Lite provides both Total Bandwidth and Per-User Bandwidth Control for both uplink and downlink speed. It controls the speed of both wireless and wired interface.
To configure, please click on the "Bandwidth Control" button under wireless settings. The following screen will appear:

Enable Bandwidth: Check to enable Bandwidth Control. Uncheck to disable it. The default value is disabled.
You must select between Total Bandwidth and Per-User Bandwidth. They can not be enabled at the same time.
■ Total Bandwidth: Total Bandwidth control limit the bandwidth between Wireless and Ethernet interface. Therefore, it is most suitable for Client Infrastructure Mode, Bridge Mode, and WISP Router Mode. For WISP operator who use AirMax DUO Lite as the client side device; setting the Total Bandwidth control on the AirMax DUO Lite will easy the loading on the AP for bandwidth management. To begin, please enable the Bandwidth Management first. Then enter the downlink and uplink speed; click on Apply to finish.
- Total Downlink Speed: Enter speed you wish to limit the download traffic in Kbps units.
- Total Uplink Speed: Enter the speed you wish to limit the upload traffic in Kbps units.
Per User Bandwidth Control: Per user Bandwidth Control can limit speed of individual PC and network device. The AirMax DUO Lite allows multiple Per-User bandwidth rules and can limit the bandwidth by IP address, MAC address, or IP segment. Please first enable the Bandwidth Control, then select "Per User Bandwidth Control" to begin. It is recommended to use this type of bandwidth control for Access Point and AP Router mode.
■ Per User Control Options
- Description: Enter a description for the bandwidth policy. For example, "VIP" subscriber
• Type: AirMax DUO Lite offers 3 types of Per-User Control
IP Address: To limit the bandwidth of one single IP address.
IP Segment: To limit the bandwidth the entire IP segment.
For example; if you enter the address of 192.168.1.20 with subnet mask of 255.255.255.248, the AirMax DUO Lite will limit bandwidth of IP addresses from 192.168.1.17 to 192.168.1.22. Please use an online IP calculate if you are not familiar with IP segment calculation. Below is an example link: http://www.subnet-calculator.com/
Because the Ethernet interface is also controlled by the Bandwidth Manager, it is recommended that devices on the Ethernet side to use a wider IP subnet mask that will cover the IP range of the controlled IP segment. Therefore, the devices on Ethernet interface will not be limited by bandwidth control and still can communicate with the IP segment. For example, if your IP segment is set to 192.168.1.20 / 255.255.255.248, then the devices on the Ethernet side should be 192.168.1.X / 255.255.255.0.
■ MAC address: To limit the bandwidth of one single MAC address
■ Port Range: This is available only in WISP router and AP Router mode. It can limit the bandwidth by application ports.
■ Application: This option is available only in WISP router and AP Router mode. It can limit the bandwidth of HTTP, FTP, BitTorrent, and eDonkey traffic.
■ Downlink Max: Enter the speed you wish to limit the download traffic in kbps
■ Uplink Max: Enter the speed you wish to limit the upload traffic in kbps
Example 1: Total Bandwidth Control
In this example, the AirMax DUO Lite is in Client Infrastructure mode connecting to a remote AP. We want to limit the Bandwidth of the link to 2048Kbps download and 512kbps Upload.

flowchart
graph LR
A["AP"] -->|512Kbps| B["Client Mode"]
B -->|2048Kbps| C["PC"]
Step 1
From Operation Mode menu, select "Setup" -> "Bandwidth Control"
Step 2 \~ 5
Enable the Bandwidth Control and select the "Total Bandwidth Control". Then enter the "2048" for Total Downlink Speed and "512"kbps for Total Uplink Speed. Click "Apply" to finish

Example 2: Per User Bandwidth Control
In this example, the AirMax DUO Lite is Access Point mode. There is a wireless client connecting to AirMax DUO Lite with MAC address of 00:04:6F:11:11:11. We want to limit the bandwidth of the wireless client to 1024 downstream and 512K upstream using AirMax DUO Lite's Per-User Bandwidth Control.

flowchart
graph LR
A["AP Mode"] --> B["Wireless Client"]
B --> C["MAC Address: 00:04:6F:11:11:11"]
A --> D["Wireless Client"]
D --> E["PC"]
style A fill:#f9f,stroke:#333
style B fill:#bbf,stroke:#333
style C fill:#dfd,stroke:#333
style D fill:#dfd,stroke:#333
style E fill:#dfd,stroke:#333
Step 1
Enable Bandwidth Control and select "Per User Bandwidth Control"
Step 2
Enter Description for this policy (Wireless Client)
Step 3
Select "MAC Address", and then enter the MAC address of the wireless client.
Step 4
Enter the downlink speed as "1024" and uplink speed as "512".
Step 5
Click on "Add" button to add the bandwidth policy
Step 6
This new policy should appear on the button. You can enable/disable it.

4.2.17 RSSI LED Threshold
Operation Mode (Client/Bridge Mode) -> Setup -> RSSI LED Threshold
The AirMax DUO Lite is equipped with 2 LEDs to indicate the signal strength of current connection or data traffic indicator. It is very useful in helping you to align the antenna or monitor the data flow status. There are two types of RSSI LED Thresholds which are "Traffic Mode" and "Installation Mode". Please note that this setting only appears in Client and Bridge modes.

NOTE: To access the wireless network, user must have correct SSID and encryption key, if enabled.
■ Traffic Mode: Indicates the data traffic transmission of current connection.
• LED steady on when Radio is enabled
- Blink once per second when connection established
■ Installation Mode: Indicates the signal strength of current connection and helps installer to align the antenna for the best reception.
• Weak Signal: -80dBm, flash every 2 seconds
• Medium Signal: -60dBm, flash every second
• Strong Signal: -40dBm, flash twice per second
• Full Signal: -20dBm, steady On

The RSSI LEDs are working only when the connection is established. Therefore, please make sure all wireless settings are correct and the connection is established.
4.3 AP Specific Settings
The Access Point mode is the most basic mode of multi-function Access Point. In this mode, the AP will act as a central hub for different Wireless LAN clients. Some hotspot Access Points requires 802.1x authenticator function to authenticate a user before providing internet service.

Access Point mode included in these operation modes: Dual AP, AP + Client, Client + AP, AP + WDS Bridge, WDS Bridge + AP, AP + Gateway, Gateway + AP, AP + WISP and WISP + AP modes.
WLAN Standard for Radio 2

Apply
NOTE: To access the wireless network, user must have correct SSID and encryption key, if enabled.
Enable Radio: Use this check box to turn on or turn off the radio.
■ Network ID (SSID): This is to change your SSID.
■ Disable SSID Broadcasting: Enable the check box if you want to hide your SSID in the network. This prevent an un-welcomed client survey your radio.
■ Radio Mode: Connection modes on AirMax DUO Lite and its wireless client. Note that the client must support the same mode as AirMax DUO Lite to connect.
■ Channel: 11a supports channel 36 to 64 and channel 100 to 140. 11g depends on the country, USA/Canada supports channel 1 to 11, Europe supports channel 1 to 13, Japan supports channel 1 to 14, France supports channel 10 to 13, and Span supports channel 10 to 11.
■ Enable Radio eXtended Range: Check this box to extend the wireless coverage range, this is provided by Atheros's eXtended Range (XR) technology.
■ Enable Client Isolation (Privacy Separator): This is to prohibit data transmission between each wireless client stations.
■ Enable 802.11d: This is to prevent network loop applying to the spanning tree standard. This option can be found under the “Advanced Wireless Settings”
4.4 WDS Specific Settings
In this mode, 2 access points in two remote locations connect to each other to provide a wireless bridge between 2 remote LANs. It is mostly used by enterprise to connect 2 remote office's network together. The bridge modes are connected by using the WDS (Wireless Distribution System) technology.

In this section, we will talk about the WDS Settings which is available only in WDS Bridge (Pure MAC) mode. WDS Bridges are using BSSID (AP's Wireless MAC address) to authenticate each other. Therefore, it is necessary to know the remote Bridge's wireless MAC addresses. You can always do a "Site Survey" to find out the MAC Addresses.
When you click on WDS settings, the following screen will appear:

WEP Key: You can set up to 4 keys; each key can have different Key Length and Key type. When you add an entry to the WDS setting and select WEP encryption, the system will ask you which key to use. All devices on the network must have the same sets of keys, but each link can have use different key. We recommend using WEP-152 whenever possible for better security.
Adding a new WDS link
The WDS links are created by entering the remote Bridge's information. This process must be repeated on both side of the bridge.
■ Name: This is the name for the WDS Link. You can enter any name for your own reference (i.e. WarehouseLink).
■ SSID: SSID is the network ID for the wireless link. If you have more than one WDS link or if you want to make WDS connection with Mikrotik devices, this field is required. Each WDS Link must have a different SSID name. If you only have one WDS link, you can leave this field empty.
■ MAC Address: Please enter the remote bridge's wireless MAC address in this field. This wireless SSID can be found on the device label. You can also use Site Survey function to assist you.
■ Select Security Settings: You can choose to use WEP encryption for better security. It is necessary to enter the same set of keys in the same WDS network. When you select WEP, the AirMax DUO Lite will ask you to select from one of the 4 keys. Please be sure to select the same key on both side of the link.
■ Press Add to finish
4.5 Client Mode Specific Settings
Client mode is also known as Ethernet Client. In this mode, the AP will act as a WLAN card to connect with the remote AP. Users can connect PC or local LAN to the Ethernet port of local LAN to the Ethernet port of the client mode AP. This mode is mostly used as a CPE device for WISP subscriber.

flowchart
graph TD
A["Client Mode"] --> B["Local Area Network"]
B --> C["Device 1"]
B --> D["Device 2"]
B --> E["Device 3"]
B --> F["Device 4"]
style A fill:#f9f,stroke:#333
style B fill:#ccf,stroke:#333
style C fill:#cfc,stroke:#333
style D fill:#fcc,stroke:#333
style E fill:#cff,stroke:#333
style F fill:#ffc,stroke:#333
Client mode included in these operation modes: AP + Client, Client + AP, AP + WISP, and WISP + AP.
- To connect to an access point, use the "Site Survey" button to find the Access Point.
WLAN Standard for Radio 2

NOTE: To access the wireless network, user must have correct SSID and encryption key, if enabled.
- The Site Survey pop up window then shows up and lists available access point with relative information.
Site Survey
Site survey list :
| Select | ESSID | MAC Address | Radio | Conn Mode | Channel | Turbo | Super | XR | WME | Signal Strength(dbm) | Security | Network |
| wireless | 00:c0:02:ff:c7:e4 | 2 | G | 13 | - | - | - | * | -88 | WPA2 PSK | AP | |
| WT2K | 00:4f:67:00:61:ba | 2 | G | 3 | - | - | - | - | -83 | WPA PSK | AP |
NOTE: The sitesurvey will show both AP and Bridge connections. Device without ESSID is more likely to be a Bridge device.

flowchart
graph TD
A["REFRESH"] --> B["SIGNAL SURVEY"]
B --> C["ASSOCIATE"]
D["Click here to show the signal strength of the selected access point."] --> B
E["Select the access point you want to connect and then click the "ASSOCIATE" button."] --> C
- The Signal Survey pop up windows shows as following:

- After the access point is selected, its SSID shows automatically in the Network ID (SSID) field.
WLAN Standard for Radio 2

Apply
NOTE: To access the wireless network, user must have correct SSID and encryption key, if enabled.
4.6 Gateway (AP Router) Specific Settings
In Gateway mode, router functions are added between one Ethernet port and other network interfaces. Therefore, the ISP subscriber can share the ISP connection without need for extra router.

flowchart
graph TD
A["Local Area Network"] --> B["Internet"]
B --> C["Getway Mode"]
C --> D["Laptop"]
C --> E["Laptop"]
C --> F["Laptop"]
style A fill:#f9f,stroke:#333
style B fill:#ccf,stroke:#333
style C fill:#cfc,stroke:#333
style D fill:#fcc,stroke:#333
style E fill:#fcc,stroke:#333
style F fill:#fcc,stroke:#333
Gateway mode acts both in AP and Router which included in these operation modes: AP + Gateway and Gateway + AP.
WAN Setting
WAN Port Settings:
Setup
Special Applications:
Setup
PPPoE Server Settings:
Setup
IP Filtering Settings:
Setup
DHCP Server Settings:
Setup
IP Routing Settings:
Setup
Multiple DMZ:
Setup
Dynamic DNS Settings:
Setup
Virtual Server Settings:
Setup
Remote Management:
Setup
Apply
WAN Port Select: Either the Ethernet port 1 or port 2 can be set to be the WAN port.
4.6.1 WAN Port Settings
Operation Mode -> Setup -> WAN Port Settings
The AirMax DUO Lite support different authentication and IP assignment standards for the WAN port. It includes fixed IP, DHCP, PPPoE and PPTP protocols. Please consult with your ISP about what authentication type is used for the WAN port connection.
WAN Port Settings:
If your ISP has assigned you a static IP address, select this button and enter the information below:

If your ISP already provides you with PPPoE authentication information, select this button and enter the information below:


Clone MAC Address: Some service provider (Cable Modem provider) lock to certain MAC address. In this situation, the WAN port of AirMax DUO Lite needs to clone the MAC address. Please check the "Clone MAC address" box and enter the address that need to be cloned.
If your ISP already provides you with a Host Name, select this button and enter the information below: (DHCP)
Host Name: Airlive
If your ISP already provides you with PPTP authentication information, select this button and enter the information below:

□ Cloned MAC Address :
If your ISP requires you to use a specific WAN Ethernet MAC address, check this box and enter the MAC address here.
MAC Address: 00-00-00-00-00-00 in xx-xx-xx-xx-xx-xx format)
Apply
NOTE: Changes to this page will not take effect until you click Apply on the save config page.
4.6.2 PPPoE Server Settings
Operation Mode -> Setup -> PPPoE Server Settings
■ Enable/Disable: Used to enable or disable PPPoE server.
■ Authentication: Choose to use "Local Account" or "Radius" as authentication mechanism. If choosing "Local Account", you have to configure "Local Account Management". If choosing "Radius", you have to configure Radius server.
■ Local IP Address: Assign IP address to the interface of PPPoE server.
■ Remote Start/Remote End IP: Define IP address pool that is used to assign address to the connected PPPoE clients.
■ MPPE Encryption: Used to enable or disable special MPPE encryption function.
■ Compression: Used to enable compression function.
■ Local Account Management
- User Name: Specify authentication username.
• Password: Specify authentication password. - Assign IP: Specify the IP address of PPPoE client. If 0.0.0.0 is specified, then PPPoE client will get an IP address between remote start IP and remote end IP.
4.6.3 DHCP Server Settings
Operation Mode -> Setup -> DHCP Server Settings
DHCP Server Settings is to assign private IP address to the devices in your local area network (LAN). Note that AirMax DUO Lite keeps the IP address of 192.168.1.1 and act as the default gateway of the LAN.
You can assign IP address to MAC address; the DHCP server will keep the IP for the MAC address.


4.6.4 Multiple DMZ
Operation Mode -> Setup -> Multiple DMZ
Multiple DMZ opens all TCP/UDP ports to particular IP address on the LAN side. It allows setting up servers behind the AirMax DUO Lite.
Multiple DMZ
Select a DMZ type:
Default DMZ
○ Multiple DMZ
Local DMZ IP address:

168


Add
| Select | Name | Public WAN IP | Local DMZ IP |
| - | - | - | - |
Delete selected
NOTE: A DMZ server is a common term used to describe the default virtual server. If the DMZ server is selected, Internet traffic not destined for a valid virtual server is redirected to this privately-addressed LAN client. This can be used together with a separate firewall device to perform additional security functions.
Help
Select a DMZ type and then enter the local DMZ IP address
Note: A DMZ server is a common term used to describe the default virtual server. If the DMZ server is selected, Internet traffic not destined for a valid virtual server is redirected to this privately addressed LAN client. This can be used together with a separate firewall device to perform additional security functions.
4.6.5 Virtual Server Settings
Operation Mode -> Setup -> Virtual Setting
This allows you to specify one or more applications running on server computers on the LAN that may be accessed by any Internet user. Internet data destined for the specified public port will be directed to the specified private port number on the LAN client with the specified private IP address.
Virtual Server Settings
This allows you to specify one or more applications running on server computers on the LAN that may be accessed by any Internet user. Internet data destined for the specified public port will be directed to the specified private port number on the LAN client with the specified private IP address.

Add
| Select | Service | Public Port No(s) | Local IP Address | Local Port No(s) |
| - | - | - | - | - |
Delete selected
Help

4.6.6 Special Applications
Operation Mode -> Setup -> Special Applications
Some Internet application such as Instant Messaging or games use groups of ports, and are not easy to work behind a firewall. To work well with these special applications we will open ports to let traffic pass through.
Note: You can use up to 3 sets of opened ports for a specific application. The opened ports can be separated by a comma and no spaces are allowed (e.g. 2300-2305, 4300-4305, 5300-5305).
Special Applications
Some Internet applications such as Instant Messaging or Games in particular use groups of ports, and are not easy to work behind a firewall. To work well with these special applications we will open ports to let traffic pass through. Before you set up special application, please see your applications' help for such information.

Add
| Select | Name | Trigger Port | Trigger Protocol | Opened Ports | Opened Protocol |
| - | - | - | - | - | - |
Delete selected
NOTE: You can use up to 3 sets of opened ports for a specific application. The opened ports can be separated by a comma and no spaces are allowed (e.g. 2300-2305,4300-4305,5300-5305).
4.6.7 IP Filtering Settings
Operation Mode -> Setup -> IP Filtering Settings
IP filtering is simply a mechanism that decides which types of IP datagram will be processed normally and which will be discarded.
IP Filtering Settings
This allows you to define rules for allowing / denying access from / to the Internet.
Disable IP filtering
No IP filtering is performed.
○ Grant IP access
Data traffic satisfying rules below are allowed/forwarded.
○ Deny IP access
Data traffic satisfying rules below are denied/filtered.
Apply
Define an IP filtering rule:
Name:

IP Protocol:

Apply to :
Outbound to the Internet
○ Inbound from the Internet
Source IP Address:
Any
Single IP

Network
IP: Netmask:

This allows you to define rules for allowing / denying access from / to the Internet. Please do set both inbound/outbound in order to get complete connection. Only inbound or outbound will not allow to get response from the destination IP.
■ Disable IP filtering: No IP filtering is performed.
■ Grant IP access: Data traffic satisfying rules below are allowed / forwarded.
■ Deny IP access: Data traffic satisfying rules below are denied / filtered.
You can also define IP filtering rule, such as:
Name; IP Protocol; Apply to either Outbound to the Internet or Inbound from the Internet; Source IP Address and Dest. (Destination) IP Address.
To grant or deny IP address, select ADD or Delete Selected.
4.6.8 IP Routing Settings
Operation Mode -> Setup -> IP Routing Settings
The IP Routing Settings allows you to configure routing feature in the gateway

IP Routing Table
| Select | Destination IP Address | Subnet Mask | Gateway IP Address< | Interface | Flag | Metric |
| - | 192.168.2.0 | 255.255.255.0 | - | eth1 | U | 0 |
| - | 192.168.1.0 | 255.255.255.0 | - | lan | U | 0 |
| - | 0.0.0.0 | 0.0.0.0 | 192.168.2.254 | eth1 | UG | 0 |
Delete selected
To delete a static route from the table, select the route and click Delete selected.
NOTE: Changes to the routing table will take effect immediately.
Help
■ Dynamic Routing: Select the routing protocol scheme used for the router's LAN / WAN port.
■ Static Routing: This allows you to manually configure static network routes. Static routes will override routes learned by standard routing protocol discover methods.
■ IP Routing Table: To delete a static route from the table, select the route and click DELETE SELECTED.
Note: Changes to the routing table will take effect immediately.
4.6.9 Dynamic DNS Settings
Operation Mode -> Setup -> Dynamic DNS Settings
Dynamic DNS (DDNS) allows you to create a hostname that points to your dynamic IP or static IP address or URL. AirMax DUO Lite provide Dynamic DNS client using DynDNS, please visit http://www.dyndns.org for detail.
Dynamic DNS Settings
□ Enable Dynamic DNS Client using DynDNS.org

Apply
Help
4.6.10 Remote Management Settings
Operation Mode -> Setup -> Remote Management
Remote Management allows administrator to manage the AirMax DUO Lite from WAN side. You can also change the management port and other settings here.
■ HTTP Port No: The default port for HTTP is Port 80, you can change the value here
■ Timeout: The default management timeout is 10 minutes. After timeout, the AirMax DUO Lite will ask you to login again. You can change the timeout value here.
■ HTTP Web Server Access: You can enable or disable HTTP service from WAN side
■ HTTPS Web server Access: You can enable or disable HTTPS Web Server Access from WAN side
■ Response to WAN ping: You can disable or enable whether AirMax DUO Lite will response to PING command.

4.7 WISP Specific Settings
In WISP mode, the AP will behave just the same as the Client mode for wireless function. However, router functions are added between the wireless WAN side and the Ethernet LAN side. Therefore, the WISP subscriber can share the WISP connection without need for extra router.

flowchart
graph TD
A["Local Area Network"] --> B["WISP Mode"]
B --> C["Wide Area Network"]
C --> D["Local Area Network"]
style A fill:#f9f,stroke:#333
style B fill:#ccf,stroke:#333
style C fill:#cfc,stroke:#333
style D fill:#fcc,stroke:#333
WISP mode acts both in AP and Router which included in these operation modes: AP + WISP and WISP + AP.
In WISP + AP mode, the Radio 1 is actually a wireless client of the WISP wireless node and also the gateway of the local area network.
Gateway mode acts both in AP and Router which included in these operation modes: AP + Gateway and Gateway + AP.

NOTE: To access the wireless network, user must have correct SSID and encryption key, if enabled.
4.7.1 WAN Port Settings
Operation Mode -> Setup -> WAN Port Settings
The AirMax DUO Lite support different authentication and IP assignment standards for the WAN port. It includes fixed IP, DHCP, PPPoE and PPTP protocols. Please consult with your ISP about what authentication type is used for the WAN port connection.
WAN Port Settings:
If your ISP has assigned you a static IP address, select this button and enter the information below:

If your ISP already provides you with PPPoE authentication information, select this button and enter the information below:

Clone MAC Address: Some service provider (Cable Modem provider) lock to certain MAC address. In this situation, the WAN port of AirMax DUO Lite needs to clone the MAC address. Please check the "Clone MAC address" box and enter the address that need to be cloned.
If your ISP already provides you with a Host Name, select this button and enter the information below: (DHCP)
Host Name: Airlive
If your ISP already provides you with PPTP authentication information, select this button and enter the information below:


Apply
NOTE: Changes to this page will not take effect until you click Apply on the save config page.
4.7.2 DHCP Server Settings
Operation Mode -> Setup -> DHCP Server Settings
DHCP Server Settings is to assign private IP address to the devices in your local area network (LAN). Note that AirMax DUO Lite keeps the IP address of 192.168.1.1 and act as the default gateway of the LAN.
You can assign IP address to MAC address; the DHCP server will keep the IP for the MAC address.


4.7.3 Multiple DMZ
Operation Mode -> Setup -> Multiple DMZ
Multiple DMZ opens all TCP/UDP ports to particular IP address on the LAN side. It allows setting up servers behind the AirMax DUO Lite.
Multiple DMZ
Select a DMZ type:
Default DMZ
○ Multiple DMZ
Local DMZ IP address:

168


Add
| Select | Name | Public WAN IP | Local DMZ IP |
| - | - | - | - |
Delete selected
NOTE: A DMZ server is a common term used to describe the default virtual server. If the DMZ server is selected, Internet traffic not destined for a valid virtual server is redirected to this privately-addressed LAN client. This can be used together with a separate firewall device to perform additional security functions.
Help
Select a DMZ type and then enter the local DMZ IP address
Note: A DMZ server is a common term used to describe the default virtual server. If the DMZ server is selected, Internet traffic not destined for a valid virtual server is redirected to this privately addressed LAN client. This can be used together with a separate firewall device to perform additional security functions.
4.7.4 Virtual Server Settings
Operation Mode -> Setup -> Virtual Setting
This allows you to specify one or more applications running on server computers on the LAN that may be accessed by any Internet user. Internet data destined for the specified public port will be directed to the specified private port number on the LAN client with the specified private IP address.
Virtual Server Settings
This allows you to specify one or more applications running on server computers on the LAN that may be accessed by any Internet user. Internet data destined for the specified public port will be directed to the specified private port number on the LAN client with the specified private IP address.

Add
| Select | Service | Public Port No(s) | Local IP Address | Local Port No(s) |
| - | - | - | - | - |
Delete selected
Help

4.7.5 Special Applications
Operation Mode -> Setup -> Special Applications
Some Internet application such as Instant Messaging or games use groups of ports, and are not easy to work behind a firewall. To work well with these special applications we will open ports to let traffic pass through.
Note: You can use up to 3 sets of opened ports for a specific application. The opened ports can be separated by a comma and no spaces are allowed (e.g. 2300-2305, 4300-4305, 5300-5305).
Special Applications
Some Internet applications such as Instant Messaging or Games in particular use groups of ports, and are not easy to work behind a firewall. To work well with these special applications we will open ports to let traffic pass through. Before you set up special application, please see your applications' help for such information.

Add
| Select | Name | Trigger Port | Trigger Protocol | Opened Ports | Opened Protocol |
| - | - | - | - | - | - |
Delete selected
NOTE: You can use up to 3 sets of opened ports for a specific application. The opened ports can be separated by a comma and no spaces are allowed (e.g. 2300-2305,4300-4305,5300-5305).
4.7.6 IP Filtering Settings
Operation Mode -> Setup -> IP Filtering Settings
IP filtering is simply a mechanism that decides which types of IP datagram will be processed normally and which will be discarded.
IP Filtering Settings
This allows you to define rules for allowing / denying access from / to the Internet.
Disable IP filtering
No IP filtering is performed.
○ Grant IP access
Data traffic satisfying rules below are allowed/forwarded.
○ Deny IP access
Data traffic satisfying rules below are denied/filtered.
Apply
Define an IP filtering rule:
Name:

IP Protocol:

Apply to :
Outbound to the Internet
○ Inbound from the Internet
Source IP Address:
Any
Single IP

Network
IP: Netmask:

This allows you to define rules for allowing / denying access from / to the Internet. Please do set both inbound/outbound in order to get complete connection. Only inbound or outbound will not allow to get response from the destination IP.
■ Disable IP filtering: No IP filtering is performed.
■ Grant IP access: Data traffic satisfying rules below are allowed / forwarded.
■ Deny IP access: Data traffic satisfying rules below are denied / filtered.
You can also define IP filtering rule, such as:
Name; IP Protocol; Apply to either Outbound to the Internet or Inbound from the Internet; Source IP Address and Dest. (Destination) IP Address.
To grant or deny IP address, select ADD or Delete Selected.
4.7.7 IP Routing Settings
Operation Mode -> Setup -> IP Routing Settings
The IP Routing Settings allows you to configure routing feature in the gateway

IP Routing Table
| Select | Destination IP Address | Subnet Mask | Gateway IP Address< | Interface | Flag | Metric |
| - | 192.168.2.0 | 255.255.255.0 | - | eth1 | U | 0 |
| - | 192.168.1.0 | 255.255.255.0 | - | lan | U | 0 |
| - | 0.0.0.0 | 0.0.0.0 | 192.168.2.254 | eth1 | UG | 0 |
Delete selected
To delete a static route from the table, select the route and click Delete selected.
NOTE: Changes to the routing table will take effect immediately.
Help
■ Dynamic Routing: Select the routing protocol scheme used for the router's LAN / WAN port.
■ Static Routing: This allows you to manually configure static network routes. Static routes will override routes learned by standard routing protocol discover methods.
■ IP Routing Table: To delete a static route from the table, select the route and click DELETE SELECTED.
Note: Changes to the routing table will take effect immediately.
4.7.8 Dynamic DNS Settings
Operation Mode -> Setup -> Dynamic DNS Settings
Dynamic DNS (DDNS) allows you to create a hostname that points to your dynamic IP or static IP address or URL. AirMax DUO Lite provide Dynamic DNS client using DynDNS, please visit http://www.dyndns.org for detail.
Dynamic DNS Settings
□ Enable Dynamic DNS Client using DynDNS.org

Apply
Help
4.7.9 Remote Management Settings
Operation Mode -> Setup -> Remote Management
Remote Management allows administrator to manage the AirMax DUO Lite from WAN side. You can also change the management port and other settings here.
■ HTTP Port No: The default port for HTTP is Port 80, you can change the value here
■ Timeout: The default management timeout is 10 minutes. After timeout, the AirMax DUO Lite will ask you to login again. You can change the timeout value here.
■ HTTP Web Server Access: You can enable or disable HTTP service from WAN side
■ HTTPS Web server Access: You can enable or disable HTTPS Web Server Access from WAN side
■ Response to WAN ping: You can disable or enable whether AirMax DUO Lite will response to PING command.

4.8 Single Band Mode (2.4GHz Only)
In some countries, 5GHz frequency band is forbidden to use. In this case, please select 2.4GHz Only Mode for operation. The AirMax DUO Lite can be configured to operate in the following wireless operation modes when choosing 2.4GHz only.
Note: In this mode, the Radio 1 is disable. Radio 2 operates only in 2.4GHz mode.

4.8.1 Access Point Mode
Operation Mode -> Setup
When operating in the Access Point mode, the AirMax DUO Lite becomes the center hub of the wireless network. All wireless cards and clients connect and communicate through AirMax DUO Lite. This type of network is known as “Infrastructure network”. Other AirMax DUO Lite or 802.11g CPE can connect to AP mode through “Client Infrastructure Mode” or “Bridge Infrastructure Mode”. The Access Point mode will act as “WDS AP” when connecting with the “Bridge Infrastructure mode”.

flowchart
graph LR
A["Laptop"] -->|Wireless Signal| B["AP Mode"]
B -->|Wireless Signal| C["AirMax DUO Lite"]
C -->|Wireless Signal| D["Client Infrastructure"]
D --> E["PC"]
D --> F["PC"]
D --> G["LAN"]
G --> H["Bridge Infrastructure"]
4.8.2 Repeater Mode
In Repeater mode, the AirMax DUO Lite functions as a repeater that extends the range of remote wireless LAN. The AirMax DUO Lite's repeater mode is a universal repeater, not WDS repeater. Because the radio is divided into client + AP mode, the Repeater mode will have less performance and distance.

4.8.3 WDS Bridge Mode
This mode is also known as “WDS Pure MAC mode”. When configured to operate in the Wireless Distribution System (WDS) Mode, the AIRMAX DUO LITE provides bridging functions with remote LAN networks in the WDS system. The system will support up to total of 8 bridges in a WDS network (by daisy chain). However, each bridge can only associate with maximum of 4 other bridges in the WDS configuration. This mode is best used when you want to connect LAN networks together wirelessly (for example, between office and warehouse). If you have more than 2 AP in WDS Bridges mode, please remember to turn on the “802.1d Spanning Tree” or “STP” option on to avoid network loop. This mode usually delivers faster performance than infrastructure mode.

flowchart
graph TD
A["Office LAN"] -->|802.1d STP| B["WDS Bridge"]
B -->|802.1d STP| C["Warehouse LAN"]
C -->|802.1d STP| D["Factory LAN"]
D -->|WDS Bridge| E["Office LAN"]
style A fill:#f9f,stroke:#333
style B fill:#ccf,stroke:#333
style C fill:#ccf,stroke:#333
style D fill:#ccf,stroke:#333
style E fill:#f9f,stroke:#333
4.8.4 Bridge Infrastructure Mode
This mode is also known as "WDS Station" or "Client mode with MAC address transparency". The Bridge Infrastructure mode can only connect with "Access Point" mode. 2 Bridge Infrastructure can not connect with each other. It works like client mode with MAC address transparency function. In another word, the MAC addresses of the PCs will be passed instead of the AP's wireless MAC address. If you require Bridge connection with WPA-PSK or WPA-PSK2 connection, please use this mode instead. However, this mode might not work with some APs. If it occurs, please use Client Infrastructure or WDS Bridge instead.

4.8.5 Client Infrastructure Mode
This mode is also known as “Client” mode. In Client Infrastructure mode, the AirMax DUO Lite acts as if it is a wireless adapter to connect with a remote Access Point. Users can attach a computer or a router to the LAN port of AirMax DUO Lite to get network access. This mode is often used by WISP on the subscriber’s side.

flowchart
graph LR
A["Client Infrastructure (Multi User)"] --> B["PC"]
C["Client Infrastructure (Single User)"] --> D["PC"]
B --> E["AP Mode"]
D --> E
E --> F["AirMax DUO Lite"]
style A fill:#f9f,stroke:#333
style C fill:#f9f,stroke:#333
style E fill:#ccf,stroke:#333
style F fill:#ccf,stroke:#333
For AirMax DUO Lite, there are 2 types of Client Infrastructure Mode: “Single User” and “Multiple-User”. When “Single User” is chosen, only one PC that is connected behind the AirMax can get IP address from remote DHCP server. When “multiple user” is chosen, more than one PC can get IP address from remote DHCP server. However, in Client Infrastructure mode, the AirMax DUO Lite always sends the AirMax DUO Lite’s wireless MAC address to the remote AP. If you want the AirMax DUO Lite to send the PC’s MAC addresses to remote AP, then you should use the “Bridge Infrastructure” mode. Bridge Infrastructure provides the “Mac Address Transparency” functionality.

flowchart
graph LR
A["AP"] -->|Signal| B["DHCP Server"]
C["Client Mode"] --> D["PC"]
C --> E["PC"]

4.8.6 Client Ad Hoc Mode
In Client Ad Hoc mode, AirMax DUO Lite can connect to other wireless adapters without access point. Users can attach a computer or a router to the LAN port of AirMax DUO Lite to get network access.

4.8.7 WISP Router Mode
In WISP Router Mode, AIRMAX DUO LITE connects to the remote Access Point as in Client Infrastructure Mode. On the LAN side, it acts like a wired router for IP sharing function. This mode is best used for IP sharing application for WISP subscribers. In this mode, the WAN is the wireless client side; the LAN is the wired side.

In AP Router Mode, the AirMax DUO Lite behaves like a wireless router. The LAN port of the AirMax DUO Lite will become WAN port. The wireless network of AirMax DUO Lite becomes the LAN side. Please note when this mode is used, the only way to manage the AirMax DUO Lite is through the wireless side unless remote management is opened.

flowchart
graph TD
A["Client AP"] -->|Wireless Signal| B["AP Router"]
B --> C["Internet"]
D["Laptop"] -->|Wireless Signal| B
E["Computer"] -->|Wireless Signal| B
5
System Configuration
In this chapter, we will explain about System Configurations in web management interface. Please be sure to read through Chapter 3's "Introduction to Web Management" and "Initial Configurations" first.
5.1 System Configuration
When you click on the "System Configuration" menu on the top menu bar, the following screen will appear. The system configuration includes all non-wireless settings. We will explain their functions here.
5.1.1 Device IP Settings
System Configurations>> Device IP Settings
The Device IP Settings screen allows you to configure the IP address and subnet of the device. Although you can rely on a DHCP server to assign an IP address to the AirMax DUO Lite automatically, it is recommended that you configure a static IP address manually in most applications.

■ Assign Static IP to the Device
If you choose to assign the IP address manually, enable the checkbox of "Assign static IP to this device" and then fill in the following fields
- IP Address and IP Subnet Mask: Default values are 192.168.1.1 and 255.255.255.0 respectively. It is important to note that there are similar addresses falling in the standard private IP address range and it is an essential security feature of the device. Because of this private IP address, the device can no longer be accessed (seen) from the Internet.
• Gateway IP Address: Enter the IP address of your default gateway. - DNS Server: The Domain Name System (DNS) is a server on the Internet that translates logical names such as “www.yahoo.com” to IP addresses like 66.218.71.80. In order to do this, a query is made by the requesting device to a DNS server to provide the necessary information. If your system administrator requires you to manually enter the DNS Server addresses, you should enter them here.
- Click APPLY to go to the next screen.
■ Use DHCP Client Protocol to Get IP automatically
If you choose to use a DHCP Server to acquire an IP address for the AIRMAX DUO LITE automatically, enable the check box "Use the DHCP client protocol to automatically get the IP address for this device". Then click "Next" to go to the next screen. As a reminder, you might lose the IP address of AirMax DUO Lite when IP is assigned dynamically.
5.1.2 Time Settings
System Configuration ->Time Settings
It is important that you set the date and time for your AirMax DUO Lite so that the system log will record the correct date and time information. We recommend you choose “Enable NTP” so the time will be keep even after reboot. If your AirMax DUO Lite is not connected to Internet, please enter the time manually. Please remember to select your local time zone and click “Apply” to finish.

5.1.3 Password Settings
System Configuration ->Password Settings
To change password, please go to "System Configuration" -> "Password Settings" menu.

5.1.4 System Management
System Configuration -> System Management
In this page, administrator can change the management parameters and disable/enable management interface.

■ System Administration
- HTTP Port No: The default port for HTTP is Port 80, you can change the value here
- Timeout: The default management timeout is 10 minutes. After timeout, the AirMax DUO Lite will ask you to login again. You can change the timeout value here.
- Web Server Access: You can enable or disable HTTP service from WAN side
- Response to WAN ping: You can disable or enable whether AirMax DUO Lite will response to PING command.


NOTE: Syslog is a standard for logging system events (IETF RFC-3164). System event messages generated by the wireless access point will be sent to a Syslog daemon running on a server identified by this IP address.
Help
■ UPnP: Click here to enable UPnP. It is recommended not to open UPnP for security reason.
■ Syslog: Syslog is an IETF (Internet Engineering Task Force - the Internet standards body)-conformant standard for logging system events (RFC-3164). When the AirMax DUO Lite encounters an error or warning condition (ie., a log-in attempt with an invalid password), it will create a log in the system log table. To be able to remotely view such system log events, you need to check the Enable Syslog box and configure the IP address of a Syslog daemon. When doing so, the AirMax DUO Lite will send logged events over network to the daemon for future reviewing.
■ Syslog server IP address: System event messages generated by the wireless access point will be sent to a Syslog daemon running on a server identified by this IP address.
5.1.5 SNMP Settings
System Configuration -> SNMP Settings
This screen allows you to configure SNMP parameters including the system name, the location and contact information.

■ System Name: A name that you assign to your AirMax DUO Lite. It is an alphanumeric string of up to 30 characters.
■ System Location: Enter a system location.
■ System Contact: Contact information for the system administrator responsible for managing the AirMax DUO Lite. It is an alphanumeric string of up to 60 characters.
■ Community String for Read: If you intend the router to be managed from a remote SNMP management station, you need to configure a read-only “community string” for read-only operation. The community string is an alphanumeric string of up to 15 characters.
■ Community String for Write: For read-write operation, you need to configure a write “community string”.
- Assign a specific name and IP address for your SNMP trap manager:
A trap manager is a remote SNMP management station where special SNMP trap messages are generated (by the router) and sent to in the network.
You can define trap managers in the system.
You can add a trap manager by entering a name, an IP address, followed by pressing the ADD button.

You can delete a trap manager by selecting the corresponding entry and press the DELETE SELECTED button.
To enable a trap manager, check the Enable box in the corresponding entry; to disable it, un-check the Enable box.
5.1.6 Ping Watchdog
System Configuration -> Ping Watchdog
The Ping Watchdog will ping remote IP addresses to make sure the wireless connection is active, if not, it can either reconnect or reboot. To prevent the AP from power recycling, the PING watchdog will start 10 minutes after power up to prevent power recycle problem.

■ PING Frequency means: "How often the CPE will PING". For example, it will PING once every "1" minute.
■ Fail Tries means "How many times fails before the CPE will judge the PING failed". For example "2" means the CPE will reconnect if the PING doesn't respond for 2 times.
When you set the Ping Frequency to every "2" minutes and Fail Tries to "2". It means the CPE will ping every 2 minutes, after the second failure, it will reconnect.
■ Actions:
- Reconnect: the AirMax DUO Lite will attempt to re-establish the connection. It is recommend to use this option for WDS Bridge connection.
• Power Reboot: the AirMax DUO Lite will do a power recycle.
5.1.7 Firmware Upgrade
System Configuration -> Firmware Upgrade
You can upgrade the firmware of your AirMax DUO Lite (the software that controls your AIRMAX DUO LITE's operation). Normally, this is done when a new version of firmware offers new features that you want, or solves problems that you have encountered with the current version.

■ Upgrade Firmware:
To update the AirMax DUO Lite firmware, first download the firmware from AirLive web site to your local disk, and then from the above screen enter the path and filename of the firmware file (or click Browse to locate the firmware file). Next, Click the Upgrade button to start.
The new firmware will be loaded to your AirMax DUO Lite. After a message appears telling you that the operation is completed, you need to reset the system to have the new firmware take effect.

Do not power off the device while upgrading the firmware. It is recommended that you do not upgrade your AirMax DUO Lite unless the new firmware has new features you need or if it has a fix to a problem that you've encountered.
5.1.8 Configuration Save and Restore
System Configuration -> Configuration Save and Restore
You can save system configuration settings to a file, and later download it back to the AirMax DUO Lite by following the steps.
Step 1 Select Configuration Save and Restore from the System Configurations menu.

Step 2 Enter the path of the configuration file to save-to/restore-from (or click the Browse button to locate the configuration file). Then click the SAVE TO FILE button to save the current configuration into the specified file, or click the RESTORE FROM FILE button to restore the system configuration from the specified file.
5.1.9 Factory Default
System Configuration -> Factory Default
You can reset the configuration of your AirMax DUO Lite to the factory default settings.
Step 1 Select Factory Default from the System Configuration menu.
Step 2 Click "YES" to go ahead and restore the configuration to the factory default.

5.1.10 Reboot System
System Configuration -> Reboot System
You can reboot AirMax DUO Lite in this page.

5.1.11 AirMax DUO Lite Emergency Recovery
This section guides to recover your AirMax DUO Lite system if the firmware crashed.
- Download the tftp server to your PC. In the following example, we use tftpd32: http://tftpd32.jounin.net/tftpd32_download.html.
- Copy the tftpd32.exe of the downloaded file to C:.
- Change the IP address of your PC to 192.168.1.254 / 255.255.255.0
- Copy the AirMax DUO Lite firmware to C:\ and rename the firmware to "zImage". Note that the name must be zImage and no extension.
- Connect AirMax DUO Lite and PC with an Ethernet cable.
- Run the tftpd32.exe. Note that the IP address must be 192.168.1.254.

- Power on AirMax DUO Lite, the "Status" LED will light on after 3 seconds.
- Push the "Reset" button until the "Status" LED off and on again and release the "Reset" button.
- If the above process success, the AirMax DUO Lite LAN LED keep flashing and the tftp serve shows file download information.
- It takes around 5 minutes to download firmware and around 5 minutes to update the firmware.
- After a successful recovery, the AirMax DUO Lite boots up automatically.
- Try access 192.168.1.1, or the IP address you had changed before.
Repeat the processes again if failed.
6
Device Status & Tools
6.1 Device Status
When you click on the "Device Status" on the top menu bar, the sub menu for device status will appear.
6.1.1 Device Information
This page shows the general information about AirMax DUO Lite such as firmware version, device IP/MAC, WAN IP/MAC (in router modes), Gateway IP (in router modes), DNS IP...etc. Below are some additional explanations on some status information of this page:
■ Firmware version: In general, AirLive will refer to its firmware as exx (such as e2) version on the release note
■ Device IP: It shows LAN IP.
■ Device MAC: It shows MAC address of LAN.
■ Wan IP: It shows WAN IP.
■ Wan MAC: It shows MAC address of WAN.
■ Gateway IP: It shows IP address of Gateway.
■ DNS IP: It shows IP address of DNS.
■ Wireless MAC: This is the wireless MAC address (BSSID) of this AiMax DUO. This is the address to enter on the remote WDS Bridge for the WDS link.
■ Uptime: This is the time that the AirMax DUO Lite has been running since last power up
■ CPU Loading: Indicates the current CPU loading status
■ Memory Information: Indicates the current memory status

bar
| Category | Value | | :--- | :--- | | Firmware Version: | 2.00e02 | | Device IP: | 192.168.1.1 | | Device MAC: | 00.4F:69:70:34:F7 | | Gateway IP: | 192.168.1.254 | | Primary DNS IP: | 0.0.0.0 | | Secondary DNS IP: | 0.0.0.0 | | Wireless1 MAC: | 00.4F:69:70:34:F4 | | Wireless2 MAC: | 00.4F:69:70:34:F5 | | Uptime: (dd:hh:mm) | 0.1.46 | | CPU Loading: | 1% | | Memory Information | Percentage (%) | | :--- | :--- | | Total Available: | 87% | | Used: | 51% | | Free: | 49% | | Buffers: | 18% | | Cached: | 46% | | ARP Table | IP Address | MAC Address | Interface | | :--- | :--- | :--- | :--- | | IP Address | 192.168.1.11 | 00-23-8B-FE-09-3B | lan | | MAC Address | | | | | Interface | | | | Help6.1.2 Wireless Information
This page shows the information about wireless status such as current operation mode, wireless traffic, error packets, RSSI, Remote device's BSSD, connecting State, channel, and encryption used.

6.1.3 LAN Information
This page shows the information about LAN port of the AirMax DUO Lite. It includes the type of LAN port authentication used and the IP address information about the LAN port.

6.1.4 Internet Information
This page shows the information about WAN port of the AirMax DUO Lite. It includes the type of WAN port authentication used and the IP address information about the WAN port.

6.1.5 Wireless Client Table
This function is available in AP mode and AP Router mode only. It displays the information about wireless clients that are associated with AirMax DUO Lite. It includes signal strength, TX and RX data rate, MAC address, and the state.

6.1.6 System Log
The System Log displays the system activities, login, and system error report. If you need to report a problem to Air Live, please be sure to send us the System Log information also.
![AirLive® www.airlive.com AirMax DUO 802.11 a/b/g Dual Radio Base Station Operation Mode | System Configuration | Tools | Device Status | Logout | English Device Information Wireless Information LAN Information Internet Information Wireless Client Table System Log System Log Jan 1 00:00:53 AirMax DUO passwd[589]: password for 'root' changed by user 'ro ot" Jan 1 09:01:01 AirMax DUO http:Login into the system(192.168.1.11) Help](/content/2026/05/1084203/images/faf9644155b207beaafe401ba0bfd309aba02c72b8d5ec32b0aa1ec1a343b34d.jpg)
6.1.7 Network Ping
Network Ping tool allows user to test whether a particular host is reachable across an Internet Protocol (IP) network.

6.1.8 Network Traceroute
Network Traceroute tool is used to show the route taken by packets across an IP network.

7
Command Line Interface
In this chapter, we will explain commands that are available through Telnet or SSH interface. We will provide descriptions for the commands, example settings and the AirMax DUO Lite's response. The purpose for this chapter is to introduce available CLI commands only. For detail descriptions on the concept and application of the settings, please refer to chapter 4 and chapter 5.
Before reading this chapter, please go through Section 3.3 of Chapter 3. It contains information on how to login Telnet or SSH/SSH2 interface. For quick reference, the login and password is as bellowed:
Telnet
- Password: airlive
■ SSH/SSH2
- First login
Login: root
Password:
- Second login:
Password: airlive
When you change AirMax DUO Lite's password, it will change the second login's password only.
You can get a list of available commands by typing "help" at the command prompt.

You must remember to save the configurations by typing "save config" at the command prompt after making changes, otherwise, the configuration will be lost after reboot.
7.1 System Commands

flowchart
graph TD
A["■ ping <IP address>"] --> B["This is the command"]
C["□ Purpose: to ping a remote IP address"] --> D["Here explains the usage of the command"]
E["□ Example: Command> ping 192.168.1.1\nPING 192.168.1.1 (192.168.1.1): 56 data bytes\n64 bytes from 192.168.1.1: icmp_seq=0 ttl=64 time=1.8 ms\n64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=1.0 ms"] --> F["Example command and response"]
■ change password
☐ Purpose: Change login password
Example:
Command> change password 123
password is set to: 123
■ ftptest
□ Purpose: Test if a SSID's connection is okay
Example:
Command> ftptest airlive 11a 40
Set SSID : airlive, mode = 11a, channel = 40 ok!
save config
☐ Purpose: save configuration file. Please remember to "save config" after making changes
Example:
Command> save config
None
clear config
☐ Purpose: Clear configuration to default
Example:
Command> clear config
Are you sure? (y/n): y
Write flash block [/dev/mtd3]
Write file is [/etc/defsysconfig.conf]
Rebooting...
■ webservice
☐ Purpose: Enable or Disable Web management interface on LAN or WAN
Example:
Command> webservice lan enable
webservice from Ian enable
site survey
Purpose: Site Survey display
Example:
Command> site survey
Please wait a moment for site survey...
ESSID MAC Address Conn Mode Channel Turbo Super XR WME Signal Strength(dbm) Security Network
| airlive | 00:4f:79:90:00:27 | A | 36 | - | --* | -49 | None | AP |
| airlive | 00:4f:69:52:a1:ca | A | 36 | - | --* | -61 | None | AP |
| airmax-ap | 00:4f:69:90:00:01 | A | 36 | - | --* | -56 | None | AP |
■ signal survey
☐ Purpose: Display continuous RSSI for the remote AP/Bridge
Example:
Command> signal survey 00-4f-69-52-a1-ed 36
| BSSID | Channel | Signal Strength(dbm) |
| 00-4F-69-52-A1-ED | 36 | -40 |
| BSSID | Channel | Signal Strength(dbm) |
| 00-4F-69-52-A1-ED | 36 | -40 |
| ... |
7.2 Debugging Commands
Those debugging commands are commands used for manufacturing testing process. If a z_debug command looks similar to a Set command, please use the Set command instead.
■ z_debug http logout
Purpose: log out HTTP
Example:
Command> z_debug http logout
■ z_debug signature
☐ Purpose: Enable or disable signature check on firmware
Example:
Command> z_debug signature disable
Are you sure? (y/n): y
Signature check is now DISABLED!!!
■ z_debug add ssid
☐ Purpose: This command will replace the default ssid with the new one. It will not add an additional SSID. We recommend to use the following commands instead:
■ add ssid
■ set ssid
Example:
Command> z_debug add ssid air1
■ z_debug reboot
☐ Purpose: reboot your AirMax DUO Lite
Example:
Command> z_debug reboot
Rebooting...
■ z_debug set port radio1 11a
☐ Purpose: Set SSID and Channel. We recommend using set commands instead;
■ set ssid
■ set rate mode
Example:
Command> z_debug set port radio1 11a air2 64
7.3 Show Commands
Show Commands are command that show the settings and status of AirMax DUO Lite
■ show arp table
Purpose: Show ARP Table
Example:
Command> show arp table
IP address
Flags
HWaddress
Device
192.168.1.100
C
00:1D:60:5E:AE:A0
lan
show http
☐ Purpose: Show HTTP service settings
Example:
Command> show http
HTTP service port: 80
HTTP session timeout: 10 minutes
■ show upnp
☐ Purpose: Show UPnP information
Example:
Command> show upnp
UPnP is disabled
show mac
☐ Purpose: show the MAC address table in MAC filter mode. This might change to show the wireless MAC address of AirMax DUO Lite in future firmware release
Example:
Command> show mac
Filter Name
MAC address
ailrive
00-4f-62-24-12-34
show mac filter
Purpose: show mac address table in the Access Control List
Example:
Command> show mac filter
Filter Name
MAC address
hello
00-4f-62-24-12-34
airlive
00-4f-62-24-11-11
show mac filter mode
Purpose: Show whether the current MAC address is enable or not
Example:
Command> show mac filter mode
MAC filter mode: disable
show mac filter
Purpose: show mac filter status with the filter name
Example:
Command> show mac filter hello
Filter Name
MAC address
hello
00-4f-62-24-12-34
show community string read
Purpose: Show SNMP community string
Example:
Command> show community string read
SNMP Community String (read-only): public
■ show snmp
☐ Purpose: Show whether SNMP is enable or disabled
Example:
Command> show snmp
SNMP is enabled
■ show trap manager
☐ Purpose: Show SNMP Trap manager status
Example:
Command> show trap manager
Trap Manager IP Address Status
ailrive 192.168.1.123 enabled
■ show trap manager
☐ Purpose: Show SNMP Trap manager status with the assigned name
Example:
Command> show trap manager airlive
Trap Manager IP Address Status
ailrive 192.168.1.123 enabled
■ show radius server
☐ Purpose: Show radius server settings
Example:
Command> show radius server
RADIUS Server State IP/Port
Primary Disabled 0.0.0.0/1812
Secondary Disabled 0.0.0.0/1812
RADIUS Server reattempt: 60 seconds
■ show radius server
☐ Purpose: Show settings of primary or secondary radius server
Example:
Command> show radius server primary
RADIUS Server: primary
State: Disabled
Server IP: 0.0.0.0
Port Number: 1812
Shared Secret:
■ show log level
☐ Purpose: show log level
Example:
Command> show log level
Log level is 8
■ show telnet / system
☐ Purpose: show telnet management information and system status
Example:
Command> show telnet
Telnet session timeout: 0 minutes
Telnet port number: 23
Telnet state: enable
Command> show system
System Name: AirMax DUO Lite
S/W Version: 1.00e09a
H/W Version: S0A
System LAN MAC: 00-4F-79-90-00-16
Wireless MAC: 00-4F-79-90-00-15
WMAC-0: 00-4F-79-90-00-15
■ show snmp statistics
☐ Purpose: Show SNMP statistics
Example:
Command> show snmp statistics
Timeout: No Response from 192.168.1.1
| Received | Transmitted | |
| Total Packets | 1 | 1 |
| Request Variables | 11 | |
| SET Variables | 0 | |
| GET Requests | 0 | |
| GETNEXT Requests | 15 | |
| GET-RESPONSEs | 0 | 25 |
| SET Requests | 0 | |
| Errors: | ||
| Bad Versions | 0 | |
| Bad Community Uses: | 0 | |
| ASN1 Parse Errors | 0 | |
| Packet Too Long | 0 | |
| NO-SUCH-NAME Errors | 0 | |
| BAD-VALUE Errors | 0 | |
| READ-ONLY Errors | 0 | |
| GENERAL-ERR Errors | 0 |
show rssi
☐ Purpose: Show RSSI signal strength
Example:
Command> show rssi
Please wait a moment for site survey...
| ESSID | MAC Address | Signal Strength(dbm) |
| airlive | 0:4f:69:52:a1:ca | -59 |
| airmax-ap | 00:4f:69:90:00:01 | -47 |
■ show mode
Purpose: Show what operation is AirMax DUO Lite currently set to
Example:
Command> show mode
operation mode: access point
■ show wireless setting
☐ Purpose: Show wireless settings
Example:
Command> show wireless setting
Radio[1] operation mode: access point
ssid name : air2
wireless state : enable
ssid broadcast : enable
radio[1] mode : 11a
radio[1] channel : 64
■ show wireless security
☐ Purpose: Show current wireless security policy
Example:
Command> show wireless security
Radio1 security policy: none
■ show
☐ Purpose: Show LAN or WAN port IP settings
Example:
Command> show lan settings
Lan ip type : static
Lan ip address : 192.168.1.1
Lan ip netmask : 255.255.255.0
Lan ip gateway : 192.168.1.254
Lan ip dnsserv : 0.0.0.0
show firmware version show vlan ssid list show wds settings show advanced wireless show syslogd
■ show antenna
☐ Purpose: Check antenna polarization
Example:
Command> show antenna
Antenna setting is Vertical;
■ show ratemode
☐ Purpose: Show whether the AirMax is using 5MHz, 10MHz, or 20MHz channel width
Example: Command> show ratemode Ratemode is Full(20Mhz);
■ show noise immunity
☐ Purpose: Show the noise immunity setting
Example:
Command> show noise immunity
Noise immunity is enable
7.4 Set Commands
The Set Commands are to make changes to the AirMax DUO Lite's settings
■ set http timeout
☐ Purpose: Set the timeout value for HTTP management
Example:
Command> set http timeout 10
HTTP timeout: 10 minutes
■ set system
Purpose: Set the system's location and contact info
Example:
Command> set system location 60
System Location: 60
■ set system name
Purpose: Set system's name
Example:
Command> set system name airlive
System Name: airlive
■ set mac filter mode
☐ Purpose: Set MAC filter mode or disable MAC filtering.
Example:
Command> set mac filter mode disabled
mac filter mode is set to disabled
■ set community string
Purpose: Set SNMP community string
Example:
Command> set community string write test
community string for write: test
Command> set community string read test
community string for read: test
■ set radius server reattempt
☐ Purpose: set radius server reattempt interval in minutes
Example:
Command> set radius server reattempt 20
/etc/wlan/ap_service: 17: uname: not found
killall: wpa_supplicant: no process killed
/etc/wlan/ap_service: 17: uname: not found
Using /lib/modules/2.4.25-LSDK-5.1.0.42/wlan/ath_hal.o
Using /lib/modules/2.4.25-LSDK-5.1.0.42/wlan/ath_rate_atheros.o
Using /lib/modules/2.4.25-LSDK-5.1.0.42/wlan/ath_dfs.o
Using /lib/modules/2.4.25-LSDK-5.1.0.42/wlan/ath_ahb.o
RTNETLINK answers: No such file or directory
RADIUS Server Reattempt Period: 20 Seconds
■ set telnet port
☐ Purpose: change the telnet port numer
Example:
Command> set telnet port 23
Changing telnet port may cause current telnet connections to be lost.
Are you sure? (y/n): y
Telnet port number: 23
■ set telnet timeout
Purpose: Set Telnet management timeout
Example:
Command> set telnet timeout 10
Changing telnet timeout may cause current telnet connections to be lost.
Are you sure? (y/n): y
Telnet session timeout: 10 minutes
■ set wmm qos
Purpose: Enable or Disable WMM QoS
Example:
Command> set wmm qos disable
set wmm qos disable successful!
■ set log level <1-7>
Purpose: Set the log level
Example:
Command> set log level 7
set log level 7 successful
■ set client isolation
☐ Purpose: Enable or Disable client isolation / privacy separator
Example:
Command> set client isolation disable
Set client isolation disable successful!
■ set operation mode
☐ Purpose: set or change operation mode
Example:
Command> set operation mode AP
Operation mode is already setting!
Command> set operation mode wds_bridge
System should be reboot...
Are you sure? (y/n): y
■ set
☐ Purpose: enable/disable ping response or web server on the lan/wan side
Example:
Command> set lan ping enable
set lan ping already enable
■ set lan ip
☐ Purpose: set LAN IP address such as IP, Subnet mask, gateway, and DNS server
Example:
Command> set lan ip 192.168.1.1 sm 255.255.255.0 gw 192.168.1.254 dns 168.95.1.1
killall: dnsmasq: no process killed
LAN IP address : 192.168.1.1
Netmask : 255.255.255.0
Gateway : 192.168.1.254
DNS server : 168.95.1.1
■ set
☐ Purpose: Enable or Disable the wireless interface
Example:
Command> set enable
Radio1 enabled
■ set ssid
☐ Purpose: Replace current main SSID name with a new one
Example:
Command> set ssid AirMax DUO Lite
■ set ssid remotessid
☐ Purpose: Set the remote SSID name for repeater mode
Example: Command> set ssid remotessid airlive2
■ set broadcast
Example: Command> set broadcast enable Radio1 broadcast enabled
- set radio mode
■ set channel
Example: Command> set channel 36 Radio1 channel: 36
■ set beacon interval
■ set rts threshold
■ set fragmentation
☐ Purpose: set fragmentation value. For explanation on advance wireless parameters, please refer to section 4.2.14
Example:
Command> set fragmentation 2346
Radio1 fragmentation: 2346
■ set dtim interval
☐ Purpose: To set dtim interval value. For explanation on advance wireless parameters, please refer to section 4.2.14
Example: Command> set dtim interval 1 Radio1 DTIM interval: 1
■ set user limitation
☐ Purpose: To set the user limit for wireless interface
Example: Command> set user limitation 100 Radio1 user limitation: 100
■ set age out time
☐ Purpose: To set the age timeout for wireless clients.
Example: Command> set age out time 5 Radio1 age out time: 5
■ set transmit power
☐ Purpose: To set the TX output power value of the radio
Example: Command> set transmit power 20 Radio1 transmit power: 20
■ set data rate
☐ Purpose: To set the date rate. For example, 54mbps, 36mbps....etc
Example: Command> set data rate 54 Radio1 data rate: 54
■ set acktimeout <11A>
Purpose: To set the ACK timeout value
Example: Command> set acktimeout 25 AckTimeOut for radio1: 11A=25
■ set vlan for ssid
Purpose: Enable VLAN function
Example: Command> set vlan for ssid enable
■ set diffserv marking
☐ Purpose: To enable diffserv marking function in multiple SSID & VLAN configuration.
Example: Command> set diffserv marking enable
■ set security
☐ Purpose: To remove security policy from a SSID
Example:
Command> set security airlive none
Set Radio1 no security!
■ set security
Purpose: To set the WEP security policy
Example: Command> set security AirMax DUO Lite wep 1 64 hex 1234567890 Radio1 authentication type : wep !
■ set security
☐ Purpose: to set the WPA or WPA2 security policy
Example:
Command> set security AirMax DUO Lite wpa2 tkip interval 300
Radio1 authentication type : wpa2 !
■ set security
☐ Purpose: to set the WPA-PSK or WPA2-PSK security policy
Example:
Command> set security AirMax DUO Lite wpa2-psk aes interval 300 12345678
Radio1 authentication type : wpa2-psk !
■ set antenna
☐ Purpose: To set the antenna to use horizontal, vertical, diversity polarizations.
Example:
Command> set antenna horizontal
Antenna setting is Horizontal
■ set ratemode
Purpose:
Example:
Command> set ratemode full
Rate mode is Full(20Mhz)
■ set noise immunity
☐ Purpose: To enable/disable the noise immunity level
Example:
Command> set noise immunity on
Noise immunity is enable
7.5 Enable/Disable Commands
Commands to enable or disable settings
■ ( enable/disable ):
Purpose: To enable or disable UPnP
Example:
Command>enable upnp
(Upnp)descDocName: BD.xml
UPnP Daemon: Initializing UPnP with descDocUrl=http://192.168.1.1:80/BD.xml
UPnP Daemon: ipaddress=192.168.1.1 port=80
UPnP Daemon: conf_dir_path=/var/upnp
Initializing UPnP SDK ...
UPnP SDK Successfully Initialized.
Setting the Web Server Root Directory to /var/upnp
Successfully set the Web Server Root Directory.
UpnpGetServerPort(): 49152
Registering the root device with descDocUrl http://192.168.1.1:49152/BD.xml
IGD root device successfully registered.
Advertisements Sent. Listening for requests ...
Command> disable upnp
Shutting down on signal 15...
UPnP is disabled
■
Purpose: To enable/disable SNMP
Example:
Command> enable snmp
SNMP is enabled
Command> disable snmp
SNMP is disabled
■
☐ Purpose: To enable or disable syslog
Example:
Command> enable syslogd
Invalid configuration specified.
Command> disable syslogd
Syslogd is disabled
■
☐ Purpose: To enable or disable primary/secondary radius server
Example:
Command> enable radius server primary Invalid configuration specified. Command> enable radius server secondary Invalid configuration specified.
7.6 Add/Delete Commands
Commands to add or delete settings
( add/delete ): add mac filter < Mnemonics Name>
☐ Purpose: to add an entry to the MAC address filter
Example:
Command> add mac filter aaa 00-4f-62-24-12-34
/etc/wlan/ap_service: 17: uname: not found
killall: wpa_supplicant: no process killed
/etc/wlan/ap_service: 17: uname: not found
Using /lib/modules/2.4.25-LSDK-5.1.0.42/wlan/ath_hal.o
Using /lib/modules/2.4.25-LSDK-5.1.0.42/wlan/ath_rate_atheros.o
Using /lib/modules/2.4.25-LSDK-5.1.0.42/wlan/ath_dfs.o
Using /lib/modules/2.4.25-LSDK-5.1.0.42/wlan/ath_ahb.o
RTNETLINK answers: No such file or directory
RTNETLINK answers: No such file or directory
mac filter aaa(00-4F-62-24-12-34) is added
■ delete mac filter < Mnemonics Name>
☐ Purpose: to delete a mac filter entry
Example:
Command> delete mac filter aaa
/etc/wlan/ap_service: 17: uname: not found
killall: wpa_supplicant: no process killed
/etc/wlan/ap_service: 17: uname: not found
Using /lib/modules/2.4.25-LSDK-5.1.0.42/wlan/ath_hal.o
Using /lib/modules/2.4.25-LSDK-5.1.0.42/wlan/ath_rate_atheros.o
Using /lib/modules/2.4.25-LSDK-5.1.0.42/wlan/ath_dfs.o
Using /lib/modules/2.4.25-LSDK-5.1.0.42/wlan/ath_ahb.o
<mapping sub-ioctl turbo to cmd 0x8BE0-1>
<mapping sub-ioctl set_installmode to cmd 0x8BE0-75>
<mapping sub-ioctl set_threslower to cmd 0x8BE0-76>
<mapping sub-ioctl set_threslow to cmd 0x8BE0-77>
<mapping sub-ioctl set_thresbetter to cmd 0x8BE0-78>
<mapping sub-ioctl set_thresbest to cmd 0x8BE0-79>
<mapping sub-ioctl maccmd to cmd 0x8BE0-17>
<mapping sub-ioctl authmode to cmd 0x8BE0-3>
<mapping sub-ioctl cwmin to cmd 0x8BE3-1>
<mapping sub-ioctl cwmax to cmd 0x8BE3-2>
RTNETLINK answers: No such file or directory
RTNETLINK answers: No such file or directory
mac filter aaa is deleted
■ delete wds
☐ Purpose: To delete a WDS link
Example:
Command> delete wds bridge
delete wds
■ add radius server primary
☐ Purpose: to add a primary radius server
Example:
Command> add radius server primary enter server IP: 192.168.1.100 enter port number (1\~65535): 655
enter shared secret:
123
enable server (yes/no):
yes
/etc/wlan/ap_service: 17: uname: not found
killall: wpa_supplicant: no process killed
/etc/wlan/ap_service: 17: uname: not found
Using /lib/modules/2.4.25-LSDK-5.1.0.42/wlan/ath_hal.o
Using /lib/modules/2.4.25-LSDK-5.1.0.42/wlan/ath_rate_atheros.o
Using /lib/modules/2.4.25-LSDK-5.1.0.42/wlan/ath_dfs.o
Using /lib/modules/2.4.25-LSDK-5.1.0.42/wlan/ath_ahb.o
RTNETLINK answers: No such file or directory
RTNETLINK answers: No such file or directory
add radius server primary successfully
■ add radius server
☐ Purpose: to add a primary or secondary radius server
Example:
Command> add radius server secondary
enter server IP:
192.168.1.200
enter port number (1\~65535):
766
enter shared secret:
234
enable server (yes/no):
yes
/etc/wlan/ap_service: 17: uname: not found
killall: wpa_supplicant: no process killed
/etc/wlan/ap_service: 17: uname: not found
Using /lib/modules/2.4.25-LSDK-5.1.0.42/wlan/ath_hal.o
Using /lib/modules/2.4.25-LSDK-5.1.0.42/wlan/ath_rate_atheros.o
Using /lib/modules/2.4.25-LSDK-5.1.0.42/wlan/ath_dfs.o
Using /lib/modules/2.4.25-LSDK-5.1.0.42/wlan/ath_ahb.o
RTNETLINK answers: No such file or directory
RTNETLINK answers: No such file or directory
add radius server secondary successfully
■ add wds
☐ Purpose: to add a WDS Link
Example:
Command> add wds bridge 00-4f-60-52-12-34
add wds
■ add ssid
☐ Purpose: to add a new ssid (AP and AP Router mode) to the multiple SSID list.
Example:
Command> add ssid air03 broadcast enable
Add R1 ssid
8
Frequent Asked Questions
Question: When I try to configure AirMax DUO Lite, the following message pop-up saying there is already someone login in to the AirMax DUO Lite.
Another user is already logged on(IP address: 192.168.1.50), Try logging on later.
Answer: You can force another administrator to logout by typing "login.asp" on your browser. Then key-in the password again to enter the management interface.

Question: I heard AirMax DUO Lite can limit the bandwidth of BitTorrent and eDonkey traffic. But I don't see the option on the Bandwidth Control.
Answer: The option to limit bandwidth by application or port is available only on WISP router and AP Router modes.
Question: Where is the signal survey function that displays the RSSI value continuously?
Answer: The "Signal Survey" function is inside the Site Survey function. You can access from "Operation Mode -> Setup -> Site Survey" menu.

Question: When do I use Per-User Bandwidth Control by IP, MAC, or IP segment?
Answer: In general, IP address control limits the devices on the end node (i.e. PC and WISP router). MAC address control can limit the traffic of a AP/CPE in wireless client mode.
☐ IP address: When you want to limit the bandwidth of a single notebook computer, PC, or WISP router.
☐ MAC address: When you want to limit the bandwidth of a remote AP/CPE in Client mode. For example, another AirMax DUO Lite in client mode
IP Segment: When you want to limit the bandwidth of an entire IP range. For example, all the PCs using the DHCP server to get IP addresses.
Question: When I use "Site Survey", why does the RSSI LED goes off?
Answer: When you click on the Site Survey, the AirMax DUO Lite thinks you are trying to choose a new network to associate. Therefore, it will disconnect from current connection and wait until you establish a new connection. If you require seeing the wireless link quality after connection is established, please go to “Device Status->Wireless” menu to see the “RSSI” value.
9
Specifications
The specification of AirMax DUO Lite is subject to change without notice. Please use the information with caution.
Hardware
■ 220MHz Atheros CPU
■ High power design, 23dBm average power, to extend the wireless range
■ Dual wireless interface 11a, 11a/b/g + 11a, operation simultaneously.
■ Super A/G mode support (Atheros Proprietary)
■ RoHS compliant
■ IEEE 802.3af (PoE) compliance
■ 8MB Flash, 32MB SDRAM
■ PoE support by one LAN port
IP-65 Housing
Antenna
■ 2 x N-Type antenna connectors
Frequency Range
■ WLAN1(Radio 1)
● 802.11a : 5.15 to 5.825 GHz
■ WLAN2 (Radio 2)
● 802.11b/g : 2.412 to 2.472 GHz
● 802.11a : 5.15 to 5.825 GHz
Frequency Band
■ 5.15 to 5.25GHz: U-NII Low and ETSI Band1
■ 5.25 to 5.35GHz: U-NII Mid and ETSI Band2
■ 5.47 to 5.725GHz: U-NII World Wide and ETSI Band3
■ 5.745 to 5.825GHz, U-NII Upper Band
Frequency Channel
■ WLAN1(Radio 1)
802.11a
◆ USA (FCC) : 12
◆ Europe (ETSI) : 19
■ WLAN2(Radio 2)
- 802.11b/g
◆ USA (FCC) : 11
◆ Europe (ETSI) : 13
802.11a
◆ USA (FCC) : 12
◆ Europe (ETSI) : 19
Power Supply
■ 48V/0.4A Power Over Ethernet Adapter
Modulation Technology
■ IEEE802.11a 5GHz OFDM
■ IEEE802.11b 2.4GHz CCK
■ IEEE802.11g 2.4GHz OFDM
■ Atheros Proprietary Super A/G mode 802.11a Orthogonal
Wireless transfer Data Rate with Automatic Fallback
■ 802.11b: 1, 2, 5.5, 11Mbps
■ 802.11g: 1, 2, 5.5, 11, 6, 9, 12, 18, 24, 36, 48, 54Mbps
■ 802.11a: 6, 9, 12, 18, 24, 36, 48, 54Mbps
Supported WLAN Mode
■ 11a mode
■ SuperA without Turbo
■ SuperA with Dynamic Turbo
■ SuperA with Static Turbo
Output Power
| 802.11a 802.11g | |
| 54 Mbps @ 17dBm | 54 Mbps @ 19dBm |
| 48 Mbps @ 18dBm | 48 Mbps @ 20dBm |
| 36 Mbps @ 19 dBm | 36 Mbps @ 21 dBm |
| 6, 9, 12, 18, 24 Mbps @ 23 dBm | 6, 9, 12, 18, 24 Mbps @ 23 dBm |
RSSI
| 802.11a 802.11g | |
| 6Mbps @ -90 dBm | 6Mbps @ -89 dBm |
| 9Mbps @ -89 dBm | 9Mbps @ -88 dBm |
12Mbps @ -88 dBm
18Mbps @ -86 dBm
24Mbps @ -82 dBm
36Mbps @ -79 dBm
48Mbps @ -73 dBm
54Mbps @ -71 dBm
12Mbps @ -88 dBm
18Mbps @ -86 dBm
24Mbps @ -82 dBm
36Mbps @ -79 dBm
48Mbps @ -75 dBm
54Mbps @ -73 dBm
Software
■ Wi-Fi, WPA compatible interoperability
■ Support WDS Bridge Mode, Client Mode, AP Mode on interface under each predefined operational mode
■ Client Isolation supported
■ SNMP v1/v2 support
■ Support adjustable output power
■ ACK Timeout setting
■ User Limitation (Static Load Balancing)
■ Multiple SSID, VLAN, QoSWPA with PSK/TKIP/AES support ,WPA2 support
■ 152-bit WEP support (Atheros Proprietary)
■ Super A/G mode support (Atheros Proprietary)
■ Bootloader Protection and Emergency Firmware Upload Code in bootloader
■ Radius Support
■ HTB QoS
■ P2P Bandwidth Control
10
Wireless Network Glossary
The wireless network glossary contains explanation or information about common terms used in wireless networking products. Some of information in this glossary might be outdated, please use with caution.
802.11a
An IEEE specification for wireless networking that operates in the 5 GHz frequency range (5.15 GHz to 5.850 GHz) with a maximum of 54 Mbps data transfer rate. The 5 GHz frequency band is not as crowded as the 2.4 GHz band. In addition, the 802.11a have 12 non-overlapping channels, comparing to 802.11b/g's 3 non-overlapping channels. This means the possibility to build larger non-interfering networks. However, the 802.11a deliver shorter distance at the same output power when comparing to 802.11g.
802.3ad
802.3ad is an IEEE standard for bonding or aggregating multiple Ethernet ports into one virtual port (also known as trunking) to increase the bandwidth.
802.3af
This is the PoE (Power over Ethernet) standard by IEEE committee. 802.3af uses 48V POE standard that can deliver up to 100 meter distance over Ethernet cable.
802.11b
International standard for wireless networking that operates in the 2.4 GHz frequency band (2.4 GHz to 2.4835 GHz) and provides a throughput up to 11 Mbps.
802.1d STP
Spanning Tree Protocol. It is an algorithm to prevent network from forming. The STP protocol allows network to provide a redundant link in the event of a link failure. It is advised to turn on this option for multi-link bridge network.
802.11d
Also known as “Global Roaming”. 802.11d is a standard for use in countries where systems using other standards in the 802.11 family are not allowed to operate.
802.11e
The IEEE QoS standard for prioritizing traffic of the VoIP and multimedia applications. The WMM is based on a subset of the 802.11e.
802.11g
A standard provides a throughput up to 54 Mbps using OFDM technology. It also operates in the 2.4 GHz frequency band as 802.11b. 802.11g devices are backward compatible with 802.11b devices.
802.11h
This IEEE standard defines the TPC (transmission power control) and DFS(dynamic frequency selection) required to operate WiFi devices in 5GHz for EU.
802.11i
The IEEE standard for wireless security. 802.11i standard includes TKIP, CCMP, and AES encryption to improve wireless security. It is also known as WPA2.
802.1Q Tag VLAN
In 802.1Q VLAN, the VLAN information is written into the Ethernet packet itself. Each packet carries a VLAN ID(called Tag) as it traveled across the network. Therefore, the VLAN configuration can be configured across multiple switches. In 802.1Q spec, possible 4096 VLAN ID can be created. Although for some devices, they can only view in frames of 256 ID at a time.
802.1x
802.1x is a security standard for wired and wireless LANs. In the 802.1x parlance, there are usually supplicants (client), authenticator (switch or AP), and authentication server (radius server) in the network. When a supplicants request a service, the authenticator will pass the request and wait for the authentication server to grant access and register accounting. The 802.1x is the most widely used method of authentication by WISP.
Adhoc
A Peer-to-Peer wireless network. An Adhoc wireless network do not use wireless AP or router as the central hub of the network. Instead, wireless client are connected directly to each other. The disadvantage of Adhoc network is the lack of wired interface to Internet connections. It is not recommended for network more than 2 nodes.
Access Point (AP)
The central hub of a wireless LAN network. Access Points have one or more Ethernet ports that can connect devices (such as Internet connection) for sharing. Multi-function Access Point can also function as an Ethernet client, wireless bridge, or repeat signals from other AP. Access Points typically have more wireless functions comparing to wireless routers.
ACK Timeout
Acknowledgement Timeout Windows. When a packet is sent out from one wireless station to the other, it will waits for an Acknowledgement frame from the remote station. The station will only wait for a certain amount of time; this time is called the ACK timeout. If the ACK is NOT received within that timeout period then the packet will be re-transmitted resulting in reduced throughput. If the ACK setting is too high then throughput will be lost due to waiting for the Ack Window to timeout on lost packets. If the ACK setting is too low then the ACK window will have expired and the returning packet will be dropped, greatly lowering throughput. By having the ability to adjust the ACK setting we can effectively optimize the throughput over long distance links. This is especially true for 802.11a and 802.11g networks. Setting the correct ACK timeout value needs to consider 3 factors: distance, AP response time, and interference. The AirMax DUO Lite provides ACK adjustment capability in form of either distance or direct input. When you enter the distance parameter, the AirMax DUO Lite will automatically calculate the correct ACK timeout value.
Bandwidth Management
Bandwidth Management controls the transmission speed of a port, user, IP address, and application. Router can use bandwidth control to limit the Internet connection speed of individual IP or Application. It can also guarantee the speed of certain special application or privileged IP address - a crucial feature of QoS (Quality of Service) function. The AirMax DUO Lite's features both "Per-user Bandwidth Control" and "Total Bandwidth Control". "Per-user Bandwidth Control" allow administrator to define the maximum bandwidth of each user by IP, IP Group, or MAC address. Total Bandwidth defines the maximum bandwidth of wireless or Ethernet interface.
Bootloader
Bootloader is the under layering program that will start at the power-up before the device loads firmware. It is similar to BIOS on a personal computer. When a firmware crashed, you might be able to recover your device from bootloader.
Bridge
A product that connects 2 different networks that uses the same protocol. Wireless bridges are commonly used to link network across remote buildings. For wireless application, there are 2 types of Bridges. WDS Bridge can be used in Point-to-Point or Point-to-Multipoint topology. Bridge Infrastructure works with AP mode to form a star topology.
Cable and Connector Loss
During wireless design and deployment, it is important to factor in the cable and connector loss. Cable and connector loss will reduce the output power and receiver sensitivity of the radio at connector end. The longer the cable length is, the more the cable loss. Cable loss should be subtracted from the total output power during distance calculation. For example, if the cable and connector loss is 3dBm and the output power is 20dBm; the output power at the cable end is only 17dBm.
Client
Client means a network device or utility that receives service from host or server. A client device means end user device such as wireless cards or wireless CPE.
CPE Devices
CPE stands for Customer Premises Equipment. A CPE is a device installed on the end user's side to receive network services. For example, on an ADSL network, the ADSL modem/router on the subscriber's home is the CPE device. Wireless CPE means a complete Wireless (usually an AP with built-in Antenna) that receive wireless broadband access from the WISP. The opposite of CPE is CO.
CTS
Clear To Send. A signal sent by a device to indicate that it is ready to receive data.
DDNS
Dynamic Domain Name System. An algorithm that allows the use of dynamic IP address for hosting Internet Server. A DDNS service provides each user account with a domain name. A router with DDNS capability has a built-in DDNS client that updates the IP address information to DDNS service provider whenever there is a change. Therefore, users can build website or other Internet servers even if they don't have fixed IP connection.
DHCP
Dynamic Hosting Configuration Protocol. A protocol that enables a server to dynamically assign IP addresses. When DHCP is used, whenever a computer logs onto the network, it automatically gets an IP address assigned to it by DHCP server. A DHCP server can either be a designated PC on the network or another network device, such as a router.
DMZ
Demilitarized Zone. When a router opens a DMZ port to an internal network device, it opens all the TCP/UDP service ports to this particular device. The feature is used commonly for setting up H.323 VoIP or Multi-Media servers.
DNS
A program that translates URLs to IP addresses by accessing a database maintained on a collection of Internet servers.
Domain Name
The unique name that identifies an Internet site. Domain Names always have 2 or more parts, separated by dots. In www.airlive.com, the "airlive.com" is the doman name.
DoS Attack
Denial of Service. A type of network attack that floods the network with useless traffic. Many DoS attacks, such as the Ping of Death and Teardrop attacks, exploit limitations in the TCP/IP protocols.
Encryption
Encoding data to prevent it from being read by unauthorized people. The common wireless encryption schemes are WEP, WPA, and WPA2.
ESSID (SSID)
The identification name of an 802.11 wireless network. Since wireless network has no physical boundary liked wired Ethernet network, wireless LAN needs an identifier to distinguish one network from the other. Wireless clients must know the SSID in order to associate with a WLAN network. Hide SSID feature disable SSID broadcast, so users must know the correct SSID in order to join a wireless network.
Firewall
A system that secures a network and prevents access by unauthorized users. Firewalls can be software, router, or gateway. Firewalls can prevent unrestricted access into a network, as well as restricting data from flowing out of a network.
Firmware
The program that runs inside embedded device such as router or AP. Many network devices are firmware upgradeable through web interface or utility program.
FTP
File Transfer Protocol. A standard protocol for sending files between computers over a TCP/IP network and the Internet.
Fragment Threshold
Frame Size larger than this will be divided into smaller fragment. If there are interferences in your area, lower this value can improve the performance. If there are not, keep this parameter at higher value. The default size is 2346. You can try 1500, 1000, or 500 when there are interference around your network.
Full Duplex
The ability of a networking device to receive and transmit data simultaneously. In wireless environment, this is usually done with 2 or more radios doing load balancing.
Gateway
In the global Internet network, the gateways are core routers that connect networks in different IP subnet together. In a LAN environment with an IP sharing router, the gateway is the router. In an office environment, gateway typically is a multi-function device that integrates NAT, firewall, bandwidth management, and other security functions.
Hotspot
A place where you can access Wi-Fi service. The term hotspot has two meanings in wireless deployment. One is the wireless infrastructure deployment; the other is the Internet access billing system. In a hotspot system, a service provider typically need an authentication and account system for billing purposes, and a wireless AP network to provide access for customers.
IGMP Snooping
Internet Group Management Protocol (IGMP) is a Layer 3 protocol to report IP multicast memberships to neighboring multicast switches and routers. IGMP snooping is a feature that allows an Ethernet switch to "listen in" on the IGMP conversation between hosts and routers. A switch support IGMP snooping has the possibility to avoid multicast traffic being treated as broadcast traffic; therefore, reducing the overall traffic on the network.
Infrastructure Mode
A wireless network that is built around one or more access points to provide wireless clients access to wired LAN / Internet service. The opposite of Infrastructure mode is Adhoc mode.
IP address
IP (Internet Protocol) is a layer-3 network protocol that is the basis of all Internet communication. An IP address is 32-bit number that identifies each sender or receiver of information that is sent across the Internet. An IP address has two parts: an identifier of a particular network on the Internet and an identifier of the particular device (which can be a server or a workstation) within that network. The new IPv6 specification supports 128-bit IP address format.
IPsec
IP Security. A set of protocols developed by the IETF to support secure exchange of packets at the IP layer. IPsec has been deployed widely to implement Virtual Private Networks (VPNs). IPsec supports two encryption modes: Transport and Tunnel.
Transport mode encrypts only the data of each packet, but leaves the header untouched. The more secure Tunnel mode encrypts both the header and the payload. On the receiving side, an IPSec-compliant device decrypts each packet.
LACP (802.3ad) Trunking
The 802.3ad Link Aggregation standard defines how to combine the several Ethernet ports into one high-bandwidth port to increase the transmission speed. It is also known as port trunking. Both devices must set the trunking feature to work.
MAC
Media Access Control. MAC address provides layer-2 identification for Networking Devices. Each Ethernet device has its own unique address. The first 6 digits are unique for each manufacturer. When a network device have MAC access control feature, only the devices with the approved MAC address can connect with the network.
Mbps
Megabits per Second. One million bits per second; a unit of measurement for data transmission
MESH
Mesh is an outdoor wireless technology that uses Spanning Tree Protocol (STP) and Wireless Distribution system to achieve self-forming, self-healing, and self-configuring outdoor network. MESH network are able to take the shortest path to a destination that does not have to be in the line of site.
MIMO
Multi In Multi Out. A Smart Antenna technology designed to increase the coverage and performance of a WLAN network. In a MIMO device, 2 or more antennas are used to increase the receiver sensitivity and to focus available power at intended Rx.
NAT
Network Address Translation. A network algorithm used by Routers to enables several PCs to share single IP address provided by the ISP. The IP that a router gets from the ISP side is called Real IP, the IP assigned to PC under the NAT environment is called Private IP.
Node
A network connection end point, typically a computer.
Packet
A unit of data sent over a network.
Passphrase
Used much like a password, a passphrase simplifies the WEP encryption process by automatically generating the WEP encryption keys for the company products.
POE
Power over Ethernet. A standard to deliver both power and data through one single Ethernet cable (UTP/STP). It allows network device to be installed far away from power source. A POE system typically compose of 2 main component: DC Injector (Base Unit) and Splitter(Terminal Unit). The DC injector combines the power and data, and the splitter separates the data and power back. A PoE Access Point or CPE has the splitter built-in to the device. The IEEE 802.3af is a POE spec that uses 48 volt to deliver power up to 100 meter distance.
Port
This word has 2 different meaning for networking.
- The hardware connection point on a computer or networking device used for plugging in a cable or an adapter.
- The virtual connection point through which a computer uses a specific application on a server.
PPPoE
Point-to- Point Protocol over Ethernet. PPPoE relies on two widely accepted standards: PPP and Ethernet. PPPoE is a specification for connecting the users on an Ethernet to the Internet through a common broadband medium, such as a single DSL line, wireless device or cable modem.
PPTP
Point-to-Point Tunneling Protocol: A VPN protocol developed by PPTP Forum. With PPTP, users can dial in to their corporate network via the Internet. If users require data encryption when using the Windows PPTP client, the remote VPN server must support MPPE (Microsoft Point-To-Point Encryption Protocol) encryption. PPTP is also used by some ISP for user authentication, particularly when pairing with legacy Alcatel / Thomson ADSL modem.
Preamble Type
Preamble are sent with each wireless packet transmit for transmission status. Use the long preamble type for better compatibility. Use the short preamble type for better performance
Rate Control
Ethernet switches' function to control the upstream and downstream speed of an individual port. Rate Control management uses "Flow Control" to limit the speed of a port. Therefore, the Ethernet adapter must also have the flow control enabled. One way to force the adapter's flow control on is to set a port to half-duplex mode.
RADIUS
Remote Authentication Dial-In User Service. An authentication and accounting system used by many Internet Service Providers (ISPs). When you dial in to the ISP, you must enter your username and password. This information is passed to a RADIUS server, which checks that the information is correct, and then authorizes access to the ISP system. Radius typically uses port 1812 and port 1813 for authentication and accounting port. Though not an official standard, the RADIUS specification is maintained by a working group of the IETF.
Receiver Sensitivity
Receiver sensitivity means how sensitive is the radio for receiving signal. In general; the slower the transmission speed, the more sensitive the radio is. The unit for Receiver Sensitivity is in dB; the lower the absolute value is, the higher the signal strength. For example, -50dB is higher than -80dB.
RJ-45
Standard connectors for Twisted Pair copper cable used in Ethernet networks. Although they look similar to standard RJ-11 telephone connectors, RJ-45 connectors can have up to eight wires, whereas telephone connectors have only four.
Router
An IP sharing router is a device that allows multiple PCs to share one single broadband connection using NAT technology. A wireless router is a device that combines the functions of wireless Access Point and the IP sharing router.
RSSI
Receiver Sensitivity Index. RSSI is a value to show the Receiver Sensitivity of the remote wireless device. In general, remote APs with stronger signal will display higher RSSI values. For RSSI value, the smaller the absolute value is, the stronger the signal. For example, "-50db" has stronger signal than "-80dB". For outdoor connection, signal stronger than -60dB is considered as a good connection.
RTS
Request To Send. A packet sent when a computer has data to transmit. The computer will wait for a CTS (Clear To Send) message before sending data.
RTS Threshold
RTS (Request to Send). The RTS/CTS(clear to send) packet will be send before a frame if the packet frame is larger than this value. Lower this value can improve the performance if there are many clients in your network. You can try 1500, 1000 or 500 when there are many clients in your AP's network.
SNMP
Simple Network Management Protocol. A set of protocols for managing complex networks. The SNMP network contains 3 key elements: managed devices, agents, and network-management systems (NMSs). Managed devices are network devices that content SNMP agents. SNMP agents are programs that reside SNMP capable device's firmware to provide SNMP configuration service. The NMS typically is a PC based software such as HP Openview that can view and manage SNMP network device remotely.
SSH
Developed by SSH Communications Security Ltd., Secure Shell is a program to log into another computer over a network, to execute commands in a remote machine, and to move files from one machine to another. It provides strong authentication and secure communications over insecure channels. It is a replacement for rlogin, rsh, rcp, and rdist.
SSL
Secure Sockets Layer. It is a popular encryption scheme used by many online retail and banking sites to protect the financial integrity of transactions. When an SSL session begins, the server sends its public key to the browser. The browser then sends a randomly generated secret key back to the server in order to have a secret key exchange for that session. SSL VPN is also known as Web VPN. The HTTPS and SSH management interface use SSL for data encryption.
Subnet Mask
An address code mask that determines the size of the network. An IP subnet are determined by performing a BIT-wise AND operation between the IP address and the subnet mask. By changing the subnet mask, you can change the scope and size of a network.
Subnetwork or Subnet
Found in larger networks, these smaller networks are used to simplify addressing between numerous computers. Subnets connect to the central network through a router, hub or gateway. Each individual wireless LAN will probably use the same subnet for all the local computers it talks to.
Super A
Super A is an Atheros proprietary turbo mode to increase speed over standard 802.11a mode. It adds Bursting and Compression to increase the speed. If you live in countries that prohibit the channel binding technology (i.e. Europe), you should choose “Super-A without Turbo) if you need more speed than 11a mode
TCP
A layer-4 protocol used along with the IP to send data between computers over the Internet. While IP takes care of handling the actual delivery of the data, TCP takes care of keeping track of the packets that a message is divided into for efficient routing through the Internet.
Turbo A
Turbo A is an Atheros proprietary turbo mode to increase speed over standard 802.11a mode. It uses channel binding technology to increase speed. There are 2 types of Turbo A modes: Dynamic Turbo and Static Turbo. In Dynamic Turbo, the channel binding will be used only if necessary. In Static Turbo, the channel binding is always on. This protocol may be combined with Super-A model to increase the performance even more. The used of channel binding might be prohibited in EU countries.
TX Output Power
Transmit Output Power. The TX output power means the transmission output power of the radio. Normally, the TX output power level limit for 2.4GHz 11g/b is 20dBm at the antenna end. The output power limit for 5GHz 802.11a is 30dBm at the antenna end.
UDP
User Datagram Protocol. A layer-4 network protocol for transmitting data that does not require acknowledgement from the recipient of the data.
Upgrade
To replace existing software or firmware with a newer version.
Upload
To send a file to the Internet or network device.
URL
Uniform Resource Locator. The address of a file located on the Internet.
VPN
Virtual Private Network. A type of technology designed to increase the security of information transferred over the Internet. VPN creates a private encrypted tunnel from the end user's computer, through the local wireless network, through the Internet, all the way to the corporate network.
Walled Garden
On the Internet, a walled garden refers to a browsing environment that controls the information and Web sites the user is able to access. This is a popular method used by ISPs in order to keep the user navigating only specific areas of the Web
WAN
Wide Area Network. A communication system of connecting PCs and other computing devices across a large local, regional, national or international geographic area. A WAN port on the network device means the port (or wireless connection) that is connected to the Internet side of the network topology.
WEP
Wired Equivalent Privacy. A wireless encryption protocol. WEP is available in 40-bit (64-bit), 108-bit (128-bit) or 152-bit (Atheros proprietary) encryption modes.
Wi-Fi
Wireless Fidelity. An interoperability certification for wireless local area network (LAN) products based on the IEEE 802.11 standards. The governing body for Wi-Fi is called Wi-Fi Alliance (also known as WECA).
WiMAX
Worldwide Interoperability for Microwave Access. A Wireless Metropolitan Network technology that complies with IEEE 802.16 and ETSI Hiperman standards. The original 802.16 standard call for operating frequency of 10 to 66Ghz spectrum. The 802.16a amendment extends the original standard into spectrum between 2 and 11 Ghz. 802.16d increase data rates to between 40 and 70 Mbps/s and add support for MIMO antennas, QoS, and multiple polling technologies. 802.16e adds mobility features, narrower bandwidth (a max of 5 mhz), slower speed and smaller antennas. Mobility is allowed up to 40 mph.
WDS
Wireless Distribution System. WDS defines how multiple wireless Access Point or Wireless Router can connect together to form one single wireless network without using wired uplinks. WDS associate each other by MAC address, each device
WLAN
Wireless Local Area Network. A type of local-area network that uses high-frequency radio waves rather than wires to communicate between nodes. The most popular standard for WLAN is the 802.11 standards.
WMM
Wi-Fi Multimedia (WMM) is a standard to prioritize traffic for multimedia applications. The WMM prioritize traffic\ on Voice-over-IP (VoIP), audio, video, and streaming media as well as traditional IP data over the AP.
WMS
Wireless Management System. An utility program to manage multiple wireless AP/Bridges.
WPA
Wi-Fi Protected Access. It is an encryption standard proposed by WiFi for advance protection by utilizing a password key (TKIP) or certificate. It is more secure than WEP encryption. The WPA-PSK utilizes pre-share key for encryption/authentication.
WPA2
Wi-Fi Protected Access 2. WPA2 is also known as 802.11i. It improves on the WPA security with CCMP and AES encryption. The WPA2 is backward compatible with WPA. WPA2-PSK utilizes pre-share key for encryption/authentication.