i21 - Access Point Tenda - Free user manual and instructions

USER MANUAL i21 Tenda

Orange background with white globe and laptop icon (no text or symbols)

Two girls lying on a white wall next to a green shutters, one pointing at the camera (no text or symbols visible)

Wireless Dual Band Ceiling Access Point i21

User Guide

Copyright Statement

© 2018 Shenzhen Tenda Technology Co., Ltd. All rights reserved.

Tenda is a registered trademark legally held by Shenzhen Tenda Technology Co., Ltd. Other brand and product names menoned herein are trademarks or registered trademarks of their respective holders. Copyright of the whole product as integraon, including its accessories and soware, belongs to Shenzhen Tenda Technology Co., Ltd. No part of this publicaon can be reproduced, transmied, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the prior written permission of Shenzhen Tenda Technology Co., Ltd.

Disclaimer

Pictures, images and product speciaons herein are for references only. To improve internal design, operaonal funcon, and/or reliability, Tenda reserves the right to make changes to the products without obligaon to nofy any person or organizaon of such revisions or changes. Tenda does not assume any liability that may occur due to the use or applicaon of the product described herein. Every effort has been made in the preparaon of this document to ensure accuracy of the contents, but all statements, informaon and recommendaons in this document

do not constute a warranty of any kind, express or implied.

Preface

Thank you for choosing Tenda! Please read this user guide before you start with i21.

Convenons

The typographical elements that may be found in this document are dened as follows.

Item	Presentaon	Example
Cascading menus	>	System > Live Users
Parameter and value	Bold	Set User Name to Tom.
Variable	Italic	Format: XX:XX:XX:XX:XX:XX
UI control	Bold	On the Policy page, click the OK buon.
Message	“ ”	The “Success” message appears.

The symbols that may be found in this document are dened as follows.

Symbol	Meaning
	This format is used to highlight informaon of importance or special interest. Ignoring this type of note may result in ineece conguraons, loss of data or damage to device.
	This format is used to highlight a procedure that will save me or resources.

Acronyms and Abbreviaons

Acronym or Abbreviaon	Full Spelling
AP	Access Point
AC	Access Point Controller
SSID	Service Set Idener
DHCP	Dynamic Host Conguraon Protocol
DNS	Domain Name System
ISP	Internet Service Provider
AES	Advanced Encrypon Standard
VLAN	Virtual Local Area Network
TKIP	Temporal Key Integrity Protocol
PoE	Power Over Ethernet
WEP	Wired Equivalent Privacy

Additional Informaon

For more informaon, search this product model on our website at http://www.tendacn.com.

Technical Support

If you need more help, contact us by any of the following means. We will be glad to assist you as soon as possible.

Hotline

Global: (86) 755-27657180

Canada: 1-888-998-8966

Hong Kong: 00852-81931998

Email

[e-mail]

Website

hp://www.tendacn.com

Skype

tendasz

Contents

1 Getng to Know Your Device .... 1

1.1 Overview.... 1
1.2 Appearance .... 1

1.2.1 LED Indicator .... 1
1.2.2 Buon and Port 2
1.2.3 Label....2

2 Applicaon Scenarios....4

2.1 Small Scale WiFi Network Deployment....4

2.1.1 Deploying the AP with a Tenda Router with the AP Controller Capacity .... 4
2.1.2 Deploying the AP with a Router without the AP Controller Capacity....5

2.2 Large Scale WiFi Network Deployment....6

3 Login....7

3.1 Logging in to the Web UI of the AP 7
3.2 Logging out of the Web UI of the AP 9
3.3 Web UI Layout....9
3.4 Common Buons on the Web UI 10

4 Quick Setup.... 11

4.1 Overview....11
4.2 Conguring AP Mode....13
4.3 Conguring APClient Mode 14

5 Status 17

5.1 System Status.... 17
5.2 Wireless Status....19
5.3 Trafc Stascs....20
5.4 Client List 21

6 Network Setngs....22

6.1 LAN Setup 22

6.1.1 IP Address Obtaining Mode – Stac IP 23
6.1.2 IP Address Obtaining Mode – Dynamic IP 24

6.2 DHCP Server 25

6.2.1 Overview 25
6.2.2 Conguring the DHCP Server 25
6.2.3 DHCP Client List 28

7 Wireless Setngs 29

7.1 Basic Sengs 29

7.1.1 Overview 29
7.1.2 Changing the SSID Setup....31
7.1.3 Examples of Conguring SSID Setup 37

7.2 Radio Sengs....57

7.2.1 Overview 57
7.2.2 Changing the Radio Sengs 57

7.3 Radio Opmizing....60

7.3.1 Overview 60
7.3.2 Opmizing Radio 61

7.4 Frequency Analysis 64

7.4.1 Overview 64
7.4.2 Checking the Usage of Channels....64
7.4.3 Checking the Wireless Networks Nearby 65

7.5 WMM Setup....66

7.5.1 Overview 66
7.5.2 Changing the WMM Sengs....67

7.6 Access Control 69

7.6.1 Overview 69
7.6.2 Conguring Access Control 69
7.6.3 Example of Conguring Access Control 70

7.7 Advanced 72

7.7.1 Overview 72
7.7.2 Changing the Advanced Setngs 72

7.8 QVLAN Setngs 74

7.8.1 Overview 74
7.8.2 Conguring the QVLAN Funcon....74

7.8.3 Example of Conguring QVLAN Setngs 75

8 SNMP 78

8.1 Overview....78

8.1.1 SNMP Management Framework....78

8.1.2 Basic SNMP Operaons 78

8.1.3 SNMP Protocol Version....79

8.1.4 MIB Introducon....79

8.2 Conguring the SNMP Funcon 80

8.3 Example of Conguring the SNMP Funcon.... 81

Networking Requirement 81

Conguraon Procedure....81

Vericaon....82

9 Tools 83

9.1 Firmware Upgrade....83

9.2 Time & Day 84

9.2.1 System Time 84

9.2.2 Login Timeout 86

9.3 Logs 87

9.3.1 View Logs 87

9.3.2 Log Setup....88

9.4 Conguraon 91

1 Geng to Know Your Device

1.1 Overview

Tenda i21 is a dual band wireless access point designed for crowded places such as oces, bars and cafes. Featuring the dual-band (2.4 GHz/5 GHz) capacity and equipped with the MIMO and OFDM technologies, it oers a combined data rate of up to 1167 Mbps. You can use the built-in power adjustment mode to adjust the transmit power as needed. Compliant with IEEE 802.3af standard, i21 allows you to apply long-distance power supply via PoE without changing your original power network. All of this makes i21 an ideal choice for WiFi coverage.

1.2 Appearance

1.2.1 LED Indicator

System indicator Wrench

LED Indicator	Status	Descripon
System indicator	Solid on	The system is boong or faulty.
	Blinking	The system is running properly.
	O	The system is powered o or the LED indicator is turned o.

1.2.2 Buon and Port

Posion of the label Reset buon Power jack LAN port

Buon & Port	Connecon Descripon
LAN port	10/100 Mbps auto negoaon portIf the AP is powered using a DC adapter, connect this port to a switch.If the AP is powered through PoE, connect this port to an IEEE 802.3af/at PoE switch.The AP allows a maximum PoE power supply distance of 100 meters.
Power jack	The power jack is used to connect to a DC adapter for supplying power to the AP.Input: 12 V 1 A
Reset buon	Aer the AP is powered on, you can hold down this buon for 8 seconds to restore the factory sengs.

1.2.3 Label

The label is located on the rear panel of the AP. For details of the label, see the following gure.

Tenda www.tendacn.com Made in China Wireless Dual Band Ceiling Access Point (2) Model: i21 IP Address: 192.168.0.254 (3) Username: admin Password: admin (4) Power: 12V == 1A FCC ID: V7TI21 This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. MAC S/N (5) (6)

(1): Name of the AP.
(2): Model of the AP.
(3): Default IP address of the AP. You can use this IP address to log in to the web UI of the AP.
(4): Default user name and password of the web UI of the AP.
(5): MAC address of the AP. The default primary SSID of the AP is Tenda_XXXXXX, where XXXXXX indicates the last 6 characters of this MAC address.
(6): Serial number of the AP. If the AP is faulty, you need to provide this serial number when sending the AP for repair.

2 Applicaon Scenarios

2.1 Small Scale WiFi Network Deployment

If you need to deploy a small scale WiFi network, you are recommended to use a wired router, a PoE switch, and several APs.

2.1.1 Deploying the AP with a Tenda Router with the AP Controller Capacity

Networking topology

graph TD
    A["PoE Switch"] -->|Uplink port| B["Tenda Router"]
    B -->|LAN port| C["Computer"]
    B -->|WAN port| C
    C --> D["Internet"]
    E["AP1"] --> A
    F["AP2"] --> A
    G["AP ..."] --> A
    style A fill:#f9f,stroke:#333
    style B fill:#ccf,stroke:#333
    style C fill:#cfc,stroke:#333
    style D fill:#fcc,stroke:#333
    style E fill:#cff,stroke:#333
    style F fill:#ffc,stroke:#333
    style G fill:#fcc,stroke:#333

• Connect the LAN port of the AP to the PoE port of the switch.
• Connect the uplink port of the switch to a LAN port of the router.
• Connect the computer used to congregate APs to a LAN port of the router.

Seng up the AP

Log in to the web UI of the router, and set up the APs in batch. Refer to the user guide of the router for details.

2.1.2 Deploying the AP with a Router without the AP Controller Capacity

If you deploy the AP with a router without the AP controller capacity, refer to the following networking topology.

Networking topology

graph TD
    A["PoE Switch"] -->|Uplink port| B["Router"]
    B -->|LAN port| C["Internet"]
    D["AP1"] -->|AP ...| E["Computer"]
    F["AP ..."] --> E
    E --> G["Used to congregate APs"]

• Connect the uplink port of the switch to a LAN port of the router.
• Connect the computer used to congregate APs to the switch.
• Connect an AP to the switch rst. Then perform the same procedures to connect and congure the other APs.

Seng up the AP

Log in to the web UI of the rst AP, and congure it. Then congure the other APs one by one. Refer to Chapter 3 and the follows in this user guide for details.

If mulple APs are needed to setup, change their IP addresses to dierent ones to avoid IP conict.

2.2 Large Scale WiFi Network Deployment

If you need to deploy a large scale WiFi network in hotels, enterprises, or staons, you are recommended to use a wired router, a PoE switch, a Tenda AP controller, and several APs.

Networking topology

graph TD
    A["Computer"] --> B["Tenda AP Controller"]
    B --> C["Core Switch"]
    C --> D["Router"]
    D --> E["Internet"]
    F["AP1"] --> G["PoE Switch"]
    H["AP2"] --> G
    I["AP3"] --> G
    J["..."] --> K["AP n"]
    L["AP n+1"] --> M["PoE Switch"]
    N["AP n+2"] --> M
    O["LAN port"] --> D
    P["WAN port"] --> D
    Q["Uplink port"] --> C
    R["Tenda AP Controller"] --> S["Core Switch"]
    S --> T["Router"]
    T --> U["Internet"]

• Connect the computer used to congregate APs to the Tenda AP controller.
• Connect the LAN port of the AP to the PoE port of the switch.

Seng up the AP

Log in to the web UI of the Tenda AP controller, and set up the APs in batch. Refer to the user guide of the Tenda AP controller for details.

3 Login

3.1 Logging in to the Web UI of the AP

Step 1 Connect the computer to the AP or the switch connected to the AP.

Step 2 Set IP address of your local area conneccon to 192.168.0.X (X: 2 - 253) and Subnet mask to 255.255.255.0.

Internet Protocol Version 4 (TCP/IPv4) Properties General You can get IP settings assigned automatically if your network supports this capability. Otherwise, you need to ask your network administrator for the appropriate IP settings. Obtain an IP address automatically Use the following IP address: IP address: 192 . 168 . 0 . 10 Subnet mask: 255 . 255 . 255 . 0 Default gateway: . Obtain DNS server address automatically Use the following DNS server addresses: Preferred DNS server: . Alternate DNS server: . Validate settings upon exit Advanced... OK Cancel

Step 3 Access 192.168.0.254 using a web browser.

192.168.0.254

Step 4 Enter admin as the user name and password and click Login.

i21V1.0 The default username is admin The default password is admin English Login Forget your password?

If this page is not displayed, refer to Q1 in Appendix A "FAQ".

--End

You can now start conguring the AP.

Administrator:admin Status System Status System Status Device Name i21V1.0 System Time 2018-08-10 17:20:05 Up Time 2Day 07h 58m 13s Number of Wireless Clients 1 Firmware Version V1.0.0.8(1418) Hardware Version V1.0 LAN Status MAC Address 50:2B:73:09:94:50 IP Address 192.168.0.153 Subnet Mask 255.255.255.0 Primary DNS Server 192.168.0.252 Secondary DNS Server Wireless Status Quick Setup Network Wireless SNMP Tools Administrator:admin Help

3.2 Logging out of the Web UI of the AP

Aer you log in to the web UI of the AP, the system logs you out if you perform no operaon on the web UI within the Login Timeout interval. (The default interval is 5 minutes and can be changed.)

When you close the web browser, the system logs you out as well.

When you are logged out, the system does not save the current conguraon. Therefore, you are recommended to save the current conguraon before logging out.

If you close the web browser tab page used to log in to the web UI of the AP instead of the web browser, you are not logged out.

3.3 Web UI Layout

The web UI of the CPE is composed of 4 parts, including the level-1 navigaon tree, level-2 navigaon tree, tab page area, and conguraon area. See the following gure.

The funcons and parameters dimmed on the web UI indicates that they are not supported by the AP or cannot be changed in the current conguraon.

1 Status System Status 2 Wireless Status Traffic Statistics Client List Quick Setup Network Wireless SNMP Tools 3 Administrator:admin System Status Device Name i21V1.0 System Time 2018-08-10 17:20:05 Up Time 2Day 07h 58m 13s Number of Wireless Clients 1 Firmware Version V1.0.0.8(1418) Hardware Version V1.0 LAN Status MAC Address 50:2B:73:09:94:50 IP Address 192.168.0.153 Subnet Mask 255.255.255.0 Primary DNS Server 192.168.0.252 Secondary DNS Server Help

No.	Name	Descripon
1	Level-1 navigaon tree	The navigaon bars display the funcon menu of the AP. When you select a funcon in navigaon bar, the conguraon of the funcon appears in the conguraon area.
2	Level-2 navigaon tree
3	Tab page area
4	Conguraon area	It enables you to view and modify conguraon.

3.4 Common Buons on the Web UI

Descripon of common buons:

Buon	Descripon
Refresh	It is used to update the content of the current page.
Save	It is used to save the conguraon on the current page and enable the conguraon to take eect.
Restore	It is used to change the current conguraon on the current page back to the original conguraon.
Help	It is used to view help informaon corresponding to the sengs on the current page.

4 Quick Setup

4.1 Overview

This module enables you to quickly congregate the AP so that wireless devices such as smart phones and pads can access the internet through the wireless network of the AP.

This AP can work in AP or APClient mode.

AP Mode

By default, the AP works in this mode. In this mode, the AP connects to the internet using an Ethernet cable and converts wired signals into wireless signals to provide wireless network coverage. See the following topology.

graph TD
    A["PoE Switch"] --> B["i21 in AP mode"]
    C["Router"] --> B
    D["Internet"] --> B
    B --> E["Computer"]
    B --> F["Smartphone"]

■ APClient Mode

In this mode, the AP is wirelessly bridged to an upstream device (such as a wireless router or AP) to extend the wireless network coverage of the upstream device. See the following topology.

graph TD
    A["i21 in APClient mode"] --> B["PoE Switch"]
    A --> C["Upstream AP"]
    D["Router"] --> E["Internet"]
    B --> F["Wireless Signal"]
    C --> G["Wireless Signal"]
    F --> H["Computer"]
    G --> I["Computer"]
    H --> J["Wireless Signal"]
    I --> K["Wireless Signal"]

4.2 Conguring AP Mode

The Mixed WPA/WPA2-PSK security mode and AES encrypon algorithm are used as an example to describe the conguraon procedure. If you need to use another security mode, refer to Secon

7.1 Basic Sengs.

Conguraon procedure:

Step 1 Select a radio band.

Step 2 Set Mode to AP Mode.

Step 3 (Oponal) Set SSID to a wireless network name.

Step 4 Set Security Mode to Mixed WPA/WPA2-PSK, Cipher Type to AES, and Security Key to the password of the wireless network.

Step 5 Click Save.

Step 6 Select the other radio band, and set the related parameters as needed.

Step 7 Click Save.

Quick Setup WIFI Radio 2.4GHz Mode AP Mode APClient Mode SSID Tenda_888888 Security Mode Mixed WPA/WPA2-PSK Cipher Type AES TKIP TKIP&AES Security Key ...... Save Restore Help

--End

Parameter descripon

Parameter	Descripon
WIFI Radio	It species the radio band of the wireless network. The AP supports 2.4 GHz and 5 GHz wireless networks.
Mode	It species the working mode of the AP, including AP Mode and APClient Mode.
SSID	It species the primary SSID (wireless network name) of the wireless network at the corresponding radio band.
Security Mode	It species the security mode of the wireless network, including: None, WEP, WPA-PSK, WPA2-PSK, Mixed WPA/WPA2-PSK, WPA, and WPA2. Clicking the hyperlink navigates you to the elaborated descripon of the corresponding security mode.

Aer the conguraon, you can select the SSID on your wireless devices such as smart phones and enter your wireless network password to connect to the wireless network of the AP and access the internet through the AP.

4.3 Conguring APClient Mode

Conguraon procedure:

• Before conguraon, ensure that the upstream AP is connected to the internet successfully.
- If you want to bridge the wireless networks at both 2.4 GHz and 5 GHz bands, ensure that the two networks belong to a same upstream AP.

Assume that the upstream AP has the basic informaon described in the following table.

IP Address	SSID	Security Mode	Security Key (Wireless Network Password)
192.168.0.254	Tenda_1	Mixed WPA/WPA2-PSK	87654321

Step 1 Log in to the web UI of this AP, and change its IP address to an unused IP address belonging to the same network segment as that of the upstream AP, such as 192.168.0.253. For details, refer to Secon 6.1 LAN Setup.

Step 2 Use the new IP address to log in to the web UI of this AP, and choose Quick Setup.

Step 3 Select the radio band of the wireless network to be bridged.

Step 4 Set the Mode to APClient Mode.

Step 5 Click Enable Scan.

Step 6 Select the SSID of the upstream AP from the detected SSIDs, which is Tenda_1 in this example.

If the AP detects no wireless network, choose Wireless >SSID Setup to enable the wireless funcon, and then try again.

Step 7 Aer you select an SSID, the SSID, Security Mode, Cipher Type, and Upstream AP Channel are populated automatically. You just need to enter the password of the wireless network of the upstream AP in the Security Key box. Set Security Key to the wireless network password of the upstream AP, which is 87654321 in this example.

Step 8 Click Save.

Quick Setup WIFI Radio 2.4GHz Mode AP Mode APClient Mode SSID Tenda_1 Security Mode Mixed WPA/WPA2-PSK Cipher Type AES TKIP TKIP&AES Security Key .......... Upstream AP Channel 6 Disable Scan Select SSID MAC Address Network Bandwidth Channel Extension Channel Security Signal Strength Tenda_1 50:2b:7b:ff:30:79 bgn 40MHz 6 upper wpa&wpa2/aes&t... -56dBm

Step 9 If you want to bridge the wireless network at the other band, select the radio band, and perform step 4 to 8.

--End

Parameter descripon

Parameter	Descripon
WIFI Radio	It species the radio band of the wireless network to be bridged. The AP supports 2.4 GHz and 5 GHz wireless networks.
Mode	It species the working mode of the AP, including AP Mode and APClient Mode.
SSID	It species the SSID (wireless network name) of the upstream AP to be bridged. It is populated automacally when you select the SSID of the upstream AP.
Security Mode	It species the security mode of the wireless network to be bridged.The AP can bridge to a wireless network using None, WEP (Open or shared), WPA-PSK, WPA2-PSK, or Mixed WPA/WPA2-PSK security mode. Clicking the hyperlink navigates you to the elaborated descripon of the corresponding security mode.
Authencaon Type	It species the WEP authencaon type of the wireless network to be bridged. It needs to be manually entered.
Default Key	It species the WEP default key (wireless password) of the wireless network to be bridged. It needs to be manually entered.
WEP Key 1 to 4	It species the WEP key of the wireless network to be bridged. It needs to be manually entered.
Cipher Type	It species the WPA cipher type of the wireless network to be bridged. It is populated automacally when you select the SSID of the upstream AP.
Security Key	It species the wireless password of the wireless network to be bridged. It needs tobe manually entered.
Upstream AP Channel	It species the wireless channel used by the upstream AP. It is populated automacally when you select the SSID of the upstream AP.

Aer the sengs take eect, use your smart phone to search the SSID of the upstream AP, and enter the password for internet access, which are Tenda_1 and 87654321 in this example.

5 Status

5.1 System Status

To view the system status and LAN status of the AP, choose Status > System Status.

System Status

System Status
Device Name	i21V1.0
System Time	2018-08-14 14:46:45
Up Time	00h 00m 27s
Number of Wireless Clients	0
Firmware Version	V1.0.0.8(1418)
Hardware Version	V1.0
LAN Status
MAC Address	50:2B:73:09:94:50
IP Address	192.168.0.254
Subnet Mask	255.255.255.0
Primary DNS Server	8.8.8.8
Secondary DNS Server	8.8.4.4

Parameter descripon

Parameter	Descripon
Device Name	It species the name of the AP.A unique Device Name helps quickly identify the AP. You can change the Device Name on the Network > LAN Setup page.
System Time	It species the current system me of the AP.
Up Time	It species the me that has elapsed since the AP was started last me.
Number of Wireless Clients	It species the number of wireless clients currently connected to the AP.
Firmware Version	It species the rmware version number of the AP.
Hardware Version	It species the hardware version number of the AP.
MAC Address	It species the physical address of the LAN port of the AP. If you connect the AP to other devices using Ethernet cables, the AP uses this MAC address to communicatewith those devices.
IP Address	It species the IP address of the AP.The web UI of the AP is accessible at this IP address. You can change the IP address on the Network > LAN Setup page.
Subnet Mask	It species the subnet mask of the IP address of the AP.
Primary DNS Server	It species the primary DNS server of the AP.
Secondary DNS Server	It species the secondary DNS server of the AP.

5.2 Wireless Status

To view the radio status and SSID status of the wireless network at 2.4 GHz, choose Status > Wireless Status. Click 5GHz Wireless Status tap to view the related informaon of 5 GHz wireless network.

2.4GHz Wireless Status 5GHz Wireless Status

Radio Status
Radio (On/Off)	On
Network Mode	11b/g/n mixed
Channel	9

SSID Status
SSID	MAC Address	Working Status	Security Mode
Tenda_099450	50:2B:73:09:94:51	Enabled	None
Tenda_099451	50:2B:73:09:94:52	Disabled	None
Tenda_099452	50:2B:73:09:94:53	Disabled	None
Tenda_099453	50:2B:73:09:94:54	Disabled	None
Tenda_099454	50:2B:73:09:94:55	Disabled	None
Tenda_099455	50:2B:73:09:94:56	Disabled	None
Tenda_099456	50:2B:73:09:94:57	Disabled	None
Tenda_099457	50:2B:73:09:94:58	Disabled	None

Parameter descripon

Parameter		Descripon
Radio Status	Radio(On/O)	It species whether the wireless funcon of the AP is enabled.
	Network Mode	It species the current network mode of the AP.
	Channel	It species the current working channel of the AP.
SSID Status	SSID	It species the names of all the wireless networks of the AP.
	MAC Address	It species the physical addresses corresponding to the SSIDs of the AP.
	Working Status	It species whether the wireless networks corresponding to the SSIDs of the AP are enabled.
	Security Mode	It species the security modes of the wireless networks corresponding to the SSIDs of the AP.

5.3 Trac Stascs

To view the total transmied trac, total received trac, total number of transmied packets, and total number of received packets corresponding to each SSID of the AP, choose Status > Trac Stascs. Click 5GHz Trac Stascs tap to view the related informaon of 5 GHz wireless network.

2.4GHz Traffic Statistics 5GHz Traffic Statistics

SSID	Total RX Traffic (MB)	Total RX Packets (Num)	Total TX Traffic (MB)	Total TX Packets (Num)
Tenda_099450	0.99MB	4293	0.00MB	31
Tenda_099451	0.00MB	0	0.00MB	0
Tenda_099452	0.00MB	0	0.00MB	0
Tenda_099453	0.00MB	0	0.00MB	0
Tenda_099454	0.00MB	0	0.00MB	0
Tenda_099455	0.00MB	0	0.00MB	0
Tenda_099456	0.00MB	0	0.00MB	0
Tenda_099457	0.00MB	0	0.00MB	0

You can click Refresh to view the latest trac stascs.

5.4 Client List

To view the MAC address, IP address, connecun upme, transmit speed, and receive speed of each wireless client connected to the AP, choose Status > Client List. Click 5GHz Client List tap to view the related informaon of 5 GHz wireless network.

2.4GHz Client List 5GHz Client List This section displays information of connected clients (if any). Host(s) Connected Currently: Tenda_099450 ID MAC Address IP Address Connection Duration TX Rate RX Rate No clients connected!

You can select an SSID from the drop-down list box in the upper-right corner to view informaon about the wireless clients connected to the AP using the SSID.

6 Network Sengs

6.1 LAN Setup

To view or congregate the MAC address, device name, IP address obtaining mode, and other related informaon of the LAN port of the AP, choose Network > LAN Setup.

LAN Setup MAC Address 50:2B:73:09:94:50 Address Mode Static IP IP Address 192.168.0.254 For example: 192.168.1.1 Subnet Mask 255.255.255.0 For example: 255.255.255.0 Gateway 192.168.0.1 Primary DNS Server 8.8.8.8 Secondary DNS Server (Optional) 8.8.4.4 Device Name i21V1.0 Ethernet Mode Auto-negotiation 10M half-duplex

Parameter descripon

Parameter	Descripon
MAC Address	It species the MAC address of the LAN port of the AP.The default primary SSID of the AP is Tenda_XXXXXX, where XXXXXX indicates the last 6 characters of this MAC address.
Address Mode	It species the IP address obtaining mode of the AP. The default opon isStac IP.Stac IP: It indicates that the IP address, subnet mask, gateway, and DNS server informaon of the AP is set manually.Dynamic IP: It indicates that the IP address, subnet mask, gateway, and DNS server informaon of the AP is obtained from a DHCP server in your LAN.IfAddress Modeis set toDynamic IP, you can log in to the web UI of the AP only with the IP address assigned to the AP by the DHCP server. The IP address is specied on the client list of the DHCP server.
IP Address	It species the IP address of the AP ifAddress Modeis set toStac IP. The default IP address is 192.168.0.254 and you can change it as required.This IP address also funcons as the management IP address of the AP. You can use this IP address to log in to the web UI of the AP to manage the AP.
Subnet Mask	It species the subnet mask of the IP address of the AP if Address Mode is set to Stac IP. The default subnet mask is 255.255.255.0 and you can change it as required.
Gateway	It species the gateway of the AP if Address Mode is set to Stac IP. The default gateway IP address is 192.168.0.1 and you can change it as required.
Primary DNS Server	It species the primary DNS server of the AP if Address Mode is set to Stac IP. The default IP address of the primary DNS server is 8.8.8.8 and you can change it as required.
Secondary DNS Server (oponal)	It species the secondary DNS server of the AP if Address Mode is set to Stac IP. This IP address is oponal.
Device Name	It species the device name of the AP. The default device name is in the format of Model + Hardware version number.You are recommended to change the device name so that you can quickly locate the AP when managing the AP remotely.
Ethernet Mode	It species the Ethernet mode of LAN of this AP.Auto-negoaon: This mode features a high transmission rate but short transmission distance. Generally, this mode is recommended.10M half-duplex: This mode features a long transmission distance but relatively low transmission rate (10 Mbps).This mode is recommended only if the Ethernet cable that connects the LAN port of the AP to a peer device exceeds 100 meters. In this case, the connected LAN port of the peer device must work in auto-negoaon mode. Otherwise, the LAN port of the AP may not be able to properly transmit or receive data.

If you change the IP address of the LAN port, change the IP address of your management computer as well so that the two IP addresses belong to the same network segment. Then, use the new IP address of the LAN port to log in to the web UI of the AP.

6.1.1 IP Address Obtaining Mode – Stac IP

This mode enables you to set the IP address, subnet mask, gateway IP address, primary DNS server, and secondary DNS server of the AP. It is applicable to a scenario with only one or a few APs.

Conguraon procedure:

Assume that the AP IP address is 192.168.1.254, and the default gateway IP address and DNS server IP address are 192.168.1.1.

Step 1 Set Address Mode to Stac IP.

Step 2 Set IP Address.

Step 3 Set Subnet Mask to the subnet mask of the IP address. Generally the subnet mask is 255.255.255.0.

Step 4 Set Gateway to the IP address of the gateway of the AP.

Step 5 Set Primary DNS Server to the IP address of the primary DNS server of the AP. If another DNS server is available, set Secondary DNS Server to the IP address of the additional DNS server.

Step 6 Click Save.

LAN Setup MAC Address 50:2B:73:09:94:50 Address Mode Static IP IP Address 192.168.1.254 For example: 192.168.1.1 Subnet Mask 255.255.255.0 For example: 255.255.255.0 Gateway 192.168.1.1 Primary DNS Server 8.8.8.8 Secondary DNS Server (Optional) 8.8.4.4 Device Name i21V1.0 Ethernet Mode Auto-negotiation 10M half-duplex Save Restore Help

--End

6.1.2 IP Address Obtaining Mode – Dynamic IP

This mode enables the AP to automacally obtain an IP address, subnet mask, gateway IP address, primary DNS server IP address, and secondary DNS server IP address from a DHCP server in the network. If a large number of APs are deployed, you can adopt this mode to prevent IP address conicts and eecvely reduce your workload.

Conguraon procedure:

Step 1 Set Address Mode to Dynamic IP.

Step 2 Click Save.

LAN Setup MAC Address 50:2B:73:09:94:50 Address Mode Dynamic IP Device Name i21V1.0 Ethernet Mode ●Auto-negotiation●10M half-duplex Save Restore Help

--End

6.2 DHCP Server

6.2.1 Overview

The AP provides a DHCP server funcon to assign IP addresses to clients on the LAN. By default, the DHCP server funcon is disabled.

If the new and original IP addresses of the LAN port belong to dierent network segment, the system changes the IP address pool of the DHCP server funcon of the AP so that the IP address pool and the new IP address of the LAN port belong to the same network segment.

6.2.2 Conguring the DHCP Server

Conguraon procedure:

Step 1 Select the Enable check box of DHCP Server.

Step 2 Set Start IP to the start IP address of the IP address pool, which contains the IP addresses that can be assigned by the DHCP server to clients.

Step 3 Set End IP to the end IP address of the IP address pool.

Step 4 Set Lease Time to the me when an IP address is available to a client. The default opon 1 day is recommended.

Step 5 Set Subnet Mask to the subnet mask of the IP addresses. The default value 255.255.255.0 is recommended.

Step 6 Set Gateway to the gateway IP address to be assigned by the DHCP server to clients.

Step 7 Set Primary DNS Server to the IP address of the primary DNS server assigned by the DHCP server to clients. If another DNS server IP address is available, set Secondary DNS Server to that IP address.

Step 8 Click Save.

DHCP Server DHCP Client List DHCP Server ✓Enable Start IP 192.168.0.100 End IP 192.168.0.200 Lease Time 1 day Subnet Mask 255.255.255.0 Gateway 192.168.0.1 Primary DNS Server 8.8.8.8 Secondary DNS Server (Optional) 8.8.4.4 Save Restore Help

--End

Parameter descripon

Parameter	Descripon
DHCP Server	It species whether to enable the DHCP server funcon. To enable it, select the check box. To disable it, deselect the check box. By default, it is disabled.
Start IP	It species the rst IP address that can be assigned by the DHCP server to a client. The default value is 192.168.0.100.
End IP	It species the last IP address that can be assigned by the DHCP server to a client. The default value is 192.168.0.200.
Lease Time	It species the validity period of an IP address assigned by the DHCP server to a client. The default value is 1 day.
Subnet Mask	It species the subnet mask assigned by the DHCP server to clients. The default value is 255.255.255.0.
Gateway	It species the gateway IP address assigned by the DHCP server to clients. The default value is 192.168.0.254.NOTEWhen a client accesses a server or host located outside the network segment where the client resides, the data from and to the client must be forwarded by the gateway. Generally, the IP address of the gateway is the LAN IP address of the router in your LAN.
Primary DNS Server	It species the primary DNS server IP address assigned by the DHCP server to clients. The default value is 8.8.8.8.NOTETo enable clients to access web pages using domain names, set this parameter to a correct DNS server IP address or DNS proxy IP address.
Secondary DNS Server (oponal)	It species the secondary DNS server IP address assigned by the DHCP server to clients. This IP address is oponal.

If another DHCP server is available in your LAN, ensure that the IP address pool of the AP does not overlap the IP address pool of that DHCP server. Otherwise, IP address conict may occur.

6.2.3 DHCP Client List

If the AP funcons as a DHCP server, you can view the DHCP client list to understand the details about the clients that obtain IP addresses from the DHCP server. The details include host names, IP addresses, MAC addresses, and lease mes.

To view informaon about the clients that obtain IP addresses from the DHCP server funcon of the AP, choose Network > DHCP Server and click the DHCP Client List tab.

DHCP Server DHCP Client List Once DHCP is enabled, client list will be refreshed automatically every five seconds. Refresh ID Host Name IP Address MAC Address Lease Time No clients connected!

You can click Refresh to view the latest client informaon.

7 Wireless Sengs

7.1 Basic Sengs

This module enables you to set SSID-related parameters of wireless networks at both 2.4 GHz and 5 GHz of your AP.

7.1.1 Overview

■ Broadcast SSID

When the AP broadcasts an SSID, nearby wireless clients can detect the SSID. When this parameter is set to Disable, the AP does not broadcast the SSID and nearby wireless clients cannot detect the SSID. In this case, you need to enter the SSID manually on your wireless client if you want to connect to the wireless network corresponding to the SSID. This to some extent enhances the security of the wireless network.

It is worth nong that aer Broadcast SSID is set to Disable, a hacker can sll connect to the corresponding wireless network if he/she manages to obtain the SSID by other means.

■ AP Isolaon

This parameter implements a funcon similar to the VLAN funcon for wired networks. It isolates the wireless clients connected to the same wireless network corresponding to an SSID, so that the wireless clients can access only the wired network connected to the AP. Applying this funcon to hotspot setup at public places such as hotels and airports helps increase network security.

WMF

The number of wireless clients keeps increasing currently, but wired and wireless bandwidth resources are limited. Therefore, the mulcast technology, which enables single-point data transmission and mul-point data reception, has been widely used in networks to effectively reduce bandwidth requirements and prevent network congestion.

Nevertheless, if a large number of clients are connected to a wireless interface of a wireless network and mulcast data is intended for only one of the clients, the data is sll sent to all the clients, which unnecessarily increases wireless resource usage and may lead to wireless channel congeson. In addition, mulcast stream forwarding over an IEEE 802.11 network is not secure.

The WMF funcon of the AP converts mulcast trac into unicast trac and forwards the trac to the mulcast trac desnaon in the wireless network. This helps save wireless resources, ensure reliable transmission, and reduce delays.

■ Maximum Clients

This parameter species the maximum number of clients that can connect to the wireless network corresponding to an SSID. If the number is reached, the wireless network rejects new conncon requests from clients. This limit helps balance load among APs.

■ Security Mode

A wireless network uses radio, which is open to the public, as its data transmission medium. If the wireless network is not protected by necessary measures, any client can connect to the network to use the resources of the network or access unprotected data over the network. To ensure communicaon security, transmission links of wireless networks must be encrypted for protecon.

The AP supports various security modes for network encrypon, including None, WEP, WPA-PSK, WPA2-PSK, Mixed WPA/WPA2-PSK, WPA, and WPA2.

- None

It indicates that any wireless client can connect to the wireless network. This opon is not recommended because it aects network security.

- WEP

It uses a stac key to encrypt all exchanged data, and ensures that a wireless LAN has the same level of security as a wired LAN. Data encrypted based on WEP can be easily cracked. In addition, WEP supports a maximum wireless network throughput of only 54 Mbps. Therefore, this security mode is not recommended.

WPA-PSK, WPA2-PSK, and Mixed WPA/WPA2-PSK

They belong to pre-shared key or personal key modes, where Mixed WPA/WPA2-PSK supports both WPA-PSK and WPA2-PSK.

WPA-PSK, WPA2-PSK, and Mixed WPA/WPA2-PSK adopt a pre-shared key for authencaon, while the AP generates another key for data encrypon. This prevents the vulnerability caused by stac WEP keys, and makes the three security modes suitable for ensuring security of home wireless networks. Nevertheless, because the initial pre-shared key for authencaon is manually set and all clients use the same key to connect to the same AP, the key may be disclosed unexpectedly. This makes the security modes not suitable for scenarios where high security is required.

- WPA and WPA2

To address the key management weakness of WPA-PSK and WPA2-PSK, the WiFi Alliance puts forward WPA and WPA2, which use 802.1x to authenticate clients and generate data encrypon-oriented root keys. WPA and WPA2 use the root keys to replace the pre-shared keys that set manually, but adopt the same encrypon process as WPA-PSK and WPA2-PSK.

WPA and WPA2 uses 802.1x to authenticate clients and the login informaon of a client is managed by the client. This eecvely reduces the probability of informaon leakage. In addition, each me a client connects to an AP that adopts the WPA or WPA2 security mode, the RADIUS server generates a data encrypon key and assigns it to the client. This makes it dicult for aackers to obtain the key. These features of

WPA and WPA2 help significantly increase network security, making WPA and WPA2 the preferred security modes of wireless networks that require high security.

7.1.2 Changing the SSID Setup

To change the basic sengs of an SSID, perform the following procedure:

2.4 GHz wireless network setup is used for illustraon here. The conguraon procedure for 5 GHz wireless network is similar.

Step 1 Choose Wireless > SSID Setup.

Step 2 Select the SSID from the SSID drop-down list box.

Step 3 Change the parameters as required. Generally, you only need to change the Enable, SSID, and Security Mode sengs.

Step 4 Click Save.

2.4GHz SSID 5GHz SSID *SID Tenda_099450 *enable ✓ Broadcast SSID Enable AP Isolation Disable Enable WMF Disable Enable Probe Broadcast Packets Disable Enable Control Maximum Clients 48 (Range:1~128) *SID Tenda_099450 Chinese SSID Encode UTF-8 *security Mode None Save Restore Help

--End

Parameter descripon

Parameter	Descripon
SSID	It species the SSID to be congured.2.4 GHz: The AP allows 8 SSIDs. The default SSID is the primary SSID of the AP, which is Tenda_XXXXXX, where XXXXXX indicates the last 6 characters in the MAC address specied on the label on the external surface of the AP.5 GHz: The AP allows 4 SSIDs. The default SSID is the primary SSID of the AP, which is Tenda_XXXXXX_5G, where XXXXXX indicates the last 6 characters in the MAC address specied on the label on the external surface of the AP.
Enable	It species whether to enable the selected SSID.By default, the primary SSID is enabled and the other SSIDs are disabled. You canenable them as required.
Probe Broadcast Packets Control	Wireless devices keep broadcastng Probe Request frames, which includes SSID informaon, to scan the wireless network nearby. Aer receiving this kind of frames, an AP determines whether a wireless client can connect to its wireless network based on this frame, and respond to the wireless device with Probe Response frames, which contains all parameters of Beacon frame. This consumes a lot of wireless resources.With this funcon enabled, this AP does not respond to wireless devices when receiving Probe Request frames without SSID informaon. In this way, it eciently reduces the consumpon of wireless resources.
	It species whether to broadcast the selected SSID.
Broadcast SSID	Enable: It indicates that the AP broadcasts the SSID and the SSID can be detected by clients.Disable: It indicates that the AP does not broadcast the SSID and the SSID cannot be detected by clients. If a user wants to connect to the wireless network corresponding to this SSID, the user must enter the SSID manually.NOTEThis AP can automatically hide its SSID. When the number of clients connected to the AP with an SSID of the AP reaches the Maximum Clients, the AP stops broadcastng the SSID.
AP isolaon	It species whether to isolate the wireless clients connected to the AP with the selected SSID.Enable: It indicates that the wireless clients connected to the AP with the selected SSID cannot communicate with each other. This improves wireless network security.Disable: It indicates that the wireless clients connected to the AP with the selected SSID can communicate with each other.
WMF	It species whether to forward mulcast packets through unicast tunnels. Generally, mulcast packets are usually transmied at the lowest rate, such as 1 Mbps, leading to poor transmission eciency. WMF leverages the high auto-negoated rate, reliable feedback mechanism, and other advantages of unicast packets to address mulcast problems such as video playback stalls caused by packet loss and long delays over a wireless network.
Maximum Clients	It species the maximum number of wireless clients that can connect to the AP with the selected SSIDAer this upper limit is reached, the AP rejects new conncon requests from clients.
SSID	It enables you to change the selected SSID. Chinese characters are allowed in an SSID.
Chinese SSID Encode	It species the encoding format of Chinese characters in an SSID. The default value is UTF8.If 2 or more SSIDs of the AP are enabled, you are recommended to set this parameter to UTF-8 for some SSIDs and to GB2312 for the other SSIDs, so that any wireless client can identify one or both SSIDs that contain Chinese characters.
Security Mode	It species the encrypon type of the selected SSID. None indicates that any wireless client can connect to the AP using the selected SSID. This opon is not recommended because it aects network security.The AP supports the WEP, WPA-PSK, WPA2-PSK, Mixed WPA/WPA2-PSK, WPA, and WPA2 security modes, which are elaborated in the following secon.

None

It allows any wireless client to connect to a wireless network. This opon is not recommended because it aects network security.

Security Mode WEP Encryption Type Open Default Key Open Shared 802.1x WEP Key 1 ...... ASCII WEP Key 2 ...... ASCII WEP Key 3 ...... ASCII WEP Key 4 ...... ASCII

Parameter descripon

Parameter	Descripon
	It species the encrypon type for the WEP security mode of the AP. The opons includeOpen, Shared, and 802.1x.The opons share the same encrypon process.OpenIt species that authencaon is not required and data exchanged is encrypted using WEP. In this case, a wireless client can connect to the wireless network corresponding to the selected SSID without being authenticated, and the data exchanged between the client and the network is encrypted in WEP security mode.SharedIt species that a shared key is used for authencaon and data exchanged is encrypted using WEP. In this case, a wireless client must use a preset WEP key to connect to the wireless network corresponding to the selected SSID. The wireless client can be connected to the wireless network only if they use the same WEP key.802.1xIt species that 802.1x authencaon is required and data exchanged is encrypted using WEP. In this case, ports are enabled for user authencaon when valid clients connect to the wireless network corresponding to the selected SSID, and disabled when invalid users connect to the wireless network.
Encrypon Type
Default Key	It species the default WEP key for the Open and Shared encrypon types.For example, ifDefault Keyis set toSecurity Key 2, a wireless client can connect to the wireless network corresponding to the selected SSID only with the password specied bySecurity Key 2.
ASCII	It indicates that a key selected for the Open or Shared authencaon type contains hexadecimal characters.5 or 13 ASCII characters are allowed in the key.
Hex	It indicates that a key selected for the Open or Shared authencaon type contains hexadecimal characters.10 or 26 hexadecimal characters (range: 0-9, a-f, and A-F) are allowed in the key.
RADIUS Server	These parameters are dedicated to the 802.1x authencaon type.
RADIUS Port	It species the IP address/port number/shared key of the RADIUS server for authencaon.
RADIUS Password

■ WPA-PSK, WPA2-PSK, and Mixed WPA/WPA2-PSK

Security Mode WPA-PSK Cipher Type None WEP Key WPA-PSK WPA2-PSK Mixed WPA/WPA2-PSK WPA WPA2 Key Update Interval s (Range: 60~99999 seconds. If set to

Parameter descripon

Parameter	Descripon
Security Mode	It indicates the personal or pre-shared key security mode, including WPA-PSK, WPA2-PSK, and Mixed WPA/WPA2-PSK.WPA-PSK: It indicates that the wireless network corresponding to the selected SSID is encrypted using WPA-PSK.WPA2-PSK: It indicates that the wireless network corresponding to the selected SSID is encrypted using WPA2-PSK.Mixed WPA/WPA2-PSK: It indicates that wireless clients can connect to the wireless network corresponding to the selected SSID using either WPA-PSK or WPA2-PSK.
Cipher Type	It species the encrypon algorithm corresponding to the selected security mode. If Security Mode is set to WPA-PSK, this parameter has the AES and TKIP values. If Security Mode is set to WPA2-PSK or Mixed WPA/WPA2-PSK, this parameter has the AES, TKIP, and TKIP&AES values.AES: It indicates the Advanced Encrypon Standard.TKIP: It indicates the Temporal Key Integrity Protocol. If TKIP is used, the maximum wireless throughput of the AP is limited to 54 Mbps.TKIP&AES: It indicates that both TKIP and AES encrypon algorithms are supported. Wireless clients can connect to the wireless network corresponding to the selected SSID using TKIP or AES.
Key	It species a pre-shared WPA key. A WPA key can contain 8 to 63 ASCII characters or 8 to 64 hexadecimal characters.
Key Update Interval	It species the automac update interval of a WPA key for data encrypon. A shorter interval results in higher data security.The value 0 indicates that a WAP key is not updated.

■ WPA and WPA2

Security Mode WPA RADIUS Server: None WEP WPA-PSK WPA2-PSK Mixed WPA/WPA2-PSK RADIUS Port: WPA RADIUS Password: WPA WPA2 Cipher Type AES TKIP TKIP&AES Key Update Interval 0 s (Range: 60~99999 seconds. If set to 0, key will not be updated.)

Parameter descripon

Parameter	Descripon
Security Mode	The WPA and WPA2 opons are available for network protecon with a RADIUS server.WPA: It indicates that the wireless network corresponding to the selected SSID is encrypted using WPA.WPA: It indicates that the wireless network corresponding to the selected SSID is encrypted using WPA.
RADIUS Server IP	It species the IP address of the RADIUS server for client authencaon.
RADIUS Port	It species the port number of the RADIUS server for client authencaon.
RADIUS Password	It species the shared password of the RADIUS server.
Cipher Type	It species the encrypon algorithm corresponding to the selected security mode. The available opons include AES, TKIP, and TKIP&AES.AES: It indicates the Advanced Encrypon Standard.TKIP: It indicates the Temporal Key Integrity Protocol.TKIP&AES: It indicates that both TKIP and AES encrypon algorithms are supported. Wireless clients can connect to the wireless network corresponding to the selected SSID using TKIP or AES.
Key Update Interval	It species the automac update interval of a WPA key for data encrypon. A shorter interval results in higher data security.

Parameter

Descripon

The value 0 indicates that a WAP key is not updated.

7.1.3 Examples of Conguring SSID Setup

Seng up a Non-encrypted Wireless Network

Networking requirement

In a hotel lounge, guests can connect to the wireless network without a password and access the internet through the wireless network.

graph TD
    A["PoE Switch"] --> B["Router"]
    B --> C["Internet"]
    D["AP SSD: FREE"] --> E["Mobile Device"]
    D --> F["Smartphone"]

Conguraon procedure:

Assume that the second SSID of the AP, the WPA2-PSK security mode, and AES encrypon algorithm are used.

2.4 GHz wireless network setup is used for illustraon here. The conguraon procedure for 5 GHz wireless network is similar.

Step 1 Choose Wireless > SSID Setup.

Step 2 Select the second SSID from the SSID drop-down list box.

Step 3 Select the Enable check box.

Step 4 Change the value of the SSID text box to FREE.

Step 5 Set Security Mode to None.

Step 6 Click Save.

*SSID FREE *enable ✓ Broadcast SSID Enable AP Isolation Disable Enable WMF Disable Enable Probe Broadcast Packets Disable Enable Control Maximum Clients 48 (Range:1~128) *SSID FREE Chinese SSID Encode UTF-8 *security Mode None Save Restore Help

--End

Vericaon

Verify that wireless devices can connect to the FREE wireless network without a password.

Seng up a Wireless Network Encrypted Using WPA/WPA2-PSK

Network requirement

A company wireless network with a certain level of security must be set up through a simply procedure. In this case, WPA/WPA2 pre-shared key mode is recommended.

graph TD
    A["PoE Switch"] --> B["Router"]
    B --> C["Internet"]
    D["AP"] --> E["AP"]
    F["SSID: Hotspot"] --> G["Password: 87654321"]

Conguraon procedure:

Assume that the second SSID of the AP, the WPA2-PSK security mode, and AES encrypon algorithm are used.

2.4 GHz wireless network setup is used for illustraon here. The conguraon procedure for 5 GHz wireless network is similar.

Step 1 Choose Wireless > SSID Setup.

Step 2 Select the second SSID from the SSID drop-down list box.

Step 3 Select the Enable check box.

Step 4 Change the value of the SSID text box to Hotspot.

Step 5 Set Security Mode to WPA2-PSK and Cipher Type to AES.

Step 6 Set Key to 87654321.

Step 7 Click Save.

2.4GHz SSID 5GHz SSID *SSID Hotspot *Enable ✓ Broadcast SSID Enable AP Isolation Disable Enable WMF Disable Enable Probe Broadcast Packets Disable Enable Control Maximum Clients 48 (Range:1~128) *SSID Hotspot Chinese SSID Encode UTF-8 *Security Mode WPA2-PSK *Cipher Type AES TKIP TKIP&AES *Key .......... Key Update Interval 0 s (Range: 60~99999 seconds. If set to 0, key will not be updated.)

--End

Vericaon

Verify that wireless devices can connect to the Hotspot wireless network with the password 87654321.

Seng up a Wireless Network Encrypted Using WPA or WPA2

Network requirement

A highly secure wireless network is required and a RADIUS server is available. In this case, WPA or WPA2 pre-shared key mode is recommended.

graph TD
    A["PoE Switch"] -->|IP address: 192.168.0.200| B["AP"]
    C["Router"] -->|IP address: 192.168.0.254| B
    D["Internet"] -->|IP address: 192.168.0.200| B
    B --> E["AP"]
    style B fill:#f9f,stroke:#333

Conguraon procedure:

■ Conguring the AP

Assume that the IP address of the RADIUS server is 192.168.0.200, the RADIUS password is 12345678, and the port number for authencaon is 1812.

Assume that the second SSID of the AP is used.

2.4 GHz wireless network setup is used for illustraon here. The conguraon procedure for 5 GHz wireless network is similar.

Step 1 Choose Wireless > SSID Setup.

Step 2 Select the second SSID from the SSID drop-down list box.

Step 3 Select the Enable check box.

Step 4 Change the value of the SSID text box to hot_spot.

Step 5 Set Security Mode to WPA2.

Step 6 Set RADIUS Server, RADIUS Port, and RADIUS Password to 192.168.0.200, 1812, and 12345678 respectively.

Step 7 Set Cipher Type to AES.

Step 8 Click Save.

2.4GHz SSID 5GHz SSID * SSID hot_spot * Enable ✓ Broadcast SSID Enable AP Isolation Disable Enable WMF Disable Enable Probe Broadcast Packets Disable Enable Control Maximum Clients 48 (Range:1~128) * SSID hot_spot Chinese SSID Encode UTF-8 *Security Mode WPA2 *RADIUS Server: 192.168.0.200 *RADIUS Port: 1812 (Range: 1025~65535,default: 1812) *RADIUS Password: .......... * Cipher Type AES TKIP TKIP&AES Save Restore Help

--End

■ Conguring the RADIUS server

Windows 2003 is used as an example to describe how to congregate the RADIUS server.

Step 1 Congure a RADIUS client.

In the Computer Management dialog box, double-click Internet Authencaon Service, right-click RADIUS Clients, and choose New RADIUS Client.

Internet Authentication Service File Action View Help Internet Authentication Service (Local) RADIUS Clients Remote Access Remote Access Connection Rec Connection Remote RA New RADIUS Client New View Refresh Export List... Help Friendly Name Address There are no items to show in this view. New Client

Enter a RADIUS client name (which can be the name of the AP) and the IP address of the CPE, and click Next.

New RADIUS Client Name and Address Type a friendly name and either an IP Address or DNS name for the client. Friendly name: root Client address (IP or DNS): 192.168.0.254 Verify... IP address of your AP < Back Next > Cancel

Enter 12345678 in the Shared secret and Conrm shared secret text boxes, and click Finish.

New RADIUS Client Additional Information If you are using remote access policies based on the client vendor attribute, specify the vendor of the RADIUS client. Client-Vendor: RADIUS Standard Shared secret: ********** Confirm shared secret: ********** Request must contain the Message Authenticator attribute Password same as that specified by RADIUS Password on the AP < Back Finish Cancel

Step 2 Congure a remote access policy.

Right-click Remote Access Policies and choose New Remote Access Policy.

Internet Authentication Service File Action View Help Internet Authentication Service (Local) RADIUS Clients Remote Access Logging Remote Access Policies Connection Request Pr New Remote Access Policy New View Refresh Export List... Help Name Order Connections to Microsoft Routing and Remote A... 1 Connections to other access servers 2 New Remote Access Policy New View Refresh Export List... Help New Remote Access Policy

In the New Remote Access Policy Wizard dialog box that appears, click Next.

Internet Authentication Service File Action New Remote Access Policy Wizard Welcome to the New Remote Access Policy Wizard This wizard helps you set up a remote access policy, which is a set of conditions that determine which connection requests are granted access by this server. To continue, click Next. < Back Next > Cancel Start Internet Authenticati... dnsmgmt - [DNS\WIN200... 2:36 PM

Enter a policy name and click Next.

New Remote Access Policy Wizard Policy Configuration Method The wizard can create a typical policy, or you can create a custom policy. How do you want to set up this policy? Use the wizard to set up a typical policy for a common scenario Set up a custom policy Type a name that describes this policy. Policy name: root Example: Authenticate all VPN connections. < Back Next > Cancel

Select Ethernet and click Next.

New Remote Access Policy Wizard Access Method Policy conditions are based on the method used to gain access to the network. Select the method of access for which you want to create a policy. ○ VPN Use for all VPN connections. To create a policy for a specific VPN type, go back to the previous page, and select Set up a custom policy. ○ Dial-up Use for dial-up connections that use a traditional phone line or an Integrated Services Digital Network (ISDN) line. ○ Wireless Use for wireless LAN connections only. ● Ethernet Use for Ethernet connections, such as connections that use a switch. < Back Next > Cancel

Select Group and click Add.

New Remote Access Policy Wizard User or Group Access You can grant access to individual users, or you can grant access to selected groups. Grant access based on the following: ○ User User access permissions are specified in the user account. ● Group Individual user permissions override group permissions. Group name: Add... Remove < Back Next > Cancel

Enter 802.1x in the Enter the object names to select text box, click Check Names, and click OK.

Select Groups Select this object type: Groups Object Types... From this location: comba.com Locations... Enter the object names to select (examples): 802.1x Check Names Advanced... OK Cancel

Select Protected EAP (PEAP) and click Next.

New Remote Access Policy Wizard Authentication Methods EAP uses different types of security devices to authenticate users. Select the EAP type for this policy. Type: Protected EAP (PEAP) Configure... < Back Next > Cancel

Click Finish. The remote access policy is created.

New Remote Access Policy Wizard Completing the New Remote Access Policy Wizard You have successfully completed the New Remote Access Policy Wizard. You created the following policy: root Conditions: NAS-Port-Type matches "Ethernet" AND Windows-Groups matches "COMBA\802.1x" Authentication: EAP(Protected EAP (PEAP)) Encryption: Basic, Strong, Strongest, No encryption To close this wizard, click Finish. < Back Finish Cancel

Right-click root and choose Properes. Select Grant remote access permission, select NAS-Port-Type matches "Ethernet" AND, and click Edit.

root Properties Settings Specify the conditions that connection requests must match. Policy conditions: NAS-Port-Type matches "Ethernet" AND Windows-Groups matches "COMBA\802.1x" Add... Edit... Remove If connection requests match the conditions specified in this policy, the associated profile will be applied to the connection. Edit Profile... Unless individual access permissions are specified in the user profile, this policy controls access to the network. If a connection request matches the specified conditions: Deny remote access permission Grant remote access permission OK Cancel Apply

Select Wireless – Other, click Add, and click OK.

NAS-Port-Type Available types: PIAFS SDSL - Symmetric DSL Sync (T1 Line) Token Ring Virtual (VPN) Wireless - IEEE 802.11 Wireless - Other X.25 X.75 xDSL - Digital Subscrib Add >> << Remove Selected types: Ethernet Wireless - IEEE 802.11 OK Cancel

Click Edit Prole, click the Authencaon tab, congure sengs as shown in the following gure, and click OK.

Edit Dial-in Profile Dial-in Constraints IP Multilink Authentication Encryption Advanced Select the authentication methods you want to allow for this connection. EAP Methods ✓ Microsoft Encrypted Authentication version 2 (MS-CHAP v2) □ User can change password after it has expired ✓ Microsoft Encrypted Authentication (MS-CHAP) □ User can change password after it has expired ✓ Encrypted authentication (CHAP) ✓ Unencrypted authentication (PAP, SPAP) Unauthenticated access ✓ Allow clients to connect without negotiating an authentication method. OK Cancel Apply

When a message appears, click No.

Step 3 Congure user informaon. Create a user and add the user to group 802.1x. --End

Windows 7 is taken as an example to describe the procedure.

Step 1 Choose Start > Control Panel, and click Network and Internet > Network and Sharing Center > Manage wireless networks.

Control Panel Home Manage wireless networks Change adapter settings Change advanced sharing settings View your basic network information and set up connections ADMIN-PC (This computer) Network 4 Internet See full map View your active networks Connect or disconnect Network 4 Work network Access type: No Internet access Connections: Local Area Connection 5 Change your networking settings Set up a new connection or network Set up a wireless, broadband, dial-up, ad hoc, or VPN connection; or set up a router or access point. Connect to a network Connect or reconnect to a wireless, wired, dial-up, or VPN network connection. Choose homegroup and sharing options Access files and printers located on other network computers, or change sharing settings. Troubleshoot problems Diagnose and repair network problems, or get troubleshooting information. See also HomeGroup Internet Options Windows Firewall

Step 2 Click Add.

Manage wireless networks that use (Wireless Network Connection) Windows tries to connect to these networks in the order listed below. Add Adapter properties Profile types Network and Sharing Center D items

Step 3 Click Manually create a network prole.

Manually connect to a wireless network How do you want to add a network? Manually create a network profile This creates a new network profile or locates an existing network and saves a profile for the network on your computer. You need to know the network name (SSID) and security key (if applicable). Create an ad hoc network This creates a temporary network for sharing files or an Internet connection Cancel

Step 4 Enter wireless network informaon, select Connect even if the network is not broadcasts, and click Next.

Manually connect to a wireless network Enter information for the wireless network you want to add Network name: hot_spot Security type: WPA2-Enterprise Encryption type: AES Security Key: Same as the security mode of the WiFi network of the AP Hide characters ✓ Start this connection automatically ✓ Connect even if the network is not broadcasting Warning: If you select this option, your computer's privacy might be at risk. Next Cancel

Step 5 Click Change conncon sengs.

Manually connect to a wireless network Successfully added hot_spot Change connection settings Open the connection properties so that I can change the settings. Close

Step 6 Click the Security tab, select Microso: Protected EAP (PEAP), and click Setngs.

hot_spot Wireless Network Properties Connection Security Security type: WPA2-Enterprise Encryption type: AES Choose a network. authentication method: Microsoft: Protected EAP (PEAP) Settings Remember my credentials for this connection each time I'm logged on Advanced settings OK Cancel

Step 7 Deselect Validate server cercate and click Congure.

Protected EAP Properties When connecting: Validate server certificate Connect to these servers: Trusted Root Certification Authorities: Baltimore CyberTrust Root Class 3 Public Primary Certification Authority GlobalSign Root CA Microsoft Root Authority Microsoft Root Certificate Authority Microsoft Root Certificate Authority 2011 Thawte Timestamping CA Do not prompt user to authorize new servers or trusted certification authorities. Select Authentication Method: Secured password (EAP-MSCHAP v2) Configure... Enable Fast Reconnect Enforce Network Access Protection Disconnect if server does not present cryptobinding TLV Enable Identity Privacy OK Cancel

Step 8 Deselect Automacally use my Windows logon name and password (and domain if any) and click OK.

EAP MSCHAPv2 Properties When connecting: Automatically use my Windows logon name and password (and domain if any). OK Cancel

Step 9 Click Advanced sengs.

hot_spot Wireless Network Properties Connection Security Security type: WPA2-Enterprise Encryption type: AES Choose a network authentication method: Microsoft: Protected EAP (PEAP) Settings Remember my credentials for this connection each time I'm logged on Advanced settings OK Cancel

Step 10 Select User or computer authencaon and click OK.

Advanced settings 802.1X settings 802.11 settings Specify authentication mode: User or computer authentication Save credentials Delete credentials for all users Enable single sign on for this network Perform immediately before user logon Perform immediately after user logon Maximum delay (seconds): 10 Allow additional dialogs to be displayed during single sign on This network uses separate virtual LANs for machine and user authentication OK Cancel

Step 11 Click Close.

Manually connect to a wireless network Successfully added hot_spot Change connection settings Open the connection properties so that I can change the settings. Close

Manage wireless networks that use (Wireless Network Connection) Windows tries to connect to these networks in the order listed below. Add Adapter properties Profile types Network and Sharing Center Networks you can view, modify, and reorder (1) hot_spot Security: WEP Type: Any supported 8 items

Step 12 Click the network icon in the lower-right corner of the desktop and choose the wireless network of the CPE such as hot\_spot in this example.

Currently connected to: Network 4 Internet access Wireless Network Connection hot_spot Connect automatically Connect Open Network and Sharing Center 8:52 AM 2/21/2017

Step 13 In the Windows Security dialog box that appears, enter the user name and password set on the RADIUS server and click OK.

Windows Security Network Authentication Please enter user credentials OK Cancel

--End

Vericaon

Wireless devices can connect to the wireless network hot_spot.

7.2 Radio Sengs

7.2.1 Overview

The Radio module is used to set Radio parameters of the AP. The following briefy describes the SSID isolaon funcon.

Inter-SSID User Isolaon

This funcon isolates the wireless clients connected to dierent wireless networks of the AP. For example, if user 1 connects to the wireless network corresponding to SSID1, whereas user 2 connects to the wireless network corresponding to SSID2, the two users cannot communicate with each other aer SSID isolaon is implemented.

graph TD
    A["Disable Inter-SSID User Isolaon"] --> B["SSID1"]
    A --> C["SSID2"]
    B --> D["Mobile Device 1"]
    B --> E["Mobile Device 2"]
    C --> F["Mobile Device 3"]
    C --> G["Mobile Device 4"]
    D --> H["Device 1 & 2"]
    E --> I["Device 1 & 2"]
    F --> J["Device 1 & 2"]
    G --> K["Device 1 & 2"]
    style A fill:#f9f,stroke:#333
    note right of A: Devices connect to SSID1 and SSID2 can communicate with each other

Enable Inter-SSID User Isolaon SSID1 SSID2 Devices connect to SSID1 and SSID2 cannot communicate with each other

7.2.2 Changing the Radio Sengs

2.4 GHz wireless network setup is used for illustraon here. The conguraon procedure for 5 GHz wireless network is similar.

Step 1 Choose Wireless > Radio.

Step 2 Change the parameters as required. Generally, you only need to change the Enable Wireless, Channel, Channel Lockout, TX Power and Power Lockout sengs.

Step 3 Click Save.

2.4GHz Radio 5GHz Radio Enable Wireless ✓ Country China ✓ Network Mode 11b/g/n mixed ✓ Channel Auto ✓ Channel Bandwidth 20 40 20/40 Extension Channel Auto ✓ Channel Lockout ✓ TX Power 20 (dBm,Range: 10 ~ 20; Default: 20) Power Lockout ✓ Preamble Long Preamble Short Preamble Short GI Disable Enable Inter-SSID User Isolation Enable Disable Save Restore Help

--End

Parameter descripon

Parameter	Descripon
Enable Wireless	It species whether to enable the wireless funcon of the AP.
Country	It species the country or region where the AP is used. This parameter helps comply with channel regulaons of the country or region.
Network Mode	It species the wireless network mode of the AP.Available opons of 2.4 GHz wireless network include 11b/g/n mixed, 11b, 11g, and 11b/g/n mixed. Available opons of 5 GHz wireless network include 11a, 11ac and 11a/n. This parameter can be set if Channel Lockout is not selected.11b: It indicates that only clients working in the 11b network mode can connect to the AP.11g: It indicates that only clients working in the 11g network mode can connect to the AP.11b/g mixed: It indicates that only clients working in the 11b or 11g network mode can connect to the AP.11b/g/n mixed: It indicates that only clients working in the 11b, 11g, or 11n network mode can connect to the AP.11a: It indicates that only clients working in the 11a network mode can connect to the AP.11ac: It indicates that only clients working in the 11ac network mode can connect to the AP.11a/n: It indicates that only clients working in the 11a or 11n network mode can connect to the AP.
Channel	It species the operang channel of the AP. This parameter can be set if Channel Lockout is not selected.
Channel Bandwidth	It species the bandwidth of the operang channel of the AP. This parameter can be set if Channel Lockout is not selected.20/20MHz: It indicates that the AP only uses 20 MHz channel bandwidth.40/40MHz: It indicates that the AP only uses 40 MHz channel bandwidth. The 40 is eecve only for the 802.11b/g/n mixed network mode. The 40MHz opon is eecve for the 802.11ac and 802.11a/n.20/40: It indicates that the AP automacally adjusts its channel bandwidth to 20 MHz or 40 MHz according to the ambient environment. This opon is eecve only for 802.11b/g/n mixed network mode.80MHz: It indicates that the AP only uses 80 MHz channel bandwidth. This opon is eecve only for 802.11ac network mode.
Expansion Channel	It species an additional channel used to increase the channel bandwidth if the AP works in the 802.11b/g/n mixed network mode and the channel bandwidth opon 20/40 is selected.
Channel Lockout	It is used to lock the selected channel. Aer a channel is locked, parameters of the channel cannot be changed, including Country, Network Mode, Channel, Channel Bandwidth, and Expansion Channel.
TX Power	It species the transmit power of the AP. This parameter can be set if Power Lockout is not selected.
Power Lockout	It is used to lock the TX power. If this opon is selected, the TX power cannot be changed.
Preamble	It species whether to use long preamble or short preamble. A preamble is a group of bits located at the beginning of a packet to enable a receiver to perform synchronizaon and prepare for receiving data.By default, the Long Preamble opon is selected for compatibility with old network adapters installed on wireless clients. To achieve beer synchronizaon performance of networks, you can select the Short Preamble opon.
Short GI	It species short guard interval.The purpose of the guard interval is to introduce immunity to propagaon delays. With this funcon enabled, the AP can yield a 10% improvement in data throughput.
Inter-SSID User Isolaon	It species whether to isolate the wireless clients connected to the AP with dierent SSIDs.Disable: It indicates that the wireless clients connected to the AP with dierent SSIDs can communicate with each other.Enable: It indicates that the wireless clients connected to the AP with dierent SSID cannot communicate with each other. This improves wireless network security.

7.3 Radio Opmizing

7.3.1 Overview

Applicaon Scenarios

Wireless networks are widely applied to the following two scenarios:

■ Coverage-oriented scenario

This scenario applies to places which require large WiFi coverage, such as oces, public buildings, schools, warehouses, and hospitals.

■ Capacity-oriented scenario

This scenario applies to large, crowd places which require mulple AP deployment, such as

– Conference halls, theatres, showrooms, and ballrooms;
- Indoor/open stadium;
- Classrooms at colleges and universities
- Airports and railway staons.

Performance Opmizaon Parameters

To address dierent demand of both coverage-oriented and capacity-oriented scenarios, this AP provides a series of parameters for radio opmizaon, facilitang our customers to create qualified wireless network service.

■ 5 GHz SSID Priority

Although the 2.4 GHz band is more widely used than the 5 GHz band in actual wireless networks applicaon, channels and signals on 2.4 GHz suer more serious congeson and interference since there are only 3 non-overlapped communicaon channels on this band. The 5 GHz band could provide more non-overlapped communicaon channels. The quantity could reach more than 20 in some countries.

With the evolvement of the wireless networks, wireless clients that support both the 2.4 GHz and 5 GHz are more popular. However, by default, such dual-band wireless clients choose the 2.4 GHz to connect, resulting in even worse congeson of the 2.4 GHz band and the waste of the 5 GHz band.

The 5 GHz SSID Priority funcons enables such dual-band wireless clients to connect the 5 GHz band on network inializaon if the 5 GHz signal strength the AP received reaches or exceeds the 5 GHz threshold so as to improve the ulizaon of the 5 GHz band, reduce the load and interference on the 2.4 GHz band, thus beering user experience.

Assume that the Maximum Clients of both 2.4 GHz and 5 GHz WiFi networks are set to 10.

Disable 5 GHz SSID Priority Enable 5 GHz SSID Priority 2.4 GHz 5 GHz 2.4 GHz 5 GHz Clients connected to 2.4 GHz network Clients connected to 5 GHz network Clients connected to 2.4 GHz network Clients connected to 5 GHz network

The 5 GHz SSID Priority funcon takes eect only when both of the 2.4 GHz and 5 GHz networks are enabled, and the two networks share the same SSID, security mode and password.

Airme Scheduling

In mixed wireless rates environment, the tradional FIFO (First-in First-out) allocates more air interface me to clients with low transmission capacity and low spectrum eciency, reducing the system throughput of each AP then the system ulizaon.

The Airme Scheduling funcon allocates downlink transmission me to clients so that clients with high transmission rate could transmit more data, improving the throughput of each AP and quantity of clients allowed to be connected.

7.3.2 Opmizing Radio

5 GHz wireless network setup is used for illustraon here. The conguraon procedure for 2.4 GHz wireless network is similar.

You are recommended to retain the default sengs if without the professional guidance.

Step 1 Choose Wireless > Radio Opmizing.

Step 2 Click the tab to select the band of network to be optimized

Step 3 Change the parameters as needed.

Step 4 Click Save.

2.4GHz Radio Optimizing 5GHz Radio Optimizing Beacon Interval 100 (Range: 100 ~ 999; Default: 100) Save Fragment Threshold 2346 (Range: 256 ~ 2346; Default: 2346) Restore RTS Threshold 2347 (Range: 1 ~ 2347; Default: 2347) DTIM Interval 1 (Range: 1 ~ 255; Default: 1) Help Receive Signal Strength Enable Disable 5GHz SSID Priority Enable Disable 5GHz Threshold -80 (dBm) Airtime Scheduling Enable Disable APSD Enable Disable Aging Time 5 minutes Basic Rate Sets ✓6✓9✓12✓18✓24✓36✓48✓54 All Supported Rate Sets ✓6✓9✓12✓18✓24✓36✓48✓54 All

--End

Parameter descripon

Parameter	Descripon
Beacon Interval	It species the interval for transming the Beacon frame.The Beacon frame is transmied at the specied interval to announce the presence of a wireless network. Generally, a smaller interval enables wireless clients to connect to the AP more quickly, while a larger interval ensures higher data transmission eciency.
Fragment Threshold	It species the threshold of a fragment.Fragmenng is a process that divides a frame into several fragments, which are transmied and acknowledged separately. If the size of a frame exceeds this threshold, the frame is fragmented.In case of a high error rate, you can reduce the threshold to enable the AP to resend only the fragments that have not been sent successfully, so as to increase the frame throughput.In an environment without interference, you can increase the threshold to reduce the number of acknowledgement mes, so as to increase the frame throughput.
RTS Threshold	It species the frame length threshold for triggering the RTS/CTS mechanism.If a frame exceeds this threshold, the RTS/CTS mechanism is triggered to reduce conicts. The unit is byte.Set the RTS threshold based on the actual situaon. An excessively small value increases the RTS frame transmission frequency and bandwidth requirement. A higher RTS frame transmission frequency enables a wireless network to recover from conicts quicker. For a wireless network with high user density, you can reduce this threshold for reducing conicts.The RTS mechanism requires some network bandwidth. Therefore, it is triggeredonly when frames exceed this threshold.
DTIM Interval	It species the interval for transming the Delivery Trac Indicaon Message (DTIM) frame. The unit is Beacon.A countdown starts from this value. The AP transmits broadcast and mulcast frames in its cache only when the countdown reaches zero.For example, if DTIM Interval is set to 1, the AP transmits all cached frames aer each beacon frame is transmied.
Receive Signal Strength	It species the minimum strength of received signals acceptable to the AP. If the strength of the signals transmied by a wireless device is weaker than this threshold, the wireless device cannot connect to the AP.If there are mulple APs, an appropriate value of this parameter ensures that wireless clients connect to the APs with strong signals.
5GHz SSID Priority	Enable: this AP lets the wireless clients that support 2.4 GHz and 5 GHz take priority to connect to 5 GHz network.Disable: wireless clients connect to 2.4 GHz or 5 GHz network at random.
5GHz Threshold	It species the minimum strength of received signals acceptable to the device that allows a wireless device to connect to 5 GHz WiFi network. If the strength of the signals transmied by a wireless device is stronger than this threshold, the wireless device can connect to the 5 GHz WiFi network. Otherwise, it connects to 2.4 GHz WiFi network, or cannot connect to the device.
Airme Scheduling	It species whether to enable the Airme Scheduling funcon. It helps equal clients' transmission me, thus improving the experience of clients with high transmission rate.
APSD	It species whether to enable the Automac Power Save Delivery (APSD) funcon. It helps reduce power consumption of the AP. By default, it is disabled.
Aging Time	It is used to set the aging me of clients. Aer a wireless client connects to the AP, the AP disconnects from the wireless client if no data is exchanged between them within the interval.
Basic Rate Sets	It species rates that wireless clients are required to support in order to connect to the wireless networks of this device.
Supported Rate Sets	It species the additional rates that the AP supports, which are oponal to wireless clients.

7.4 Frequency Analysis

7.4.1 Overview

This module includes Frequency Analysis and Rogue AP Detecon.

■ Frequency Analysis

This funcon enables you to check the number of signals on each channel and the usage of channels. Then you can select a low usage channel for this AP to improve the wireless transmission eciency.

■ Rogue AP Detecon.

This funcon enables you to know wireless networks informaon nearby, including SSID, MAC address, channel and wireless signal strength.

7.4.2 Checking the Usage of Channels

Step 1 Choose Wireless > Frequency Analysis.

Step 2 Click the tab to select a radio band to setup. 2.4 GHz Frequency Analysis is used for illustraon here.

Step 3 Click Enable Scan.

2.4GHz Frequency Analysis	5GHz Frequency Analysis	2.4GHz Rogue AP Detection	5GHz Rogue AP Detection
Frequency Analysis	Enable Scan		Help

--End

Wait for a moment. The following table shows the scanning result.

■ Green Channel Ulizaon indicates that the channels are in good condition.
■ Yellow Channel Ulizaon indicates that the channels are congested.
■ Red Channel Ulizaon indicates that the channels are not available.

2.4GHz Frequency Analysis 5GHz Frequency Analysis 2.4GHz Rogue AP Detection 5GHz Rogue AP Detection Frequency Analysis Enable Scan Help Channel 1 2 3 4 5 6 7 8 9 10 11 12 13 Number of Signals 4 7 5 3 4 14 2 6 5 1 11 0 2 Channel Utilization(%) 64 55 36 17 52 87 89 35 42 43 75 46 29

7.4.3 Checking the Wireless Networks Nearby

Step 1 Choose Wireless > Frequency Analysis.

Step 2 Select the radio band of the wireless network to be checked. 2.4 GHz Rogue AP Detecon is used for illustraon here.

Step 3 Click Enable Scan.

2.4GHz Frequency Analysis	5GHz Frequency Analysis	2.4GHz Rogue AP Detection	5GHz Rogue AP Detection
Illegal AP Detection	Enable Scan		Help

--End

Wait for a moment. The following table shows the scanning result.

2.4GHz Frequency Analysis	5GHz Frequency Analysis	2.4GHz Rogue AP Detection			5GHz Rogue AP Detection
Illegal AP Detection	Disable Scan					Help
ID	SSID	MAC Address	Network Mode	Channel	Bandwidth	Security
1	Tenda_83F168	c8:3a:35:83:f1:69	bgn	3	20MHz	none
2	mymymy	50:2b:7b:ff:30:81	bgn	6	40MHz	wpa&wpa2/aes...
3	1smater	50:2b:73:f0:3a:61	bgn	6	20MHz	wpa2/aes
4	Tenda_366FC0	c8:3a:35:36:6f:c1	bgn	8	20MHz	wpa&wpa2/aes
5	Tenda_83F169	d8:38:0d:5a:92:81	bgn	6	20MHz	wpa2/aes
6	Tenda_83F110	c8:3a:35:83:f1:11	bgn	4	20MHz	none
7	1@@@@@@	c8:3a:35:83:f1:d1	bgn	4	40MHz	wpa&wpa2/aes...
8	1115Tenda_D70FA8	c8:3a:35:d7:0f:a9	bgn	9	20MHz	wpa&wpa2/aes
9	001-666	c8:3a:35:f1:94:79	bgn	6	20MHz	wpa&wpa2/aes...
10	Tenda_099090	50:2b:73:09:90:91	bgn	11	20MHz	none
11	Tenda_843F00	c8:3a:35:84:3f:01	bgn	10	20MHz	none
12	Tenda_0758	c8:3a:35:ef:07:69	bgn	6	40MHz	wpa&wpa2/aes...

7.5 WMM Setup

7.5.1 Overview

802.11 networks oer wireless access services based on the Carrier Sense Mulple Access with Collision Avoidance (CSMA/CA) channel compeon mechanism, which allows all wireless clients to fairly compete for channels. All the services implemented over wireless networks share the same channel compeon parameters. Nevertheless, dierent services usually have dierent requirements for bandwidth, delay, and jitter. This requires wireless networks to oer accessibility based on the services implemented over the networks.

WMM is a wireless QoS protocol used to ensure that packets with high priories are transmied rst. This ensures beer voice and video service experience over wireless networks.

■ WMM involves the following terms:

• Enhanced Distributed Channel Access (EDCA): It is a channel compeon mechanism to ensure that packets with higher priories are assigned more bandwidth and transmied earlier.
• Access Category (AC): AC: The WMM mechanism divides WLAN trafc by priority in descending order into the AC-VO (voice stream), AC-VI (video stream), AC-BE (best eort), and AC-BK (background) access categories. The access categories use queues with dierent priories to send packets. The WMM mechanism ensures that packets in queues with higher priories have more opportunities to access channels.

According to the 802.11 protocol family, all devices listen on a channel before using the channel to send data. If the channel stays idle for or longer than a specied period, the devices wait a random backo period within the contenon window. The device whose backo period expires rst can use the channel. The 802.11 protocol family applies the same backo period and contenon window to all devices across a network to ensure that the devices have the same channel contenon opportunity.

EDCA Parameters

WMM changes the contenon mechanism of 802.11 networks by dividing packets into four ACs, among which the ACs with higher priories have more opportunities to access channels. The ACs help achieve dierent service levels.

WMM assigns each AC a set of EDCA parameters for channel contenon, including:

• Arbitraon Inter Frame Spacing Number (AIFSN): Different from the xed distributed inter-frame spacing (DIFS) specied in the 802.11 protocol family, AIFSN varies across ACs. A greater AIFSN indicates a longer backo period. See AIFS in the following gure.
• Contenon window minimum (CWmin) and contenon window maximum (CWmax) specify the average backo period. The period increases along with these two values. See the backo slots in the following gure.
  Transmission Opportunity (TXOP): It species the maximum channel use duraon aer successful channel contenon. The duraon increases along with this value. The value 0 indicates that a device can send only one packet through a channel aer winning contenon for the channel.

graph TD
    A["Busy Medium"] --> B["AIFS[AC-BK"]]
    B --> C["Backoff slots"]
    D["AIFS[AC-BE"]] --> E["Backoff slots"]
    F["AIFS[AC-VI"]] --> G["Backoff slots"]
    H["AIFS[AC-VO"]] --> I["Backoff slots"]
    J["DIFS"] --> K["Contention Window"]
    L["Backoff slots"] --> M["Next Frame"]

ACK Policies

WMM species the Normal ACK and No ACK policies.

According to the No ACK policy, no ACK packet is used during wireless packet transmission to acknowledge packet reception. This policy is applicable to scenarios where interference is mild and can effectively improve transmission efficiency. In case of strong interference, lost packets are not sent again if this policy is adopted. This leads a higher packet loss rate and reduces the overall performance.
According to the Normal ACK policy, each me a receiver receives a packet, it sends back an ACK packet to acknowledge packet recepon.

7.5.2 Changing the WMM Sengs

By default, the WMM funcon of the AP is enabled and the Opmized For Capacity mode is adopted. Procedure for changing the WMM sengs:

Step 1 Choose Wireless > WMM Setup.

Step 2 Select a radio band to setup. 2.4 GHz WMM is used for illustraon here.

Step 3 Set the WMM to Enable.

Step 4 Select the required WMM opmizaon mode.

Step 5 If you select Custom, set the WMM parameters as required.

Step 6 Click Save.

2.4GHz WMM 5GHz WMM WMM Disable Enable WMM Optimization Mode Optimized For Throughput (Concurrent Users <=10) Optimized For Capacity (Concurrent Users >=10) Custom No ACK EDCA AP Parameters CWmin CWmax AIFSN TXOP Limit AC_BE 7 127 1 4096 AC_BK 15 1023 7 0 AC_VI 7 15 1 3008 AC_VO 3 7 1 1504 EDCA STA Parameters CWmin CWmax AIFSN TXOP Limit AC_BE 31 255 1 3008 AC_BK 15 1023 7 0 AC_VI 7 15 2 3008 AC_VO 3 7 2 1504

Parameter descripon

Parameter	Descripon
WMM	Enable: It is used to enable the WMM funcon.Disable: It is used to disable the WMM funcon.
WMM Opmizaon Mode	It species the WMM opmizaon modes supported by the AP:Opmized For Throughput: If 10 or less clients are connected to the AP, you are recommended to select this mode to increase client throughput.Opmized For Capacity: If more than 10 clients are connected to the AP, you are recommended to select this mode to ensure client connecvity.Custom: This mode enables you to set the WMM EDCA parameters for manual opmizaon.
No ACK	If the check box is selected, the No ACK policy is adopted.If the check box is deselected, the Normal ACK policy is adopted.
EDCA Parameters	For details, refer to secon7.5.1 Overview.

7.6 Access Control

7.6.1 Overview

It species, based on MAC address Iter rules, the wireless devices that can or cannot access the wireless networks of the AP. Devices that have been controlled cannot connect to the corresponding wireless network.

The AP supports the following MAC address Iter rules:

• Disable: It indicates that access control is disabled.
• Allow: It indicates that only the wireless devices with the specied MAC addresses can access the wireless networks of the AP.
• Disallow: It indicates that only the wireless devices with the specied MAC addresses cannot access the wireless networks of the AP.

7.6.2 Conguring Access Control

Step 1 Choose Wireless > Access Control.

Step 2 Click the tab to select a radio band to setup. 2.4 GHz Access Control is used for illustraon here.

Step 3 From the SSID drop-down list box, select the SSID of the wireless network on which access control must be implemented.

Step 4 Select an access control mode from the MAC Filter Mode drop-down list box.

Step 5 If you select Allow or Disallow, enter the MAC addresses to control in the access control list and click Add.

If a wireless device to be controlled has been connected to the AP, you can click Add corresponding to the device in the wireless client list to directly add it to the access control list.

Step 6 Click Save.

2.4GHz Access Control 5GHz Access Control Specify a list of devices to allow or disallow a connection to your wireless network via the devices' MAC addresses. This can be set separately on each SSID. SSID Tenda_099450 MAC Filter Mode Allow Wireless client list Add to List ID MAC Address IP Address Connection Duration Add 1 1C:5C:F2:B4:40:08 192.168.60.133 00:00:28 Add MAC Address Action 12 12 12 12 12 12 Add 1 12:12:12:12:12:12 Enable Delete Wireless access control list --End

Parameter descripon

Parameter	Descripon
SSID	It species the SSID that requires wireless client access control.
MAC Filter Mode	It species the mode for ltering MAC addresses.Disable: It indicates that access control is disabled.Allow: It indicates that only the wireless clients on the access control list can connect to the AP with the selected SSID.Disallow: It indicates that only the wireless clients on the access control list cannot connect to the AP with the selected SSID.

7.6.3 Example of Conguring Access Control

2.4 GHz Access Control is used for illustraon here.

Networking requirement

A wireless network whose SSID is Home has been set up in a large apartment. Only family members are allowed to connect to the wireless network.

The Access Control funcon of the AP is recommended. The family members have three wireless devices whose MAC addresses are C8:3A:35:00:00:01, C8:3A:35:00:00:02, and C8:3A:35:00:00:03.

Conguraon procedure:

Step 1 Choose Wireless > Access Control.

Step 2 Select Home from the SSID drop-down list box.

Step 3 Select Allow from the MAC Filter Mode drop-down list box.

Step 4 Enter C8:3A:35:00:00:01 in the MAC Address text box and click Add. Repeat this step to add C8:3A:35:00:00:02 and C8:3A:35:00:00:03 as well.

Step 5 Click Save.

--End

The following gure shows the conguraon.

2.4GHz Access Control 5GHz Access Control Specify a list of devices to allow or disallow a connection to your wireless network via the devices' MAC addresses. This can be set separately on each SSID. SSID Home MAC Filter Mode Allow ID MAC Address IP Address Connection Duration Add to List No clients connected! MAC Address Action Add 1 C8:3A:35:00:00:01 Enable Delete 2 C8:3A:35:00:00:02 Enable Delete 3 C8:3A:35:00:00:03 Enable Delete

Vericaon

Only the specied wireless devices can connect to the Home wireless network.

7.7 Advanced

7.7.1 Overview

This module is used to congregate Recognize Terminal Type and Filter Broadcast Data sengs.

■ Recognize Terminal Type

This funcon is used to recognize the type of the devices connected to the wireless network of the AP for ecient management. The AP can recognize Android, iOS, iPhone, Windows, Mac OS and Other.

■ Filter Broadcast Data sengs

By default, the AP forwards lots of invalid broadcast packets, which may aect normal packets transmission. This funcon Iters broadcast packets and reduces airme consumpon, ensuring bandwidth of normal packets transmission.

7.7.2 Changing the Advanced Sengs

Step 1 Choose Wireless > Advanced.

Step 2 Change the parameters as required.

Step 3 Click Save.

Advanced Recognize Terminal Type Disable Enable Filter Broadcast Data Disable Enable Mode Option Only accept DHCP and ARP paci ▼ Only accept DHCP and ARP packets Only accept ARP packets Save Restore Help

--End

Parameter descripon

Parameter	Descripon
Recognize Terminal Type	Enable: It species whether to enable this funcon. With this funcon enabled, you can check the terminal type by choosing Status > Client List.Disable: It species whether to disable the funcon.
Filter Broadcast Data	Enable: It species whether to enable this funcon. With this funcon enabled, the AP reduces airme consumpon and ensues bandwidth of normal packets transmission.Disable: It species whether to disable the funcon.
Mode Opon	This opon is available aer enabling Filter Broadcast Data.Only accept DHCP and ARP packets: It indicates that the AP Iters all broadcast or mulcast packets except DHCP and ARP broadcast packets.Only accept ARP packets: It indicates that the AP Iters all broadcast or mulcast packets except ARP broadcast packets.

7.8 QVLAN Sengs

7.8.1 Overview

The AP supports 802.1Q VLANs and is applicable in a network environment where 802.1Q VLANs have been dened. By default, the QVLAN funcon is disabled.

7.8.2 Conguring the QVLAN Funcon

Step 1 Choose Wireless > QVLAN.

Step 2 Change the parameters as required. Generally, you only need to change the Enable, and 2.4 GHz and 5 GHz SSID VLAN ID sengs.

Step 3 Click Save.

QVLAN *Enable PVID 1 Manage VLAN 1 2.4G SSID VLAN ID (1~4094) Home 1000 5G SSID VLAN ID (1~4094) Tenda_099458_5G 1000 Save Restore Help

--End

Parameter descripon

Parameter	Descripon
Enable	It species whether to enable the QVLAN funcon of the AP. By default, it is disabled.
PVID	It species the ID of the default nave VLAN of the trunk port of the AP. The default value is 1.
Management VLAN	It species the ID of the AP management VLAN. The default value is 1.Aer changing the management VLAN, you can manage the AP only aer connecng your computer or AP controller to the new management VLAN.
2.4G SSID	It species the currently enabled 2.4 GHz SSIDs of the AP.
5G SSID	It species the currently enabled 5 GHz SSIDs of the AP.
VLAN ID	It species VLAN IDs corresponding to SSIDs. The default value is 1000.Aer the QVLAN funcon is enabled, the wireless interfaces corresponding to SSIDs funcons as access ports. The PVID and VLAN ID of an access port are the same.

If the QVLAN funcon is enabled, tagged data received by a port of the AP is forwarded to the other ports of the VLAN corresponding to the VID in the data, whereas untagged data received by a port of the AP is forwarded to the other ports of the VLAN corresponding to the PVID of the port that receives the data.

The following table describes how ports of dierent link types process transmied and received data.

Port	Method to Process Received Data		Method to Process Transmied Data
	Tagged Data	Untagged Data
Access	Forward the data to other ports of the VLAN corresponding to the VID in the data.	Forward the data to the other ports of the VLAN corresponding to the PVID of the port that receives the data	Transmit data aer removing tags from the data.
Trunk			If the VID and PVID of a port are the same, transmit data aer removing tags from the data.If the VID and PVID of a port are dierent, transmit data without removing tags from the data.

7.8.3 Example of Conguring QVLAN Sengs

Networking requirement

A hotel has the following wireless network coverage requirements:

• Guests are connected to VLAN 2 and can access only the internet.
• Employees are connected to VLAN 3 and can access only the internal server.
• Managers of the hotel are connected to VLAN 4 and can access the internet and the internal server.

Assumpon

The AP enables 2.4 GHz wireless networks and congures the following SSIDs.

• SSID of the wireless network for guests: internet
• SSID of the wireless network for employees: oa
• SSID of the wireless network for hotel managers: VIP

Network Topology

graph TD
    A["Internal Server"] --> B["PoE Switch"]
    B --> C["Router"]
    C --> D["Internet"]
    B --> E["AP"]
    E --> F["AP"]
    style A fill:#f9f,stroke:#333
    style B fill:#ccf,stroke:#333
    style C fill:#cfc,stroke:#333
    style D fill:#fcc,stroke:#333

Conguraon procedure:

■ Congure the AP

Step 1 Log in to the web UI of the AP and choose Wireless > QVLAN.

Step 2 Select the Enable check box.

Step 3 Change the VLAN ID of the SSID internet to 2, the VLAN ID of the SSID oa to 3, and the VLAN ID of the SSID VIP to 4.

Step 4 Click Save.

QVLAN Enable ✓ * PVID 1 Manage VLAN 1 2.4G SSID VLAN ID (1~4094) internet 2 * oa 3 * VIP 4 * 5G SSID VLAN ID (1~4094) Tenda_099458_5G 1000 Save Restore Help

--End

Wait for the automac reboot of the AP.

■ Congure the switch

Create IEEE 802.1Q VLANs described in the following table on the switch.

Port Connected To	Accessible VLAN ID	Port Type	PVID
AP	1, 2, 3, 4	Trunk	1
LAN server	3, 4	Trunk	1
Router	2, 4	Trunk	1

Retain the default sengs of other ports. For details, refer to the user guide for the switch.

■ Congure the router and the internal server

To ensure that wireless devices connected to the AP can access the internet, the router and internal server are required to support the QVLAN funcon. Refer to the following details:

For the router:

Port Connected To	Accessible VLAN ID	Port Type	PVID
Switch	2, 4	Trunk	1

For the internal server:

Port Connected To	Accessible VLAN ID	Port Type	PVID
Switch	3, 4	Trunk	1

For details of conguraon procedure, refer to the user guide of the router and the internal server.

--End

Vericaon

Wireless clients connected to the internet wireless network can access only the internet, the wireless clients connected to the oa wireless network can access only the internal server, and wireless clients connected to VIP wireless network can both access the internet and the internal server.

8 SNMP

8.1 Overview

The Simple Network Management Protocol (SNMP) is the most widely used network management protocol in TCP/IP networks. SNMP enables you to remotely manage all your network devices compliant with this protocol, such as monitoring the network status, changing network device sengs, and receive network event alarms.

SNMP allows automac management of devices from various vendors regardless of physical dierences among the devices.

8.1.1 SNMP Management Framework

The SNMP management framework consists of SNMP manager, SNMP agent, and Management Informaon Base (MIB).

SNMP manager: It is a system that controls and monitors network nodes using the SNMP protocol. The SNMP manager most widely used in network environments is Network Management System (NMS). An NMS can be a dedicated network management server, or an applicaon that implements management funcons in a network device.
- SNMP agent: It is a soware module in a managed device. The module is used to manage data about the device and report the management data to an SNMP manager.
- MIB: It is a collecon of managed objects. It denes a series of attributes of managed objects, including names, access permissions, and data types of objects. Each SNMP agent has its MIB. An SNMP manager can read and/or write objects in the MIB based on the permissions assigned to the SNMP manager.

An SNMP manager manages SNMP agents in an SNMP network. The SNMP manager exchanges management informaon with the SNMP agents using the SNMP protocol.

8.1.2 Basic SNMP Operaons

The AP allows the following basic SNMP operaons:

• Get: An SNMP manager performs this operation to query the SNMP agent of the AP for values of one or more objects.
• Set: An SNMP manager performs this operation to set values of one or more objects in the MIB of the SNMP agent of the AP.

8.1.3 SNMP Protocol Version

The AP is compatible with SNMP V1 and SNMP V2C and adopts the community authencaon mechanism. Community name is used to denote the relationship between an SNMP agent and an SNMP manager. If the community name contained in an SNMP packet is rejected by a device, the packet is discarded. A community name funcons as a password to control SNMP agent access aempts of SNMP managers.

SNMP V2C is compatible with SNMP V1 and provides more funcons than SNMP V1. Compared with SNMP V1, SNMP V2C supports more operaons (GetBulk and InformRequest) and data types (such as Counter64), and provides more error codes for beer disguishing errors.

8.1.4 MIB Introducon

An MIB adopts a tree structure. The nodes of the tree indicate managed objects. A path consists of digits and stars from the root can be used to uniquely identify a node. This path is calling an object idener (OID). The following gure shows the structure of an MIB. In the gure, the OID of A is 1.3.6.1.2.1.1, whereas the OID of B is 1.3.6.1.2.1.2.

graph TD
    A["root"] --> B["1"]
    B --> C["3"]
    C --> D["6"]
    D --> E["1"]
    E --> F["1"]
    E --> G["2"]
    G --> H["3"]
    G --> I["4"]
    I --> J["1 (mib)"]
    J --> K["A"]
    J --> L["B"]
    J --> M["7"]

8.2 Conguring the SNMP Funcon

Step 1 Choose SNMP and set SNMP Agent to Enable.

Step 2 Set related SNMP parameters.

Step 3 Click Save.

SNMP Here you can configure SNMP settings. SNMP v1 and v2c are supported. SNMP Agent Disable Enable Administrator Name Administrator Device Name i21V1.0 Location ShenZhen Read Community public Read/Write Community private Save Restore Help

--End

Parameter descripon

Parameter	Descripon
SNMP Agent	It species whether to enable the SNMP agent funcon of the AP. By default, it is disabled.An SNMP manager and the SNMP agent can communicate with each other only if their SNMP versions are the same. Currently, the SNMP agent funcon of the AP supports SNMP V1 and SNMP V2C.
Administrator Name	It species the name of the administrator of the AP. The default name is Administrator. You can change the locaon as required.
Device Name	It species the device name of the AP. The default device name is the model of the AP.It is recommended that you change the AP name so that you can easily identify the AP when managing the AP using SNMP.
Locaon	It species the locaon where the AP is used. You can change the locaon as required.
Read Community	It species the read password shared between SNMP managers and this SNMP agent. The default password is public.The SNMP agent funcon of the AP allows an SNMP manager to use the password to read variables in the MIB of the AP.
Read/Write Community	It species the read/write password shared between SNMP managers and this SNMP agent. The default password is private.The SNMP agent funcon of the AP allows an SNMP manager to use the password to read/write variables in the MIB of the AP.

8.3 Example of Conguring the SNMP Funcon

Networking Requirement

The AP connects to an NMS over an LAN. This IP address of the AP is 192.168.0.254/24 and the IP address of the NMS is 192.168.0.212/24.
- The NMS use SNMP V1 or SNMP V2C to monitor and manage the AP.

graph TD
    A["NMS 192.168.0.212/24"] --> B["PoE Switch"]
    B --> C["Router i."]
    C --> D["Internet"]
    B --> E["AP 192.168.0.254/24"]
    E --> F["Computer"]
    E --> G["Mobile Device"]

Conguraon Procedure

■ Congure the AP

Assume that the administrator name is Tom, read community is Tom, and read/write community is Tom123.

Step 1 Log in to the web UI of the AP and choose SNMP.

Step 2 Set SNMP Agent to Enable.

Step 3 Set the SNMP parameters.

Step 4 Click Save.

SNMP Here you can configure SNMP settings. SNMP v1 and v2c are supported. SNMP Agent Disable® Enable Administrator Name Tom Device Name i21V1.0 Location Room Read Community Tom Read/Write Community Tom123 Save Restore Help

--End

■ Congure the NMS

On an NMS that uses SNMP V1 or SNMP V2C, set the read community to Tom and read/write community to Tom 123. For details about how to conjure the NMS, refer to the conguraon guide for the NMS.

Vericaon

Aer the conguraon, the NMS can connect to the SNMP agent of the AP and can query and set some parameters on the SNMP agent through the MIB.

9 Tools

9.1 Firmware Upgrade

This funcon upgrades the rmware of the AP for more funcons and higher stability.

To prevent damaging the AP, verify that the new rmware version is applicable to the AP before upgrading the rmware and keep the power supply of the AP connected during an upgrade.

Conguraon procedure:

Step 1 Download the package of a later rmware version for the AP from http://www.tendacn.com to your local computer, and decompress the package.

Step 2 Log in to the web UI of the AP and choose Tools > Firmware Upgrade.

Step 3 Click Choose File and select the le for upgrading the rmware.

Step 4 Click Upgrade.

Firmware Upgrade

Use this section to update device's firmware for better functionalities or new features.

Select a Firmware File: Choose File No file chosen

Upgrade

Current Firmware Version: V1.0.0.8(1418); Release Date: 2018-01-11

Note: Do not disconnect the device from power and network connections while upgrade is in process, otherwise it may be permanently damaged. When upgrade is complete, the device restarts automatically. Upgrade may take about 90 seconds. Please wait.

--End

Wait unl the progress bar is complete. Log in to the web UI of the AP again. Choose Status > System Status and check whether the upgrade is successful based on Firmware Version.

Aer the rmware is upgraded, you are recommended to restore the factory sengs of the AP and congure the AP again, so as to ensure stability of the AP and proper operaon of new funcons.

9.2 Time & Day

This module enables you to set the system me and login meout interval of the AP.

9.2.1 System Time

Ensure that the system me of the AP is correct, so that logs can be recorded correctly and the reboot schedule can be executed correctly.

To access the page, choose Tools > Time & Date.

System Time Login Timeout This page is used to set the device's system time. You can select either to set the time manually or get the GMT time from Internet and system will automatically connect to NTP server to synchronize the time. Note: System time will be lost when the device is disconnected from power supply. However, it will be updated automatically when the device reconnects to Internet. ✓ Sync with Internet time servers Sync Interval: 30 minutes Time Zone: (GMT+08:00) Beijing, Chongqinç (Note: GMT time will be updated automatically only when the device is connected to Internet) Set Time and Date Manually: 2018 Year 08 Month 28 Day 14 h 05 m 57 s Sync with Your PC Save Restore Help

The AP allows you to set the system me by synchronizing the me with the internet or manually seng the me. By default, it is congured to synchronize the system me with the internet.

Synchronizing with internet me servers

The AP automacally synchronizes its system me with a me server of the internet. This enables the AP to automacally correct its system me aer being connected to the internet.

For details about how to connect the AP to the internet, refer to LAN Setup.

Procedure for conging the AP to synchronize its system me with the internet:

Step 1 Choose Tools > Time & Date > System Time.

Step 2 Select the Sync with Internet me servers check box.

Step 3 Set Sync Interval to the interval at which the AP synchronizes its system me with a me server of the internet. The default value 30 minutes is recommended.

Step 4 Set Time Zone to your me zone.

Step 5 Click Save.

System Time Login Timeout This page is used to set the device's system time. You can select either to set the time manually or get the GMT time from Internet and system will automatically connect to NTP server to synchronize the time. Note: System time will be lost when the device is disconnected from power supply. However, it will be updated automatically when the device reconnects to Internet. Sync with Internet time servers Sync Interval: 30 minutes Time Zone: (GMT+08:00) Beijing, Chongqing (Note: GMT time will be updated automatically only when the device is connected to Internet) Set Time and Date Manually: 2018 Year 08 Month 28 Day 14 h 05 m 57 s Sync with Your PC Save Restore Help

--End

Manually seng the system me

You can manually set the system me of the AP. If you choose this opon, you need to set the system me each me aer the AP reboots.

Conguraon procedure:

Step 1 Choose Tools > Time & Date > System Time.

Step 2 Deselect Sync with Internet me servers.

Step 3 Enter a correct date and me, or click Sync with Your PC to synchronize the system me of the AP with the system me (ensure that it is correct) of the computer being used to manage the AP.

Step 4 Click Save.

System Time Login Timeout This page is used to set the device's system time. You can select either to set the time manually or get the GMT time from Internet and system will automatically connect to NTP server to synchronize the time. Note: System time will be lost when the device is disconnected from power supply. However, it will be updated automatically when the device reconnects to Internet. Sync with Internet time servers Sync Interval: 30 minutes Time Zone: (GMT+08:00) Beijing, Chongqing (Note: GMT time will be updated automatically only when the device is connected to Internet) Set Time and Date Manually: 2018 Year 08 Month 28 Day 14 h 05 m 57 s Sync with Your PC Save Restore Help

--End

9.2.2 Login Timeout

If you log in to the web UI of the AP and perform no operaon within the login meout interval, the AP logs you out for network security. The default login meout interval is 5 minutes.

Procedure for seng the login meout interval:

Step 1 Choose Tools > Time & Date, and click the Login Timeout tab.

Step 2 Change the login meout interval as required.

Step 3 Click Save.

System Time Login Timeout Login Timeout: 5 (1~60 minutes) Save Restore Help

--End

9.3 Logs

9.3.1 View Logs

The logs of the AP record various events that occur and the operaons that users perform aer the AP starts. In case of a system fault, you can refer to the logs during troublesomeong.

To access the page, choose Tools > Logs and click View Logs.

To ensure that the logs are recorded correctly, verify the system me of the AP. You can correct the system me of the AP by choosing Tools > Time & Date > System Time.

To view the latest logs of the AP, click Refresh. To clear the existing logs of the AP, click Clear.

NOTE

• When the AP reboots, the previous logs are lost.
• The AP reboots when the AP is powered on aer a power failure, the QVLAN funcon is congured, the rmware is upgraded, an AP conguraon is backed up or restored, or the factory sengs are restored.

9.3.2 Log Setup

To access the page, choose Tools > Logs and click Log Setup.

On this page, you can set the number of logs to be displayed and congure log servers.

View Logs Log Setup Number of Logs 150 (Default: 150, Range: 100~300) Enable(To use the following rules, you must check this box.) ID Log Server IP Log Server Port Enable Action Add Save Restore Help

■ Seng the Number of Logs to Be Displayed

By default, the AP can display a maximum of 150 logs on the View Logs page. You can change the number as required.

Conguraon procedure:

Step 1 To access the page, choose Tools > Logs and click Log Setup.

Step 2 Change the number of logs as required within the range of 100 to 300.

Step 3 Click Save.

View Logs Log Setup *Number of Logs 150 (Default: 150, Range: 100~300) Enable(To use the following rules, you must check this box.) ID Log Server IP Log Server Port Enable Action Restore Help Add

--End

■ Conguring Log Server Sengs

Aer a log server is specied, the AP sends its logs to the log server. You can view all the historical logs of the AP on the log server.

To ensure that system logs can be sent to a log server, choose Network > LAN Setup and set the IP address, subnet mask, and gateway of the AP for communicating with the log server.

Procedure for adding a log server:

Step 1 To access the page, choose Tools > Logs and click Log Setup.

Step 2 Click Add.

View Logs Log Setup Number of Logs 150 (Default: 150, Range: 100~300) Enable(To use the following rules, you must check this box.) ID Log Server IP Log Server Port Enable Action Add Save Restore Help

Step 3 Set parameters as follows:

• Set Log Server IP to the IP address of the log server.
• Set Log Server Port to the UDP port number used to send and receive system logs. The default port number 514 is recommended.
• Select Enable to enable the log server funcon.

Step 4 Click Save.

View Logs Log Setup Log Server IP Log Server Port 514 Enable Save Restore Help

Step 5 Select Enable (To use the following rules, you must check this box.).

Step 6 Click Save.

--End

The following gure shows the conguraon.

View Logs Log Setup Number of Logs 150 (Default: 150, Range: 100~300) Enable(To use the following rules, you must check this box.) ID Log Server IP Log Server Port Enable Action 1 192.168.0.88 514 Enable Edit Delete Add Restore Help

Procedure for changing log server sengs

Step 1 To access the page, choose Tools > Logs and click Log Setup.

Step 2 Click Edit corresponding to the log server settings to be changed.

Step 3 Change the parameter sengs as required.

Step 4 Click Save.

--End

Procedure for deleng log server sengs

Step 1 To access the page, choose Tools > Logs and click Log Setup.

Step 2 Click Delete corresponding to the log server settings to be deleted.

--End

9.4 Conguraon

The backup funcon enables you to back up the current conguraon of the AP to a local computer. The restoraon funcon enables you to restore the AP to a previous conguraon.

If the AP enters the opmum condion aer you greatly change the conguraon of the AP, you are recommended to back up the new conguraon, so that you can restore it aer upgrading or reseng the AP.

If you need to apply same or similar conguraons to many APs, you can conjure one of the APs, back up the conguraon of the AP, and use the backup to restore the conguraon on the other APs. This improves conguraon eciency.

Backing Up the Current Conguraon

Step 1 Choose Tools > Conguraon > Backup & Restore.

Step 2 Click Backup and follow the on-screen instrucons to perform operaons.

Backup & Restore Restore to Factory Default This section allows you to save current settings or restore previous settings. Save Settings to Local Hard Drive Backup Load Settings from Local Hard Drive Choose File No file chosen Restore

--End

Restoring a Conguraon

Step 1 Choose Tools > Conguraon > Backup & Restore.

Step 2 Click Choose File and select the le of the conguraon to be restored.

Step 3 Click Restore and follow the on-screen instrucons to perform operaons.

--End

9.4.2 Restoring the Factory Sengs

If you cannot locate a fault of the AP or forget the password of the web UI of the AP, you can reset the AP to restore its factory settings and then conjure it again. The AP can be reset using sware or hardware.

Aer the factory sengs are restored, the login IP address of the AP is changed to 192.168.0.254, and the user name and password of the AP are changed to admin.

NOTE

When the factory sengs are restored, your conguraon is lost. Therefore, you need to reconfigure the AP to connect to the internet. Restore the factory sengs of the AP only when necessary.

To prevent AP damages, ensure that the power supply of the AP is normal when the AP is reset.

Restoring the Factory Sengs Using Soware

Step 1 Choose Tools > Conguraon and click the Restore to Factory Default tab.

Step 2 Click the Restore to Factory Default buon.

Backup & Restore Restore to Factory Default Click this button to reset the device to factory default values. Restore to Factory Default Help

--End

Restoring the Factory Sengs Using Hardware

This method enables you to restore the factory sengs without logging in to the web UI of the AP.

Conguraon procedure:

Step 1 When the AP is working properly, hold down the reset button for 8 seconds.

Reset buon

Step 2 Wait about 1 minute.

--End

9.5 User Name & Password

To access page for changing user names and passwords, choose Tools >Username & Password.

On this page, you can change the login account informaon of the AP to prevent unauthorized login.

User Name & Password Use this section to change your login user name and password. Note: User name and password can only include 1~32 letters, numbers or underscore! Access Mode User Name Enable Action Administrator admin Change User user Delete Change Save Restore Help

Parameter descripon

Parameter	Descripon
Access Mode	Administrator Name: An account of this type enables you to view and modify sengs of the AP.User: An account of this type enables you to view sengs of the AP.
User Name	It species the user name of an account.By default, the AP has one administrator account and one user account. Both the user name and password of the administrator account are admin. Both the user name and password of the user account areuser.
Enable	It species whether an account is enabled.The administrator account is always enabled.The user account is enabled by default and can be disabled.
Acon	Change: This buon is used to change the user name and password of the account corresponding to the buon.Delete: This buon is used to delete the user account.Add: This buon is used to add the user account aer the account is deleted.NOTEAer changing, deleng, or adding an account, click Save.

9.6 Diagnoscs

If the network conncon fails, you can use the diagnoses tool included with the AP to locate the faulty node.

Conguraon procedure:

The link to www.google.com is used as an example.

Step 1 Choose Tools > Diagnoscs.

Step 2 Enter the IP address or domain name to be pinged in the Please enter text box. In this example, enter ping www.google.com.

Step 3 Click Ping.

Diagnostics Input an IP address(eg: 192.168.0.254) or a domain name(eg: www.google.com): Please enter: ping ping

--End

The diagnosis result will be displayed in a few seconds in the black text box below the Please enter text box. See the following gure.

Diagnostics

Input an IP address(eg: 192.168.0.254) or a domain name(eg: www.google.com):

Please enter:

ping www.google.com

ping

PING www.google.com (69.63.190.26): 56 data bytes

--- www.google.com ping statistics ---

3 packets transmitted, 0 packets received, 100% packet loss

9.7 Device Reboot

This module enables you to manually reboot the AP or congregate the AP to automatically reboot.

When the AP reboots, all connecons are released. You are recommended to reboot the AP at an idle hour.

9.7.1 Manual Reboot

If a seng does not take eect, you can try reboong the AP to resolve the problem.

Conguraon procedure:

Step 1 To access the page, choose Tools > Reboot.

Step 2 Click Reboot.

Reboot Time Reboot This page allows you to configure the rebooting time, or click the 'Reboot' button to restart your device. Reboot

--End

9.7.2 Automac Reboot

Automac Reboot allows you to reboot the AP at your specied me to avoid unstable WLAN performance due to long- me running. The AP supports the following two ways of automac reboot.

Reboong the AP at an interval

Conguraon procedure:

Step 1 Choose Tools > Reboot and click the Time Reboot tab.

Step 2 Select the Enable Auto Reboot check box.

Step 3 Set AUTO Reboot Type to As Interval.

Step 4 Set Reboot Interval to a value in minutes, such as 1440.

Step 5 Click Save.

Reboot Time Reboot Enable Auto Reboot ✓ AUTO Reboot Type As Interval Reboot Interval 1440 (minute, range: 10~7200) Save Restore Help

--End

Reboong the AP at specied me

Conguraon procedure:

Step 1 Choose Tools > Reboot and click the Time Reboot tab.

Step 2 Select the Enable Auto Reboot check box.

Step 3 Set AUTO Reboot Type to As Scheduled.

Step 4 Select the day or days when the AP reboots.

Step 5 Set the me when the AP reboots, such as 23:59.

Step 6 Click Save.

Reboot Time Reboot Enable Auto Reboot ✓ AUTO Reboot Type As Scheduled ▼ Time Reboot on Everyday Mon Tue Wed Thur Fri Sat Sun Time Reboot at 23:59 eg: 23:59 Save Restore Help

--End

9.8 LED

This funcon enables you to turn on/o the LED indicator of the AP. By default, the LED indicator is turned on.

Procedure for turning o the LED indicator:

Step 1 Choose Tools > LED.

Step 2 Click Disable all LEDs.

LED Disable all LEDs Help

--End

Procedure for turning on the LED indicator:

Step 1 Choose Tools > LED.

Step 2 Click Enable all LEDs.

--End

9.9 Uplink Detecon

9.9.1 Overview

In AP mode, the AP connects to its upstream network using the LAN0 port. If a critical node between the LAN0 port and the upstream network fails, the AP as well as the wireless clients connected to the AP cannot access the upstream network. If uplink detecon is enabled, the AP regularly pings specied hosts through the LAN0 port. If all the hosts are not reachable, the AP stops its wireless service and wireless clients cannot nd the SSIDs of the AP. The client can reconnect to the AP only aer the conncon between the AP and the upstream networks is recovered.

If the uplink of the AP with uplink detecon enabled is faulty, wireless clients can connect to the upstream network through another nearby AP that works properly.

See the following topology (The LAN0 port serves as the uplink port).

graph TD
    A["PoE switch"] --> B["Ethernet port"]
    C["Router"] --> D["Internet"]
    B --> E["AP"]
    D --> E
    F["Wi wireless clients"] --> B
    G["Uplink network"] --> C
    H["LAN"] --> C
    I["WAN"] --> C

9.9.2 Conguring Uplink Detecon

Conguraon procedure:

Step 1 Choose Tools > Uplink Detecon.

Step 2 Select the Enable check box of Uplink Detecon.

Step 3 Set Ping Host1 or Ping Host2 to the IP address of the host to be pinged through the LAN0 port of the AP, such as the IP address of the switch or router directly connected to the AP.

Step 4 Set Ping Interval to the interval at which the AP detects its uplink.

Step 5 Click Save.

Uplink Detection Uplink Detection Enable Ping Host1 Ping Host2 Ping Interval 10 10 ~ 100 Minutes Save Restore Help

--End

Appendixes

A.1 FAQ

Q1. I cannot access the web UI of the AP aer entering 192.168.0.254. What should I do?

A1: Check the following items:

• Verify that the IP address of your computer is 192.168.0.X (X: 2\~253).
• Clear the cache of your web browser or replace the web browser, and try login again.
• Disable the rewall of your computer or replace the computer, and try login again.
• If two or more APs are connected to your network without an AP controller, connect one of the APs to your network and change the IP address of the AP. Repeat this procedure to change the IP addresses of the other APs.
• The AP may be being managed by an AP controller and therefore its IP address is no longer 192.168.0.254. In that case, log in to the web UI of the AP controller to view the new IP address of the AP, and log in to the AP using the new IP address.
• If you have manually changed the IP address of the AP, change the IP address of your computer to another IP address that belongs to the same network segment as the new IP address of the AP and log in again using the new IP address of the AP.
• If the problem persists, restore the factory sengs of the AP and try login again.

Q2. My wireless AP controller cannot nd the AP. What should I do?

A2. Check the following items:

• Verify that the devices are connected properly and the AP has started.
• If VLANs have been dened on your network, verify that the corresponding VLAN has been added to your AP controller.
• Restart the AP or restore the factory settings of the AP, and try scanning the AP again.

Q3. Can I log in to the web UI of the AP to congregate the AP aer using an AC controller to manage the AP?

A3. Yes. You are recommended to change the user name and password of the administrator account (see 9.5 User Name & Password) if you use an AC to manage the AP. This improves network security.

For more technical assistance, visit our website at hp://www.tendacn.com or send your queson to [e-mail]. We will help you resolve your problem as soon as possible.

A.2 Seng the IP Address of Your Computer

Example: Windows 7

Step 1 Choose Start > Control Panel, click Network and Internet, click Network and Sharing Center, and click Change adapter sengs.

Step 2 Right-click Local Area Connecon and choose Properes. Select Internet Protocol Version 4 (TCP/IPv4) and click Properes.

Local Area Connection Properties Networking Sharing Connect using: Intel(R) 82583V Gigabit Network Connection Configure... This connection uses the following items: ✓ Client for Microsoft Networks ✓ QoS Packet Scheduler ✓ File and Printer Sharing for Microsoft Networks ✓ Internet Protocol Version 6 (TCP/IPv6) ✓ Internet Protocol Version 4 (TCP/IPv4) ✓ Link-Layer Topology Discovery Mapper I/O Driver ✓ Link-Layer Topology Discovery Responder Install... Uninstall Properties Description Transmission Control Protocol/Internet Protocol. The default wide area network protocol that provides communication across diverse interconnected networks. OK Cancel

Step 3 Select Use the following IP address. Set IP address to an IP address that is dierent from the IP address of the LAN port of the AP but belongs to the same network segment as the IP address of the LAN port of the AP. Set Subnet mask to 255.255.255.0. Click OK.

Internet Protocol Version 4 (TCP/IPv4) Properties General You can get IP settings assigned automatically if your network supports this capability. Otherwise, you need to ask your network administrator for the appropriate IP settings. Obtain an IP address automatically Use the following IP address: IP address: 192 . 168 . 0 . 10 Subnet mask: 255 . 255 . 255 . 0 Default gateway: . Obtain DNS server address automatically Use the following DNS server addresses: Preferred DNS server: . Alternate DNS server: . Validate settings upon exit Advanced... OK Cancel

The Local Area Connecon Properes dialog box appears.

Step 4 Click OK.

--End

A.3 Default Parameter Sengs

The following table lists the factory sengs of the AP.

Parameter				Default Value
Login	IP address			192.168.0.254
	User Name/Password		Administrator	admin/admin
			User	user/user
Quick Setup	Working Mode			AP Mode
LAN Setup	Address Mode			Stac IP
	IP Address (management IP address)			192.168.0.254
	Subnet Mask			255.255.255.0
	Gateway			192.168.0.1
	Primary DNS Server			8.8.8.8
	Secondary DNS Server			8.8.4.4
	Device Name			Model + Hardware version number, such as i21V1.0
DHCP Server	DHCP Server			Disable
	Start IP			192.168.0.100
	End IP			192.168.0.200
	Lease Time			1 day
	Subnet Mask			255.255.255.0
	Gateway			192.168.0.1
	Primary DNS Server			8.8.8.8
	Secondary DNS Server (Oponal)			8.8.4.4
SSID Setup	SSID	2.4 GHz		Supports 8 SSIDs.SSID is Tenda_XXXXXX, where XXXXXX indicates the last 6 characters in the MAC address specied on the label on the external surface of the AP - +7The primary SSID is enabled, and others are disabled.
		5 GHz		Supports 4 SSIDs.SSID is Tenda_XXXXXX_5G, where XXXXXX indicates the last 6 characters in the MAC address specied

Parameter			Default Value
			on the label on the external surface of the AP + 8 - +11The primary SSID is enabled, and others are disabled.
	Broadcast SSID		Enable
	AP Isolaon		Disable
	WMF		Enable
	Probe Broadcast Packets Control		Disable
	Maximum Clients		48
	Chinese SSID Encode		UTF-8
	Security Mode		None
Radio	Wireless network		Enable
	Network Mode	2.4 GHz	11b/g/n
		5 GHz	11ac
	Channel		Auto
	Channel Bandwidth	2.4 GHz	20/40 MHz
		5 GHz	80MHz
	Extension Channel		Auto
	Channel Lockout		Enable
	TX Power	2.4 GHz	20 dBm
		5 GHz	18 dBm
	Power Lockout		Enable
	Preamble		Long Preamble
	Short GI		Enable
	Inter-SSID User Isolaon		Disable
Radio Opmizing	Beacon Interval		100 ms
	Fragment Threshold		2346
	RTS Threshold		2347
	DTIM Interval		1
	Receive Signal Strength		Disable
	Airme Scheduling		Enable
	Interference migaon		1
	APSD		Disable
	Aging Time		5 minutes
	5GHz SSID Priority		Disable
	Basic Rate Sets	2.4 GHz	1, 2, 5.5, 11
		5 GHz	6, 12, 24
	Supported Rate Sets	2.4 GHz	1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, 54
		5 GHz	6, 9, 12, 18, 24, 36, 48, 54
WMM Setup	WMM funcon		Enable
	WMM Opmizaon Mode		Opmized For Capacity (Concurrent Users >=10)
Access Control			Disable
Advanced	Recognize Terminal Type		Disable
	Filter Broadcast Data		Disable
QVLAN	QVLAN funcon		Disable
	PVID		1
	Manage VLAN		1
	2.4 GHz SSID VLAN ID		1000
	5 GHz SSID VLAN ID		1000
SNMP	SNMP Agent		Disable
	SNMP Parameters	Administrator Name	Administrator
		Device Name	Model + Hardware version number, such as i21V1.0
		Locaon	ShenZhen
		Read Community	public
		Read/Write Community	private
Tools	System Time	Sync with InternetTime Servers	Enable
		Time Zone	(GMT+08:00) Beijing, Chongqing, Hong Kong, Urumqi, Taipei
	Page Timeout		5 minutes
	Number of Logs		150
	Time Reboot		Disable
	LED Control		Switch on LEDs
	Uplink Detecon		Disable