4IPNET EAP260 User manual

EAP260 V1.20
Enterprise Access Point

User’s Manual
EAP260 Enterprise Access Point ENGLISH
1 Copyright © 4IPNET, INC.
Copyright & Disclaimer
Copyright
The contents of this publication may not be reproduced in any part or as a whole, stored,
transcribed in an information retrieval system, translated into any language, or transmitted in any
form or by any means, mechanical, magnetic, electronic, optical, photocopying, manual, or
otherwise, without the prior written permission of 4IPNET, INC.
Disclaimer
4IPNET, INC. does not assume any liability arising out the application or use of any products, or
software described herein. Neither does it convey any license under its parent rights not the parent
rights of others. 4IPNET further reserves the right to make changes in any products described herein
without notice. The publication is subject to change without notice.
Trademarks
4IPNET (4ipnet) is a registered trademark of 4IPNET, INC. Other trademarks mentioned in this
publication are used for identification purposes only and may be properties of their respective
owners.

User’s Manual
EAP260 Enterprise Access Point ENGLISH
2 Copyright © 4IPNET, INC.
Table of Contents
1. Before You Start ..................................................................................................................................6
1.1 Preface.................................................................................................................................................6
1.2 Document Conventions....................................................................................................................6
1.3 Package Content................................................................................................................................7
2. System Overview and Getting Started .............................................................................................8
2.1 Introduction of 4ipnet EAP260 ......................................................................................................8
2.2 Hardware Description .....................................................................................................................9
2.3 Hardware Installation....................................................................................................................11
2.4 Console Interface............................................................................................................................12
2.5 Access Web Management Interface.............................................................................................14
3. Connect your AP to your Network..................................................................................................18
4. Adding Virtual Access Points ..........................................................................................................24
5. Secure Your AP..................................................................................................................................26
6. Create a WDS Bridge between two APs.........................................................................................35
7. Web Management Interface Configuration...................................................................................37
7.1 System...............................................................................................................................................39
7.1.1 General............................................................................................................................39
7.1.2 Network Interface........................................................................................................... 41
7.1.3 Port..................................................................................................................................42
7.1.5 CAPWAP .........................................................................................................................45
7.1.6 IPv6.................................................................................................................................47
7.2 Wireless............................................................................................................................................48
7.2.1 VAP Overview.................................................................................................................48
7.2.2 General ........................................................................................................................... 51
7.2.3 VAP Configuration .........................................................................................................53
7.2.4 Security...........................................................................................................................54
7.2.5 Repeater .........................................................................................................................58
7.2.6 Advanced........................................................................................................................60
7.2.7 Access Control................................................................................................................62
7.2.8 Site Survey......................................................................................................................66
7.3 Firewall.............................................................................................................................................68
7.3.1 Firewall List ....................................................................................................................68
7.3.2 Service ............................................................................................................................72
7.3.3 Advanced........................................................................................................................73
7.4 Utilities.............................................................................................................................................75
7.4.1 Change Password............................................................................................................75

User’s Manual
EAP260 Enterprise Access Point ENGLISH
3 Copyright © 4IPNET, INC.
7.4.2 Backup & Restore...........................................................................................................76
7.4.3 System Upgrade ............................................................................................................. 77
7.4.4 Reboot ............................................................................................................................78
7.4.5 Upload Certificate ..........................................................................................................79
7.4.6 WAPI Certificate ............................................................................................................80
7.4.7 Channel Analysis............................................................................................................ 81

User’s Manual
EAP260 Enterprise Access Point ENGLISH
4 Copyright © 4IPNET, INC.
7.4.7ChannelAnalysis

User’s Manual
EAP260 Enterprise Access Point ENGLISH
5 Copyright © 4IPNET, INC.

7.5 Status................................................................................................................................................82
7.5.1 Overview .........................................................................................................................82
7.5.2 Associated Clients ..........................................................................................................84
7.5.3 Repeater .........................................................................................................................85
7.5.4 Event Log........................................................................................................................86
7.6 Online Help .....................................................................................................................................87

User’s Manual
EAP260 Enterprise Access Point ENGLISH
6 Copyright © 4IPNET, INC.
1.Before You Start
1.1 Preface
This manual is intended for system integrators, field engineers, and network administrators to set up
4ipnet’s EAP260 802.11n/b/g 2.4GHz MIMO Access Point in their network environments. It contains step-
by-step procedures and visual examples to guide MIS staff or individuals with basic network system
knowledge to complete the installation.
1.2 Document Conventions
Represents essential steps, actions, or messages that should not be ignored.
Note: Contains related information that corresponds to a topic.
Indicates that clicking this button will save the changes you made, but you must reboot
the system for the changes to take effect.
Indicates that clicking this button will clear what you have set before the settings are
applied.

User’s Manual
EAP260 Enterprise Access Point ENGLISH
7 Copyright © 4IPNET, INC.
1.3 Package Content
The standard package of EAP260 includes:
4ipnet EAP260 x1
Quick Installation Guide (QIG) x1
CD-ROM (with User’s Manual and QIG) x1
Console Cable x1
Ethernet Cable x1
Power Adapter (DC 5V) x1
Detachable Antenna x2
It is recommended to keep the original packing materials for possible future shipment when repair or
maintenance is required. Any returned product should be packed in its original packaging to prevent
damage during delivery.

User’s Manual
EAP260 Enterprise Access Point ENGLISH
8 Copyright © 4IPNET, INC.
2. System Overview and Getting Started
2.1 Introduction of 4ipnet EAP260
The 4ipnet EAP260 Enterprise Access Point embedded with 802.11 n/b/g 2.4GHz MIMO radio in dust-
proof metal housing is designed for wireless connectivity in enterprise or industrial environments of all
dimensions. EAP260 makes the wireless communication fast, secure and easy. It supports business
grade security such as 802.1X, and Wi-Fi Protected Access (WPA and WPA2). By pushing a purposely
built button, the 4ipWES (Press-n-Connect) feature makes it easy to bridge wireless links of multiple
EAP260s for forming a wider wireless network coverage.
EAP260 also features multiple ESSIDs with VLAN tags and multiple Virtual APs, great for enterprise
applications, such as separating traffic from different departments using different ESSIDs. The PoE LAN
port is able to receive power from Power over Ethernet (PoE) sourcing devices. Its metal case is IP50
anti-dust compliant, which means that EAP260 is well suited to WLAN deployment in industrial
environments.
Wired and Wireless Network Layout with EAP260s

User’s Manual
EAP260 Enterprise Access Point ENGLISH
9 Copyright © 4IPNET, INC.
2.2 Hardware Description
This section depicts the hardware information including all panel description.
Front Panel
Figure 1 EAP260 Front Panel
1
WES button Press and hold for 5 seconds to initiate Master WES process. Press and
release to initiate Slave WES process.
2
Power LED On indicates power on.
3
Status LED On indicates the system is ready.
4
Wireless LED On indicates wireless network interface is ready for service.
5
Uplink LED On indicates the Uplink is connected.
6
LAN1 - 4 LED Indicates the connection status of each LAN.
7 USB LED Indicates the status of USB connection. The USB port is reserved for future
use.
8
WES LED For indicating WDS connection status.
Master Slave
WES Start LED (Green) OFF and then
BLINKING SLOWLY
LED (Red) OFF and
then BLINKING
SLOWLY
WES Negotiate BLINKING NORMALLY
(Green) BLINKING NORMALLY (Red)
WES Timeout LED (Green) ON LED (Red) ON
WES Success LED (Red) ON LED (Green) ON
WES Fail LED (Green) ON LED (Red) ON

User’s Manual
EAP260 Enterprise Access Point ENGLISH
10 Copyright © 4IPNET, INC.
Rear Panel
Figure 2 EAP260 Rear Panel
1 Antenna connector Reverse SMA connectors for attaching antenna as shown in figure 2.
2 Uplink port Offers uplink connection. This port can be used to connect to a controller,
gateway, or directly to the Internet.
3 LAN 1- 4 ports Attach Ethernet cables here for connecting to the wired local network.
4 USB 2.0 port Reserved for future use.
5 Console port Attach the serial cable here to access console interface.
6 5V 2 A Attach the power adapter here.
7 Reset button Press once to restart the system; Press and hold for more than 5 seconds to
reset to factory default.

User’s Manual
EAP260 Enterprise Access Point ENGLISH
11 Copyright © 4IPNET, INC.
2.3 Hardware Installation
Please follow the steps mentioned below to install the hardware of EAP260:
1. Place the EAP260 at the best location.
The best location for EAP260 is usually at the center of your intended wireless network.
2. Connect the EAP260 to your network device.
Connect one end of the Ethernet cable to the Uplink port of EAP260 and the other end of the cable to
a switch, a router, or a hub. EAP260 is then connected to your existing wired LAN network.
3. There are two ways to supply power over to EAP260.
a) Connect the DC power adapter to the EAP260 power socket.
b) EAP260 Uplink port is capable of receiving DC currents. Connect an IEEE 802.3af-compliant PSE
device (e.g. a PoE-switch) to the Uplink port of EAP260 with the Ethernet cable.
Now, the Hardware Installation is complete.
Please use only the power adapter supplied with the EAP260 package. Using a different
power adapter may damage this system.
To verify the wired connection between EAP260 and you switch / router / hub, please also
check the LED status indicator of the respective network devices.

User’s Manual
EAP260 Enterprise Access Point ENGLISH
12 Copyright © 4IPNET, INC.
2.4 Console Interface
Use this port to enter the console interface for the administrator to check the IP address of EAP260 and reset
the device to default if the admin password is forgotten.
1. In order to connect to the console port of EAP260, a console, modem cable and a terminal simulation
program, such as the Hyper Terminal are needed.
2. If a Hyper Terminal is used, please set the parameters as 115200, 8, None, 1, None.
The console interface looks like the screenshot below, displaying the current LAN IP address and the
instructions to reset device to default.

User’s Manual
EAP260 Enterprise Access Point ENGLISH
13 Copyright © 4IPNET, INC.
When resetting the device to default from the console interface, enter “reset2def” for login and password.
Confirm “yes” and EAP260 will begin the reset process.
When the login prompt reappears, the device has completed the reset to default process and the LAN IP is
reset to 192.168.1.1.

User’s Manual
EAP260 Enterprise Access Point ENGLISH
14 Copyright © 4IPNET, INC.
2.5 Access Web Management Interface
4ipnet EAP260 supports web-based configuration. When hardware installation is complete, EAP260 can be
configured through a PC by using a web browser.
The default values of the EAP260’s LAN IP Address and Subnet Mask are:
IP Address: 192.168.1.1
Subnet Mask: 255.255.255.0
Example of entering EAP260's default IP Address into a web browser
To access the web management interface (WMI), connect the administrator PC to the LAN port of
EAP260 via an Ethernet cable. Then, set a static IP Address on the same subnet mask as the
EAP260 in TCP/IP settings of your PC, such as the following example:
IP Address: 192.168.1.100
Subnet Mask: 255.255.255.0
Note: Please note that the IP Address used should not overlap with the IP Addresses of
any other device within the same network to avoid IP conflict.
Launch the web browser on your PC and enter the IP Address of the EAP260 (192.168.1.1) at the
address field, and then press Enter. The following Administrator Login Page will appear. Enter
“admin” for both the Username and Password fields, and then click Login.
Administrator Login Page
After a successful login into EAP260, a System Overview page of the Web Management Interface
(WMI) will appear.

User’s Manual
EAP260 Enterprise Access Point ENGLISH
15 Copyright © 4IPNET, INC.
The Web Management Interface - System Overview Page

User’s Manual
EAP260 Enterprise Access Point ENGLISH
16 Copyright © 4IPNET, INC.
To logout, simply click on the Logout button at the upper right hand corner of the interface to return to
the Administrator Login Page. Click OK to logout.
Logout
Logout Prompt
For security reasons, it is strongly recommended to change the administrator’s password upon the
completion of all configuration settings

User’s Manual
EAP260 Enterprise Access Point ENGLISH
17 Copyright © 4IPNET, INC.
Please follow the following steps to change the administrator’s password:
Change Password Page
Click on the Utilities icon on the main menu, and select the Change Password tab.
Enter the old password and then a new password with a length of up to 32 characters, and retype it in
the Re-enter New Password field.
Congratulation!
Now, 4ipnet’s EAP260 is installed and configured successfully.
It is strongly recommended to make a backup copy of your configuration settings.
After the EAP260’s network configuration is completed, please remember to change the IP
Address of your PC Connection Properties back to its original settings in order to ensure that
your PC functions properly in its real network environments.

User’s Manual
EAP260 Enterprise Access Point ENGLISH
18 Copyright © 4IPNET, INC.
3. Connect your AP to your Network
The following instructions depict how to establish the wireless coverage of your network. The AP will
connect to the network through its LAN port and provide wireless access to your network.
After having prepared the EAP260’s hardware for configuration, set the TCP/IP settings of administrator’s
computer to have a static IP Address of 192.168.1.10 and Subnet Mask of 255.255.255.0.
Step 1: Configuring the AP’s System Information
Enter the AP’s default IP Address (192.168.1.1) into the URL of a web browser.
Log in using Username: admin and Password: admin.
The WMI will appear as shown below.
Web Management Interface Main Page (System Overview)

User’s Manual
EAP260 Enterprise Access Point ENGLISH
19 Copyright © 4IPNET, INC.
From here, click on the System icon to get to the following page. On this Page you can make entries
to the Name, Description, and Location fields as well as set the device’s time.
System Information Page
There are two methods of setting up the time: Manual (indicated by the option Set Date & Time) and
NTP.
The default is Manual and requires individual setup every time the system starts up. Simply choose a
time zone and set the time accordingly. When it is finished, click SAVE.
Manually Time Setup
The alternative method is NTP. Upon selecting NTP under the Time field, the configuration changes
to allow up to two NTP servers. Simply enter a local NTP server’s IP Address (if available) or search
online for an NTP server nearest to you. Set the time zone and click SAVE.