AirLinkWiFi UltraSky CPE2 User manual

1/ 62
802.11a/b/g/n Wireless Router
User Manual

2/ 62
Software Installation Guide
Bridge Mode
1. Login the AP
2. Advanced setup
2.1 Internet Settings
2.2 Wireless Settings
2.2.1 Basic
2.2.2 Advanced
2.2.3 Security
2.2.4 WDS
2.2.5 WPS
2.2.6 Station List
2.2.7 Statistics
2.3 Wireless2 Settings
2.3.1 Basic
2.3.2 Advanced
2.3.3 Security
2.3.4 WPS
2.4 Storage
2.5 Administration
2.5.1 Management
2.5.2 Upload Firmware
2.5.3 Settings Management
2.5.4 Status
2.5.5 Statistics
2.5.6 System Command
2.5.7 SDK History
Gateway Mode
3. Login the AP
4. Advanced setup
4.1 Internet Settings
4.2 Wireless Settings
4.2.1 Basic
4.2.2 Advanced
4.2.3 Security
4.2.4 WDS
4.2.5 WPS
4.2.6 Station List
4.2.7 Statistics
4.3 Wireless2 Settings
4.3.1 Basic
4.3.2 Advanced
4.3.3 Security
4.3.4 WPS
4.4 Firewall
4.5 Storage
4.6 Administration
4.6.1 Management
4.6.2 Upload Firmware
4.6.3 Settings Management
4.6.4 Status
4.6.5 Statistics
4.6.6 System Command
4.6.7 SDK History

3/ 62
Configure Computer
Follow the instructions below to configure a computer running Windows XP:
1. From the Start menu on your desktop, go to Settings, and then click on
Network Connections.
2. In the Network Connections window, right-click on Local Area
Connection, then click Properties.
3. In the General tab of Local Area Connection Properties, Click Internet
Protocol (TCP/IP) under “This connection uses the following items:”. Then
click on the Properties button.

4/ 62
4. Select “Use the following IP address” by clicking the radio-button.
In the IP address field, enter the address 10.10.10.x (x should be replaced by
a number between 2 and 253, such as 101). In the Subnet mask field, enter
255.255.255.0.
Software Installation Guide
Bridge Mode
All ethernet and wireless interfaces are bridged into a single bridge interface.
1. Login the AP
Input the website http://10.10.10.254 in Internet explorer address column,
User should see the login page, input the user name and password (default user

5/ 62
name and password is “admin”),login windows as below:
click “ok” button enter the main page
You can select the language of administration page displays.
There are three languages to choose from: English, Traditional Chinese,
Simple Chinese.
After your successful login, you can configure and manage the device. There are
main menus on the left of the web-based utility. Submenus will be available
after you click one of the main menus. On the right of the web-based utility,
there are the detailed explanations and instructions for the corresponding page.
To apply any settings you have altered on the page, please click the Apply
button.
2. Advanced setup
Mainly function menu as below:
Internet Settings:
Wireless Settings:
Wireless2 Settings:
Storage:
Administration:
After finish AP modify, it must click “Apply” button (some item must restart
system) for take it effect
2.1 Internet Settings
2.1.1 LAN

6/ 62
This page you may enable/disable networking functions and configure their
parameters as your wish. for example, you can change the IP address and
enable/disable the DHCP server, if there exist another DHCP server within your
network, you must disable this AP’s DHCP server. As below:
IP Address: Set the IP address of Intranet port.
Subnet Mask: Set subnet mask of Intranet.
LAN 2: add one more IP in Intranet so that LAN users can also connect to the AP
through LAN network.
DHCP Type: if there exist another DHCP server within your network, you must
disable this AP’s DHCP server.
Default Gateway: set the gateway of Intranet Host here.
Primary DNS Server: Enter the Primary DNS server provided by your ISP.
Secondary DNS Server: Enter the secondary DNS
MAC Address: Display the physical address of Intranet port.
802.11d Spanning Tree: support Spanning Tree protocol, avoid looping back
in LAN and solve broadcast storm problem of ring Ethernet network. default is
Disable.

7/ 62
2.2 Wireless Settings
2.2.1 Basic
You could configure the minimum number of Wireless settings for
communication, such as Network Name (SSID) and Channel. The Access Point
can be set simply with only the minimum setting items.

8/ 62
1. Wireless Network
Radio On/Off: open and close the Wireless Network.
Network Mode: you can select as below:
11a only: 11a mode, rate is 54 Mbps.

9/ 62
11n only(5G): 11n mode, rate is 300 Mbps(2T2R)
11a/n mixed mode: 11a/n mixed mode, rate is 54 Mbps and 300
Mbps.
Other mode can’t be used.
Network Name (SSID): Wireless LAN status authentication name, User can
access the wireless networking through status authentication name only.
Multiple SSID: Set SSID for the Multiple AP.
Broadcast Network Name (SSID): select to ban SSID of the router
broadcasts, and then wireless client ports will be unable to scan to SSID of the
router. Only when the client ports know SSID of the router could they
communicate with the router. It is activated by default.
AP Isolation: If activated, client within the SSID can not access one another,
which can prevent the spread of the virus in LAN.
MBSSID AP Isolation: it is isolated outside the AP. Other client ports that do
not belong to the AP cannot access client ports within the AP.
BSSID: It is a 48bit identity used to identify a particular BSS (Basic Service Set)
within an area. In Infrastructure BSS networks, the BSSID is the MAC (Medium
Access Control) address of the AP.
Frequency (Channel): make the wireless signals as transmission channels.
Default is 5320MHZ(channel 64).
2. HT Physical Mode
Operating Mode: default is Mixed mode.
Channel BandWidth: Select wireless work frequency 20 or 20/40. Default is
20/40.
Guard Interval: default is Auto.
MCS: default is Auto.
Reverse Direction Grant(RDG): default is Enable.
Extension Channel: default is 5300MHZ(channel 60).
Space Time Block Coding(STBC): default is Enable.
Aggregation MSDU(A-MSDU): default is Disable.
Auto Block ACK: default is Enable.
Decline BA Request: default is Disable.
HT Disallow TKIP: default is Enable.
3. Other
HT TxStream: RF Transmit Stream. default is 2.
HT RxStream: RF Receive Stream. default is 2.
If you have changed the above settings, click “Apply”button Apply Settings.
2.2.2 Advanced
Use the Advanced Setup page to make detailed settings for the Wireless.
Advanced Setup includes items that are not available from the Basic Setup page,
such as Beacon Interval, Control Tx Rates and Basic Data Rates.

10 / 62
1. Advanced Wireless
BG Protection Mode: it is used to determine the state of BG Protected Mode.
It is helpful to successfully connect to the 11n wireless network of slower
wireless client ports in complex multi-modes. Default is Auto. You can select
On or Off.
Beacon Interval: the interval of sending wireless beacon frame. In this time
range, beacon frame will be sent once to obtain access information of wireless
network in the vicinity. Default is 100.
Data Beacon Rate (DTIM): For different requirement, you can select one of
the suitable Basic Data Rates. Default is 1.
Fragment Threshold: default is 2346.
RTS Threshold: when the data packet size exceeds this threshold, the CTS /
RTS mechanism is used to reduce the possibility of conflicts. Default is 2347.
TX Power: You can set the output power of wireless radio. Unless you’re using
this wireless router in a really big space, you may not have to set output power
to 100%. This will enhance security (malicious / unknown users in distance will
not be able to reach your wireless router). Default is 100.

11 / 62
Short Preamble: default is Disable.
Short Slot: default is Enable.
Tx Burst: default is Enable.
Pkt_Aggregate: default is Enable.
IEEE 802.11H Support: default is Disable.
Country Code: Can choose None, US (United States), JP (Japan), FR
(France), TW (Taiwan), IE (Ireland), HK (Hong Kong), default is None.
2. Wi-Fi Multimedia
WMM Capable: It will enhance the data transfer performance of multimedia
contents when they’re being transferred over wireless network. Default is
Enable.
APSD Capable: It is used for auto power-saved service. Default is Disable.
WMM Parameters: Click "WMM configuration" button to enter the WMM
Preferences, set the WMM parameters
3. Multicast-to-Unicast Converter
Multicast-to-Unicast: default is Disable.
If you have changed the above settings, click “Apply”button Apply Settings.
2.2.3 Security
Setup the wireless security and encryption to prevent from unauthorized access
and monitoring.
SSID choice: The router selects different encryption authentication modes for
different SSID. Select a SSID and configure its safety strategies.
Security Mode: You can choose Disable, OPENWEP, SHAREDWEP,
WEPAUTO, WPA, WPA-PSK, WPA2, WPA2-PSK, WPAPSKWPA2PSK,
WPA1WPA2, 802.1X .
Disable: direct connection without authentication.
OPENWEP: a handshake method of WEP encryption which encrypts through
the WEP key.

12 / 62
SHAREDWEP: another handshake method of WEP encryption which also
encrypts through the WEP key and its encryption type is the same as that of the
Open Mode.
WEPAUTO: it can automatically select Open Mode or Shared Mode and its
encryption type is the same as the first two.
WPA: WPA that is authenticated by RADIUS server.
WPA-PSK: (WPA Personal) Wi-Fi Protected Access with the pre-shared key
(WPA is a solution to improve the safety of interoperable WLAN based on the
standard, which could greatly enhance data protection and access control level
of the wireless LAN system.).
WPA2: WPA2 that is authenticated by RADIUS server.
WPA2-PSK: (WPA2 Personal) WPA2 with the pre-shared key, which can
provide better safety than WEP or WPA.
WPAPSKWPA2PSK: WPAPSKWPA2PSK is WPA-PSK and WPA2-PSK mixed
mode.
WPA1WPA2: WPA1WPA2 is WPA1 and WPA2 mixed mode.
802.1X: This security mode is used when a RADIUS server is connected to the
Router. 802.1x, a kind of Port-based authentication protocol, is an
authentication type and strategy for users. The port can be either a physic port
or logic port (such as VLAN). For wireless LAN users, a port is just a channel. The
final purpose of 802.11x authentication is to check if the port can be used. If the
port is authenticated successfully, you can open this port which allows all the
messages to pass. If the port isn’t authenticated successfully, you can keep this
port “disable” which just allows 802.1x authentication protocol message to
pass.
When using OPENWEP, SHAREDWEP, WEPAUTO authentication, it is
required to set the key: this router can be filled in 4 at most (ASCII or 16
hexadecimal with a length of 10-26) keys. Users can select one key as the
current valid key (default key) from four groups of the pre-set keys.
When using WPA-PSK, WPA2-PSK or WPAPSKWPA2PSK authentication,
it is required to fill the information as follows:
WPA Algorithms: users can select AES (Advanced Encryption Standard) mode,
TKIP (Time Key Integrity Protocol) mode or a mixed-mode of the first two.
Pass Phrase: the password used by WPA (8-63 characters in ASCII code)
Key Renewal Interval: to generate a valid date for the key that you set.
When using WPA, WPA2 or WPA1WPA2 authentication, it is required to
fill the information in RADIUS server as follows:
IP (IP address of RADIUS), port (monitoring port of RADIUS) and the shared key
(the authentication key of RADIUS server).
Policy: 'Allow' means only allowing client ports with specific MAC address to be
connected while 'Reject' means only banning client ports with specific MAC
address to be connected. 'Disable' means all client ports can be connected.
Add a station Mac: Add the MAC address you want to control.
If you have changed the above settings, click “Apply”button Apply Settings.

13 / 62
2.2.4 WDS
Wireless Distribution System Settings. In this mode, you can expand the scope
of network by combining up to four other access points together, and every
access point can still accept wireless clients.
You can choose Disable, Lazy Mode, Bridge Mode, Repeater Mode.
Lazy Mode: in Lazy Mode, users do not need to fill BSSID of the other side.
WDS connection of the AP is as passive connection and it is only required the
other side to fill BSSID address of this AP. The effect is the same as that of
Bridge Mode.
Bridge Mode: in Bridge Mode, users are required to fill BSSID of AP of the other
side. SSID of local AP is shielded, which is only as an extension form of SSID of
Repeater Mode.
Repeater Mode: in Relay Mode, users are also required to fill BSSID of AP that
needs to connect. The local AP is as the core while other AP is as an extension
form of repeater.
Encryption Type: support three encryption types: WEP, TKIP and AES
Encryption Key: the encryption key between the input wireless devices
AP MAC Address: please enter the MAC address of wireless devices of the
opposite side.
If you have changed the above settings, click “Apply”button Apply Settings.
2.2.5 WPS
You could setup security easily by choosing PIN or PBC method to do Wi-Fi
Protected Setup. default is Disable.

14 / 62
When you select Enable, and click “Apply”, show the following window:
WPS Summary: WPS information shows the current device
WPS Mode: support two types of simple WPS settings: PBC and PIN code.
PIN(Personal Identification Number): fill the personal identification
number in the input box and click 'Apply'. At the same time, use the same PIN
code to connect in the client ports (users could obtain personal identification
number by clicking the 'Generate' button)
PBC (Push-Button Configuration): Select the PBC or press the WPS button
on the panel of the Router (Press the button for one second and WPS indicator
will be blinking for 2 minutes, which means the WPS is enabled. During the
blinking time, you can enable another Router to implement the WPS/PBC
negotiation between them. At present, the WPS only support one client access.
Two minutes later, the WPS indicator will be off.).
WPS Status: The current state of Wi-Fi Protected setup: Idle means an idle
status. Start WSC process means the process is activated and wait to connect.
Whether WPS would go into effect: 'YES' means going into effect while the
others means not.
If you have changed the above settings, click “Apply”button Apply Settings.
2.2.6 Station List
You could monitor stations which associated to this AP here.

15 / 62
2.2.7 Statistics
Wireless TX and RX Statistics.
2.3 Wireless2 Settings
2.3.1 Basic
You could configure the minimum number of Wireless settings for
communication, such as Network Name (SSID) and Channel. The Access Point
can be set simply with only the minimum setting items.

16 / 62
1. Wireless Network
Radio On/Off: open and close the Wireless Network.
Network Mode: you can select as below:
11b only: 11b mode, rate is 11 Mbps.
11g only: 11g mode, rate is 54 Mbps.
11b/g mixed mode: 11b/g mixed mode, rate is 11 Mbps and 54 Mbps.
11b/g/n mixed mode: 11b/g/n mode, rate is 11 Mbps,54 Mbps,150
Mbps/300Mbps.
Other mode can’t be used.
Network Name(SSID):Wireless LAN status authentication name ,User can
access the wireless networking through status authentication name only.

17 / 62
Multiple SSID: Set SSID for the Multiple AP.
Broadcast Network Name (SSID): select to ban SSID of the AP broadcasts,
and then wireless client ports will be unable to scan to SSID of the AP. Only when
the client ports know SSID of the AP could they communicate with the AP. It is
activated by default.
AP Isolation: If activated, client within the SSID can not access one another,
which can prevent the spread of the virus in LAN.
MBSSID AP Isolation: it is isolated outside the AP. Other client ports that do
not belong to the AP can not access client ports within the AP.
BSSID: It is a 48bit identity used to identify a particular BSS (Basic Service Set)
within an area. In Infrastructure BSS networks, the BSSID is the MAC (Medium
Access Control) address of the AP.
Frequency (Channel): make the wireless signals as transmission channels.
default is 2462MHZ(channel 11).
2. Wireless Distribution System (WDS)
You can choose Disable, Lazy Mode, Bridge Mode, Repeater Mode. Default
is Disable.
Lazy Mode: in Lazy Mode, users do not need to fill BSSID of the other side.
WDS connection of the AP is as passive connection and it is only required the
other side to fill BSSID address of this AP. The effect is the same as that of
Bridge Mode.
Bridge Mode: in Bridge Mode, users are required to fill BSSID of AP of the other
side. SSID of local AP is shielded, which is only as an extension form of SSID of
Repeater Mode.
Repeater Mode: in Relay Mode, users are also required to fill BSSID of AP that
needs to connect. The local AP is as the core while other AP is as an extension
form of repeater.
Encryption Type: support three encryption types: WEP, TKIP and AES
Encryption Key: the encryption key between the input wireless devices
AP MAC Address: please enter the MAC address of wireless devices of the
opposite side.
3. HT Physical Mode
Operating Mode: default is Mixed mode.
Channel BandWidth: Select wireless work frequency 20 or 20/40. Default is
20/40.
Guard Interval: default is Auto.
MCS: default is Auto.
Reverse Direction Grant(RDG): default is Enable.
Extension Channel: default is 2442MHZ(channel 7).
Aggregation MSDU(A-MSDU): default is Disable.
Auto Block ACK: default is Enable.
Decline BA Request: default is Disable.

18 / 62
4. Other
HT TxStream: RF Transmit Stream. Default is 2.
HT RxStream: RF Receive Stream. Default is 2.
2.3.2 Advanced
Use the Advanced Setup page to make detailed settings for the Wireless.
Advanced Setup includes items that are not available from the Basic Setup page,
such as Beacon Interval, Control Tx Rates and Basic Data Rates.
1. Advanced Wireless
BG Protection Mode: it is used to determine the state of BG Protected Mode.
It is helpful to successfully connect to the 11n wireless network of slower
wireless client ports in complex multi-modes. Default is Auto.
Basic Data Rates: default is Default(1-2-5.5-11 Mbps).
Beacon Interval: the interval of sending wireless beacon frame. In this time
range, beacon frame will be sent once to obtain access information of wireless
network in the vicinity. Default is 100.
Data Beacon Rate (DTIM): For different requirement, you can select one of
the suitable Basic Data Rates. Default is 1.
Fragment Threshold: default is 2346.

19 / 62
RTS Threshold: when the data packet size exceeds this threshold, the CTS /
RTS mechanism is used to reduce the possibility of conflicts. Default is 2347.
TX Power: You can set the output power of wireless radio. Unless you’re using
this wireless AP in a really big space, you may not have to set output power to
100%. This will enhance security (malicious / unknown users in distance will not
be able to reach your wireless AP). Default is 100.
Short Preamble: default is Disable.
Short Slot: default is Enable.
Tx Burst: default is Enable.
Pkt_Aggregate: default is Enable.
IEEE 802.11H Support: default is Disable.
Country Code: Can choose None, US (United States), JP (Japan), FR
(France), TW (Taiwan), IE (Ireland), HK (Hong Kong), default is None.
2. Wi-Fi Multimedia
WMM Capable: It will enhance the data transfer performance of multimedia
contents when they’re being transferred over wireless network. Default is
Enable.
APSD Capable: It is used for auto power-saved service. Default is Disable.
WMM Parameters: Click "WMM configuration" button to enter the WMM
Preferences, set the WMM parameters
2.3.3 Security
Setup the wireless security and encryption to prevent from unauthorized access
and monitoring.
SSID choice: The AP selects different encryption authentication modes for
different SSID. Select a SSID and configure its safety strategies.
Security Mode: You can choose Disable, OPENWEP, SHAREDWEP,
WEPAUTO, WPA, WPA-PSK, WPA2, WPA2-PSK, WPAPSKWPA2PSK,
WPA1WPA2, 802.1X .
Disable: direct connection without authentication.
OPENWEP: a handshake method of WEP encryption which encrypts through
the WEP key.

20 / 62
SHAREDWEP: another handshake method of WEP encryption which also
encrypts through the WEP key and its encryption type is the same as that of the
Open Mode.
WEPAUTO: it can automatically select Open Mode or Shared Mode and its
encryption type is the same as the first two.
WPA: WPA that is authenticated by RADIUS server.
WPA-PSK: (WPA Personal) Wi-Fi Protected Access with the pre-shared key
(WPA is a solution to improve the safety of interoperable WLAN based on the
standard, which could greatly enhance data protection and access control level
of the wireless LAN system.). WPA2: WPA2 that is authenticated by RADIUS
server.
WPA2-PSK: (WPA2 Personal) WPA2 with the pre-shared key, which can
provide better safety than WEP or WPA.
WPAPSKWPA2PSK: WPAPSKWPA2PSK is WPA-PSK and WPA2-PSK mixed
mode.
WPA1WPA2: WPA1WPA2 is WPA1 and WPA2 mixed mode.
802.1X: This security mode is used when a RADIUS server is connected to the
AP. 802.1x, a kind of Port-based authentication protocol, is an authentication
type and strategy for users. The port can be either a physic port or logic port
(such as VLAN). For wireless LAN users, a port is just a channel. The final
purpose of 802.11x authentication is to check if the port can be used. If the port
is authenticated successfully, you can open this port which allows all the
messages to pass. If the port isn’t authenticated successfully, you can keep this
port “disable” which just allows 802.1x authentication protocol message to
pass.
When using OPENWEP, SHAREDWEP, WEPAUTO authentication, it is
required to set the key: this AP can be filled in 4 at most (ASCII or 16
hexadecimal with a length of 10-26) keys. Users can select one key as the
current valid key (default key) from four groups of the pre-set keys.
When using WPA-PSK, WPA2-PSK or WPAPSKWPA2PSK authentication,
it is required to fill the information as follows:
WPA Algorithms: users can select AES (Advanced Encryption Standard) mode,
TKIP (Time Key Integrity Protocol) mode or a mixed-mode of the first two.
Pass Phrase: the password used by WPA (8-63 characters in ASCII code)
Key Renewal Interval: to generate a valid date for the key that you set.
When using WPA,WPA2 or WPA1WPA2 authentication, it is required to
fill the information in RADIUS server as follows:
IP (IP address of RADIUS), port (monitoring port of RADIUS) and the shared key
(the authentication key of RADIUS server).
Policy: 'Allow' means only allowing client ports with specific MAC address to be
connected while 'Reject' means only banning client ports with specific MAC
address to be connected. 'Disable' means all client ports can be connected.
Add a station Mac: Add the MAC address you want to control.
If you have changed the above settings, click “Apply” button Apply Settings.