ALCON ACP24 User manual

1
802.11n/b/g Wireless Outdoor
High Power Access Point
System
version 1.0
User Manual
Apply to:
ALCON ACP24 ALCON AMU24

2
UFCC Notices
This device complies with Part 15 of the FCC Rules. Operation is subject to
the following two conditions: (1) this device may not cause harmful
interference, and (2) this device must accept any interference received,
including interference that may cause undesired operation.
CAUTION: Change or modification not expressly approved by the
party responsible for compliance could void the user’s authority to
operate this equipment.
This equipment has been tested and found to comply with the limits for
a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits
are designed to provide reasonable protection against harmful interference in
a residential installation. This equipment generates, uses and can radiate
radio frequency energy and, if not installed and used in accordance with the
instructions, may cause harmful interference to radio communications.
However, there is no guarantee that interference will not occur in a particular
installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off
and on, the user is encouraged to try to correct the interference by one or
more of the following measures:
--Reorient or relocate the receiving antenna.
--Increase the separation between the equipment and receiver.
--Connect the equipment into an outlet on a circuit different from that to
which the receiver is connected.
--Consult the dealer or an experienced radio/TV technician for help.
CAUTION:
Any changes or modifications not expressly approved by the grantee of this
device could void the user's authority to operate the equipment.
RF exposure warning:
The equipment complies with FCC RF exposure limits set forth for an
uncontrolled environment. The equipment must not be co-located or
operating in conjunction with any other antenna or transmitter.

3
Revision History
Version Date Notes
0.2.4 August , 2013 Initial Version
0.2.8 January , 2014 Add some features
0.3.2 April , 2014 Released version

4
AP Configuration Using Locator
While entering the Locator utility, the Locator will automatically search the AP
available on the same network. Locator will show the Device Name, Device
Type, IPAddress, Ethernet MAC Address and Firmware Version in first page.
Before start using Locator, make sure you disable personal firewall installed in
you PC. (Ex. Windows XP personal firewall)
If you have 2 Fast Ethernet Adapter or more, you can choose enable one Fast
Ethernet Adapter for enter with Locator utility.
AP Configuration Using Web User Interface
Before Setup…
Verify the IP address setting
You need to configure your PC’s network settings to obtain an IP address.
Computers use IP addresses to communicate with each other across a
network, such as the Internet.
1. Click Start, select Control Panel. Double-click the Network
Connections.
2. Right click the Local Area Connection and click Properties; select
Internet Protocol (TCP/IP) for the applicable Ethernet adapter. Then
click Properties.
3. Select USE the following IP address, enter 192.168.254.254 (but,
192.168.x.x for the device use) in the IP Address field and
255.255.0.0 in the Subnet Mask field, then click OK.
Start Setup by Browser...
1. After getting the correct connection, start the web browser (make
sure you disable the proxy) and enter 192.168.x.x (x is outdoor unit
IP Address) in the Address field. Press Enter.

5
2. Enter the factory default User name and Password as:
User Name: Admin
Password: (leave blank)
then click OK.
3. You will enter the Utility homepage.
Start Setup by Locator...
1. You just need to click on the Web icon in Locator main page. The
Locator will launch a default browser for you and lead you into web UI
directly.

6
Wireless Configuration - AP Mode
System Information –
The default operation mode is AP mode. And the first page appears in main
page will show System Status -> System Summary automatically, you can
find detail system configuration in this page.

7
Client List –
Automatically, this page can help user to identify current devices who already
associated to the AP
Throughput –
This page shows the throughput for both LAN and WAN. It refreshes every 5
seconds.

8
System Log –
Click Event Log, the device automatically logs (records) events of possible
interest in its internal memory. If there is not enough internal memory for all
events, logs of older events are deleted, but logs of the latest events are
retained.
You can start to configure the system. In System Settings page, you can
configure:
 Device Name – You may assign any name to the Access Point. Using
memorable and unique names are helpful, especially if you are employing
multiple access points in the same network. The device name needs to be
less than 32 characters. After verify the name you input, click Apply to
save the change.
 Country/Region – Here you can set the AP to follow different country and
region regulation.
 Operation Mode - The default operation mode is Access Point, this
connects your wireless PCs and devices to a wired network. In most
cases, no change is necessary. You can switch operation mode to
Wireless Client, Pt(M)P Bridge or Repeater mode depends on your
application. Wireless Client mode allows this device to act as a client
within its range. Your Ethernet devices behind the unit can connect to
remote AP. Repeater mode is able to talk with one remote access point
within its range and retransmit its signal. Choose repeater mode if you

9
want to extend the range of your original AP. Pt(M)P Bridge mode allows
Bridge point to point or point to multi-point network architecture, In order to
establish the wireless link between bridge radios, the MAC address of
remotes bridge(s) need to be registered in the address table. Enter the
MAC address with format xx:xx:xx:xx:xx:xx (x is the hexadecimal digit). A
Master Bridge Radio may accommodate up to 8remote MAC addresses.
Make sure you click Apply to save the changes before move to next page.
IP Settings –
IP Setting page can configure system IP address. Default IP address is
192.168.1.1 and Subnet Mask is 255.255.255.0. You can manually enter the IP
address setting or get an IP from a DHCP server.
 IP Network Setting – Here you can choose to get IP from a DHCP server
or specify IP address manually. Choose to obtain an IP address from
DHCP server if your environment or ISP provides DHCP server.

10
Otherwise, you can manually setup IP address.
 IP Address – The IP address need to be unique to your network. We
would like to recommend you stay with default IP address 192.168.x.x.
This is private address and should work well with your original
environment.
 IP Subnet Mask – The Subnet Mask must be the same as that set on
your Ethernet network.
 Default Gateway – If you have assigned a static IP address to the Access
Point, then enter the IP address of your network’s Gateway, such as a
router, in the Gateway field. If your network does not have a Gateway,
then leave this field blank.

11
Spanning Tree Settings –
Click Spanning Tree Settings under System Configuration menu,
Spanning-Tree Protocol is a link management protocol that provides path
redundancy while preventing undesirable loops in the network.
Spanning Tree Status: Choose to enable or disable the spanning tree feature.
Bridge Hello Time: Specify the number of seconds for the hello time.
Bridge Max Age: Specify the number of seconds for the max age.
Bridge Forward Delay: Specify the number of seconds for the bridge forward
delay.
Priority: Specify the number of seconds for the priority.
Click Apply to save the changes before leaving this page.

12
In Wireless page, each option is described below
Wireless Network -
Wireless Network page allows you to configure the Wireless Mode, Channel /
Frequency, SSID and Security etc.
 Wireless Mode – Default setting is 802.11g/n HT20. This will support all
802.11g clients connect to the AP. You can choose 802.11g in wireless
mode column if your environment only has 802.11g clients.
 Channel / Frequency –The channels available are based on the country’s
regulation and select the appropriate channel from the list provided to
correspond with your network settings.
 Current Profiles – You may configure up to four different wireless profiles.
Click Edit to modify the profile and check the Enable box to activate the
profile.
 Profile (SSID) Isolation – Stations connected to different profiles cannot
access each other. Choose No Isolation (Full access), or Isolate all
profiles (SSIDs) from each other using VLAN (802.1Q) standard.
 SSID Profile – The SSID is the unique name shared among all points in a
wireless network. The SSID must be identical for all points in the wireless
network. It is case-sensitive and must not exceed 32 alphanumeric
characters, which may be any keyboard character. Make sure this setting
is the same for all points in your wireless network. For added security, you
should change the SSID from the default name Generic, to a unique
name.
 VLAN ID – If you have enabled VLAN tagging on your network, specify the
VLAN tag ID 1 to 4095. You can assign an SSID to a VLAN. Client devices
using the SSID are grouped in that VLAN.
 Suppressed SSID – This option can hide the SSID not available from site
survey tool. Enable this function only if you do not want the Access Point
to be found by others.
 Stations Separation – Default setting is Disable. This option can disallow
the client devices connected to this AP to access each other.
 Security Mode: By default, the security is Disabled. Refer to the next
section to configure the security features such as WEP, WPA-PSK,
WPA2-PSK, WPA-PSK Mixed, WPA, WPA2 and WPA-Mixed.

13
Click Apply to save the changes.

14
Wireless Security -
The wireless security settings configure the security type of your wireless
network. There are different wireless security mode options supported by the
Access Point.
In Wireless Security page, you can configure the AP to work with Disabled
(means no security), WEP, WPA-PSK, WPA2-PSK, WPA-PSK Mixed, WPA,
WPA2 and WPA-Mixed mode. Once you setup the AP to work in security
mode, all wireless stations will also need to have corresponding settings.
System default setting is Disabled.
WEP is a basic encryption method, which is not as secure as WPA. To use
WEP, you will need to select a default transmit key and a level of WEP
encryption.
Authentication Type: Select an authentication method. Options
available are Open System or Shared Key. An open system allows any
client to authenticate as long as it conforms to any MAC address filter
policies that may have been set. All authentication packets are
transmitted without encryption. Shared Key sends an unencrypted
challenge text string to any device attempting to communicate with the
Access Point. The device requesting authentication encrypts the
challenge text and sends it back to the Access Point. If the challenge text
is encrypted correctly, the Access Point allows the requesting device to
authenticate.
Input Type: Select Hex or ASCII from the drop-down list.
Key Length: Select a key format from the drop-down list. 40/64bit-hex
keys require 10 characters or ASCII keys require 5 characters, where as
104/128-bit-hex keys require 26 characters or ASCII keys require 13
characters, as 128/152-bit-hex keys require 32 characters or ASCII keys
require 16 characters. A hex key is defined as a number between 0
through 9 and letter between A through F.
Default Key: You may use up to four different keys for four different
networks. Select the current key that will be used.
Key table – You can enter 4 different WEP encryption keys into the
table and by choosing the radio button to decide which one is valid now.
The AP supports 64, 128 and 152bit key length. The longer key we

15
choose usually means the encryption is stronger.
After all changes are made, click Save to make sure all changes are saved
into system.
WPA-PSK stands for Wi-Fi Protected Access – Pre-Shared Key. WPA-PSK is
design for home users who do not have RADIUS server in their network
environment. WPA can provide better security level than WEP without difficult
setting procedure.
 Encryption - WPA gives you three encryption methods: Auto, TKIP and
AES, with dynamic encryption keys.
 PassPhrase - Enter a WPA Shared Key of 8-63 characters. The Shared
Key should be also applying the clients work in the same wireless
network.
 Group Key Update Interval - Enter a number of seconds which instructs

16
the Access point how often it should change the encryption keys. Usually
the security level will be higher if you set the period shorter to change
encryption keys more often. Default value is 3600 seconds, set 0 in Group
Key Update Interval to disable key renewal.
Remember to click Save to make sure all changes are made before leaving
this page.
WPA option features WPA used in coordination with a RADIUS server (this
should only be used when a RADIUS server is connected to the Access Point).
 Encryption – WPA gives you three encryption methods: Auto, TKIP and
AES, with dynamic encryption keys.
 RADIUS Server – Enter the IP address of your RADIUS server.
 RADIUS Port – Port number for RADIUS service, default value is 1812
 RADIUS Secret – RADIUS secret is the key shared between Access
Point and RADIUS server.

17
 Group Key Update Interval – This column indicate how often should the
Access Point change the encryption key. Default value is 3600 seconds,
set 0 in Group Key Update Interval to disable key renewal.
Wireless MAC Filter –
In this page, you can filter the MAC address by allowing or blocking access the
network.
 ACL (Access Control) Mode: You may choose to Disabled, Deny MAC
in the List, or Allow MAC in the List. By selecting Allow MAC in the List,
only the address listed in the table will have access to the network; all other
clients will be blocked. On the other hand, selected Deny MAC in the List
means only the listed MAC addresses will be blocked from accessing the
network; all other clients will have access to the network.
 MAC Address: Enter the MAC address.

18
 This table lists the blocked or allowed MAC addresses; you may delete
selected MAC address or delete all the addresses from the table by
clicking Delete.
Remember to click Apply to make sure all the changes are saved to system.
Wireless Advanced Settings -
The page below can help users to configure advanced wireless setting. Before
making any changes in this page, please check your wireless settings on other
system as well, as these changes will alter the effectiveness of the Access
Point. In most cases, these settings do not need to be changed.
 Data Rate – In data rate column, you can select all bit rate supported in
current operation mode. Default value is Auto which means the system
will automatically adjust the connection speed dynamically according to
your current link status.

19
 Transmit Power – You can reduce RF output power by selecting
adjustable transmit power by 1dBm step from 28 to 3 dBm. Changing
transmit power may decrease your wireless signal coverage. This feature
can be helpful in restricting the coverage area of the wireless network. You
can arrange the different data rate in distance in Access Point mode.
Please refer below table.
 Aggregation – When you enable this function, the device will combine
several packets and then transmit them as one. This is to reduce the
overhead when there are large packets to be transmitted.
 WMM – Choose to Enable or Disable wireless multimedia mode.
 Distance (1-30km) – Setup this parameter according to the longest link
distance between the point to point, or point to multi-point in the network.
The input needs to be greater than or equal to the real distance. The
range can be from 1km to 30km.
 Wireless Traffic Shaping – Choose to enable or disable wireless traffic
shaping, specify the incoming and outgoing transmission limit kbit/s.
Remember to click Apply to make sure all changes are made before leaving
this page.

20