Cerio CW-400NAC User manual

V1.0a
CERIO Corporation
CW-400NAC
eXtreme Power AC1200 2.4GHz / 5GHz 2x2 Ceiling / Wall PoE
Access Point ( 800mW )
User Manual

V1.0a
1. INTRODUCTION ................................................................................................................ 4
1.1 OVERVIEW..................................................................................................................... 4
1.2 SOFTWARE CONFIGURATION ........................................................................................... 5
1.3 LOGIN CW-400NAC WEB PAGE .................................................................................... 9
2. SOFTWARE SETTING..................................................................................................... 10
2.1 OPERATING MODE INTRODUCTION................................................................................. 10
3. ACCESS POINT MODE ................................................................................................... 13
3.1 AP MODE.................................................................................................................... 13
3.2 CONFIGURE LAN SETUP ..............................................................................................14
3.2.1 Set Gateway / DNS address functions. .............................................................. 14
3.2.2 Set local IP Address / Netmask / VLAN tag / Radio on/off and Spanning Tree15
3.3 WIRELESS GENERAL SETUP .........................................................................................16
3.3.1 DHCP Server......................................................................................................... 16
3.3.2 Radio 2.4G/5G Access Point setup..................................................................... 18
3.3.3 MAC Filter ............................................................................................................. 20
3.3.4 802.11r/802.11k Fast Roaming............................................................................. 21
3.4 WIRELESS BASIC SETUP .............................................................................................. 23
3.4.1 Radio 0(2.4G) Setup............................................................................................. 24
3.4.2 Radio 1 (5G) Setup............................................................................................... 26
3.4.3 Advanced Setup................................................................................................... 27
3.4.4 WMM Setup........................................................................................................... 31
3.4.5 WDS Setup............................................................................................................ 33
3.4.6 WDS Status........................................................................................................... 35
4. CLIENT BRIDGE MODE .................................................................................................. 35
4.1 CONFIGURE LAN SETUP ..............................................................................................35
4.2 CONFIGURE DHCP SETUP ...........................................................................................37
4.3 WIRELESS GENERAL SETUP .........................................................................................39
4.3.1 Radio 0(2.4G) Basic Setup .................................................................................. 40
4.3.2 Radio 1(5G) Basic Setup ..................................................................................... 42
4.3.3 Advanced Setup................................................................................................... 43
4.3.4 WMM Setup........................................................................................................... 46
4.3.5 Station Setup........................................................................................................ 48
4.3.6 Repeater AP Setup ............................................................................................... 49
4.3.7 MAC Filter ............................................................................................................. 51

V1.0a
4.3.8 802.11r/802.11k Fast Roaming............................................................................. 52
5. WISP MODE..................................................................................................................... 55
5.1 CONFIGURE WAN SETUP .............................................................................................55
5.1.1 WAN mode ............................................................................................................ 55
5.1.2 MAC Clone............................................................................................................ 58
5.1.3 DNS ....................................................................................................................... 58
5.1.4 NAT ........................................................................................................................ 58
5.2 CONFIGURE LAN SETUP ..............................................................................................59
5.3 CONFIGURE DHCP SERVER .........................................................................................60
5.4 WIRELESS GENERAL SETUP .........................................................................................62
5.4.1 Radio 0(2.4G) Basic Setup .................................................................................. 62
5.4.2 Radio 1(5G) Basic Setup ..................................................................................... 63
5.4.3 Advanced Setup................................................................................................... 65
5.4.5 Station Setup........................................................................................................ 70
5.4.6 Repeater AP Setup ............................................................................................... 70
5.4.7 MAC Filter ............................................................................................................. 73
5.4.8 802.11r/k Fast roaming ........................................................................................ 74
5.5 CONFIGURE ADVANCED SETUP .....................................................................................76
5.5.1 DMZ ....................................................................................................................... 76
5.5.2 IP Filter.................................................................................................................. 77
5.5.3 MAC Filter ............................................................................................................. 78
5.5.4 Virtual Server........................................................................................................ 79
5.5.5 Time Policy ........................................................................................................... 81
6. SYSTEM MANAGEMENT................................................................................................ 82
6.1 CONFIGURE SYSTEM MANAGEMENT ...............................................................................82
6.2 CONFIGURE TIME SERVER ............................................................................................84
6.3 CONTROL POEBRIDGE ................................................................................................85
6.4 CONFIGURE SNMP SETUP ...........................................................................................85
7. UTILITIES......................................................................................................................... 87
7.3 NETWORK UTILITY ....................................................................................................... 89
7.4 REBOOT ...................................................................................................................... 89
8. STATUS ............................................................................................................................ 90
8.1 OVERVIEW................................................................................................................... 90
8.2 SYSTEM LOG ...............................................................................................................90

V1.0a
1. Introduction
1.1 Overview
CERIO’s GS Firmware utilizes the CenOS 3.0 core. The firmware’s main functions are Wifi
application for Pure WiFi Access Point, Point to Point / Multi Point WiFi Bridge and Bridge +
Repeater Extension WiFi AP functions.
The CenOS 3.0 core’s operational mode supports Pure AP with WDS Mode and Client
Bridge + Universal Repeater Mode. These CenOS 3.0 features simplify deployment and
reduce cost for continued maintenance of indoor Access Points. Cerio’s CenOS is
undoubtedly your best wifi application solution.

V1.0a
Notice: Due to reasons involving practical deployment and functionality of CW-400NAC, this device
supports only THREE operation modes: AP mode and AP+WDS Mode, Client Bridge + Repeater AP
Mode, WISP + Repeater AP Mode. CW-400NAC is intended for indoor deployment through either
Ceiling or Wall mounting.
The CW-400NAC eXtreme Power AC1200 2.4GHz / 5GHz 2x2 Ceiling / Wall PoE Access Point is
an AC1200 Wireless concurrent dual band wifi device. CW-400NAC bundles Cerio CenOS 3.0
Software Core and supports Cerio Wireless Management Software (CWMS), enabling connection
to Wireless Indoor Networks for service providers deploying last mile services to home, businesses,
and residential broadband subscribers. Network administrators can create and centrally manage
multiple subscriber service tiers using per-subscriber rate limiting features. The CW-400NAC
Structure (Form Factor) supports both Ceiling and Wall mounting.
The CW-400NAC eXtreme Power AC1200 2.4GHz / 5GHz 2x2 Ceiling / Wall PoE Access Point
hardware utilizes 800mW (2.4GHZ) / 500mW (5GHZ) eXtreme power and built-in 2x2 Dual-Band
Omni directional antennas. The CW-400NAC Dual Band Wireless Access Point hardware with
Cerio CenOS 3.0 software may utilize CERIO’s CWMS management software to better organize
and manage a network infrastructure. CW-400NAC can also provide subscribers with an Ethernet
connection for a local access to extend the range and increase the performance of a wireless
network. CW-400NAC hardware also includes 802.3af PoE capabilities that allows power and data
to be supplied to the unit using CAT5 Ethernet cable.
1.2 Software Configuration
CW-400NAC supports web-based configuration. Upon the completion of hardware installation,
CW-400NAC can be configured through a PC/NB by using a web browser such as Internet Explorer
6.0 or later.
Default IP Address: 192.168.2.254
Default Subnet Mask: 255.255.255.0
Default Username and Password
MODE AP , Client Bridge , WISP Mode
Management Account Root Account
Username
root
Password default

V1.0a
IP Segment Set-up for Administrator's PC/NB
Set the IP segment of the administrator's computer to be in the same range as CW-400NAC for
accessing the system. Do not duplicate the IP Address used here with IP Address of CW-400NAC
or any other device within the network.
Example of Segment: (Windows XP)
Click Start -> Settings -> Control Panel, and then “Control Panel” window appears.
Click on “Network Connections”, and then “Network Connections” window appears.
Click right on “Local Area Connection”, and select Properties.
PC link to device setup by OS Windows7
Please PC link to Device used cat5/6 Ethernet cable.
Step 1 :
Please click on the computer icon in the bottom right window, and click “Open Network
and Sharing Center”
Step 2 :
In the Network and Sharing Center page, Please click on the left side of “Change adapter
setting” button
1
2

V1.0a
Step 3 :
In “Change adapter setting” Page. Please find Local LAN and Click the right button on
the mouse and Click “Properties”

V1.0a
Step 4 :
In “Properties” page, please Click “Properties” button to TCP/IP setting
Step 5 :
In Properties page to setting IP address, please find “Internet Protocol Version 4
(TCP/IPv4)” and double click or click “Install” button.
Double click

V1.0a
Step 6 :
Select “Use the following IP address”, and fix in IP Address : 192.168.2.#
ex. The # is any number by 1 to 253
Subnet mask : 255.255.255.0
And Click "OK" to complete the fixed computer IP setting
Please Open Web Browser
Without a valid certificate, users may encounter the following problem in IE7 when they try
to access system's WMI (https://192.168.2.254). There will be a “Certificate Error”, because
the browser treats system as an illegal website.
1.3 Login CW-400NAC Web Page
Launch Web Browser
Launch as web browser to access the web management interface of system by entering the default
IP Address, http://192.168.2.254, in the URL field, and then press Enter.

V1.0a
System Login
Please use default Users name: “root” and default password “default” to login.
2. Software Setting
2.1 Operating Mode Introduction
CERIO CW-400NAC eXtreme Power 11n Dual Band 2x2 Ceiling / Wall PoE Access Point
with CenOS3.0 software supports three operational modes: Access Point Mode, Client
Bridge Mode, and WISP Mode. It utilizes built-in remote management features that simplify
deployment and reduce costs of continued maintenance of the access point
Because of CW-400NAC’s Dual Band capabilities, this device possesses more reliable
connectivity and allows for higher capacity and performance speeds. CW-400NAC can operate
concurrently on two radio frequencies, simultaneously enabling more flexible deployment without
sacrificing bandwidth or risking device overloading. These high performance and high loadbearing
capabilities makes CW-400NAC the perfect device to be deployed in Offices, Hotels, Universities,
Hospitals, Airports, Luxury Houses, etc.

V1.0a
Access Point Mode (Supports AP+WDS Mode)
It can be deployed as a traditional fixed wireless Access Point
It allow wireless clients or Stations ( STA ) to access
Supports DHCP Service, allowing for automated assigning of IP addresses to clients connecting
to the network
WDS Setup includes AES (Advanced Encryption Standard) Authentication
This enables the wireless interconnection of Access Point in a IEEE802.11 network and accepts
wireless

V1.0a
Client Bridge + Repeater Mode
It can be used as a Client Bridge + Repeater AP to receive wireless signals over last mile
applications, helping WISPs deliver wireless broadband Internet service to new residential and
business customers
In this mode, CW-400NAC is enabled with DHCP Server functions. The wired clients of
CW-400NAC are in the same subnet from Main Base Station and it accepts wireless
connections from client devices. You can disabled the repeater extending AP function, which
will enable the “AP Client ” function
If client bridge used 5Ghz band the Repeater AP only used 2.4Ghz band.
WISP + Repeater AP Mode
It can be used as an WISP/Outdoor Customer Premises Equipment (CPE) to receive wireless
signals over last mile application, helping WISPs deliver wireless broadband Internet service to
residents and business customers
In the WISP (CPE) mode, CW-400NAC is a gateway enabled with NAT and DHCP Server
functions. The wired clients connected to DT-300N are in different subnet from those
connected to Main Base Station, and, in WISP (CPE) mode, it does not accept wireless
association from wireless clients.

V1.0a
3. Access Point mode
When AP mode is chosen, the system can be configured as an Access Point. This section provides
detailed explanation for users to configure in the AP mode with help of illustrations. In the AP mode,
functions listed in the table below are also available from the Web-based GUI interface.
3.1 AP Mode
The system administrator can set the desired mode via this page, and then configure the system
according to their deployment needs, Please click on System -> Mode Setup and follow the below
setting.

V1.0a
Please click Confirm “Save & Reboot” button to save your change mode.
3.2 Configure LAN Setup
Here are the instructions to setup the local IP Address / Netmask / Gateway / DNS and management
Access Point 2.4G or 5G Radio on/off. Administrators can change settings such as LAN Spanning
Tree and Tag VLAN functions.
3.2.1 Set Gateway / DNS address functions.
Please click “System”“ LAN Setup”
Default Gateway: The default Gateway IP Address is 192.168.2.1, Please check your
Gateway IP and change.
DNS: Check either “No Default DNS Server” or “Specify DNS Server IP” button as desired
to set up the system DNS.
Primary: The IP address of the primary DNS server.
Secondary: The IP address of the secondary DNS server.

V1.0a
3.2.2 Set local IP Address / Netmask / VLAN tag / Radio on/off and Spanning Tree
Please click “System”“ LAN Setup”“Network”button.
IP Address : The IP address of the LAN port; default IP address is 192.168.2.254
Netmask : The Subnet mask of the LAN port; default Netmask is 255.255.255.0
Access Point 0-1(2.4G/5G) : Administrators can Enable or Disable the radio for 2.4G or 5G.
802.1d Spanning Tree : The spanning tree network protocol provides a loop free topology for
a bridged LAN between LAN interface and 8 WDS interfaces from wds0 to wds7. The
Spanning Tree Protocol, which is also referred to as STP, is defined in the IEEE Standard
802.1d

V1.0a
IAPP : Administrator can select radio 2.4G or 5G for IAPP roaming.(the IAPP condition must
use WPA2-PSK Wi-Fi security and AES algorithm)
VLAN Tag : The LAN Port Support tag VLAN function.
3.3 Wireless General Setup
The administrator can set DHCP Server function and change the 2.4/5G WiFi data transmission,
channel and output power, Fast Roaming, and MAC Filter settings for the system.
Please click the Network arrow button to set 2.4G and 5G SSID security etc.
3.3.1 DHCP Server
CW-400NAC supports DHCP Server function, administrator can enable / disable the function

V1.0a
Start IP : Set Start IP for DHCP Service.
End IP : Set End IP for DHCP Service.
Netmask: Set IP Netmask, the default is 255.255.255.0
Gateway: Set Gateway IP for DHCP Service.
DNS(1-2) IP : Set DNS IP for DHCP Service.
WINS IP : Enter IP address of the Windows Internet Name Service (WINS) server; this is
optional.
Domain : Enter the domain name for this network.
Lease Time : The IP addresses given out by the DHCP server will only be valid for the
duration specified by the lease time. Increasing the time ensure client operation without
interruptions, but could introduce potential conflicts. Lowering the lease time will avoid
potential address conflicts, but might cause more interruptions to the client while it will acquire
new IP addresses from the DHCP server. Default is 86400 seconds
DHCP Client List
The administrator can view status of all DHCP Client Users on each DHCP Server.
Static Lease IP Setup

V1.0a
Setting Client acquire IP address for fixed DHCP appoint IP
Comment : Enter rule description.
IP Address : Enter access point IP.
MAC Address : Enter Client MAC Address of PC network.
Static Lease IP List
Show the static Lease IP list.
3.3.2 Radio 2.4G/5G Access Point setup
Administrator can setting 2.4G WiFi functions and radio Enable or Disable.
Access Point: administrator can Enable or Disable the radio.
ESSID: Setting 2.4G SSID name.
SSID Visibility: Enable or Disable the Visibility.
Client Isolation: Enable or Disable the client isolation function.
Connection Limit: Enable or Disable the WiFi connection Limit.
User Limit: If Connection Limit select enable, administrator can limit the Users of WiFi link.

V1.0a
Authentication: Select the desired security type from the drop-down list; the options are
WPA-PSK, WPA2-PSK, WPA/W PA2 -Enterprise and WEP 802.1X.
Open System: Data is not unencrypted during transmission when this option is selected.
WPA/WPA2 Personal: W PA/W PA 2 is short for W-Fi Protected Access-Pre-Shared Key.
W PA/W PA2 uses the same encryption way with WPA, and the only difference between
them is that WPA/WPA2 recreates a simple shared key, instead of using the user’s
certification.
WPA Mode: Administrator can select security for Auto or only WPA or only WPA2.
Cipher Type: Administrator can select use AES or TKIP with WPA / WPA2 encryption
method.
AES is short for “Advanced Encryption Standard”, The AES cipher is specified as a
number of repetitions of transformation rounds that convert the input plaintext into the
final output of ciphertext. Each round consists of several processing steps, including
one that depends on the encryption key. A set of reverse rounds are applied to
transform ciphertext back into the original plaintext using the same encryption key.
TKIP is short for “Temporal Key Integrity Protocol”, TKIP scrambles the keys using a
hashing algorithm and, by adding an integrity-checking feature, ensures that the keys
haven’t been tampered with.
Group Key Update Interval: The time interval is for re-keying GTK (broadcast/multicast
encryption keys) in seconds. Enter the time-length required; the default time is 600

V1.0a
seconds.
Pass Phrase:Enter the ESSID pass phrase.
WPS: Administrator can used WPS function to link WiFi client. If enabled, administrator
can click the WPS Push Button.
802.1X security: When 802.1x Authentication is enabled, please refer to the following
Dynamic WEP and RADIUS settings to complete the configuration.
Key Size: Check on the respected button to enable either 64bits or 128bits key
length. The system will automatically generate WEP keys for encryption.
Radius Server: Enter the IP address of the Authentication RADIUS server.
Radius Port: The port number used by Authentication RADIUS server. Use the
default 1812 or enter port number specified.
Radius Secret: The secret key for system to communicate with Authentication
RADIUS server. Support 1 to 64 characters.
Click “Save” button to save your changes. Then click Reboot button to activate your
changes.
3.3.3 MAC Filter
The administrator can allow or reject WiFi clients to access the A P.