D-Link NUCLIAS CONNECT DAP-X2850 User manual

NUCLIAS CONNECT
DAP-X2850 User Guide
V 1.00
2021 | Business Class Networking

2D-Link DAP-X2850 User Manual
Table of Contents
Table of Contents
Nuclias Connect ................................................................. 4
Introduction ................................................................................... 4
Nuclias Connect Key Features..................................................5
Package Contents......................................................................... 6
System Requirements.................................................................6
Hardware Overview........................................................... 7
LEDs...................................................................................................7
Connections ...................................................................................7
Basic Installation ............................................................... 8
Hardware Setup ............................................................................ 8
Congure the access point................................................8
Setup Wizard...................................................................... 9
Web User Interface ..........................................................10
Wireless ..........................................................................................11
Access Point Mode .............................................................11
WDS with AP Mode............................................................13
WDS Mode ............................................................................15
Wireless Client Mode.........................................................17
Wireless Security.................................................................18
Wired Equivalent Privacy (WEP) ..............................18
Wi-Fi Protected Access (WPA / WPA2 / WPA3) ....19
LAN ..........................................................................................21
IPv6 ..........................................................................................22
Advanced Settings.....................................................................23
Performance.........................................................................24
Wireless Resource...............................................................26
Multi-SSID..............................................................................28
VLAN........................................................................................30
VLAN List..........................................................................30
Port List.............................................................................31
Add/Edit VLAN ...............................................................32
PVID Settings..................................................................33
Intrusion.................................................................................34
Schedule ................................................................................35
Internal RADIUS Server.....................................................36
ARP Spoong Prevention ................................................37
Bandwidth Optimization .................................................38
Captive Portal.......................................................................40
Authentication Settings-Web Redirection Only 40
Authentication Settings- Username/Password..42
Authentication Settings- Passcode ........................44
Authentication Settings- Remote RADIUS...........47
Authentication Settings- LDAP................................49
Authentication Settings- POP3................................51
Login Page Upload.......................................................53
MAC Bypass.....................................................................54
DHCP Server .........................................................................55
Dynamic Pool Settings................................................55
Static Pool Setting ........................................................56
Current IP Mapping List..............................................58
Filters.......................................................................................59

3D-Link DAP-X2850 User Manual
Table of Contents
Wireless MAC ACL.........................................................59
WLAN Partition ..............................................................60
IP Filter Settings.............................................................61
Trac Control...............................................................................62
Uplink/Downlink Setting .................................................62
QoS...........................................................................................63
Trac Manager....................................................................64
Status ..............................................................................................65
Device Information ............................................................66
Client Information ..............................................................67
WDS Information Page .....................................................68
Channel Analyze .................................................................69
Statistics.........................................................................................70
Ethernet Trac Statistics..................................................70
WLAN Trac Statistics.......................................................71
Log ...................................................................................................72
View Log.................................................................................72
Log Settings..........................................................................73
Maintenance Section ................................................................75
Administration.....................................................................76
Limit Administrator......................................................76
System Name Settings................................................77
Login Settings ................................................................77
Console Settings ...........................................................77
SNMP Settings................................................................78
Ping Control Setting ....................................................78
LED Settings....................................................................78
DDP Setting ....................................................................79
Router Settings..............................................................79
Country Setting .............................................................79
Nuclias Connect Settings...........................................79
Firmware and SSL Upload................................................80
Conguration File Upload ...............................................81
Time and Date Settings....................................................82
Conguration and System.......................................................83
System Settings...........................................................................84
Help .................................................................................................85
Technical Specications ..................................................86
Antenna Pattern ..............................................................87
Warranty ..........................................................................89
Power Usage.....................................................................96
Registration .....................................................................97

4D-Link DAP-X2850 User Manual
Nuclias Connect
Introduction
Nuclias Connect is D-Link’s centralized management solution for Small-to-Medium-Sized Business (SMB) networks. Nuclias Connect makes
it easier to analyze, automate, congure, optimize, scale, and secure your network — delivering the convenience of an Enterprise-wide
management solution, at an SMB price. Nuclias Connect gives you the nancial and technical exibility to expand from a small network to a
larger one of up to 1,000 Access Points (APs), while retaining a robust and centralized management system. With its intuitive Graphical User
Interface (GUI), a wealth of enhanced AP features, and a setup wizard that supports 11 languages, Nuclias Connect minimizes the hassle of
deployment, conguration, and administration tasks.
Deployable on a Windows server (or Linux via Docker), PC, or Smartphone (via lite management app) the Nuclias Connect free-to-download
software is capable of managing up to 1,000 APs without licensing charges, coupled with an inexpensive optional
hardware controller (DNH-100 Nuclias Connect Hub) suitable for remote locations. Through software-based monitoring and remote
management of all wireless Access Points (APs) on your network, Nuclias Connect oers tremendous exibility compared to traditional
hardware-based unied management systems. Conguration can be done remotely. Network trac analytics are available at a glance (in
whole or in part). Load Balancing, Airtime Fairness, and Localized Throttling are enabled.
Nuclias Connect supports multi-tenancy, so network administrators can grant localized management authority for local networks. In
addition, because APs can support 8 SSIDs per radio (16 SSIDs per dual band APs), administrators have the option of using one SSID to create
a guest network for visitors.
Nuclias Connect provides direct AP discovery and provisioning when it shares the same Layer-2/Layer-3 network with a given AP, allowing
users to nd APs and import proles with minimum eort, which can be applied as needed to groups or individual APs for even more
eective conguration.
Since Nuclias Connect’s software operates transparently on the network, an AP can be deployed anywhere in an NAT environment. Admins
can provide and manage a variety of distributed deployments, including settings and admin account conguration for each deployment.
Nuclias Connect allows for multiple user authentications while enabling specic access control congurations for each SSID, giving admins
the option of conguring separate internal networks for dierent subnets, while enabling more advanced Value-Added Services, such as
Captive Portal or Wi-Fi Hotspot.

5D-Link DAP-X2850 User Manual
Nuclias Connect Key Features
• Free-to-Download Management Software
• Searchable Event Log and Change Log
• License-Free Access Points
• Trac Reporting & Analytics
• Authentication via Customizable Captive Portal, 802.1x and RADIUS Server, POP3, LDAP
• Remote Cong. & Batch Cong.
• Multilingual Support
• Intuitive Interface
• Multi-Tenant & Role-Based Administration
• Payment Gateway (PayPal) Integration and Front-Desk Ticket Management
For more information on how to use Nuclias Connect with the DAP-X2850, please refer to the Nuclias Connect User Guide.

6D-Link DAP-X2850 User Manual
Section 1 - Product Overview
Package Contents
• DAP-X2850 802.11ax Power over Ethernet (PoE) Access Point
• Mounting Brackets
• Ceiling Brackets
• Quick Install Guide
Note: No PSU supplied. To power the units use a D-Link 802.3at PoE switch or the D-Link DPE-301GI PoE injector.
System Requirements
yComputers with Windows®, Macintosh®, or Linux-based operating systems with an installed Ethernet Adapter
yInternet Explorer 11, Safari 7, Firefox 28, or Google Chrome 33 and above (for conguration)

7D-Link DAP-X2850 User Manual
Section 1 - Product Overview
Hardware Overview
LEDs Connections
2Power Receptor Connect the supplied power adapter. (*Note: no longer
used, replaced by PoE)
3LAN (PoE) Port Connect to a Power over Ethernet (PoE) switch or router via
an Ethernet cable.
4LAN Port Connect to your network with an Ethernet cable.
5Console Port RJ45 console port for debug
1Power/Status
Solid Red Indicates the access point has malfunctioned.
Blinking Red This LED will blink during boot-up.
Solid Green Indicates that the DAP-X2850 is working
properly.
1
2345

8D-Link DAP-X2850 User Manual
Section 2 - Installation
Basic Installation
Hardware Setup
To power on the DAP-X2850, you can use ONE of the following methods:
1. Plug one end of your Ethernet cable into theLAN(PoE) port of the DAP-X2850, and the other end into a port on a 802.3at PoE switch.
2. Purchase a DPE-301GI PoE injector separately if you need to connect the access point without a 802.3at PoE Switch.
Congure the access point
To set up and manage the DAP-X2850, use one of the following methods:
1. Connect the access point and your computer to the same PoE switch. Manage the access point from the computer.
Enter dapx2850.local in the address eld of your browser.
Log in to the Administration Web pages. The default login information is:
Username: admin
Password: admin
2. Connect the access point and your computer via DPE-301GI PoE injector. Manage the access point from the computer.
Enter dapx2850.local in the address eld of your browser.
Log in to the Administration Web pages. The default login information is:
Username: admin
Password: admin
OR
Computer
802.3at PoE Switch
DAP-X2850
Computer
PoE Injector
Power
Adapter

9D-Link DAP-X2850 User Manual
Setup Wizard
The rst login instance displays the System Settings window which requires a change in password. Additional settings include the System Time
and System Country functions.
After logging in to the user interface, ll in the New Password and Conrm New Password elds.
In the System Time function, select Using Network Time Protocol (NTP) or Manually to dene the system time. If required, click the Daylight
Saving Oset drop-down menu and select the value (minutes).
ySetting NTP System Time: Before trying to congure NTP check, perform a ping test with the NTP server. In the NTP Server eld, enter the NTP
server to use. Then click the Time Zone drop-down menu and select the appropriate time zone.
ySetting System Time Manually: From the System Date drop-down menu, select the Year, Month, and Day along with the Hour and Minutes
appropriate for the AP.
yEnable Daylight Saving: Click the radio button to enable the daylight savings time (DST) function. Set the DST start (24 hours) and end (24
hours) time by clicking on the drop-down menus and setting the Month, Week, Day, Hour, and Minute of the DST starting days.
Once the settings are congured, click Update button to accept the conguration and proceed to the main interface menu page.

10D-Link DAP-X2850 User Manual
Section 3 - Conguration
Web User Interface
The DAP-X2850 supports an elaborate web user interface where the user can congure and monitor the device. Launch a web browser, type
dap2680.local in the address eld and then press Enter to login. Most of the congurable settings are located in the left menu of the web GUI
which contains sections called Basic Settings, Advanced Settings and Status.

11D-Link DAP-X2850 User Manual
Section 3 - Conguration
Wireless
On the wireless settings page, you can set up the basic wireless conguration for the access point. The user can choose from 4 dierent wireless
modes:
Access Point - Used to create a wireless LAN
WDS with AP - Used to connect multiple wireless networks while still functioning as a wireless access point
WDS - Used to connect multiple wireless networks
Wireless Client - Used when the access point needs to act as a wireless network adapter for an Ethernet enabled device
Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Auto Channel Selection:
Select either 2.4 GHz or 5 GHz from the drop-down
menu.
Select Access Point from the drop-down menu.
Service Set Identier (SSID) is the name designated
for a specic wireless local area network (WLAN).
The SSID’s factory default setting is dlink.The SSID
can be easily changed to connect to an existing
wireless network or to establish a new wireless
network. The SSID can be up to 32 characters and
is case-sensitive.
Select Enable to broadcast the SSID across the
network, thus making it visible to all network users.
Select Disable to hide the SSID from the network.
This feature when enabled automatically selects
the channel that provides the best wireless
performance. The channel selection process only
occurs when the AP is booting up. To manually
select a channel, set this option to Disable and
select a channel from the drop-down menu.
Access Point Mode

12D-Link DAP-X2850 User Manual
Section 3 - Conguration
Channel:
Channel Width:
Authentication:
To change the channel, rst toggle the Auto Channel Selection setting to Disable, and then use the drop-down menu to make
the desired selection.
Note: The wireless adapters will automatically scan and match the wireless settings.
Allows you to select the channel width you would like to operate in 2.4GHz and 5GHz. Use the drop-down menu to choose 20
MHz or Auto 20/40 MHz or Auto 20/40/80 MHz.
Usethedrop-down menutochooseOpen System,Enhanced Open,Enhanced Open + Open, WPA-Personal, WPA-Enterprise,
or 802.1x.
• Select Open System, Enhanced Open, Enhanced Open + Open, to communicate the key across the network (WEP).
• Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.
• Select WPA-Enterprise to secure your network with the inclusion of a RADIUS server.
• Select 802.1X if your network is using port-based Network Access Control.

13D-Link DAP-X2850 User Manual
Section 3 - Conguration
Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Auto Channel Selection:
Channel:
Channel Width:
Select either 2.4GHz or 5GHz from the drop-down
menu.
WDS with AP mode is selected from the drop-down
menu.
Service Set Identier (SSID) is the name designated
for a specic wireless local area network (WLAN).
The SSID’s factory default setting is dlink. The SSID
can be easily changed to connect to an existing
wireless network or to establish a new wireless
network.
Enable or Disable SSID visibility. Enabling this
feature broadcasts the SSID across the network,
thus making it visible to all network users.
Enabling this feature automatically selects
the channel that will provide the best wireless
performance. This feature is not supported in WDS
with AP mode. The channel selection process only
occurs when the AP is booting up.
All devices on the network must share the same
channel.To changethechannel,use thedrop-down
menu to make the desired selection. (Note: The
wireless adapters will automatically scan and match
the wireless settings.)
Allows you to select the channel width you would
like to operate in 2.4GHz and 5GHz. Use the drop-
down menu to choose 20 MHz or Auto 20/40 MHz
or Auto 20/40/80 MHz.
WDS with AP Mode

14D-Link DAP-X2850 User Manual
Section 3 - Conguration
AP MAC Address:
Site Survey:
Authentication:
Enter the MAC addresses of the APs on your network that will serve as bridges to wirelessly connect multiple networks.
Click on the Scan button to search for available wireless networks, then click on the available network that you want to
connect with.
Use the drop-down menu to choose Open System or WPA-Personal.
• Select Open System to communicate the key across the network.
• Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.

15D-Link DAP-X2850 User Manual
Section 3 - Conguration
Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Auto Channel Selection:
Channel:
Channel Width:
AP MAC Address:
Select either 2.4GHz or 5GHz from the drop-down
menu.
WDS is selected from the drop-down menu.
Service Set Identier (SSID) is the name designated
foraspecic wirelesslocal area network(WLAN).The
SSID’s factory default setting is dlink. The SSID can
be easily changed to connect to an existing wireless
network or to establish a new wireless network.
Enable or Disable SSID visibility. Enabling this
feature broadcasts theSSIDacross thenetwork, thus
making it visible to all network users.
Enabling this feature automatically selects
the channel that will provide the best wireless
performance. This feature is not supported in WDS
mode.
All devices on the network must share the same
channel.To change the channel, use the drop-down
menu to make the desired selection.
Allows you to select the channel width you would
like to operate in 2.4GHz and 5GHz. Use the drop-
down menu to choose 20 MHz or Auto 20/40 MHz
or Auto 20/40/80 MHz.
EntertheMAC addressesoftheAPs onyour network
that will serve as bridges to wirelessly connect
multiple networks.
WDS Mode

16D-Link DAP-X2850 User Manual
Section 3 - Conguration
Site Survey:
Authentication:
Click on the Scan button to search for available wireless networks, then click on the available network that you
want to connect with.
Use the drop-down menu to choose Open System or WPA-Personal.
• Select Open System to communicate the key across the network.
• Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is
required.

17D-Link DAP-X2850 User Manual
Section 3 - Conguration
Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Auto Channel Selection:
Channel:
Channel Width:
Site Survey:
Authentication:
Select either 2.4 GHz or 5 GHz from the drop-down
menu.
Wireless Client is selected from the drop-down menu.
Service Set Identier (SSID) is the name designated
for a specic wireless local area network (WLAN).The
SSID’s factory default setting is dlink. The SSID can
be easily changed to connect to an existing wireless
network.
This option is unavailable in Wireless Client mode.
This option is unavailable in Wireless Client mode.
This option is unavailable in Wireless Client mode.
This option is unavailable in Wireless Client mode.
Click on the Scan button to search for available
wirelessnetworks,then clickontheavailable network
that you want to connect with.
Use the drop-down menu to choose Open System
or WPA-Personal.
• Select Open System to communicate the key across
the network.
• Select WPA-Personal to secure your network using
a password and dynamic key changes. No RADIUS
server is required.
Wireless Client Mode

18D-Link DAP-X2850 User Manual
Section 3 - Conguration
Wireless security is a key concern for any wireless network. Unlike any other networking methods, wireless networks broadcast it’s presence for anyone to
connect to it. Today, wireless security has advanced to a level where it is virtually impenetrable.
There are mainly two forms of wireless encryption and they are called Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA). WEP was the rst
security method developed. It is a low level encryption but better than now encryption.WPA is the newest encryption standard and with the advancedWPA3
standard, wireless networks have nally reach a point where the security is strong enough to give users peace of mind when installing wireless networks.
Wireless Security
Wired Equivalent Privacy (WEP)
WEP Open System will send a request to the access point and if the key used matches the one congured on the access point, the access point will return
a success message back to the wireless client. If the key does not match the one congured on the access point, the access point will deny the connection
request from the wireless client.
Encryption:
Key Type:
Key Size:
Key Index (1-4):
Key:
Use the radio button to disable or enable
encryption.
Select HEX** or ASCII*.
Select 64 Bits or 128 Bits.
Select the 1st through the 4th key to be
the active key.
Input up to four keys for encryption. You
will select one of these keys in the Key
Index drop-down menu.
**Hexadecimal (HEX) digits consist of the numbers 0-9 and the letters A-F.
*ASCII (American Standard Code for Information Interchange) is a code that represents English letters using
numbers ranging from 0-127.

19D-Link DAP-X2850 User Manual
Section 3 - Conguration
Wi-Fi Protected Access (WPA / WPA2 / WPA3)
WPA was created by the Wi-Fi Alliance to address the limitations and weaknesses found in WEP. This protocol is mainly based on the 802.11i
standard. There are also two variations found in WPA called WPA-Personal (PSK) and WPA-Enterprise (EAP).
WPA-EAP requires the user to install a RADIUS Server on the network for authentication.
WPA-Personal does not require the user to install a RADIUS Server on the network.
Comparing WPA-PSK with WPA-EAP, WPA-PSK is seen as a weaker authentication but comparing WPA-PSK to WEP, WPA-PSK is far more secure
than WEP. WPA-EAP is the highest level of wireless security a user can use for wireless today.
WPA2/WPA3 are upgrades of WPA. WPA2/WPA3 yet again solves some possible security issues found in WPA. WPA2/WPA3 have two variations
called WPA2/WPA3-Personal (PSK) and WPA2/WPA3-Enterprise (EAP) which are the same as found with WPA.
WPA Mode:
Cipher Type:
Group Key Update:
Pass Phrase:
When WPA-Personal is selected for Authentication
type, you must also select a WPA mode from the
drop-down menu: AUTO (WPA or WPA2), WPA2 or
WPA3,WPA2 Only or WPA3 Only.
When you selectWPA-Personal, you must also select
AUTO, AES, or TKIP from the drop-down menu.
Select the interval during which the group key will
be valid.The default value of 3600 is recommended.
When you select WPA-Personal, enter a Pass Phrase
in the corresponding eld.

20D-Link DAP-X2850 User Manual
Section 3 - Conguration
WPA Mode:
Cipher Type:
Group Key Update
Interval:
Network Access
Protection:
RADIUS Server:
RADIUS Port:
RADIUS Secret:
Accounting Mode:
Accounting Server:
Accounting Port:
Accounting Secret:
Save:
When WPA-Enterprise is selected, you must also
select a WPA mode from the drop-down menu:
AUTO (WPA orWPA2) orWPA2 Only orWPA3 only.
When WPA-Enterprise is selected, you must also
select a cipher type from the drop-down menu:
Auto, AES, or TKIP.
Select the interval during which the group key
will be valid. 3600 is the recommended value as
a lower interval may reduce data transfer rates.
Enable or disable Microsoft Network Access
Protection.
Enter the IP address of the RADIUS server to be
used in authenticate.
Enter the RADIUS port.
Enter the shared secret to be used between the
radius server and the DAP to authenticate.
Click the drop-down menu to enable or disable
the accounting mode.
Enter the IP address of the accounting server.
Enter the accounting port.
Enter the accounting secret.
Save the updated configuration. Click
Conguration > Save and Activate to make
changes permanent.