D-Link Air Premier DAP-2695 User manual

Document Created by Nick Schuster
NUCLIAS CONNECT
DAP-2695 User Guide
V 2.00
2020 | Business Class Networking

2D-Link DAP-2695 User Manual
Table of Contents
Nuclias Connect .........................................................................4
Introduction ................................................................................... 4
Nuclias Connect Key Features.................................................. 5
Setup............................................................................................6
Package Contents......................................................................... 6
System Requirements................................................................. 6
Hardware Overview ..................................................................7
LEDs................................................................................................... 7
Connections ................................................................................... 7
Basic Installation........................................................................8
Hardware Setup ............................................................................ 8
Congure the Access Point ............................................... 8
Setup Wizard ........................................................................... 10
Web User Interface................................................................. 11
Wireless ..........................................................................................12
Access Point Mode .............................................................12
WDS with AP Mode............................................................14
WDS Mode ............................................................................16
Wireless Client Mode.........................................................18
Wireless Security .................................................................19
Wired Equivalent Privacy (WEP) ..............................19
Wi-Fi Protected Access (WPA / WPA2)....................20
802.1x................................................................................22
LAN ..........................................................................................23
IPv6 Settings.........................................................................24
Advanced Settings.....................................................................25
Performance.........................................................................26
Wireless Resource Control.......................................................28
Multi-SSID..............................................................................30
VLAN........................................................................................32
VLAN List..........................................................................32
Port List.............................................................................33
Add/Edit VLAN ...............................................................34
PVID Settings..................................................................35
Intrusion.................................................................................36
Schedule ................................................................................37
Internal RADIUS Server.....................................................38
ARP Spoong Prevention ................................................39
Bandwidth Optimization .................................................40
Captive Portal.......................................................................42
Authentication Settings-Web Redirection Only 42
Authentication Settings- Username/Password..44
Authentication Settings- Passcode ........................46
Authentication Settings- Remote RADIUS...........48
Authentication Settings- LDAP................................50
Authentication Settings- POP3................................52
Login Page Upload.......................................................54
MAC Bypass.....................................................................55
DHCP Server .........................................................................56
Dynamic Pool Settings................................................56

3D-Link DAP-2695 User Manual
Static Pool Setting ........................................................57
Current IP Mapping List..............................................58
Filters.......................................................................................59
Wireless MAC ACL.........................................................59
WLAN Partition ..............................................................60
IP Filter Settings.............................................................61
Trac Control...............................................................................62
Uplink/Downlink Setting .................................................62
QoS...........................................................................................63
Trac Manager....................................................................64
Status ..............................................................................................65
Device Information ............................................................66
Client Information ..............................................................67
WDS Information Page .....................................................68
Channel Analyze .................................................................69
Statistics.........................................................................................70
Ethernet Trac Statistics..................................................70
WLAN Trac Statistics.......................................................71
Log ...................................................................................................72
View Log.................................................................................72
Log Settings..........................................................................73
Maintenance Section ................................................................74
Administration.............................................................................75
Limit Administrator............................................................75
System Name Settings......................................................76
Login Settings......................................................................76
Console Settings .................................................................77
SNMP Settings .....................................................................77
Ping Control Setting ..........................................................77
Nuclias Connect Settings.................................................78
DDP Control Setting ..........................................................78
Country Setting...................................................................78
Firmware and SSL Certication Upload......................79
Conguration File Upload ...............................................80
Time and Date Settings ....................................................81
Conguration and System.......................................................82
System Settings...........................................................................83
Help .................................................................................................84
Knowledge Base ..................................................................... 85
Wireless Basics .............................................................................85
Wireless Installation Considerations....................................86
Troubleshooting ..................................................................... 87
Why can’t I access the web-based conguration
utility? .....................................................................................87
What can I do if I forgot my password?.......................87
How to check your IP address? ......................................88
How to statically assign an IP address?.......................89
Technical Specications ........................................................ 90

4D-Link DAP-2695 User Manual
Nuclias Connect
Nuclias Connect
Introduction
Nuclias Connect is D-Link’s centralized management solution for Small-to-Medium-Sized Business (SMB) networks. Nuclias Connect makes it easier
to analyze, automate, congure, optimize, scale, and secure your network — delivering the convenience of an Enterprise-wide management
solution, at an SMB price. Nuclias Connect gives you the nancial and technical exibility to expand from a small network to a larger one (up
to 1,000 APs), while retaining a robust and centralized management system. And with its intuitive Graphical User Interface (GUI), a wealth of
enhanced AP features, and a setup wizard that supports 11 languages, Nuclias Connect minimizes the hassle of deployment, conguration,
and administration tasks.
Deployable on Windows server (or Linux via Docker), PC, or Smartphone (via lite management app) the Nuclias Connect free-to-download
software is capable of managing up to 1,000 Access Points (APs) without licensing charges, coupled with an inexpensive optional
hardware controller (The Hub) suitable for remote locations. Through software-based monitoring and remote management of all wireless Access
Points (APs) on your network, Nuclias Connect oers tremendous exibility compared to traditional hardware-based unied
management systems. Conguration can be done remotely. Network trac analytics are available at a glance (in whole or in part). Load Balancing,
Airtime Fairness, and Localized Throttling are enabled.
Nuclias Connect supports multi-tenancy, so network admins can grant localized management authority for local networks. In addition, because
APs can support 8 SSIDs per radio (16 SSIDs per dual band APs), administrators have the option of using one SSID to create a guest network for
visitors.
Nuclias Connect provides direct AP discovery and provisioning when it shares the same Layer-2/Layer-3 network with a given AP, allowing
users to nd APs and import proles with minimum eort, which can be applied as needed to groups or individual APs for even more eective
conguration.
Since Nuclias Connect’s software operates transparently on the network, an AP can be deployed anywhere in an NAT environment. Admins can
provide & manage a variety of distributed deployments, including setting & admin account conguration for each deployment.
Nuclias Connect allows for multiple user authentications while enabling specic access control congurations for each SSID, giving admins the
option of conguring separate internal networks for dierent subnets, while enabling more advanced Value-Added Services, such as Captive
Portal or Wi-Fi Hotspot.

5D-Link DAP-2695 User Manual
Nuclias Connect
Nuclias Connect Key Features
• Free-to-Download Management Software
• Searchable Event Log and Change Log
• License-Free Access Points
• Trac Reporting & Analytics
• Authentication via Customizable Captive Portal, 802.1x and RADIUS Server, POP3, LDAP, AD
• Backwards-Compatibility
• Remote Cong. & Batch Cong.
• Multilingual Support
• Intuitive Interface
• Multi-Tenant & Role-Based Administration
• Payment Gateway (Paypal) Integration and Front-Desk Ticket Management
For more information on how to use Nuclias Connect with DAP-2695, please refer to the Nuclias Connect User Guide.

6D-Link DAP-2695 User Manual
Setup
Package Contents
• DAP-2695 Access Point
• Six Detachable Antennas
• Power Adapter (Optional)
• Mounting Plate and Hardware
• Ethernet Cable
• Quick Install Guide
Note: Using a power supply with a dierent voltage rating than the one included with the DAP-2695 will cause damage and void the warranty for this product.
System Requirements
yComputers with Windows®, Macintosh®, or Linux-based operating systems with an installed Ethernet Adapter
yInternet Explorer 11, Safari 7, Firefox 28, or Google Chrome 33 and Above (for conguration)
Setup

7D-Link DAP-2695 User Manual
Hardware Overview
Hardware Overview
LEDs Connections
1 2 3 4 5
15GHz When lit, the access point is operating at 5GHz. This light
will blink when there is wireless trac.
22.4GHz When lit, the access point is operating at 2.4GHz. This
light will blink when there is wireless trac.
3LAN1 (PoE)
Solid light when the Ethernet port is connected to a
power over Ethernet (PoE) port, such as a router or
switch. The light will blink when there is trac through
LAN port.
4LAN2
Solid light when the Ethernet port is connected to a
working port, such as a router or switch. The light will
blink when there is trac through LAN port.
5Power The light will blink during boot up. Once solid, the access
point is ready.
1 2 3 4 5
1Reset Button Press and hold for six seconds to reset the access point
to the factory default settings.
2Console Port Connect the supplied console cable to congure
using a command line interface.
3LAN2 Port Connect to your network with an Ethernet cable.
4LAN1 (PoE) Port Connect to a Power over Ethernet (PoE) switch or
router.
5Power Receptor Connect the supplied power adapter.
(*Optional)

8D-Link DAP-2695 User Manual
Basic Installation
Basic Installation
Hardware Setup
Computer with DHCP Server
Computer with DHCP Server Computer with DHCP Server
To power on the DAP-2695, you can use ONE of the following methods:
1. Plug one end of your Ethernet cable into the LAN port of the DAP-2695, and the other end into a port on a 802.3at PoE switch.
2. Separately purchase a DPE-301GI PoE injector if you need to connect the Access Point without a 802.3at PoE Switch.
3. Separately purchase a power adaptor to plug into the power receptor of the DAP-2695
Congure the Access Point

9D-Link DAP-2695 User Manual
Basic Installation
To set up and manage the DAP-2695, use one of the following methods:
1. Connect the access point and your computer to the same PoE switch. Manage the access point from the computer.
Enter dap2695.local in the address eld of your browser.
Log in to the Administration user interface. The default login information is:
Username: admin
Password: admin
2. Connect the access point and your computer via DPE-301GI PoE injector. Manage the access point from the computer.
Enter dap2695.local in the address eld of your browser.
Log in to the Administration user interface. The default login information is:
Username: admin
Password: admin
3. Connect the access point and your computer to the same network switch. Manage the access point from the computer.
Enter dap2695.local in the address eld on your browser.
Log in to the Administration user interface. The default login information is:
Username: admin
Password: admin

10D-Link DAP-2695 User Manual
Setup Wizard
Setup Wizard
The rst login instance displays the System Settings window which requires a change in password. Additional settings include the System Time
and System Country functions.
After logging in to the user interface, ll in the New Password and Conrm New Password elds.
In the System Time function, select Using Network Time Protocol (NTP) or Manually to dene the system time. If required, click the Daylight Sav-
ing Oset drop-down menu and select the value (minutes).
ySetting NTP System Time: Before trying to congure NTP check, perform a ping test with the NTP server. In the NTP Server eld, enter the NTP
server to use. Then click the Time Zone drop-down menu and select the appropriate time zone.
ySetting System Time Manually: From the System Date drop-down menu, select the Year, Month, and Day along with the Hour and Minutes
appropriate for the AP.
yEnable Daylight Saving: Click the radio button to enable the daylight savings time (DST) function. Set the DST start (24 hours) and end (24
hours) time by clicking on the drop-down menus and setting the Month, Week, Day, Hour, and Minute of the DST starting days.
Once the settings are congured, click Update button to accept the conguration and proceed to the main interface menu page.

11D-Link DAP-2695 User Manual
Web User Interface
Web User Interface
The DAP-2695 supports an elaborate web user interface where the user can congure and monitor the device. Launch a web browser, type
dap2695.local in the address eld and then press Enter to login. Most of the congurable settings are located in the menu of the left side of the
web GUI which contains sections called Basic Settings, Advanced Settings and Status.

12D-Link DAP-2695 User Manual
Web User Interface
Wireless
On the wireless settings page, you can setup the basic wireless conguration for the access point. The user can choose from 4 dierent wireless
modes:
Access Point - Used to create a wireless LAN
WDS with AP - Used to connect multiple wireless networks while still functioning as a wireless access point
WDS - Used to connect multiple wireless networks
Wireless Client - Used when the access point needs to act as a wireless network adapter for an Ethernet enabled device
Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Auto Channel Selection:
Select either 2.4 GHz or 5 GHz from the drop-down
menu.
Select Access Point from the drop-down menu.
Service Set Identier (SSID) is the name designated
for a specic wireless local area network (WLAN).
The SSID’s factory default setting is dlink. The SSID
can be easily changed to connect to an existing
wireless network or to establish a new wireless
network. The SSID can be up to 32 characters and
is case-sensitive.
Select Enable to broadcast the SSID across the
network, thus making it visible to all network users.
Select Disable to hide the SSID from the network.
This feature when enabled automatically selects
the channel that provides the best wireless
performance. The channel selection process only
occurs when the AP is booting up. To manually
select a channel, set this option to Disable and
select a channel from the drop-down menu.
Access Point Mode

13D-Link DAP-2695 User Manual
Web User Interface
Channel:
Channel Width:
Authentication:
To change the channel, rst toggle the Auto Channel Selection setting to Disable, and then use the drop-down menu to make
the desired selection.
Note: The wireless adapters will automatically scan and match the wireless settings.
Allows you to select the channel width you would like to operate in. Select 20 MHz if you are not using any 802.11n wireless
clients. Auto 20/40 MHz allows you to connect to both 802.11n and 802.11b/g or 802.11a wireless devices on your network.
Use the drop-down menu to choose Open System, Shared Key, WPA-Personal, WPA-Enterprise, or 802.1x.
• Select Open System to communicate the key across the network (WEP).
• Select Shared Key to limit communication to only those devices that share the same WEP settings. If multi-SSID is
enabled, this option is not available.
• Select WPA-Personal to secure your network using a password and dynamic key. No RADIUS server is required.
• Select WPA-Enterprise to secure your network with the inclusion of a RADIUS server.
• Select 802.1X if your network is using port-based Network Access Control.

14D-Link DAP-2695 User Manual
Web User Interface
Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Auto Channel Selection:
Channel:
Channel Width:
Select either 2.4GHz or 5GHz from the drop-down
menu.
WDS with AP mode is selected from the drop-down
menu.
Service Set Identier (SSID) is the name designated
for a specic wireless local area network (WLAN).
The SSID’s factory default setting is dlink. The SSID
can be easily changed to connect to an existing
wireless network or to establish a new wireless
network.
Enable or Disable SSID visibility. Enabling this
feature broadcasts the SSID across the network,
thus making it visible to all network users.
Enabling this feature automatically selects
the channel that will provide the best wireless
performance.This feature is not supported in WDS
with AP mode. The channel selection process only
occurs when the AP is booting up.
All devices on the network must share the same
channel.To change the channel, use the drop-down
menu to make the desired selection. (Note: The
wireless adapters will automatically scan and match
the wireless settings.)
Allows you to select the channel width you would
like to operate in. Select 20 MHz if you are not using
any 802.11n wireless clients. Auto 20/40 MHz allows
you to connect to both 802.11n and 802.11b/g or
802.11a wireless devices on your network.
WDS with AP Mode

15D-Link DAP-2695 User Manual
Web User Interface
AP MAC Address:
Site Survey:
Authentication:
Enter the MAC addresses of the root AP of this WDS network. If left empty, then this device is the the root AP.
Click on the Scan button to search for available wireless networks, then click on the available network that you want to
connect with.
Use the drop-down menu to choose Open System or WPA-Personal.
• Select Open System to communicate the key across the network.
• Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.

16D-Link DAP-2695 User Manual
Web User Interface
Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Auto Channel Selection:
Channel:
Channel Width:
AP MAC Address:
Select either 2.4GHz or 5GHz from the drop-down
menu.
WDS is selected from the drop-down menu.
Service Set Identier (SSID) is the name designated
for a specic wireless local area network (WLAN).The
SSID’s factory default setting is dlink. The SSID can
be easily changed to connect to an existing wireless
network or to establish a new wireless network.
Enable or Disable SSID visibility. Enabling this
feature broadcasts the SSID across the network, thus
making it visible to all network users.
Enabling this feature automatically selects
the channel that will provide the best wireless
performance. This feature is not supported in WDS
mode.
All devices on the network must share the same
channel.To change the channel, use the drop-down
menu to make the desired selection.
Use the drop-down menu to choose 20 MHz or
Auto 20/40 MHz.
Enter the MAC addresses of the root AP of thisWDS
network. If left empty, then this device is the the
root AP.
WDS Mode

17D-Link DAP-2695 User Manual
Web User Interface
Site Survey:
Authentication:
Click on the Scan button to search for available wireless networks, then click on the available network that you
want to connect with.
Use the drop-down menu to choose Open System or WPA-Personal.
• Select Open System to communicate the key across the network.
• Select WPA-Personal to secure your network using a password and dynamic key. No RADIUS server is required.

18D-Link DAP-2695 User Manual
Web User Interface
Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Auto Channel Selection:
Channel:
Channel Width:
Site Survey:
Authentication:
Select either 2.4 GHz or 5 GHz from the drop-down
menu.
Wireless Client is selected from the drop-down menu.
Service Set Identier (SSID) is the name designated
for a specic wireless local area network (WLAN).The
SSID’s factory default setting is dlink. The SSID can
be easily changed to connect to an existing wireless
network.
This option is unavailable in Wireless Client mode.
Enablingthisfeature automatically selectsthechannel
that will provide the best wireless performance. This
feature is not supported in Wireless Client mode.
The channel used will be displayed, and matches the
AP that the DAP-2695 is connected to when set to
Wireless Client mode.
Use the drop-down menu to choose 20 MHz or Auto
20/40 MHz.
Click on the Scan button to search for available
wireless networks, then click on the available network
that you want to connect with.
Will be explained in the next topic.
Wireless Client Mode

19D-Link DAP-2695 User Manual
Web User Interface
Wireless security is a key concern for any wireless network installed. Unlike any other networking method wireless networks will broadcast it’s presence for
anyone to connect to it. Today, wireless security has advanced to a level where it is virtually impenetrable.
There are mainly two forms of wireless encryption and they are called Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA). WEP was the rst
security method developed. It is a low level encryption but better than no encryption. WPA is the newest encryption standard and with the advanced WPA2
standard wireless networks have nally reach a point where the security is strong enough to give users the peace of mind when installing wireless networks.
Wireless Security
Wired Equivalent Privacy (WEP)
WEP provides two variations called Open System and Shared Key.
Open System will send a request to the access point and if the key used matches the one congured on the access point, the access point will return a success
message back to the wireless client. If the key does not match the one congured on the access point, the access point will deny the connection request from
the wireless client.
Shared Key will send a request to the access point and if the key used matches the one congured on the access point, the access point will send a challenge
to the client. The client will then again send a conrmation of the same key back to the access point where the access point will either return a successful or a
denial packet back to the wireless client.
Encryption:
Key Type*:
Key Size:
Key Index (1-4):
Key:
Use the radio button to disable or enable
encryption.
Select HEX or ASCII.
Select 64 Bits or 128 Bits.
Select the 1st through the 4th key to be
the active key.
Input up to four keys for encryption. You
will select one of these keys in the Key
Index drop-down menu.
**Hexadecimal (HEX) digits consist of the numbers 0-9 and the letters A-F.
*ASCII (American Standard Code for Information Interchange) is a code that represents English letters using
numbers ranging from 0-127.

20D-Link DAP-2695 User Manual
Web User Interface
Wi-Fi Protected Access (WPA / WPA2)
WPA was created by the Wi-Fi Alliance to address the limitations and weaknesses found in WEP. This protocol is mainly based on the 802.11i
standard. There are also two variations found in WPA called WPA-Personal (PSK) and WPA-Enterprise (EAP).
WPA-EAP requires the user to install a Radius Server on the network for authentication.
WPA-Personal does not require the user to install a Radius Server on the network.
Comparing WPA-PSK with WPA-EAP, WPA-PSK is seen as a weaker authentication but comparing WPA-PSK to WEP, WPA-PSK is far more secure
than WEP. WPA-EAP is the highest level of wireless security a user can use for wireless today.
WPA2 is an upgrade of WPA. WPA2 yet again solves some possible security issues found in WPA. WPA2 has two variations called WPA2-Personal
(PSK) and WPA2-Enterprise (EAP) which is the same as found with WPA.
WPA Mode:
Cipher Type:
Group Key Update:
Pass Phrase:
When WPA-Personal is selected for Authentication
type, you must also select a WPA mode from the
drop-down menu: AUTO (WPA orWPA2),WPA2 Only,
orWPA Only.WPA andWPA2 use dierent algorithms.
AUTO (WPA or WPA2) allows you to use both WPA
and WPA2.
When you selectWPA-Personal, you must also select
AUTO, AES, or TKIP from the pull down menu.
Select the interval during which the group key will
be valid.The default value of 1800 is recommended.
When you select WPA-Personal, please enter a Pass
Phrase in the corresponding eld.