D-Link Air Premier DAP-2695 User manual

Document Created by Nick Schuster

2D-Link DAP-2695 User Manual
Table of Contents
Table of Contents
Product Overview.............................................................. 4
Introduction ................................................................................... 4
Features............................................................................................ 5
Package Contents......................................................................... 6
System Requirements................................................................. 6
Hardware Overview........................................................... 7
LEDs................................................................................................... 7
Connections ................................................................................... 7
Basic Installation ............................................................... 8
Hardware Setup ............................................................................ 8
Method 1 - PoE with PoE Switch or Router.................. 8
Method 2 - PoE without PoE Switch or Router................9
Web User Interface ..........................................................10
Wireless ..........................................................................................11
Access Point Mode .............................................................11
WDS with AP Mode............................................................13
WDS Mode ............................................................................15
Wireless Client Mode.........................................................17
Wireless Security .................................................................18
Wired Equivalent Privacy (WEP) ..............................18
Wi-Fi Protected Access (WPA / WPA2)....................19
LAN ..........................................................................................21
Advanced Settings.....................................................................22
Performance.........................................................................23
Wireless Resource Control.......................................................25
Multi-SSID..............................................................................27
VLAN........................................................................................29
VLAN List..........................................................................29
Port List.............................................................................30
Add/Edit VLAN ...............................................................31
PVID Settings..................................................................32
Intrusion.................................................................................33
Schedule ................................................................................34
Internal RADIUS Server.....................................................35
ARP Spoong Prevention ................................................36
Bandwidth Optimization .................................................37
AP Array..................................................................................39
AP Array Scan .................................................................39
Conguration Settings................................................40
Auto-RF.............................................................................44
Load Balance ..................................................................45
Captive Portal.......................................................................46
Authentication Settings-Web Redirection Only 46
Authentication Settings- Username/Password..47
Authentication Settings- Passcode ........................48
Authentication Settings- Remote RADIUS...........49
Authentication Settings- LDAP................................50
Authentication Settings- POP3................................51
Login Page Upload.......................................................52
IP Filter Settings.............................................................53
MAC Bypass.....................................................................54

3D-Link DAP-2695 User Manual
Table of Contents
DHCP Server .........................................................................55
Dynamic Pool Settings................................................55
Static Pool Setting ........................................................56
Current IP Mapping List..............................................57
Filters.......................................................................................58
Wireless MAC ACL.........................................................58
WLAN Partition ..............................................................59
Trac Control...............................................................................60
Uplink/Downlink Setting .................................................60
QoS...........................................................................................61
Trac Manager....................................................................62
Status ..............................................................................................63
Device Information ............................................................64
Client Information ..............................................................65
WDS Information Page .....................................................66
Channel Analyze .................................................................67
Stats Page......................................................................................68
Ethernet Trac Statistics..................................................68
WLAN Trac Statistics.......................................................69
Log ...................................................................................................70
View Log.................................................................................70
Log Settings..........................................................................71
Maintenance Section ................................................................72
Administration.............................................................................73
Limit Administrator............................................................73
System Name Settings......................................................74
Login Settings......................................................................74
Console Settings .................................................................74
SNMP Settings .....................................................................75
Central WiFiManager Settings........................................75
Firmware and SSL Upload................................................76
Conguration File Upload ...............................................77
Time and Date Settings ....................................................78
Conguration and System.......................................................79
System Settings...........................................................................80
Help .................................................................................................81
Knowledge Base ..............................................................82
Wireless Basics .............................................................................82
Wireless Installation Considerations....................................83
Troubleshooting ..............................................................84
Why can’t I access the web-based conguration
utility? .....................................................................................84
What can I do if I forgot my password?.......................84
How to check your IP address?......................................85
How to statically assign an IP address?.......................86
Technical Specications ..................................................87
Antenna Pattern ..............................................................88
Central WiFiManager.......................................................89

4D-Link DAP-2695 User Manual
Section 1 - Product Overview
Product Overview
Introduction
D-Link, an industry pioneer in wireless networking, introduces a solution for businesses seeking to deploy next generation 802.11ac LANs. D-Link unveils
its new DAP-2695, designed specically for business-class environments such as large or enterprise corporations to provide secure and manageable dual
band wireless LAN options for network administrators.
Versatile Access Point
The DAP-2695 Access Point allows network administrators to deploy a highly manageable and extremely robust dual band wireless network. All six
antennas are detachable and can provide optimal wireless coverage in either 2.4GHz (802.11g and 802.11n) or 5GHz (802.11ac, 802.11a, and 802.11n)
bands. Enclosed in a plenum-rated metal chassis, the DAP-2695 Access Point adheres to strict re codes for placement in air passageways. For advanced
installations, this new high-speed Access Point has integrated 802.3at Power over Ethernet (PoE) support, allowing installation of this device in areas where
power outlets are not readily available.
Enhanced Performance
The DAP-2695 delivers reliable wireless performance with maximum wireless signal rates of up to 1750Mbps.This, coupled with support forWi-Fi Multimedia™
(WMM) Quality of Service features, makes it an ideal access point for audio, video, and voice applications. Additionally, the DAP-2695 supports load balance
features to ensure maximum performance.
Security
To help maintain a secure wireless network, the DAP-2695 provides the latest in wireless security technologies by supporting both Personal and Enterprise
versions of WPA and WPA2 (802.11i) with support for RADIUS server back end. To further protect your wireless network, MAC Address Filtering, Wireless
LAN segmentation, Disable SSID Broadcast, Rogue AP Detection, and Wireless Broadcast Scheduling are also included.
The DAP-2695 includes support for up to 16 VLANs for implementing multiple SSIDs to further help segment users on the network. The DAP-2695 also
includes a wireless client isolation mechanism, which limits direct client-to-client communication.
Power Usage
This device is an Energy Related Product (ErP) with High Network Availability (HiNA), and automatically switches to a power-saving Network Standby
mode within 1 minute of no packets being transmitted. It can also be turned o through a power switch to save energy when it is not needed.
Network Standby: 4.98 watts
Switched O: 0.24 watts
* Maximum wireless signal rate derived from IEEE Standard 802.11ac, 802.11g, 802.11a, and 802.11n specications. Actual data throughput will vary. Network conditions and environmental factors, including volume of
network trac, building materials and construction, and network overhead, lower actual data throughput rate. Environmental conditions will adversely aect wireless signal range.
**Only compliant with 802.3at PoE switch and 802.3af standard can’t supply sucient power for DAP-2695

5D-Link DAP-2695 User Manual
Section 1 - Product Overview
Features
yProvide Ethernet to Wireless LAN bridge fully IEEE 802.3/u/ab compatible on the Ethernet side and fully interoperable with IEEE 802.11ac and b/g/n/a
compliant equipment
yCompatible with IEEE 802.11b high rate standard to provide wireless 11Mbps data rate
yCompatible with IEEE 802.11g higher speed standard to provide wireless 54Mbps data rate
yCompatible with IEEE 802.11a higher speed standard to provide wireless 54Mbps data rate
yCompatible with IEEE 802.11n higher speed standard to provide wireless 450Mbps data rate
yCompatible with 802.11ac higher speed standard to provide wireless 1300Mbps data rate
yOperation at 2.4~2.5GHz and 5.15~5.85GHz frequency band to meet worldwide regulations
ySupports IEEE 802.11ac and b/g/n/a wireless data encryption with 64/128-bit WEP for security
yAllows auto fallback data rate for reliability, optimized throughput and transmission range
yWeb-based conguration and management
ySupports enhanced security – WPA-PSK and WPA2-PSK, RADIUS client, and Cipher negotiation
ySupports one 802.3at PoE port
ySupports two 10/100/1000M Ethernet ports
yAP Mode, WDS Mode, WDS with AP, and Wireless Client Mode
ySupports SNMP v1,v2,v3
ySupport Trap server (SNMP v1, v2c)
ySupport AP Manager II and D-View 6.0
ySupport AP Array and AP Array Setup Tool
ySupport Port Redundancy
ySupport one RJ-45 console port for debug
* Maximum wireless signal rate derived from IEEE Standard 802.11ac, 802.11g, 802.11a, and 802.11n specications. Actual data throughput will vary. Network conditions and environmental factors, including volume of
network trac, building materials and construction, and network overhead, lower actual data throughput rate. Environmental conditions will adversely aect wireless signal range.
**Please note that operating frequency ranges vary depending on the regulations of individual countries and jurisdictions. The DAP-2695 isn’t supported in the 5.25~5.35GHz and 5.47 ~ 5.725GHz frequency ranges in
some regions.
***Only compliant with 802.3at PoE switch and 802.3af standard can’t supply sucient power for DAP-2695

6D-Link DAP-2695 User Manual
Section 1 - Product Overview
Package Contents
• DAP-2695 802.11n Power over Ethernet (PoE) Access Point
• Six Detachable Antennas
• Mounting Plate and Hardware
• Ethernet Cable
• Console Cable
• CD (with software and user manual)
Note: No PSU supplied. To power the units use an D-Link PoE switch or the D-Link DPE-101GI PoE injector.
System Requirements
yComputers with Windows®, Macintosh®, or Linux-based operating systems with an installed Ethernet Adapter
yInternet Explorer Version 7.0 or Firefox 3.0 and Above (for conguration)

7D-Link DAP-2695 User Manual
Section 1 - Product Overview
Hardware Overview
LEDs Connections
1 2 3 4 5
1Reset Button Press and hold for six seconds to reset the access point
to the factory default settings.
2Console Port Connect the supplied console cable to congure
using a command line interface.
3LAN2 Port Connect to your network with an Ethernet cable.
4LAN1 (PoE) Port Connect to a Power over Ethernet (PoE) switch or
router.
5Power Receptor Connect the supplied power adapter.
(*Note no longer used, replaced by PoE)
15GHz When lit, the access point is operating at 5GHz. This light
will blink when there is wireless trac.
22.4GHz When lit, the access point is operating at 2.4GHz. This
light will blink when there is wireless trac.
3LAN1 (PoE)
Solid light when the Ethernet port is connected to a
power over Ethernet (PoE) port, such as a router or
switch. The light will blink when there is trac through
LAN port.
4LAN2
Solid light when the Ethernet port is connected to a
working port, such as a router or switch. The light will
blink when there is trac through LAN port.
5Power The light will blink during boot up. Once solid, the access
point is ready.
1 2 3 4 5

8D-Link DAP-2695 User Manual
Section 2 - Installation
Basic Installation
Hardware Setup
To power the access point, you can use one of the following 2 methods:
Method 1 - Use if you have a PoE switch or router.
Method 2 - Use if you do not have a PoE switch or router and do not have a power outlet near the location of the access point.
DAP-2695
PoE Switch or Router
Method 1 - PoE with PoE Switch or Router
1. Connect one end of your Ethernet cable to the LAN1 (PoE) port on the access point.
2. Connect the other end into one port on a PoE switch or router.

9D-Link DAP-2695 User Manual
Section 2 - Installation
Method 2 - PoE without PoE Switch or Router
1. Connect one end of an Ethernet cable into the Data In port on the PoE base unit and the other end into one port on your switch, router, or computer.
2. Connect one end of an Ethernet cable into the P+Data Out port on the PoE base unit and the other end into the LAN1 (PoE) port on the Access Point.
3. Use the supplied power adapter. Connect the power adapter to the Power In receptor on the PoE adapter.
4. Connect the power cable to the power adapter and then connect the other end into a power outlet.
5. Purchase separately a DPE-101GI PoE injector if you need to connect the Access Point without a PoE Switch.

10D-Link DAP-2695 User Manual
Section 3 - Conguration
Web User Interface
The DAP-2695 supports an elaborate web user interface where the user can congure and monitor the device. Most of the congurable settings
are located in the left menu of the web GUI which contains section called Basic Settings,Advanced Settings and Status.

11D-Link DAP-2695 User Manual
Section 3 - Conguration
Wireless
On the wireless settings page, you can setup the basic wireless conguration for the access point. The user can choose from 4 dierent wireless
modes:
Access Point - Used to create a wireless LAN
WDS with AP - Used to connect multiple wireless networks while still functioning as a wireless access point
WDS - Used to connect multiple wireless networks
Wireless Client - Used when the access point needs to act as a wireless network adapter for an Ethernet enabled device
Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Auto Channel Selection:
Select either 2.4 GHz or 5 GHz from the drop-down
menu.
Select Access Point from the drop-down menu.
Service Set Identier (SSID) is the name designated
for a specic wireless local area network (WLAN).
The SSID’s factory default setting is dlink. The SSID
can be easily changed to connect to an existing
wireless network or to establish a new wireless
network. The SSID can be up to 32 characters and
is case-sensitive.
Select Enable to broadcast the SSID across the
network, thus making it visible to all network users.
Select Disable to hide the SSID from the network.
This feature when enabled automatically selects
the channel that provides the best wireless
performance. The channel selection process only
occurs when the AP is booting up. To manually
select a channel, set this option to Disable and
select a channel from the drop-down menu.
Access Point Mode

12D-Link DAP-2695 User Manual
Section 3 - Conguration
Channel:
Channel Width:
Authentication:
To change the channel, rst toggle the Auto Channel Selection setting to Disable, and then use the drop-down menu to make
the desired selection.
Note: The wireless adapters will automatically scan and match the wireless settings.
Allows you to select the channel width you would like to operate in. Select 20 MHz if you are not using any 802.11n wireless
clients. Auto 20/40 MHz allows you to connect to both 802.11n and 802.11b/g or 802.11a wireless devices on your network.
Use the drop-down menu to choose Open System, Shared Key, WPA-Personal, WPA-Enterprise, or 802.1x.
• Select Open System to communicate the key across the network (WEP).
• Select Shared Key to limit communication to only those devices that share the same WEP settings. If multi-SSID is
enabled, this option is not available.
• Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.
• Select WPA-Enterprise to secure your network with the inclusion of a RADIUS server.
• Select 802.1X if your network is using port-based Network Access Control.

13D-Link DAP-2695 User Manual
Section 3 - Conguration
Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Auto Channel Selection:
Channel:
Channel Width:
Select either 2.4GHz or 5GHz from the drop-down
menu.
WDS with AP mode is selected from the drop-down
menu.
Service Set Identier (SSID) is the name designated
for a specic wireless local area network (WLAN).
The SSID’s factory default setting is dlink. The SSID
can be easily changed to connect to an existing
wireless network or to establish a new wireless
network.
Enable or Disable SSID visibility. Enabling this
feature broadcasts the SSID across the network,
thus making it visible to all network users.
Enabling this feature automatically selects
the channel that will provide the best wireless
performance.This feature is not supported in WDS
with AP mode. The channel selection process only
occurs when the AP is booting up.
All devices on the network must share the same
channel.To change the channel, use the drop-down
menu to make the desired selection. (Note: The
wireless adapters will automatically scan and match
the wireless settings.)
Allows you to select the channel width you would
like to operate in. Select 20 MHz if you are not using
any 802.11n wireless clients. Auto 20/40 MHz allows
you to connect to both 802.11n and 802.11b/g or
802.11a wireless devices on your network.
WDS with AP Mode

14D-Link DAP-2695 User Manual
Section 3 - Conguration
Remote AP MAC Address:
Site Survey:
Authentication:
Enter the MAC addresses of the APs on your network that will serve as bridges to wirelessly connect multiple networks.
Click on the Scan button to search for available wireless networks, then click on the available network that you want to
connect with.
Use the drop-down menu to choose Open System, Shared Key, or WPA-Personal.
• Select Open System to communicate the key across the network.
• Select Shared Key to limit communication to only those devices that share the sameWEP settings. If multi-SSID is enabled,
this option is not available.
• Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.

15D-Link DAP-2695 User Manual
Section 3 - Conguration
Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Auto Channel Selection:
Channel:
Channel Width:
Remote AP MAC Address:
Select either 2.4GHz or 5GHz from the drop-down
menu.
WDS is selected from the drop-down menu.
Service Set Identier (SSID) is the name designated
for a specic wireless local area network (WLAN).The
SSID’s factory default setting is dlink. The SSID can
be easily changed to connect to an existing wireless
network or to establish a new wireless network.
Enable or Disable SSID visibility. Enabling this
feature broadcasts the SSID across the network, thus
making it visible to all network users.
Enabling this feature automatically selects
the channel that will provide the best wireless
performance. This feature is not supported in WDS
mode.
All devices on the network must share the same
channel.To change the channel, use the drop-down
menu to make the desired selection.
Use the drop-down menu to choose 20 MHz or
Auto 20/40 MHz.
Enter the MAC addresses of the APs on your network
that will serve as bridges to wirelessly connect
multiple networks.
WDS Mode

16D-Link DAP-2695 User Manual
Section 3 - Conguration
Site Survey:
Authentication:
Click on the Scan button to search for available wireless networks, then click on the available network that you
want to connect with.
Use the drop-down menu to choose Open System, Shared Key, or WPA-Personal.
• Select Open System to communicate the key across the network.
• Select Shared Key to limit communication to only those devices that share the same WEP settings.
• Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is
required.

17D-Link DAP-2695 User Manual
Section 3 - Conguration
Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Auto Channel Selection:
Channel:
Channel Width:
Site Survey:
Authentication:
Select either 2.4 GHz or 5 GHz from the drop-down
menu.
Wireless Client is selected from the drop-down menu.
Service Set Identier (SSID) is the name designated
for a specic wireless local area network (WLAN).The
SSID’s factory default setting is dlink. The SSID can
be easily changed to connect to an existing wireless
network.
This option is unavailable in Wireless Client mode.
Enablingthis featureautomaticallyselectsthechannel
that will provide the best wireless performance. This
feature is not supported in Wireless Client mode.
The channel used will be displayed, and matches the
AP that the DAP-2695 is connected to when set to
Wireless Client mode.
Use the drop-down menu to choose 20 MHz or Auto
20/40 MHz.
Click on the Scan button to search for available
wireless networks, then click on the available network
that you want to connect with.
Will be explained in the next topic.
Wireless Client Mode

18D-Link DAP-2695 User Manual
Section 3 - Conguration
Wireless security is a key concern for any wireless network installed. Unlike any other networking method wireless networks will broadcast it’s presence for
anyone to connect to it. Today, wireless security has advanced to a level where it is virtually impenetrable.
There are mainly two forms of wireless encryption and they are called Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA). WEP was the rst
security method developed. It is a low level encryption but better than now encryption. WPA is the newest encryption standard and with the advancedWPA2
standard wireless networks have nally reach a point where the security is strong enough to give users the peace of mind when installing wireless networks.
Wireless Security
Wired Equivalent Privacy (WEP)
WEP provides two variations called Open System and Shared Key.
Open System will send a request to the access point and if the key used matches the one congured on the access point, the access point will return a success
message back to the wireless client. If the key does not match the one congured on the access point, the access point will deny the connection request from
the wireless client.
Shared Key will send a request to the access point and if the key used matches the one congured on the access point, the access point will send a challenge
to the client. The client will then again send a conrmation of the same key back to the access point where the access point will either return a successful or a
denial packet back to the wireless client.
Encryption:
Key Type*:
Key Size:
Key Index (1-4):
Key:
Use the radio button to disable or enable
encryption.
Select HEX or ASCII.
Select 64 Bits or 128 Bits.
Select the 1st through the 4th key to be
the active key.
Input up to four keys for encryption. You
will select one of these keys in the Key
Index drop-down menu.
**Hexadecimal (HEX) digits consist of the numbers 0-9 and the letters A-F.
*ASCII (American Standard Code for Information Interchange) is a code that represents English letters using
numbers ranging from 0-127.

19D-Link DAP-2695 User Manual
Section 3 - Conguration
Wi-Fi Protected Access (WPA / WPA2)
WPA was created by the Wi-Fi Alliance to address the limitations and weaknesses found in WEP. This protocol is mainly based on the 802.11i
standard. There are also two variations found in WPA called WPA-Personal (PSK) and WPA-Enterprise (EAP).
WPA-EAP requires the user to install a Radius Server on the network for authentication.
WPA-Personal does not require the user to install a Radius Server on the network.
Comparing WPA-PSK with WPA-EAP, WPA-PSK is seen as a weaker authentication but comparing WPA-PSK to WEP, WPA-PSK is far more secure
than WEP. WPA-EAP is the highest level of wireless security a user can use for wireless today.
WPA2 is an upgrade of WPA. WPA2 yet again solves some possible security issues found in WPA. WPA2 has two variations called WPA2-Personal
(PSK) and WPA2-Enterprise (EAP) which is the same as found with WPA.
WPA Mode:
Cipher Type:
Group Key Update:
Pass Phrase:
When WPA-Personal is selected for Authentication
type, you must also select a WPA mode from the
drop-down menu: AUTO (WPA orWPA2), WPA2 Only,
orWPA Only.WPA and WPA2 use dierent algorithms.
AUTO (WPA or WPA2) allows you to use both WPA
and WPA2.
When you selectWPA-Personal, you must also select
AUTO, AES, or TKIP from the pull down menu.
Select the interval during which the group key will
be valid.The default value of 1800 is recommended.
When you select WPA-Personal, please enter a Pass
Phrase in the corresponding eld.

20D-Link DAP-2695 User Manual
Section 3 - Conguration
WPA Mode:
Cipher Type:
Group Key Update Interval:
Network Access Protection:
RADIUS Server:
RADIUS Port:
RADIUS Secret:
When WPA-Enterprise is selected, you must
also select a WPA mode from the drop-down
menu: AUTO (WPA or WPA2), WPA2 Only,
or WPA Only. WPA and WPA2 use dierent
algorithms. AUTO (WPA orWPA2) allows you
to use both WPA and WPA2.
When WPA-Enterprise is selected, you must
also select a cipher type from the drop-down
menu: Auto, AES, or TKIP.
Select the interval during which the group
key will be valid. 1800 is the recommended
value as a lower interval may reduce data
transfer rates.
Enable or disable Microsoft Network Access
Protection.
Enter the IP address of the RADIUS server.
Enter the RADIUS port.
Enter the RADIUS secret.