D-Link DAP-2660 User manual

DAP-2660
Version 1.00
WirelessAC1200
Concurrent Dual Band PoEAccess Point
AirPremier

D-Link DAP-2660 User Manual
2
Table of Contents
Product Overview......................................................................5
Introduction ................................................................................... 5
Features............................................................................................6
Package Contents.........................................................................7
System Requirements................................................................. 7
Hardware Overview ..................................................................8
LEDs...................................................................................................8
Connections ...................................................................................8
Basic Installation........................................................................9
Hardware Setup ............................................................................ 9
Method 1 - PoE with PoE Switch or Router..................9
Method 2 - PoE without PoE Switch or Router.............10
Method 3 - No PoE..............................................................11
Web User Interface................................................................. 12
Basic Settings...............................................................................13
Wireless ..................................................................................13
Access Point Mode (2.4GHz) - Open System.......13
Access Point Mode (2.4GHz) - Shared Key ...........16
Access Point Mode (2.4GHz) - WPA Personal ......17
Access Point Mode (2.4GHz) - WPA Enterprise ...18
Access Point Mode (2.4GHz) - 802.1X....................20
Access Point Mode (5GHz).........................................22
WDS with AP Mode (2.4GHz)....................................24
WDS with AP Mode (5GHz) .......................................26
WDS Mode (2.4GHz) ....................................................28
WDS Mode (5GHz)........................................................30
Wireless Client Mode (2.4GHz).................................32
Wireless Client Mode (5GHz) ....................................34
LAN ..........................................................................................36
IPv6 ..........................................................................................37
Advanced Settings.....................................................................38
Performance (2.4GHz).......................................................39
Performance (5GHz) ..........................................................41
Wireless Resource (2.4GHz).............................................43
Wireless Resource (5GHz) ................................................45
Multi-SSID (2.4GHz)............................................................47
Multi-SSID (5GHz) ...............................................................49
VLAN........................................................................................51
VLAN List..........................................................................51
Port List.............................................................................52
Add/Edit VLAN ...............................................................53
PVID Settings..................................................................54
Intrusion.................................................................................55
Schedule ................................................................................56
Internal RADIUS Server.....................................................57
ARP Spoong Prevention ................................................58
Airtime Fairness...................................................................59
AP Array..................................................................................60
AP Array Scan.................................................................60
Conguration Settings................................................61
Auto-RF.............................................................................65
Load Balance ..................................................................66
Captive Portal.......................................................................67
Authentication Settings - Ticket..............................67

D-Link DAP-2660 User Manual
3
Authentication Settings - User/Password............68
Authentication Settings - Remote RADIUS..........69
Authentication Settings - LDAP...............................70
Authentication Settings - POP3...............................71
Login Page Upload.......................................................72
Web Redirection............................................................73
DHCP Server .........................................................................74
Dynamic Pool Settings................................................74
Static Pool Setting ........................................................75
Current IP Mapping List..............................................76
Filters.......................................................................................77
Wireless MAC ACL.........................................................77
WLAN Partition ..............................................................78
Trac Control.......................................................................79
Uplink/Downlink Settings .........................................79
QoS.....................................................................................80
Trac Manager..............................................................82
Status ..............................................................................................83
Device Information ............................................................84
Client Information ..............................................................85
WDS Information Page .....................................................86
Channel Analyze .................................................................87
Stats Page......................................................................................88
Ethernet Trac Statistics..................................................88
WLAN Trac Statistics.......................................................89
Log ...................................................................................................90
View Log.................................................................................90
Log Settings..........................................................................91
Maintenance Section ................................................................92
Administration.............................................................................93
Limit Administrator............................................................93
System Name Settings......................................................94
Login Settings......................................................................94
Console Settings .................................................................94
SNMP Settings .....................................................................95
Firmware and SSL Upload................................................96
Conguration File Upload ...............................................97
Time and Date Settings ....................................................98
Conguration and System.......................................................99
System Settings........................................................................ 100
Help .............................................................................................. 101
Knowledge Base ................................................................... 102
Wireless Basics.......................................................................... 102
Wireless Installation Considerations................................. 103
Troubleshooting ................................................................... 104
Why can’t I access the web-based conguration
utility? .................................................................................. 104
What can I do if I forgot my password?.................... 104
How to check your IP address?................................... 105
How to statically assign an IP address?.................... 106
Technical Specications ...................................................... 107

D-Link DAP-2660 User Manual
4
Product Overview
Introduction
D-Link, an industry pioneer in wireless networking, introduces a solution for businesses seeking to deploy next generation draft 802.11ac LANs. D-Link
unveils its new DAP-2660, designed specically for business-class environments such as large or enterprise corporations to provide secure and manageable
dual band wireless LAN options for network administrators.
Versatile Access Point
The DAP-2660 Access Point allows network administrators to deploy a highly manageable and extremely robust dual band wireless network. All six
antennas are detachable and can provide optimal wireless coverage in either 2.4GHz (802.11g and 802.11n) or 5GHz (802.11ac, 802.11a, and 802.11n)
bands. Enclosed in a plenum-rated metal chassis, the DAP-2660 Access Point adheres to strict re codes for placement in air passageways. For advanced
installations, this new high-speed Access Point has integrated 802.3af Power over Ethernet (PoE) support, allowing installation of this device in areas where
power outlets are not readily available.
Enhanced Performance
The DAP-2660 delivers reliable wireless performance with maximum wireless signal rates of up to 1750Mbps.This, coupled with support forWi-Fi Multimedia™
(WMM) Quality of Service features, makes it an ideal access point for audio, video, and voice applications. Additionally, the DAP-2660 supports load balance
features to ensure maximum performance.
Security
To help maintain a secure wireless network, the DAP-2660 provides the latest in wireless security technologies by supporting both Personal and Enterprise
versions of WPA and WPA2 (802.11i) with support for RADIUS server back end. To further protect your wireless network, MAC Address Filtering, Wireless
LAN segmentation, Disable SSID Broadcast, Rogue AP Detection, and Wireless Broadcast Scheduling are also included.
The DAP-2660 includes support for up to 16 VLANs for implementing multiple SSIDs to further help segment users on the network. The DAP-2660 also
includes a wireless client isolation mechanism, which limits direct client-to-client communication.
* Maximum wireless signal rate derived from IEEE Standard 802.11ac (draft), 802.11g, 802.11a, and 802.11n specications. Actual data throughput will vary. Network conditions and environmental factors, including
volume of network trac, building materials and construction, and network overhead, lower actual data throughput rate. Environmental conditions will adversely aect wireless signal range.

D-Link DAP-2660 User Manual
5
Features
yProvide Ethernet to Wireless LAN bridge fully IEEE 802.3/u/ab compatible on the Ethernet side and fully interoperable with IEEE 802.11ac and b/g/n/a
compliant equipment
yCompatible with IEEE 802.11b high rate standard to provide wireless 11Mbps data rate
yCompatible with IEEE 802.11g higher speed standard to provide wireless 54Mbps data rate
yCompatible with IEEE 802.11a higher speed standard to provide wireless 54Mbps data rate
yCompatible with IEEE 802.11n higher speed standard to provide wireless 450Mbps data rate
yCompatible with draft 802.11ac higher speed standard to provide wireless 1300Mbps data rate
yOperation at 2.4~2.5GHz and 5.15~5.85GHz frequency band to meet worldwide regulations
ySupports IEEE 802.11ac and b/g/n/a wireless data encryption with 64/128-bit WEP for security
yAllows auto fallback data rate for reliability, optimized throughput and transmission range
yWeb-based conguration and management
ySupports enhanced security – WPA-PSK and WPA2-PSK, RADIUS client, and Cipher negotiation
ySupports one 802.3af PoE port
ySupports two 10/100/1000M Ethernet ports
yAP Mode, WDS Mode, WDS with AP, and Wireless Client Mode
ySupports SNMP v1,v2,v3
ySupport Trap server (SNMP v1, v2c)
ySupport AP Manager II and D-View 6.0
ySupport AP Array and AP Array Setup Tool
ySupport Port Redundancy
ySupport one RJ-45 console port for debug
* Maximum wireless signal rate derived from IEEE Standard 802.11ac (draft), 802.11g, 802.11a, and 802.11n specications. Actual data throughput will vary. Network conditions and environmental factors, including
volume of network trac, building materials and construction, and network overhead, lower actual data throughput rate. Environmental conditions will adversely aect wireless signal range.
**Please note that operating frequency ranges vary depending on the regulations of individual countries and jurisdictions. The DAP-2660 isn’t supported in the 5.25~5.35GHz and 5.47 ~ 5.725GHz frequency ranges in
some regions.

D-Link DAP-2660 User Manual
6
Package Contents
• DAP-2660 Access Point
• Six Detachable Antennas
• Power Adapter
• PoE Base Unit
• Mounting Plate and Hardware
• Ethernet Cable
• Console Cable
• CD (with software and user manual)
Note: Using a power supply with a dierent voltage rating than the one included with the DAP-2660 will cause damage and void the warranty for this product.
System Requirements
yComputers with Windows®, Macintosh®, or Linux-based operating systems with an installed Ethernet Adapter
yInternet Explorer Version 7.0 or Firefox 3.0 and Above (for conguration)

D-Link DAP-2660 User Manual
7
Hardware Overview
LEDs Connections
1
2
3
1Reset Button Press and hold for six seconds to reset the access point
to the factory default settings.
2LAN (PoE) Port Connect to your network with an Ethernet cable.
3Power Receptor Connect the supplied power adapter.
1Power
The light blinks in red during boot up or malfunction,
and lights in solid red when the bootup is failed.The LED
lights in solid green when it is ready, and blinks in green
when the trace is passing through.
1

D-Link DAP-2660 User Manual
8
Basic Installation
Hardware Setup
To power the access point, you can use one of the following 3 methods:
Method 1 - Use if you have a PoE switch or router.
Method 2 - Use if you do not have a PoE switch or router and do not have a power outlet near the location of the access point.
Method 3 - Use if you do not have a PoE switch or router and have a power outlet near the location of the access point.
DAP-2660
PoE Switch or Router
Method 1 - PoE with PoE Switch or Router
1. Connect one end of your Ethernet cable to the LAN1 (PoE) port on the access point.
2. Connect the other end into one port on a PoE switch or router.

D-Link DAP-2660 User Manual
9
Method 2 - PoE without PoE Switch or Router
1. Connect one end of an Ethernet cable into the Data In port on the PoE base unit and the other end into one port on your switch, router, or computer.
2. Connect one end of an Ethernet cable into the P+Data Out port on the PoE base unit and the other end into the LAN1 (PoE) port on the Access Point.
3. Use the supplied power adapter. Connect the power adapter to the Power In receptor on the PoE adapter.
4. Connect the power cable to the power adapter and then connect the other end into a power outlet.
DAP-2660

D-Link DAP-2660 User Manual
10
Method 3 - No PoE
1. Connect one end of your Ethernet cable into the LAN1 (PoE) or LAN2 port and then connect the other end to a switch, router, or computer.
2. Use the supplied power adapter. Connect the power adapter to the Power receptor on the Access Point.
3. Connect the power cable to the power adapter and then connect the other end into a power outlet.
DAP-2660
Switch or Router
PC
Power Adapter

D-Link DAP-2660 User Manual
11
Web User Interface
The DAP-2660 supports an elaborate web user interface where the user can congure and monitor the device. Most of the congurable settings
are located in the left menu of the web GUI which contains section called Basic Settings,Advanced Settings and Status.

D-Link DAP-2660 User Manual
12
Wireless
On the wireless settings page, you can setup the basic wireless conguration for the access point. The user can choose from 4 dierent wireless
modes:
Access Point - Used to create a wireless LAN
WDS with AP - Used to connect multiple wireless networks while still functioning as a wireless access point
WDS - Used to connect multiple wireless networks
Wireless Client - Used when the access point needs to act as a wireless network adapter for an Ethernet enabled device
Basic Settings
Access Point Mode (2.4GHz) - Open System
Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Select the wireless band used here. Options
to choose from are 2.4 GHz and 5 GHz. In this
section we’ll explain the 2.4GHz wireless band.
Select wireless mode used here. Options to
choose from are Access Point, WDS with AP,
WDS, and Wireless Client. In this section we’ll
explain the Access Point wireless mode.
Enter the Service Set IDentier (SSID) used here.
This name is designated for a specic Wireless
Local Area Network (WLAN). By default, the SSID is
dlink.The SSID can be easily changed to connect
to an existing wireless network or to establish a
new wireless network. The SSID can be up to 32
characters and is case-sensitive.
Select Enable to broadcast the SSID across the
network, thus making it visible to all network
users. Select Disable to hide the SSID from the
network.

D-Link DAP-2660 User Manual
13
Select to Enable or Disable the auto-channel selection feature here.When enabled, the access point automatically selects the
channel that provides the best wireless performance.The channel selection process only occurs when the AP is booting up.To
manually select a channel, set this option to Disable and select a channel from the drop-down menu.
To change the channel, rst toggle the Auto Channel Selection setting to Disable, and then use the drop-down menu to make
the desired selection.
Note: The wireless adapters will automatically scan and match the wireless settings.
Select the wireless channel width option here. Select 20 MHz if you are not using any 802.11n wireless clients. Auto 20/40
MHz allows you to connect to both 802.11n and 802.11b/g or 802.11a wireless devices on your network.
Select to Enable or Disable the captive prole feature here.
Auto Channel
Selection:
Channel:
Channel Width:
Captive Prole:

D-Link DAP-2660 User Manual
14
Select to Enable or Disable wireless
encryption here.
When the encryption option is enabled,
select the key type here. Options to choose
from are HEX and ASCII.
When the encryption option is enabled,
select the key size here. Options to choose
from are 64 Bits and 128 Bits.
Select the key index value used here. The keys 1 to 4 can be selected.
Enter the wireless WEP key in the space provided here. When HEX was selected as the key type, the network key must
consist out of the numbers 0 to 9 and the letters A to F. When ASCII was selected as the key type, the network key can
consist out of any ASCII characters.
Re-enter the wireless WEP key in the space provided. This key must be identical to the network key entered previously.
Authentication:
Encryption:
Key Type:
Key Size:
Key Index (1~4):
Network Key:
Conrm Key:
Select the wireless authentication method to use here. Options to choose from are Open System, Shared Key, WPA-Personal,
WPA-Enterprise, and 802.1X. After selecting the Open System option, the following parameters will be available for
conguration. Open System to communicate the key across the network (WEP).
Wireless security is a key concern for any wireless network installed. Unlike any other networking method wireless networks will broadcast it’s presence for
anyone to connect to it. Today, wireless security has advanced to a level where it is virtually impenetrable.
There are mainly two forms of wireless encryption and they are called Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA). WEP was the rst
security method developed. It is a low level encryption but better than now encryption.WPA is the newest encryption standard and with the advancedWPA2
standard wireless networks have nally reach a point where the security is strong enough to give users the peace of mind when installing wireless networks.
WEP provides two variations called Open System and Shared Key.
Open System will send a request to the access point and if the key used matches the one congured on the access point, the access point will return a success
message back to the wireless client. If the key does not match the one congured on the access point, the access point will deny the connection request from
the wireless client.

D-Link DAP-2660 User Manual
15
Authentication:
Encryption:
Key Type:
Key Size:
Key Index (1~4):
Network Key:
Conrm Key:
Select the wireless authentication method to use here. Options to choose from are Open System, Shared Key, WPA-Personal,
WPA-Enterprise,and 802.1X. Afterselectingthe Shared Key option, thefollowingparameterswillbe availableforconguration.
Shared Key will limit communication to only those devices that share the same WEP settings. If multi-SSID is enabled, this
option is not available.
Select to Enable or Disable wireless
encryption here.
When the encryption option is enabled,
select the key type here. Options to choose
from are HEX and ASCII.
When the encryption option is enabled,
select the key size here. Options to choose
from are 64 Bits and 128 Bits.
Select the key index value used here. The keys 1 to 4 can be selected.
Enter the wireless WEP key in the space provided here. When HEX was selected as the key type, the network key must
consist out of the numbers 0 to 9 and the letters A to F. When ASCII was selected as the key type, the network key can
consist out of any ASCII characters.
Re-enter the wireless WEP key in the space provided. This key must be identical to the network key entered previously.
Shared Key will send a request to the access point and if the key used matches the one congured on the access point, the access point will send a challenge
to the client.The client will then again send a conrmation of the same key back to the access point where the access point will either return a successful or a
denial packet back to the wireless client.
Access Point Mode (2.4GHz) - Shared Key

D-Link DAP-2660 User Manual
16
Authentication:
WPA Mode:
Cipher Type:
Group Key Update
Interval:
Manual:
Periodical Key Change:
Activated From:
Time Interval:
PassPhrase:
Conrm PassPhrase:
Select the wireless authentication method to use here. Options to choose from are Open System, Shared Key, WPA-Personal,
WPA-Enterprise, and 802.1X. After selecting the WPA-Personal option, the following parameters will be available for
conguration.WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.
Select the WPA mode here. Options to choose
from are AUTO (WPA or WPA2), WPA2 Only,
and WPA Only. WPA and WPA2 use different
algorithms. AUTO (WPA or WPA2) allows you to
use both WPA and WPA2.
Select the WPA cipher type here. Options to
choose from are AUTO, AES, and TKIP..
Enter the interval during which the group key will
be valid. By default, this value is 3600 seconds.
Information Needed.
Information Needed.
Information Needed.
Information Needed.
Enter the WPA passphrase that will be used here. This passphrase can be in the ASCII or HEX form.
Re-enter the WPA passphrase that will be used here. This must be identical to the passphrase enter above.
WPA-Personal (PSK) does not require the user to install a RADIUS server on the network. Wi-Fi Protected Access (WPA) was created by the Wi-
Fi Alliance to address the limitations and weaknesses found in WEP. This protocol is mainly based on the 802.11i standard. There are also two
variations found in WPA called WPA-Personal (PSK) and WPA-Enterprise (EAP).
Access Point Mode (2.4GHz) - WPA Personal

D-Link DAP-2660 User Manual
17
Authentication:
WPA Mode:
Cipher Type:
Group Key Update
Interval:
Network Access
Protection:
RADIUS Server Mode:
Primary RADIUS
Server:
Primary RADIUS Port:
Primary RADIUS
Secret:
Select the wireless authentication method to use here. Options to choose from are Open System, Shared Key, WPA-Personal,
WPA-Enterprise, and 802.1X. After selecting the WPA-Enterprise option, the following parameters will be available for
conguration.
Select the WPA mode here. Options to choose
from are AUTO (WPA or WPA2), WPA2 Only,
and WPA Only. WPA and WPA2 use different
algorithms. AUTO (WPA or WPA2) allows you to
use both WPA and WPA2.
Select the WPA cipher type here. Options to
choose from are AUTO, AES, and TKIP..
Enter the interval during which the group key will
be valid. By default, this value is 3600 seconds.
Select to Enable or Disable the network access
protection feature here.
Select the RADIUS server mode here. Options to
choose from are External and Internal.
Enter the primary RADIUS server’s IP address or
domain name here.
Enter the primary RADIUS server’s port number
here.
Enter the primary RADIUS server’s secrect
passphrase here. This secrect is in the ASCII form.
WPA-Enterprise (EAP) requires the user to install a RADIUS server on the network for authentication. Comparing WPA-PSK with WPA-EAP, WPA-
PSK is seen as a weaker authentication but comparing WPA-PSK to WEP, WPA-PSK is far more secure than WEP. WPA-EAP is the highest level of
wireless security a user can use for wireless today. WPA2 is an upgrade of WPA. WPA2 yet again solves some possible security issues found in WPA.
WPA2 has two variations called WPA2-Personal (PSK) and WPA2-Enterprise (EAP) which is the same as found with WPA.
Access Point Mode (2.4GHz) - WPA Enterprise

D-Link DAP-2660 User Manual
18
Backup RADIUS Server:
Backup RADIUS Port:
Backup RADIUS Secret:
Accounting Mode:
Primary Accounting
Server:
Primary Accounting
Port:
Primary Accounting
Secret:
Backup Accounting
Server:
Backup Accounting
Port:
Backup Accounting
Secret:
Enter the backup RADIUS server’s IP address or domain name here.
Enter the backup RADIUS server’s port number here.
Enter the backup RADIUS server’s secrect passphrase here. This secrect is in the ASCII form.
Select to Enable or Disable the RADIUS accounting mode here.
Enter the primary accounting server’s IP address or domain name here.
Enter the primary accounting server’s port number here.
Enter the primary accounting server’s secrect passphrase here. This secrect is in the ASCII form.
Enter the backup accounting server’s IP address or domain name here.
Enter the backup accounting server’s port number here.
Enter the backup accounting server’s secrect passphrase here. This secrect is in the ASCII form.

D-Link DAP-2660 User Manual
19
Authentication:
Key Update Interval:
RADIUS Server:
Primary RADIUS
Server:
Primary RADIUS Port:
Primary RADIUS
Secret:
Backup RADIUS Server:
Backup RADIUS Port:
Backup RADIUS Secret:
Accounting Mode:
Primary Accounting
Server:
Select the wireless authentication method to use here. Options to choose from are Open System, Shared Key, WPA-Personal,
WPA-Enterprise, and 802.1X. After selecting the 802.1X option, the following parameters will be available for conguration.
Enter the interval during which the key will be
valid. By default, this value is 300 seconds.
Select the RADIUS server mode here. Options to
choose from are External and Internal.
Enter the primary RADIUS server’s IP address or
domain name here.
Enter the primary RADIUS server’s port number
here.
Enter the primary RADIUS server’s secrect
passphrase here. This secrect is in the ASCII form.
Enter the backup RADIUS server’s IP address or
domain name here.
Enter the backup RADIUS server’s port number
here.
Enter the backup RADIUS server’s secrect
passphrase here. This secrect is in the ASCII form.
802.1X Information
???
Select to Enable or Disable the RADIUS accounting mode here.
Enter the primary accounting server’s IP address or domain name here.
Access Point Mode (2.4GHz) - 802.1X

D-Link DAP-2660 User Manual
20
Primary Accounting
Port:
Primary Accounting
Secret:
Backup Accounting
Server:
Backup Accounting
Port:
Backup Accounting
Secret:
Enter the primary accounting server’s port number here.
Enter the primary accounting server’s secrect passphrase here. This secrect is in the ASCII form.
Enter the backup accounting server’s IP address or domain name here.
Enter the backup accounting server’s port number here.
Enter the backup accounting server’s secrect passphrase here. This secrect is in the ASCII form.