D-Link nuclias connect DAP-2662 User manual

NUCLIAS CONNECT
DAP-2662 User Guide
V 1.01
2020 | Business Class Networking

2
Table of Contents
Nuclias Connect .........................................................................4
Introduction ................................................................................... 4
Nuclias Connect Key Features.................................................. 5
Package Contents......................................................................... 6
System Requirements................................................................. 6
Hardware Overview ..................................................................7
LEDs................................................................................................... 7
Connections ................................................................................... 7
Basic Installation........................................................................8
Hardware Setup ............................................................................ 8
Congure the Access Point ............................................... 8
Setup Wizard ........................................................................... 10
Web User Interface................................................................. 11
Wireless ..........................................................................................12
Access Point Mode .............................................................12
WDS with AP Mode............................................................14
WDS Mode ............................................................................16
Wireless Client Mode.........................................................18
Wireless Security.................................................................19
Wired Equivalent Privacy (WEP) ..............................19
Wi-Fi Protected Access (WPA / WPA2)....................20
LAN ..........................................................................................22
IPv6 ..........................................................................................23
Advanced Settings.....................................................................24
Performance.........................................................................25
Wireless Resource Control.......................................................27
Multi-SSID..............................................................................29
VLAN........................................................................................31
VLAN List..........................................................................31
Port List.............................................................................32
Add/Edit VLAN ...............................................................33
PVID Settings..................................................................34
Intrusion.................................................................................35
Schedule ................................................................................36
Internal RADIUS Server.....................................................37
ARP Spoong Prevention ................................................38
Bandwidth Optimization .................................................39
Hotspot 2.0............................................................................41
Hotspot.............................................................................41
Interworking...................................................................42
WAN Metrics ...................................................................43
LIST.....................................................................................44
OSU ....................................................................................45
Captive Portal.......................................................................47
Authentication Settings-Web Redirection Only 47
Authentication Settings- Username/Password..49
Authentication Settings- Passcode ........................51
Authentication Settings- Remote RADIUS...........53
Authentication Settings- LDAP................................55
Authentication Settings- POP3................................57
Login Page Upload.......................................................59

3
MAC Bypass.....................................................................60
DHCP Server .........................................................................61
Dynamic Pool Settings................................................61
Static Pool Setting ........................................................62
Current IP Mapping List..............................................63
Filters.......................................................................................64
Wireless MAC ACL.........................................................64
IP Filter Settings.............................................................65
WLAN Partition ..............................................................66
Trac Control...............................................................................67
Uplink/Downlink Setting .................................................67
QoS...........................................................................................68
Trac Manager....................................................................69
Status ..............................................................................................70
Device Information ............................................................71
Client Information ..............................................................72
WDS Information Page .....................................................73
Statistics.........................................................................................74
Ethernet Trac Statistics..................................................74
WLAN Trac Statistics.......................................................75
Log ...................................................................................................76
View Log.................................................................................76
Log Settings..........................................................................77
Maintenance Section ................................................................78
Administration.............................................................................79
Limit Administrator............................................................79
System Name Settings......................................................80
Login Settings......................................................................80
Console Settings .................................................................81
Ping Control Settings ........................................................81
LED Settings..........................................................................81
Country Settings .................................................................81
DDP Settings ........................................................................82
Nuclias Connect Settings.................................................82
Firmware and SSL Upload................................................83
Conguration File Upload ...............................................84
Time and Date Settings ....................................................85
Conguration and System.......................................................86
System Settings...........................................................................87
Help .................................................................................................88
Knowledge Base ..................................................................... 89
Wireless Basics .............................................................................89
Wireless Installation Considerations....................................90
Troubleshooting ..................................................................... 91
Why can’t I access the web-based conguration
utility? .....................................................................................91
What can I do if I forgot my password?.......................91
How to check your IP address? ......................................92
How to statically assign an IP address?.......................93
Technical Specications ........................................................ 94
Antenna Pattern ..................................................................... 95

Nuclias Connect
4
Nuclias Connect
Introduction
Nuclias Connect is D-Link’s centralized management solution for Small-to-Medium-Sized Business (SMB) networks. Nuclias Connect makes it easier
to analyze, automate, congure, optimize, scale, and secure your network — delivering the convenience of an Enterprise-wide management
solution, at an SMB price. Nuclias Connect gives you the nancial and technical exibility to expand from a small network to a larger one (up
to 1,000 APs), while retaining a robust and centralized management system. And with its intuitive Graphical User Interface (GUI), a wealth of
enhanced AP features, and a setup wizard that supports 11 languages, Nuclias Connect minimizes the hassle of deployment, conguration,
and administration tasks.
Deployable on Windows server (or Linux via Docker), PC, or Smartphone (via lite management app) the Nuclias Connect free-to-download
software is capable of managing up to 1,000 Access Points (APs) without licensing charges, coupled with an inexpensive optional
hardware controller (The Hub) suitable for remote locations. Through software-based monitoring and remote management of all wireless Access
Points (APs) on your network, Nuclias Connect oers tremendous exibility compared to traditional hardware-based unied
management systems. Conguration can be done remotely. Network trac analytics are available at a glance (in whole or in part). Load Balancing,
Airtime Fairness, and Localized Throttling are enabled.
Nuclias Connect supports multi-tenancy, so network admins can grant localized management authority for local networks. In addition, because
APs can support 8 SSIDs per radio (16 SSIDs per dual band APs), administrators have the option of using one SSID to create a guest network for
visitors.
Nuclias Connect provides direct AP discovery and provisioning when it shares the same Layer-2/Layer-3 network with a given AP, allowing
users to nd APs and import proles with minimum eort, which can be applied as needed to groups or individual APs for even more eective
conguration.
Since Nuclias Connect’s software operates transparently on the network, an AP can be deployed anywhere in an NAT environment. Admins can
provide & manage a variety of distributed deployments, including setting & admin account conguration for each deployment.
Nuclias Connect allows for multiple user authentications while enabling specic access control congurations for each SSID, giving admins the
option of conguring separate internal networks for dierent subnets, while enabling more advanced Value-Added Services, such as Captive
Portal or Wi-Fi Hotspot.

Nuclias Connect
5
Nuclias Connect Key Features
• Free-to-Download Management Software
• Searchable Event Log and Change Log
• License-Free Access Points
• Trac Reporting & Analytics
• Authentication via Customizable Captive Portal, 802.1x and RADIUS Server, POP3, LDAP, AD
• Remote Cong. & Batch Cong.
• Multilingual Support
• Intuitive Interface
• Multi-Tenant & Role-Based Administration
• Payment Gateway (Paypal) Integration and Front-Desk Ticket Management
For more information on how to use Nuclias Connect with DAP-2662, please refer to the Nuclias Connect User Guide.

Nuclias Connect
6
Package Contents
• DAP-2662 Access Point
• Power Adapter
• Mounting Plate and Hardware
Note: Using a power supply with a dierent voltage rating than the one included with the DAP-2662 will cause damage and void the warranty for this product.
System Requirements
yComputers with Windows®, Macintosh®, or Linux-based operating systems with an Ethernet Adapter
yInternet Explorer 11, Safari 7, Firefox 28, or Google Chrome 33 and above (for web-based conguration)

Hardware Overview
7
Hardware Overview
LEDs Connections
2Power Receptor Connect the supplied power adapter.
3LAN (PoE) Port Connect to a Power over Ethernet (PoE) switch or router
via an Ethernet cable.
4Reset Button
Press and hold for ve seconds to reset the access point
to the factory default settings. Press and hold for one
second to reboot the access point.
1Power/Status
Solid Red Indicates the access point has malfunctioned.
Blinking Red This LED will blink during boot-up.
Solid Green Indicates that the DAP-2662 is working
properly.

Basic Installation
8
Basic Installation
Hardware Setup
To power on the DAP-2662, you can use ONE of the following methods:
1. Plug one end of your Ethernet cable into the LAN port of the DAP-2662, and the other end into a port on a 802.3at PoE switch.
2. Separately purchase a DPE-301GI PoE injector if you need to connect the Access Point without a 802.3at PoE Switch.
3. Separately purchase a power adaptor to plug into the power receptor of the DAP-2662
Congure the Access Point
Computer with DHCP Server
Computer with DHCP Server
Computer with DHCP Server

Basic Installation
9
To set up and manage the DAP-2662, use one of the following methods:
1. Connect the access point and your computer to the same PoE switch. Manage the access point from the computer.
Enter dap2662.local in the address eld of your browser.
Log in to the Administration user interface. The default login information is:
Username: admin
Password: admin
2. Connect the access point and your computer via DPE-301GI PoE injector. Manage the access point from the computer.
Enter dap2662.local in the address eld of your browser.
Log in to the Administration user interface. The default login information is:
Username: admin
Password: admin
3. Connect the access point and your computer to the same network switch. Manage the access point from the computer.
Enter dap2662.local in the address eld on your browser.
Log in to the Administration user interface. The default login information is:
Username: admin
Password: admin

Setup Wizard
10
Setup Wizard
The rst login instance displays the System Settings window which requires a change in password. Additional settings include the System Time
and System Country functions.
After logging in to the user interface, ll in the New Password and Conrm New Password elds.
In the System Time function, select Using Network Time Protocol (NTP) or Manually to dene the system time. If required, click the Daylight Sav-
ing Oset drop-down menu and select the value (minutes).
ySetting NTP System Time: Before trying to congure NTP check, perform a ping test with the NTP server. In the NTP Server eld, enter the NTP
server to use. Then click the Time Zone drop-down menu and select the appropriate time zone.
ySetting System Time Manually: From the System Date drop-down menu, select the Year, Month, and Day along with the Hour and Minutes ap-
propriate for the AP.
yEnable Daylight Saving: Click the radio button to enable the daylight savings time (DST) function. Set the DST start (24 hours) and end (24
hours) time by clicking on the drop-down menus and setting the Month, Week, Day, Hour, and Minute of the DST starting days.
Once the settings are congured, click Update button to accept the conguration and proceed to the main interface menu page.

Web User Interface
11
Web User Interface
The DAP-2662 supports an elaborate web user interface where the user can congure and monitor the device. Launch a web browser, type in
http://dap2662.local/ and then press Enter to login. The default username and password is: admin Most of the congurable settings are located
in the menu on the left side of the web GUI which contains sections called Basic Settings,Advanced Settings and Status.

Web User Interface
12
Wireless
On the wireless settings page, you can setup the basic wireless conguration for the access point. The user can choose from 4 dierent wireless
modes:
• Access Point - Used to create a wireless LAN
• WDS with AP - Used to connect multiple wireless networks while still functioning as a wireless access point
• WDS - Used to connect multiple wireless networks
• Wireless Client - Used when the access point needs to act as a wireless network adapter for an Ethernet enabled device
Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Auto Channel Selection:
Select either 2.4 GHz or 5 GHz from the drop-down
menu.
Select Access Point from the drop-down menu.
Service Set Identier (SSID) is the name designated
for a specic wireless local area network (WLAN).
The SSID’s factory default setting is dlink. The SSID
can be easily changed to connect to an existing
wireless network or to establish a new wireless
network. The SSID can be up to 32 characters and
is case-sensitive.
Select Enable to broadcast the SSID across the
network, thus making it visible to all network users.
Select Disable to hide the SSID from the network.
This feature when enabled automatically selects
the channel that provides the best wireless
performance. The channel selection process only
occurs when the AP is booting up. To manually
select a channel, set this option to Disable and
select a channel from the drop-down menu.
Access Point Mode

Web User Interface
13
Channel:
Channel Width:
Authentication:
802.11k/v/r:
To change the channel, rst toggle the Auto Channel Selection setting to Disable, and then use the drop-down menu to make
the desired selection.
Note: The wireless adapters will automatically scan and match the wireless settings.
Allows you to select the channel width you would like to operate in. Select 20 MHz if you are not using any 802.11n wireless
clients. Auto 20/40 MHz allows you to connect to both 802.11n and 802.11b/g or 802.11a wireless devices on your network.
Use the drop-down menu to choose Open System, Shared Key, WPA-Personal, WPA-Enterprise, or 802.1x.
• Select Open System to communicate the key across the network (WEP).
• Select Shared Key to limit communication to only those devices that share the same WEP settings. If multi-SSID is
enabled, this option is not available.
• Select WPA-Personal to secure your network using a password and dynamic key. No RADIUS server is required.
• Select WPA-Enterprise to secure your network with the inclusion of a RADIUS server.
• Select 802.1X if your network is using port-based Network Access Control.
Use the drop-down menu to choose to enable or disable 802.11k/v/r

Web User Interface
14
Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Auto Channel Selection:
Channel:
Channel Width:
Select either 2.4GHz or 5GHz from the drop-down
menu.
WDS with AP mode is selected from the drop-down
menu.
Service Set Identier (SSID) is the name designated
for a specic wireless local area network (WLAN).
The SSID’s factory default setting is dlink. The SSID
can be easily changed to connect to an existing
wireless network or to establish a new wireless
network.
Enable or Disable SSID visibility. Enabling this
feature broadcasts the SSID across the network,
thus making it visible to all network users.
Enabling this feature automatically selects
the channel that will provide the best wireless
performance. This feature is not supported in WDS
with AP mode. The channel selection process only
occurs when the AP is booting up.
All devices on the network must share the same
channel.To change the channel, use the drop-down
menu to make the desired selection. (Note: The
wireless adapters will automatically scan and match
the wireless settings.)
Allows you to select the channel width you would
like to operate in. Select 20 MHz if you are not using
any 802.11n wireless clients. Auto 20/40 MHz allows
you to connect to both 802.11n and 802.11b/g or
802.11a wireless devices on your network.
WDS with AP Mode

Web User Interface
15
Remote AP MAC
Address:
Site Survey:
Authentication:
Enter the MAC addresses of the APs on your network that will serve as bridges to wirelessly connect multiple networks.
Click on the Scan button to search for available wireless networks, then click on the available network that you want to
connect with.
Use the drop-down menu to choose Open System, or WPA-Personal.
• Select Open System to communicate the key across the network.
• Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is required.

Web User Interface
16
Wireless Band:
Mode:
Network Name (SSID):
Auto Channel
Selection:
Channel:
Channel Width:
Remote AP MAC
Address:
Select either 2.4GHz or 5GHz from the drop-down
menu.
WDS is selected from the drop-down menu.
Service Set Identier (SSID) is the name designated
for a specic wireless local area network (WLAN).The
SSID’s factory default setting is dlink. The SSID can
be easily changed to connect to an existing wireless
network or to establish a new wireless network.
Enabling this feature automatically selects
the channel that will provide the best wireless
performance. This feature is not supported in WDS
mode.
All devices on the network must share the same
channel.To change the channel, use the drop-down
menu to make the desired selection.
Use the drop-down menu to choose 20 MHz or
Auto 20/40 MHz.
Enter the MAC addresses of the APs on your network
that will serve as bridges to wirelessly connect
multiple networks.
WDS Mode

Web User Interface
17
Site Survey:
Authentication:
Click on the Scan button to search for available wireless networks, then click on the available network that you
want to connect with.
Use the drop-down menu to choose Open System, or WPA-Personal.
• Select Open System to communicate the key across the network.
• Select WPA-Personal to secure your network using a password and dynamic key changes. No RADIUS server is
required.

Web User Interface
18
Wireless Band:
Mode:
Network Name (SSID):
SSID Visibility:
Auto Channel Selection:
Channel:
Channel Width:
Site Survey:
Authentication:
Select either 2.4 GHz or 5 GHz from the drop-down
menu.
Wireless Client is selected from the drop-down menu.
Service Set Identier (SSID) is the name designated
for a specic wireless local area network (WLAN).The
SSID’s factory default setting is dlink. The SSID can
be easily changed to connect to an existing wireless
network.
This option is unavailable in Wireless Client mode.
Enablingthisfeatureautomaticallyselectsthe channel
that will provide the best wireless performance. This
feature is not supported in Wireless Client mode.
The channel used will be displayed, and matches the
AP that the DAP-2662 is connected to when set to
Wireless Client mode.
Use the drop-down menu to choose 20 MHz or Auto
20/40 MHz.
Click on the Scan button to search for available
wireless networks, then click on the available network
that you want to connect with.
Will be explained in the next topic.
Wireless Client Mode

Web User Interface
19
Wireless security is a key concern for any wireless network installed. Wireless networks will broadcast it’s presence for anyone to connect to it. Today, wireless
security has advanced to a level where it is virtually impenetrable.
There are mainly two forms of wireless encryption and they are called Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA). WEP was the rst
security method developed. It is a low level encryption but better than no encryption. WPA is the newest encryption protocol. With the advanced WPA2
standard wireless networks have nally reach a point where the security is strong enough to give users the peace of mind when installing wireless networks.
Wireless Security
Wired Equivalent Privacy (WEP)
Encryption:
Key Type*,**:
Key Size:
Key Index (1-4):
Key:
Use the radio button to disable or enable
encryption.
Select HEX or ASCII.
Select 64 Bits or 128 Bits.
Select the 1st through the 4th key to be the active
key.
Input up to four keys for encryption. You will select
one of these keys in the Key Index drop-down
menu.
**Hexadecimal (HEX) digits consist of the numbers 0-9 and the letters A-F.
*ASCII (American Standard Code for Information Interchange) is a code that represents English letters using
numbers ranging from 0-127.
WEP provides two variations called Open System and Shared Key.
Open System sends a request to the access point and if the key used matches the one congured on the access point, the access point will return a success
message back to the wireless client. If the key does not match the one congured on the access point, the access point will deny the connection request from
the wireless client.
Shared Key sends a request to the access point and if the key used matches the one congured on the access point, the access point will send a challenge
to the client. The client will then again send a conrmation of the same key back to the access point where the access point will either return a successful or a
denial packet back to the wireless client.

Web User Interface
20
Wi-Fi Protected Access (WPA / WPA2)
WPA was created by theWi-Fi Alliance to address the limitations and weaknesses found in WEP.This protocol is mainly based on the 802.11i standard.
There are also two variations found in WPA called WPA-Personal (PSK) and WPA-Enterprise (EAP).
WPA-Enterprise requires the user to install a Radius Server on the network for authentication.
WPA-Personal does not require the user to install a Radius Server on the network.
Comparing WPA-PSK with WPA-EAP, WPA-PSK is seen as a weaker authentication but comparing WPA-PSK to WEP, WPA-PSK is far more secure than
WEP. WPA-EAP is the highest level of wireless security a user can use for wireless today.
WPA2 is an upgrade of WPA. WPA2 yet again solves some possible security issues found in WPA. WPA2 has two variations called WPA2-Personal (PSK)
and WPA2-Enterprise (EAP) which is the same as found with WPA.
WPA Mode:
Cipher Type:
Group Key Update:
Pass Phrase:
When WPA-Personal is selected for Authentication type,
you must also select a WPA mode from the drop-down
menu: AUTO (WPA or WPA2), WPA2 Only, or WPA Only.
WPA and WPA2 use dierent algorithms. AUTO (WPA or
WPA2) allows you to use both WPA and WPA2.
When you selectWPA-Personal, you must also select AUTO,
AES, or TKIP from the pull down menu.
Select the interval during which the group key will be valid.
The default value of 1800 is recommended.
When you selectWPA-Personal, please enter a Pass Phrase
in the corresponding eld.