Edge-Core ECW5410-L User manual

Copyright Notification
Edgecore Networks Corporation
© Copyright 2019 Edgecore Networks Corporation.
The information contained herein is subject to change without notice. This document is for informational purposes only and does not set forth any warranty,
expressed or implied, concerning any equipment, equipment feature, or service offered by Edgecore Networks Corporation. Edgecore Networks Corporation
shall not be liable for technical or editorial errors or omissions contained herein.
User Manual
Enterprise Access Point
Verion 3.45.0000

User Manual
Enterprise Access Point
1
Table of Content
1. Edgecore Enterprise Access Point Quick Deployment..........................................................................................................3
1.1 Log in to the AP ...........................................................................................................................................................3
1.2 General Information Configuration.............................................................................................................................5
1.3 Connect the AP to the Network ..................................................................................................................................6
2. Navigating the Web Management Interface ......................................................................................................................11
3. System ................................................................................................................................................................................12
3.1 General......................................................................................................................................................................12
3.2 Network Interface .....................................................................................................................................................14
3.3 Port............................................................................................................................................................................16
3.4 DHCP Server ..............................................................................................................................................................17
3.5 Management.............................................................................................................................................................18
3.6 CAPWAP ....................................................................................................................................................................19
To Managed by WLAN Controller with Complete Tunnel .....................................................................................20
To Managed by WLAN Controller with Complete Tunnel .....................................................................................22
3.7 IPv6............................................................................................................................................................................24
3.8 iBeacon......................................................................................................................................................................25
3.9 RTLS...........................................................................................................................................................................26
3.10 DPI DNS .....................................................................................................................................................................26
4. Wireless ..............................................................................................................................................................................27
4.1 VAP Overview............................................................................................................................................................27
4.2 General......................................................................................................................................................................30
4.3 VAP Config.................................................................................................................................................................33
4.4 Security......................................................................................................................................................................35
4.5 Repeater....................................................................................................................................................................39
4.6 Advanced...................................................................................................................................................................40
4.7 Access Control...........................................................................................................................................................42
4.8 Hotspot 2.0................................................................................................................................................................44
4.9 Site Survey (CPE mode only) .....................................................................................................................................46
5. Firewall ...............................................................................................................................................................................47
5.1 Firewall List................................................................................................................................................................47
5.2 Service .......................................................................................................................................................................50
5.3 Advanced...................................................................................................................................................................51
5.4 IP/Port Forwarding (CPE mode only).........................................................................................................................52
5.5 DMZ (CPE mode only)................................................................................................................................................53
6. Utilities................................................................................................................................................................................54
6.1 Change Password ......................................................................................................................................................54
6.2 Backup & Restore......................................................................................................................................................55
6.3 System Upgrade ........................................................................................................................................................56
6.4 Reboot.......................................................................................................................................................................56

User Manual
Enterprise Access Point
2
6.5 Upload Certificate .....................................................................................................................................................57
6.6 Background Scan .......................................................................................................................................................58
6.7 Discovery Utility ........................................................................................................................................................59
6.8 Network Utilities .......................................................................................................................................................60
7. Status ..................................................................................................................................................................................61
7.1 Overview ...................................................................................................................................................................61
7.2 Interfaces...................................................................................................................................................................63
7.3 Associated Clients .....................................................................................................................................................64
7.4 DHCP Lease................................................................................................................................................................65
7.5 Link Status .................................................................................................................................................................65
7.6 Event Log...................................................................................................................................................................66
7.7 Wireless Log ..............................................................................................................................................................67
7.8 Monitor .....................................................................................................................................................................68
7.9 UPnP (CPE mode only) ..............................................................................................................................................69
8. Console Interface................................................................................................................................................................70
8.1 Direct Connection by Console Cables........................................................................................................................70
8.2 Remote Connection by SSH Interface .......................................................................................................................71

User Manual
Enterprise Access Point
3
1.Edgecore Enterprise Access Point Quick Deployment
To set up The AP for the first time, administrators need to perform initial configuration to assign an IP
address and other information necessary for the AP to communicate with the local gateways and for the
AP to allow Wi-Fi devices to connect to the wired network.
1.1 Log in to the AP
The AP has a web-based interface for configuration and management. To access the Web Management
Interface (WMI) for the first time, follow the steps below.
1. Ensure that your administrative PC is manually set to a static IP Address in the same subnet as the
AP’s (192.168.1.10/255.255.255.0). Connect the PC directly to the LAN port of the AP via an
Ethernet cable.
2. Launch the web browser and enter the default IP Address of the AP (192.168.1.10) in the address
field.
Log in using default Username (admin) and Password (admin) on the Administrator Login Page:

User Manual
Enterprise Access Point
4
3. System Overview page of the WMI will appear after login.
4. Change the administrator’s password for security reasons
- Click on the Utilities icon on the main menu, and select the Change Password tab.
- Enter the New Password and retype it in the Re-enter New Password field.

User Manual
Enterprise Access Point
5
1.2 General Information Configuration
Go to System General page (Home > System > General) to configure general information for the AP.
1. System Information: Enter appropriate system related information (Name, Description, and
Location), by which administrators will be able to identify the AP in the network.
2. Time: For this initial configuration, set the system time for the AP using the method of Enable NTP
(to sync the system clock with Network Time Protocol (NTP) server).

User Manual
Enterprise Access Point
6
1.3 Connect the AP to the Network
The following instructions are the basic steps to establish the wireless coverage of your network. The AP
will connect to the wired network through its LAN port and enable wireless access to your network.
1. Change IP Settings of the AP
Go to Network Interface page (Home > System > Network Interface) to perform configuration of the
network settings.
Mode:
Static: Manually fill in appropriate values for the network interface (IP Address, Netmask, Default
Gateway, and Primary DNS Server) –in the example above, the AP is still using the default IP address
192.168.1.10.
DHCP: If the deployment requires that the AP get a dynamic IP Address from the LAN, set Mode to
DHCP; Click SAVE to submit the changes.
2. Activate the first SSID for Wi-Fi access
By default, one Service Set Identifier (SSID) is enabled with the Radio A (RF Card A) and one SSID is
enabled with the Radio B (RF Card B). As shown on the VAP Overview page (Home > Wireless > VAP
Overview), Virtual Access Point No.1 (VAP-1) profile represents the first SSID available.

User Manual
Enterprise Access Point
7
Click on the State (Enabled) of VAP-1 to configure the profile. This will bring up the following VAP
Configuration page.
Note:
Virtual Access Point (VAP):
- VAP feature allows a single physical AP device (with a unique, single BSSID) to
present itself as multiple discrete APs, as shown in the example diagram below;
- Each VAP can be independently enabled or disabled, with its own settings (e.g.
SSID, Network Mode, VLAN ID, Security, etc.), such that the AP is able to support
different clients through multiple SSIDs.

User Manual
Enterprise Access Point
8
Select the specific VAP profile (in this case, “RF Card A: VAP-1”). The basic settings of the VAP are
collected in the profile as follows:
- VAP: Disable or Enable this VAP.
- Profile Name: Name of the VAP profile for identity / management purposes.
- ESSID: Extended Service Set Identifier (ESSID) serves as an identifier for clients to associate with
the specific VAP.
- Network Mode:
•Bridge mode: the VAP operates transparently (i.e. no NAT, no DHCP) such that client devices
will be assigned a dynamic IP address from a DHCP server on the LAN side. The source IP
address of client traffic seen by the uplink gateway/switch will remain the original IP address
of the client (in this case, 192.168.1.31, as shown in the diagram below).

User Manual
Enterprise Access Point
9
- NAT mode: the VAP operates like a Network Address Translation (NAT) device with a built-in
DHCP server on this SSID such that client devices will be assigned a dynamic IP address from the
configured DHCP pool on this SSID. After NAT conversion, the source IP address of client traffic
seen by the uplink gateway/switch will be the IP address of the AP (in this case, 192.168.1.10, as
shown in the diagram below).
- VLAN ID: Per-SSID VLAN tagging function –when enabled, clients’ traffic which enters the AP
through this SSID will be tagged with the configured VLAN ID.
- DHCP Profile: Built-in DHCP Server profile; IP settings of DHCP Server are under Home > System >
DHCP Server.
- CAPWAP Tunnel Interface: Three states indicating the connectivity between AP and Controller,
when AP is managed by Controller
•Disable (No Tunnel): the AP is operating with no CAPWAP Tunnel connection to the
Controller
•Split Tunnel: the AP passes only “control” traffic to the Controller via the CAPWAP Tunnel;
i.e. “data” traffic will go out locally without passing through the Tunnel
•Complete Tunnel: the AP passes both “control” and “data”traffic to the Controller via the
CAPWAP Tunnel
Note:
- VLAN ID is supported only when the VAP is in Bridge mode.
- DHCP Profile and DHCP Server are activated only when the VAP is set to NAT
mode.
- If the VAP is in NAT mode, the CAPWAP Tunnel Interface will only work in two
states:
Disable (No Tunnel) or Split Tunnel.

User Manual
Enterprise Access Point
10
3. Configure General Wireless Settings
Under Home > Wireless > General, there are global settings for RF Card A and B. RF Card A is operating
in 2.4 GHz band and RF Card B is operating in 5 GHz band, both of which are enabled by default.
For initial configuration, you might want to change the default basic settings shown below:
RF Card A: 2.4 GHZ, 802.11g+802.11n, Antenna Mode 2T2R, Channel Width 40 MHz, Channel 6
RF Card B: 5 GHz, 802.11ac, Antenna Mode 2T2R, Channel Width 80 MHz, Channel 36
You can make changes to other settings at a later time.
Congratulations! After a system restart, the AP should be able to operate with these settings.
Note:
SSID, ESSID, and BSSID:
- Service Set Identifier (SSID) is a key identifying the Name of a Wireless LAN.
- Extended Service Set Identifier (ESSID) = SSID; multiple physical APs can be
configured to use the same SSID such that roaming across multiple physical APs is
supported.
- Basic Service Set Identifier (BSSID) = MAC address of AP; unique BSSID will be
transmitted (in the Beacon management frame) when multiple physical APs
broadcast the same ESSID.

User Manual
Enterprise Access Point
11
2.Navigating the Web Management Interface
The APs have a web-based interface for configuration and management. This chapter will guide users
through the AP’s detailed settings. The AP can be set as AP mode or CPE mode, and the two modes will
have different Menu for each other. The following table shows all the function tabs under the Main
Menu of Web Management Interface (WMI) of the AP.
AP Mode
System
Wireless
Firewall
Utilities
Status
General
VAP Overview
Firewall List
Change Password
Overview
Network
Interface
General
Service
Backup & Restore
Interfaces
Port
VAP Config
Advanced
System Upgrade
Associated Clients
DHCP Server
Security
Reboot
DHCP Lease
Management
Repeater
Upload Certificate
Link Status
CAPWAP
Advanced
Background Scan
Event Log
IPv6
Access Control
Discovery Utility
Wireless Log
iBeacon
Hotspot 2.0
Network Utilities
Monitor
RTLS
DPI DNS
CPE Mode (ECWO5212-L only)
System
Wireless
Firewall
Utilities
Status
General
VAP Overview
IP/Port
Forwarding
Change Password
Overview
Network
Interface
General
DMZ
Backup & Restore
Interfaces
Port
VAP Config
Advanced
System Upgrade
Associated Clients
DHCP Server
Security
Reboot
Event Log
Management
Advanced
Upload Certificate
Monitor
Access Control
Background Scan
DHCP Lease
Site Survey
Discovery Utility
UPnP
Network Utilities
Note:
On each configuration page, you may click SAVE to save the changes of your configured
settings, but you must reboot the system for the changes to take effect. After clicking
SAVE, the following message will appear: “Some modification has been saved and will
take effect after Reboot.” All online users will be disconnected during reboot or restart.

User Manual
Enterprise Access Point
12
3.System
Upon clicking the System icon, administrators can utilize this section for general configurations of the
AP.
3.1 General
System Information
Name: The system name used to identify this system.
Description: Further information about the system (e.g. device model, firmware version, and active
date).
Location: The information on geographical location of the system for the administrator to locate the
system easily.
Time
Device Time: Display the current system time.
Time Zone: Select an appropriate time zone from the drop-down list box.
Time: There are two methods of setting up the time –
- Enable NTP: Synchronize the system clock with Network Time Protocol (NTP) server. Simply enter
the IP Address or domain name of a local NTP server (if available, or search online for a NTP
server nearest to you) and click SAVE.

User Manual
Enterprise Access Point
13
- Manually set up: Set the system clock manually. This is the default method and requires setup
every time when the system starts up. Simply choose a time zone, enter the date and the time
accordingly, and click SAVE.
Click APPLY after an alert message “*Some modifications have been saved and will take effect after
APPLY.” appears on the WMI.
Unless Internet connection or NTP becomes unavailable, it is recommended to use NTP server
for time synchronization because the system time needs to be reconfigured upon reboot.

User Manual
Enterprise Access Point
14
3.2 Network Interface
On this page, the network settings of the device can be configured; fields with a red asterisk (i.e. IP
Address, Netmask, Default Gateway, and Primary DNS Server) are mandatory.
Mode –Static: The administrator can manually set up the static LAN IP address. All required fields are
marked with a red asterisk.
- IP Address: The IP address of the LAN port.
- Netmask: The Subnet mask of the LAN port.
- Default Gateway: The Gateway IP address of the LAN port.
- Primary DNS Server: The IP address of the primary DNS (Domain Name System) server.
- Alternate DNS Server: The IP address of the substitute DNS server.
Mode –DHCP: This configuration type is applicable when the system is connected to a network with the
presence of a DHCP server; all related IP information required will be provided by the DHCP server
automatically.
LTE (EAP100 Only):After plugging the LTE module with the SIM card into the USB port, the following two
options will appear.
- No LTE: Choose the LAN port as the uplink.
- LTE: Choose the LTE as the uplink.
Ethernet IGMP Snooping: When Enabled, the switch forwards traffic IGMP packets are transferred via
the Access Point’s network interface and the IP multicast host. Registration information is recorded and
sorted into multicast groups. The internal switch forwards traffic only to those ports that request
multicast traffic. Adversely, without IGMP snooping, multicast traffic is treated like broadcast traffic,
with packets forwarded to all ports causing network inefficiencies.

User Manual
Enterprise Access Point
15
LLDP: LLDP (Link Layer Discovery Protocol) is an IEEE standard protocol (IEEE 802.1ab) that defines
messages, encapsulated in Ethernet frames for the purpose of giving devices a means of announcing
basic device information to other devices on the LAN (Local Area Network) through periodic
retransmissions out every (TxInterval * TxHold) seconds.
- TxInterval: Setting the interval for sending the packets.
- TxHold: Setting the times of interval for sending the packets.
Layer 2 STP: If the AP is set up to bridge other network components, this option can be enabled to
prevent undesired loops because a broadcasting storm may occur in a multi-switch environment where
broadcast packets are forwarded in an endless loop between switches. Moreover, a broadcast storm
may consume most of the available system resources in addition to available bandwidth. Thus, enabling
the Layer 2 STP can lower such undesired occurrence and derive the best available data path for
network communication. The AP also supports RSTP Operation. Configurable parameters include Bridge
Priority, Hello Time, Max Age, and Forward Delay. Please refer to IEEE standards for recommended
parameter values.

User Manual
Enterprise Access Point
16
3.3 Port
Port: Select one Port for further configuration.
VLAN ID: Enable selected implies that network traffic sent upstream from this LAN port will be tagged
with the VLAN ID configured in the field below. Disable selected implies that traffic from this LAN port
will not be tagged with a VLAN ID.
CAPWAP Tunnel Interface: Select a LAN, VAP or WDS interface to designate its traffic to pass through
the CAPWAP Tunnel established between the AP and the controller. For network interfaces that are
unchecked, their traffic will be forwarded locally into the internet if this AP is deployed remotely on the
WAN side of a controller.
The ‘TIP’in red at the bottom of the page explains that each service zone, from default to Service Zone
8, has its fixed, pre-determined VLAN ID number when utilizing CAPWAP. Admin needs to enter one of
the numbers in order to direct traffic back to a certain Service Zone.

User Manual
Enterprise Access Point
17
3.4 DHCP Server
When one VAP is enabled to operate in NAT mode, associated client devices will be assigned a dynamic
DHCP IP address from the configured DHCP pool on the SSID. The NAT and DHCP mode can be executed
without tunnel or managed by Edgecore WLAN controller with split tunnel.
It is noted that Pool1 –Pool16 are all configured as A class DHCP IP addresses as default values, and only
configurable at AP’s Web Management Interface. It starts from 10.101.0.254/16 to 10.116.0.254/16 for
16 DHCP Profiles, and DHCP lease time is 1440 minutes in default.

User Manual
Enterprise Access Point
18
3.5 Management
VLAN for Management: When this is enabled, management traffic from the system will be tagged with
a VLAN ID. In other words, administrators who need to access the WMI must send management traffic
with the same VLAN ID such as connecting to a specific VAP with the same VLAN ID. Enter a value
between 1 and 4094 for the VLAN ID if the option is enabled.
SNMP Configuration: to obtain the system information remotely.
- Enable/ Disable: Enable or Disable this function.
- Community String: The community string is required when accessing the Management
Information Base (MIB) of the system. Read: Enter the community string to access the MIB with
Read privilege. Write: Enter the community string to access the MIB with Write privilege.
- Edit SNMPv3 User List: The system allows 5 SNMP Users with Read or Read & Write Access.
Determine the Name and Authentication Password on the SNMP Account List.
- Trap: When enabled, events on Cold Start, Interface UP & Down, and Association &
Disassociation can be reported to the assigned server.
- Server IP Address: Enter the IP address of the assigned server that will receive the trap report.
Syslog Level: Select the desired level of received events from the drop-down menu. “Debug” level is as
default setting.
Remote Syslog Server: When this function is enabled, specify an external SYSLOG server to receive
SYSLOG messages from the system remotely.
- Enable/ Disable: Enable or Disable this function.
- SYSLOG Server IP: The IP address of the Syslog server that will receive the reported events.
- Server Port: The port number of the Syslog server.
Management IP List: Enter source IP address/subnet of administrator PCs which are allowed to access
the WMI of this AP. Anyone else that is not on this List will be denied for WMI access. The default entry
0.0.0.0/0.0.0.0 means that administrators are allowed to access the WMI from anywhere.
LED: To turn on or off the Status LED indicator on the AP.

User Manual
Enterprise Access Point
19
3.6 CAPWAP
CAPWAP is a standard interoperable protocol that enables a controller to manage a collection of
wireless access points. There are 5 methods of auto AP discovery, namely DNS SRV, DHCP option,
Broadcast, Multicast, and Static.
CAPWAP: Enable or Disable the CAPWAP feature.
Certificate Date Check: To enable this item, select Enable and click Manage Certificates to enter the
Upload Certificate page. Please refer to the section 4.4.5 Upload Certificate.
DNS SRV Discovery: Using DNS SRV to discover acess controller.
- Domain Name Suffix: Enter the suffix of the access controller, such as example.com.
DHCP Option Discovery: Using DHCP option to discover access controller.
Broadcast Discovery: Using Broadcast to discover access controller.
Multicast Discovery: Using muticast to discover access controller.
Static Discovery: Using Static approach to discover access controller.
- AC Address: The IP address of the access controller. If it can not discover the first AC, it will try to
discover the second AC.