IP-COM AC3000-32 User manual

1
Network Setting
Network Setting ........................................................................................................................................................... 1
1Network Setting............................................................................................................................................................. 2
1.1 Interface Settings.................................................................................................................................................... 2
1.2 Interface and DHCP Server ................................................................................................................................... 14
1.3 Internet Settings ................................................................................................................................................... 25
1.4 NAT Rule ............................................................................................................................................................... 36
1.5 WAN Interface Settings......................................................................................................................................... 47
1.6 Multi-WAN Policy ................................................................................................................................................. 49
2IP Routing..................................................................................................................................................................... 59
2.1 Overview............................................................................................................................................................... 59
2.2 Configuring IP Routing.......................................................................................................................................... 59
2.3 Example of IP Routing........................................................................................................................................... 61
3Example of Network Setting ........................................................................................................................................ 74
3.1 WAN Interface Is Not Created .............................................................................................................................. 74
3.2 WAN Interface Is Created ..................................................................................................................................... 93

2
1Network Setting
Network Setting includes: Interface Settings, Interface and DHCP Server, Internet Settings, NAT Rule,
WAN Interface Settings, and Multi-WAN Policy.
Note: If you want to configure NAT rules, WAN interface settings, and multi-WAN policies, create WAN
interfaces on the Interface Settings page first.
1.1 Interface Settings
1.1.1 Overview
AC3000-32 provides 4 physical ports. AC3000 and AC3000-64 provides 4 physical ports by default, and
you can add physical ports as required.
By default, all the physical ports are VLAN interfaces. You can change some of them to WAN interfaces.
A physical port can only be set to either a WAN interface or a VLAN interface.
ி VLAN Interface
It is used to connect to local users andAPs. You can set a VLAN ID for each VLAN interface.
Note: Every VLAN interface of the AC has no PVID, no matter it has a VLAN ID or not. For a VLAN
interface, if VLAN ID=0, the VLAN interface can transmit and receive only data packets without tags. If
VLAN ID≠0, the VLAN interface can only transmit and receive data packets with the tag matching the
VLAN ID.
By default, fit APs have no management VLAN ID (VLAN ID=0), and the physical ports of fit APs
have no PVID. In distributed forwarding mode, when the AC delivers an SSID policy with a VLAN ID to
an AP, the management VLAN ID of the AP remains 0, but the PVID of the physical port of the AP is set
to 0. In centralized forwarding mode, when the AC delivers an SSID policy with a VLAN ID to an AP, no
management VLAN ID or PVID is assigned to theAP.
ி WAN Interface
It is used to connect to the internet. When you set a physical port as a WAN interface, you can configure
internet settings and NAT rules for the WAN interface to allow computers connected to the specified
VLAN interfaces to access the internet through the WAN interface.

3
If you create WAN interfaces, the AC enables NAT function and functions as a gateway. The network
topology is as follows.
1.1.2 Configuring Interface Settings
By default, the AC provides a VLAN interface named "default". The VLAN interface contains all physical
ports of theAC and its VLAN ID is 0. See the following figure.
Creating a VLAN Interface
1. Log in to the web UI of the AC and choose Network Setting > Network Setting > Interface
Settings.
2. Click Add.
3. Configure the parameters in the window.
Interface Type: Select VLAN Interface.
Physical Port: Select one or more physical ports belonging to the VLAN Interface.
Interface Name: Set a unique name for the VLAN interface.
WAN Interface
VLAN
Interface
Core Switch
PoE Switch
User
User
Internet

4
VLAN ID: Set a VLAN ID for the VLAN interface.
4. Click Save.
Parameter Description
Parameter
Description
Interface Type
Select an interface type for the configured rule.
VLAN Interface: It is used to connect to local computers orAPs. The AC allows a maximum of 512
VLAN interfaces.
WAN Interface: It is used to connect to the internet.
Physical Port
Select the physical ports belonging to the VLAN interfaces.
A VLAN interface can include multiple physical ports. A physical port can belong to
multiple VLAN interfaces. One WAN interface matches only one physical port.
A physical port can be set only as either a VLAN interface or a WAN interface.
Interface
Name
Enter a unique name for the interface.
Only Chinese characters, letters, digits, underscores, and dashes are allowed. The interface name
cannot be blank. The range is 1 - 16 characters.
After you save the configured rule, the interface name cannot be changed.
VLAN ID
It is applicable to VLAN interfaces.
Set a VLAN ID for the configured VLAN interface. The range is 0 - 4094. “0”indicates that the VLAN
interface allows data packets that are not tagged to pass through. For more information, refer to VLAN
Interface.

5
End: After you create a VLAN interface, you can choose Network Setting > Network Setting >
Interface Settings to view the VLAN interface. See the following figure.
Creating a WAN Interface
A WAN interface can contain only one physical port. A physical port configured as a VLAN interface
cannot be set as a WAN interface. If you want to create a WAN interface on a physical port, remove the
physical port from its VLAN interface first.
Procedure:
1. Log in to the web UI of theAC and go to Network Setting > Network Setting > Interface Settings.
2. Find the VLAN interface such as "default" and click .
3. Physical Port: Deselect the check box of the physical port, such as "eth3".
4. Click Save.
When the physical port is removed from the VLAN interface, you can set the physical port to a WAN
interface.

6
Procedure:
1. Choose Network Setting > Network Setting > Interface Settings and click Add.
2. Configure the parameters in the window.
Interface Type: Select WAN Interface.
Physical Port: Select the physical port such as "eth3".
Interface Name: Set a name such as "wan0".
3. Click Save.
End: After you create a WAN interface, you can choose Network Setting > Network Setting >
Interface Settings to view the WAN interface. See the following figure. The eth3 port is set to a WAN
interface.
If you want to create more WAN interfaces, repeat the procedure. The AC supports creating a maximum
of N-1 WAN interfaces. Nis the number of the physical ports of the AC.
Modifying an Interface
1. Choose Network Setting > Network Setting > Interface Settings.
2. Find the interface to be modified and click .

7
3. Modify the parameters except Interface Name as required.
4. Click Save.
Deleting an Interface
When you delete an interface, all configurations of the interface are deleted, such as Interface and DHCP
Server, Internet Settings, and NAT Rule.
The default VLAN interface cannot be deleted.
Procedure:
1. Choose Network Setting > Network Setting > Interface Settings.
2. Click corresponding to the interface.
1.1.3 Example of VLAN Interface Application
Networking Requirement
You need theAC to manage three APs on three different VLANs.
Assumption:
All the APs are restored to the factory settings.
All the APs are connected to access ports of the switch, as shown in the following network
topology.
Network Topology
Switch

8
Procedure
I. Configure the Switch
Configure the 802.1Q VLAN function on the switch. See the following table.
Switch Port
Connected to
VLAN ID
Port Type
PVID
1
AP1
1
Access
1
2
AP2
2
Access
2
3
AP3
3
Access
3
24
AC
1,2,3
Trunk
1
II. Configure the AC
According to the networking requirement, all the APs have no PVID or VLAN ID, and will obtain IP
addresses from the AC.
Procedure:
Step 1: Configure VLAN Interface
Choose Network Setting > Network Setting > Interface Settings, and configure three VLAN interfaces
used to communicate with the threeAPs.
1. Configure the VLAN interface used to communicate with AP1.
According to the networking requirement, the VLAN ID of the VLAN interface is 0, so you can use the
default VLAN interface.
2. Configure the VLAN interface used to communicate with AP2.
1) Click Add.
2) Configure the parameters in the window.
Interface Type: Select "VLAN Interface".
Physical Port: Select the physical port connected to the switch, which is "eth0".
Interface Name: Set a name, such as "vlan2".

9
VLAN ID: Enter the ID of the VLAN of AP2, which is "2".
3) Click Save.
3. Configure the VLAN interface used to communicate with AP3.
1) Click Add.
2) Configure the parameters in the window.
Interface Type: Select "VLAN Interface".
Physical Port: Select the physical port connected to the switch, which is "eth0".
Interface Name: Set a name, such as "vlan3".
VLAN ID: Enter the ID of the VLAN of AP2, which is "3".
3) Click Save.

10
When you complete the step 1, the VLAN interface configurations are displayed. See the following figure.
Step 2: Configuring the Interfaces and DHCP Servers
On the Network Setting > Network Setting > Interface and DHCP Server page, configure three DHCP
servers on the created interfaces respectively. The DHCP servers are used to assign IP addresses to
AP1, AP2, and AP3.
1. Configure the DHCP server used to assign an IP address to AP1
According to step 1, AP1 uses the default VLAN interface to connect to the AC, so you can use the
default DHCP server to assign an IP address to AP1.
To Identify the DHCP server more easily, you can change the remark of the DHCP server to "AP1". See the
following figure.
2. Configure the DHCP server used to assign IP address toAP2
1) Click Add.
2) Configure the parameters in the window.
VLAN Interface: Select "vlan2".
IPAddress: Set an IP address for the VLAN interface, such as "192.168.20.1".
Subnet Mask: You can keep the default value.
DHCP Server: Select "Enable".
Remark: Set a name for the DHCP server, such as "AP2".
Primary DNS: In this example, you can set the primary DNS IP address "192.168.20.1" as the
DHCP server IP address.

11
Start IP: Set the start IP address of the DHCP server pool, such as "192.168.20.100".
End IP: Set the end IP address of the DHCP server, such as "192.168.20.200".
3) Click Save.
3. Configure the DHCP server used to assign IP address toAP3
1) Click Add.
2) Configure the parameters in the window.
VLAN Interface: Select "vlan3".
IPAddress: Set an IP address for the VLAN interface, such as "192.168.30.1".
Subnet Mask: You can keep the default value.
DHCP Server: Select "Enable".
Remark: Set a name for the DHCP server, such as "AP3".
Primary DNS: In this example, you can set the primary DNS IP address as the DHCP server IP
address "192.168.30.1".
Start IP: Set the start IP address of the DHCP server pool, such as "192.168.30.100".
End IP: Set the end IP address of the DHCP server, such as "192.168.30.200".
3) Click Save.

12
After the configuration is complete of the three DHCP servers is complete, you can view the information.
See the following figure.
Verification
After all the configurations are complete, AP1 obtains an IP address on the network segment of
192.168.10.0/24, AP2 obtains an IP address on the network segment of 192.168.20.0/24, and AP3
obtains an IP address on the network segment of 192.168.30.0/24. All the three APs are managed
successfully by theAC.

13
Appendix: VLAN Process
Condition
Actions about AP1
Actions about AP2
Actions about AP3
When the switch’s access
port receives packets
from an AP, it will
Add tag: VLAN 1.
Add tag: VLAN 2.
Add tag: VLAN 3.
When the switch’s trunk
port transmits packets, it
will
Remove the tag and
forward the packets,
because VLAN
ID=PVID=1.
Keep the tag and forward
the packets, because
VLAN ID≠PVID.
Keep the tag and forward the
packets, because VLAN
ID≠PVID.
When the AC’s eth0 port
receives packets, the
packets’ status are
Untagged
With tag: VLAN ID 2
With tag: VLAN ID 3
The VLAN ID that the
eth0 port of the AC must
allow to pass through
VLAN ID 0
VLAN ID 2
VLAN ID 3
When the AC’s eth0 port
transmits packets, the
packets’ status are
Untagged
With tag: VLAN ID 2
With tag: VLAN ID 3
When the switch’s trunk
port receives packets
from the AC, it will
Add tag: VLAN 1. Because
it receives untagged
packets.
Keep tag and forward the
packets. Because it
receives tagged packets.
Keep tag and forward the
packets. Because it receives
tagged packets.
When the switch’s access
port transmits packets to
an AP, it will
Remove the tag and
forward the packets,
because VLAN
ID=PVID=1.
Remove the tag and
forward the packets,
because VLAN
ID=PVID=2.
Remove the tag and forward the
packets, because VLAN
ID=PVID=3.
Switch

14
1.2 Interface and DHCP Server
1.2.1 Overview
The AC allows a maximum of 512 VLAN interfaces. On the Interface and DHCP Server page, you can
set IP addresses and DHCP servers for VLAN interfaces.
ி IP Address of VLAN Interface
Each IP address of a VLAN interface is a management IP address of the AC. You can use them to log in
to the web UI of theAC.
The IP address of a VLAN interface is also used to communicate with devices that are in the same VLAN
network with the interface. For example, a switch is connected to a VLAN interface of the AC and the IP
address of the switch is 192.168.0.1/24. To enable the AC and the switch communicate with each other,
you can set an IP address in the network segment 192.168.0.0/24 for the VLAN interface.
ி DHCP Server of VLAN Interface
You can enable the DHCP server of a VLAN interface to assign IP addresses, subnet mask, gateway,
and DNS address to APs or users connected to the VLAN interface.
1.2.2 Configuring Interface and DHCP Server
The AC provides one default interface and DHCP server rule. See the following figure.
Creating an Interface and DHCP Server Rule
1. Log in to the web UI of the AC and go to Network Setting > Network Setting > Interface and
DHCP Server.
2. Click Add.
3. Configure the parameters in the window.
4. Click Save.

15
Parameter Description
Parameter
Description
VLAN Interface
Select the VLAN interface to which the rule is to be applied.
IP Address
Set an IP address for the VLAN interface. The users belonging to the same VLAN network with the
interface can use the IP address to log in to the web UI of the AC to manage the AC.
The AC supports creating a maximum of 32 IP addresses for each VLAN interface. For each rule of
interface and DHCP server, you can enable the DHCP server to assign IP addresses to users or
APs, or disable the DHCP server.
Subnet Mask
Set the subnet mask for the VLAN interface. It is used to specify the network segment of the VLAN
interface.
DHCP Server
Enable or disable the DHCP server of the VLAN interface. If you enable the DHCP server, set the
following parameters. When you disable the DHCP server, skip the following parameters.
The DHCP server parameters are described as follows.

16
Parameter Description
Parameter
Description
Assign IP to
Specify whether you want the DHCP server to assign IP addresses to users or APs.
AP: The DHCP server only assigns IP addresses to IP-COM fit APs.
User: The DHCP server only assigns IP addresses to users instead of IP-COM fit APs.
You are recommended to enable at lease one DHCP server for assigning IP addresses toAPs.
Other DHCP servers on the network may also assign IP addresses to APs. If so, to make the AC
manage the APs, ensure that the route between the IP address of the VLAN interface and the
IP address of the APs are reachable.
Remark
Set a description for the DHCP server.
Gateway
Set the gateway IP address assigned to users or APs by the DHCP server.
If you already configure WAN interfaces and internet settings on the AC, you can set the gateway IP
address as the IP address of the VLAN interface to ensure the internet connectivity for users.
Otherwise, set the gateway as the LAN IP address of the upstream router.
Primary DNS
Set the primary DNS address assigned to users or APs by the DHCP server.
To ensure that users or APs can access the internet, the DNS address must be a correct DNS server

17
Parameter
Description
address or a DNS proxy server address.
Do not set the DNS IP address as the IP address of the VLAN interface of the AC, because the
AC without WAN interface settings is not a DNS proxy.
Secondary DNS
(Optional) Set the secondary DNS address assigned to users or APs by the DHCP server. You can
keep this value blank.
Start IP
The start IP address of the IP address pool of the DHCP server.
End IP
The end IP address of the IP address pool of the DHCP server.
The start and end IP addresses must belong to the network segment of the IP address of the
VLAN interface.
Lease Time
Set the effective period of IP addresses assigned to DHCP clients (users or APs) by the DHCP
server.
When half of the lease time elapses, the DHCP client sends a DHCP request to the DHCP server to
extend the lease expiration time. If the request succeeds, the expiration time is extended. Otherwise,
the client sends the request again when 87.5% of the lease time elapses. If the second request
succeeds, the expiration time is extended. Otherwise, the client must request an IP address from the
DHCP server after the lease time expires.
When the expiration time elapses, if the client does not send a DHCP request, the DHCP server
releases the IP address.
Collision Detect
If the function is enabled, before assigning an IP address, the DHCP server checks whether the IP
address is in use.
If no, the DHCP server assigns the IP address to a DHCP client. If yes, the DHCP server checks the
availability of other IP addresses until finding an available IP address.
AP MAC Binding
Enabling this function can avoid ARP deception.
If this function is enabled, the AC only saves valid APs’ MAC addresses to its ARP table and drops
other MAC addresses. In this way, the AC avoids ARP deception and ensures proper communication
over the network.
End: After the configuration is complete, you can choose Network Setting > Network Setting >
Interface and DHCP Server to view the information. See the following figure.

18
Modifying an Interface and DHCP Server Rule
1. Log in to the web UI of the AC and go to Network Setting > Network Setting > Interface and
DHCP Server.
2. Find the item to be modified, click .
3. Modify the parameters, except "VLAN Interface", in the window.
4. Click Save.
Deleting an Interface and DHCP Server Rule
1. Log in to the web UI of the AC and go to Network Setting > Network Setting > Interface and
DHCP Server.
2. Find the item to be modified, click .
The default IP address can be deleted. If you delete the default IP address, use other IP addresses to manage
the AC.

19
1.2.3 Example of Interface and DHCP Server
Networking Requirement
The AC has succeeded in managing the APs. The users connected to the APs need to obtain IP
addresses from the AC to access the internet.
Assumption:
Before the configuration, the APs have no management VLAN ID. The SSID policy of the APs
uses the centralized forwarding mode.
The LAN IP address of the router is 192.168.100.50.
The router is a DNS proxy server.
All users belong to VLAN 100.
Network Topology
Internet
Router
Switch
User