LEGRAND DA1101 User manual

- i -
Wireless Access Point – N
(P/N DA1101)
Owner’s Manual
1308137 Rev. B

- ii -
Federal Communications Commission Statement
This device complies with Part 15 of the FCC Rules and RSS-210 Issue 8 of Canada. Operation is
subject to the following two conditions:
• This device may not cause harmful interference, and
• This device must accept any interference received, including interference that may cause
undesired operation.
This equipment has been tested and found to comply with the limits for a class B digital device,
pursuant to Part 15 of the Federal Communications Commission (FCC) rules. These limits are
designed to provide reasonable protection against harmful interference in a residential installation.
This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used
in accordance with the instructions, may cause harmful interference to radio communications.
However, there is no guarantee that interference will not occur in a particular installation. If this
equipment does cause harmful interference to radio or television reception, which can be determined
by turning the equipment off and on, the user is encouraged to try to correct the interference by one or
more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver is
connected.
• Consult the dealer or an experienced radio/TV technician for help.
Reprinted from the Code of Federal Regulations #47, part 15.193, 1993. Washington DC: Office of the Federal Register,
National Archives and Records Administration, U.S. Government Printing Office.
Canadian Department of Communications
This digital apparatus does not exceed the Class B limits for radio noise emissions from digital
apparatus set out in the Radio Interference Regulations of the Canadian Department of
Communications.
This Class B digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la classe
B est conforme à la norme NMB-003 du Canada.
FCC Radio Frequency Exposure Caution Statement
In order to maintain compliance with the FCC RF exposure guidelines, this equipment should be
installed and operated with minimum distance 20cm between the radiator and your body. Use only
with supplied antenna. Unauthorized antenna, modification, or attachments could damage the
transmitter and may violate FCC regulations. Any changes of modifications not expressly approved by
the grantee of this device could void the users authority to operate the equipment.
Installation and use of this Wireless LAN device must be in strict accordance with the instructions
included in the user documentation provided with the product. Any changes or modifications (including
the antennas) made to this device that are not expressly approved by the manufacturer may void the

- iii -
user’s authority to operate the equipment. The manufacturer is not responsible for any radio or
television interference caused by unauthorized modification of this device, or the substitution or
attachment of connecting cables and equipment other than manufacturer specified. It is the
responsibility of the user to correct any interference caused by such unauthorized modification,
substitution or attachment. Manufacturer and its authorized resellers or distributors will assume no
liability for any damage or violation of government regulations arising from failing to comply with these
guidelines.
This device and its antenna(s) must not be co-located or operating in conjunction with any
other antenna or transmitter.
Declaration of Conformity (R&TTE directive 1999/5/EC)
The following items were completed and are considered relevant and sufficient:
• Essential requirements as in [Article 3]
• Protection requirements for health and safety as in [Article 3.1a]
• Testing for electric safety according to [EN 60950]
• Protection requirements for electromagnetic compatibility in [Article 3.1b]
• Testing for electromagnetic compatibility in [EN 301 489-1] & [EN 301]
• Testing according to [489-17]
• Effective use of the radio spectrum as in [Article 3.2]
• Testing for radio test suites according to [EN 300 328-2]
WARNING: TO PREVENT FIRE OR SHOCK HAZARD, DO NOT EXPOSE THIS PRODUCT TO
RAIN OR MOISTURE. THE UNIT MUST NOT BE EXPOSED TO DRIPPING OR SPLASHING
WATER.
CAUTION: DO NOT OPEN THE UNIT. DO NOT PERFORM ANY SERVICING OTHER THAN THAT
CONTAINED IN THE INSTALLATION AND TROUBLESHOOTING INSTRUCTIONS. REFER ALL
SERVICING TO QUALIFIED SERVICE PERSONNEL.
CAUTION: THIS DEVICE MUST BE INSTALLED AND USED IN STRICT ACCORDANCE WITH
THE MANUFACTURER’S INSTRUCTIONS AS DESCRIBED IN THE USER DOCUMENTATION
THAT COMES WITH THE PRODUCT.
WARNING: POSTPONE INSTALLATION UNTIL THERE IS NO RISK OF THUNDERSTORM OR
LIGHTNING ACTIVITY IN THE AREA.
When using this device, basic safety precautions should always be followed to reduce the risk of fire,
electric shock and injury to persons, including the following:
•Read all of the instructions {listed here and/or in the user manual} before you operate this
equipment.
•Give particular attention to all safety precautions.

- iv -
•Retain the instructions for future reference.
•Comply with all warning and caution statements in the instructions.
•Observe all warning and caution symbols that are affixed to this equipment.
•Comply with all instructions that accompany this equipment.
•Avoid using this product during an electrical storm. There may be a risk of electric shock from
lightning. For added protection for this product during a lightning storm, or when it is left
unattended and unused for long periods of time, unplug the power supply, and disconnect the Cat
5e to the N-WAP at the POE Inserter. This will prevent damage to the product due to lightning and
power surges. It is recommended that the customer install an AC surge protector in the AC outlet
to which this device is connected. This is to avoid damaging the equipment by local lightning
strikes and other electrical surges. A Data Surge Conditioning Unit is also available from Legrand
(P/N 364598-01) to help protect the data connection from the POE Injector to the N-WAP.
•Operate this product only from the type of power source indicated on the product’s marking label.
•If you are not sure of the type of power supplied to your home, consult your dealer or local power
company.
•Upon completion of any service or repairs to this product, ask the service technician to perform
safety checks to determine that the product is in safe operating condition.
Installation of this product must be in accordance with national wiring codes and conform to local
regulations.
Place POE Inserter to allow for easy access when disconnecting the power cord/adapter of the device
from the AC wall outlet.
Wipe the unit with a clean, dry cloth. Never use cleaning fluid or similar chemicals. Do not spray
cleaners directly on the unit or use forced air to remove dust.
When not utilizing the recommended 3-gang or 1-gang plastic switch & outlet box, do not directly
cover the device, or block the airflow to the device with insulation or any other objects.
Keep the device away from excessive heat and humidity and keep the device free from vibration and
dust.

- v -
TABLE OF CONTENTS
Chapter 1 Introduction ....................................................................................................................... 1
Overview ...................................................................................................................................... 1
Package Content ......................................................................................................................... 1
Physical Details ........................................................................................................................... 1
Chapter 2 Physical Installation.......................................................................................................... 3
Physical Installation Steps.......................................................................................................... 3
Chapter 3 Network Settings............................................................................................................... 4
Configuring and monitoring your DA1101 from web browser ................................................. 4
Using the DA-Discovery.exe program for configuration of the DA1101 .................................... 4
Running the Setup Wizard / Default AP Mode Overview.......................................................... 6
Operation Mode Selection........................................................................................................... 8
Client Mode Overview.............................................................................................................. 8
Repeater Mode Overview .......................................................................................................11
LAN Interface Setup............................................................................................................... 12
WAN Interface Setup ............................................................................................................. 13
DHCP Client ................................................................................................................... 14
Static IP .......................................................................................................................... 15
PPPoE............................................................................................................................ 16
PPTP.............................................................................................................................. 17
L2TP............................................................................................................................... 18
Chapter 4 Firewall............................................................................................................................. 20
Port Filtering .......................................................................................................................... 20
IP Filtering.............................................................................................................................. 21
MAC Filtering ......................................................................................................................... 22
Port Forwarding ..................................................................................................................... 23
URL Filtering .......................................................................................................................... 24
DMZ....................................................................................................................................... 25
VLAN ..................................................................................................................................... 26
Chapter 5 Wireless Settings ............................................................................................................ 27
Basic Settings ........................................................................................................................ 27
Advanced Settings ................................................................................................................. 30
Security Setup........................................................................................................................ 32
Access Control....................................................................................................................... 35
WDS Settings......................................................................................................................... 36
Site Survey ............................................................................................................................ 36
Wireless Schedule ................................................................................................................. 37

- vi -
Chapter 6 Management .................................................................................................................... 38
Status..................................................................................................................................... 38
Statistics................................................................................................................................. 39
DDNS..................................................................................................................................... 39
Time Zone Setting.................................................................................................................. 40
Denial-of-Service ................................................................................................................... 41
Log......................................................................................................................................... 42
Upgrade Firmware ................................................................................................................. 43
Save / Reload Settings........................................................................................................... 43
Password Setup..................................................................................................................... 44
Chapter 7 QoS................................................................................................................................... 45
Enable QoS ........................................................................................................................... 45
QoS Rule Setting ................................................................................................................... 46
Chapter 8 Route Setup ..................................................................................................................... 47
Dynamic Route ...................................................................................................................... 47
Static Route ........................................................................................................................... 48
Appendix A Frequently Asked Questions .........................................................................................A
Appendix B DA1101 Specifications...................................................................................................B
Appendix C DA1101 Utility Program .................................................................................................C
Appendix D Manual logon to DA1101 for configuration ..................................................................D
Appendix E DA1101 Mounting Information & Best Practices.......................................................... E

- 1 -
Chapter 1
Introduction
Overview
Integrating the cutting edge of Internet Telephony and Access Point manufacturing experience, Legrand
now introduces the latest member of our Wireless Access Point family: the DA1101 N-WAP.
The N-WAP provides high-performance Access Point (AP) function for flexible wireless communication.
With built-in IEEE 802.11b/g/n wireless network capability, the N-WAP allows any computer and wireless
enabled network client connect to it without additional cabling. The 802.11n wireless capability gives
users the highest speed of wireless experience ever. With an 802.11n compatible wireless adapter
installed in your PC, the files can be transferred at up to 300Mbps. The radio coverage is also doubled to
offer the high speed wireless connection in an even wider space of your office or house.
To secure the wireless communication, the N-WAP supports most up-to-date encryption: WEP, WPA-
PSK and WPA2-PSK. In addition, the N-WAP supports WPS configuration with PBC/PIN type for users
to connect to a secured wireless network easily.
Product Features
IEEE 802.11b/g/n wireless standard compliant
Multi-mode: AP, Client, Repeater and Router Mode
Supports 64/128-bit WEP, WPA, WPA-PSK, WPA2, WPA2-PSK and 802.1x encryption
Package Content
The contents of your product package should include the following items:
DA1101 802.11n Wireless Access Point
POE Module w/AC adapter
Installation Bracket
Round and Rectangular Cover
Installation/Instruction Sheet
A CD containing this manual and a utility (PC-based .exe file) used to find the N-WAP’s IP address
given to it by the router it is attached to (AP Mode). See Appendix C for more detail.
Physical Details
The following figure illustrates the 3-gang (round) and 1-gang (rectangular) versions of an installed
DA1101 N-WAP. For additional mounting information and best practices suggestions, refer to Appendix
E.

- 2 -
LED Indicators:
Reset Button:
The DA1101 has a reset button accessible through either cover or with the cover off that can be pushed
and held for 10 seconds to reset the DA1101 to factory default condition (the IP address is reset to
192.168.40.253). To find the IP address of an installed and working N-WAP, run the utility program
provided on the CD included with the product (see Appendix C).
LED Color State Descriptions
Ethernet Green Solid Green
Blinking Green
Power Present
Ethernet Active
Power Blue/Orange
Blue
Solid Orange
Blinkin
g
Oran
g
e
Power OK
Initializing
Si
g
nal Surve
y
WiFi Green/Red
Solid Green
Blinking Green
Red
Connected
Streaming in Session
No WiFi Signal
LED Indicators
Reset Button
Reset Button
Access
LED Indicators

- 3 -
Chapter 2
Physical Installation
Physical Installation Steps
This chapter illustrates the physical installation of the DA1101 Wireless Access Point –N.
1. Run a Category 5 cable from the triple-gang or single-gang
electrical box at the intended DA1101 room location to the
POE module located in the structured wiring enclosure.
2. Make sure that the Power Supply is not connected to the
POE module at this time.
3. Pull the Category 5 cable out from the electrical box through
the supplied triple-gang or modified into a single-gang
bracket and attach the bracket to the associated electrical
box with the supplied screws.
4. Terminate the Cat 5 cable with an RJ45 plug and
connect it to the RJ45 jack on the DA1101. The DA1101
is then snapped into the mounting bracket by first
inserting the two tabs on one end into the slots on the
bracket and tilting it until it is flush with the bracket,
where it should snap into place.
5. If this is a triple-gang installation, line the feet on the
triple gang bracket up with the indentions inside the
round cover, and snap that cover in place. There is a
protrusion inside the round cover that allows it only to be
installed in the correct orientation. If this is a single-gang
installation, simply hang the top of the rectangular cover
on the single-gang bracket and tilt the cover to snap it
into place.
6. In the enclosure, terminate the other end of the Cat 5
cable from the DA1101 with an RJ45 plug and connect it
to the POE output RJ45 jack. A Cat 5 jumper is run from
the POE input jack to a local router port.
7. Plug the power supply into the POE module and into an
AC outlet, and refer to the next chapter for software
configuration and operation information.
slots
Single-gang bracket
RJ45 jack
Triple-gang bracket


Power in from AC adapter
Cat 5 to N-WAP
Cat 5 to router

- 4 -
Chapter 3
Network Settings
Configuring and monitoring your DA1101 from web browser
The DA1101 integrates a web-based graphical user interface that can cover most configurations and
machine status monitoring. Via a standard web browser, you can configure and check machine status
from anywhere around the world.
NOTE: The DA1101 is designed as a DHCP device, which means it automatically gets an IP
address from the router it is attached to. It is defaulted to AP mode (meaning it acts as a
wireless Access Point for wireless devices around the home, like laptops) and those devices
also get their IP address from the router that the DA1101 is attached to. No configuration is
required for basic operation.
WARNING: By default, there is no security configured, which means anyone within range (even
outside your home) can access your internet connection. To restrict access (configure
security) or operate in a different mode other than AP, you must log onto your DA1101. To do
this you must know its IP address, and we have provided a utility program for you to find the
DA1101’s IP address.
Using the DA-Discovery.exe program for configuration of the DA1101
The executable file “DA-Discovery.exe” is found on the CD provided with this product, and should be
copied onto the desktop (or a known location) on the PC normally used for N-WAP configuration.
With the PC set for DHCP (TCP/IP Settings), and connected to the router used for the N-WAP, simply
run (double click) the utility program and the screen shown below will appear.

- 5 -
Click on the “Refresh” button, and the screen will be updated to show the IP addresses of all devices
attached to the router, including the DA1101.
To configure the N-WAP simply highlight the DA1101 that you wish to connect to and click on the
“Connect to Device” button and you will be shown the logon screen shown below.
Simply type in “admin” for the logon and “admin” for the password to logon to the DA1101.
NOTE: If you are not attached to a router which provides you with an IP address, you may still
manually logon to the DA1101 by performing the steps show in Appendix D, and if successful
will end up at the same logon screen shown above.
When you successfully logon, you’ll be shown a screen where you can run the Setup Wizard, or opt to
select a different function on the left side of the screen for manual setup. First, we’ll go through the
simple Setup Wizard for AP Mode.

- 6 -
Running the Setup Wizard / Default AP Mode Overview
The N-WAP automatically powers up in AP (Access Point) Mode, which is the default mode
where the N-WAP is attached to a router, like our DA1004. The router then provides DHCP
addressing (IP addresses) to any wirelessly connected devices (PCs).
In this AP Mode, the router acts as the DHCP server, so if its IP address is say 192.168.40.254, it will
give out IP addresses to all DHCP configured wireless devices in that 192.168.40.xxx sub network,
including the DA1101 and all wirelessly attached PCs.
Select the Setup Wizard on the left side of the screen and by clicking on Next on the Setup Wizard
screen shown below, you will then name your N-WAP and setup its security.

- 7 -
Step 1. Set Wireless Network Name (SSID), and then click Next>>.
Step 2. Select Wireless Security Mode.
NOTE: If you elect to select “None” for security as shown above, anyone within range of your
N-WAP will be able to gain access to your network connection. See Chapter 5 “Wireless
Settings” for a detailed overview of setting up security on the N-WAP.
Step 3. Click the Finished button. You will then see the Finish page as shown below.
The DA1101 will reboot automatically to make your configuration take effect and finish the Setup.

- 8 -
Operation Mode Selection
Besides AP Mode, there are three other Operational Modes that the N-WAP can be configured to
support; Client Mode, Repeater Mode and Router Mode. Since most customers have a router already,
and since we also sell a router (the DA1004), this manual will not cover that infrequently used mode.
To get to the other modes, select “Operation Mode” from the left side of the screen and you’ll see the
following screen:
NOTE: Repeater Mode is not selected from the Operation Mode screen, as it is a functional
superset of the Client Mode, and is selected from the “Wireless” “Basic Settings” screen on an
N-WAP which is already in Client Mode, so first, let’s go over the use of Client Mode.
Client Mode Overview
Client Mode is used where a second DA1101 N-WAP is configured as a wireless remote client of
the original N-WAP and connects directly to a LAN or PC (no wireless devices), while the original
N-WAP connects to the router as in AP Mode. This could be useful if you have one or more PCs
without wireless interfaces in a location within wireless range of your first N-WAP, but not easily
hardwired to the original N-WAP location (ie. a boathouse or guard shack).

- 9 -
In this Client Mode, as in AP Mode, the router acts as the DHCP server, so if its IP address is say
192.168.40.254, it will give out IP addresses to all DHCP configured wireless devices in that
192.168.40.xxx sub network. The original N-WAP’s default address is 192.168.40.253, assuming no
DHCP server for this example, (the Default Gateway is still the router at 192.168.40.254.), and the
Client N-WAP is configured with an IP address of 192.168.40.252. Its Gateway will still be the router
attached to the first N-WAP at address 192.168.40.254. NOTE: Remember, to find the actual IP
address given to the N-WAP by a router, use the utility program provided on the CD that came
with the N-WAP and which is described in Appendix C.
NOTE: In order to configure the Client (second N-WAP), you’ll need to first logon to its default
address 192.168.40.253, then select its “Operation Mode” as Client. Then after it reboots, go to
the “TCP/IP Settings” “LAN Interface” screen (shown below) and configure its IP address as
192.168.40.252 and its Gateway as 192.168.40.254 and disable DHCP.

- 10 -
You’ll also need to go to the “Wireless” “Basic Settings” screen (shown below), and change the SSID
to something different than what you called the original N-WAP, and change its Network Type to
“Infrastructure”.
You’ll then need to go to the “Wireless” “Site Survey” screen and click “Site Survey” to search for the
original N-WAP. Once you find it, select it (as shown below), and click “Next”.
Then just click on “Connect”. This tells the second N-WAP that he is a Client of the original N-WAP. At
this point, the PC/s attached to the second N-WAP should be able to be configured to get IP
addresses from the router, through the original N-WAP. Also, if you go to “Wireless” “Basic Settings”,
you should notice that the SSID of the second N-WAP has changed to that of the original N-WAP, and
if you go to the original N-WAP “Wireless” “Basic Settings” “Show Active Clients” screen, you should
be able to see the second N-WAP has been connected to the original N-WAP.

- 11 -
Repeater Mode Overview
Repeater Mode (also called Client + AP Mode) is similar to Client Mode, but in this case the
second N-WAP can support wireless devices within range to its location. Effectively, this is a
range expansion of the original N-WAP, by using the second N-WAP as a repeater.
To get to Repeater Mode, your second N-WAP must already be configured in Client Mode (see
previous section), then go to “Wireless” “Basic Settings” and select “Enable Universal Repeater Mode
(Acting as AP and Client simultaneously)”, as shown on the screen below. You’ll also need to fill out
the “SSID of Extended Interface” with the SSID that you gave the second N-WAP.
This completes the overview of the Setup Wizard, and the various Modes that are used by the
DA1101 for typical residential networks.
The following screens provide more detailed information on many of the previously discussed settings
and their associated parameters.

- 12 -
LAN Interface Setup
This page is used to configure the parameters for local area network which connects to the LAN port
of your DA1101. Here you may change the setting for IP address, subnet mask, DHCP, etc..
IP Address LAN IP Address of the DA1101
Default : 192.168.40.253
Subnet Mask LAN mask of the DA1101
Default : 255.255.255.0
DHCP Server You can select Server or Disable. If you select Disable, the
DHCP service of LAN port is disabled.
Default : Server
DHCP Client Range The first and last IP address that DHCP server assigns.
Default : 192.168.40.100 – 192.168.40.200
Static DHCP It allows you reserve IP addresses, and assign the same IP
address to the network device with the specified MAC address
any time it requests an IP address
Default : Disable
Domain Name Set three alternatives Domain Name Server for LAN interface.
Default : Null
802.11d Spanning Tree Spanning Tree Protocol. You can select Enable or Disable.
Default : Disable

- 13 -
WAN Interface Setup
Choose menu “TCP/IP Settings→WAN Interface”, you can configure the IP parameters of the WAN on
the screen below when router mode is enabled.
WAN Access Type
DHCP Client Connections which use dynamic IP address
assignment.
Static IP Connections which use static IP address assignment.
PPPoE Connections which use PPPoE that requires a user
name and password.
PPTP Connections which use a Point-to-Point Tunneling
Protocol (PPTP) connection.
L2TP Connections which use a Layer2 Tunneling Protocol
(L2TP) connection.
Attain DNS Automatically Select to attain DNS automatically from your ISP.
Set DNS Manually
Select to specify your own preferred DNS Server IP address.
The DNS 2 or DNS 3 is optional. You can enter the secondary and the
third DNS Server’s IP address as an alternative of DNS 1.
Clone MAC Address
Your ISP may require a particular MAC address in order for you to
connect to the Internet. This MAC address is the PC’s MAC address
that your ISP had originally connected your Internet to. Type in this
section to replace the WAN MAC address with the MAC address of that
PC.
Enable IGMP Proxy Check to enable the IGMP Proxy function.
Enable Ping Access on
WAN Check to enable the Ping Access on WAN function.
Enable Web Server Access
on WAN Check to enable the Web Server Access on WAN function.
Enable IPsec pass through
on VPN connection Check to enable the IPsec pass through on VPN connection function.
Enable PPTP pass through
on VPN connection Check to enable the PPTP pass through on VPN connection function.
Enable L2TP pass through
on VPN connection Check to enable the L2TP pass through on VPN connection function.
Enable IPv6 pass through
on VPN connection Check to enable the IPv6 pass through on VPN connection function.
Apply Changes After completing the settings on this page, click Apply changes button
to save the settings.
Reset Click Reset to restore to default values.

- 14 -
DHCP Client
If your ISP provides the DHCP service, please choose DHCP Client type, and the Router will
automatically obtain IP parameters from your ISP. You can see the page as follows.
The page includes the following fields:
Object Description
Host Name This option specifies the Host Name of the Router.
MTU Size The default MTU (Maximum Transmission Unit) value is 1492 Bytes. It
is not recommended that you change the default MTU Size unless
required by your ISP.