LEGRAND Dual band Access Point User manual

Dual band Access Point
802.11a/b/g
www.legrand.fr
USER
GUIDE

Contents
1.1 / HOW TO ACCESS THE WEB-BASED INTERFACE p. 4
1.2 / CONFIGURATION PASSWORD INPUT p. 5
1.3 / CONFIGURATION WIZARD p. 6
1.4 / ACCESS POINT OVERVIEW p. 7
1.5 / IP ADDRESS p. 8
1.6 / ADMINISTRATION PASSWORD p. 9
1.7 / FIRMWARE MANAGEMENT p. 10
1.8 / CONFIGURATION MANAGEMENT p. 11
1.9 / REBOOT / FULL RESET p. 12
1.10 / MANAGEMENT INTERFACE p. 13
1.11 / SNMP, UPNP & SYSLOG p. 14
1.12 / TIME SETTINGS p. 16
1.13 / ETHERNET INTERFACE p. 18
1.14 / RADIO SETTINGS p. 19
1.15 / WIRELESS NETWORK p. 21
1.15.1 / WIRELESS NETWORK / SECURITY/Open p. 24
1.15.2 / WIRELESS NETWORK / SECURITY/Static WEP p. 25
1.15.3 / WIRELESS NETWORK / SECURITY/WEP with 802.1x p. 26
1.15.4 / WIRELESS NETWORK / SECURITY/Static WPA p. 27
1.15.5 / WIRELESS NETWORK / SECURITY WPA with 802.1x p. 28
1.15.6 / WIRELESS NETWORK / SECURITY/Static WPA2 p. 29
1.15.7 / WIRELESS NETWORK / SECURITY/WPA2 with 802.1x p. 30
1.15.7 / WIRELESS NETWORK / SECURITY/Static WPA or WPA2 p. 31
1.15.8 / WIRELESS NETWORK / SECURITY/WPA or WPA2 with 802.1x p. 32
1.15.9 / WIRELESS NETWORK / GUEST ACCESS p. 33
1.16 / RADIUS SETTINGS p. 34
GLOSSARY p. 36

Introduction
The Access Point’s Back Panel
The Access Point’s port (where an uplink
network cable is connected) is located on the
Access Point’s back panel, the power is
supplied by power over Ethernet (802.3af
standard).
The Access Point’s Front Panel
User port: This LAN (Local Area Network
100 base T) port allows to connect other
Ethernet network devices, such as a
computer, a hub, switch, router, printer, etc.
Reset Button: This button has two uses:
Short press will reboot the AP
Long press (more than 5 seconds) will reset
the AP to its factory defaults (blue Leds will
flash)
Green Power LED: The Power LED lights up
when the Access Point is powered on.
Blue Radio LEDs: The radio LED light up
when the radio is active.

4
USER GUIDE FOR LEGRAND DUAL
BAND WIRELESS ACCESS POINT
1.1 / HOW TO ACCESS THE WEB-BASED INTERFACE
The list will show you all the Legrand Access Points in your installation.
Select one Access Point and click on connect to access the web configuration interface.
1. You have a computer running Windows XP
Check if the UPnP protocol is activated on
your computer. Otherwise follow this
procedure:
- Click on the Start Menu->Settings->Control
Panel
- Click “Add or Remove Programs” in Control
Panel.
- Click “Add/Remove Windows Components”.
- In the Components list, select the Networking
Services entry, and then click Details.
- Make sure the Universal Plug and Play
check box is selected. And click on OK, then
Next until the installation is complete.
UPnP is now activated on your computer,
when clicking on the Network Neighbourhood
icon on your desktop, a window will display the
Legrand Access Points discovered using
UPnP.
Double click on one Access point to access the web configuration interface.
2. You have a computer running a different Windows version, MAC, Linux,
Unix or other
Use the CD ROM to launch the Legrand
Control point discovery utility.
Insert THE CD-ROM SUPPLIED WITH THE
ACCESS POINT. This CD provides the tools
needed to configure your wireless network.
The main menu will be displayed automatically
on your screen. If the main menu does not
appear automatically, browse the contents of
the CD-ROM and doubleclick on the file
“setup.exe”.

5
On the first connection to the management web interfaces, or after a full reset, no password
will be prompted to configure the Access Point; it is highly recommended to protect your
Legrand Access Point using a password, in which case access to the management web
interfaces will be subject to prior authentication. The Login will then be “admin”, and the
password will have to match with the one previously configured.
1.2 / CONFIGURATION PASSWORD INPUT
USER GUIDE FOR LEGRAND DUAL
BAND WIRELESS ACCESS POINT
Caution
Depending on your webbrowser, a
“Remember my password” dialog box may
be presented to you when the management
web interfaces are password-protected.
Enabling this option means your browser
will fill in the password automatically for you
for all subsequent connections to the
management web interfaces.
Do not check the option Remember my
password if other people have access to
your PC, or they could modify the Access
Point configuration without having to provide
the configuration password.

6
This page offers a quick access to the main security features of your Access Point.
When your configuration is done, the
connection between your computer and the
Access Point will be interrupted.
In order to restore your computer’s wireless
connectivity, you will need to apply the same
encryption and key to your PC’s wireless
connection settings.
At this stage your AP is secured and ready
to use, if you need to modify advanced
parameters use the left menu of the web
interface.
1.3 / CONFIGURATION WIZARD
USER GUIDE FOR LEGRAND DUAL
BAND WIRELESS ACCESS POINT
First enter the network name (SSID) of your
choice.
In the field choose your WPA Key select a
wireless key (at least 8 characters long), this
will have to be entered on all wireless devices
to connect to the wireless network.
In the field choose a new admin password
enter the password of your choice.
This password will be required to modify the
configuration of your Access Point.
Click on Apply & Save to update and save
this configuration.
By using this quick setup page, your Access
Point is configured with the Static WPA or
WPA2 encryption method (using the key
provided).
When you tick Add a guest access limited
to an Internet access, you can define a
nonsecure wireless network but this network
will only enable access to the Internet.
Use the Choose the Guest Access network
name (SSID) field to give a name to your
limited-access network.

7
1.4 / ACCESS POINT OVERVIEW
USER GUIDE FOR LEGRAND DUAL
BAND WIRELESS ACCESS POINT
The screen provides an overview of the Legrand AP main information.
AP Name This name will identify your Access Point (i.e. it is shown in the
discovery utility)
Uptime Shows how long the Legrand AP has been running since its
last reboot/power on
VLAN Status of VLAN trunking Enabled/Disabled
802.11bg Radio Status of the 2.4GHz band radio Enabled/Disabled
802.11a Radio* Status of the 5GHz band radio Enabled/Disabled
Connected Users List of currently connected Wireless clients
Definition of RUNNING CONFIGURATION & STARTUP CONFIGURATION
In each configuration web interface, changes
have to be activated using the “Apply” button.
This will make the changes effective on the
Access Point.
In order to store the settings for the next
reboot you have to press the Save button.
This allows the user to test the configuration
(making changes and pressing the Apply
buttons on the relevant pages), and only to
press the Save button when the configuration
is satisfactory.
All the settings that are active while the Save
button is pressed will survive a reboot.
* Only for Dual band Access point.

8
1.5 / IP ADDRESS
USER GUIDE FOR LEGRAND DUAL
BAND WIRELESS ACCESS POINT
AP Name
This name will help you to identify your
Access Point.
Allow management access on VLAN
All management/configuration access to the
AP can be restricted to a specific VLAN on
the uplink port.
By default, VLANs are disabled, and access
to the management interface is allowed from
any interface.
If needed, one VLAN on the uplink port can
be selected as the only way to access the
management interface (VLANs must first be
enabled to do so, see the Ethernet Interface
section).
Note: if VLANs are enabled you can restrict
management/configuration access to a
specific VLAN ID or to the native VLAN.
Dynamically retrieve an IP address (DHCP)
You can either use Dynamic (DHCP) or Static
(use the following IP address) IP addressing
for the AP management.
By default or after a full reset, the Access
Point is set to use DHCP.
Enable AUTO-IP
If Enable Auto-IP is checked, the AP will fall
back to Auto-IP addressing mode
(169.254.0.0/16) if no DHCP server can be
found on the network.
Use the following IP address
(An IP address must be unique in your
network. Netmask, Default Gateway and
DNS Server, values can be safely copied
from a computer already configured with static
IP addressing in your network)
IP Address: Type in the static IP address for
your Access Point.
Netmask: Type in the IP Netmask for your
network.
Default Gateway: Type in the default
gateway IP address (used for any traffic
beyond the local network).
DNS Server: Type in your DNS IP address
(optional).
After changing settings on this page, click the
Apply button to validate your changes and
click the Save button to keep your changes
for future reboots.

9
USER GUIDE FOR LEGRAND DUAL
BAND WIRELESS ACCESS POINT
1.6 / ADMINISTRATION PASSWORD
This page allows you to change the Access Point’s configuration password.
Enter the new password into the two fields, and click the Apply button to apply your changes.
Important:
Restoring the Access Point’s factory defaults
will erase your Password settings. No
password will be prompted for the web
interface after a factory defaults reset.

10
1.7 / FIRMWARE MANAGEMENT
USER GUIDE FOR LEGRAND DUAL
BAND WIRELESS ACCESS POINT
The field Current firmware version shows the firmware version running on your Legrand AP.
The firmware upgrade webpage displays the
Access Point’s current firmware version.
Before upgrading the Access Point’s
firmware, be sure to download the latest
firmware from Legrand website
http://www.wifi.legrandelectric.com.
Press the Browse button to select a firmware
file on your computer.
Then, click the Upgrade button to upgrade
the firmware.
This process takes about 5 or 6 minutes.
Note: When upgrading the firmware, you must not interrupt the Web browser or power down
your Access Point.

11
1.8 / CONFIGURATION MANAGEMENT
USER GUIDE FOR LEGRAND DUAL
BAND WIRELESS ACCESS POINT
Saving and Retrieving the Configuration
The Access Point settings are stored on
the AP.
This configuration can be backed up on
the administrator’s computer as a text file
(Backup button).
At a later stage, this file can then be restored
to the AP from the user’s computer (click on
Browse to locate the file, then on the Restore
button).

1.9 / REBOOT / FULL RESET
Important:
Restoring the Access Point’s factory defaults
will erase all of your settings (Password,
Security Encryption, Wireless and LAN
settings, etc.), and replace them with the factory
defaults (see Administration password section).
Default Config
To restore the Access Point’s factory default
settings, click the Factory Defaults button
(this is equivalent to performing a long press
on the reset button.
Reboot Device
Click on this button to reboot the AP.
Any changes since the last Save will be lost,
all wireless connections will be terminated
during the reboot (this is equivalent to
performing a short press on the reset button). 12
USER GUIDE FOR LEGRAND DUAL
BAND WIRELESS ACCESS POINT

1.10 / MANAGEMENT INTERFACE
13
USER GUIDE FOR LEGRAND DUAL
BAND WIRELESS ACCESS POINT
This page allows you to control the enabling/disabling of various methods to configure the
Access Point:
HTTP only: enables management via the web management interface (standard unencrypted
HTTP communication).
HTTPS only: enables management only via a secured web management interface (SSL
encrypted HTTP communication).
HTTP or HTTPS: enables management via either HTTP or HTTPS.
The Allow remote support from host field allows to specify a machine that will connect to this
device for support purposes. In order for this connection to be activated, press the
corresponding Start button, which will enable support connections for 10 minutes after the
button is pressed.

1.11 / SNMP, UPNP & SYSLOG
SNMP
To enable SNMP (remote network
monitoring), click on Enable SNMP.
Disable SNMP will be selected by default
(after a factory default reset).
In the System Location and Contact fields,
specify a location and administration contact
details that will be displayed by the remote
SNMP console.
The Community for read only access and
Community for read/write access settings
allow controlling SNMP access respectively in
read and read/write to the AP.
UPnP
To allow the AP to announce itself to the
network using UPnP, select Enable UPnP.
By default, the UPnP is enabled to allow you
to use Legrand Control Point Discovery
Utility.
Syslog
To enable system logging, click the Enable
Syslog button (enabled by default).
If you have chosen to remotely monitor the
Access Point’s system logs, check enable
Network Report and select the monitoring
equipment machine’s IP address and UDP
port in the field Syslog Server IP Address
and Syslog Server Port respectively.
After changing settings on this page, click the
Apply button to validate your changes and
click the Save button to save your changes
for future reboots.
14
USER GUIDE FOR LEGRAND DUAL
BAND WIRELESS ACCESS POINT

Show Log
Click the Show Log button to see the 20 last logs or click Download full log file button to
retrieve all logs (see below) since the last reboot.
15
USER GUIDE FOR LEGRAND DUAL
BAND WIRELESS ACCESS POINT

1.12 / TIME SETTINGS
Time Zone
In the menu change the time zone where your AP is located.
If your location does not appear in this list, select a location in the same time zone.
The default is GMT.
Configuration method
You can choose between two modes to adjust
the time on your AP: Use NTP server or
Manually.
- If you select Use NTP server, the Legrand
AP will automatically sync to UTC/GMT time
from the NTP server of your choice in the field
NTP server.
Over time, a device’s clock is prone to drift.
The Network Time Protocol (NTP) is one way
to ensure your clock stays accurate.
- If you select Manually, you will need to
manually adjust the current date/time (See
figure on next page). However, in this case the
time will be lost after a reboot.
16
USER GUIDE FOR LEGRAND DUAL
BAND WIRELESS ACCESS POINT

After changing settings on this page, click the Apply button to validate your changes and click
the Save button to save your changes for future reboots.
17
USER GUIDE FOR LEGRAND DUAL
BAND WIRELESS ACCESS POINT

1.13 / ETHERNET INTERFACE
By selecting Enable VLAN, you can activate
802.1q VLAN trunking on the uplink Ethernet
interface.
The default value is Disable VLAN, which will
not use any VLAN tagging on the uplink
interface.
In order to achieve a sufficient security level,
VLANs should be used to isolate traffic when
several network names (SSIDs) are activated
on the same radio.
Selecting Enable User Port activate the front
Ethernet port.
Associate to VLAN: If the front Ethernet port
is associated to a VLAN you can restrict the
traffic from/to the front Ethernet port to a
specific VLAN ID or to the native VLAN.
After changing settings on this page, click the
Apply button to validate your changes and
click the Save button to save your changes
for future reboots.
18
USER GUIDE FOR LEGRAND DUAL
BAND WIRELESS ACCESS POINT

19
USER GUIDE FOR LEGRAND DUAL
BAND WIRELESS ACCESS POINT
1.14 / RADIO SETTINGS
Note: The available channels supported by the wireless products depend on the country
(regulation) where they are installed.
For example, Channels 1 to 11 are supported in the U.S. and Canada, Channels 1 to 13 in
Europe and Australia and 1 to 14 in Japan.
The Legrand AP integrates two wireless
radios* in order to create two overlaid
networks (802.11b/g on 2.4GHz and 802.11a
on 5 GHz).
Each radio can be enabled/disabled
independently (Radio status field).
The following settings are available for each
radio:
- The radio transmit power can be adjusted
on each radio (Transmit power field).
- The preamble type can be adjusted using
the Preamble Field (recommended value
Auto).
The b/g radio can act as an 802.11 b only, an
802.11g only or an 802.11b/g mixed (default)
network.
The Operating mode allows to select the
compatibility mode for the 2.4GHz radio.
* Only for Dual band Access point.

20
USER GUIDE FOR LEGRAND DUAL
BAND WIRELESS ACCESS POINT
802.11a Wireless Channels
In a wireless network, it is the AP that selects
the channel on which all radio transmissions
will be performed.
After changing settings on this page, click the
Apply button to validate your changes and
click the Save button to save your changes
for future reboots.
802.11b/g Radio Frequency Channels
Channel Frequency
1 2.412 GHz
2 2.417 GHz
32.422 GHz
4 2.427 GHz
5 2.432 GHz
6 2.437 GHz
7 2.442 GHz
8 2.447 GHz
9 2.452 GHz
10 2.457 GHz
11 2.462 GHz
12 2.467 GHz
13 2.472 GHz
14 2.484 GHz
Channel Frequency
36 5.180 GHz
40 5.200 GHz
44 5.220 GHz
48 5.240 GHz
52 5.260 GHz
56 5.280 GHz
60 5.300 GHz
64 5.320 GHz