Linksys LAPAC1750 User manual

LAPAC1750
AC1750 Dual Band Access Point
User's Guide

i
TABLE OF CONTENTS
CHAPTER 1 QUICK START GUIDE ...................................................................................1
Package Contents ..............................................................................................................1
Physical Details..................................................................................................................1
Mounting Guide.................................................................................................................3
CHAPTER 2 ACCESS POINT SETUP..................................................................................4
Overview ............................................................................................................................4
Setup using a Web Browser..............................................................................................4
Setup Wizard.....................................................................................................................6
User Accounts....................................................................................................................9
Time Screen .....................................................................................................................10
Log Settings Screen.........................................................................................................11
Management Access Screen............................................................................................13
SSL Certificate Screen....................................................................................................15
Network Setup Screen.....................................................................................................16
Advanced Screen.............................................................................................................18
Wireless Screens..............................................................................................................20
Basic Settings...................................................................................................................20
Security Settings..............................................................................................................22
Rogue AP Detection ........................................................................................................32
Scheduler..........................................................................................................................34
Scheduler Association .....................................................................................................36
Connection Control.........................................................................................................37
Rate Limit ........................................................................................................................38
QoS ...................................................................................................................................39
Workgroup Bridge..........................................................................................................41
Advanced Settings...........................................................................................................43
CHAPTER 3 OPERATION AND STATUS.........................................................................46
Operation.........................................................................................................................46
System Summary.............................................................................................................46
LAN Status.......................................................................................................................48
Wireless Status.................................................................................................................50
Wireless Clients...............................................................................................................52
Statistics ...........................................................................................................................53
Log View...........................................................................................................................54
CHAPTER 4 ACCESS POINT MANAGEMENT...............................................................55
Overview ..........................................................................................................................55
Firmware Upgrade..........................................................................................................55
Configuration...................................................................................................................57
Factory Default................................................................................................................59
Reboot...............................................................................................................................60
Ping Test...........................................................................................................................61
Packet Capture................................................................................................................62
Diagnostic Log.................................................................................................................63
APPENDIX A TROUBLESHOOTING................................................................................64
Overview ..........................................................................................................................64
General Problems............................................................................................................64
APPENDIX B ABOUT WIRELESS LANS..........................................................................66
Overview ..........................................................................................................................66
Wireless LAN Terminology............................................................................................66

ii
APPENDIX C PC AND SERVER CONFIGURATION ....................................................69
Overview ..........................................................................................................................69
Using WEP.......................................................................................................................69
Using WPA2-PSK............................................................................................................70
Using WPA2-Enterprise .................................................................................................71
802.1x Server Setup (Windows 2000 Server)................................................................72
802.1x Client Setup on Windows XP.............................................................................82
Using 802.1x Mode (without WPA)...............................................................................88
REGULATORY APPROVALS.............................................................................................93
Federal Communication Commission Interference Statement...................................93
Radiation Exposure Statement.......................................................................................93
Industry Canada statement............................................................................................93
Caution.............................................................................................................................94
Avertissement ..................................................................................................................94
Radiation Exposure Statement.......................................................................................94
Déclaration d'exposition aux radiations........................................................................94
Copyright ©2014. All Rights Reserved.
Document Version: 1.0
All trademarks and trade names are the properties of their respective owners.

1
Chapter 1
Quick Start Guide
Package Contents
•Linksys Wireless Access Point
•Quick Start Guide
•Ethernet Cable
•AC Power Adapter
•CD with Documentation
•Mounting Bracket
•Mounting Kit
•Ceiling Mount Back Plate
•Drilling Layout Template
Physical Details
There is one LED for the device.
LED
LED Color Activity Status
Green Blinking System is booting.
Solid System is normal; no wireless device connected.
Blue
Blinking Software upgrade in process.
Solid System is normal; at least one wireless device connected.
Solid Booting process or update failed; hard reset or service re-
quired.
Port and Button
Power Port - Connect the AC power adapter to this port.
NOTE: Use only the adapter that came with your access point.
Ethernet Port - Connect a wired network device to this port. This port supports PoE (Power
over Ethernet) with a PoE switch or PoE injector. LAPAC1750 can be powered on from an
802.3at compliance source.
NOTE: When both PoE and AC power adapter are connected to access point, device will get
power from PoE as higher precedence.
Using Cat5e or better cable is high recommended.
1

2
Reset Button - Press and hold this button for less than 15 seconds to power cycle device. Press
and hold for longer than 15 seconds to reset the device to factory default settings.

3
Mounting Guide
To avoid overheating, do not install your access point if ambient temperatures exceed 104°F
(40°C). Install on a flat, stable surface, near the center of your wireless coverage area making
sure not to block vents on the sides of the device enclosure.
Wall Installation
1. Position drilling layout template at the desired location.
2. Drill four screw holes on the mounting surface. If your Ethernet cable is routed be-
hind the wall, mark Ethernet cable hole as well.
3. Secure the mounting bracket on the wall with anchors and screws.
4. If your Ethernet cable is routed behind the wall, cut or drill the Ethernet cable hole
you marked in Step 2. Feed the Ethernet cable through the hole.
5. Connect the Ethernet cable and/or AC power adapter to your device.
6. Slide the device into the bracket. Turn clockwise until it locks into place.
Ceiling Installation
1. Select ceiling tile for mounting and remove tile.
2. Position drilling layout template at the desired location.
3. Drill four screw holes and Ethernet cable hole on the surface of ceiling tile..
4. Place back plate on the opposite side of ceiling tile. Secure mounting bracket to the
ceiling tile with flathead screw and nut. Route the Ethernet cable through the Ethernet
cable hole.
5. Replace tile in ceiling.
6. Connect the Ethernet cable and/or AC power adapter to your device
7. Slide the device into the bracket. Turn access point clockwise until it locks.
IMPORTANT
Improper or insecure mounting could result in damage to the device or personal injury.
Linksys is not responsible for damages caused by improper mounting.

4
Chapter 2
Access Point Setup
Overview
This chapter describes the setup procedure to connect the wireless access point to your LAN,
and configure it as an access point for your wireless stations.
Wireless stations may also require configuration. For details, see Appendix C - Wireless
Station Configuration.
The wireless access point can be configured using a Web browser.
Setup using a Web Browser
Your browser must support JavaScript. The configuration program has been tested on the
following browsers:
•Firefox 3.5 or later, Chrome 8 or later, Safari 5 or later
•Internet Explorer 7 or later
Setup Procedure
Before starting setup, install the wireless access point on your LAN, as described earlier.
1. Locate the wireless access point’s default name on a label on the base or rear. The default
name will be
lapxxxxx where
xxxxx is a set of the last 5 characters of your access point MAC Address. MAC Address
is available in the brown box label or product label.
2. Use a PC connected to your LAN, either by a wired connection or another access point.
Until the wireless access point is configured, establishing a wireless connection to it may
be not possible.
If your LAN contains a router or routers, ensure the PC used for configuration is on the
same LAN segment as the wireless access point.
3. Start your Web browser.
4. Enter the IP address of the wireless access point, as in this example, which uses the
wireless access point's default IP address:
http://192.168.1.252
At the login prompt, enter admin for the User name, and admin for the Password.
These are the default values. You should change the password.
2

5
Figure 1: Password Dialog
5. From the status screen menu configure for your environment. Details of these screens and
settings are described in the following sections of this chapter.
6. You may also wish to change the admin password on the User Accounts screen, accessed
from the Configuration menu.
7. Wireless stations must now be set to match the wireless access point. See Chapter 4 for
details.
If you can't connect:
It is likely that your PC’s IP address is incompatible with the wireless access
point’s IP address. This can happen if your LAN does not have a DHCP Server.
The default IP address of the wireless access point is 192.168.1.252, with a
network mask of 255.255.255.0.
If your PC’s IP address is not compatible with this, you must change your PC’s IP
address to an unused value in the range 192.168.1.1 ~ 192.168.1.254, with a
network mask of 255.255.255.0. See Appendix A - Windows TCP/IP for details for
this procedure.

6
Setup Wizard
The first time you connect to the wireless access point, run the Setup Wizard to configure the
device.
1. Click the Quick Start link on the main menu
Figure 2: Setup Wizard
2. On the first screen, click Launch.
3. Set the password on the Device Password screen, if desired.
4. Configure the time zone, date and time for the device on System Settings screen.
Figure 3: Setup Wizard - System Settings
5. On the IPv4 Address screen (Figure 6) configure the IP address of the device then click
Next. If you want to configure more than 4 SSIDs, please go to Configuration->Wireless
->Basic Settings. The access point supports up to 8 SSIDs per radio.

7
Figure 4: Setup Wizard - IPv4
6. Set the SSID information on the Wireless Network screen. Click Next.
Figure 5: Setup Wizard - Wireless Network
7. On the Wireless Security Screen (Figure 8) configure the wireless security settings for the
device. Click Next. If you are looking for security options that are not available in the wi-
zard, go to Configuration ÆWirelessÆSecurity page. The access point supports more
sophisticated security options there.
Figure 6: Setup Wizard - Wireless Security

8
8. On the Summary screen, check the data to make sure they are correct and then click
Submit to save the changes.
Figure 7: Setup Wizard - Summary
9. Click Finish to leave the wizard.
Figure 8: Setup Wizard - Finish

9
User Accounts
Click User Accounts on the Administration menu to manage user accounts. The access point
supports up to 5 users: one administrator and four normal users.
Figure 9: User Accounts
Data - User Accounts Screen
User Account Table
User Name Enter the User Name to connect to the access point’s admin interface.
User Name is effective once you save settings.
User Name can include up to 63 characters. Special characters are
allowed.
User Level Only administrator account has Read/Write permission to the access
point’s admin interface. All other accounts have Read Only permis-
sion.
New Password Enter the Password to connect to the access point’s admin interface.
Password must be between 4 and 63 characters. Special characters are
allowed.
Confirm New
Password Re-enter password.

10
Time Screen
Click Time on the Administration menu to configure system time of the device.
Figure 10: Time Screen
Data - Time Screen
Time
Current Time Display current date and time of the system.
Manually Set date and time manually.
Automatically When enabled (default setting) the access point will get the current
time from a public time server.
Time Zone Choose the time zone for your location from the drop-down list. If
your location observes daylight saving time, enable “Automatically
adjust clock for daylight saving changes.”
Start Time Specify the start time of daylight saving.
End Time Specify the end time of daylight saving.
Offset Select the adjusted time of daylight saving.
NTP
NTP Server 1 Enter the primary NTP server. It can be an IPv4 address or a domain
name.
Valid characters include alphanumeric characters, "_", "-" and ".".
Maximum length is 64 characters.
NTP Server 2 Enter the secondary NTP server. It can be an IPv4 address or a domain
name.
Valid characters include alphanumeric characters, "_", "-" and ".".
Maximum length is 64 characters.

11
Log Settings Screen
The logs record various types of activity on the access point. This data is useful for trouble-
shooting, but enabling all logs will generate a large amount of data and adversely affect
performance.
Figure 11: Log Settings Screen
Data - Logs Screen
Log Types
Log Types Select events to log. Checking all options increase the size of the
log, so enable only events you believe are required.
Email Alert
Email Alert Enable email alert function.
SMTP Server Enter the e-mail server that is used to send logs. It can be an IPv4
address or a domain name.
Valid characters include alphanumeric characters, "_", "-" and ".".
Maximum length is 64 characters.
Data Encryption Enable if you want to use data encryption.
Port Enter the port for the SMTP server. The port is a value from 1 to
65535 and default is 25.
Username Enter the Username to login to your SMTP server.
The Username can include up to 32 characters. Special characters
are allowed.
Password Enter the Password to login to your SMTP server.
The Password can include up to 32 characters. Special characters
are allowed.

12
Email Address for
Logs Enter the email address the log messages are to be sent to.
Valid characters include alphanumeric characters, "_", "-", "." and
"@". Maximum length is 64 characters.
Log Queue Length Enter the length of the queue: up to 500 log messages. The
default is 20 messages. When messages reach the set length the
queue will be sent to the specified email address.
Log Time Threshold Enter the time threshold (in seconds) used to check if the queue is
full. It’s a value from 1 to 600 and default is 600 seconds.
Syslog
Syslog Notification Enable Syslog notification.
IP Type Select the IP type of the syslog server: IPv4 or IPv6.
Server IP Address Enter the IPv4 or IPv6 address of syslog server here.

13
Management Access Screen
You can use the Management page to configure the management methods of the access point.
Figure 12: Management Access Screen
Data - Management Access Screen
Web Access
HTTP HTTP (Hyper Text Transfer Protocol) is the standard for
transferring files (text, graphic images and other multimedia files)
on the World Wide Web.
Enable to allow Web access by HTTP protocol.
HTTP Port Specify the port for HTTP. It can be 80 (default) or from 1024 to
65535.
HTTP to HTTPS
Redirect Enable to redirect Web access of HTTP to HTTPS automatically.
This field is available only when HTTP access is disabled.
HTTPS HTTPS (Hypertext Transfer Protocol Secure) can provide more
secure communication with the SSL/TLS protocol, which support
data encryption to HTTP clients and servers.
Enable to allow Web access by HTTPS protocol.
HTTPS Port Specify the port for HTTPS. It can be 443 (default) or from 1024
to 65535.
From Wireless Enable wireless devices to connect to access point’s admin page.
Disabled by default.
Access Control By default, no IP addresses are prohibited from accessing the
device’s admin page. You can enable access control and enter
specified IP addresses for access. Four IPv4 and four IPv6 ad-
dresses can be specified.

14
SNMP Settings
SNMP Simple Network Management Protocol (SNMP) is a network
monitoring and management protocol.
Enable or disable SNMP function here. Disabled by default.
Contact Enter contact information for the access point.
The contact includes 1 to 32 characters. Special characters are
allowed.
Location Enter the area or location where the access point resides.
The location includes 1 to 32 characters. Special characters are
allowed.
SNMP v1/v2 Settings
Get Community Enter the name of Get Community. Get Community is used to
read data from the access point and not for writing data into the
access point.
Get Community includes 1 to 32 characters. Special characters
are allowed.
Set Community Enter the name of Set Community. Set Community is used to
write data into the access point.
The Set Community includes 1 to 32 characters. Special charac-
ters are allowed.
SNMP v3 Settings
SNMP v3 Settings Configure the SNMPv3 settings if you want to use SNMPv3.
•Username: Enter the username. It includes 0 to 32 charac-
ters. Special characters are allowed.
•Authentication Protocol: None or HMAC-MD5.
•Authentication Key: 8 to 32 characters. Special characters
are allowed.
•Privacy Protocol: None or CBC-DES.
•Privacy Key: 8 to 32 characters. Special characters are
allowed.
Access Control
Access Control When SNMP is enabled, any IP address can connect to the access
point’s admin page through SNMP. You can enable access
control to allow specified IP addresses. Two IPv4 and two IPv6
addresses can be specified.
SNMP Trap
Trap Community Enter the Trap Community server. It includes 1 to 32 characters.
Special characters are allowed.
Trap Destination Two Trap Community servers are supported: can be IPv4 or
IPv6.

15
SSL Certificate Screen
This screen can be used to manage SSL certificate used by HTTPS.
Figure 13: SSL Certificate Screen
Data - SSL Certificate Screen
Export/Restore to/from Local PC
Export SSL
Certificate Click to export the SSL certificate.
Install Certificate Browse to choose the certificate file. Click Install Certificate
button.
Export to TFTP Server
Destination File Enter the name of the destination file.
TFTP Server Enter the IP address for the TFTP server. Only support IPv4
address here.
Export Click to export the SSL certificate to the TFTP server.
Restore from TFTP Server
Source File Enter the name of the source file.
TFTP Server Enter the IP address for the TFTP server. Only support IPv4
address here.
Install Click to install the file to the device.

16
Network Setup Screen
Use this screen to configure basic device settings, VLAN settings and settings for the LAN
interface, including static or dynamic IPv4/IPv6 address assignment.
Figure 14: Network Setup Screen
Data - Network Setup Screen
TCP/IP
Host Name Assign a host name to this access point. Host name consists of 1 to 15
characters. Valid characters include A-Z, a-z, 0-9 and -. Character
cannot be first and last character of hostname and hostname cannot be
composed of all digits.
VLAN Enables or disables VLAN function.
Untagged VLAN Enables or disables VLAN tagging. If enabled (default), traffic from
the LAN port is untagged when the following conditions are met: 1)
VLAN ID is equal to Untagged VLAN ID and 2) untagged traffic can
be accepted by LAN port. If disabled, traffic from the LAN port is
always tagged and only tagged traffic can be accepted from LAN port.
By default all traffic on the access point uses VLAN 1, the default
untagged VLAN. All traffic will be untagged until you disable the
untagged VLAN, change the untagged traffic VLAN ID, or change the
VLAN ID for a SSID.
Untagged VLAN
ID Specifies a number between 1 and 4094 for the untagged VLAN ID.
The default is 1. Traffic on the VLAN that you specify in this field is
not be tagged with a VLAN ID when forwarded to the network.
Untagged VLAN ID field is active only when untagged VLAN is
enabled.
VLAN 1 is the default for both untagged VLAN and management
VLAN.