Linksys LAPN300 User manual

User Guide
LAPN300
Wireless-N300
Access Point with POE
Model # LAPN300
1

Contents
Chapter 1 – Quick Start Guide ..........................................................................................................................................5
Mounting Guide...................................................................................................................................................................6
Wall Installation ..............................................................................................................................................................6
Ceiling Installation.........................................................................................................................................................6
Chapter 2 – Access Point Setup .......................................................................................................................................8
Overview ...............................................................................................................................................................................8
Set up using a web browser ...........................................................................................................................................8
Setup wizard.....................................................................................................................................................................10
User accounts .................................................................................................................................................................. 15
Time...................................................................................................................................................................................... 16
Time Screen ..................................................................................................................................................................16
Log settings ......................................................................................................................................................................17
Log Settings Screen ..................................................................................................................................................18
Management access...................................................................................................................................................... 19
Management Access Screen..................................................................................................................................19
SSL certificate.................................................................................................................................................................22
SSL Certificate Screen.............................................................................................................................................22
Network setup.................................................................................................................................................................. 23
Network Setup Screen.............................................................................................................................................. 23
Advanced ........................................................................................................................................................................... 24
Advanced Screen........................................................................................................................................................25
Wireless screens ............................................................................................................................................................. 26
Basic Settings..............................................................................................................................................................27
Security settings............................................................................................................................................................. 28
Security Mode.............................................................................................................................................................. 29
Rogue AP Detection.......................................................................................................................................................37
Scheduler...........................................................................................................................................................................38
Scheduler Association ..................................................................................................................................................40
Connection Control ........................................................................................................................................................41
Rate Limit...........................................................................................................................................................................42
Quality of Service (QoS)................................................................................................................................................ 43
2

WDS ..................................................................................................................................................................................... 44
Workgroup Bridge...........................................................................................................................................................48
Advanced Settings ......................................................................................................................................................... 50
Captive Portal...................................................................................................................................................................54
Global Configuration.................................................................................................................................................. 54
Portal Profiles...............................................................................................................................................................55
Local User...................................................................................................................................................................... 57
Local Group ...................................................................................................................................................................58
Web Customization .................................................................................................................................................... 59
Profile Association......................................................................................................................................................61
Client Information.......................................................................................................................................................62
Client Information Screen........................................................................................................................................ 62
Chapter 3 – System Status ............................................................................................................................................. 63
System Summary............................................................................................................................................................63
LAN Status........................................................................................................................................................................64
Wireless Status................................................................................................................................................................66
Wireless Clients............................................................................................................................................................... 68
Statistics............................................................................................................................................................................ 69
Log View............................................................................................................................................................................. 70
Chapter 4 – Maintenance................................................................................................................................................. 72
Overview ............................................................................................................................................................................72
Firmware Upgrade..........................................................................................................................................................73
Configuration Backup/Restore..................................................................................................................................74
Factory Default................................................................................................................................................................ 76
Reboot................................................................................................................................................................................. 77
Ping Test............................................................................................................................................................................. 78
Packet Capture................................................................................................................................................................ 79
Diagnostic Log .................................................................................................................................................................80
Appendix A – Troubleshooting........................................................................................................................................ 81
Overview ............................................................................................................................................................................81
General Problems............................................................................................................................................................81
Appendix B – About Wireless LANs...............................................................................................................................83
3

Overview ............................................................................................................................................................................83
Wireless LAN Terminology...........................................................................................................................................83
Modes.............................................................................................................................................................................. 83
SSID/ESSID ..................................................................................................................................................................83
Channels......................................................................................................................................................................... 84
WEP.................................................................................................................................................................................. 84
WPA-PSK .......................................................................................................................................................................85
WPA2-PSK .................................................................................................................................................................... 85
WPA-Enterprise........................................................................................................................................................... 85
WPA2-Enterprise........................................................................................................................................................ 85
802.1x ............................................................................................................................................................................ 86
Appendix C – PC and Server Configuration...............................................................................................................87
Overview ............................................................................................................................................................................87
Using WEP ......................................................................................................................................................................... 87
Using WPA2-PSK............................................................................................................................................................87
Using WPA2-Enterprise ...............................................................................................................................................88
Wireless Station Configuration..............................................................................................................................88
RADIUS Server Configuration ...............................................................................................................................88
802.1x Server Setup (Windows 2000 Server) ....................................................................................................89
Windows 2000 Domain Controller Setup.......................................................................................................... 89
Services Installation .................................................................................................................................................. 89
DHCP Server Configuration.................................................................................................................................... 92
Certificate Authority Setup .................................................................................................................................... 95
Internet Authentication Service (RADIUS) Setup ...........................................................................................99
Remote Access Login for Users ......................................................................................................................... 101
802.1x Client Setup on Windows XP.................................................................................................................... 102
Client Certificate Setup ........................................................................................................................................ 103
802.1x Authentication Setup ............................................................................................................................. 108
Encryption Settings................................................................................................................................................ 109
Enabling Encryption................................................................................................................................................ 109
Using 802.1x Mode (without WPA)........................................................................................................................ 111
4

Chapter 1 - -- Quick Start Guide
LAPN300
Package Contents
•Linksys Wireless Access Point
•Quick Start Guide
•Ethernet Cable
•AC Power Adapter
•CD with Documentation
•Mounting Bracket
•Mounting Kit
•Ceiling Mount Back Plate
•Drilling Layout Template
Physical Details
•LED—There is one LED for the device.
LED Color
Activity
Status
Green
Blinking
System is booting.
Solid System is normal; no wireless device
connected.
Blue
Blinking
Software upgrade in process.
Solid System is normal; at least one wireless
device connected.
Red Solid Booting process or update failed; hard
reset or service required.
Ports and Button
•Power Port—Connect the AC power adapter to this port.
oNOTE: Use only the adapter that came with your access point.
•Ethernet Port—Connect a wired network device to this port. This port supports PoE (Power
over Ethernet) with a PoE switch or PoE injector. The maximum power consumption for
5

LAPN300 is 12.5 W. Make sure your PoE switch or PoE injector is 802.3af-capable or
802.3at-capable to provide sufficient power to access point.
oNOTE: When both PoE and AC power adapter are connected to access point, device
will get power from PoE as higher precedence.
oUsing Cat5e or better cable is highly recommended.
•Reset Button—Press and hold this button for less than 15 seconds to power cycle device.
Press and hold for longer than 15 seconds to reset the device to factory default settings.
Mounting Guide
To avoid overheating, do not install your access point if ambient temperatures exceed 104°F (40°C).
Install on a flat, stable surface, near the center of your wireless coverage area making sure not to
block vents on the sides of the device enclosure.
Wall Installation
1. Position drilling layout template at the desired location.
2. Drill four screw holes on the mounting surface. If your Ethernet cable is routed behind the wall,
mark Ethernet cable hole as well.
3. Secure the mounting bracket on the wall with anchors and screws.
4. If your Ethernet cable is routed behind the wall, cut or drill the Ethernet cable hole you marked
in Step 2. Feed the Ethernet cable through the hole.
5. Connect the Ethernet cable and/or AC power adapter to your device.
6. Slide the device into the bracket. Turn clockwise until it locks into place.
Ceiling Installation
1. Select ceiling tile for mounting and remove tile.
2. Position drilling layout template at the desired location.
3. Drill four screw holes and Ethernet cable hole on the surface of ceiling tile.
4. Place back plate on the opposite side of ceiling tile. Secure mounting bracket to the ceiling tile
with flathead screw and nut. Route the Ethernet cable through the Ethernet cable hole.
6

5. Connect the Ethernet cable and/or AC power adapter to your device
6. Slide the device into the bracket. Turn access point clockwise until it locks.
7. Replace tile in ceiling.
IMPORTANT—Improper or insecure mounting could result in damage to the device or personal injury.
Linksys is not responsible for damages caused by improper mounting.
7

Chapter 2 – Access Point Setup
Overview
This chapter describes the setup procedure to connect the wireless access point to your LAN, and
configure it as an access point for your wireless stations.
Wireless stations may also require configuration. For details, see Appendix C - Wireless Station
Configuration.
The wireless access point can be configured using a web browser.
Set up using a web browser
Your browser must support JavaScript. The configuration program has been tested on the following
browsers:
•Firefox 3.5 or later, Chrome 8 or later, Safari 5 or later
•Internet Explorer 7 or later
Setup Procedure
Make sure device is powered on before you continue setup. If LED light is off, check that AC power
adapter, or PoE cable, is properly connected on both ends.
Access device’s browser-based setup:
1. Use the included cable to connect the access point to your network via a network switch or
router.
2. Open a web browser on a computer connected to your network. Enter the IP address of your
access point. By factory default, the IP address will be assigned by a DHCP server (usually the
network router). If there is no DHCP server on your network, the default IP address is
192.168.1.252/255.255.255.0.
Note—Use a computer hardwired to the same network as your access point for browser-
based setup access. Access to browser-based setup via Wi-Fi is disabled by default.
8

3. Type in default username: admin, and password: admin.
4. Click Login to launch the browser-based setup and follow the on-screen instructions.
Figure 1: Password Dialog
If you can't connect—It is likely that your PC’s IP address is incompatible with the wireless access
point’s IP address. This can happen if your LAN does not have a DHCP Server. If there is no DHCP server
in your network, the access point will fall back to its default IP address: 192.168.1.252, with a network
mask of 255.255.255.0.
OR
If your PC’s IP address is not compatible with this, you must change your PC’s IP address to an unused
value in the range 192.168.1.1 ~ 192.168.1.254, with a network mask of 255.255.255.0. See
Appendix A - Windows TCP/IP for details for this procedure.
9

Setup wizard
The first time you connect to the wireless access point, run the Setup Wizard to configure the device.
1. Click the Quick Start tab on the main menu.
Figure 2: Setup Wizard
2. On the first screen, click Launch.
3. Set the password on the Device Password screen, if desired.
10

4. Configure the time zone, date and time for the device on System Settings screen.
Figure 3: Setup Wizard - System Settings
5. On the IPv4 Address screen (Figure 4) configure the IP address of the device then click Next.
Figure 4: Setup Wizard - IPv4
11

6. Set the SSID information on the Wireless Network screen. Click Next. If you want to configure
more than 4 SSIDs, go to Configuration > Wireless >Basic Settings. The access point
supports up to 8 SSIDs.
Figure 5: Setup Wizard - Wireless Network
7. On the Wireless Security screen (Figure 6) configure the wireless security settings for the
device. Click Next. If you are looking for security options that are not available in the wizard,
go to Configuration > Wireless > Security page. The access point supports more
sophisticated security options there.
12

Figure 6: Setup Wizard - Wireless Security
8. On the Summary screen, check the data to make sure they are correct and then click Submit
to save the changes.
Figure 7: Setup Wizard - Summary
9. Click Finish to leave the wizard.
13

Figure 8: Setup Wizard - Finish
14

User accounts
Manage user accounts. The access point supports up to 5 users: one administrator and four normal
users.
Figure 9: User Accounts
User Accounts Screen
User Account Table
User Name
Enter the User Name to connect to the access point’s admin
interface. User Name is effective once you save settings.
User Name can include up to 63 characters. Special
characters are allowed.
User Level Only administrator account has Read/Write permission to
the access point’s admin interface. All other accounts have
Read Only permission.
New Password Enter the Password to connect to the access point’s admin
interface.
Password must be between 4 and 63 characters. Special
characters are allowed.
Confirm New
Password
Re-enter password.
15

Time
Figure 10: Time Screen
Time Screen
Time
Current Time
Display current date and time of the system.
Manually
Set date and time manually.
Automatically When enabled (default setting) the access point will get the current time
from a public time server.
Time Zone Choose the time zone for your location from the drop-down list. If your
location observes daylight saving time, enable “Automatically adjust clock
for daylight saving changes.”
Start Time
Specify the start time of daylight saving.
End Time
Specify the end time of daylight saving.
Offset
Select the adjusted time of daylight saving.
NTP
NTP Server 1 Enter the primary NTP server. It can be an IPv4 address or a domain name.
Valid characters include alphanumeric characters, "_", "-" and ".". Maximum
length is 64 characters.
NTP Server 2 Enter the secondary NTP server. It can be an IPv4 address or a domain
name.
Valid characters include alphanumeric characters, "_", "-" and ".". Maximum
length is 64 characters.
16

Log settings
Record various types of activity on the access point. This data is useful for troubleshooting, but
enabling all logs will generate a large amount of data and adversely affect performance.
Figure 11: Log Settings Screen
17

Log Settings Screen
Log Types
Log Types Select events to
log. Checking all options increases the
size of the log, so enable only events you believe are
required.
Email Alert
Email Alert
Enable email alert function.
SMTP Server Enter the email server that is used to send logs. It can
be an IPv4 address or a domain name.
Valid characters include alphanumeric characters, "_", "-
" and ".". Maximum length is 64 characters.
Data Encryption
Enable if you want to use data encryption.
Port Enter the port for the SMTP server. The port is a value
from 1 to 65535 and default is 25.
Username Enter the Username to log in to your SMTP server.
The Username can include up to 32 characters. Special
characters are allowed.
Password Enter the Password to log in to your SMTP server.
The Password can include up to 32 characters. Special
characters are allowed.
Email Address for
Logs
Enter the email address the log messages are to be
sent to.
Valid characters include alphanumeric characters, "_", "-
", "." and "@". Maximum length is 64 characters.
Log Queue Length Enter the length of the queue: up to 500 log messages.
The default is 20 messages. When messages reach the
set length the queue will be sent to the specified email
address.
Log Time
Threshold
Enter the time threshold (in seconds) used to check if
the queue is full. It’s a value from 1 to 600 and default
is 600 seconds.
Syslog
Syslog Notification
Enable Syslog notification.
IP Type
Select the IP type of the syslog server: IPv4 or IPv6.
Server IP Address
Enter the IPv4 or IPv6 address of syslog server here.
18

Management access
Configure the management methods of the access point.
Figure 12: Management Access Screen
Management Access Screen
Web Access
HTTP
HTTP (Hyper Text Transfer Protocol) is the standard for
transferring files (text, graphic images and other
multimedia files) on the World Wide Web.
Enable to allow Web access by HTTP protocol.
HTTP Port
Specify the port for HTTP. It can be 80 (default) or from
1024 to 65535.
HTTP to HTTPS
Redirect
Enable to redirect Web access of HTTP to HTTPS
automatically.
This field is available only when HTTP access is disabled.
HTTPS HTTPS (Hype
rtext Transfer Protocol Secure) can
provide more secure communication with the SSL/TLS
protocol, which support data encryption to HTTP clients
and servers.
Enable to allow Web access by HTTPS protocol.
19

HTTPS Port Specify the port for HTTPS. It can be 443 (default) or
from 1024 to 65535.
From Wireless Enable wireless devices to connect to access point’s
admin page. Disabled by default.
Access Control
By default, no IP addresses are prohibited from
accessing the device’s admin page. You can enable
acces
s control and enter specified IP addresses for
access. Four IPv4 and four IPv6 addresses can be
specified.
SNMP Settings
SNMP
Simple Network Management Protocol (SNMP) is a
network monitoring and management protocol.
Enable or disable SNMP function here.
Disabled by
default.
Contact Enter contact information for the access point.
The contact includes 1 to 32 characters. Special
characters are allowed.
Location Enter the area or location where the access point
resides.
The location includes 1 to 32 char
acters. Special
characters are allowed.
SNMPv1/v2 Settings
Get Community
Enter the name of Get Community. Get Community is
used to read data from the access point and not for
writing data into the access point.
Get Community includes 1 to 32 characters. Special
characters are allowed.
Set Community
Enter the name of Set Community. Set Community is
used to write data into the access point.
The Set Community includes 1 to 32 characters. Special
characters are allowed.
20