Pakedge WK Series User manual

WK-WX Series
802.11ac Wireless AP
with BakPak Lite
User Guide

WK-WX Series User Guide
Contents
Introduction .................................................................................................................................................................................... 1
System requirements ................................................................................................................................................................. 1
Hardware installation ................................................................................................................................................................. 1
Default settings and credentials.................................................................................................................................. 2
Quick Setup.................................................................................................................................................................................... 3
Dashboard ......................................................................................................................................................................................4
Dashboard navigation bar.............................................................................................................................................. 5
BakPak Lite..................................................................................................................................................................................... 5
BakPak Lite............................................................................................................................................................................. 5
Granting user access to BakPak Lite sites .................................................................................................. 6
Reset to factory default settings ........................................................................................................................................ 7
Reset using the interface ................................................................................................................................................ 7
Reset using the physical RESET button .................................................................................................................. 7
Status menu...................................................................................................................................................................................8
System log ..............................................................................................................................................................................8
Network ...........................................................................................................................................................................................9
LAN.............................................................................................................................................................................................9
Wireless.................................................................................................................................................................................. 10
Radio............................................................................................................................................................................. 10
Security profiles .......................................................................................................................................................12
Configuration ............................................................................................................................................................13
Guest network ..........................................................................................................................................................14
RADIUS Server (WX-1 Series only) ................................................................................................................16
Advanced ...............................................................................................................................................................................17
Management.................................................................................................................................................................................19
Diagnostics............................................................................................................................................................................19
Ping ................................................................................................................................................................................19
Traceroute ................................................................................................................................................................ 20
SNMP ...................................................................................................................................................................................... 20
LEDs..........................................................................................................................................................................................21
Maintenance..................................................................................................................................................................................21
Username/Password ........................................................................................................................................................21
System ....................................................................................................................................................................................22
Firmware................................................................................................................................................................................22
Configuration.......................................................................................................................................................................23
Reboot ....................................................................................................................................................................................23

WK-WX Series User Guide
1
Introduction
Thank you for purchasing the Pakedge WK-WX Series 802.11ac Dual Band Access
Point. As the central component of your wireless network, the AP provides you
with high-speed, high-range wireless 8012.11ac networking. The AP broadcasts on
both the 2.4 GHz and 5 GHz bands so that select devices can choose their
preferred source of wireless connectivity, improving the overall stability,
reliability, and performance of the wireless network.
Each band (either 2.4 GHz or 5 GHz) of the AP can operate in three modes:
•Access Point mode: By default, both bands are set to Access Point mode,
where they broadcast and accept wireless client connections.
•WDS Bridge mode: This mode is used to extend a connection to a hardwired
device when you cannot run an Ethernet cable directly.
•This mode is used to send wireless internet to a hardwired device when you
cannot use an Ethernet cable directly. In Bridge mode, it can receive a wireless
signal from an AP in root access point mode and send it to a client device
through an Ethernet connection.
•WDS Repeater mode: The repeater also receives a wireless signal from
another AP. However, unlike a bridge access point, a repeater access point
sends out WiFi so that client devices can connect to it wirelessly.
The functionality of the AP changes depending on its operating mode. This user
guide offers both general and mode-specific content.
System requirements
The minimum system requirement: A computer with an Ethernet port.
Hardware installation
For hardware installation and first-time startup instructions, see the Quick Start
Guide found in the box or at:
•WK-1 Quick Start Guide (pkdge.co/wk1-qsg)
•WK-1- C Quick Start Guide (pkdge.co/wk1c-qsg)
•WK-1- O Quick Start Guide (pkdge.co/wk1o-qsg)
•WK-2 Quick Start Guide (pkdge.co/wk2-qsg)
•WK-2- C Quick Start Guide (pkdge.co/wk2c-qsg)

WK-WX Series User Guide
2
•WX-1 Quick Start Guide (pkdge.co/wx1-qsg)
•BR-WX-1 (mounting bracket) Quick Start Guide (pkdge.co/brwx1-qsg)
•WX-1-O Quick Start Guide (pkdge.co/wx1o-qsg)
Default settings and credentials
•Operation mode: Access Point
•IP address: IP will be automatically assigned by router if a DHCP server is
detected or, if no DHCP server is detected, the default IP address will be
automatically set to 192.168.1.250.
•Username/Password (default): pakedge/pakedgea
•SSIDs (default): Pakedge2.4-1 and Pakedge5-1,
Security/password: WPA2-PSK/pakedgewireless
•Guest SSIDs (default): PakedgeGuest2.4 and PakedgeGuest5,
security/password: WPA2/pakedgeguest
•Transmit power: Starting with firmware v1.23, factory default transmit power is
13 dBm for 2.4 GHz and 18 dBm for 5 GHz.

WK-WX Series User Guide
3
Quick Setup
The first time you log in, you will be directed to the Quick Setup page and will be
required to update your password before proceeding to the Dashboard. This page
lets you configure the most common AP settings, all in one place, to get the AP up
and running quickly.
You can also access the Quick Setup page from the Dashboard.
Note: For APs sold in the U.S. and Israel, the Country Code will be
preconfigured and locked. For units that are sold in the rest of the world, the
Country Code will be blank and must be configured in this quick setup
process.

WK-WX Series User Guide
4
Dashboard
After logging in, you’re brought to the Dashboard (the home screen), which
displays the current AP status and general information such as the IP address,
subnet mask, and MAC address. The 2.4 GHz and 5 GHz sections display the
device operating mode, wireless mode, channel bandwidth, and channel settings.
The AP supports multiple SSIDs along with details and security settings for
each SSID.
To view the Dashboard:
•Hover over the Status icon and click Dashboard.
•Click the WK or WX circle icon in the upper-left corner of the screen.
To use the quick-access tiles:
Quick Setup takes
you to the Quick
Setup page, where
you can configure
the most common
AP settings.
Wireless takes you
to the Wireless
settings page. You
can also get there
by hovering over
the
Network
menu
and selecting
Wireless
.
LAN takes you to
the LAN settings
page. You can also
get there by
hovering over the
Network
menu and
selecting
LAN
.
BakPak takes you
to the BakPak login
screen. The first
time you access it,
you are asked to
register the AP
with BakPak.

WK-WX Series User Guide
5
Dashboard navigation bar
The navigation bar on the top of the Dashboard screen has four options:
• Status: Shows the Dashboard and event logs of the AP. The Dashboard is
the default page that comes up when you log in to the AP.
• Network: User can make changes to the network settings, such as the
LAN, wireless settings, and transmit power settings.
• Management: View diagnostics, enable SNMP, and control your LEDs.
• Maintenance: Modify your personal account settings and update your
firmware.
BakPak Lite
BakPak Lite is designed to provide remote cloud monitoring and configuration to the
AP. Using BakPak, you can remotely monitor and configure your customer’s AP
without requiring a truck roll or a VPN session to the customer’s network. In just a
few clicks, register your AP with your new or existing BakPak account. Registration is
a two-step process where you register the Management Agent in BakPak, and then
you link the management agent to an existing site or create a new site.
BakPak Lite
The AP’s Dashboard provides a BakPak tile to make it easy to quickly set up your
BakPak account and register your device. There are two ways you can register the
AP with BakPak Lite:
•When using automatic registration and the BakPak tile is clicked, you will be
automatically redirected to mybakpak.com and will need to log in with your
BakPak credentials or create an admin account. Once logged in, the serial
number and MAC address will be automatically populated on your BakPak
account.
After the AP has been registered, you can access it from anywhere in the world by
using the BakPak app or the web interface at mybakpak.com.
To log in and view a site using the web interface:
1. From the Dashboard, click the BakPak tile. The BakPak web login page
appears.
2. Log in to BakPak.

WK-WX Series User Guide
6
3. Under Sites, click Manage. A list of BakPak Lite sites opens.
4. Click the site you want to access, then click the BakPak Lite device that you
want to manage. The site’s management window expands, providing the
following information:
•Device information—Identifies all information about the device,
including the serial number and firmware version, and has ability to
reboot the wireless router remotely.
•SSID configuration—Configure/edit wireless information for the
primary SSID and guest networks.
•Firmware—Applies firmware updates to the device.
•Events—Displays network analytics, including a log of user events, for
network troubleshooting.
Granting user access to BakPak Lite sites
To grant a user access to this BakPak Lite site, you must create a group with
permissions to access this AP, then assign the user to that group. For more
information, see the BakPak User Guide.
To grant a user access to this BakPak Lite site:
1. In BakPak, click Users, then Groups and Permissions.
2. If you haven’t already, create a group with access to the device:
a. Click Add Group to create a group.
b. Click the user’s name in the USERS AVAILABLE list to move it to the
USERS SELECTED list.
c. Click the device’s name in the MANAGEMENT AGENTS AVAILABLE list
to move it to the MANAGEMENT AGENTS SELECTED list.
d. Enter a group name, then click Create. The device is added to the
group. The specified users can now receive alerts in the form of texts,
email, or push notifications.

WK-WX Series User Guide
7
Reset to factory default settings
While setting up or troubleshooting, you may need to reboot the AP or restore it to
its factory default settings.
Caution: Do not power off the AP during a factory reset.
Reset using the interface
To only reboot the AP, maintaining all settings:
1. Hover over the Maintenance menu, click Reboot, then click Reboot again.
To reset to factory default settings, deleting all user settings:
Caution: Performing this reset will delete all of your settings on the AP.
1. Hover over the Maintenance menu, then click Configuration.
2. Click Factory Default, then click Yes.
Reset using the physical RESET button
Your AP has a recessed RESET button accessible through a pinhole next to the
Kensington lock slot on the side of the AP.
To only reboot the AP, maintaining all settings:
1. Insert a narrow, pointed object (such as a straightened paper clip) into the
hole.
2. Press and release the button.
To reset to factory default settings, deleting all user settings:
Caution: Performing this reset will delete all of your settings on the AP.
1. Insert a narrow, pointed object (such as a straightened paper clip) into the
hole.
2. Press and hold the button for at least ten seconds, then release it.

WK-WX Series User Guide
8
Status menu
System log
The System Log is an activity log that can be used by Pakedge Technical Support for
troubleshooting.
To view the system log:
1. Go to Status > System Log.
2. Change the settings as needed:
•System log buffer size: Maximum value of the buffer is 10240 KB (10 MB),
which is also the default.
•External system log server: An external server may be set up to receive
log activity. Enter the IP address of the external server.
•External system log port: A port number for the external server may be
entered here.
•Download: Download the encrypted log.

WK-WX Series User Guide
9
Network
LAN
This page allows you to edit the AP’s LAN settings. To configure the AP’s IP
address, you can configure it with a static IP address or obtain an IP address
automatically by using a DHCP client.
To open the LAN menu:
1. Go to Network > LAN.
2. Change settings, as needed:
•LAN
oIP Network Setting: Static addresses require an IP Address, Subnet
Mask, and Default Gateway. Static address is the recommended
setting. However, you may select DHCP client if your network has a
router.
•Spanning Tree Protocol (STP) Settings: STP prevents bridge loops. By
default, this feature is enabled.

WK-WX Series User Guide
10
•Management VLAN
oWarning: Do not enable this feature unless you need to tag the
default VLAN on the AP. If configured incorrectly, the AP will
become inaccessible and will need to be reset to factory default.
VLAN tagging can only be set on a managed switch capable of using
VLANs.
oVLAN ID for Management: To turn on VLAN Management, check
Enable under Management VLAN.
oIn the VLAN ID text box, enter the number of the VLAN you want to
access the AP’s administrative functions through. For example, if
VLAN3 is used for management, enter 3.
3. To save your changes, click Apply.
Wireless
Radio
This page allows you to change settings for your WiFi radio.
To open the Radio menu:
1. Go to Network > Wireless > Radio.
2. Change settings, as needed:
•Country Code: Selecting your country is required for proper functionality
of this device and may be required by law. After selecting your country and
clicking Apply, the Country Code is locked. To regain access to Country
Code, the AP must be reset to factory defaults.
•Band Steering: Band steering steers 5 GHz-capable clients to that
frequency. By enabling this function, the 2.4 GHz SSID and settings will be
copied to the 5 GHz band.

WK-WX Series User Guide
11
•Operation Mode: Both the 2.4 and the 5 GHz bands have the following
operating modes: Access Point, WDS Root Access Point, WDS Repeater,
and WDS Bridge.
•Access Point: Standard mode of operation. Allows a wireless
connection to the LAN.
•WDS Root Access Point: The AP with this mode set will be the
“root” device that APs configured with WDS Repeater and WDS
Bridge will connect to.
•WDS Repeater: This mode allows the AP to connect to a WDS Root
Access Point. This setting will take the SSID broadcasted by the
WDS Root Access Point and rebroadcast it to end-user devices.
•WDS Bridge: This mode allows the AP to connect to a WDS Root
Access Point. This mode takes in the SSID broadcasted by the WDS
Root Access Point and turns it into Ethernet connectivity for client
devices.
•Wireless Mode: Choose the setting that corresponds to the type of
wireless clients connected to your network: B-Only, G-Only, B/G-Mixed,
N/G-Mixed, or B/G/N-Mixed (on the 2.4 GHz band) or A-Only, N-Only,
N/A-Mixed, AC-Only, AC/N-Mixed, or A/AC/N-Mixed (on the 5 GHz band).
If you aren’t sure which type of clients will access the wireless networks, we
recommend you keep the default settings.
•Channel Mode: By default, the Channel Mode is set to HT 20 MHz (when
using 2.4 GHz) and HT 80 MHz (when using 5 GHz). Selecting 40 MHz on
the 2.4 GHz band is possible, but not recommended, because it will also
increase the risk of impacting wireless performance. We recommend
keeping the 2.4 GHz radio set to 20 MHz and using only channel 1, 6, or 11,
because they are the only three non-overlapping channels
•Channel: Using the default setting (Auto), the AP automatically selects the
channel with best performance for the wireless network. To select a
channel manually, click the drop-down list and select a channel. The
channel options available depend on the Country Code selected.

WK-WX Series User Guide
12
•AP Detection: Click “Scan” to perform an automatic site survey. A new
window opens and displays the site survey utility. The AP will scan the
frequency for devices currently broadcasting their SSID and will then
display them in a table.
Security profiles
Here you can configure security profiles that can be used when creating SSIDs
under the Configuration tab.
To open the Security Profiles menu:
1. Go to Network > Wireless, then click the Security Profiles tab.
Note: The RADIUS Server tab is available only on WX Series APs.
2. Change settings, as needed:
•Profile Name: Create a name for the security profile.
•Encryption: Select an encryption type for the profile. The four available
options are:
•No Encryption: This will leave your profile without security
(not recommended).

WK-WX Series User Guide
13
•WPA PSK: Password must be at least 8 characters long. This is a
legacy encryption protocol (not recommended).
•WPA2 PSK (recommended): Password must be at least 8 characters
long. AES-only encryption.
•WPA/WPA2 PSK: Password must be at least 8 characters long. This
feature is also known as Mixed Mode and uses TKIP encryption.
•WPA Enterprise/WPA2 Enterprise/WPA/WPA2 Enterprise
(WX Series only):This mode is also known as 802.1x authentication.
You will need to add a RADIUS profile in the RADIUS Server tab to
enable this. For instructions, see “RADIUS Server (WX-1 Series only)”
on page 16.
Note:Passwords may contain only numbers and letters. Special characters
(!@#$%:;^&*) are not allowed.
Configuration
The AP can set up to 8 SSIDs per band, for a total of 16 SSIDs.
To open the Configuration menu:
1. Go to Network > Wireless, then click the Configuration tab.
2. Change settings, as needed:
•Profile Name: Create a name for the security profile.
•On Off: The SSID may be turned on or turned off using this checkbox.
•Wireless Name (SSID): The SSID is the name associated with the WiFi
network. An SSID cannot exceed 32 characters.

WK-WX Series User Guide
14
•Security Profile: The profiles created under the Security Profiles tab may
be applied to the SSID here.
•Hide SSID: Enabling this feature prevents the SSID name from being
broadcast. The SSID will still be available for client access, provided the
SSID is turned on. This is not a security feature.
•Client Isolation: Also referred to as “station separation.” This prevents
clients on the same SSID from being able to access other clients on the
network.
•VLAN: This option defines the VLAN that on which the SSID will reside. To
change the VLAN, select the grey circle with the number 1 inside it, then
click the VLAN you want.
•Manage: This column displays the management settings that were
configured under Management VLAN. Management VLAN is located on the
LAN page under Network.
3. Click Apply to save changes.
Guest network
A guest network is designed for networks that do not have a guest VLAN. The
guest network acts as its own network and has access to only the internet. Each
AP’s guest network is independent from the guest networks of other APs.
By default, the guest network name is Pakedge-Guest and the IP scheme is set to
192.168.200.X. You have the option to change the default settings, the SSID,
IP address, subnet, starting IP address, and ending IP address.
To enable the guest network:
1. Select the On/Off checkbox.

WK-WX Series User Guide
15
2. Change settings, as needed:
•SSID
•Radio: There is a guest network available on both the 2.4 GHz and 5
GHz band.
•On/Off: This option turns the Guest Network on and off.
•Wireless Name (SSID): The SSID of the Guest Network can be
entered in this textbox.
•Security Profile: Select a security profile that has already been
defined under the Security Profiles tab.
•Manual IP settings
•IP Address: Enter in the IP address the AP will be used on.
•Subnet Mask: Select the class of the guest network. 255.255.255.0 is
the standard setting and is selected by default.
•Automatic DHCP Server Settings

WK-WX Series User Guide
16
•Starting IP Address: This is the beginning of the DHCP range used on
the guest network. If you have multiple APs, you can give them the
same DHCP range because the guest network of each AP will be
independent of one another.
•Ending IP Address: This is the last IP address available on the DHCP
range.
•DNS Server IP: The DNS Server IP can be set to an external DNS or to
the router’s IP address if the router provides a DNS server.
3. Click Apply to save changes.
RADIUS Server (WX-1 Series only)
Under the RADIUS Server tab, you can configure RADIUS Server profiles that can be
used when WPA Enterprise, WPA2 Enterprise, or WPA/WPA2 Enterprise was
selected under the Security Profiles tab. You can enter up to two RADIUS Server
profiles.
To open the RADIUS Server menu:
1. Go to Network > Wireless, then click the RADIUS Server tab.
2. Change settings, as needed:
•Profile Name: Create a name for the RADIUS Server.
•Role: Enter up to three Authentication Servers. If you have
Accounting Server (optional), you are able to enter up to three
Accounting Servers. The AP will communicate to the next
Authentication and Accounting Server if it failed to connect to
current ones. For example, if it cannot connect to the first
Authentication Server, it will try to connect to a second
Authentication Server, and so on.
•IP Address: Enter the IP address of your Authentication Server and
Accounting Server.
•Ports: Enter the port number of your Authentication Server and
Accounting Server.

WK-WX Series User Guide
17
•Shared Secret: Enter the shared secret between the AP and the
RADIUS Server. Make sure that the two are identical.
•Manage: You can delete the Profile by clicking Delete.
3. Click Apply.
Advanced
On the Advanced page, you can configure transmit power, RTS/CTS threshold,
beacon interval, and Fast Secure Roaming.
To open the Advanced menu:
1. Go to Network > Advanced.
2. Change settings, as needed:
•Transmit Power: The power depends on the distance of the devices in
your wireless network. From the drop-down list, select the desired power.
You can use this feature to limit the coverage area of the wireless network.
•Maximum: This setting broadcasts at the maximum allowed mW for
the selected channel.
•Automatic: This setting adjusts the power of the AP based on the
distance to the furthest client device. The AP will lower its power if
the furthest client is 10 feet away and will raise the power if the
furthest client is 100 feet away.
•1 dBm (1 mW) – 30 dBm (1000 mW): These are static power
settings. The AP will broadcast at the selected power level.

WK-WX Series User Guide
18
•RTS/CTS Threshold: Enter the packet size threshold for RTS/CTS
(Request to Send/Clear to Send) to occur. The primary reason for using
this is to minimize the collision between hidden stations, which occurs
when APs and wireless users are spread out in a location and there is a
high occurrence of retransmissions on the wireless LAN. Default setting is
2347.
•Beacon Interval: Adjusting Beacon Interval allows clients to sleep longer.
Clients must wake up for every beacon, so this setting tells your client how
many milliseconds it can sleep for (for example, if beacon interval = 100,
your stations are allowed to sleep for up to 100 ms).
•802.11r Fast BSS Transition:IEEE 802.11r standard for fast roaming
reduces the authentication time when clients roam from one AP to the
other. This feature is beneficial for video streaming and voice application.
Note: The roaming behavior depends on clients. To obtain full benefit from
fast roaming, wireless clients need to support 802.11r fast roaming
standard. It is not recommended to enable both band steering and fast
roaming features, which will cause some incompatibility issues.
•Multicast enhancement: Enable to enhance the video/audio quality when
streaming multicast content to multiple devices over WiFi. When enabled,
all the multicast traffic is converted to unicast, which increases the delivery
speed to individual devices. This feature is not recommended if the
multicast group exceeds 10 devices.
•Client reject RSSI threshold: Helps with “sticky” clients that don’t reliably
roam to the closest AP. By enabling this feature, the AP continuously
monitors the station’s received signal and will de-authenticate the client
when the RSSI falls below a user-defined threshold. This setting can be
configured independently on 2.4 GHz and 5 GHz radios.