Pepwave AP One User manual

COPYRIGHT &TRADEMARKS
Specifications are subject to change without notice. Copyright © 2010 Pepwave Ltd. All Rights Reserved. Pepwave and the
Pepwave logo are trademarks of Pepwave Ltd. Other brands or products mentioned may be trademarks or registered trademarks of
their respective owners.
Document Rev.3.0.1
Dec-10

User Manual
http://www.pepwave.com 2Copyright © 2010
Pepwave
Table of Contents
1INTRODUCTION AND SCOPE ................................................................................. 3
2PRODUCT FEATURES............................................................................................. 4
3PACKAGE CONTENTS ............................................................................................ 5
4PEPWAVE AP ONE OVERVIEW.............................................................................. 6
4.1 FRONT VIEW .........................................................................................................6
4.2 REAR PANEL VIEW.................................................................................................6
5INSTALLATION......................................................................................................... 7
5.1 INSTALLATION PROCEDURES ..................................................................................7
6INFORMATION.......................................................................................................... 8
6.1 SYSTEM ................................................................................................................8
6.2 WIRELESS.............................................................................................................9
7CONFIGURATION................................................................................................... 13
7.1 SYSTEM ..............................................................................................................13
7.2 WIRELESS NETWORKS .........................................................................................16
7.3 ADVANCED WIRELESS SETTINGS ..........................................................................28
7.4 WDS ..................................................................................................................31
7.5 SNMP ................................................................................................................32
7.6 WEB ADMINISTRATION .........................................................................................35
8TOOLS - DIAGNOSTIC TOOLS.............................................................................. 37
9COMMANDS ........................................................................................................... 38
9.1 ACTIVATE CHANGES ............................................................................................38
9.2 FIRMWARE ..........................................................................................................39
9.3 CONFIGURATION..................................................................................................40
9.4 MISC...................................................................................................................41
10 RESTORATION OF FACTORY DEFAULTS........................................................... 42
10.1 AP ONE ..............................................................................................................42

User Manual
http://www.pepwave.com 3Copyright © 2010
Pepwave
1Introduction and Scope
Pepwave AP One is an enterprise grade 802.11b/g/n Wi-Fi access point with centralized management
system. It is a powerful solution for building wireless networks for all business needs. Each Pepwave AP
One is loaded with essential features such as Multiple SSID, VLAN, WDS and Guest Protect.
One Pepwave AP One can masquerade up to 4 different access points. Each virtual access point can
have its own security policy (e.g. WPA, WPA2, etc.) and authentication mechanism (e.g. 802.1x, open,
captive portal, etc), to facilitate building your network much faster, easier and more cost-effective than
ever before. Pepwave AP One comes with a high-power Wi-Fi transmitter which greatly enhances
coverage and performance.

User Manual
http://www.pepwave.com 4Copyright © 2010
Pepwave
2Product Features
Key features of Pepwave AP One:
•High-power output enhances coverage and lowers cost of ownership
•Independent security policies and encryption mechanisms per virtual AP
•Centralized management via InControl
•WDS Support for secure and fast network expansion
•Guest Protect Support
•WMM (Wi-Fi Multimedia) and QoS (Quality of Service) Support

User Manual
http://www.pepwave.com 5Copyright © 2010
Pepwave
3Package Contents
The following items are the contents of a Pepwave AP One package:
•1 x Pepwave AP One unit
•1 x Omni-directional Antenna
•1 x Power Supply Unit
•1 x Instruction Sheet

User Manual
http://www.pepwave.com 6Copyright © 2010
Pepwave
4Pepwave AP One Overview
4.1 Front View
4.2 Rear Panel View
Connectors
Antenna
(Left-most
Connector)
A RP-SMA connector for connecting the antenna.
WAN A 10/100BaseT Ethernet connector, normally to be connected to back haul
network.
Reset
A reset button to be depressed with a pin. Depress and hold for at least 5
seconds to restore factory defaults.
For further details, please refer to Section 10, Restoration of Factory Defaults.
Power Connector A connector for DC 12V power input, to be connected with the supplied power
adaptor.
LED Indicators
Power
OFF – Power off
ON – Power on
Status
OFF – The unit is initializing.
ON – The unit is ready.
Ethernet
OFF – The Ethernet port is not connected.
ON – The Ethernet port is connected.
Wireless OFF – Wireless is not ready.
On – Wireless is ready.

User Manual
http://www.pepwave.com 7Copyright © 2010
Pepwave
5Installation
Pepwave AP One acts as a bridge between the wireless and the wired Ethernet interface. A typical setup
is as follows:
5.1 Installation Procedures
1. Attach the antenna to the Pepwave AP One unit.
2. Connect the Ethernet port on the unit with the backbone network using an Ethernet cable. The
port could auto sense the cable is straight-through or cross-over.
3. Connect the power adapter to the power connector of the unit, and then plug in the power
adapter.
4. Wait for the status LED to turn green.
5. Connect a PC to the backbone network, and configure the IP address of the PC to be any IP
address between 192.168.0.4 and 192.168.0.254, with subnet mask of 255.255.255.0.
6. With Microsoft Internet Explorer 6 or above, or Mozilla Firefox 2.0 or above, or Google Chrome
2.0 or above, connect to the URL https://192.168.0.3.
7. When asked, enter the default admin login ID and password, admin and public respectively.
8. After logging in, the following Information main page appears. Please go to Configure > System
to facilitate further configuration of the Pepwave AP One unit.

User Manual
http://www.pepwave.com 8Copyright © 2010
Pepwave
6Information
6.1 System
System Information
AP Name This field shows the name of the AP One device defined in the configuration.
Location This field shows the location of the AP One device defined in the
configuration.
Network IP
Information This shows the current gateway IP of the AP One device.
System Time This shows the system time in respect to the time zone selected.
Up Time This shows the up time of the device since it is booted up.
Click on the Detail link next to the Network IP Information to check the following system information:
IP Address Mode, IP Address, Subnet Mask, Default Gateway, DNS Server.

User Manual
http://www.pepwave.com 9Copyright © 2010
Pepwave
6.2 Wireless
6.2.1 AP Info
Wireless Information – AP Info
Number of Wireless
Networks This indicates the number of wireless networks.
Number of
Connected Clients This indicates the number of associated clients.
Current Channel This shows which 802.11 channel the system is using.
Wireless Network
SSID This shows which SSID the client is associated.
Broadcast SSID This setting shows whether or not the ESSID of this wireless network profile
can be scanned by Wi-Fi clients.
Security Policy This setting shows the wireless authentication and encryption methods.
Default VLAN ID This setting shows the VLAN ID tagged on all outgoing packets generated from
this wireless network profile.
MAC Address
(BSSID) This shows the detailed BSSIDs for that particular wireless network profile.
Click on the Info link to check the following wireless information: Web Portal Login, Wireless Network
Firewall, MAC Filter, Bandwidth Control,Layer 2 Isolation.
Click on the Stat link to check the following networking statistics: Packets Sent, Bytes Sent, Packets
Received, Bytes Received.

User Manual
http://www.pepwave.com 10 Copyright © 2010
Pepwave
6.2.2 Connected Clients
Wireless Information – Connected Clients
Manufacturer This shows the manufacturer based on the MAC prefix.
MAC address This shows the client MAC address.
Signal This shows the signal strength.
Network SSID This shows which SSID the client is associated.
Authentication
Status This shows the client authentication method(s).
Type This shows the radio mode of the client.
Connection Length This shows the associated duration.
Click on the Details link, more networking statistics will be provided.

User Manual
http://www.pepwave.com 11 Copyright © 2010
Pepwave
Wireless Information – Connected Clients - Details
Vendor This shows the manufacturer based on the MAC prefix.
MAC Address This shows the client MAC address.
Protocol This shows the radio mode of the client.
IP Address This shows the IP address of connected client.
Network SSID This shows which SSID the client is associated.
Connection Length This shows the associated duration.
Authentication
Status This shows the client authentication method(s).
Username This shows the user name of the connected client.
Domain This shows the domain name of the connected client.
VLAN ID This shows the VLAN ID of the connected client.
Network Priority
Level This shows the priority level of internet transfers of this connect client.
Bytes Received This shows the transmitted size this client received from the AP.
Bytes Sent This shows the transmitted size this client sent out to the AP.
Packets Received This shows the packet number this client received from the AP.
Packets Sent This shows the packet number this client sent out to the AP.
Receive Errors This shows the number of errors this client received from the AP.
Transmit Errors This shows the number of errors this client transmitted to the AP.
Duplicates
Received This shows the number of duplicates received by the client from the AP.
Receive Retries This shows the number of retries this client received from the AP.
Transmit Retries This shows the number of retries this client transmitted to the AP.
Transmit Excessive
Retries This shows the number of excessive retries this client transmitted to the AP.
Receive Data Rate This shows the receive data rate of the client from the AP.
Transmit Data Rate This shows the transmit data rate of the client to the AP.
Signal (RSSI) This shows the signal strength received by the client.

User Manual
http://www.pepwave.com 12 Copyright © 2010
Pepwave
6.2.3 Nearby Networks
Wireless Information – Nearby Networks
Network Discovery This shows if the AP would scan and discover nearby network.
Scanning Interval This shows how often the AP goes to other channels to discover nearby AP.
Scanning Time This shows how long the AP stays on the other channels to discover a nearby
AP.
Manufacturer This shows the manufacturer based on the MAC prefix.
SSID This shows which SSID the client is associated.
Security This shows the client authentication method(s).
MAC address This shows the client MAC address.
Channel This shows the channel of the existing Bssid.
Signal (RSSI) This shows the signal strength.
Last Seen This indicates the time stamp of the access point sc
Status This shows the current status of this nearby network.

User Manual
http://www.pepwave.com 13 Copyright © 2010
Pepwave
7Configuration
7.1 System
Upon selecting System under Configure section from the navigation bar on the left, the following page
shows the configuration options:
7.1.1 Basic
System Settings - Basic
AP Name A user-specified name for this access point.
This value can be retrieved via SNMP.
Location A user-specified name for the location of the access point.
This value can be retrieved via SNMP.
Timezone This option specifies the time region to be used for representing the time on
the system.
Domain Name Domain name can be set for wireless clients to have a readable name for the
web management.
Keep Default IP With this option disabled, default IP 192.168.0.3 of the device will be disabled.
IP Address Mode
The options are Automatic and Manual.
Automatic: IP address of the Pepwave AP One unit is acquired from a DHCP
server on the Ethernet segment.
Manual: A user-specified IP address is used.
IP Address Mode – Manual
Static IP Address
This specifies the unique IP address for the Pepwave AP One unit to
communicate on the Ethernet segment.
This IP address is distinct from the admin IP address 192.168.0.3 on the
Ethernet segment.

User Manual
http://www.pepwave.com 14 Copyright © 2010
Pepwave
Subnet Mask This setting specifies the subnet mask of the Pepwave AP One unit.
Default Gateway This setting specifies the default gateway of the Pepwave AP One unit.
DNS Server This is the DNS server address to be used by the Pepwave AP One unit for
resolving host names.
IP Address Mode – PPPoE
PPPoE Username
This specifies the username required in order to connect via PPPoE to acquire
Internet connectivity. The information is typically determined by and can be
obtained from the ISP.
PPPoE Password
This specifies the password required in order to connect via PPPoE to acquire
Internet connectivity. The information is typically determined by and can be
obtained from the ISP.
PPPoE Service
Name
This is a PPPoE parameter which is provided by the ISP.
Note: Leave this field empty if you are not sure.
7.1.2 Advanced
System Settings - Advanced
Management VLAN
ID
This specifies the VLAN from which management sessions are allowed. The
establishment of management sessions is restricted only to the specified VLAN
ID. If Management VLAN ID is set to zero, no VLAN restriction is applied.
The default value of this setting is zero. It means no tagging is enabled
(instead of tagged with zero).
NTP Server
This is the Network Time Protocol (NTP) Server hostname to be used for
synchronizing system clock of Pepwave AP One.
The default value of this setting is pool.ntp.org.
Scheduled Reboot The system would perform reboot based on the scheduled time set. Click the
box above the Schedule to Enable this feature.
Ethernet
Speed/Duplex This setting provides the option to set the speed of the Ethernet.
AP Mode Available options are Bridge and Router. With this option set as Router, the
following Manual Router Settings will be available.

User Manual
http://www.pepwave.com 15 Copyright © 2010
Pepwave
7.1.3 Manual Router Settings
Manual Router Settings will only be available when the AP Mode in the previous section had been
selected as Router mode. You can use the AP One as a DHCP server for other devices behind.
DHCP Server Parameters
LAN IP This setting specifies the DHCP server IP address.
LAN Subnet Mask This setting specifies the subnet mask of the DHCP server.
DHCP Server Checked the box to enable the DHCP Server of this device. Following options
will be enabled once you have checked and enabled the service.
IP Start Range This setting specifies the first address in the range of IP addresses to be
assigned to DHCP clients.
IP Stop Range This setting specifies the last address in the range of IP addresses to be
assigned to DHCP clients.
Subnet Mask This setting specifies the subnet mask to be used by DHCP clients.
Broadcast Address This setting specifies the broadcast address to be used by DHCP clients.
Gateway This setting specifies the default routing gateway to be used by DHCP clients.
DNS 1 This setting specifies the IP address of the primary DNS Server to be offered to
DHCP clients.
DNS 2 This setting specifies the IP address of the secondary DNS Server to be
offered to DHCP clients.
DNS 3 This setting specifies the IP address of the tertiary DNS Server to be offered to
DHCP clients.
Lease Time
This setting specifies the length of time throughout which an IP address of a
DHCP client remains valid. Upon expiration of the Lease Time, the assigned IP
address will no longer be valid and the renewal of the IP address assignment
will be required.

User Manual
http://www.pepwave.com 16 Copyright © 2010
Pepwave
7.2 Wireless Networks
Upon selecting Wireless Networks under Configure section from the navigation bar on the left, the
following shows the configured SSID available on the system:
General Wireless Networks Settings
Wireless Network
SSID The SSID of the virtual Access Point (AP).
Security Policy Shows the configured wireless authentication and encryption methods.
Default VLAN ID
This setting specifies the VLAN ID to be tagged on all outgoing packets
generated from the virtual AP (i.e. packets that travel from the Wi-Fi segment,
through the Pepwave AP One unit to Ethernet segment via the LAN port).
If 802.1x is enabled, a per-user VLAN ID can be specified in the authentication
reply from the Radius server. If it is set, the value specified via Default VLAN
ID will be overridden.
Status Shows whether the virtual AP is enabled or disabled.
MAC Address
(BSSID) Shows the detailed BSSIDs.
Portal Shows if the InControl Guest Portal is enabled. Please refer to section 7.2.2 for
details.
To add a new virtual AP, click the Add button. To modify the settings for a virtual AP, click the link Edit on
the right of the desired WLAN SSID, upon which the following Wireless Network Details is displayed.
Click on the Info link to check the following networking statistics: Broadcast SSID, MAC Filter,
Bandwidth Control, Layer 2 Isolation.
General Wireless Networks Settings – Info
Broadcast SSID This shows if the Broadcast SSID feature of this network is enabled.
MAC Filter This shows if the MAC Filter feature of this network is enabled.
Bandwidth Control This shows if the Bandwidth Control feature of this network is enabled.
Layer 2 Isolation This shows if the Layer 2 Isolation feature of this network is enabled.

User Manual
http://www.pepwave.com 17 Copyright © 2010
Pepwave
7.2.1 Wireless Network Details - Basic
Wireless Networks Details - Basic
Enable Select Yes to enable the virtual AP, or No to disable the virtual AP.
By default, the virtual AP is enabled.
Wireless Network
SSID This setting specifies the SSID of the virtual AP to be scanned by Wi-Fi clients.
Broadcast SSID
This setting specifies whether or not the ESSID of the virtual AP can be
scanned by Wi-Fi clients.
Note that the BSSID (i.e. the MAC address of the virtual AP) cannot be hidden
from the scan. To associate with the virtual AP, clients must specify the correct
ESSID upon association.
Broadcast SSID is enabled by default.
Security Level
This setting configures the wireless authentication and encryption methods.
Available options are: Open - No Encryption, Static WEP, 802.1X, WPA-
TKIP and WPA2-AES:CCMP.
Selecting Open - No Encryption disables encryption.
For details on the other options, please refer to:
7.2.1.1 - Static WEP Parameters
7.2.1.2 - 802.1x Parameters
7.2.1.3 - WPA Parameters

User Manual
http://www.pepwave.com 18 Copyright © 2010
Pepwave
7.2.1.1 Static WEP
The configuration of Static WEP parameters enables pre-shared WEP key encryption. Authentication is
not supported by this method.
The security level of this method is known to be weak.
Static WEP parameters are entered via the following screen upon selection:
Static WEP Parameters
Key Size
The setting can be configured as either 40 bits (64-bit WEP) or 104 bits (128-
bit WEP).
(For WDS setting, 128 bits will also be available.)
Key Format
The setting can be configured as either ASCII or HEX.
•ASCII will be applied to encryption keys that are manually entered
only.
•HEX will be applied to encryption keys that are either manually entered
or automatically generated.
Passphrase Combination of words and characters used to generate an encryption key.
Click Generate Key to create the key.
Encryption Key
This setting specifies a user-specified encryption key value.
For ASCII format, key length is either 5 or 13.
For HEX format, key length is either 10 or 26.
Shared Key
Authentication
This setting enables the use of shared key authentication. Open authentication
is the default authentication.

User Manual
http://www.pepwave.com 19 Copyright © 2010
Pepwave
7.2.1.2 802.1X Parameters
The configuration of 802.1X parameters enables Radius-based 802.1X authentication with a dynamic
WEP key. Once selected, Radius Server Setting will be available.
The configuration screen is as follows:
802.1x Parameters
802.1X Version
This setting selects between v1 or v2 of the 802.1x EAPOL.
When v1 is selected, both v1 and v2 clients can associate with the access
point. However, when v2 is selected, only v2 clients can associate with the
access point.
Most modern wireless clients support v2. In the event that there are stations
that do not support v2, select the option v1.
By default, the value of the setting is v2.
WEP Key Size The setting can be configured as either 40 bits or 104 bits.
Re-keying Period
This setting specifies the length of time throughout which the broadcast key
remains valid. Upon expiration of Re-keying Period, the broadcast key will no
longer be valid and the renewal of the broadcast key will be required.
The default is 14400 seconds (i.e. 4 hours).
A value of 0disables re-keying.
7.2.1.3 WPA parameters
The configuration of WPA parameters enables WPA-TKIP, WPA2-AES:CCMP and WPA-TKIP and
WPA2-AES:CCMP.
To enable WPA and WPA-PSK, configure WPA-TKIP. To enable WPA2 and WPA2-PSK, configure
WPA2-AES.
When WPA or WPA2 is configured, Radius-based 802.1x authentication with TKIP encryption method is
enabled. Under this configuration, the Pre-Shared Key option should be disabled.
The security level of this method is known to be very high.
When WPA-PSK or WPA2-PSK is configured, a Pre-Shared Key, or Passphrase, is used for data
encryption and authentication. Under this configuration, the Pre-Shared Key option should be enabled.
Key length must be between 8 and 63 characters (inclusive).
The security level of this method is known to be high.

User Manual
http://www.pepwave.com 20 Copyright © 2010
Pepwave
7.2.1.4 Radius Server Settings
Radius Server Settings
Primary Host When 802.1x authentication is configured, the Radius server specified by this
setting will be used for authentication and accounting.
Secret This is the secret for accessing the Radius server.
Authentication Port This specifies the UDP port number for the Authentication port of the Radius
server.
Accounting Port This specifies the UDP port number for the Accounting port of the Radius
server.
Secondary Host This setting specifies the Radius server to used for authentication and
accounting in the event that the host specified by Primary Host is unavailable.
Maximum
Retransmission
This specifies the maximum number of retry for RADIUS authentication.
By default, it is set as 3.
Radius Request
Interval
This specifies the time interval in second between each RADISU request
attempt. Note that the request time interval would be doubled every
retransmission.
By default, it is set as 3s.