Take CPE as an example.

Access web management page of CPE

Please follow this link to access the web interface of CPE.

Note:CPE210 is a 2.4GHz device which can only broadcast 2.4GHz wireless network;CPE510 is a 5GHz device which can only broadcast 5GHz wireless network.Here we take CPE510 as example in this article.

Run Quick Setup

Step 1:

Go to Quick Setup-> Choose “Access Point” –> Click Next

Step 2:

The default IP Address of CPE is 192.168.0.254,we can change it to other IP addresses to fit in the main router’s network.For example,if the main modem/router’s IP Address is 192.168.1.1,we can set up the CPE510 as 192.168.1.* (*=2~254)，Subnet Mask 255.255.255.0 .

It is also fine to leave it as the default value if you are not sure about the main router’s IP address,then click Next.

Step 3:

Customize your wireless name (SSID) and password

Step 4:

Click: Finish, and wait for the settings to take effect, it takes about 1 minute.

Relocate the CPE

You may now unplug the computer from the LAN port of the PoE adapter,and connect the wired network(internet modem/router) into the LAN port.

Final Computer Setup Reversion(For Windows OS)

We need change the IP settings back on the computer after the configuration.

Please find Local Area Connection/Ethernet on the computer, if you cannot remember the procedure, please refer to the FAQ again.

How to login to the Pharos’ web management page?

How to Configure Pharos Device

Read More : TP-Link Pharos Series Installation Guide

Go to Properties →Internet Protocol Version 4(TCP/IP)→ Select “Obtainan IP address automatically” and “Obtain DNS server address automatically”

Click OK to exit

Click OK again to apply the settings.

Final Computer Setup Reversion (For Mac OS X)

Go to the Apple->System Preferences->Network-> Highlight Ethernet –>Configure IPv4: Using DHCP.

Click Apply.

Get to know more details of each function and configuration please go to Download Center to download the manual of your product.

.

.

This guide introduces how to build a wireless network using the CPE/WBS products:

1. Check the System Requirements

2. Log In to the Device

3. Set Up the Wireless Network

The following parts detailedly introduces these steps.

1Check the System Requirements

Operating System:

Microsoft Windows XP, Windows Vista, Windows 7, Windows 8, Windows 10, Linux, or Mac OS X.

Web Browser

Google Chrome, Safari, Firefox, and Apple Safari. IE browsers are not recommended.

2Log In to the Device

Before configuring the device, you need to access the PharOS configuration interface. Follow the steps below:

1)Connect your PC to the device.

2)Set the IP address of your PC as static IP address on 192.168.0.X subnet (X ranges from 2 to 253, e.g.192.168.0.10)

Figure 2-1Specifying the IP Address

3)Launch a web browser on and enter the management IP address of the device (192.168.0.254 by default) in the address bar to load the login page of the PharOS configuration interface.

Figure 2-2Entering the Management IP Address

.

4)Use admin for both of User Name and Password. Select the appropriate language from the Language drop-down list. Read and agree the terms of use, then click Login.

Figure 2-3Loging In

5)Create a new username and password for network security. Click Finish to log in to the PharOS.

Figure 2-4Creating a New Account

3Set Up the Wireless Network

You can use the Quick Setup wizard to quickly configure your device step by step. Choose the suitable operation mode according to your network environment and follow the step-by-step instructions.

3.1Access Point

Follow the steps below to configure the device as Access Point mode:

1)Go to the QUICK SETUP page, select Access Point and click Next.

Figure 3-1Selecting an Operation Mode

2)In the LAN Settings section, specify the LAN IP address and the Subnet Mask for the device. Then, click Next.

Figure 3-2Specifying the LAN Settings

3)In the Wireless AP Settings section, specify the basic wireless parameters to create a wireless network. Click Next.

Figure 3-3Specifying the Wireless AP Settings

4)In the Finish section, review the configurations and click Finish to complete the quick setup.

Figure 3-4Checking the Settings

5)Connect the device according to your network topology and use it normally.

3.2Client

Follow the steps below to configure the device as Client mode:

1)Go to the QUICK SETUP page, select Client and click Next.

Figure 3-5Selecting an Operation Mode

2)In the LAN Settings section, specify the LAN IP Address and the Subnet Mask for the device. Then, click Next.

Figure 3-6Specifying the LAN Settings

3)In the Wireless Client Settings section, click Survey to search for the upstream wireless network.

Figure 3-7Searching for Upstream Wireless Networks

4)Select the desired wireless network and click Connect.

Figure 3-8Selecting an Upstream Wireless Network

5)In the Wireless Client Settings section, specify the wireless parameters to connect to the specified wireless network. Click Next.

Figure 3-9Specifying the Wireless Client Settings

6)In the Finish section, review the configurations and click Finish to complete the quick setup.

Figure 3-10Checking the Settings

7)Connect the device according to your network topology and use it normally.

3.3Repeater (Range Extender)

Follow the steps below to configure the device as Repeater (Range Extender) mode:

1)Go to the QUICK SETUP page, select Repeater and click Next.

Figure 3-11Selecting an Operation Mode

2)In the LAN Settings section, specify the LAN IP address and the Subnet Mask for the device. Then, click Next.

Figure 3-12Specifying the LAN Settings

3)In the Wireless Client Settings section, click Survey to search for the upstream wireless network.

Figure 3-13Searching for Upstream Wireless Networks

4)Select the desired wireless network and click Connect.

Figure 3-14Selecting an Upstream Wireless Network

5)In the Wireless Client Settings section, specify the wireless parameters to connect to the specified wireless network. Click Next.

Figure 3-15Specifying the Wireless Client Settings

6)In the Finish section, review the configurations and click Finish to complete the quick setup.

Figure 3-16Checking the Settings

7)Connect the device according to your network topology and use it normally.

3.4Bridge

Follow the steps below to configure the device as Bridge mode:

1)Go to the QUICK SETUP page, select Bridge and click Next.

Figure 3-17Selecting an Operation Mode

2)In the LAN Settings section, specify the LAN IP address and the Subnet Mask for the device. Then, click Next.

Figure 3-18Specifying the LAN Settings

3)In the Wireless Client Settings section, click Survey to search for the upstream wireless network.

Figure 3-19Searching for Upstream Wireless Networks

4)Select the desired wireless network and click Connect.

Figure 3-20Selecting an Upstream Wireless Network

5)In the Wireless Client Settings section, specify the wireless parameters to connect to the specified wireless network. Click Next.

Figure 3-21Specifying the Wireless Client Settings

6)In the Wireless AP Settings section, specify the parameters to create a new wireless network for the downstream clients. Click Next.

Figure 3-22Specifying the Wireless AP Settings

7)In the Finish section, review the configurations and click Finish to complete the quick setup.

Figure 3-23Checking the Settings

8)Connect the device according to your network topology and use it normally.

3.5AP Router

Follow the steps below to configure the device as AP Router mode:

1)Go to the QUICK SETUP page, select AP Router and click Next.

Figure 3-24Selecting an Operation Mode

2)In the WAN Connection Type section, specify the connection type according to your need and click Next.

Figure 3-25Specifying the WAN Connection Type

The device supports three types of the WAN connection, including PPPoE, Dynamic IP and Static IP. You can contact with your ISP to confirm your WAN connection type.

»PPPoE

Select PPPoE and click Next, then the following page will appear. In the WAN Settings section, specify the parameters that are provided by your ISP and click Next.

Figure 3-26Specifying the WAN Settings

»Dynamic IP

Select Dynamic IP and click Next. In this type, the device will obtain a WAN connection automatically without any WAN configurations.

»Static IP

Select Static IP and click Next, then the following page will appear. In the WAN Settings section, specify the parameters that are provided by your ISP and click Next.

Figure 3-27Specifying the WAN Settings

3)In the Wireless AP Settings section, specify the basic wireless parameters to create a wireless network. Click Next.

Figure 3-28Specifying the Wireless AP Settings

4)In the Finish section, review the configurations and click Finish to complete the quick setup.

Figure 3-29Checking the Settings

5)Connect the device according to your network topology and use it normally.

3.6AP Client Router (WISP Client)

Follow the steps below to configure the device as AP Client Router (WISP Client) mode:

1)Go to the QUICK SETUP page, select AP Client Router (WISP Client) and click Next.

Figure 3-30Selecting an Operation Mode

2)In the WAN Connection Type section, choose the connection type according to your need and click Next.

Figure 3-31Specifying the WAN Connecting Type

The device supports types, PPPoE, Dynamic IP and Static IP for the WAN connection. You can contact with your ISP to confirm your WAN connection type.

»PPPoE

Select PPPoE and click Next, then the following page will appear. In the WAN Settings section, specify the parameters that are provided by your ISP and click Next.

Figure 3-32Specifying the WAN Settings

»Dynamic IP

Select Dynamic IP and click Next. In this type, the device will obtain a WAN connection automatically without any WAN configurations.

»Static IP

Select Static IP and click Next, then the following page will appear. In the WAN Settings section, specify the parameters that are provided by your ISP and click Next.

Figure 3-33Specifying the WAN Settings

3)In the Wireless Client Settings section, click Survey to search for the upstream wireless network.

Figure 3-34Searching for Upstream Wireless Networks

4)Select the desired wireless network and click Connect.

Figure 3-35Selecting an Upstream Wireless Network

5)In the Wireless Client Settings section, specify the wireless parameters to connect to the specified wireless network. Click Next.

Figure 3-36Specifying the Wireless Client Settings

6)In the Wireless AP Settings section, specify the parameters to create a new wireless network for the downstream clients. Click Next.

Figure 3-37Specifying the Wireless AP Settings

7)In the Finish section, review the configurations and click Finish to complete the quick setup.

Figure 3-38Checking the Settings

8)Connect the device according to your network topology and use it normally.

.

CORTROL Global is one of the market’s most comprehensive enterprise-level VMS solutions, featuring interactive maps linked to alarms, an exceptional event and action manager, analytics tools, video wall support, and proactive components. In addition, the edge recording ensures your data safety by synchronizing with IP storage devices, archive replication, advanced system health monitoring, and failover, which reduces the disruption of your video surveillance recordings to zero. All this, plus various customization possibilities and Ganz’s excellent technical support.

With CORTROL Global, you can optimize the command center’s video wall. Create custom configurations or force users to specific video walls. For example, create “Area Focused” video walls to review footage quickly.

• Highly secure encrypted camera and client communication
• Powerful event and action manager
• Real-time geolocation / map / mobile tracking
• Multiple access control integrations, including Feenics Keep , Keri^® Systems Doors.net , Gallagher Command Center , NAPCO Continental , and more
• Cloud, VM Environments supported
• Powerful FR, LPR, AI, and UICC modules
• Intuitive configuration and deployment features will have your network up and running quickly and simply.
• Advanced features: event & action manager, powerful analytics: FR, LPR, VCA, 64-bit core, integrations/API maps & mobile streaming
• Supports  15, 000+ models of network cameras and network video servers from over 190+ manufacturers

Full HD and UHD Resolution
Stream up to 4k and 8k resolution.

Advanced Event and Action Manager
Specify the desired outcome of your video surveillance system’s operation. Determine how the software reacts to any event caught on camera and how it turns events into an automated process. For example, send emails, activate DI/DO, interact with any other software, or bring the operator’s attention to a camera that requires immediate action. This functionality can be used for a single event or a set of sequenced circumstances to eliminate false alarms and improve the efficiency of your surveillance system.

Multiple Integrations
CORTROL is engineered to unify Video Surveillance, Access Control, Video Analytics, IoT Sensors (vaping sensors, bullying, and gunshot detectors ), license plate recognition , deep cloud learning , intercom communications, biometrics, and other IP Systems to provide real-time situational awareness. Go to the integration section>>

CORTROL Video Analytics (CVA)
Advanced computational neural network engine provides AI analytics to any camera in your system. For example, create Zones/Lines to alert on perimeter intrusion, loitering, and AI Classification of persons, vehicles, and animals. Become efficient with the information you see. Take advantage of the full potential of your video surveillance system with video content analysis. Improve the functionality of your surveillance while analyzing large amounts of data to determine a specific pattern in a particular task. 

Smarter Business Security
CORTROL connects video, locks, card readers, or door contacts via Cloud, delivering versatility to smart business security –  all at a very economical cost.  CORTROL Global is engineered for medium and large enterprise business space.

Maps
Maps provide a complete examination of the entire installation of cameras, delivering immediate visual verification. All the alerts are integrated with the maps and can be set up to be viewed on the overview as well — you can specify the location of the alarm event immediately.

Web Access
Get permanent access to live streaming and archive video through your web browser.

Information Channels
Streaming branding, informational or urgent announcements

Alarm Acknowledgement
Make sure that no event skips the attention of the operator. An operator must confirm all alarms, automatically generating a bookmark towards the event in the archive. By requiring the operator to record actions in a journal, there is a tracking of performed actions towards each event.

Integrations and API
CORTROL offers customizable integration with other software systems in the form of a software development kit (SDK), CORTROL RESTful API.

Mobile Applications
You can use your mobile device to access live and archived streams. Use PTZ presets, control 2-way audio, or the mobile phone camera to stream video and audio directly to the server.

Live Streaming
The streaming server can make a live cast of videos on a website or YouTube.

Edge Recording
You can synchronize all your data with IP device storage. With this feature, if the network connection with any camera is lost, the camera still records your data. It is fully transferred to your server as soon as the network connection is re-established.

GANZ CORTROL VMS Setup Guide

Read Next :

• GANZ DMS Lite User Manual
• TP-Link Pharos Series Installation Guide
• Turing SMART Station Installation Guide

Ganz CORTROL is also available in the following editions:

• CORTROL Premier – Standalone System 24Ch / 48Ch / 72ch / 96ch

Learn More About Ganz CORTROL VMS Editions and Features.

Reiated settıngs

Addıtıonal admmıstnMıve tooB

Bıtlocker settıngs

Device Manager

System ınto

Have a question?

Get help

Make Window$ betten

G™e us feedback

1. CORTROL Prerequisites

There are a few requirements for the system the GANZ CORTROL Client will run on.

The ports for remote connections should be enabled through the firewalls (default ports are 60554 for the GANZ CORTROL Client)

The Bit version of Windows, 32-Bit vs. 64-Bit on the PC/Server should be confirmed.

For Windows 7: To confirm your Windows bit version, go to Control Panel > System and confirm System type as 32-Bit or 64-Bit.

For Windows 10: To confirm your Windows bit version, go to “Settings > System and confirm System type as 32-Bit or 64-Bit.

© Home AbOUt

Si Windows10

O Dısplay ^ni,me bdenmeade2

Rename thıs PC

□ Notmcatıons & actıons

,_K _ „ , _ Orgamzatıon CBCAMER1CA

O Power & sleep

Managc o» dBconncct from worfc or school

O Battery Edrtıon Windows 10 Pro

= storage Versıors ¹⁷⁰³

OS Boild 15063.483

Cg Tablet mode ProductlO 00342-50721-92491-AAOEM

O Multıtaskıno Processor Intel(R) CorefTM) İ7 6600U CPU ® 260GHz 2S1

GHz

& Projecting to thrs PC ınstalled RAM 8.00 GB (736 GB usabte)

System type 64-bit operabng system, x64-based processor

X Shared expetıences _{Pen ând |oucf)} j*, _{or t0UC}h mput ıs avaılable «or thıs dısplay

O About Change product key or upgrade your edition of Wındows

Read the Prıvacy Statement for Wındows and Microsoft Services

Read the Microsoft Services Agreemcnt that applies to our Services

Rcad the Microsoft Softvrare Ucense Terms

1. CORTROL Client Installer

The CORTROL Client Installer can be found at Ganz Security/Software includes both the CORTROL Management Console, and the CORTROL Client installer.

From the link please select and download either CORTROL Console 32bit or 64bit, depending on the Windows OS bit version of the host server.

For convenience, links to the 32Bit, and 64Bit versions of the CORTROL Console are provided below.

Note: For most browsers, any downloaded files can be found in the Windows Download folder.

I

/* GANZ

JyCDRTRDL Client 32Bit

İ

Z GANZ

y’CORTROL Client 64Bit

^v — J

1. Client Installation

• Navigate to the Microsoft Windows download folder.
• Double click on the CORTROL Client installer, to begin the installation process.
• Select the installation language and click Next.
• Accept the terms of agreement and click Next.
• Accept default installation location and click Next. (Change location destination if required.)
• Select the needed application language and click Next.
• Once installation is complete, click Finish.

1. Client Configuration

To launch the CORTROL Client interface, double click on its desktop icon. H

The Client will require configuration, to connect to the CORTROL Global Demo Server.

• Select “Disconnect”, as no server is currently configured.
• Select “Connection” located in the top right corner.

• Select the “Local Server” listed under “Connections, and then select “Edit”
• Leave the default “Server title”
• For the “IP address and port” enter: 173.42.78.61 – Leave the default port at 60554.
• Enter “demo” all lower case for the “Username”
• Enter “2468” for the password.
• Select “Remember Password” and then click on “Save”.
• Select the “Local Server” listed under “Connections” and then click on “Connect”.
• Click on the “X” to close / exit, “Connections”

CORTROL Client Download

V2.0.3

The “Demo” user have been giving no restriction on functionality within the GANZ CORTROL Client.

Please reference the CORTROL Client Manual for navigation, and usage.

CORTROL Client Quick Guide

v1.0.2

Main window

The main window displays content provided by the server, which depend upon the selected tab. Please see the corresponding sections of this document for detailed information about each mode.

The Ganz CORTROL Client application window title displays window name, display number, and computer station name.

Upper right corner – window controls

From this panel, the Ganz CORTROL Client application window can be:

• Opened in full screen mode
• Minimized to taskbar
• Maximized/restored to default size
• Closed

To enter full screen, F11 can also be used; to exit full screen mode, press Escape or F11 on the keyboard.

Upper panel – tabs

I I Live £> Playback Sequence Smart search /A Alerts pa~| Library

The upper panel contains tabs that allow you to quickly switch between main software functionality. The following tabs may be available, depending on the software version:

• Live: real-time video
• Playback: recorded video
• Sequence Explorer: recorded video analysis
• Smart Search: recording motion video analysis
• Alerts: generated alerts
• Library: exported video and snapshots

Upper panel – server connections

S Connection (1 servers)

The Connection button opens server connection setup window and displays the number of currently configured servers.

Upper right: main menu

File Edit View Help

This section contains the main application menu items.

• File; Exit: close the Ganz CORTROL Client Application
• Edit; Settings: application settings
• View: operation modes

o Always on top

o Exclusivity Mode

o Locked application

Help; About: about Ganz CORTROL Client

Server Connections

If you wish to connect to a remote server, follow the steps below.

Select the Connection section in the upper panel to bring up the dialog box.

Select a server by clicking it in the item list and click Connect to connect with the selected server. Server resources will automatically appear in the left-hand panel.

Click Disconnect in this same dialog box to log out from the selected server.

Video Channels

Each video displayed in live view is placed into a ‘slot’, a part of the layout, called viewport.

X rf* Traffic Cam

Lower-left: Stream details

i f H.264 VGA 30FPS 2.5 Mb/s

Enabled items are highlighted yellow:

Upper-left: general viewport controls

o X: close the stream and free the viewport

o Lock: unlocked/locked (Unlocked video in can be replaced by other cameras)

o Camera name: Name given the camera

Upper-right: Current time on the server from which the device originates

o Recording status: X = not recording, yellow arrow = recording

o Motion detector status: running = motion present, standing still = no motion

o Video codec of the stream: H.264, MJPEG

o Picture resolution: XVGA, 2.8MP

o Stream frame rate: xFPS

o Stream bitrate: xKb/s, xMb/s

Lower-right: Controls

o Instant playback: Playback of currently select time, (Default, last five minutes)

o PTZ toggle: PTZ HUD and bottom panel ON/OFF

o DPTZ toggle: Toggle digital PTZ control

o Motion grid: ON/OFF

o Substream: Auto/main/substream

o Incoming audio: ON/OFF

o Audio OUT: Press and hold the microphone to speak

o Aspect ratio: Auto/stretch to fill viewport/original

o Notification panel toggle: Toggle display of device centric notification panel

o Bookmark: Bookmark current selection of time for later retrieval, review

o Snapshot: Export snapshot of current image to library

Bottom: PTZ controls

• Presets Tours: Listing presets, with option to initiate tour
• HUD (Heads Up Display): ON/OFF (Centre: PTZ HUD controls) o Pan and tilt arrows

o Zoom slider

o Iris slide (If camera supported)

o Focus slider (If camera supported)

Instant Playback

The following overlay controls are available in the instant playback mode:

Camera Center: Play/Pause

o Drag to the center of the line to pause drag right to go fast forward o Drag left to rewind fast

o Release from dragging to continue normal playback

Bottom right: Controls

o Place: Click to play

o Clock icon: Specify time, date/hours/minutes

o Bookmark: Bookmark current selection of time for later retrieval, review

o Snapshot: Snapshot of current image, saved automatically

o Archive: Export loaded footage displayed in timeline

Bottom: Navigation

1/9/2017 L

4:5607 PM

11/9/2017

5:01:07 PM

o Left/Right <> arrows: Adjust loaded video time boundaries (Default, last five minutes) ■ Drag right to go forward in time drag left to go backwards in time

o Vertical yellow line: Indicates current playback moment, ■ Drag it anywhere or click to move along the timeline

Playback (Archive) Mode

For security reasons, it has been made impossible to erase recordings from individual channels and/or time periods. Recordings

Select Playback tab to switch to archive playback mode. Your current layout will be used, and recorded video streams will be displayed for channels with enabled recording.

• Layouts: Double-click your desired layout to load it
• Layout templates: Double-click your desired layout template to load it
• Channels:

o Double-click or drag and drop the channels of your choice to fill the viewports

o First empty viewports are filled; then non-locked channels are replaced one by one)

o Each channel can be expanded to access recordings of its main or secondary stream.

o All footage having no associated active channels will be available under Orphan archive tracks.

The following viewport overlay controls are available in the playback mode, upon selection of a viewport:

• Upper left:

o X: close the stream and free the viewport

o Lock: unlocked/locked (Unlocked video in this viewport can be replaced by other cameras)

o Camera name: Name given the camera

• Lower-right: Controls

o DPTZ toggle: Toggle digital PTZ control

o Aspect ratio: Auto/stretch to fill viewport/original

o Motion grid: ON/OFF

Playback timeline

Right below the video stream, the Timeline is displayed:

• Time intervals: Show the timeline scale;

o Click and drag left/right to move the timeline

• The video footage outline is shown twice:

o Upper timeline: Contents of currently selected stream, with corresponding channel name

o Lower timeline: Content summary for all channels currently present in the viewport layout

• White line: Indicates recorded video data
• Cyan line: (A little bit wider than the white line) indicates recorded motion data
• Blue line: (A little bit wider than the cyan line) indicates recorded incoming audio data
• Yellow vertical line: Denotes current playback position

Playback Navigation controls

The playback navigation controls are located at the bottom of the window:

• Timestamps: Timeline start and stop
• Left/Right <> arrows: Adjust the loaded footage time boundaries (Default, last five minutes) o Drag right to go forward in time drag left to go backwards in time

Motion Search:

Left/Right <> arrows move forward or back to next recorded motion

Playback Navigation:

o Use the Play/Pause button to start playback

o Use the <> arrows near the Play button to go one frame back/forward

o -/+ steps: click to go back/forward with a step of 5 seconds, 1 minute, 1 hour or 24 hours o |< >| arrows: go to the very beginning/very end of the footage

• Playback speed:

o Drag the blob to adjust playback speed from +/-0.5x to +/-32x

o The Pause button duplicates the main pause control

• Clock icon: Specify time, date/hours/minutes
• Bookmark: Create bookmark for later retrieval, review
• Snapshot: Snapshot of current image, saved automatically
• Multi-Snapshot: Snapshot of all channels currently present in the viewport layout
• Archive: Export loaded footage displayed in timeline

o Option of multi-channel, or single channel archive export

If you want to set up a Wi-Fi hotspot outdoors like in a plaza or farm, use Omada Outdoor EAPs instead, such as EAP225-Outdoor and EAP110-Outdoor. That’s because Omada outdoor EAPs are designed to provide wireless access for mobile terminals, while Pharos devices are more suitable for long-distance communications. However, if you still want to use Pharos Products in that scenario, refer to Device A in 1 Point to Point (PtP) to set up the device.

1Point to Point (PtP)

Figure 1-1PtP Application

The PtP application is to realize the communications between two isolated locations, such as two sites separated by a river, hill, railway, and so on. The wireless PtP link acts as a very long and invisible cable. It simplifies the network deployments because you do not need long-distance cabling between the two sides. To build a PtP link, you need two Pharos devices. We recommend that you configure one in AP Mode and the other in Client Mode.

Figure 1-1 shows a typical example of the PtP application: Bridging the internet connection from a downtown house to another house on a small island where no ISP provides internet access.

For the downtown house, there are already a modem and router together to provide internet access for computers and mobile terminals. Configure Device A to work in AP Mode and connect it to the LAN port of the router. In AP Mode, Device A creates a Wi-Fi signal to the designated area so that wireless clients can access the network after connecting to it.

For the house on the island, configure Device B to work in Client Mode and connect it to the SSID of Device A wirelessly. In Client Mode, Device B acts as a wireless adapter to receive the wireless signal from the remote root AP (Device A). Connect it to a router or indoor AP via Ethernet cables, then mobile terminals like laptops and mobile phones can access the internet by connecting to the SSID of the router or indoor AP.

TP-Link Pharos Series Installation Guide

Read More :

1. Comfast Long Range WiFi Access Point Setup
2. How to Setup Email Notifications via Gmail
3. SADP Tool Software User Manual

2Point to Multi-Point (PtMP)

Figure 2-1PtMP Application

The PtMP application is often used when multiple sites need to connect to a remote center. The device at the remote center usually works in AP Mode and the others work in Client Mode. To cover all the Clients, the AP should have a wide enough beamwidth. A WBS device installed with a sector antenna is recommended.

Figure 2-1 shows a typical PtMP application. A company has three warehouses that are located far away from the head office. It plans to construct a PtMP link to realize remote monitoring of the warehouses from the head office.

To construct the PtMP link, for the head office, configure Device D to work in AP Mode and connect it to the switch that the Monitoring Host is connected to. For the warehouses, configure the Pharos devices to work in Client Mode. Connect them to the SSID of Device D wirelessly, and to the cameras via Ethernet cables. Then the four sites form a local area network and employees in the head office can monitor the warehouses in real time via the Monitoring Host.

3Wireless Internet Service Provider (WISP)

Figure 3-1WISP Application

When providing internet service for some remote areas that have no wired internet access yet, ISPs usually choose a wireless solution instead of a wired solution to avoid cabling over long distances. The WISP application is often used in this kind of scenario. Figure 3-1 shows the network topology. As you can see, it is a combination of PtP and PtMP applications.

For this scenario, subscribers are often kilometers away from each other. Find a place that is approximately the center of the subscribers and suitable to install Pharos devices, and mark it as Site 2. Then find the nearest location to Site 2 that has internet access, and mark it as Site 1.

Deployment of the PtP Link

The PtP link is to realize the long-distance wireless connection between Site 1 and Site 2.

For Site 1, deploy a device (Device 1) and configure it to work in AP Mode. Connect it to the existing network via Ethernet cables.

For Site 2, deploy a device (Device 2) and configure it to work in Client Mode. Then connect it to the SSID of Device 1 wirelessly so that it can communicate with Device 1.

Deployment of the PtMP Link

The PtMP link is the last mile of the internet connections to the subscribers.

For Site 2, deploy a device (Device 3) and configure it to work in AP Mode. Connect it to Device 2 via Ethernet cables. Device 3 is used to provide wireless coverage for the subscribers. As mentioned in 2 Point to Multi-Point (PtMP), a WBS device installed with a sector antenna is recommended. If Device 3 cannot cover all the subscribers, deploy more devices in different directions to achieve the goal.

For the devices at subscribers’ homes like Device 4 and Device 5, there are two configuration choices:

Choice 1: Client Mode

This is the most common use, and a Wi-Fi router is needed.

Configure the device (Device 4) to work in Client Mode. Connect it to the ISP’s network wirelessly, and to a Wi-Fi router via Ethernet cables. Computers and Mobile terminals can access the internet by connecting to the Wi-Fi router.

Choice 2: AP Client Router (WISP Client) Mode

AP Client Router Mode is used in the following two scenarios:

■The ISP needs to have good control of user networks, like limiting the ingress and egress bandwidth of the user networks.

■The user has no Wi-Fi routers.

Configure the device (Device 5) to work in AP Client Router Mode and connect it to Device 3 wirelessly. In AP Client Router Mode, Device 5 acts as a wireless client in the ISP’s network and a wireless NAT router in the user network. Both wired and wireless terminals can access the internet after connecting to Device 5. No extra Wi-Fi router is needed, but there are some concerns to take into consideration.

■The installation position for Device 5 has more stringent requirements than that for Device 4 in Choice 1. In addition to ensuring that Device 5 can communicate with Device 3, you should also ensure that its wireless coverage range can cover the areas where the subscriber needs to access the internet.

■Mobile terminals that are far away from the Pharos device may fail to connect to the wireless network although they can scan it. This is because the mobile terminals are in the coverage range of the Pharos device, but the Pharos device is not in their range. For more details, refer to Why Does My Cellphone Fail to Connect to the Remote Outdoor Access Point?

Operation Modes

The Pharos series products support multiple operation modes to satisfy user’s diverse network requirements. This chapter introduces typical usage scenarios of different modes. For more information, refer to Common Applications for Pharos Products.

1. Access Point
2. Client
3. AP Client Router (WISP Client)
4. AP Router
5. Repeater
6. Bridge

Note:

Repeater mode or Bridge mode is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface.

1. Access Point

In Access Point (AP) Mode, the device acts as a central hub and provides wireless access point for wireless clients, thus the AP Mode is applicable to the following three scenarios. Meanwhile, Multi-SSID function can be enabled in this mode, providing up to four wireless networks with different SSIDs and passwords.

■ Scenario 1

Access Point

LAN: 192.168.7.2

AP Client Router

LAN: 192.168.0.254

WAN: Dynamic IP

Network requirements: Establish the network coverage in the remote areas without long­distance cabling.

The device in the network: In the adjacent town covered by wired network, ISP (Internet Service Provider) can put up a device in AP Mode to access the internet and transform wired signal into wireless one. In the remote area, users can put up a device in AP Client Router Mode to access the wireless network.

Advantages: Transmit data wirelessly across a long distance and reduce the cabling cost.

■ Scenario 2

Access Point

LAN: 192.168.0.254

Client

LAN: 192.168.0.2

Network requirements: Combine two separate office networks into one.

The device in the network: The device in AP Mode connects to one office network and creates a wireless network. The device in Client Mode connects to the other office network and the wireless network.

Advantages: Establish a point-to-point WLAN across a long distance to achieve the connectivity between two networks and avoid the cabling trouble.

■ Scenario 3

Laptop/Tablet/Smartphone

Network requirements: Establish wireless network coverage in the campus, community, industrial park or public place to provide wireless access for users.

The device in the network: With the access to campus wired network or other wired local area networks, the device in AP Mode provides the wireless access for wireless clients, such as smart phones, laptops and tablets to connect to the network.

Advantages: Enrich the access ways of local area network and extend the network coverage.

1. Client

For the device in Client Mode, the most common usage scenario is point-to-point networking. The device is used to transform wireless signal into wired one.

Access Point

LAN: 192.168.0.254

Client

LAN: 192.168.0.2

Network requirements: Help the wired devices to connect to the wireless network.

The device in the network: In Client Mode, the device actually serves as a wireless adapter to receive the wireless signal from root AP or Station. In this case, wired devices can access the wireless network by connecting to the device in Client Mode.

1. AP Client Router (WISP Client)

In AP Client Router Mode, the device access the internet provided by WISP (Wireless Internet Service Provider) through wireless connection. For the downstream clients, the device serves as a normal home wireless router. It can provide wired connection and wireless connection simultaneously.

WISP’s network

AP Client Router

LAN: 192.168.0.254

WAN: Dynamic IP

Network requirements: Get internet service from WISP.

The device in the network: The device in Client Router Mode connects to WISP wirelessly for internet service. It provides both wired access and wireless access for the clients.

1. AP Router

The device in AP Router Mode serves as a normal home wireless router but provides a wider wireless network range.

Laptop/Tablet/Smartphone

Network requirements: Establish the wireless network coverage in the campus, community, industrial park or other public places and so on.

The device in the network: The device in AP Router Mode connects to root ADSL/Cable Modem for internet access. Meanwhile, it creates a wireless network for the wireless clients to connect to the internet.

Note:

In this mode, the device cannot be managed directly through the port connected to ADSL/Cable Modem. To manage the device, connect the management host to the device wirelessly or via the other LAN port.

1. Repeater

Note:

Repeater mode is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface.

The device in Repeater Mode can extend wireless coverage of an existing wireless network. The SSID and encryption type of the device should be the same as those of the root AP.

1. Bridge

Note:

Bridge mode is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface.

The device in Bridge Mode can extend wireless coverage of an existing wireless network.

The SSID and encryption type of the device can be different from those of the root AP.

Quick Start

This chapter introduces how to quickly build a wireless network in different operation modes. Follow the steps below:

1. Check the System Requirements
2. Log In to the Device
3. Set Up the Wireless Network
4. Check the System Requirements

• Operating System:

Microsoft Windows XP, Windows Vista, Windows 7, Windows 8, Windows 10, Linux, or Mac OS X.

• Web Browser

Google Chrome, Safari, Firefox, and Apple Safari. IE browsers are not recommended.

1. Log In to the Device

Before configuring the device, you need to access the PharOS configuration interface. Follow the steps below:

1. Connect your PC to the device.
2. Set the IP address of your PC as static IP address on 192.168.0.X subnet (X ranges from 2 to 253, e.g.192.168.0.10).

3. Launch a web browser on and enter the management IP address of the device (192.168.0.254 by default) in the address bar to load the login page of the PharOS configuration interface.

1. Use admin for both of User Name and Password. Specify the region where you use the device. Available channels and maximum Transmit Power will be determined by the selected region according to the local laws and regulations. Select the appropriate language from the Language drop-down list. Read and agree the terms of use, then click Login.

1. Create a new username and password for network security. Click Finish to log in to the PharOS.

1. Set Up the Wireless Network

Use the Quick Setup wizard to quickly configure your device step by step. Choose the suitable operation mode according to your network environment and follow the step-by- step instructions.

Access Point

Follow the steps below to configure the device as Access Point Mode:

1. Go to the QUICK SETUP page, select Access Point and click Next.

■Jtp-link PHAROS

Operation Mode: | Access Point

About Support Log Out

QUICK SETUP

STATUS

NETWORK

WIRELESS

MANAGEMENT

SYSTEM

Operation Mode

Please select the proper operation mode according to your needs:

(•) Access Point

In this mode, the AP will act as a central hub for different wireless LAN clients. Multi-SSID is also available in this mode.

which supports up to 4 different SSIDs and passwords.

O Client

In client mode, the device can connect to a wired device and work as a wireless adapterto receive wireless signals from

your wire I ess network.

O Repeater

In this mode, the device can copy and reinforce the existing wireless signal to extend the coverage of the signal,

especially for a large space to eliminate signal-blind corners.

O Bridge

Bridge mode borrows existing wireless internet and broadcasts it using a different SSID and password. In this mode, you can set up a wireless client to connect with a rootAP and a wireless AP for local wireless coverage.

O AP Router

In this mode, the device enables multiple users to share the internet. The wireless ports share the same IP address as

the Ethernet WAN port to connect to the ISP. The wireless port can be regarded as a LAN port while in AP Router mode.

O AP Client Router (WISP Client) In this mode, multiple users can share an internet connection provided by a WISP. The LAN port devices share the same

IP as that assigned by the WISP to the Wireless port. While connected to a WISP, the wireless port works as a WAN port

in AP Client Router mode. The Ethernet port acts as a LAN port.

Next

1. In the LAN Settings section, specify the LAN IP address and the Subnet Mask for the

device. Then, click Next.

1. In the Wireless AP Settings section, specify the basic wireless parameters to create a wireless network. Click Next.

Note:

• It is recommended to specify Security as WPA-PSK/WPA2-PSK for the network security.

• You can keep the default settings or specify the parameters according to your need. For details, refer to 5. Configure the Wireless Parameters.

1. In the Finish section, review the configurations and click Finish to complete the quick setup.

5. Connect the device according to your network topology and use it normally.

Client

Follow the steps below to configure the device as Client Mode:

1. Go to the QUICK SETUP page, select Client and click Next.

QUICK SETUP

Operation Mode

Please select the proper operation mode according to your needs:

1. In the LAN Settings section, specify the LAN IP Address and the Subnet Mask for the

device. Then, click Next.

1. In the Wireless Client Settings section, click Survey to search for the upstream wireless network.

1. Select the desired wireless network and click Connect.

Note:

There may be two or more networks with the same SSID in the AP list. Click Lock to AP to select the SSID and AP simultaneously, which can make the device connect to the specific AP next time.

STATUS NETWORK WIRELESS MANAGEMENT SYSTEM

QUICK SETUP

Wireless Client Settings

Back ■ Refresh

1. In the Wireless Client Settings section, specify the wireless parameters to connect to the specified wireless network. Click Next.

Note:

Make sure that Security and PSK Password are the same as the upstream wireless network’s. Other parameters set in this page and those of the upstream wireless network should be compatible with each other. For details, refer to 5.

Configure the Wireless Parameters

1. In the Finish section, review the configurations and click Finish to complete the quick setup.

7. Connect the device according to your network topology and use it normally.

Repeater

Note:

Repeater mode is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface.

Follow the steps below to configure the device as Repeater Mode:

1. Go to the QUICK SETUP page, select Repeater and click Next.

tp-link PHAROS

Operation Mode: Client

About Support Log

Tools

QUICK SETUP

STATUS

NETWORK WIRELESS MANAGEMENT SYSTEM

Operation Mode

Please select the proper operation mode according to your needs:

Next

1. In the LAN Settings section, specify the LAN IP address and the Subnet Mask for the

device. Then, click Next.

1. In the Wireless Client Settings section, click Survey to search for the upstream wireless network.

1. Select the desired wireless network and click Connect.

Note:

There may be two or more networks with the same SSID in the AP list. Click Lock to AP to select the SSID and AP simultaneously, which can make the device connect to the specific AP next time.

STATUS NETWORK WIRELESS MANAGEMENT SYSTEM

QUICK SETUP

Wireless Client Settings

Back ■ Refresh

1. In the Wireless Client Settings section, specify the wireless parameters to connect to the specified wireless network. Click Next.

Note:

Make sure that Security and PSK Password are the same as the upstream wireless network’s. Other parameters set in this page and those of the upstream wireless network should be compatible with each other. For details, refer to 5. Configure the Wireless Parameters.

QUICK SETUP

STATUS

NETWORK

WIRELESS MANAGEMENT

SYSTEM

Wireless Client Settings

SSID of Remote AP: [t200 5G

MAC of Remote AP: 50-C7-BF-01-33-1F

Survey

□ Lock to AP

Region: | United States fl

Mode: 3C2 11aJn fl

WDS: | Auto

Channel Width: 2QM0MHZ fl

Security: |wPA-PSK JWPA2-PSK

PSK Password: | □ Show

We do not recommend using WEP encryption. You can go to WIRELESS page to configure the encryption mode.

Distance Setting: 0

] (0-27.g)km

Back

Next

1. In the Finish section, review the configurations and click Finish to complete the quick setup.

7. Connect the device according to your network topology and use it normally.

Bridge

Note:

Bridge mode is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface.

Follow the steps below to configure the device as Bridge Mode:

1. Go to the QUICK SETUP page, select Bridge and click Next.

tp-link PHAROS

QUICK SETUP

STATUS

About Support Log

Operation Mode: AP Client Router ▼ Tools

NETWORK WIRELESS MANAGEMENT SYSTEM

Operation Mode

Please select the proper operation mode according to your needs:

Next

1. In the LAN Settings section, specify the LAN IP address and the Subnet Mask for the

device. Then, click Next.

1. In the Wireless Client Settings section, click Survey to search for the upstream wireless network.

1. Select the desired wireless network and click Connect.

Note:

There may be two or more networks with the same SSID in the AP list. Click Lock to AP to select the SSID and AP simultaneously, which can make the device connect to the specific AP next time.

STATUS NETWORK WIRELESS MANAGEMENT SYSTEM

QUICK SETUP

Wireless Client Settings

Back ■ Refresh

1. In the Wireless Client Settings section, specify the wireless parameters to connect to the specified wireless network. Click Next.

Note:

Make sure that the Security and PSK Password are the same as the upstream wireless network’s. Other parameters set in this page and those of the upstream wireless network should be compatible with each other. For details, refer to 5. Configure the Wireless Parameters.

QUICK SETUP

STATUS

NETWORK

WIRELESS MANAGEMENT

SYSTEM

Wireless Client Settings

SSID of Remote AP: [t200 5G

MAC of Remote AP: 50-C7-BF-01-33-1F

Survey

□ Lock to AP

Region: | United States fl

Mode: 3C2 11aJn fl

WDS: | Auto

Channel Width: 2QM0MHZ fl

Security: |wPA-PSK JWPA2-PSK

PSK Password: | □ Show

We do not recommend using WEP encryption. You can go to WIRELESS page to configure the encryption mode.

Distance Setting: 0

] (0-27.g)km

Back

Next

1. In the Wireless AP Settings section, specify the parameters to create a new wireless network for the downstream clients. Click Next.

1. In the Finish section, review the configurations and click Finish to complete the quick setup.

8. Connect the device according to your network topology and use it normally.

AP Router

Follow the steps below to configure the device as AP Router Mode:

1. Go to the QUICK SETUP page, select AP Router and click Next.

tp-link PHAROS

QUICK SETUP

STATUS

About Support Log

Operation Mode: AP Client Router ▼ Tools

NETWORK WIRELESS MANAGEMENT SYSTEM

Operation Mode

Please select the proper operation mode according to your needs:

Next

The following window will pop up. Click Yes.

• For devices with one Ethernet port.

Note that if you select AP Router as the operation mode, the status of Port0 will change to WAN, and the management access will be disabled on this port after the process of quick setup. If you want to manage the device through Port0, configure the Remote Login IP Address. For details, refer to 6.5. Configure Web Server.

For devices with two Ethernet ports.

Note that if you select AP Router as the operation mode, the status of Port0 will change to WAN, and the management access will be disabled on this port after the process of quick setup. You can connect to the Port1 of the device or wirelessly to manage it. If your want to manage the device through Port0, configure the Remote Login IP Address. For details, refer to 6.5. Configure Web Server.

1. In the WAN Connection Type section, specify the connection type according to your need and click Next.

The device supports three types of the WAN connection, including PPPoE, Dynamic IP and Static IP. Contact your ISP to confirm your WAN connection type.

■ PPPoE

Select PPPoE and click Next, then the following page will appear. In the WAN Settings section, specify the parameters that are provided by your ISP and click Next.

■ Dynamic IP

Select Dynamic IP and click Next. In this type, the device will obtain a WAN connection automatically without any WAN configurations.

■ Static IP

Select Static IP and click Next, then the following page will appear. In the WAN Settings section, specify the parameters that are provided by your ISP and click Next.

STATUS NETWORK WIRELESS MANAGEMENT SYSTEM

QUICK SETUP

WAN Settings

IP Address: 10.0.0.0

Subnet Mask: 10.0.0.0

Default Gateway: 10.0.0.0

Primary DNS: 0.0.0 0

Secondary DNS: [ 0.0.0.0

] (Optional)

Back Next

1. In the Wireless AP Settings section, specify the basic wireless parameters to create a wireless network. Click Next.

Note:

• It is recommended to specify Security as WPA-PSK/WPA2-PSK for the network security.

• You can keep the default settings or specify the parameters according to your need. For details, refer to 5. Configure the Wireless Parameters.

1. In the Finish section, review the configurations and click Finish to complete the quick setup.

5. Connect the device according to your network topology and use it normally.

AP Client Router (WISP Client)

Follow the steps below to configure the device as AP Client Router (WISP Client) Mode:

1. Go to the QUICK SETUP page, select AP Client Router (WISP Client) and click Next.

About Support Log

q^tp-link PHAROS

Operation Mode: AP Client Router ▼ Tools

QUICK SETUP

STATUS

NETWORK WIRELESS MANAGEMENT SYSTEM

Operation Mode

Please select the proper operation mode according to your needs:

Next

The following window will pop up. Click Yes.

Note that if you select AP Client Router (WISP Client) as the operation mode, you will not access the device through the WISP network after the process of quick setup. You can connect to the port of the device or wirelessly to manage it. If you want to manage the device through the WISP network, configure the Remote Login IP Address. For details, refer to 6.5. Configure Web Server.

1. In the WAN Connection Type section, choose the connection type according to your need and click Next.

The device supports PPPoE, Dynamic IP and Static IP for the WAN connection. Contact your ISP to confirm your WAN connection type.

■ PPPoE

Select PPPoE and click Next, then the following page will appear. In the WAN Settings section, specify the parameters that are provided by your ISP and click Next.

■ Dynamic IP

Select Dynamic IP and click Next. In this type, the device will obtain a WAN connection automatically without any WAN configurations.

■ Static IP

Select Static IP and click Next, then the following page will appear. In the WAN Settings section, specify the parameters that are provided by your ISP and click Next.

1. In the Wireless Client Settings section, click Survey to search for the upstream wireless network.

1. Select the desired wireless network and click Connect.

Note:

There may be two or more networks with the same SSID in the AP list. Click Lock to AP to select the SSID and AP simultaneously, which can make the device connect to the specific AP next time.

QUICK SETUP

STATUS

NETWORK

WIRELESS MANAGEMENT

SYSTEM

Wireless Client Settings

Back

Refresh

1. In the Wireless Client Settings section, specify the wireless parameters to connect to the specified wireless network. Click Next.

Note:

Make sure that Security and PSK Password are the same as the upstream wireless network’s. Other parameters set in this page and those of the upstream wireless network should be compatible with each other. For details, refer to 5. Configure the Wireless Parameters.

QUICK SETUP

STATUS

NETWORK

WIRELESS MANAGEMENT

SYSTEM

Wireless Client Settings

SSID of Remote AP: [t200 5G

MAC of Remote AP: 50-C7-BF-01-33-1F

Survey

□ Lock to AP

Region: | United States fl

Mode: 3C2 11aJn fl

WDS: | Auto

Channel Width: 2QM0MHZ fl

Security: |wPA-PSK JWPA2-PSK

PSK Password: | □ Show

We do not recommend using WEP encryption. You can go to WIRELESS page to configure the encryption mode.

Distance Setting: 0

] (0-27.g)km

Back

Next

1. In the Wireless AP Settings section, specify the parameters to create a new wireless network for the downstream clients. Click Next.

1. In the Finish section, review the configurations and click Finish to complete the quick setup.

8. Connect the device according to your network topology and use it normally.

Monitor the Network

This chapter introduces how to monitor the running status and statistics of the wireless network, including:

1. View the Device Information
2. View the Wireless Settings
3. View Wireless Signal Quality
4. View Radio Status
5. View the LAN Settings
6. View the WAN Settings

37 Monitor Throughput

1. Monitor Stations
2. Monitor Interfaces
3. Monitor ARP Table
4. Monitor Routes
5. Monitor DHCP Clients
6. Monitor Dynamic WAN
7. View the Device Information

Go to the STATUS page. In the Device Information section, view the basic information of the device. To configure the device information, refer to 7. Configure the System.

Device Information

Device Name: CPE 510

Device Model: CPE510 v30

Firmware Version: 2.0 0 Build 20160908 Rel. 36610 (5553)

System Time: 2015-01-01 04:37:41

Uptime: 0 days 04:37:43

CPU: I 1%

Memory: 53%

Memory

Displays the memory occupancy.

1. View the Wireless Settings

Go to the STATUS page. In the Wireless Settings section, view the parameters of the wireless network created by the device. To configure the parameters, refer to 5. Configure the Wireless Parameters.

1. View Wireless Signal Quality

Go to the STATUS page. In the Wireless Signal Quality section, view the current signal quality of the upstream wireless network. It is only applicable for the Client, Repeater, Bridge and AP Client Router (WISP Client) Modes.

Signal Strength Displays the received wireless signal strength of the root AP. There are two display modes. Values of the two chains are displyed separately in Horizontal/Vertical Mode, and together in Combined Mode. You can switch between display modes by clicking on it.

Noise Strength Displays the received environmental noise from wireless interference on the operating frequency.

SNR Displays the Signal to Noise Ratio (SNR) of the device. SNR refers to

the power ratio between the received wireless signal strength and the environmental noise strength. The larger SNR value is, the better network performance the device can provide.

Transmit CCQ Displays the wireless Client Connection Quality (CCQ). CCQ refers to the ratio of effective transmission bandwidth and the actual total bandwidth. It reflects the quality of the actual link. A larger value means a better utilization of the bandwidth.

3.4

View Radio Status

Go to the STATUS page. In the Radio Status section, view the radio status of the device.

AP Status.

Client Status.

WDS

Displays the status of the WDS (Wireless Distribution System) function. WDS is a communication system among multiple wireless networks . It is established between APs through wireless connection. WDS is used during the connection process between the device and the root AP.

Enable: Forward data frames using four address fields.

Disable: Forward data frames using three address fields.

Auto: The device automatically negotiates the wireless data frame structure (three or four address fields) with the root AP. The selection of Auto is recommended.

• 1. View the LAN Settings

Go to the STATUS page. In the LAN section, view the LAN information of the device. To configure the LAN settings, refer to 4. Configure the Network.

Displays the current status of the LAN Ethernet port connections and the Maximum transmission rate of the plugged port.

Port

IPv6 IP Address/Prefix Displays the LAN port IPv6 address and prefix of the device.

• 1. View the WAN Settings

Go to the STATUS page. In the WAN section, view the WAN information of the device. To configure the WAN settings, refer to 4. Configure the Network.

• 1. Monitor Throughput

Go to the STATUS page. In the Monitor section, select Throughput and monitor the current data traffic of specified interfaces including LAN, WAN, WLAN, WWAN and BRIDGE. Note that the interfaces which you can monitor are different among different operation modes.

Monitor

• 1. Monitor Stations

Go to the STATUS page. In the Monitor section, select Stations and monitor the information of all the stations that are connected to the device.

Monitor

Throughput Stations Interfaces ARP Table Routes DHCP Clients Dynamic WAN

< Auto Refresh

CCQ (%)

Displays the wireless Client Connection Quality (CCQ). CCQ refers to the ratio of effective transmission bandwidth and the actual total bandwidth. It reflects the quality of the actual link. A larger value means a better utilization of the bandwidth.

Negotiated Rate Displays the negotiated rates of the packets which the device transmits to

^(Mbps) the station.

Click the MAC Address of a station to view the detailed information.

Station E4-B2-FB-7B-02-7F

Refresh

Device Name Displays the device name of the station.

Product

Displays the product name of the station.

Firmware Displays the firmware version of the station.

Connection Time Displays the connection duration.

RX Signal

Displays the signal strength of the wireless network.

Click the IP Address of a station to access the web management page of the station.

• 1. Monitor Interfaces

Go to the STATUS page. In the Monitor section, select Interfaces and monitor the relevant information of the interfaces.

• 1. Monitor ARP Table

Go to the STATUS page. In the Monitor section, select ARP Table and monitor the ARP (Address Resolution Protocol) information recorded by the device.

ARP is used to associate each IP address to the unique hardware MAC address of each device on the network.

Monitor

Throughput Stations Interfaces ARP Table Routes DHCP Clients

Z Auto Refresh

• 1. Monitor Routes

Go to the STATUS page. In the Monitor section, select Routes and monitor the routing entries recorded by the device in the Routing table. Routing table is used for the device to decide the interface to forward the packets. You can enable or disable Auto Refresh. With this feature enabled, the table will refresh automatically.

IPv4 Routes

Displays the interface that the destination device is on.

Interface

IPv6 Routes

• 1. Monitor DHCP Clients

Go to the STATUS page. In the Monitor section, select DHCP Clients and monitor the information of all the DHCP clients.

• 1. Monitor Dynamic WAN

Note:

Dynamic WAN submenu is only available in AP Router Mode and AP Client Router (WISP Client) Mode when the WAN connection type is PPPoE, PPTP, L2TP or Dynamic.

Go to the STATUS page. In the Monitor section, select Dynamic WAN and monitor the WAN connection status of the device. You can enable or disable Auto Refresh. With this feature enabled, the table will refresh automatically.

Throughput Stations Interfaces ARP Table Routes DHCP Clients Dynamic WAN

DHCP Status

Primary DNS: 0.0.0.0

Status: Disconnected

Secondary DNS: 0.0.0.0

IP Address: 0.0.0.0

Connection Uptime: 0 days 00:00:00

Subnet Mask: 0 0 0 0

Obtain

Gateway IP: 0.0.0 0

DHCPv6 Status

Primary DNS:

Status: Connected

Secondary DNS:

IP Address

Connection Uptime: 0 days 00:00:00

Subnet Mask:

Release

Gateway IP:

± Auto Refresh

DHCP Status

DHCPv6 Status

Primary DNS

Displays the primary DNS of the device.

Configure the Network

This chapter introduces how to configure the network parameters and the advanced features, including:

1. Configure WAN Parameters
2. Configure LAN Parameters
3. Configure Management VLAN
4. Configure the Forwarding Feature
5. Configure the Security Feature
6. Configure Access Control
7. Configure Static Routing
8. Configure Bandwidth Control

49 Configure IP & MAC Binding

1. Configure WAN Parameters

Note:

WAN submenu is only available in AP Router Mode and AP Client Router (WISP Client) Mode.

WAN submenu is used to create the WAN connection and configure the related advanced

parameters.

Go to the Network page. In the WAN section, configure the WAN parameters of the device.

Follow the steps below to configure the WAN parameters:

1. Select the connection type according to your need. The device supports five types: Static, Dynamic, PPPoE, L2TP, and PPTP.

Note:

L2TP or PPTP is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface.

■ Static

This connection type uses a permanent, fixed (static) IP address that is assigned by your ISP. In this type, you should fill in the IP address, Netmask, Gateway IP, and DNS IP address manually, which are assigned by your ISP.

WAN

■ Dynamic

For this connection, your ISP uses a DHCP server to assign your router an IP address for connecting to the internet. You don’t need to configure any parameters.

IPv6 Enable or disable the IPv6 function. If the IPv6 function is enabled, the

device will obtain a WAN IPv6 address. Select a method for the device to obtain the WAN IPv6 address according to the information provided by your ISP.

• Static

Select static and enter the WAN IPv6 address, IPv6 netmask, IPv6 gateway, primary DNS and secondary DNS provided by your ISP.

IPv6. 0 Enable @ IPv6 Address: ® Static O SLAAC ODHCPv6 @

IPv6 Address

IPv6 Netmask- [64

Secondary DNS:

• SLAAC

Select SLAAC and the device will obtain the WAN IPv6 address automatically.

I

IPv6: 0 Enable 0

IPv6 Address: Q Static (• SLAAC O DHCPv6 Q

• DHCPv6

Select DHCPv6 and the device will obtain the WAN IPv6 address automatically.

I

IPv6: 0 Enable 0

IPv6 Address: O Static O SLAAC (g) DHCPv6 Q

■ PPPoE

If your ISP delivers internet through phone line and provides you with username and password, you should choose this type. Under this condition, you should fill in both User Name and Password that the ISP supplied. Note that these fields are case-sensitive.

Specify the parameters below and click Connect:

User Name Enter the User Name that is provided by your ISP.

Password Enter the Password that is provided by your ISP.

Select the Connection Mode.

Connection

Mode

• On Demand

Configure the device to disconnect your internet connection after a specified period of inactivity (Idle Time). If your internet connection has been terminated due to inactivity, Connection on Demand enables the device to automatically re-establish your connection when you attempt to access the internet again. The default Idle Time is 15 minutes. If your internet connection is expected to remain active all the time, enter 0 in the Idle Time field. If you pay by time for your internet access, choose this mode to save your internet-access fee.

Connection Mode:

On Demand

Idle Time:

15

minutes

• Automatic

Connect automatically after the device is disconnected. If you are charged a flat monthly fee, choose this mode.

• Time-based

Configure the device to make it connect or disconnect based on time. Enter the start time in From (HH:MM) for connecting and end time in To (HH:MM) for disconnecting. If you need to control the time period of internet access, choose this mode.

Connection Mode:

From(HH:MM):

To(HH:MM):

• Manual

Configure the device to make it connect or disconnect manually. After a specified period of inactivity (Idle Time), the device will disconnect your internet connection, and you must click Connect manually to access the internet again. If your internet connection is expected to remain active all the times, enter 0 in the Idle Time field. Otherwise, enter the desired Idle Time in minutes you wish to use. If you pay by time for your internet access, choose this mode to save your internet­access fee.

Connection Mode:

Manual

Idle Time:

15

1 minutes

■ L2TP/PPTP

Note:

L2TP or PPTP is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface.

If your ISP supplies internet access through L2TP or PPTP, it will provide the following parameters. The configurations of L2TP and PPTP are the same, and the following introduction takes L2TP as an example.

WAN E

Specify the parameters below and click Connect:

Server IP/Name Enter the server IP address or the domain name provided by your ISP.

Enter the User Name provided by your ISP. This field is case-sensitive.

User Name

Password

Connection

Mode

Enter the Password provided by your ISP. This field is case-sensitive.

Select the Connection Mode.

• On Demand

Configure the device to disconnect your internet connection after a specified period of inactivity (Idle Time). If your internet connection has been terminated due to inactivity, Connection on Demand enables the device to automatically re-establish your connection when you attempt to access the internet again. The default Idle Time is 15 minutes. If your internet connection is expected to remain active all the time, enter 0 in the Idle Time field. If you pay by time for your internet access, choose this mode to save your internet-access fee.

• Automatic

Connect automatically after the device is disconnected. If you are charged a flat monthly fee, choose this mode.

• Manual

Configure the device to make it connect or disconnect manually. After a specified period of inactivity (Idle Time), the device will disconnect your internet connection, and you must click Connect manually to access the internet again. If your internet connection is expected to remain active all the times, enter 0 in the Idle Time field. Otherwise, enter the desired Idle Time in minutes you wish to use. If you pay by time for your internet access, choose this mode to save your internet­access fee.

Connection Mode: Manual Q

Idle Time: 15 | minutes

Second

Connection

If your ISP provides a Connection type such as Dynamic/Static IP to connect to a local area network, activate this secondary connection.

Dynamic IP: Use dynamic IP address to connect to the local area network provided by ISP.

Static IP: Use static IP address to connect to the local area network provided by ISP.

IPv6 Enable or disable the IPv6 function. If the IPv6 function is enabled, the

device will obtain a WAN IPv6 address. Select a method for the device to obtain the WAN IPv6 address according to the information provided by your ISP.

• Static

Select static and enter the WAN IPv6 address, IPv6 netmask, IPv6 gateway, primary DNS and secondary DNS provided by your ISP.

IPv6. 0 Enable @ IPv6 Address: ® Static O SLAAC ODHCPv6 @

IPv6 Address

IPv6 Netmask- [64

Secondary DNS:

• SLAAC

Select SLAAC and the device will obtain the WAN IPv6 address automatically.

I

IPv6: 0 Enable 0

IPv6 Address: Q Static (• SLAAC O DHCPv6 Q

• DHCPv6

Select DHCPv6 and the device will obtain the WAN IPv6 address automatically.

I

IPv6: 0 Enable 0

IPv6 Address: O Static O SLAAC (g) DHCPv6 Q

3. Click Apply, then click Save.

1. Configure LAN Parameters

LAN submenu is used to configure the LAN parameters for the device and the clients.

Access Point/Client/Repeater/Bridge Mode

Go to the Network page. In the LAN section, configure the following parameters.

Follow the steps below to configure the LAN parameters:

1. Select the connection type according to your need. The device supports two types: Static and Dynamic.

■ Static

Secondary DNS Enter the IP address of alternative DNS server if there are two DNS servers. By default, it is 0.0.0.0, which means no secondary DNS is assigned.

Lease Time

Enter the amount time of the leased IP address assigned by the DHCP server. When the time expires, the clients will request to renew the lease automatically.

Address

Reservation

Enable Address Reservation and specify a reserved IP address for a PC on the local area network, so the PC will always obtain the same IP address each time when it starts up. Reserved IP addresses could be assigned to servers that require permanent IP settings.

To configure Address Reservation:

Click Add, specify the MAC address and the IP address. Enable this entry, then click Save.

IPv6

Enable or disable the IPv6 function. If the IPv6 function is enabled, the device will obtain a LAN IPv6 address. Select a method for the device to obtain the LAN IPv6 address according to the information provided by your ISP.

• Static

Select static and enter the LAN IPv6 address and IPv6 netmask.

IPv6: 0 Enable 0

IPv6 Address: • Static O SLAAC O DHCPv6 Q

IPv6 Address.

IPv6 Netmask: 64

• SLAAC

Select SLAAC and the device will obtain the LAN IPv6 address automatically.

I

IPv6: 0 Enable 0

IPv6 Address: O Static <g> SLAAC O DHCPv6 0

• DHCPv6

Select DHCPv6 and the device will obtain the LAN IPv6 address automatically.

I

IPv6: 0 Enable e

IPv6 Address: Q Static O SLAAC (g) DHCPv6 0

■ Dynamic

IPv6

Enable or disable the IPv6 function. If the IPv6 function is enabled, the device will obtain a LAN IPv6 address. Select a method for the device to obtain the LAN IPv6 address according to the information provided by your ISP.

• Static

Select static and enter the LAN IPv6 address and IPv6 netmask.

IPv6: 0 Enable 0

IPv6 Address: • Static O SLAAC O DHCPv6 0

IPv6 Address.

IPv6 Netmask. 64

• SLAAC

Select SLAAC and the device will obtain the LAN IPv6 address automatically.

I

IPv6: 0 Enable 0

IPv6 Address: Q Static (• SLAAC O DHCPv6 0

• DHCPv6

Select DHCPv6 and the device will obtain the LAN IPv6 address automatically.

I

IPv6: 0 Enable 0

IPv6 Address: O Static O SLAAC (g) DHCPv6 0

1. Click Apply, then click Save.

AP Router/AP Client Router Mode

Go to the Network page. In the LAN section, configure the following parameters.

1. For LAN connection type, the device only supports Static.

Specify the first IP address of the IP address pool. By default, it is 192.168.0.100.

Start IP Address

End IP Address

Default

Gateway

Default Domain

Primary DNS

Secondary DNS

Lease Time

Address Reservation

Specify the last IP address of the IP address pool. By default, it is 192.168.0.199.

Specify the gateway IP address for the LAN network. By default, it is 192.168.0.254.

(Optional) Specify the domain name for the DHCP server.

Enter the DNS IP address for the LAN. By default, it is 0.0.0.0, which means no primary DNS is assigned.

Enter the IP address of alternative DNS server if there are two DNS servers. By default, it is 0.0.0.0, which means no secondary DNS is assigned.

Enter the amount time of the leased IP address assigned by the DHCP server. When the time expires, the clients will request to renew the lease automatically.

Enable Address Reservation and specify a reserved IP address for a PC on the local area network, so the PC will always obtain the same IP address each time when it starts up. Reserved IP addresses could be assigned to servers that require permanent IP settings.

To configure Address Reservation:

Click Add, specify the MAC address and the IP address. Enable this entry, then click Save.

Enable or disable the IPv6 function. If the IPv6 function is enabled, the device will obtain a LAN IPv6 address. Select a method for the device to obtain the LAN IPv6 address according to the information provided by your ISP.

IPv6

• Static

Select static and enter the LAN IPv6 address and IPv6 netmask.

IPv6: 0 Enable

IPv6 Address: <g) Static O Prefix Delegation o

IPv6 Address: | |

IPv6 Netmask: 164 |

• Prefix Delegation

Select Prefix Delegation and the device will obtain the LAN IPv6 address automatically.

IPv6: [Z Enable Q

IPv6 Address: C Static (• Prefix Delegation Q

IPv6 DHCP Enable or disable the IPv6 DHCP server function. With IPv6 DHCP server ^Server enabled, the clients will obtain the IPv6 address from the DHCP server.

• Disabled

Select Disabled to disable the IPv6 DHCP server function

IPv6 DHCP Server: (§: Disabled (’ Stateless O Stateful Q

• Stateless/Stateful

Select Stateless or Stateful, and the clients will obtain the IPv6 address from the IPv6 DHCP server automatically. Enable or disable the DNS proxy. With this feature enabled, the device will obtain the DNS server automatically. With this feature disabled, you should specify the DNS address manually.

IPv6 DHCP Server: O Disabled © Stateless O Stateful 0

I

ONS Proxy: □ Enable 0

Preferred DNS: | |

1. Click Apply, then click Save.
2. Configure Management VLAN

Management VLAN provides a safer way for you to manage the device. With Management VLAN enabled, only the hosts in the management VLAN can manage the device. Since most hosts cannot process VLAN tags, connect the management host to the network via a switch, and set up correct VLAN settings to ensure the communication between the host and the device in the management VLAN.

Go to the Network page. In the Management VLAN Interfaces section, enable the Management VLAN function, specify VLAN ID and click Apply. Then click Save.

Management Enable or disable the Management VLAN function. By default, it is disabled. VLAN

VLAN ID Specify the Management VLAN ID. The valid values are from 2 to 4094.

1. Configure the Forwarding Feature

Note:

Forwarding submenu is only available in AP Router Mode and AP Client Router (WISP Client) Mode.

The IP address used on the internet is public IP address, while IP address used on local area network is private IP address. The hosts using private IP addresses cannot access the internet directly and vice versa.

The hosts using private IP addresses visit internet through NAT (Network Address Translation) technology. NAT can transfer private IP addresses into public IP addresses to realize the communication from internal hosts to external hosts.

If the hosts on the internet want to visit the hosts on local area network, the forwarding function should be used, including DMZ, Virtual server, Port triggering and UPnP.

Go to the Network page. In the Forwarding section, configure the following parameters and click Apply. Then click Save.

Forwarding

DMZ: 0 Enable Q

DMZ IP: 10.0.0.0 |

ALG: 0 FTP ALG 0 TFTP ALG 0 H323 ALG 0 RTSP ALG 0 Virtual Server: □ Enable 0

Port Trigger: □ Enable

UPnP: □ Enable 0

Enable or disable Virtual Server. Virtual servers can be used for setting up public services on your local area network, such as DNS, Email and FTP. A virtual server is defined as a service port, and all requests from the internet to this service port will be redirected to the LAN server. Virtual Server function not only makes the users from internet visit the local area network, but also keeps network security within the intranet as other services are still invisible from internet. The LAN server must have a static or reserved IP Address because its IP Address may change when using the DHCP function.

Virtual Server

To configure Virtual Server:

Click Add, specify the following parameters and Enable the entry. Click Save.

IP: Enter the IP Address of the PC providing the service application.

Internal Port: Enter the Internal Port number of the PC running the service application. You can leave it blank if the Internal Port is the same as the Service Port, or enter a specific port number.

Service Port: Enter the numbers of external Service Port. You can type a service port or a range of service ports (the format is XXX – YYY, XXX is the start port, YYY is the end port). Internet users send request to the port for services.

Protocol: Choose the one of the protocols used for this application: TCP, UDP, or TCP/UDP.

Enable or disable port trigger. Due to the existence of the firewall, some applications such as online games, video conferences, VoIPs and P2P downloads need the device to configure the forwarding to work properly, and these applications require multiple ports connection, for single-port virtual server cannot meet the demand. Port trigger function comes at this time. When an application initiates a connection to the trigger port, all the incoming ports will open for subsequent connections.

Port Trigger

To configure port trigger:

Click Add, specify the following parameters and Enable the entry. Click Save.

Incoming Port: Enter the incoming port for incoming traffic. The port or port range is used by the remote system when it responds to the outgoing request. A response to one of these ports will be forwarded to the PC that triggered this rule. You can input at most 5 groups of ports (or port section). Every group of ports must be set apart with “,”. For example, 2000-2038, 2050-2051,2085, 3010-3030.

Trigger Port: Enter the trigger port for outgoing traffic. An outgoing connection using this port will “Trigger” this rule.

Protocol: Choose the one of the protocols used for this application: TCP, UDP, or TCP/UDP.

Enable or disable UPnP. If you use applications such as multiplayer gaming, peer-to-peer connections, or real-time communications such as instant messaging or remote assistance (a feature in Windows XP), you should enable the UPnP function. The Universal Plug and Play (UPnP) function allows the devices, such as internet computers, to access the local host resources or devices as needed. Host in the local area network can automatically open the corresponding ports on a router, and make the application of external host access the resources of the internal host through the opened ports. Therefore, the functions limited to the NAT can work properly. Compared to virtual server and port triggering, the application of UPnP doesn’t need manual settings. It is more convenient for some applications required unfixed ports.

UPnP

App Description: Displays the description provided by the application in the UPnP request.

External Port: Displays the external port number that the router opened for the service application.

Internal Port: Displays the internal service port number of the local host running the service application.

Protocol: Displays which type of protocol is opened.

IP Address: Displays the IP address of the local host which initiates the UPnP request.

Status: Enabled means that port is still active. Otherwise, the port is inactive.

1. Configure the Security Feature

Note:

Security submenu is only available in AP Router Mode and AP Client Router (WISP Client) Mode.

Stateful Packet Inspection (SPI) is a firewall that keeps track of the state of network connections (such as TCP streams, UDP communication) traveling across it. The firewall is programmed to distinguish legitimate packets for different types of connections. Only packets matching a known active connection will be allowed to pass through by the firewall and others will be rejected. SPI Firewall is enabled by factory default.

1. Go to the Network page. In the Security > Basic section, configure the following parameters and click Apply.

2. In the Security > Advanced Settings section, configure the following parameters and click Apply.

DoS Protection Enable the DoS Protection and specify the parameters.

DoS (Denial of Service) Attack is to occupy the network bandwidth maliciously by the network attackers or the evil programs sending a lot of service requests to the Host, which incurs an abnormal service or even breakdown of the network. With DoS Protection function enabled, the device can analyze the specific fields of the IP packets and distinguish the malicious DoS attack packets. Upon detecting the packets, the device will discard the illegal packets directly and limit the transmission rate of the legal packets if the over legal packets may incur a breakdown of the network. The hosts sending these packets will be added into the Blocked DoS Host List. The device can defend a few types of DoS attack such as ICMP_FLOOD, UDP_FLOOD and TCP_SYN_ FLOOD.

Packets Statistics Interval: Select a value between 5 and 60 seconds from the drop-down list. The default value is 10. The value indicates the time interval of the packets statistics. The result of the statistic is used for analysis by ICMP-Flood, UDP Flood and TCP-SYN Flood.

ICMP_FLOOD Attack Filter: Enter a value between 5 and 3600. The default value is 50. When the current ICMP-FLOOD Packets number is beyond the set value, the device will start up the blocking function immediately.

UDP_FLOOD Attack Filter: Enter a value between 5 and 3600. The default value is 500. When the current UPD-FLOOD Packets number is beyond the set value, the device will start up the blocking function immediately.

TCP_SYN_FLOOD Attack Filter: Enter a value between 5 and 3600. The default value is 50. When the current TCP-SYN-FLOOD Packets numbers is beyond the set value, the Device will start up the blocking function immediately.

Blocked DoS

Host List

Click Blocked DoS Host List to display the blocked DoS host table including host IP and host MAC. Click Refresh to renewal the table list. Click Clear to release all the blocked hosts. If you want to release one or some of the blocked hosts, select them and Click Unlock.

1. Click Save.
2. Configure Access Control

Note:

Access Control submenu is only available in AP Router Mode and AP Client Router (WISP Client) Mode.

The function can be used to control the internet activities of hosts in the local area network. For example, the online time limit and the specified web stations to visit can be controlled by the filtering policy.

1. Go to the Network page. In the Access Control section, enable Access Control and select the Filtering Policy.

2. Click Add and create the filtering entries.

3. Click Save and click Apply, then click Save.

1. Configure Static Routing

Note:

Static Routing submenu is only available in AP Router Mode and AP Client Router (WISP Client) Mode.

A static route is a pre-determined path that network information must travel to reach a specific host or network. If static route is used properly in the network, it can decrease the network overhead and improve the speed of forwarding packets.

Static routing is generally suitable for simple network environment, in which users clearly understand the topology of the network so as to set the routing information correctly. When the network topology is complicated and users are not so familiar with the topology structure, this function should be used with caution or under the guidance of the experienced administrator.

1. Go to the Network page. In the Static Routing section, click Add and specify the following parameters.

1. Click Save and click Apply, then click Save.
2. Configure Bandwidth Control

Note:

Bandwidth Control submenu is only available in AP Router Mode and AP Client Router (WISP Client) Mode.

Bandwidth control function is used to control the internet bandwidth in the local area network. In the case of insufficient bandwidth resources, enable the function to make the device allocate reasonable bandwidth to the clients and achieve the purpose of efficient use of the existing bandwidth. Via IP bandwidth control function, set the upper and lower limit in the bandwidth of the computer network and guarantee a smooth sharing network.

1. Go to the Network page. In the Bandwidth Control section, enable the Bandwidth Control function.

Total Ingress Specify the upper bandwidth for receiving packets from the WAN port.

Bandwidth

The maximum value is 100,000kbps.

Total Egress Specify the upper bandwidth for sending packets from the WAN port.

Bandwidth

The maximum value is 100,000kbps.

2. Click Add and specify the following parameters.

Egress Max Specify the maximum egress bandwidth for the desired entry. (kbps)

1. Click Save and click Apply, then click Save.
2. Configure IP & MAC Binding

We can effectively prevent ARP attack and IP embezzlement by enabling the IP&MAC binding. Within the local network, the device transmits IP packets to the certain target identified by the MAC address. Therefore, the IP and MAC address should be one-to- one correspondence and their corresponding relations are maintained by the ARP table. ARP attack can use forged information to renewal the ARP table, and destroy the corresponding relations between IP and MAC addresses, which would prevent the communication between the device and the corresponding host. When the IP&MAC Binding function is enabled, the IP and MAC relations in the ARP table won’t be expired and renewed automatically, which effectively prevents the ARP attack.

Some functions such as access control and bandwidth control, are based on the IP addresses to identify the access clients. The network administrator can allocate every client a static IP, according to which he makes the access and bandwidth rules to control the clients’ online behavior and the bandwidth they’ve used. Some illegal users may change the IP address in order to get higher internet access. Enabling IP & MAC binding function can effectively prevent the IP embezzlement.

Note:

After IP & MAC binding function is enabled, the IP bound to the MAC cannot be used by other MACs. However this MAC can use other IPs within the same segment, which are not bounded by other MACs, to access the network.

1. Go to the Network page. In the IP & MAC Binding section, click Add and specify the IP address and MAC address.

Note:

Click Import to quick import the entries in ARP table to IP & MAC Binding table. The imported entries are disabled by default. Select the desired entries and click Edit to enable it.

IP

Enter the IP address that you want to bind with the MAC address.

MAC Enter the MAC address that you want to bind with the IP address.

1. Enable the desired entry and click Save. Click Apply, then click Save.

Configure the Wireless Parameters

This chapter introduces how to configure the parameters of the wireless network, including:

1. Configure Basic Wireless Parameters
2. Configure Wireless Client Parameters
3. Configure Wireless AP Parameters
4. Configure Multi-SSID
5. Configure Wireless MAC Filtering
6. Configure Advanced Wireless Parameters
7. Configure Basic Wireless Parameters

This section allows you to configure wireless basic parameters, such as 802.11 mode, Transmit Power, and data rates.

Go to the Wireless Page. In the Basic Wireless Settings section, configure the basic wireless settings and click Apply. Then click Save.

1. Configure Wireless Client Parameters

Note:

Wireless Client Settings submenu is only available in Client, Repeater, Bridge and AP Client Router (WISP Client) Mode.

In this section, configure wireless client parameters used for the connection with the root AP.

1. Go to the Wireless Page. In the Wireless Client Settings section, configure the following parameters.

1. Specify the security mode. Make sure the security mode and the related parameters are the same as the upstream wireless network’s.

■ None

Select this option if the root AP has no encryption. When connecting to the root AP, it’s no need to enter a password to access the wireless network.

■ WEP

Note:

• WEP is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface.
• WEP is not supported in 802.11n mode or 802.11ac mode. If WEP is applied in 802.11n, 802.11 ac or 802.11n/ac mixed mode, the clients may not be able to access the wireless network. If WEP is applied in 802.11b/g/n mode (2.4GHz) or 802.11a/n (5GHz), the device may work at a low transmission rate.

WEP (Wired Equivalent Privacy) is a traditional encryption method. It has been proved that WEP has security flaws and can easily be cracked, so WEP is rarely used in normal wireless network. Select this option if the security mode of the root AP is WEP.

Key Selected:

Key 1: tS)

Key 2:

Key 3:

Key 4:

Key Type

Disaolec

Disaolec

Disaolec

Disaolec

■ WPA

WPA (Wi-Fi Protected Access) is a safer encryption method compared with WEP and WAP- PSK. It requires a RADIUS server to authenticate the clients via 802.1X and EAP (Extensible Authentication Protocol). WPA can generate different passwords for different clients, which ensures higher network security. But it also costs more to maintain the network, so it is more suitable for business networks.

Version

Select the version of WPA.

■ WPA-PSK

WPA-PSK (Wi-Fi Protected Access-PSK) is based on a pre-shared key. It is characterized by high safety and simple settings, so it is mostly used by common households and small businesses.

Version

Note:

1. Click Apply, then click Save.
2. Configure Wireless AP Parameters

Note:

Wireless AP Settings submenu is only available in Access Point, Bridge, AP Router and AP Client Router (WISP Client) Mode.

In this section, configure wireless AP parameters used for the connection with the clients.

1. Go to the Wireless Page. In the Wireless AP Settings section, specify the SSID.

Enable SSID Enable or disable SSID broadcast. With this function enabled, the device ^Broadcast will broadcast the SSID periodically.

1. Specify the security mode used for the clients to access the wireless network.

■ None

Select None when you want an open network without wireless security. In this mode, network data is not encrypted, but you can still authenticate clients by enabling the RADIUS MAC Authentication function.

Note:

RADIUS MAC Authentication is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface.

RADIUS MAC Authentication 3 Enable Q

Authentication Server I³

Authent cation Server Pert

Authentication Server Key:

Accounting Server I³

.Accounting Server Port

Accounting Server Key

Accounting Server

■ WEP

Note:

• WEP is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface.
• WEP is not supported in 802.11n mode or 802.11ac mode. If WEP is applied in 802.11n, 802.11 ac or 802.11n/ac mixed mode, the clients may not be able to access the wireless network. If WEP is applied in 802.11b/g/n mode (2.4GHz) or 802.11a/n (5GHz), the device may work at a low transmission rate.

WEP (Wired Equivalent Privacy) is a traditional encryption method. It has been proved that WEP has security flaws and can easily be cracked, so WEP cannot provide effective protection for wireless networks. Since WPA-PSK and WPA-Enterprise are much safer than WEP, we recommend that you choose WPA-PSK or WPA-Enterprise if your clients also support them.

Key Selected:

Key 1: tS)

Key 2:

Key 3:

Key 4:

Key Type

Disaolec

Disaolec

Disaolec

Disaolea

■ WPA

WPA (Wi-Fi Protected Access) is a safer encryption method compared with WEP and WAP- PSK. It requires a RADIUS server to authenticate the clients via 802.1X and EAP (Extensible Authentication Protocol). WPA can generate different passwords for different clients, which ensures higher network security. But it also costs more to maintain the network, so it is more suitable for business networks.

1^”” Note:

Accounting Server is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface.

Version

Select the version of WPA.

Auto: The device will automatically choose the version used by each client device.

WPA/WPA2: They’re two versions of WPA security mode. WPA2 is an update of WPA. Compared with WPA, WPA2 introduces AES algorithm and CCMP encryption. Theoretically, WPA2 is securer than WPA.

■ WPA-PSK

WPA-PSK (Wi-Fi Protected Access-PSK) is based on a pre-shared key. It is characterized by high safety and simple settings, so it is mostly used by common households and small businesses.

Group Key Specify an update period of the encryption key. The update period Update P^eriod instructs how often the device should change the encryption key. 0

means that the encryption key does not change at anytime.

1. Click Apply, then click Save.
2. Configure Multi-SSID

Note:

Multi-SSID submenu is only available in Access Point Mode.

The device can build up to four virtual wireless networks for users to access. When the Multi-SSID function is enabled, the VLAN function is enabled at the same time. It can work together with switches supporting 802.1 Q VLAN and supports maximum four VLANs. The device adds different VLAN tag to the clients which connect to the corresponding wireless network. The clients in different VLANs cannot directly communicate with each other.

The wired client can communicate with all the wireless clients despite the VLAN settings.

1. Go to the Wireless page. In the Multi-SSID section, Enable Multi-SSID. Click Add and create a new wireless network.

2. Select the desired SSID and specify the Security Mode.

Specify an update period of the encryption key. The update period instructs how often the device should change the encryption key. 0 means that the encryption key does not change at anytime.

Group Key Update Period

1. Click Apply, then click Save.
2. Configure Wireless MAC Filtering

Wireless MAC Filtering function uses MAC addresses to determine whether one host can access the wireless network or not. Thereby it can effectively control the user access in the wireless network. This function is available in all modes except the Client Mode.

1. Go to the Wireless page. In the Wireless MAC Filtering section, enable this feature and specify the filtering rule.

2. Click Add and specify the following parameters.

Enable Enable or disable the desired entry.

3. Click Save and click Apply. Then click Save.

1. Configure Advanced Wireless Parameters

This section is used to specify the advanced wireless parameters, such as Beacon Interval, RTS threshold and DTIM Interval.

Go to the Wireless page. In the Advanced Wireless Settings section, specify the following parameters and click Apply. Then click Save.

Manage the Device

The device provides powerful functions of management and maintenance. This chapter introduces how to manage the device, including:

• 1. Manage System Logs
  2. Specify the Miscellaneous Parameters
  3. Configure Ping Watch Dog
  4. Configure Dynamic DNS
  5. Configure Web Server
  6. Configure SNMP Agent

67 Configure SSH Server

1. Configure RSSI LED Thresholds
2. Manage System Logs

System logs record the events and activities while the device is running. If a failure happens on the device, System logs can help to diagnose the issue.

1. Go to the Management page. In the System Log section, perform the following operations.

Open System Log

Click the Open button to view the system log.

This page displays detailed system logs that can be sorted on columns by ascending or descending order. Columns can be chosen from Time, Type, Level, and Message.

Download to PC Click the Download button to download the system logs to your PC.

2. Click the Setting button to specify the Auto Mail Settings.

1. Specify the Miscellaneous Parameters

This section is used to specify miscellaneous parameters.

1. Go to the Management Page. In the Miscellaneous section, configure the following features and click Apply.

Miscellaneous

Discovery: 3 Enable 0

CDP: 13 Enable Q

Apply

2. Click Save.

1. Configure Ping Watch Dog

Ping Watch Dog sets the device to continuously ping a user-defined IP address (it can be the internet gateway, for example) to check the network connectivity. If there is a connection failure then the device will automatically reboot.

Ping Watch Dog is dedicated to continuously monitoring the connectivity to a specific host using the Ping tool. The Ping tool sends ICMP echo request packets to the target host and listens for ICMP echo response. If the defined number of replies is not received, the tool reboots the device.

1. Go to the Management Page. In the Ping Watch Dog section, Enable this feature and configure the following features. Click Apply.

Ping Watch Dog

2. Click Save.

1. Configure Dynamic DNS

Note:

The Dynamic DNS function is only available in AP Router and AP Client Router (WISP Client) Mode.

The main function of Dynamic DNS (DDNS) is mapping the fixed domain name to dynamic IP address.

When a device connects to the internet through PPPoE or Dynamic IP, the WAN IP address it gets is not fixed, which is inconvenient for the internet users to access the servers in the local area network through IP address. With Dynamic DNS function enabled, users can access servers using a fixed domain name.

The DDNS server will establish a mapping table about the dynamic IP address and the fixed domain name. When the WAN IP address of the device changes, it will make an update request to the specified DDNS server, and then the DDNS server will update the mapping relation between the IP address and the domain name. Therefore, whenever the WAN IP address changes, users on the internet can still access the servers in the local area network using a fixed, easy-to-remember domain name.

The DDNS function that serves as the client of DDNS service must work with DDNS server. Register an account to DDNS service provider (NO-IP, Dyndns or Comexe) first.

1. Go to the Management page. In the Dynamic DNS section, configure the following parameters and click Login.

2. Click Apply, then click Save.

1. Configure Web Server

This function is used to configure the related parameters of Web server. Users can log in to the web management page to manage this device remotely over the internet through Web Server.

1. Go to the Management page. In the Web Server section, configure the following parameters and click Apply.

2. Click Apply, then click Save.

1. Configure SNMP Agent

Get the traffic information and transmit condition by using the SNMP Agent function. Simple Network Management Protocol (SNMP) is an application layer protocol that facilitates the exchange of management information between network devices. Main functions of SNMP include monitoring network performance, detecting and analyzing network error, configuring network devices, and so on.

Configure the device as SNMP Agent, and it can receive and process the management message from the NMS (Network Management System).

1. Go to the Management page. In the SNMP Agent section, configure the following parameters and click Apply.

2. Click Apply, then click Save.

Note:

Defining community can allow management systems in the same community to communicate with the SNMP Agent. The community name can be seen as the shared password of the network hosts group. Thus, for the safety, we suggest modifying the default community name before enabling the SNMP Agent service. If the field of community is blank, the SNMP Agent will not respond to any community name.

1. Configure SSH Server

The SSH Server function is used for the users to log in and manage the device through SSH connection on the SSH client software.

SSH (Secure Shell) is a security protocol established on application and transport layers. SSH- encrypted-connection is similar to a telnet connection, but essentially the old telnet remote management method is not safe, because the password and data transmitted with plain-text can be easily intercepted. SSH can provide information security and powerful authentication when you log in this device remotely through an insecure network environment. It can encrypt all the transmission data and prevent the information in remote management from being leaked.

1. Go to the Management page. In the SSH Server section, configure the following parameters and click Apply.

2. Click Save.

1. Configure RSSI LED Thresholds

Note:

RSSI LED Thresholds is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface.

Configure the LEDs on the device to light up when received signal levels reach the values defined in the following fields. This function can help a technician to easily deploy a Pharos series product without logging into the device (for example, for antenna alignment operation).

1. Go to the Management page. In the RSSI LED Thresholds section, configure the following parameters and click Apply.

2. Click Apply, then click Save.

Configure the System

This chapter introduces how to configure the system of the device, including:

1. Configure Device Information
2. Configure Location Information
3. Configure User Account
4. Configure Time Settings
5. Update Firmware
6. Configure Other Settings
7. Configure Device Information

In this section, configure the device name and the system language.

1. Go to the System page. In the Device section, configure the following parameters and click Apply.

Device

Device Name: CPE21C

Language: English

Device Name Specify the device name.

Language Specify the system language used in the management interface.

1. Click Save.
2. Configure Location Information

In this section, configure the location for the device.

1. Go to the System page. In the Location section, configure the following parameters and click Apply.

2. Click Save.

1. Configure User Account

This section is used to configure user account.

1. Go to the System page. In the User Account section, configure the following

parameters and click Apply.

2. Click Save.

1. Configure Time Settings

In this section, configure the system time and the daylight saving time.

1. Go to the System page. In the Time Settings section, configure the system time.

■ Manually

Configure the System time manually.

■ Automatically

• Specify the NTP Server, then click the Get GMT button to get the system time from the NTP server

NTP Server 1 Specify the primary NTP server used to get time automatically.

NTP Server 2 Specify the alternate NTP server used to get time automatically.

• Click Synchronize with PC’s Clock to synchronize the system time with the PC’s time.

2. Click the Setting button to specify the daylight saving time.

■ Predefined Mode

Select Predefined Mode and select the predefined daylight saving time schedule for the device.

■ Recurring Mode

Select Recurring Mode and configure the related parameters for the device. This configuration will be used every year.

■ Date Mode

Note:

Date Mode is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface.

Select Date Mode and configure the related parameters for the device. This configuration will be used only one time.

1. Click Apply, then click Save.
2. Update Firmware

This section is used to view the current firmware and update the firmware of the device.

Go to the System page. In the Firmware Update section, click Browser to select a firmware file then click Upload.

Firmware Update

Firmware Version: 2.1.6 Build 20170908 Rel. 45233 (0000)

Upload Firmware:

Displays the current firmware version of the device.

Firmware

Version

Note:

• We recommend that you back up current system configuration before updating the firmware.
• Select the proper software version that matches your hardware to upgrade. Visit TP- Link website to download the latest firmware.
• To avoid damage, do not power off the device while upgrading.
• After upgrading, the device will reboot automatically.

1. Configure Other Settings

This section is used to back up or upload the configuration file, reset the device and reboot the device.

Go to the System Page. In the Configuration section, perform the following operations.

Note:

• After backup, the device will reboot automatically.
• To avoid damage, DO NOT turn off the device while uploading.

Use the System Tools

This chapter introduces how to configure the system tools:

1. Configure Ping
2. Configure Traceroute
3. Test Speed
4. Survey

85 Analyze Spectrum

1. Antenna Alignment

8.1 Configure Ping

Ping test function is used to test the connectivity and reachability between the device and the target host so as to locate the network malfunctions.

1. Click Ping from the drop-down list on the upper-right corner and specify the following parameters.

2. Click Start.

8.2 Configure Traceroute

Tracertroute function is used to tracks the route packets taken from source on their way to a given target host. When malfunctions occur in the network, troubleshoot with traceroute utility.

1. Click Traceroute from the drop-down list on the upper-right corner and specify the following parameters.

2. Click Start.

1. Test Speed

Speed Test tool is used for testing the throughput between two Pharos products in the same network. The test requires one of the two devices to be set as a server and the other as a client. The client launches the test request to the server and the server respond to it. The test result will display on the page of the client.

1. Click Speed Test from the drop-down list on the upper-right corner and specify the following parameters.

2. Click Start.

1. Survey

The survey tool is used to survey the wireless network around the device.

Click Survey from the drop-down list on the upper-right corner and the following page will

appear.

1. Analyze Spectrum

Spectrum Analysis can help you choose the proper channel/frequency. Through the spectrum analysis, learn the distribution of the radio noise and intelligently select the channel/frequency in low noise.

1. Click Spectrum Analysis from the drop-down list on the upper-right corner and click

Yes on the pop-up window.

2. Click Start. Observe the curves for a period of time, and then click Stop. The relatively low and continuous part of the average curve indicates less radio noise. Here we take the figure below as an example.

Spectrum Analysis

Note:

The select box of Frequency Range is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface. Select the required range and then click Start.

1. When choosing Channel/Frequency, try to avoid the spectrum with large radio noise.
2. Antenna Alignment

Antenna alignment can help you to optimize the antenna. Click Antenna Alignment from the drop-down list on the upper-right corner. Adjust your antenna according to the following parameters. Point the antenna in the direction of maximum signal and minimum noise.

Antenna Alignment

Horizontal/Vertical Displays the signal strength of the last received packet. The signal