Wireless access point 
WEP-2ac, WEP-2ac Smart
Annex to the user manual
Quick guide
Firmware version 1.23.0

IP address:  http://192.168.1.10
User Name: admin
Password: password

Annotation

This manual contains the following information:

• connection to WEP-2ac web interface;
• configuration of WEP-2ac network parameters;
• WEP-2ac firmware update;
• SNMP configuration;
• wireless interfaces configuration (operation mode, band);
• virtual access points configuration;
• monitoring of wireless network main parameters.

The manual provides an example of access point configuration without using a softWLC controller.
The following scheme is given as an example.

Figure 1 – Example of network configuration 

To perform the configuration, a PC with access to the device via Ethernet and any web browser (Internet Explorer, Firefox, Google Chrome, Opera, etc.) are required.

Installation order

This section defines safety rules, installation recommendations, setup procedure and the device starting procedure.

Safety rules

1. Do not install the device close to heat sources or in rooms with temperature below 5 °C or above 40 °C.
2. Do not use the device in places with high humidity. Do not expose the device to smoke, dust, water, mechanical vibrations or shocks.
3. Do not open the device case. There are no user serviceable parts inside.

Installation recommendations

1. The recommended mounting position: horizontal, on a ceiling.
2. Before installing and enabling the device, check it for visible mechanical defects. If defects are observed, stop the device installation, draw up corresponding act and contact the supplier.
3. If the device has been exposed for a long time at a low temperature, it must be left to stand for two hours at room temperature before use. After a long stay of the device in conditions of high humidity, let it stand under normal conditions for at least 12 hours before switching on.
4. During the device installation, follow these rules to ensure the best Wi-Fi coverage:
   1. Install the device at the center of a wireless network;
   2. Minimize the number of obstacles (walls, roof, furniture and etc.) between access point and other wireless network devices;
   3. Do not install the device near (about 2 m) electrical and radio devices;
   4. It is not recommended to use radiophone and other equipment operating on the frequency of 2.4 GHz, 5 GHz in Wi-Fi effective radius;
   5. Obstacles like glass/metal constructions, brick/concrete walls, water cans and mirrors can significantly reduce Wi-Fi action radius. It is not recommended to place the device inside a false ceiling as metal frame causes multipath signal propagation and signal attenuation.
5. During the installation of several access points, cell action radius must overlap with action radius of a neighboring cell at level of -65 ÷ -70 dBm. Decreasing of the signal level on cells borders to -75 dBm is permitted if it involves the use of VoIP, streaming video and other traffic that is sensitive to losses in wireless network. 

Device installation

The device should be attached to plain surface (wall or ceiling) in accordance with the safety instruction and recommendations listed above.
The device delivery package includes required mounting kit to attach the device to plain surface.

Wall mounting

1. Fix the bracket (included in the delivery package) to the wall:

 
Figure 7 – Attaching the bracket to a wall

1. 1. The figure shows the bracket allocation;
   2. When installing the bracket, pass wires through the corresponding grooves of the bracket, see figure 7;
   3. Pass the wires into the corresponding grooves on the bracket while installing the bracket. Screw the brackets to the device surface by using screwdriver.

2. Install the device.

Figure 8 – Device installation (front view)

1. Connect cables to corresponding connector of the device.
   Description of the connectors is given in Design section of the User manual.
2. Align the device and bracket together, fix the position, turning clockwise. 

Installing to false ceiling

1 – metal bracket; 2 – Armstrong panel; 3 – plastic bracket; 4 – device.

Figure 9 – Mounting to a false ceiling

1. Fasten metal and plastic bracket on a ceiling as shown in the figure 9.
   1. The plastic bracket (3) should be joined with the metal one (1) on the ceiling in the following order: metal bracket -> Armstrong panel -> plastic bracket.
   2. Cut the hole in the Armstrong panel. The size of the hole should be equal to hole of metal bracket. Conduct wires through the hole.
   3. Align holes in metal bracket with holes of Armstrong panel and plastic bracket. Align together three screw holes on the plastic bracket and the screw holes on the metal bracket. Screw the brackets to the device surface by using a screwdriver.
2. Install the device.
   1. Connect cables to corresponding connector of the device. Description of the connectors is given in Design section of the User manual.
   2. Align the device and plastic bracket together, fix the position, turning clockwise.

Removing the device from the bracket

For removing the device from the bracket:

1. Turn the device counterclockwise;
2. Remove the device. 

RJ-45 pinout

The next scheme is used for twisted-pair wiring.

Connecting to the web interface

Connect network cable to the PoE interface of the access point and to the PoE switch/injector. Next, connect a PC to the injector or switch.

1. Open a web browser, for example, Firefox, Opera, Chrome.

2. Enter the device IP address in the browser address bar.

   IP address by default: 192.168.1.10, subnet mask: 255.255.255.0.

   The device can obtain IP address via DHCP. Until then, it is available at the factory IP address.

   If the connection has been performed successfully, the authorization page will be displayed:

   

3. Enter username to 'User Name' field and password to 'Password' field.

   Factory default authorization settings: User Name – admin, Password – password.

4. Click the Logon button.

A menu for monitoring the status of the device will open in a browser window.

Configuring network parameters

For remote management of WEP-2ac and WEP-2ac Smart, set network parameters of the device according to the settings of the network that you intend to use.
In the Manage menu, open Ethernet Settings tab and perform the following:

• Management VLAN ID – specify VLAN number that will be used for access point management. In the given example VLAN 148 is used;
• Connection Type – select Static IP to set IP addresses for access points manually. If it is necessary to distribute IP addresses and other network parameters to access points via the DHCP protocol, set the Connection Type field to 'DHCP' and this will complete the configuration of the network part;
• Static IP Address – specify the IP address of WEP-2ac. In the given example, VLAN 10 address is 192.168.40.26;
• Subnet Mask – specify the subnet mask. In the given example, subnet mask is 255.255.255.0;
• Default Gateway – enter the IP address of the default gateway field. 192.168.40.1. In the given example, IP address of the default gateway is 192.168.40.1.

To apply a new configuration and save setting to non-volatile memory, click Update.

After the configuration, WEP-2ac will be available in 10 VLAN via 192.168.40.26 address.

Firmware upgrade

For correct operation of WEP-2ac and WEP-2ac Smart, it is recommended to update the firmware to the latest version.

After obtaining the relevant firmware version, in the Maintenance menu, open Upgrade tab and perform the following:

• Upload Method – check HTTP;
• New Firmware Image – click Browse button and select relevant firmware version in the window that opens.

To start the upgrade process, click Upgrade.

The process may take several minutes (its current status will be shown on the page). The device will be automatically rebooted when the upgrade is completed.

The current firmware version can be viewed in the Basic Settings menu. The current firmware version is indicated in the Firmware Version field.

Configuring the SNMP service

SNMP service configuration is performed in the SNMP section of the Services menu.

• Restrict the source of SNMP requests to only the designated hosts or subnets – reception of SNMP requests only from devices with specific IP address. Check Enabled;
• Hostname, address, or subnet of Network Management System – specify IP address of SNMP server from which SNMP commands will be transmitted.

In the Trap Destinations section, perform the following settings:

• Set the flag in the column with the Enabled heading;
• Host Type – specify whether the enabled host is an IPv4 host or an IPv6 host. In this example, IPv4 is selected;
• SNMP version – select the version of the SNMP protocol. In this example, the snmpV2 protocol is selected;
• Community name for traps – set community name public;
• Host name or IP or IPv6 Address – check one of the fields for specifying traps receiver address and enter an IP address of the device to which WEP-2ac will send traps. In the given example, IP address to receive SNMP traps is 172.16.0.22.

To apply a new configuration and save setting to non-volatile memory, click Update.

Configuring wireless interfaces

WEP-2ac and WEP-2ac Smart have 2 radio interfaces (Radio1 and Radio 2) that are capable to operate simultaneously. Radio 1 operates at 5 GHz band, Radio 2 – at 2.4 GHz.
The example of configuration of a network with the following characteristics is given below:

Radio1:

• Frequency range: 5 GHz;
• Standards: 802.11a/n/ac;
• Bandwidth: 80 MHz.

Radio2:

• Frequency range: 2.4 GHz;
• Standards: 802.11b/g/n;
• Bandwidth: 20 MHz.

To apply a new configuration and save setting to non-volatile memory, click Update.

In the Manage menu, open Wireless Settings tab and perform the following:

• Country – name of the country where access point operates. Depending on the value set, the frequency band and transmitter power restrictions applicable in that country will be applied. The list of available frequency channels depends on the set country, which affects the automatic channel selection in the Channel = Auto mode. If the client equipment is licensed for use in another region, it will not be possible to establish a connection with the access point;
• Transmit Power Control – configuring the Transmit Power Limit parameter restrictions. Select On in the list. 

Configuring Radio 1:

• Radio Interface – check the On box;
• Mode – select value IEEE 802.11 a/n/ac.

Configuring Radio 2:

• Radio Interface 2 – check the On box;
• Mode – select value IEEE 802.11 b/g/n.

To apply a new configuration and save setting to non-volatile memory of the access point, click Update. 

In the Manage menu, open the Radio tab and perform the following:

Configuring Radio 1:

• Radio – select value 1;
• Channel Bandwidth – set value 80 MHz;

To apply a new configuration and save setting to non-volatile memory of the access point, click Update.

Configuring Radio 2:

• Radio – select value 2;
• Channel Bandwidth – set value 20 MHz.

To apply a new configuration and save setting to non-volatile memory, click Update.

Configuring virtual access points

On each wireless interface, up to 16 virtual access points can be configured. Each access point may have individual name of wireless network (SSID) and type of authentication/authorization. According to the network diagram given in the figure 1, it is necessary to configure two virtual access points on Radio 1 and Radio 2.

Band Steer feature allows clients to have opportunity of operation at 2.4 GHz and 5 GHz to set priority of connection to 5 GHz band.

The following is necessary for Band Steer feature operation:
– configure radio interfaces for operation at different frequency ranges;
– create virtual access points (VAP) on each frequency range with the same SSID;
– when using encryption, make sure the passwords of the VAPs are the same;
– activate Band Steer feature on the access points.

In the Manage menu, open the VAP tab and perform the following:

Configuring Radio 1:

• Radio – select the radio interface on which VAP will be configured. Select 1.
• Enabled – enable VAP. Check the boxes for VAP 0 and VAP1.
• VLAN ID – VLAN number from which the tag will be removed when transmitting Wi-Fi traffic to clients connected to this VAP. When traffic flows in the opposite direction, untagged traffic from clients will be tagged with VLAN ID (when VLAN Trunk mode is disabled):
  • set VLAN ID value 100 for VAP 0;
  • set VLAN ID value 1 for VAP 1.
• SSID – wireless network name:
  • set SSID value Work Network for VAP 0;
  • set SSID value Free Network for VAP 1.
• Station Isolation – forbid packet transmission among access point clients. Check the box.
• Band Steer – set a priority of users connection to SSID configured at 5 GHz. Check the box.
• Security – secure network mode:
  • set WPA Personal value for VAP 0:
    • Key – set a password for this network connection. The password should be from 8 to 63 characters long.
  • set None value for VAP 1 – client device will be able to connect to this wireless network without password.

To apply a new configuration and save setting to non-volatile memory of the access point, click Update.

Configuration of Radio 2 is performed the same way. Select 2 value in Radio and perform the configuration as for the Radio 1 (given above). The password for 'Work Network' SSID should be the same for both VAP Radio 1 and VAP Radio 2. 

After configuring VAP on Radio 2, click Update.

Monitoring of the general wireless network parameters

All clients connected to this access point can be viewed in the Status menu of the Client Associations tab.

Clicking on the client's MAC address reveals detailed information about the client's operation and statistics on packet transmission.

To update information on the page, click Refresh.

In the Rogue AP Detection submenu, information about all wireless access points that the device detects in its network is displayed.

Events submenu displays a list of events that occur with the device, as well as configure event redirection to a third-party SYSLOG server.

For more detailed information, it is recommended to read the complete user manual.

Cluster operating mode

The cluster operation mode allows managing devices in a cluster simultaneously, which sufficiently improves operation efficiency while deploying, configuring or exploiting a wireless network.

When operating in Cluster mode, it is enough to configure only one access point. The rest of the access points will copy the configuration of the device with set parameters. If the configuration of one access point in a cluster has been changed, the other access points will apply the same changes. The solution is valid while firmware update. Operation in Cluster mode allows performing manageable consistent firmware update of devices in a cluster.

The cluster is a group of devices allocated in a single broadcast domain with synchronized configuration and firmware. Cluster mode is enabled by default.

The defining parameter of the mode is the name of a cluster by which the identification of device attachment to this cluster is performed. The default name of a cluster is default.

After loading, WEP-2ac defines if there are devices located on the network with the same name as in its configuration. If the devices with these parameters are not found, WEP-2ac becomes a master of the cluster. If the devices belonging to the cluster are found, WEP-2ac starts copying the configuration of a master. Thus, the first device with enabled Cluster mode occurred on the network becomes a master of its cluster. Other devices occurred on the network later and having the same cluster name start duplicating the master configuration. Several clusters with different names might be located in the same network simultaneously. One access point should be included to only one cluster.

WEP-2ac announces its affiliation to a cluster through a special protocol. The device sends broadcast UDP packets to LAN with data on affiliation to a particular cluster. Thus, all the access points included to a cluster exchange data among them, identify a master of the cluster and its configuration. The master carries out an inventory of the devices in the cluster and always controls the quantity of the access points in the cluster and their addresses.

Installation

It is sufficient that only one access point is configured when deploying a network. For providing data exchange among devices in a cluster, install a DHCP server for network addresses distribution.
Network installation algorithm:

1. DHCP server installation;
2. Configuration and physical connection of one access point;
3. Physical connection of other access points in the cluster.

After installing the first access point, there is no need to configure the rest, it is sufficient to connect them physically to the network. The devices will obtain network addresses, define the master of the default cluster and will be automatically configured according to the master configuration.

Configuring Cluster

In the Cluster menu, open Access Points tab and perform the following:

To edit the settings in the Clustering Options section, switch cluster mode to Off state.

In the Clustering Options menu, perform the following configuration:

• Location – description of the physical location of the access point. Used to display in monitoring tables for easy analysis and network management;
• Cluster Name – cluster name. The access point will connect only to the cluster which name is specified in this parameter. By default – default;
• Clustering IP Version – version of the IP protocol used to exchange control information between cluster devices;
• Cluster-Priority – access point priority in the cluster. The parameter takes values from 0 to 255. The default is 0. Supported only for IPv4 networks. The master in the cluster is the point that has the highest cluster priority. If the parameter is not set, the access point with the lowest MAC address becomes the master point in the cluster.

To apply a new configuration and save setting to non-volatile memory, click Update.

In the Single IP Management menu, perform the following configuration:

• Cluster Management Address – unique IPv4 address, at which the cluster master point will be available. This address must be on the cluster subnet and not be the same as the IP address of other devices on the network.

To apply a new configuration and save setting to non-volatile memory, click Update.

To enable cluster mode, select On in the Clustering field.

To enable automatic channel selection according to the data on channels used by neighboring access points and spectral analysis of environment on third-party access points noise, switch to the Radio Resource Management tab and click Start in the Channel Planner section.
To enable automatic output power distribution of the access point according to influence of neighboring access points which operate in the same cluster, switch to the Radio Resource Management tab and click Start in the Transmit Power Control section.

In the Locked field, channel change for the radio interface of the access point can be locked. If the flag is set when the optimal channel is selected by all access points, this radio interface will use the previous channel for any outcome of the optimal channel selection.

In the Advanced menu, perform the following configuration:

• Change channels if interference is reduced by at least – percentage gain in reducing the noise level for making a decision to switch to another channel. If, during the analysis of the environment, the access point detects that switching to another channel will result in a noise level decrease greater than the specified amount in this parameter, the decision will be made to switch to another channel. The value setting range for this parameter is between 5% and 75%;
• Refresh when access point is added to the  cluster – recalculate the overall spectral structure of the environment and select the optimal channel for access points if a new access point joins the cluster;
• Determine if there is better set of channel settings every – time interval after which the overall spectral structure of the environment is recalculated and the optimal channel for access points is selected. 1 Day is used in the example.

To apply a new configuration and save setting to non-volatile memory, click Update.

Monitoring

In the Sessions submenu, the parameters of client sessions connected to access points located in the cluster can be viewed. Each client is identified by the MAC address and access point to which it is currently connected.

To view statistics in the Display section, select the required value and click Go.

Statistics is available for the following parameters:

• AP Location – description of the physical location of the access point;
• User MAC – MAC address of the client's wireless device;
• Rate – data transfer rate between the access point and a specific client, Mbps;
• Signal – signal level received from the access point;
• Rх Total – total number of packets received by the client during this session;
• Tx Total – total number of packets transmitted from the client during this session;
• Error Rate – percentage of resent packets.

To view correspondence between access points located in the cluster and wireless networks detected by these devices, switch to the Wireless Neighborhood tab. 

In the Wireless Neighborhood tab, 

Based on this table, a spectral analysis of the entire network can be performed, and the impact of interference on each access point can be evaluated. This will enable the assessment of the correct location of access points across the coverage area and identification of problem areas where the level of interference may affect the quality of services.

The top line of the table displays information on each radio interface of access points located in the cluster. The far left column 'Neighbors' contains information on wireless networks that are visible to devices in the cluster.

The signal level from each wireless network is indicated in the upper right corner of the table cell.

The table is formed in such a way that its first rows display wireless networks formed by the cluster itself, followed by the names of third-party networks.

To view current list of the access points in the cluster and their parameters, switch to the Radio Resource Management tab. In the Current Channel Assignments table, the following parameters are listed:

• IP Address – IP address of the access point in the cluster;
• Radio – MAC address of a radio interface of the access point in the cluster;
• Band – standards supported by the radio interface of the access point in the cluster at the moment;
• Channel – number of a channel on which the access point operate;
• Status – operation state of the access point’s radio interface in the cluster;

To update information on the page, click Refresh.

The Proposed Channel Assignments table contains data on available channel values, which the radio interface will switch to if optimal channel selection has been launched:

• IP Address – IP address of the access point in the cluster;
• Radio – MAC address of a radio interface of the access point in the cluster;
• Proposed Channel – channel number to which the radio interface will switch when optimal channel selection is launched.

Cluster firmware upgrade

The operation in the cluster mode allows performing automatic firmware upgrade for all the access points in the cluster without using external systems or controllers.

Firmware upgrade might be performed:

• through the web interface;
• through the DHCP Autoprovisioning (opt 66, opt 67).

Firmware upgrade via web interface

To upgrade firmware on devices in a cluster through web interface, open the Cluster Firmware Upgrade tab of an access point.

When updating the firmware of the cluster devices, the firmware file will be downloaded to each device and set to the 'Primary Image' position. The upgrade process automatically reboots devices with firmware that matches the new image. The firmware installed earlier on the cluster devices will be saved and moved to the 'Secondary Image' position (backup version of the firmware).

Download the file with the current firmware version to PC.

The firmware file can be uploaded to the device via HTTP or TFTP protocols:

Upload via HTTP. Set Upload Method flag to HTTP. Click Browse. In the window that opens select a path to the firmware file on the PC. In the leftmost column of the table, set flags for access points for which firmware will be upgraded. Click Start-Upgrade to start upgrading.

Upload via TFTP. Set Upload Method flag to TFTP. In the Image Filename field specify the name of the firmware file that will be uploaded to the device. File name must contain .tar extension. In the Server IP field specify the IP address for the TFTP server on which the firmware file will be stored. 

Click Stop to abort device upgrade process. 

In the Overall Upgrade Status field, a summary status of the software upgrade process on access points is displayed. 

Firmware upgrade via DHCP Autoprovisioning

To upgrade firmware, a TFTP server and a DHCP server with particular configuration are required. The upgrade process is as follows:

1. An access point is loaded and obtains address via DHCP. The access point obtains 2 parameters from the server while DHCP session: tftp-server and file name, where tftp-server – an IP address of TFTP server, and filename is a name of the file with .manifest extension which contains data on the firmware.
2. A master of the cluster, according to received data, starts make attempts to download manifest-file from TFTP server. After downloading the file, the master compares firmware version specified in a file with its own. If firmware versions are different, the master downloads firmware file from the TFTP server (file name of the firmware is specified in manifest-file) and updates automatically.
3. The other devices in the cluster define that the master is not in operation. Then, new master is selected in the cluster. The device with bigger uptime value becomes a master. New master also repeat the second step: downloads manifest-file, compares firmware versions and updates.
4. The cycle is repeated until all the devices in the cluster are upgraded.

Firmware upgrade algorithm via DHCP Autoprovisioning

1. Place the 'wep2.manifest' file on TFTP server, the file should contain the following string:

VERSION= '1.22.X.X' WEP-2ac-1.22.X.X.tar.gz,

where WEP-2ac-1.22.X.X.tar.gz is a name of the archive containing firmware for WEP-2ac;
        1.22.X.X is a firmware version included to the archive. The firmware version can be viewed in 'version' file in firmware archive.

2. Place archive with firmware for WEP-2ac on TFTP server.

3. Add the following strings to the DHCP server configuration file (dhcpd.conf):

option tftp-server-name '192.168.100.253';
option bootfile-name 'wep2.manifest';

 where 192.168.100.253 is an address of the TFTP server;
         wep2.manifest is a manifest file name.