...

Introduction

Annotation

Modern tendencies of telecommunication development necessitate operators to search for the most optimal technologies, allowing you to satisfy rapidly growing needs of subscribers, maintaining at the same time consistency of business processes, development flexibility and reduction of costs of various services provision. Wireless technologies are spinning up more and more and have paced a huge way for short time from unstable low-speed communication networks of low radius to broadband networks equitable to speed of wired networks with high criteria to the quality of provided services.

...

This manual specifies intended purpose, main technical parameters, design, safe operation rules and installation and configuration recommendations for WEP-1L.

Symbols

Notes and warnings

...

Device description

Purpose

WEP-1L wireless access point is designed for provision of users' access to high-speed safe network.

...

WEP-1L is a universal solution for organization of wireless networks with small amount of users and oriented on installation in office or small branch of organization. The ability to create virtual access points with different types of encryption allows to differentiate access rights between ordinary users and dedicated groups of users.

Device specification

Interfaces:

• 1 port of Ethernet 10/100/1000 Base-T(RJ-45);

...

Figure 1 – WEP-1L application scheme

The device technical parameters

Table 1 — Main Specifications

Design

WEP-1L enclosed in plastic case.

Front panel

The layout of WEP-1L front panel is shown in the figure below.

...

Rear panel

The layout of WEP-1L rear panel is shown in the figure below.

...

Bottom panel

The layout of WEP-1L bottom panel is shown in the figure below.

...

Light indication

The current status of the device is displayed by indicators located on the front and rear panels. The list of indicator states is shown in table 5.

...

Reset the device to the factory settings

To reset the device to the factory settings, press and hold the 'F' button until the Power indicator on the front panel flashes red. There will be an automatic reboot of the device, the indicator will light up in a constant red color.

DHCP client will be launched by default. If the address is not received via DHCP the device will have IP address – 192.168.1.10, subnet mask – 255.255.255.0; User Name/Password to access via Web interface: admin/password.

Delivery package

The delivery package includes:

• WEP-1L wireless access point;
• 230/5.3V 2.0A power adapter;
• Operating manual (supplied on a CD);
• Conformity certificate;
• Technical passport.

Rules and recommendations for device installation

This section defines safety rules, installation recommendations, setup procedure and the device starting procedure.

Safety rules

1. Do not install the device close to heat sources or in rooms with temperature below 5 °C or above 40 °C.
2. Do not use the device in places with high humidity. Do not expose the device to smoke, dust, water, mechanical vibrations or shocks.
3. Do not open the device case. There are no user serviceable parts inside.

Installation recommendations

1. The recommended installation: horizontal, on a table.
2. Before you install and enable device, check the device for visible mechanical defects. If defects are observed, you should stop the device installation, draw up corresponding act and contact the supplier.
3. If the device has been exposed for a long time at a low temperature, it must be left to stand for two hours at room temperature before use. After a long stay of the device in conditions of high humidity, let it stand under normal conditions for at least 12 hours before switching on.
4. During the device installation, follow these rules to ensure the best Wi-Fi coverage:
   1. Install the device at the center of a wireless network;
   2. Minimize the number of obstacles (walls, roof, furniture and etc.) between access point and other wireless network devices;
   3. Do not install the device near (about 2 m) electrical and radio devices;
   4. It is not recommended to use radiophone and other equipment operating on the frequency of 2.4 GHz, 5 GHz in Wi-Fi effective radius;
   5. Obstacles in the form of glass/metal constructions, brick/concrete walls, water cans and mirrors can significantly reduce Wi-Fi action radius.
5. During the installation of several access points, cell action radius must overlap with action radius of a neighboring cell at level of -65 ÷ -70 dBm. Decreasing of the signal level on cells borders to -75 dBm is permitted if it involves the use of VoIP, streaming video and other traffic that is sensitive to losses in wireless network.

Calculating the number of required access points

To calculate the required number of access points, you should evaluate the required coverage zone. For a more accurate assessment, it is necessary to make a radio examination of the room. Approximate radius of coverage area of WEP-1L with a good-quality signal in case of placing in typical office: 2.4 GHz 40-50 m, 5 GHz: 20-30 m. In the absence of obstacles, the coverage radius: 2.4 GHz up to 100 m; 5 GHz up to 60 m.
The table below describes rough attenuation values.

...

Channel selection for neighboring access points

It is recommended to set nonoverlapping channels to avoid interchannel interference among neighboring access points.

...

Figure 8 – Channels used in range of 5 GHz when channel width is 20, 40 or 80 MHz

Device management via the WEB interface

Getting started

In order to start the operation, you should connect to the device via WAN interface using a web browser:

...

5. If necessary, you can switch the information display language. Russian and English languages are available for WEB interface.

Applying configuration and discarding changes

1. Applying configuration 

...

The button for discarding changes appears as follows:  .

WEB interface basic elements

Navigation elements of the WEB interface are shown on the figure below

...

1. Menu tabs categorize the submenu tabs: Monitoring, Radio, VAP, Network settings, System.
2. Interface language selection and Logout button designed to to end a session in the WEB interface under a given user.
3. Submenu tabs allow you to control settings field.
4. Devcie configuration field displays data and configuration.
5. Information field displays current firmware version.

   Scroll Pagebreak

The 'Monitoring' menu

In the 'Monitoring' menu you can view the current system state.

The 'Wi-Fi Clients' submenu

The 'Wi-Fi clients' submenu displays information about the status of connected Wi-Fi clients.

...

• Total TX/RX, bytes – the number of bytes sent/received on the connected device;
• Total TX/RX, packets – the number of packets sent/received on the connected device;
• Data TX/RX, bytes – the number of data bytes sent/received on the connected device;
• Data TX/RX, packets – the number of data packets sent/received on the connected device;
• Fails, packets – the number of packets sent with errors on the connected device;
• TX Period Retry, packets – the number of retries of transmission to the connected device in the last 10 s;
• TX Retry Count, packets – the number of retries of transmission to the connected device during the entire connection;
• Actual TX/RX Rate, Kbps – the current traffic transmission rate at the moment.

The 'Traffic Statistics' submenu

The 'Traffic Statistics' section displays the diagrams of the speed of the transmitted/received traffic for the last minute, as well as statistics on the amount of transmitted/received traffic since the access point was turned on.

...

• Interface — name of the interface;
• Total packets – number of successfully received packets;
• Total bytes – number of successfully received bytes;
• Total drop – number of rejected packets;
• Errors – number of errors.

  Scroll Pagebreak

The 'Scan Environment' submenu

In the 'Scan Environment' submenu, scanning of the surrounding radio is carried out and detection of neighboring access points.

...

The 'Events' submenu

In this section, you can view a list of real-time informational messages which contains the following information:

...

If necessary, you can delete all old messages from the log by clicking on the 'Clear' button.

The 'Network Information' submenu

In the 'Network Information' submenu you can view common network settings of the device.

...

• Interface – name of the bridge interface;
• Destination – IP address of destination host or subnet that the route is established to;
• Gateway – gateway IP address that allows for the access to the Destination.
• Netmask – subnet mask;
• Flags – certain route characteristics. The following flag values exist:
  • U – means that the route is created and passable;
  • H – identifies the route to the specific host;
  • G – means that the route lies through the external gateway; System network interface provides routes in the network with direct connection. All other routes lie through the external gateways. G flag is used for all routes except for the routes in the direct connection networks.
  • R – indicates that the route was most likely created by a dynamic routing protocol running on the local system using the reinstate parameter;
  • D – indicates that the route was added as a result of receiving an ICMP Redirect Message. When the system learns the route from the ICMP Redirect message, the route will be added into the routing table in order to exclude redirection of the following packets intended for the same destination.
  • M – means that the route was modified – likely by a dynamic routing protocol running on a local system with the 'mod' parameter applied;
  • A – points to a buffered route to which an entry in the ARP table corresponds.
  • C – means that the route source is the core routing buffer;
  • L – indicates that the destination of the route is one of the addresses of this computer. Such 'local routes' exist in the routing buffer only.
  • B – means that the route destination is a broadcasting address. Such 'broadcast routes' exist in the routing buffer only.
  • I – indicates that the route is connected to a ring (loopback) interface for a purpose other than to access the ring network. Such 'internal routes' exist in the routing buffer only.
  • ! – means that datagrams sent to this address will be rejected by the system.

    Scroll Pagebreak

The 'Device Information' submenu

The 'Device Information' submenu displays main WEP-1L parameters.

...

• Product – device model name;
• Hardware Version – device hardware version;
• Factory MAC Address – device WAN interface MAC address, setted by manufacturer;
• Serial Number – device serial number, setted by manufacturer;
• Firmware Version – device firmware version;
• Backup Version – previously installed firmware version;
• Boot Version – device firmware boot version;
• System Time – current time and date, setted in system;
• Uptime – the time since the last turn on or restart the device.

  Scroll Pagebreak

The 'Radio' menu

In the 'Radio' menu you can configure the wireless interface.

The 'Radio 2.4 GHz' submenu

In the 'Radio 2.4 GHz' submenu you can configure the main parameters of the radio interface of the device operating in the 2.4 GHz band.

...

To apply a new configuration and save setting to non-volatile memory, press 'Apply'. Press 'Cancel' to discard the changes.

The 'Radio 5 GHz' submenu

In the 'Radio 5 GHz' submenu you can configure the main parameters of the radio interface of the device operating in the 5 GHz band.

...

To apply a new configuration and save setting to non-volatile memory, press 'Apply'. Click 'Cancel' to discard the changes.

The «Advanced» submenu

In the 'Advanced' section, you can configure advanced device’s radio interface parameters.

...

To apply a new configuration and save setting to non-volatile memory, press 'Apply'. Press 'Cancel' to discard the changes.

The 'VAP' menu

In the 'VAP' menu, you can configure virtual Wi-Fi access points (VAP).

The 'Summary' submenu

The 'Summary' submenu displays the settings of all VAPs on Radio 2.4 GHz and Radio 5 GHz radio interfaces. You can see the settings of each virtual access point in sections VAP0..3.

...

To apply a new configuration and save setting to non-volatile memory, press 'Apply'. Press 'Cancel' to discard the changes.

The 'VAP' submenu

Common settings

• Enabled – when checked, the virtual access point is enabled, otherwise it is disabled;
• VLAN ID – VLAN number from which the tag will be removed when transmitting Wi-Fi traffic to clients connected to this VAP. When traffic flows in the opposite direction, untagged traffic from clients will be tagged with VLAN ID (when VLAN Trunk mode is disabled);
• SSID – virtual wireless network name;
• Broadcast SSID – when checked, SSID broadcasting is on, otherwise it is disabled;
• VLAN Trunk – when the flag is set, tagged traffic is transmitted to the subscriber;
• General Mode – when the flag is set, transmission of untagged traffic jointly with tagged traffic is allowed (available when Trunk VLAN mode is enabled);
• General VLAN ID – a tag will be removed from the specified VLAN ID and the traffic of this VLAN will pass to the client without a tag. When traffic passes in the opposite direction, untagged traffic will be tagged with General VLAN ID;
• Station Isolation – when checked, traffic isolation between clients in the same VAP is enabled.
• Priority – select prioritization means. Defines the field on the basis of which the traffic transmitted to the radio interface will be distributed in WMM queues:
  • DSCP – will analyze the priority from the DSCP field of the IP packet header;
  • 802.1p – will analyze the priority from the CoS (Class of Service) field of the tagged packets.
• Maximum Stations – the maximum number of clients connected to the virtual network;
• Minimal Signal – signal level in dBm below which the client equipment is disconnected from the virtual network;
• Security Mode – wireless access security mode:
  • Off – do not use encryption for data transfer. The access point is available for any subscriber to connect;
  • WPA, WPA2, WPA/WPA2 – encryption methods, if you select one of the methods, the following setting will be available:
    • WPA Key – key/password required to connect to the virtual access point. The length of the key makes from 8 to 63 characters;
  • WPA-Enterprise, WPA2-Enterprise, WPA/WPA2-Enterprise – wireless channel encryption mode, in which the client is authorized on the centralized RADIUS server. To configure this security mode, you must specify the parameters of the RADIUS server. You also need to specify a key for the RADIUS server. If you select one of the methods, the following setting will be available:
    • Domain – user domain;
    • IP Address of RADIUS Server – RADIUS server address;
    • Port of RADIUS Server – port of the RADIUS server that used for aithentication and authorization;
    • Password of RADIUS Server – password for the RADIUS server used for authentication and authorization;
    • Use Accounting through RADIUS – when checked, 'Accounting' messages will be sent to the RADIUS server;
    • Use Other Settings For Accounting
      • IP Address of RADIUS Server for Accounting – address of the RADIUS server, used for accounting;
      • Password of RADIUS Server for Accounting – password for the RADIUS server used for accounting;
    • Port of RADIUS Server for Accounting – port that will be used to collect accounts on the RADIUS server;
      • Use Periodic Accounting – enable periodic sending of 'Accounting' messages to the RADIUS server. You can set the interval for sending messages in the 'Accounting Interval' field.

...

To apply a new configuration and save setting to non-volatile memory, press 'Apply'. Press 'Cancel' to discard the changes.

The 'Network Settings' menu

The 'System Configuration' submenu

• Hostname – nertwork name of the device, specified by string from 1 to 63 characters; latin uppercase and lowercase letters, numbers, hyphen '-' (hyphen can not be the last character in the name);
• AP Location – domain of the EMS management system tree host where the access point is located;
• Management VLAN:
  • Disabled – Management VLAN is not used;
  • Terminating – the mode in which the management VLAN is terminated at the access point; in this case, clients connected via the radio interface do not have access to this VLAN;
  • Forwarding – the mode in which the management VLAN is also transmitted to the radio interface (with the appropriate VAP configuration).
• VLAN ID – the VLAN ID used to access the device, takes values 1-4094;
• Protocol – select protocol for connection of the device via Ethernet interface to service provider network:
  • DHCP – operation mode, when IP address, subnet mask, DNS server address, defualt gateway and other parameters required for operation are obtained from DHCP server automatically;
  • Static – operation mode where IP address and all the necessary parameters for WAN interface are assigned statically. If 'Static' is selected, the following parameters will be available to set:
    • Static IP – device WAN interface IP address in the provider network;
    • Netmask – external subnet mask;
    • Gateway – address, to which the packet is sent, if the route in routing table is not found for it;
  • Primary DNS server, Secondary DNS server – IP address of DNS servers. If DNS servers' addresses are not allocated automatically via DHCP, set them manually.

To apply a new configuration and save setting to non-volatile memory, press 'Apply'. Click 'Cancel' to discard the changes.

The 'Access' submenu

In the 'Access' submenu, you can configure access to the device via the web interface, Telnet, SSH, NETCONF and SNMP.

...

To apply a new configuration and save setting to non-volatile memory, press 'Apply'. Press 'Cancel' to discard the changes.

The 'System' menu

In the 'System' menu you can configure system, time, device access via dofferent protocols, change password and update device firmware.

The 'Device Firmware Upgrade' submenu

The 'Device Firmware Upgrade' submenu is intended for upgrading the device's firmware.

...

The 'Configuration' submenu

In the 'Configuration' submenu you can save and update current configuration.

...

To reset all the settings to default values, press 'Reset' button. If the flag 'Save access setting' is activated, then those settings, configurations that are responsible for access to the device (IP address settings, Telnet/SSH/SNMP/Netconf/WEB access settings) will be saved

The 'Reboot' submenu

To reboot the device, click on the 'Reboot' button. The device reboot process takes about 1 minute.

The 'Password' submenu

When logging in via WEB interface administrator (default password: password) has the full access to the device: read/write any settings, full device status monitoring.
To change the password, enter the new password first in the 'Password' field, then in the 'Confirm Password' field and click the 'Apply' button to save the new password.

The 'Log' submenu

The 'Log' submenu is designed to configure the output of various kinds of debugging messages of the system in order to detect the causes of problems in the operation of the device. 

...

• Mode – Syslog agent operation mode:
  • Local File – log information is stored in a local file and is available in the device’s WEB interface on the 'Monitoring/Events' tab;
  • Server and File – log information is sent to a remote Syslog server and stored in a local file.
• Syslog Server Address – IP address or domain name of the Syslog server;
• Syslog Server Port – port for incoming Syslog server messages (default: 514, valid values: from 1 to 65535);
• File Size, KiB – maximum size of the log file (valid values: 1-1000 kB).

The 'Date and Time' submenu

In the 'Date and Time' submenu, you can set the time manually or using the time synchronization protocol (NTP).
Manual

...

To apply a new configuration and store settings into the non-volatile memory, click the 'Apply' button. To discard changes click the 'Cancel' button.

Managing the device using the command line

Connection to the device

By default, WEP-1L is configured to receive the address via DHCP. If this does not happen, you can connect to the device using the factory IP address.

...

Network parameters configuration

...

Management VLAN configuration

The access point supports multiple VLAN control modes:

...

Virtual Wi-Fi access points (VAP) configuration

When configuring a VAP, remember that the interface names in the 2.4 GHz range start with wlan0, in the 5 GHz range with wlan1.

...

Below are examples of VAP configuration with different security modes for Radio 5 GHz (wlan1).

Configuration of VAP without encryption

Configuration of VAP with WPA-Personal security mode

Configuration of VAP with Enterprise authorization

Configuration of VAP with Captive Portal

Advanced VAP settings:

...

Radio configuration

In the Radio section, automatic selection of the working channel is used by default. To set the channel manually and change the power, use the following commands:

Advanced Radio settings:

...

The configuration method of edca-sta is the same as that of edca-ap.
Parameters configuration for queues be, vi, vo is similar to parameters configuration for queue bk.

System settings

Device firmware update

...

Device configuration management

...

Device reboot

Setting the date and time

The WEP-1L Access Point supports setting the date and time both manually and by synchronizing with the NTP server.

...

Monitoring

Wi-Fi Clients

  index                    | 0
 interface                | wlan0-va0
 hw-addr                  | e4:0e:ee:be:ee:9b
 ip-addr                  | 192.168.1.122
 hostname                 | HUAWEI_P20
 rx-retry-count           | 82
 tx-fails                 | 0
 tx-period-retry          | 30
 tx-retry-count           | 33
 rssi-1                   | -56
 rssi-2                   | -48
 snr-1                    | 20
 snr-2                    | 17
 tx-rate                  | MCS10 NO SGI 39
 rx-rate                  | MCS15 NO SGI 130
 rx-bw                    | 20M
 rx-bw-all                | 20M
 tx-bw                    | 20M
 uptime                   | 00:14:36
 multicast-groups-count   | 0
 link-capacity            | 15
 link-quality             | 85
 link-quality-common      | 85
 actual-tx-rate           | 36
 actual-rx-rate           | 15
 name                     | 0

 Rate                  Transmitted            Received                 
---------------------------------------------------------------------
 Total Packets:       | 111                  | 258                  |
 TX success:          | 100                  |                      |
 Total Bytes:         | 50400                | 27746                |
 Data Packets:        | 107                  | 147                  |
 Data Bytes:          | 47380                | 21029                |
 Mgmt Packets:        | 4                    | 111                  |
 Mgmt Bytes:          | 238                  | 181                  |
---------------------------------------------------------------------

 Rate       Transmitted        Received    
--------------------------------------------------
 dsss1     | 4          |   3%|         42 |  16%|
 ofdm6     | 0          |   0%|          6 |   2%|
 ofdm24    | 0          |   0%|         65 |  25%|
 mcs1      | 38         |  34%|          0 |   0%|
 mcs7      | 2          |   1%|          0 |   0%|
 mcs8      | 41         |  36%|          0 |   0%|
 mcs9      | 2          |   1%|          0 |   0%|
 mcs10     | 11         |   9%|          1 |   0%|
 mcs11     | 12         |  10%|         13 |   5%|
 mcs12     | 0          |   0%|         19 |   7%|
 mcs14     | 0          |   0%|         71 |  27%|
 mcs15     | 1          |   0%|         40 |  15%|
--------------------------------------------------


Multicast groups:
 MAC                IP           
-------------------------------------
-------------------------------------

Device info

   system-time: 10:23:52 23.01.2020
   uptime: 01:08:52
   software-version: 1.0.1.43
   secondary-software-version:
   boot-version: 1.0.1.43
   memory-usage: 60
   memory-free: 44
   memory-used: 67
   memory-total: 111
   cpu: 4.03
   board-type: WEP-1L
   hw-platform: WEP-1L
   factory-wan-mac: e8:28:c1:xx:xx:xx
   factory-lan-mac: e8:28:c1:xx:xx:xx
   factory-serial-number: 
   hw-revision: 1v2

Network information

   interface: br0
   protocol: dhcp
   ip-address: 192.168.1.15
   mac: e8:28:c1:xx:xx:xx
   mask: 255.255.255.0
   gateway: 192.168.1.1
   DNS-1: 192.168.1.100
   DNS-2: 
   rx-bytes: 4864149
   rx-packets: 13751
   tx-bytes: 2462399
   tx-packets: 20753

   link: up
   speed: 1000
   duplex: enabled
   rx-bytes: 4872597
   rx-packets: 13844
   tx-bytes: 2477091
   tx-packets: 20923

#        ip                mac              
--------------------------------------------
0        192.168.1.1       02:00:48:xx:xx:xx
1        192.168.1.151     2c:fd:a1:xx:xx:xx

Destination       Gateway           Mask              Flags      Interface 
--------------------------------------------------------------------------
0.0.0.0           192.168.1.1      0.0.0.0            UG         br0       
192.168.1.0       0.0.0.0          255.255.255.0      U          br0  

Wireless interfaces

   status: on
   channel: 1
   thermal: 31
   bandwidth: 20
   frequency: 2412
   noise-1: -100
   noise-2: -100

   status: off
   thermal: 31
   channel: 44
   bandwidth: 20
   frequency: 5220

Event logging

Jan  23 00:00:07 WEP-1L daemon.info syslogd[925]: started: BusyBox v1.21.1

Jan  23 00:00:09 WEP-1L daemon.info configd[955]: The AP startup configuration was loaded successfully.

Jan  1 03:00:14 WEP-1L daemon.info networkd[987]: Networkd started

Jan  1 03:01:17 WEP-1L daemon.info networkd[987]: DHCP-client: Interface br0 obtained lease on 192.168.1.15.

Jan 23 07:17:14 WEP-1L daemon.info monitord[1055]: event: 'associated' mac: E4:0E:EE:BD:AE:6B ssid: 'WEP-1L_2.4GHz' int0

Spectrum Analyzer

The spectrum analyzer provides information on channel utilization in the 2.4 and 5 GHz bands. The result is displayed as a percentage.

...