Wireless access point WEP-2L
User manual,
Firmware version 1.2.2 (01.2022)

IP address: http://192.168.1.10
User name: admin
Password: password



|| DeviceType | Wireless access point |
|| DeviceName | WEP-2L |
|| DocTitleMain |  |
|| DocTitleAdditional | User manual |
|| fwversion | 1.2.2 |
|| issueDate | 01.2022 |
|| ipaddr | 192.168.1.10 |
|| username | admin |
|| password | password |



Introduction

Annotation

Modern tendencies of telecommunication development necessitate operators to search for the most optimal technologies, allowing you to satisfy rapidly growing needs of subscribers, maintaining at the same time consistency of business processes, development flexibility and reduction of costs of various services provision. Wireless technologies are spinning up more and more and have paced a huge way for short time from unstable low-speed communication networks of low radius to broadband networks equitable to speed of wired networks with high criteria to the quality of provided services.

WEP-2L is dedicated to be installed inside buildings as an access point and to create a seamless wireless network using several identical access points (“Roaming”) on a large area.

This manual specifies intended purpose, main technical parameters, design, safe operation rules and installation and configuration recommendations for WEP-2L.

Symbols

Notes contain important information, tips or recommendations on device operation and setup.

Notes and warnings

Warnings are used to inform the user about harmful situations for the device and the user alike, which could cause malfunction or data loss.

Device description

Purpose

WEP-2L wireless access point is designed for provision of users' access to high-speed safe network.

The device is dedicated to create L2 wireless networks interfacing with a wired network. WEP-2L is connected to a wired network via 10/100/1000M Ethernet interface and arrange high-speed access to the Internet for devices supporting Wi-Fi technology at 2.4 and 5 GHz.

The device has two radio interfaces to organize two physical wireless networks.

WEP-2L supports up-to-date requirements to service quality and allows transmitting more important traffic in higher priorities queues. Prioritization is based on main QoS technologies: CoS (special tags in VLAN packet field) and ToS (tags in IP packet field).

ACL rule creation functionality and support for traffic shaping on each VAP allows you to fully manage access, service quality and restrictions, both for all subscribers and for everyone in particular.

The devices are designed to be installed in offices, state buildings, conference halls, laboratories, hotels, etc. The creation of virtual access points with different types of encryption allows clients to delimit access rights among users and groups of users.

Device specification

Interfaces:

Functions:

WLAN capabilities:

Network functions:

QoS functions

Security

The figure below shows WEP-2L application scheme.

Figure 1 — WEP-2L application scheme

The device technical parameters

Table 1 — Main Specifications

WAN Ethernet interface parameters
Number of ports1
Electrical connectorRJ-45
Data rate, Mbps10/100/1000, auto-negotiation
StandardsBASE-T
Wireless interface parameters
Standards802.11a/b/g/n/ac
Frequency range, MHz2400–2483,5 MHz, 5150–5850 MHz
ModulationDSSS, CCK, BPSK, QPSK, 16QAM, 64QAM, 256QAM
Operating channels

802.11b/g/n: 1–13 (2402–2482 MHz)

802.11a/n/ac:

  • 36–64 (5170–5320 MHz)
  • 100–144 (5490–5720 MHz)
  • 149-165 (5745–5835 MHz)
Data rate, Mbps

802.11a: up to 54 Mbps
802.11b: up to 11 Mbps
802.11g: up to 54 Mbps
802.11n: up to 300 Mbps
802.11ac: up to 867 Mbps

Built-in antenna gain2.4 GHz: ~5 dBi
5 GHz: ~5 dBi
Maximum output power of the transmitter2.4 GHz: up to 20 dBm
5 GHz: up to 20 dBm
Receiver sensitivity2.4 GHz: up to -94 dBm
5 GHz: up to -94 dBm
SecurityCentralized authorization via RADIUS server (WPA Enterprise)
WPA/WPA2 data encryption
Captive Portal
Support for 2x2 MIMO
Control
Remote controlWeb interface, Telnet, SSH, CLI, SNMP, NETCONF, EMS management system
Access restrictionby password
General parameters
Flash32 MB NAND Flash
RAM128 MB RAM DDR3
Power supplyPoE+ 48V/56V (IEEE 802.3at-2009).
Maximum power consumption9 W
Range of operation temperaturesfrom +5 to +40°C
Relative humidity at 25°Cup to 80%
Dimensions (Diameter x Height)200x40 mm
Weight0.4 kg

Design

WEP-2L enclosed in plastic case.

Device main panel

The main panel layout of the device is depicted in Figure 2.


 

Figure 2 — WEP-2L main panel layout

Connectors and controls located on the device main panel are listed in Table 2.

Table 2 — Description of ports and controls

Main panel elementDescription
1LANGE (PoE) port status light indication
2GE (PoE)GE port for PoE+ power supply connection
3FButton for reseting to factory settings
4Wi-FiOperation indicators of corresponding Wi-Fi modules

Light indication

The current device state is displayed by Wi-Fi, LAN, Power indicators. The list of indicators’ possible states is given below.

Table 3 — Light indication of device state

LEDLED statusDevice state
Wi-Fi  solid greenthe Wi-Fi network is active
flashing greenthe process of data transmission trough a wireless network
LAN  solid green (10, 100 Mbps)/ solid orange (1000 Mbps)the link with the connected network device is established
flashing greenthe process of packet data transmission through LAN interface
Power
(on the device top panel)
solid greenthe device power on, normal operation
solid orangethe device is loaded but IP address is not received via DHCP
solid redthe device is loading

Reset to the default settings

In order to reset the device to factory settings, press and hold the “F” button until “Power” indicator starts flashing. Device will be rebooted automatically. DHCP client will be launched by default. If the address is not obtained via DHCP, the device will have the default IP address — 192.168.1.10, and the following netmask — 255.255.255.0.

Delivery package

The delivery package includes:

Rules and recommendations for device installation

This section defines safety rules, installation recommendations, setup procedure and the device starting procedure.

Safety rules

  1. Do not install the device close to heat sources or in rooms with temperature below 5 °C or above 40 °C.
  2. Do not use the device in places with high humidity. Do not expose the device to smoke, dust, water, mechanical vibrations or shocks.
  3. Do not open the device case. There are no user serviceable parts inside.

Do not cover ventilation holes and do not put other objects on the device in order to prevent overheating of device components.

Installation recommendations

  1. The recommended installation: Horizontal, on a ceiling.
  2. Before you install and enable device, check the device for visible mechanical defects. If defects are observed, you should stop the device installation, draw up corresponding act and contact the supplier.
  3. If the device has been exposed for a long time at a low temperature, it must be left to stand for two hours at room temperature before use. After a long stay of the device in conditions of high humidity, let it stand under normal conditions for at least 12 hours before switching on.
  4. During the device installation to provide Wi-Fi coverage area with the best characteristics take into account the following rules:
    1. Install the device at the center of a wireless network;
    2. Minimize the number of obstacles (walls, roof, furniture and etc.) between access point and other wireless network devices;
    3. Do not install the device near (about 2 m) electrical and radio devices;
    4. It is not recommended to use radiophone and other equipment operating on the frequency of 2.4 GHz, 5 GHz in Wi-Fi effective radius;
    5. Obstacles in the form of glass/metal constructions, brick/concrete walls, water cans and mirrors can significantly reduce Wi-Fi action radius. It is not recommended to place the device inside a false ceiling as metal frame causes multipath signal propagation and signal attenuation.
  5. During the installation of several access points, cell action radius must overlap with action radius of a neighboring cell at level of -65 ÷ -70 dBm. Decreasing of the signal level on cells borders to -75 dBm is permitted if it involves the use of VoIP, streaming video and other traffic that is sensitive to losses in wireless network.

Calculating the number of required access points

To calculate the required number of access points, you should evaluate the required coverage zone. For a more accurate assessment, it is necessary to make a radio examination of the room. Approximate radius of coverage area of WEP-2L with a good-quality signal in case of mounting on a ceiling in typical office: 2.4 GHz 40-50 m, 5 GHz: 20-30 m. In the absence of obstacles, the coverage radius: 2.4 GHz up to 100 m; 5 GHz up to 60 m.
The table below describes rough attenuation values.

Table 4 — Attenuation values

Material  Change of signal level, dB
2.4 GHz5 GHz
Organic glass-0,3-0,9
Brick-4,5-14,6
Glass-0,5-1,7
Plaster slab-0,5-0,8
Wood laminated plastic-1,6-1,9
Plywood-1,9-1,8
Plaster with wirecloth-14,8-13,2
Breezeblock-7-11
Metal lattice (mesh 13*6 mm, metal 2 mm)-21-13

Channel selection for neighboring access points

It is recommended to set nonoverlapping channels to avoid interchannel interference among neighboring access points.


 
Figure 3 — General diagram of frequency channel closure in the range of 2.4 GHz


For the example of channel allocation scheme among neighboring access points in frequency range of 2.4 GHz when channel width is 20 MHz, see Figure 4.



Figure 4 — Scheme of channel allocation among neighboring access points in the frequency range of 2.4 GHz when channel width is 20 MHz


Similarly, the procedure of channel allocation is recommended to save for access point allocation between floors, see Figure 5.



Figure 5 — Scheme of channel allocation between neighboring access points that are located between floors


When width of used channel is 40 MHz there is no non-overlapping channels in frequency range of 2.4 GHz. In such cases, you should select channels maximally separated from each other.



Figure 6 — Channels used in range of 5 GHz when channel width is 20, 40 or 80 MHz

Installing WEP-2L

The device should be attached to plain surface (wall or ceiling) in accordance with the safety instruction and recommendations listed above.
The device delivery package includes required mounting kit to attach the device to plain surface.

Wall mounting

1. Fix the bracket (included in the delivery package) to the wall:


Figure 7 — Attaching the bracket to a wall

    1. The figure shows the bracket allocation.
    2. When installing the bracket, pass wires through the corresponding channels of the bracket, see figure 7.
    3. Pass the wires into the corresponding grooves on the bracket while installing the bracket. Screw the brackets to the device surface by using screwdrive.

2. Install the device



 
Figure 8 — Device installation (front view)

    1. Connect cables to corresponding connector of the device. Description of the connectors is given in section 2.4 Design.
    2. Align the device and bracket together, fix the position, turning clockwise.

Installing to false ceiling

It is not recommended to place the device inside a false ceiling as metal frame causes multipath signal propagation and signal attenuation.



1 — metal bracket; 2 — armstrong panel; 3 — plastic bracket; 4 — device.

Figure 9 — Mounting to a false ceiling

  1. Fasten metal and plastic bracket on a ceiling as shown in the figure 9.
    1. The plastic bracket (3) should be joined with the metal one (1) on the ceiling in the following order: metal bracket -> armstrong panel -> plastic bracket.
    2. Cut the hole in the armstrong panel. The size of the hole should be equal to hole of metal bracket. Conduct wires through the hole.
    3. Align holes in metal bracket with holes of armstrong panel and plastic bracket. Align together three boltholes on the plastic bracket and the boltholes on the metal bracket. Screw the brackets to the device surface by using a screwdrive.
  2. Install the device.
    1. Connect cables to corresponding connector of the device. Description of the connectors is given in section 2.4 Design.
    2. Align the device and plastic bracket together, fix the position, turning clockwise.

Removing the device from the bracket

For removing the device from the bracket:

  1. Turn the device counter-clockwise, figure 7.
  2. Remove the device.

Device management via the web interface

Getting started

In order to start the operation, you should connect to the device via WAN interface using a web browser:

1. Open a web browser, for example, Firefox, Opera, Chrome.

2. Enter the device IP address in the browser address bar.

IP address by default: 192.168.1.10, subnet mask: 255.255.255.0. The device is capable to obtain an IP address via DHCP.


When the device is successfully detected, username and password request page will be shown in the browser window

3. Enter your username into “Login” and password into “Password” field.

Factory settings: login: admin, password: password.

4. Click the “Log in” button. A menu for monitoring the status of the device will open in a browser window.

5. If necessary, you can switch the information display language. Russian and English languages are available for web interface.


Applying configuration and discarding changes

  1. Applying configuration

Clicking on the  button starts the process of saving the configuration to the device flash memory and applying the new settings. All the settings come into operation without device rebooting.

Visual indication of the process current status of the setting application process is realised in the web interface, table 7.

Table 7 — Visual indication of the current status of the setting application process

ImageState description

After pressing “Apply”, the process of settings saving to device memory is launched. This is indicated by the  icon in the tab name and on the Apply button.

Successful settings saving and application are indicated by  icon in the tab name.

2. Discarding changes

You can discard changes only before pressing “Apply” button. If you press “Apply” button, all the changed parameters will be applyed and saved to device memory. You will not be able to return to previous configuration after pressing “Apply”.

The button for discarding changes appears as follows: image2019-10-11_10-55-37.png.

Web interface basic elements

Navigation elements of the web interface are shown on the figure below


User interface window is divided into five general areas:

  1. Menu tabs categorize the submenu tabs: Monitoring, Radio, VAP, Network settings, External Services, System.
  2. Interface language selection and Logout button designed to to end a session in the web interface under a given user.
  3. Submenu tabs allow you to control settings field.
  4. Devcie configuration field displays data and configuration.
  5. Information field displays current firmware version.

The “Monitoring” menu

In the “Monitoring” menu you can view the current system state.

The “Wi-Fi clients” submenu

The “Wi-Fi clients” submenu displays information about the status of connected Wi-Fi clients.

Information on connected clients is not displayed in real time. In order to update the information on the page you should click the “Update” button.

 

To display more detailed information on a particular client, select it from the list. A detailed description includes the following options: 

The "WDS" submenu

The WDS submenu displays information about the status of WEP-2L access points connected via WDS.

To display more detailed information on a particular client, select it from the list. A detailed description includes the following options: 

The “Traffic Statistics” submenu

The “Traffic Statistics” section displays the diagrams of the speed of the transmitted/received traffic for last 3 minutes, as well as statistics on the amount of transmitted/received traffic since the access point was turned on.


The LAN Tx/Rx diagram shows the speed of the transmitted/received traffic via the access point's Ethernet interface in the last 3 minutes. The diagram is automatically updated every 6 seconds.

The WLAN0 and WLAN1 Tx/Rx diagrams show the last 3 minutes rate of transmitted/received traffic via Radio 2,4 GHz and Radio 5 GHz access point interfaces. The diagram is automatically updated every 6 seconds.

“Transmit” table description:


“Receive” table description:

The “Scan Environment” submenu

In the “Scan Environment” submenu, scanning of the surrounding radio is carried out and detection of neighboring access points.


After clicking on the “Scan” button, the process will be launched. After the scan is completed, a list of detected access points and information about them will appear:

Please note that during the environment scan, the device’s radio interface will be disabled, which will make it impossible to transfer data to Wi-Fi clients during the scan.

The “Events” submenu

In this section, you can view a list of real-time informational messages which contains the following information:


Table 7 — event importance categories description

LevelMessage importance levelDescritpion
0
Emergency
A critical error has occurred in the system, the system may not work properly.
1
Alert
Immediate intervention is required.
2
Critical
A critical error has occurred on the system.
3
Error
An error has occurred on the system.
4
Warning
Warning, non-emergency message.
5
Notice
System notice, non-emergency message.
6
Informational
Informational system messages.
7
Debug
Debugging messages provide the user with information to correctly configure the system.

To receive new messages in the event log, click the “Update” button.

If necessary, you can delete all old messages from the log by clicking on the “Clear” button.

The “Network Information” submenu

In the “Network Information” submenu you can view common network settings of the device.


WAN Status:

Ethernet:

ARP
The ARP table contains information about the alignment between the IP and MAC addresses of neighboring network devices:

Routes:

The “Radio Information” submenu

In the  “Radio Information”  submenu the current status of WEP-2L radio interfaces is displayed.


The access point radio interfaces can be in two states: “On” and “Off”. The status of each radio interface is shown in the “Status” field.

The Radio status depends on whether the radio interface has virtual access points (VAPs) or WDS enabled. In case there is at least one active VAP on the radio interface, Radio will be in “On” status, otherwise — “Off”.

Depending on the Radio status, the following information is available for monitoring:

“Off”:

“On”:

The “Device Information” submenu

The “Device Information” submenu displays main WEP-2L parameters.

The “Radio” menu

In the “Radio” menu you can configure the wireless interface.

The “Radio 2.4 GHz” submenu

In the “Radio 2.4 GHz” submenu you can configure the main parameters of the radio interface of the device operating in the 2.4 GHz band.

 

If the “Use Limit Channels” list contains a channel that is not available for selection, it will be marked in grey. In order for the new configuration to be applied to an access point, only available (blue highlighted) channels must be specified in the “Use Limit Channels” list.

Example. No settings have been made on the access point yet, Radio 2.4 GHz is set to 20 MHz “Channel Bandwidth” by default, and channels are specified in the “Use Limit Channels” list: 1, 6, 11.
Suppose the parameter “Channel Bandwidth” is set to 40 MHz. When you change this parameter from 20 MHz to 40 MHz, the following happens:

  • the “Primary channel” parameter becomes available for editing and the default value is “Lower”;
  • Channel 11 in the “Use Limit Channels” list changes its color from blue to gray.

If you change the “Channel Bandwidth” parameter to 40 MHz and do not remove the “grey” channels from the list, then when you click on the “Apply” button in the browser an error will appear — “There are errors in data. Changes was not applied”. Accordingly, the access point configuration will not be changed. This is due to the fact that channels in the “Use Limit Channels” list that are highlighted in grey do not fit the definition “Primary channel” = Lower.

In the “Advanced” section, you can configure advanced device’s radio interface parameters.

The following functions are available for quality assurance configuration:

To apply a new configuration and save setting to non-volatile memory, press “Apply”. Press “Cancel” to discard the changes.

The “Radio 5 GHz” submenu

In the “Radio 5 GHz” submenu you can configure the main parameters of the radio interface of the device operating in the 5 GHz band.


If the “Use Limit Channels” list contains a channel that is not available for selection, it will be marked in grey. In order for the new configuration to be applied to an access point, only available (blue highlighted) channels must be specified in the “Use Limit Channels” list.

Example. No settings have been made on the access point yet, Radio 5 GHz is set to 20 MHz “Channel Bandwidth” by default, and channels are specified in the “Use Limit Channels” list: 36, 40, 44, 48.
Suppose the parameter “Channel Bandwidth” is set to 40 MHz. When you change this parameter from 20 MHz to 40 MHz, the following happens:

  • the “Primary channel” parameter becomes available for editing and the default value is “Upper”;
  • channels 36 and 44 in the “Use Limit Channels” list changes its color from blue to gray.

If you change the “Channel Bandwidth” parameter to 40 MHz and do not remove the “grey” channels from the list, then when you click on the “Apply” button in the browser an error will appear — “There are errors in data. Changes was not applied”. Accordingly, the access point configuration will not be changed. This is due to the fact that channels in the “Use Limit Channels” list that are highlighted in grey do not fit the definition “Primary channel” = Upper.


In the “Advanced” section, you can configure advanced device’s radio interface parameters.

The following functions are available for quality assurance configuration:

To apply a new configuration and save setting to non-volatile memory, press “Apply”. Press “Cancel” to discard the changes.

The “Advanced” submenu

In the “Advanced” section, you can configure advanced device’s radio interface parameters.


To apply a new configuration and save setting to non-volatile memory, press “Apply”. Press “Cancel” to discard the changes.

The “VAP” menu

In the “VAP” menu, you can configure virtual Wi-Fi access points (VAP).

The “Summary” submenu

The “Summary” submenu displays the settings of all VAPs on Radio 2.4 GHz and Radio 5 GHz radio interfaces. You can see the settings of each virtual access point in sections VAP0..3.


To apply a new configuration and save setting to non-volatile memory, press “Apply”. Press “Cancel” to discard the changes.

The “VAP” submenu



Common settings

Captive Portal

Under security modes: Off, WPA, WPA2, WPA/WPA2 a portal authorization setting is available on the VAP.

RADIUS

Shapers

To apply a new configuration and save setting to non-volatile memory, press “Apply”. Press “Cancel” to discard the changes.

The “WDS” menu

In the WDS menu you can configure wireless bridges between WEP-2L.

When configuring WDS connection, it is necessary that the same channel and channel width are selected in the radio interface settings on the devices that will connect via WDS.

The “WDS” submenu

In the "2.4 GHz" and "5 GHz" tabs you can select the radio interface of the device on which you want to build a wireless bridge.

To apply a new configuration and save setting to non-volatile memory, click “Apply”. Click “Cancel” to discard the changes.

The “Network Settings” menu

The “System Configuration” submenu


To apply a new configuration and save setting to non-volatile memory, press “Apply”. Press “Cancel” to discard the changes.

The “Access” submenu

In the “Access” submenu, you can configure access to the device via the Web interface, Telnet, SSH, NETCONF and SNMP.


WEP-2L software allows monitoring status of the device and it's sensors via SNMP. In the SNMP submenu, you can configure settings of SNMP agent. The device supports SNMPv1 and SNMPv2 protocol version.

To change the SNMP settings, check the box next to “SNMP”, apply the configuration and then go to the SNMP submenu.

The list of objects which are supported for reading and configuration via SNMP is given below:

where eltexLtd — 1.3.6.1.4.1.35265 is Eltex Enterprise ID.

To apply a new configuration and save setting to non-volatile memory, press “Apply”. Press “Cancel” to discard the changes.

The “External Services” menu

The “Captive Portal” submenu

The “Captive Portal” submenu is designed to enable and configure the APB service at the access point.

The APB service is used to provide portal roaming of clients between access points connected to the service.


To apply a new configuration and save setting to non-volatile memory, click “Apply”. Click “Cancel” to discard the changes.

The “System” menu

In the “System” menu you can configure system, time, device access via different protocols, change password and update device firmware.

The “Device Firmware Upgrade” submenu

The “Device Firmware Upgrade” submenu is intended for upgrading the device's firmware.


Firmware update

Download the firmware file from http://eltex-co.com/support/downloads/ and save it on your computer. To do this, click the “Browse” button in the Firmware Image field and specify the path to the firmware file in .tar.gz format.
To start the update process, you must click the “Start Upgrading” button. The process may take several minutes (its current status will be shown on the page). The device will be automatically rebooted when the update is completed.


Do not switch off or reboot the device during the firmware update.

The “Configuration” submenu

In the “Configuration” submenu you can save and update current configuration.


Backup Configuration

To save current device configuration to local computer click on the “Download” button.

Restore Configuration

To download the configuration file saved on the local computer, use the Restore Configuration item. To update the device configuration click the “Browse” button, specify a file (in .tar.gz format) and click the “Upload” button. Uploaded configuration will be applied automatically and does not require device reboot.

To change the passwords open the configuration file in text editor and change passwords. Then save the changes in configuration archive. The example of password changing is shown below:

Reset to Default Configuration

To reset all the settings to default values, press “Reset” button. If the flag “Save access setting” is activated, then those settings, configurations that are responsible for access to the device (IP address settings, Telnet/SSH/SNMP/Netconf/Web access settings) will be saved

The “Reboot” submenu

To reboot the device, click on the “Reboot” button. The device reboot process takes about 1 minute.


The “Password” submenu

When logging in via web interface administrator (default password: password) has the full access to the device: read/write any settings, full device status monitoring.
To change the password, enter the new password first in the “Password” field, then in the “Confirm Password” field and click the “Apply” button to save the new password.


The “Log” submenu

The “Log” submenu is designed to configure the output of various kinds of debugging messages of the system in order to detect the causes of problems in the operation of the device. 


To apply a new configuration and save setting to non-volatile memory, click “Apply”. Click “Cancel” to discard the changes.

The “Date and Time” submenu

In the “Date and Time” submenu, you can set the time manually or using the time synchronization protocol (NTP).
Manual

 

NTP Server

 

To apply a new configuration and store settings into the non-volatile memory, click the “Apply” button. To discard changes click the “Cancel” button.

Managing the device using the command line


To display the existing settings of a particular configuration section, enter the show-config command.

Press the key combination (English layout) — [Shift + ? ] to get a hint of what value this or that configuration parameter can take.

To get a list of options available for editing in this configuration section, press the Tab key.

To save the settings, enter the save command.

To go back to the previous configuration section, enter the exit command.

Connection to the device

By default, WEP-2L is configured to receive the address via DHCP. If this does not happen, you can connect to the device using the factory IP address.

WEP-2L factory default IP address: 192.168.1.10, subnet mask: 255.255.255.0.

Connection to the device is performed via SSH/Telnet:

ssh admin@<IP address of the device>, then enter the password

telnet <IP address of the device>, enter login and password

Network parameters configuration

WEP-2L(root):/# configure
WEP-2L(config):/# interface
WEP-2L(config):/interface# br0
WEP-2L(config):/interface/br0# common
WEP-2L(config):/interface/br0/common# static-ip X.X.X.X (where X.X.X.X — WEP-2L IP address)
WEP-2L(config):/interface/br0/common# netmask X.X.X.X (where X.X.X.X — Subnet mask)
WEP-2L(config):/interface/br0/common# dns-server-1 X.X.X.X (where X.X.X.X — IP address of the dns server №1)
WEP-2L(config):/interface/br0/common# dns-server-2 X.X.X.X (where X.X.X.X — IP address of the dns server №2)
WEP-2L(config):/interface/br0/common# protocol static-ip (Change operation mode from DHCP to Static-IP)
WEP-2L(config):/interface/br0/common# save (Save configuration)

Static routing

WEP-2L(config):/interface/br0/common# exit
WEP-2L(config):/interface/br0# exit
WEP-2L(config):/interface# exit
WEP-2L(config):/# route
WEP-2L(config):/route# add default (where default — route name)
WEP-2L(config):/route# default
WEP-2L(config):/route/default# destination X.X.X.X (where X.X.X.X — IP address of the network ordestination node, for default route — 0.0.0.0)
WEP-2L(config):/route/default# netmask X.X.X.X (where X.X.X.X — destination network mask, for default route — 0.0.0.0)
WEP-2L(config):/route/default# gateway X.X.X.X (where X.X.X.X — gateway IP address)
WEP-2L(config):/route/default# save (Save changes)


WEP-2L(root):/# configure
WEP-2L(config):/# interface
WEP-2L(config):/interface# br0
WEP-2L(config):/interface/br0# common
WEP-2L(config):/interface/br0/common# protocol dhcp
WEP-2L(config):/interface/br0/common# save (Save changes)

Network parameters configuration via set-management-vlan-mode utility

Reception of the network parameters via DHCP:

WEP-2L(root):/# set-management-vlan-mode off protocol dhcp

Static settings:

WEP-2L(root):/# set-management-vlan-mode off protocol static-ip ip-addr X.X.X.X netmask Y.Y.Y.Y gateway Z.Z.Z.Z (where X.X.X.X — static IP address, Y.Y.Y.Y — subnet mask, Z.Z.Z.Z — gateway)


Reception of the network parameters via DHCP:

WEP-2L(root):/# set-management-vlan-mode terminating vlan-id X protocol dhcp  (where X — VLAN ID used for access to the device. Possible values: 1-4094)

Static settings:

WEP-2L(root):/# set-management-vlan-mode terminating vlan-id X protocol static-ip ip-addr X.X.X.X netmask Y.Y.Y.Y gateway Z.Z.Z.Z  (where X — VLAN ID used for access to the device. Possible values: 1-4094;  X.X.X.X — static IP address, Y.Y.Y.Y — subnet mask, Z.Z.Z.Z — gateway)


Reception of the network parameters via DHCP:

WEP-2L(root):/# set-management-vlan-mode forwarding vlan-id X protocol dhcp  (where X — VLAN ID used for access to the device. Possible values:: 1-4094)

Static settings:

WEP-2L(root):/#  set-management-vlan-mode forwarding vlan-id X protocol static-ip ip-addr X.X.X.X netmask Y.Y.Y.Y gateway Z.Z.Z.Z  (where X — VLAN ID used for access to the device. Possible values: 1-4094;  X.X.X.X — static IP address, Y.Y.Y.Y — subnet mask, Z.Z.Z.Z — gateway)


WEP-2L(root):/# save (Save changes)

IPv6 network parameters configuration

Access to the device via IPv6 protocol is disabled by default.

Access to the device via IPv6 protocol is possible to configure only if VLAN management is not used on the access point.


WEP-2L(root):/# configure
WEP-2L(config):/# interface
WEP-2L(config):/interface# br0
WEP-2L(config):/interface/br0# common
WEP-2L(config):/interface/br0/common# ipv6
WEP-2L(config):/interface/br0/common/ipv6# protocol dhcp (Reception of the IPv6 network parameters via DHCP)
WEP-2L(config):/interface/br0/common/ipv6# enabled true (Enabling access to the device via IPv6 protocol. To disable, enter false)
WEP-2L(config):/interface/br0/common/ipv6# save (Save changes)


WEP-2L(root):/# configure
WEP-2L(config):/# interface
WEP-2L(config):/interface# br0
WEP-2L(config):/interface/br0# common
WEP-2L(config):/interface/br0/common# ipv6
WEP-2L(config):/interface/br0/common/ipv6# address XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX (where XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX — static IPv6 address of the WEP-2L device)
WEP-2L(config):/interface/br0/common/ipv6# address-prefix-length X (where X — static IPv6 address prefix. Takes values from 0 to 128. By default — 64)
WEP-2L(config):/interface/br0/common/ipv6# gateway  XXXX:XXXX:XXXX:XXXX::/64 (IPv6 prefix is specified, for example 3211:0:0:1234::/64)
WEP-2L(config):/interface/br0/common/ipv6# dns-server-1 XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX/Y (where XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX/Y — IPv6 address of the dns server №1 with prefix)
WEP-2L(config):/interface/br0/common/ipv6# dns-server-2 XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX/Y (where XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX/Y — IPv6 address of the dns server №2 with prefix)
WEP-2L(config):/interface/br0/common/ipv6# protocol static-ip (Enabling use of static IPv6 networks parameters. For reception of IPv6 the network parameters via DHCP enter dhcp)
WEP-2L(config):/interface/br0/common/ipv6# enabled true (Enabling access to the device via IPv6 protocol. To disable enter false)
WEP-2L(config):/interface/br0/common/ipv6# save (Save changes)

Virtual Wi-Fi access points (VAP) configuration

When configuring a VAP, remember that the interface names in the 2.4 GHz range start with wlan0, in the 5 GHz range with wlan1.

Table 8 — Commands for configuration of security mode on VAP

Security modeCommand to set the security mode
Without passwordsecurity-mode off
WPAsecurity-mode WPA
WPA2security-mode WPA2
WPA/WPA2security-mode WPA_WPA2
WPA-Enterprisesecurity-mode WPA_1X
WPA2-Enterprisesecurity-mode WPA2_1X
WPA/WPA2-Enterprisesecurity-mode WPA_WPA2_1X

Below are examples of VAP configuration with different security modes for Radio 5 GHz (wlan1).

Configuration of VAP without encryption

WEP-2L(root):/# configure
WEP-2L(config):/# interface
WEP-2L(config):/interface# wlan1-va0
WEP-2L(config):/interface/wlan1-va0# vap
WEP-2L(config):/interface/wlan1-va0/vap# ssid 'SSID_WEP-2L_open' (Change SSID name)
WEP-2L(config):/interface/wlan1-va0/vap# security-mode off (Encryption mode off — Without password)
WEP-2L(config):/interface/wlan1-va0/common# exit
WEP-2L(config):/interface/wlan1-va0# common
WEP-2L(config):/interface/wlan1-va0/common# enabled true (Enable VAP)
WEP-2L(config):/interface/wlan1-va0/vap# save (Save changes)

Configuration of VAP with WPA-Personal security mode

WEP-2L(root):/# configure
WEP-2L(config):/# interface
WEP-2L(config):/interface# wlan1-va0
WEP-2L(config):/interface/wlan1-va0# common
WEP-2L(config):/interface/wlan1-va0/common# enabled true (Enable VAP)
WEP-2L(config):/interface/wlan1-va0/common# exit
WEP-2L(config):/interface/wlan1-va0# vap
WEP-2L(config):/interface/wlan1-va0/vap# ssid 'SSID_WEP-2L_Wpa2' (Change SSID name)
WEP-2L(config):/interface/wlan1-va0/vap# security-mode WPA_WPA2 (Encryption mode — WPA/WPA2)
WEP-2L(config):/interface/wlan1-va0/vap# key-wpa password123 (Key/password required to connect to the virtual access point. The key must be between 8 and 63 characters long.)
WEP-2L(config):/interface/wlan1-va0/vap# save

Configuration of VAP with Enterprise authorization

WEP-2L(root):/# configure
WEP-2L(config):/# interface
WEP-2L(config):/interface# wlan1-va0
WEP-2L(config):/interface/wlan1-va0# common
WEP-2L(config):/interface/wlan1-va0/common# enabled true (Enable VAP)
WEP-2L(config):/interface/wlan1-va0/common# exit
WEP-2L(config):/interface/wlan1-va0# vap
WEP-2L(config):/interface/wlan1-va0/vap# ssid 'SSID_WEP-2L_enterprise' (Change SSID name)
WEP-2L(config):/interface/wlan1-va0/vap# security-mode WPA_WPA2_1X (Encryption mode — WPA/WPA2-Enterprise)
WEP-2L(config):/interface/wlan1-va0/vap# radius
WEP-2L(config):/interface/wlan1-va0/vap/radius# domain root (where root — User domain)
WEP-2L(config):/interface/wlan1-va0/vap/radius# auth-address X.X.X.X (where X.X.X.X — RADIUS server IP address)
WEP-2L(config):/interface/wlan1-va0/vap/radius# auth-port X (where X — RADIUS server port, used for authentication and authorization. By default: 1812)
WEP-2L(config):/interface/wlan1-va0/vap/radius# auth-password secret (where secret — Password for RADIUS server, used for authentication and authorization)
WEP-2L(config):/interface/wlan1-va0/vap/radius# acct-enable true (Enable the sending of “Accounting” messages to the RADIUS server. By default: false)
WEP-2L(config):/interface/wlan1-va0/vap/radius# acct-address X.X.X.X (where X.X.X.X — RADIUS server IP address, used for accounting)
WEP-2L(config):/interface/wlan1-va0/vap/radius# acct-password secret (where secret — Password for RADIUS server, used for accounting)
WEP-2L(config):/interface/wlan1-va0/vap/radius# acct-periodic true (Enable the periodic sending of “Accounting” messages to the RADIUS server. By default: false)
WEP-2L(config):/interface/wlan1-va0/vap/radius# acct-interval 600 (Interval of sending of “Accounting” messages to the RADIUS server)
WEP-2L(config):/interface/wlan1-va0/common# exit
WEP-2L(config):/interface/wlan1-va0# common
WEP-2L(config):/interface/wlan1-va0/common# enabled true
(Enable VAP)
WEP-2L(config):/interface/wlan1-va0/vap# save (Save changes)

Configuration of VAP with Captive Portal

WEP-2L(root):/# configure
WEP-2L(config):/# interface
WEP-2L(config):/interface# wlan1-va0
WEP-2L(config):/interface/wlan1-va0# common
WEP-2L(config):/interface/wlan1-va0/common# enabled true 
WEP-2L(config):/interface/wlan1-va0/common# exit
WEP-2L(config):/interface/wlan1-va0# vap
WEP-2L(config):/interface/wlan1-va0/vap# vlan-id X (where X — VLAN-ID on VAP)
WEP-2L(config):/interface/wlan1-va0/vap# security-mode off  (Encryption mode off — Without password)
WEP-2L(config):/interface/wlan1-va0/vap# ssid 'Portal_WEP-2L'   (Change SSID name)
WEP-2L(config):/interface/wlan1-va0/vap# captive-portal
WEP-2L(config):/interface/wlan1-va0/vap/captive-portal# scenarios
WEP-2L(config):/interface/wlan1-va0/vap/captive-portal/scenarios# scenario-redirect
WEP-2L(config):/interface/wlan1-va0/vap/captive-portal/scenarios/scenario-redirect# redirect-url  http://<IP>:<PORT>/eltex_portal/ (Specify virtual portal URL)
WEP-2L(config):/interface/wlan1-va0/vap/captive-portal/scenarios/scenario-redirect# index 1
WEP-2L(config):/interface/wlan1-va0/vap/captive-portal/scenarios/scenario-redirect# virtual-portal-name default  (Specify portal name. By default: default)
WEP-2L(config):/interface/wlan1-va0/vap/captive-portal/scenarios/scenario-redirect# exit
WEP-2L(config):/interface/wlan1-va0/vap/captive-portal/scenarios# exit
WEP-2L(config):/interface/wlan1-va0/vap/captive-portal# enabled true 
WEP-2L(config):/interface/wlan1-va0/vap/captive-portal# exit
WEP-2L(config):/interface/wlan1-va0/vap# radius
WEP-2L(config):/interface/wlan1-va0/vap/radius# domain root (where root — User domain)
WEP-2L(config):/interface/wlan1-va0/vap/radius# acct-enable true (Enable the sending of “Accounting” messages to the RADIUS server. By default: false)
WEP-2L(config):/interface/wlan1-va0/vap/radius# acct-address X.X.X.X (where X.X.X.X — RADIUS server IP address, used for accounting)
WEP-2L(config):/interface/wlan1-va0/vap/radius# acct-password secret (where secret — Password for RADIUS server, used for accounting)
WEP-2L(config):/interface/wlan1-va0/vap/radius# acct-periodic true (Enable the periodic sending of “Accounting” messages to the RADIUS server. By default: false)
WEP-2L(config):/interface/wlan1-va0/vap/radius# acct-interval 600 (Interval of sending of “Accounting” messages to the RADIUS server)
WEP-2L(config):/interface/wlan1-va0/vap# exit
WEP-2L(config):/interface/wlan1-va0# common
WEP-2L(config):/interface/wlan1-va0/common# enabled true
(Enabling virtual access point)

WEP-2L(config):/interface/wlan1-va0/common# save (Save changes)

Advanced VAP settings

WEP-2L(config):/interface/wlan1-va0/vap# vlan-id X (where X — VLAN-ID number on VAP)


WEP-2L(config):/interface/wlan1-va0/vap# band-steer-mode true (Enabling Band Steer mode. To disable, enter false)


WEP-2L(config):/interface/wlan1-va0/vap# vlan-trunk true (Enabling VLAN trunk on VAP. To disable, enter false)


WEP-2L(config):/interface/wlan1-va0/vap# general-vlan-mode true (Enabling General VLAN on SSID. To disable, enter false)
WEP-2L(config):/interface/wlan1-va0/vap# general-vlan-id X (where X — General VLAN number)


WEP-2L(config):/interface/wlan1-va0/vap# priority-by-dscp false (Priority analysis from CoS field (Class of Service) tagged packets. Value by default: true. In this case, DSCP header field of the IP packet is analyzed)


WEP-2L(config):/interface/wlan1-va0/vap/radius# tls-enable true (Enabling use of TLS at authorization. To disable, enter false)


WEP-2L(config):/interface/wlan1-va0/vap# hidden true (Enabling hidden SSID. To disable, enter false)


WEP-2L(config):/interface/wlan1-va0/vap# sta-limit X (where X is the maximum allowable number of clients connected to the virtual network)


WEP-2L(config):/interface/wlan1-va0/vap#  sta-limit X (where X — maximum allowed number of clients connected to the virtual network)


WEP-2L(config):/interface/wlan1-va0/vap# station-isolation true (Enable traffic isolation between clients within a single VAP. To disable, enter  false)


WEP-2L(config):/interface/wlan1-va0/vap#  minimal-signal -X    (where X — RSSI threshold, when reached, the point will disconnect the client from the VAP. The parameter can take values from -100 to 0.)


WEP-2L(config):/interface/wlan1-va0/vap/radius#  local-switching true (Enabling subscribers traffic transmission outside of GRE tunnel. To disable, enter false)


Configuring shaper for outbound customers' traffic (each separately) connected to this VAP:

WEP-2L(config):/interface/wlan1-va0/vap# shaper-per-sta-rx
WEP-2L(config):/interface/wlan1-va0/vap/shaper-per-sta-rx# value X (where X — maximum speed in kbps)
WEP-2L(config):/interface/wlan1-va0/vap/shaper-per-sta-rx# mode kbps (Enabling shaper. To disable, enter off)
WEP-2L(config):/interface/wlan1-va0/vap/shaper-per-sta-rx# exit
WEP-2L(config):/interface/wlan1-va0/vap# save (Save changes)

Configuring shaper for customers' traffic (each separately) connected to this VAP:

WEP-2L(config):/interface/wlan1-va0/vap# shaper-per-sta-tx
WEP-2L(config):/interface/wlan1-va0/vap/shaper-per-sta-tx# value X (where X — maximum speed in kbps)
WEP-2L(config):/interface/wlan1-va0/vap/shaper-per-sta-tx# mode kbps (Enabling shaper. To disable, enter off)
WEP-2L(config):/interface/wlan1-va0/vap/shaper-per-sta-tx# exit
WEP-2L(config):/interface/wlan1-va0/vap# save (Save changes)

Configuring shaper for outbound customers' traffic (in total) connected to this VAP:

WEP-2L(config):/interface/wlan1-va0/vap# shaper-per-vap-rx
WEP-2L(config):/interface/wlan1-va0/vap/shaper-per-vap-rx# value X (where X — maximum speed in kbps)
WEP-2L(config):/interface/wlan1-va0/vap/shaper-per-vap-rx# mode kbps (Enabling shaper. To disable, enter off)
WEP-2L(config):/interface/wlan1-va0/vap/shaper-per-vap-rx# exit
WEP-2L(config):/interface/wlan1-va0/vap# save (Save changes)

Configuring shaper for inbound customers' traffic (in total) connected to this VAP:

WEP-2L(config):/interface/wlan1-va0/vap# shaper-per-vap-tx
WEP-2L(config):/interface/wlan1-va0/vap/shaper-per-vap-tx# value X (where X — maximum speed in kbps)
WEP-2L(config):/interface/wlan1-va0/vap/shaper-per-vap-tx# mode kbps (Enabling shaper. To disable, enter off)
WEP-2L(config):/interface/wlan1-va0/vap/shaper-per-vap-tx# exit
WEP-2L(config):/interface/wlan1-va0/vap# save (Save changes)

802.11r configuration


This type of roaming is available only for customers' devices supporting 802.11r.

802.11r roaming is possible only between VAP with WPA2-Personal and WPA2-Enterprise security modes.

VAP configuration with WPA2-Personal security mode manual and others can be seen in section Configuration of VAP with WPA-Personal security mode.

Each VAP on the access points should be configured individually, eg. AP1(wlan1)↔AP2(wlan1), AP1(wlan0)↔AP2(wlan0), AP1(wlan1)↔AP3(wlan1), etc.

Below is the example of 802.11r configuring on two access points: AP1 and AP2.

WEP-2L(config):/interface/wlan1-va0/vap/ft-config# enabled false
WEP-2L(config):/interface/wlan1-va0/vap/ft-config# r1-key-holder-id E8:28:C1:FC:D6:80 (MAC address of VAP. Can be viewed in ifconfig output)
WEP-2L(config):/interface/wlan1-va0/vap/ft-config# r0-key-holder-id 12345 (Unique key for this VAP)
WEP-2L(config):/interface/wlan1-va0/vap/ft-config# mobility-domain 100 (Domain must match on oncoming VAPs)
WEP-2L(config):/interface/wlan1-va0/vap/ft-config# mac
WEP-2L(config):/interface/wlan1-va0/vap/ft-config/mac# add E4:5A:D4:E2:C4:B0 (MAC address of VAP interface of oncoming access point — AP2)
WEP-2L(config):/interface/wlan1-va0/vap/ft-config/mac# E4:5A:D4:E2:C4:B0
WEP-2L(config):/interface/wlan1-va0/vap/ft-config/mac/E4:5A:D4:E2:C4:B0# r0-kh-id 23456 (Unique key of oncoming VAP access point AP2 — r0-key-holder-id)
WEP-2L(config):/interface/wlan1-va0/vap/ft-config/mac/E4:5A:D4:E2:C4:B0# r1-kh-id E4:5A:D4:E2:C4:B0 (MAC address of oncoming VAP on AP2)
WEP-2L(config):/interface/wlan1-va0/vap/ft-config/mac/E4:5A:D4:E2:C4:B0# r0-kh-key 0102030405060708 (Random key. Must not match r1-kh-key AP1, but necessarily must match r1-kh-key of oncoming AP2)
WEP-2L(config):/interface/wlan1-va0/vap/ft-config/mac/E4:5A:D4:E2:C4:B0# r1-kh-key 0001020304050607 (Random key. Must not match r0-kh-key AP1, but necessarily must match r0-kh-key of oncoming AP2)
WEP-2L(config):/interface/wlan1-va0/vap/ft-config/mac/E4:5A:D4:E2:C4:B0# exit
WEP-2L(config):/interface/wlan1-va0/vap/ft-config/mac# exit
WEP-2L(config):/interface/wlan1-va0/vap/ft-config# enabled true (Enabling access point operation via 802.11r protocol)
WEP-2L(config):/interface/wlan1-va0/vap/ft-config# save (Save changes)


WEP-2L(config):/interface/wlan1-va0/vap/ft-config# enabled false
WEP-2L(config):/interface/wlan1-va0/vap/ft-config# r1-key-holder-id E4:5A:D4:E2:C4:B0 (MAC address of VAP. Can be viewed in ifconfig output)
WEP-2L(config):/interface/wlan1-va0/vap/ft-config# r0-key-holder-id 23456 (Unique key for this VAP)
WEP-2L(config):/interface/wlan1-va0/vap/ft-config# mobility-domain 100 (Domain must match on oncoming VAPs)
WEP-2L(config):/interface/wlan1-va0/vap/ft-config# mac
WEP-2L(config):/interface/wlan1-va0/vap/ft-config/mac# add E8:28:C1:FC:D6:80 (MAC address of VAP interface of oncoming access point — AP1)
WEP-2L(config):/interface/wlan1-va0/vap/ft-config/mac# E8:28:C1:FC:D6:80
WEP-2L(config):/interface/wlan1-va0/vap/ft-config/mac/E8:28:C1:FC:D6:80# r0-kh-id 12345 (Unique key of oncoming VAP access point AP1 — r0-key-holder-id)
WEP-2L(config):/interface/wlan1-va0/vap/ft-config/mac/E8:28:C1:FC:D6:80# r1-kh-id E8:28:C1:FC:D6:80 (MAC address of oncoming VAP on AP1)
WEP-2L(config):/interface/wlan1-va0/vap/ft-config/mac/E8:28:C1:FC:D6:80# r0-kh-key 0001020304050607 (Random key. Must not match r1-kh-key AP2, but necessarily must match r1-kh-key of oncoming AP1)
WEP-2L(config):/interface/wlan1-va0/vap/ft-config/mac/E8:28:C1:FC:D6:80# r1-kh-key 0102030405060708 (Random key. Must not match r0-kh-key AP2, but necessarily must match r0-kh-key of oncoming AP1)
WEP-2L(config):/interface/wlan1-va0/vap/ft-config/mac/E8:28:C1:FC:D6:80# exit
WEP-2L(config):/interface/wlan1-va0/vap/ft-config/mac# exit
WEP-2L(config):/interface/wlan1-va0/vap/ft-config# enabled true (Enabling access point operation via 802.11r protocol)
WEP-2L(config):/interface/wlan1-va0/vap/ft-config# save (Save changes)

802.11k configuration


802.11k protocol roaming can be organized between any network (open/secure). If the access point is configured to work under the 802.11k protocol, then when a customer connects, the access point sends them the list of “friendly” access points to which a customer can switch in a roaming process. The list contains information about access points' MAC addresses and channels they work with.

Use of 802.11k allows to reduce the time that the spends looking for another network when roaming, since the customer does not need to scan channels on which there are no target access points available for switching.

This type of roaming is available only for customers' devices supporting 802.11k.

Below is the example of 802.11k configuring access point — making a list of “friendly” access points.

WEP-2L(config):/interface/wlan1-va0/vap/w80211kv-config# enabled false
WEP-2L(config):/interface/wlan1-va0/vap/w80211kv-config# mac
WEP-2L(config):/interface/wlan1-va0/vap/w80211kv-config/mac# add E8:28:C1:FC:D6:90 (where E8:28:C1:FC:D6:90 — MAC address of “friendly” access point)
WEP-2L(config):/interface/wlan1-va0/vap/w80211kv-config/mac# E8:28:C1:FC:D6:90
WEP-2L(config):/interface/wlan1-va0/vap/w80211kv-config/mac/E8:28:C1:FC:D6:90# channel 132 (where 132 — channel on which access point with E8:28:C1:FC:D6:90 MAC address operates)
WEP-2L(config):/interface/wlan1-va0/vap/w80211kv-config/mac/E8:28:C1:FC:D6:90# exit
WEP-2L(config):/interface/wlan1-va0/vap/w80211kv-config/mac# add E8:28:C1:FC:D6:70 (where E8:28:C1:FC:D6:70 — MAC address of “friendly” access point)
WEP-2Lx(config):/interface/wlan1-va0/vap/w80211kv-config/mac# E8:28:C1:FC:D6:70
WEP-2L(config):/interface/wlan1-va0/vap/w80211kv-config/mac/E8:28:C1:FC:D6:70# channel 36 (where 36 — channel on which access point with E8:28:C1:FC:D6:70 MAC address operates)
WEP-2L(config):/interface/wlan1-va0/vap/w80211kv-config/mac/E8:28:C1:FC:D6:70# exit
WEP-2L(config):/interface/wlan1-va0/vap/w80211kv-config/mac# exit
WEP-2L(config):/interface/wlan1-va0/vap/w80211kv-config# enabled true (Enabling access point operation via 802.11k protocol)
WEP-2L(config):/interface/wlan1-va0/vap/w80211kv-config# save (Save changes)

Radio settings


In the Radio section, automatic selection of the working channel is used by default. To set the channel manually and change the power, use the following commands:

WEP-2L(root):/# configure
WEP-2L(config):/# interface
WEP-2L(config):/interface# wlan0
WEP-2L(config):/interface/wlan0# wlan
WEP-2L(config):/interface/wlan0/wlan# radio-2g (for wlan1 section is called radio-5g)
WEP-2L(config):/interface/wlan0/wlan/radio-2g# channel X (where X — number of the static channel on which the point will operate)
WEP-2L(config):/interface/wlan0/wlan/radio-2g# auto-channel false (Disable Auto Channel. To enable, enter true)
WEP-2L(config):/interface/wlan0/wlan/radio-2g# use-limit-channels false (Disable Use Limit Channels. To enable, enter true)
WEP-2L(config):/interface/wlan0/wlan/radio-2g# bandwidth X (where X — channel width. Parameter can take the following value: for Radio 1: 20, 40; Radio 2: 20, 40, 80)
WEP-2L(config):/interface/wlan0/wlan/radio-2g# tx-power X (where X — power level, dBm. Parameter can take the following value: for Radio 1: 11-16 dBm; for Radio 2: 11-19 dBm)
WEP-2L(config):/interface/wlan0/wlan/radio-2g# save (Save changes)


Сhannels available for selection for radio 2.4 GHz :

  • for 20 MHz channel width: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13.
  • for 40 MHz channel width:
    • if “control-sideband” = lower: 1, 2, 3, 4, 5, 6, 7, 8, 9.
    • fi “control-sideband” = upper: 5, 6, 7, 8, 9, 10, 11, 12, 13.

Сhannels available for selection for radio 5 GHz:

  • for 20 MHz channel width: 36, 40, 44, 48, 52, 56, 60, 64, 132, 136, 140, 144, 149, 153, 157, 161, 165.
  • for 40 MHz channel width:
    • if “control-sideband” = lower: 36, 44, 52, 60, 132, 140, 149, 157.
    • if “control-sideband” = upper: 40, 48, 56, 64, 136, 144, 153, 161.
  • for 80 MHz channel width: 36, 40, 44, 48, 52, 56, 60, 64, 132, 136, 140, 144, 149, 153, 157, 161.

Advanced Radio settings

WEP-2L(config):/interface/wlan0/wlan/radio-2g# use-limit-channels true (Enabling use of limited list of channels in channel autoselection operation. To disable, enter false)
WEP-2L(config):/interface/wlan0/wlan/radio-2g# limit-channels '1 6 11' (where 1, 6, 11 are channels of range in which the configurable radio interface can operate)


WEP-2L(config):/interface/wlan0/wlan/radio-2g# control-sideband lower (Parameter may take values:  lower, upper. By default: for Radio 1: lower; for Radio 2: upper)


WEP-2L(config):/interface/wlan0/wlan/radio-2g# sgi true (Switching on the use of a Short Guard Interval for data transmission of 400 ns instead of 800 ns. To disable, enter false)


WEP-2L(config):/interface/wlan0/wlan/radio-2g# stbc true (Enabling the Spatial-Time Block Coding (STBC) method, aimed at improving the reliability of data transmission. To disable, enter false)


WEP-2L(config):/interface/wlan0/wlan/radio-2g# aggregation true (Enabling aggregation on Radio — support for AMPDU/AMSDU. To disable, enter false)


WEP-2L(config):/interface/wlan0/wlan/radio-2g# short-preamble true (Enabling the short packet preamble. To disable, enter false)


WEP-2L(config):/interface/wlan0/wlan/radio-2g# wmm true (Enabling the support for WMM (Wi-Fi Multimedia) To disable, enter false)


Configuring is done only on Radio 5 GHz (wlan1)

WEP-2L(config):/interface/wlan1/wlan/radio-5g# dfs X (where X — DFS mechanism operating mode. May take values: forced — the mechanism is disabled, DFS channels available for selection; autothe mechanism is enabled; disabled — the mechanism is disabled, DFS channels unavailable for selection)


WEP-2L(config):/interface/wlan0/wlan/radio-2g# obss-coex true (Enabling automatic channel width switch mode from 40 MHz to 20 MHz with a busy radio environment. To disable, enter false)


WEP-2L(config):/interface/wlan0/wlan/radio-2g# bandwidth X (where X — bandwidth. Parameter can take the following value: for Radio 1: 20, 40; Radio 2: 20, 40, 80)


WEP-2L(config):/interface/wlan0/wlan/radio-2g# tx-broadcast-limit X (where X — Restricting broadcast/multicast traffic over the wireless network, specify a limit for broadcast traffic per packet/s)


WEP-2L(config):/interface/wlan0/wlan/radio-2g# qos
WEP-2L(config):/interface/wlan0/wlan/radio-2g/qos# enable true (Enabling the use of Quality of Service functions.) To disable, enter false )
WEP-2L(config):/interface/wlan0/wlan/radio-2g/qos# edca-ap (Configuring the access point's QoS parameters (traffic is transmitted from the access point to the client))
WEP-2L(config):/interface/wlan0/wlan/radio-2g/qos/edca-ap# bk (Configure QoS parameters for low-priority high-bandwidth queues (802.1p priorities: cs1, cs2))
WEP-2L(config):/interface/wlan0/wlan/radio-2g/qos/edca-ap/bk# aifs X (where X — the time frame(s) of data measured in slots. Takes the values: 1-255)
WEP-2L(config):/interface/wlan0/wlan/radio-2g/qos/edca-ap/bk# cwmin X (X — The initial value of the waiting time before sending the frame again is set in milliseconds. Takes the following values: 1, 3, 7, 15, 31, 63, 127, 255, 511, 1023. The value of cwMin may not exceed the value of cwMax)
WEP-2L(config):/interface/wlan0/wlan/radio-2g/qos/edca-ap/bk# cwmax X (where X — The maximum waiting time before resending a frame is set in milliseconds. Takes the following values: 1, 3, 7, 15, 31, 63, 127, 255, 511, 1023. The value of cwMax must be greater than the value of cwMin)
WEP-2L(config):/interface/wlan0/wlan/radio-2g/qos/edca-ap/bk# txop X (where X — The time interval, in milliseconds, in which the client WME station is allowed to initiate data transmission over the wireless environment to the access point. Max value — 65535 ms)
WEP-2L(config):/interface/wlan0/wlan/radio-2g/qos/edca-ap/bk# exit
WEP-2L(config):/interface/wlan0/wlan/radio-2g/qos/edca-ap# exit
WEP-2L(config):/interface/wlan0/wlan/radio-2g/qos# edca-sta (Configuring the client station QoS parameters (traffic is transmitted from the client station to the access point))

The configuration method of edca-sta is the same as that of edca-ap.
Parameters configuration for queues be, vi, vo is similar to parameters configuration for queue bk.

WDS configuring


When configuring WDS connection, it is necessary that the same channel and channel width are selected in the radio interface settings on the devices that will connect via WDS. For more information on configuring the radio interface via the command line, see the Radio Settings section. 

Configuring WDS connection on Radio 5 GHz interface (wlan1) is given below.

WEP-2L(root):/# configure
WEP-2L(config):/# interface
WEP-2L(config):/interface# wlan1-wds0  (Selecting WDS link. Possible values for Radio 2,4 GHz: wlan0-wds0 — wlan0-wds3); for Radio 5 GHz : wlan1-wds0 — wlan1-wds3)
WEP-2L(config):/interface/wlan1-wds0# wds-5 (When configuring WDS on Radio 2,4 GHz, enter wds-2)
WEP-2L(config):/interface/wlan1-wds0/wds-5# mac-addr XX:XX:XX:XX:XX:XX (MAC address of oncoming access point Radio interface, which can be viewed if entering the command monitoring radio-2 or monitoring radio-5 on the oncoming access point, depending on which range the configured WDS connection will operate in)
WEP-2L(config):/interface/wlan1-wds0/wds-5# exit
WEP-2L(config):/interface/wlan1-wds0# common
WEP-2L(config):/interface/wlan1-wds0/common# enabled true (Enabling WDS link. To disable, enter false)
WEP-2L(config):/interface/wlan1-wds0/common# exit
WEP-2L(config):/interface/wlan1-wds0# exit
WEP-2L(config):/interface# wlan1 (When configuring WDS on Radio 2,4 GHz, enter wlan0)
WEP-2L(config):/interface/wlan1# wlan
WEP-2L(config):/interface/wlan1/wlan# wds
WEP-2L(config):/interface/wlan1/wlan/wds# security-mode WPA2  (Selecting WPA2 security mode. Possible values: WPA, off — without password)
WEP-2L(config):/interface/wlan1/wlan/wds# key-wpa password123 (Key/password, neccessary for connection to the oncoming access point. . Key length is from 8 to 63 characters)
WEP-2L(config):/interface/wlan1/wlan/wds# enabled true (Enabling WDS. To disable, enter false)
WEP-2L(config):/interface/wlan1/wlan/wds# save

System settings

Device firmware update

WEP-2L(root):/# firmware upload tftp <tftp server IP address> <Firmware image name>   (Example: firmware upload tftp 192.168.1.15 WEP-2L-1.2.1_build_X.tar.gz) 
WEP-2L(root):/# firmware upgrade


WEP-2L(root):/# firmware upload http <URL to download Firmware image> (Example: firmware upload http http://192.168.1.100:8080/files/WEP-2L-1.2.1_build_X.tar.gz)
WEP-2L(root):/# firmware upgrade


WEP-2L(root):/# firmware switch

Device configuration management

WEP-2L(root):/# manage-config reset-to-default


WEP-2L(root):/# manage-config reset-to-default-without-management


WEP-2L(root):/#  manage-config download tftp <tftp server IP address>  (Example: manage-config download tftp 192.168.1.15)


WEP-2L(root):/# manage-config upload tftp <tftp server IP address> <Configuration file name> (Example: manage-config upload tftp 192.168.1.15 config.json)
WEP-2L(root):/# manage-config apply (Apply configuration to the access point)

Device reboot

WEP-2L(root):/# reboot

Setting the date and time

WEP-2L(root):/# configure
WEP-2L(config):/# date-time
WEP-2L(config):/date-time# mode ntp (Enable NTP operation mode)
WEP-2L(config):/date-time# ntp
WEP-2L(config):/date-time/ntp# server <NTP server IP address> (NTP server configuration)
WEP-2L(config):/date-time/ntp# exit
WEP-2L(config):/date-time# common
WEP-2L(config):/date-time/common# timezone 'Asia/Novosibirsk (Novosibirsk)' (Timezone configuration)
WEP-2L(config):/date-time/common# save

Advanced system settings

WEP-2L(root):/# configure
WEP-2L(config):/# system
WEP-2L(config):/system# global-station-isolation true (Enabling global traffic isolation between customers of different VAP и different radio interfaces. To disable, enter false)
WEP-2Lconfig):/system# save (Save changes)


WEP-2L(root):/# configure
WEP-2L(config):/# system
WEP-2L(config):/system# hostname WEP-2L_room2 (where WEP-2L_room2 — new name of the device. A parameter can contain from 1 to 63 symbols: capital и lowercase latin letters, nu,bers, hyphen character “-” (hyphen can not be the last character in name). By default: WEP-2L)
WEP-2L(config):/system# save (Save changes)


WEP-2L(root):/# configure
WEP-2L(config):/# system
WEP-2L(config):/system# ap-location ap.test.root (where ap.test.root — EMS management system device tree node domain, where access point is located. By default: root)
WEP-2L(config):/system# save (Save changes)


WEP-2L(root):/# configure
WEP-2L(config):/# authentication
WEP-2L(config):/authentication# admin-password newpassword (where newpassword — new password to login to the access point. By default: password)
WEP-2L(config):/authentication# save (Save changes)

APB service configuration

The APB service is used to provide portal roaming of clients between access points connected to the service. 

WEP-2L(root):/#  configure
WEP-2L(config):/#  captive-portal
WEP-2L(config):/captive-portal#  apbd 
WEP-2L(config):/captive-portal/apbd#  roam_service_url <APB service address> (Example: roam_service_url ws://192.168.1.100:8090/apb/broadcast )
WEP-2L(config):/captive-portal/apbd#  enabled true  (Enabling APB service. To disable it, enter false)
WEP-2L(config):captive-portal/apbd#  save (Save changes)

Monitoring

Wi-Fi Clients

To display monitoring of connected Wi-Fi clients, use the command:

monitoring associated-clients <mac address of client 1> ... <mac address of client N> filter <parameter 1> ... <parameter N>,

where <mac address of client 1> ... <mac address of client N> — mac addresses of customer devices, connected to the access point. In order to display information for all customers, instead of <mac address of client> enter all;

        filter — a special word followed by the monitoring parameters required for withdrawal by client/clients;

        <parameter 1> ... <parameter N> — monitoring parameter/parameters, necessary for client/clients display.

To display a list of clients connected to the access point, press Tab after monitoring associated-clients.

WEP-2L(root):/# monitoring associated-clients <Tab>

32:5b:60:62:e0:a4
bc:2e:f6:cc:85:46
all


To get a list of monitoring parameters, press Tab after filter.

WEP-2L(root):/# monitoring associated-clients all filter <Tab>

index
interface
ssid
hw-addr
state
ip-addr
hostname
rx-retry-count
tx-fails
tx-period-retry
tx-retry-count
..... 



WEP-2L(root):/# monitoring associated-clients (or monitoring associated-clients all)

 index                    | 0
 interface                | wlan1-va0
 state                    | ASSOC SLEEP AUTH_SUCCESS 
 hw-addr                  | 32:5b:60:62:e0:a4
 ssid                     | 2ac-open
 ip-addr                  | 10.24.80.58
 authorized               | true
 captive-portal-vap       | false
 enterprise-vap           | false
 rx-retry-count           | 161
 tx-fails                 | 0
 tx-period-retry          | 3
 tx-retry-count           | 626
 rssi-1                   | -20
 rssi-2                   | -20
 snr-1                    | 14
 snr-2                    | 14
 tx-rate                  | MCS15 NO SGI 270
 rx-rate                  | MCS15 NO SGI 130
 rx-bw                    | 20M
 rx-bw-all                | 20M
 tx-bw                    | 40M
 uptime                   | 00:01:32
 multicast-groups-count   | 1
 wireless-mode            | n
 perftest-capable         | false
 snr-rssi-capable         | false
 link-capacity            | 100
 link-quality             | 99
 link-quality-common      | 96
 actual-tx-rate           | 449
 actual-rx-rate           | 30
 shaped-rx-rate           | 32
 actual-tx-pps            | 49
 actual-rx-pps            | 29
 shaped-rx-pps            | 29
 name                     | 0

 Rate                  Transmitted            Received                 
---------------------------------------------------------------------
 Total Packets:       | 8165                 | 6387                 |
 TX success:          | 100                  |                      |
 Total Bytes:         | 8446088              | 1125301              |
 Data Packets:        | 8158                 | 6008                 |
 Data Bytes:          | 8233649              | 959850               |
 Mgmt Packets:        | 7                    | 379                  |
 Mgmt Bytes:          | 331                  | 291                  |
---------------------------------------------------------------------

 Rate                  Transmitted            Received                 
---------------------------------------------------------------------
 ofdm6                | 9              |   0%|            378 |   5%|
 mcs7                 | 2              |   0%|              0 |   0%|
 mcs11                | 0              |   0%|              3 |   0%|
 mcs12                | 28             |   0%|             66 |   1%|
 mcs14                | 1183           |  14%|              0 |   0%|
 mcs15                | 6943           |  85%|           5939 |  93%|
---------------------------------------------------------------------


Multicast groups:
 MAC                IP             
--------------------------------------
 01:00:5E:00:00:FB |     xxx.0.0.251 |
--------------------------------------


 index                    | 1
 interface                | wlan1-va2
 state                    | ASSOC AUTH_SUCCESS 
 hw-addr                  | bc:2e:f6:cc:85:46
 ssid                     | 2ac-enter
 ip-addr                  | 10.24.80.90
 hostname                 | HUAWEI_P40_Pro-81afe9c34a
 username                 | tester
 domain                   | enterprise.service.root
 authorized               | true
 captive-portal-vap       | false
 enterprise-vap           | true
 rx-retry-count           | 7
 tx-fails                 | 0
 tx-period-retry          | 1
 tx-retry-count           | 1
 rssi-1                   | -37
 rssi-2                   | -54
 snr-1                    | 11
 snr-2                    | 10
 tx-rate                  | MCS15 NO SGI 130
 rx-rate                  | MCS15 NO SGI 130
 rx-bw                    | 20M
 rx-bw-all                | 20M
 tx-bw                    | 20M
 uptime                   | 00:00:13
 multicast-groups-count   | 0
 wireless-mode            | ac
 perftest-capable         | false
 snr-rssi-capable         | false
 link-capacity            | 76
 link-quality             | 99
 link-quality-common      | 99
 actual-tx-rate           | 49
 actual-rx-rate           | 24
 shaped-rx-rate           | 23
 actual-tx-pps            | 17
 actual-rx-pps            | 20
 shaped-rx-pps            | 19
 name                     | 1

 Rate                  Transmitted            Received                 
---------------------------------------------------------------------
 Total Packets:       | 178                  | 263                  |
 TX success:          | 100                  |                      |
 Total Bytes:         | 68476                | 38913                |
 Data Packets:        | 174                  | 207                  |
 Data Bytes:          | 63720                | 32019                |
 Mgmt Packets:        | 4                    | 56                   |
 Mgmt Bytes:          | 232                  | 240                  |
---------------------------------------------------------------------

 Rate                  Transmitted            Received                 
---------------------------------------------------------------------
 ofdm6                | 21             |  11%|             33 |  12%|
 ofdm24               | 0              |   0%|             43 |  16%|
 mcs7                 | 15             |   8%|              0 |   0%|
 mcs12                | 41             |  23%|              0 |   0%|
 mcs13                | 43             |  24%|              0 |   0%|
 mcs14                | 0              |   0%|              3 |   1%|
 mcs15                | 58             |  32%|            183 |  69%|
---------------------------------------------------------------------


Multicast groups: none



WEP-2L(root):/# monitoring associated-clients bc:2e:f6:cc:85:46 (there is a possibility to specify several mac addresses, eg., monitoring associated-clients bc:2e:f6:cc:85:46 32:5b:60:62:e0:a4)

 index                    | 1
 interface                | wlan1-va2
 state                    | ASSOC SLEEP AUTH_SUCCESS 
 hw-addr                  | bc:2e:f6:cc:85:46
 ssid                     | 2ac-enter
 ip-addr                  | 10.24.80.90
 hostname                 | HUAWEI_P40_Pro-81afe9c34a
 username                 | tutu
 domain                   | enterprise.service.root
 authorized               | true
 captive-portal-vap       | false
 enterprise-vap           | true
 rx-retry-count           | 9
 tx-fails                 | 0
 tx-period-retry          | 0
 tx-retry-count           | 1
 rssi-1                   | -39
 rssi-2                   | -57
 snr-1                    | 14
 snr-2                    | 13
 tx-rate                  | MCS15 NO SGI 130
 rx-rate                  | MCS15 NO SGI 130
 rx-bw                    | 20M
 rx-bw-all                | 20M
 tx-bw                    | 20M
 uptime                   | 00:01:12
 multicast-groups-count   | 0
 wireless-mode            | ac
 perftest-capable         | false
 snr-rssi-capable         | false
 link-capacity            | 100
 link-quality             | 100
 link-quality-common      | 99
 actual-tx-rate           | 1
 actual-rx-rate           | 0
 shaped-rx-rate           | 0
 actual-tx-pps            | 1
 actual-rx-pps            | 0
 shaped-rx-pps            | 0
 name                     | 1

 Rate                  Transmitted            Received                 
---------------------------------------------------------------------
 Total Packets:       | 312                  | 483                  |
 TX success:          | 100                  |                      |
 Total Bytes:         | 112678               | 55795                |
 Data Packets:        | 308                  | 295                  |
 Data Bytes:          | 104438               | 43445                |
 Mgmt Packets:        | 4                    | 188                  |
 Mgmt Bytes:          | 232                  | 240                  |
---------------------------------------------------------------------

 Rate                  Transmitted            Received                 
---------------------------------------------------------------------
 ofdm6                | 21             |   6%|            103 |  21%|
 ofdm24               | 0              |   0%|            105 |  21%|
 mcs7                 | 15             |   4%|              0 |   0%|
 mcs12                | 41             |  13%|              0 |   0%|
 mcs13                | 43             |  13%|              0 |   0%|
 mcs14                | 0              |   0%|              4 |   0%|
 mcs15                | 192            |  61%|            270 |  56%|
---------------------------------------------------------------------


Multicast groups: none



WEP-2L(root):/# monitoring associated-clients 32:5b:60:62:e0:a4 filter hw-addr ip-addr tx-rate rx-rate uptime (display of a limited number of monitoring parameters for a certain client. It is possible to specify several mac addresses)

 hw-addr                  | 32:5b:60:62:e0:a4
 ip-addr                  | 10.24.80.58
 tx-rate                  | MCS15 NO SGI 270
 rx-rate                  | MCS14 NO SGI 117
 uptime                   | 00:07:57

WEP-2L(root):/# monitoring associated-clients all filter hw-addr rssi-1 rssi-2 wireless-mode interface (display of a limited number of monitoring parameters for all clients)

 hw-addr                  | 32:5b:60:62:e0:a4
 rssi-1                   | -24
 rssi-2                   | -24
 wireless-mode            | n
 interface                | wlan1-va0

 hw-addr                  | bc:2e:f6:cc:85:46
 rssi-1                   | -38
 rssi-2                   | -53
 wireless-mode            | ac
 interface                | wlan1-va2


WDS

To monitor WDS connections, use the following command:

monitoring wds-entries <mac address of oncoming access point 1> ... <mac address of oncoming access point N> filter <parameter 1> ... <parameter N>, where <mac address of oncoming access point 1> ... <mac address of oncoming access point N> — mac addresses of oncoming access points, with which WDS bridges are built. In order to display information for all oncoming access points, instead of <mac address of oncoming access point> enter all;

        filter — a special word followed by the monitoring parameters required for display of one or several oncoming access points;

        <parameter 1> ... <parameter N> — monitoring parameter/parameters, necessary for display of one or several oncoming access points.

To display a list of access points with which WDS bridges are built, press Tab after monitoring wds-entries.

WEP-2L(root):/# monitoring wds-entries <Tab>

e8:28:c1:d1:43:15
e8:28:c1:da:cb:80
all


To get a list of monitoring parameters, press Tab after filter.

WEP-2L(root):/# monitoring wds-entries all filter <Tab>

index                                                                                                                          
interface                                                                                                                      
hw-addr                                                                                                                        
state                                                                                                                          
ip-addr                                                                                                                        
hostname                                                                                                                       
rx-retry-count                                                                                                                 
tx-fails                                                                                                                       
tx-period-retry                                                                                                                
tx-retry-count                                                                                                                 
noise-1                                                                                                                        
noise-2                                                                                                                        
rssi-1                                                                                                                         
rssi-2 
..... 



WEP-2L(root):/# monitoring wds-entries (or monitoring wds-entries all)

 index                    | 0                                                                                                  
 interface                | wlan1                                                                                              
 state                    | WIFI_WDS                                                                                           
 hw-addr                  | e8:28:c1:d1:43:15                                                                                  
 ip-addr                  | 10.24.80.35                                                                                        
 hostname                 | WEP-2L                                                                                             
 authorized               | false                                                                                              
 captive-portal-vap       | false                                                                                              
 enterprise-vap           | false                                                                                              
 rx-retry-count           | 10                                                                                                 
 tx-fails                 | 0                                                                                                  
 tx-period-retry          | 0                                                                                                  
 tx-retry-count           | 0                                                                                                  
 rssi-1                   | -25                                                                                                
 rssi-2                   | -20                                                                                                
 snr-1                    | 40                                                                                                 
 snr-2                    | 39                                                                                                 
 wds-interface            | wlan1-wds1                                                                                         
 tx-rate                  | VHT NSS2-MCS8 SGI 173.3                                                                            
 rx-rate                  | VHT NSS2-MCS8 NO SGI 156                                                                           
 rx-bw                    | 20M                                                                                                
 rx-bw-all                | 20M                                                                                                
 tx-bw                    | 20M                                                                                                
 uptime                   | 00:02:44                                                                                           
 multicast-groups-count   | 0                                                                                                  
 wireless-mode            | ac                                                                                                 
 eltex-firmware-version   | 1.2.1 build X
 eltex-board-type         | WEP-2L                                                                                             
 perftest-capable         | false                                                                                              
 snr-rssi-capable         | false                                                                                              
 link-capacity            | 90 (not changed)                                                                                   
 link-quality             | 100 (not changed)                                                                                  
 link-quality-common      | 100                                                                                                
 actual-tx-rate           | 0                                                                                                  
 actual-rx-rate           | 5                                                                                                  
 shaped-rx-rate           | 0                                                                                                  
 actual-tx-pps            | 0                                                                                                  
 actual-rx-pps            | 8                                                                                                  
 shaped-rx-pps            | 0                                                                                                  
 name                     | 0                                                                                                  
                                                                                                                               
 Rate                  Transmitted            Received                                                                         
---------------------------------------------------------------------                                                          
 Total Packets:       | 53                   | 2125                 |                                                          
 TX success:          | 100                  |                      |                                                          
 Total Bytes:         | 4300                 | 261666               |                                                          
 Data Packets:        | 48                   | 2120                 |                                                          
 Data Bytes:          | 2496                 | 193382               |                                                          
 Mgmt Packets:        | 5                    | 5                    |                                                          
 Mgmt Bytes:          | 268                  | 444                  |                                                          
---------------------------------------------------------------------                                                          
                                                                                                                               
 Rate                  Transmitted            Received                                                                         
---------------------------------------------------------------------                                                          
 ofdm6                | 7              |  13%|             12 |   0%|                                                          
 ofdm54               | 1              |   1%|              0 |   0%|                                                          
 nss2-mcs0            | 4              |   7%|              6 |   0%|                                                          
 nss2-mcs1            | 4              |   7%|              8 |   0%|                                                          
 nss2-mcs2            | 4              |   7%|              6 |   0%|                                                          
 nss2-mcs3            | 4              |   7%|              6 |   0%|                                                          
 nss2-mcs4            | 4              |   7%|              7 |   0%|                                                          
 nss2-mcs5            | 4              |   7%|              4 |   0%|                                                          
 nss2-mcs6            | 4              |   7%|              7 |   0%|                                                          
 nss2-mcs7            | 9              |  16%|             24 |   1%|                                                          
 nss2-mcs8            | 8              |  15%|           2044 |  96%|                                                          
---------------------------------------------------------------------                                                          
                                                                                                                               
                                                                                                                               
Multicast groups: none  

 index                    | 1                                                                                                  
 interface                | wlan1                                                                                              
 state                    | WIFI_WDS                                                                                           
 hw-addr                  | e8:28:c1:da:cb:80                                                                                  
 ip-addr                  | 10.24.80.40                                                                                        
 hostname                 | WEP-2L                                                                                             
 authorized               | false                                                                                              
 captive-portal-vap       | false                                                                                              
 enterprise-vap           | false                                                                                              
 rx-retry-count           | 10                                                                                                 
 tx-fails                 | 0                                                                                                  
 tx-period-retry          | 0                                                                                                  
 tx-retry-count           | 0                                                                                                  
 rssi-1                   | -75                                                                                                
 rssi-2                   | -70                                                                                                
 snr-1                    | 40                                                                                                 
 snr-2                    | 39                                                                                                 
 wds-interface            | wlan1-wds2                                                                                         
 tx-rate                  | VHT NSS2-MCS8 SGI 173.3                                                                            
 rx-rate                  | VHT NSS2-MCS8 NO SGI 156                                                                           
 rx-bw                    | 20M                                                                                                
 rx-bw-all                | 20M                                                                                                
 tx-bw                    | 20M                                                                                                
 uptime                   | 00:07:15                                                                                           
 multicast-groups-count   | 0                                                                                                  
 wireless-mode            | ac                                                                                                 
 eltex-firmware-version   | 1.2.1 build X
 eltex-board-type         | WEP-2L                                                                                             
 perftest-capable         | false                                                                                              
 snr-rssi-capable         | false                                                                                              
 link-capacity            | 90 (not changed)                                                                                   
 link-quality             | 100 (not changed)                                                                                  
 link-quality-common      | 100                                                                                                
 actual-tx-rate           | 0                                                                                                  
 actual-rx-rate           | 5                                                                                                  
 shaped-rx-rate           | 0                                                                                                  
 actual-tx-pps            | 0                                                                                                  
 actual-rx-pps            | 8                                                                                                  
 shaped-rx-pps            | 0                                                                                                  
 name                     | 0                                                                                                  
                                                                                                                               
 Rate                  Transmitted            Received                                                                         
---------------------------------------------------------------------                                                          
 Total Packets:       | 53                   | 2125                 |                                                          
 TX success:          | 100                  |                      |                                                          
 Total Bytes:         | 4300                 | 261666               |                                                          
 Data Packets:        | 48                   | 2120                 |                                                          
 Data Bytes:          | 2496                 | 193382               |                                                          
 Mgmt Packets:        | 5                    | 5                    |                                                          
 Mgmt Bytes:          | 268                  | 444                  |                                                          
---------------------------------------------------------------------                                                          
                                                                                                                               
 Rate                  Transmitted            Received                                                                         
---------------------------------------------------------------------                                                          
 ofdm6                | 7              |  13%|             12 |   0%|                                                          
 ofdm54               | 1              |   1%|              0 |   0%|                                                          
 nss2-mcs0            | 4              |   7%|              6 |   0%|                                                          
 nss2-mcs1            | 4              |   7%|              8 |   0%|                                                          
 nss2-mcs2            | 4              |   7%|              6 |   0%|                                                          
 nss2-mcs3            | 4              |   7%|              6 |   0%|                                                          
 nss2-mcs4            | 4              |   7%|              7 |   0%|                                                          
 nss2-mcs5            | 4              |   7%|              4 |   0%|                                                          
 nss2-mcs6            | 4              |   7%|              7 |   0%|                                                          
 nss2-mcs7            | 9              |  16%|             24 |   1%|                                                          
 nss2-mcs8            | 8              |  15%|           2044 |  96%|                                                          
---------------------------------------------------------------------                                                          
                                                                                                                               
                                                                                                                               
Multicast groups: none  



WEP-2L(root):/# monitoring wds-entries e8:28:c1:d1:43:15 (It is possible to specify several mac addresses, eg., monitoring wds-entries e8:28:c1:d1:43:15 e8:28:c1:da:cb:80)

 index                    | 0                                                                                                  
 interface                | wlan1                                                                                              
 state                    | WIFI_WDS                                                                                           
 hw-addr                  | e8:28:c1:d1:43:15                                                                                  
 ip-addr                  | 10.24.80.35                                                                                        
 hostname                 | WEP-2L                                                                                             
 authorized               | false                                                                                              
 captive-portal-vap       | false                                                                                              
 enterprise-vap           | false                                                                                              
 rx-retry-count           | 10                                                                                                 
 tx-fails                 | 0                                                                                                  
 tx-period-retry          | 0                                                                                                  
 tx-retry-count           | 0                                                                                                  
 rssi-1                   | -25                                                                                                
 rssi-2                   | -20                                                                                                
 snr-1                    | 40                                                                                                 
 snr-2                    | 39                                                                                                 
 wds-interface            | wlan1-wds1                                                                                         
 tx-rate                  | VHT NSS2-MCS8 SGI 173.3                                                                            
 rx-rate                  | VHT NSS2-MCS8 NO SGI 156                                                                           
 rx-bw                    | 20M                                                                                                
 rx-bw-all                | 20M                                                                                                
 tx-bw                    | 20M                                                                                                
 uptime                   | 00:02:44                                                                                           
 multicast-groups-count   | 0                                                                                                  
 wireless-mode            | ac                                                                                                 
 eltex-firmware-version   | 1.2.1 build X
 eltex-board-type         | WEP-2L                                                                                             
 perftest-capable         | false                                                                                              
 snr-rssi-capable         | false                                                                                              
 link-capacity            | 90 (not changed)                                                                                   
 link-quality             | 100 (not changed)                                                                                  
 link-quality-common      | 100                                                                                                
 actual-tx-rate           | 0                                                                                                  
 actual-rx-rate           | 5                                                                                                  
 shaped-rx-rate           | 0                                                                                                  
 actual-tx-pps            | 0                                                                                                  
 actual-rx-pps            | 8                                                                                                  
 shaped-rx-pps            | 0                                                                                                  
 name                     | 0                                                                                                  
                                                                                                                               
 Rate                  Transmitted            Received                                                                         
---------------------------------------------------------------------                                                          
 Total Packets:       | 53                   | 2125                 |                                                          
 TX success:          | 100                  |                      |                                                          
 Total Bytes:         | 4300                 | 261666               |                                                          
 Data Packets:        | 48                   | 2120                 |                                                          
 Data Bytes:          | 2496                 | 193382               |                                                          
 Mgmt Packets:        | 5                    | 5                    |                                                          
 Mgmt Bytes:          | 268                  | 444                  |                                                          
---------------------------------------------------------------------                                                          
                                                                                                                               
 Rate                  Transmitted            Received                                                                         
---------------------------------------------------------------------                                                          
 ofdm6                | 7              |  13%|             12 |   0%|                                                          
 ofdm54               | 1              |   1%|              0 |   0%|                                                          
 nss2-mcs0            | 4              |   7%|              6 |   0%|                                                          
 nss2-mcs1            | 4              |   7%|              8 |   0%|                                                          
 nss2-mcs2            | 4              |   7%|              6 |   0%|                                                          
 nss2-mcs3            | 4              |   7%|              6 |   0%|                                                          
 nss2-mcs4            | 4              |   7%|              7 |   0%|                                                          
 nss2-mcs5            | 4              |   7%|              4 |   0%|                                                          
 nss2-mcs6            | 4              |   7%|              7 |   0%|                                                          
 nss2-mcs7            | 9              |  16%|             24 |   1%|                                                          
 nss2-mcs8            | 8              |  15%|           2044 |  96%|                                                          
---------------------------------------------------------------------                                                          
                                                                                                                               
                                                                                                                               
Multicast groups: none  



WEP-2L(root):/# monitoring wds-entries e8:28:c1:d1:43:15 filter hw-addr ip-addr tx-rate rx-rate uptime (display of a limited number of monitoring parameters for access point. It is possible to specify several mac addresses)

 hw-addr                  | 32:5b:60:62:e0:a4
 ip-addr                  | 10.24.80.58
 tx-rate                  | MCS15 NO SGI 270
 rx-rate                  | MCS14 NO SGI 117
 uptime                   | 00:07:57

WEP-2L(root):/# monitoring wds-entries all filter hw-addr rssi-1 rssi-2 wireless-mode wds-interface eltex-firmware-version (display of a limited number of monitoring parameters for all access points)

 hw-addr                  | 32:5b:60:62:e0:a4
 rssi-1                   | -24
 rssi-2                   | -24
 wireless-mode            | n
 interface                | wlan1-va0

 hw-addr                  | bc:2e:f6:cc:85:46
 rssi-1                   | -38
 rssi-2                   | -53
 wireless-mode            | ac
 interface                | wlan1-va2


Device info

WEP-2L(root):/# monitoring information

   system-time: 09:15:16 28.10.2021                                                                                            
   uptime: 15:45:10                                                                                                            
   software-version: 1.2.1 build X
   secondary-software-version: 1.2.1 build X
   boot-version: 1.2.1 build X
   memory-usage: 67                                                                                                            
   memory-free: 34                                                                                                             
   memory-used: 71                                                                                                             
   memory-total: 105                                                                                                           
   cpu: 0.28                                                                                                                   
   is-default-config: true                                                                                                     
   board-type: WEP-2L                                                                                                          
   hw-platform: WEP-2L                                                                                                         
   factory-wan-mac: E8:28:C1:xx:xx:xx                                                                                          
   factory-lan-mac: E8:28:C1:xx:xx:xx                                                                                          
   factory-serial-number: WP39000059                                                                                           
   hw-revision: 1v1                                                                                                            
   session-password-initialized: false                                                                                         
   ott-mode: false                                                                                                             
   last-reboot-reason: firmware update                                                                                         
   test-changes-mode: false  


Network information

WEP-2L(root):/# monitoring wan-status

   interface: br0
   protocol: dhcp
   ip-address: 192.168.1.15
   mac: e8:28:c1:xx:xx:xx
   mask: 255.255.255.0
   gateway: 192.168.1.1
   DNS-1: 192.168.1.100
   DNS-2: 
   rx-bytes: 4864149
   rx-packets: 13751
   tx-bytes: 2462399
   tx-packets: 20753

WEP-2L(root):/# monitoring ethernet

   link: up
   speed: 1000
   duplex: enabled
   rx-bytes: 4872597
   rx-packets: 13844
   tx-bytes: 2477091
   tx-packets: 20923

WEP-2L(root):/# monitoring arp

#        ip                mac              
--------------------------------------------
0        192.168.1.1       02:00:48:xx:xx:xx
1        192.168.1.151     2c:fd:a1:xx:xx:xx

WEP-2L(root):/# monitoring route

Destination       Gateway           Mask              Flags      Interface 
--------------------------------------------------------------------------
0.0.0.0           192.168.1.1      0.0.0.0            UG         br0       
192.168.1.0       0.0.0.0          255.255.255.0      U          br0  


Wireless interfaces

WEP-2L(root):/# monitoring radio-2

hwaddr: E8:28:C1:xx:xx:xx
status: on
noise-1: -100
noise-2: -100
utilization: 21
channel: 11
thermal: 30
bandwidth: 20
frequency: 2462

WEP-2L(root):/# monitoring radio-5

hwaddr: E8:28:C1:xx:xx:xx
status: on
noise-1: -100
noise-2: -100
utilization: 0
channel: 132
thermal: 31
bandwidth: 20
frequency: 5660


Event logging

WEP-2L(root):/# monitoring events

Jan  23 00:00:07 WEP-2L daemon.info syslogd[925]: started: BusyBox v1.21.1

Jan  23 00:00:09 WEP-2L daemon.info configd[955]: The AP startup configuration was loaded successfully.

Jan  1 03:00:14 WEP-2L daemon.info networkd[987]: Networkd started

Jan  1 03:01:17 WEP-2L daemon.info networkd[987]: DHCP-client: Interface br0 obtained lease on 192.168.1.15.

Jan 23 07:17:14 WEP-2L daemon.info monitord[1055]: event: 'associated' mac: E4:0E:EE:BD:AE:6B ssid: 'WEP-2L_2.4GHz' int0


Environment scan

Note that during environment scan the device radio interface will be disabled, which will result in the impossibility of data transmission to Wi-Fi clients during scanning.


WEP-2L(root):/# monitoring scan-wifi

SSID                             |Mode |Security|MAC               |Channel|RSSI, dBm|Bandwidth, MHz                           
---------------------------------|-----|--------|------------------|-------|---------|--------------                                                           
ESRAP1_of30_smart                |AP   |off     |A8:F9:4B:B0:2C:C7 |6      |-65      |20                                       
litv_hots_2                      |AP   |off     |E0:D9:E3:8A:38:52 |1      |-65      |20                                       
test_001                         |AP   |off     |E0:D9:E3:4B:FB:30 |11     |-67      |20                                       
2G-COVID_TOWER                   |AP   |off     |E0:D9:E3:98:12:72 |11     |-71      |20                                       
Tam2.4G                          |AP   |wpa     |E0:D9:E3:98:1F:7A |1      |-73      |20                                       
litv_hots_1                      |AP   |off     |E0:D9:E3:8A:38:51 |1      |-77      |20                                       
WEP-2L_ZN_Personal               |AP   |wpa     |E0:D9:E3:49:79:06 |44     |-16      |20                                       
WEP-2L_ZN_Open                   |AP   |off     |E0:D9:E3:49:79:07 |44     |-17      |20                                       
Eltex-Guest                      |AP   |off     |CC:9D:A2:C7:D9:21 |36     |-38      |20                                       
Eltex-Local                      |AP   |wpa     |CC:9D:A2:C7:D9:22 |36     |-38      |20                                       
BRAS-Guest                       |AP   |off     |CC:9D:A2:C7:D9:20 |36     |-38      |20                                       
2L_301_nsk                       |AP   |off     |E8:28:C1:DA:C8:16 |56     |-41      |20                                       
chudo_waffly                     |AP   |wpa     |E0:D9:E3:70:94:00 |60     |-44      |20                                       
Eltex VAP                        |AP   |off     |A8:F9:4B:B0:40:70 |48     |-46      |20                                       
VK_enterprise                    |AP   |wpa     |E8:28:C1:DA:C8:99 |56     |-47      |20                                       
VK_portal                        |AP   |off     |E8:28:C1:DA:C8:98 |56     |-49      |20                                       
WOP-2ac                          |AP   |off     |E8:28:C1:00:FC:A1 |36     |-50      |80                                       
Open_VK_switch                   |AP   |off     |E8:28:C1:DA:C8:96 |56     |-50      |20                                       
testSSID10                       |AP   |off     |A8:F9:4B:B0:05:54 |40     |-51      |20                                       


Spectrum Analyzer

The spectrum analyzer provides information on channel utilization in the 2.4 and 5 GHz bands. The result is displayed as a percentage.

Note that during the spectrum analyzer operation all clients are disconnected from the access point. Clients will only reconnect when the spectrum analyzer is finished. The analysis time for all radio channels of the two bands is approximately 5 minutes.


The spectrum analyzer operaates only on those channels that are specified in the limit-channels parameter in the radio interface settings. For example, if the channels' 1 6 11 'are specified in the limit-channels on wlan0, and the channels '36 40 44 48' are specified on wlan1, then the spectrum analysis will be performed only for channels 1, 6, 11, 36, 40, 44, 48.

In order to analyze all channels of the range on which the radio interface operates, change the value of the use-limit-channels parameter in the settings of each radio interface to false. After receiving the results of the spectrum analyzer, set the use-limit-channels value back to the original value true.

For more information on configuring the radio interface through the CLI, see the Radio section.


WEP-2L(root):/# monitoring spectrum-analyzer

 Channel| CCA
       1|  81%
       2|  40%
       3|  14%
       4|  10%
       5|  36%
       6|  60%
       7|  40%
       8|   8%
       9|  14%
      10|  38%
      11|  75%
      12|  37%
      13|  18%
      36|  14%
      40|  12%
      44|  10%
      48|  18%
      52|   3%
      56|   5%
      60|   8%
      64|   6%
     132|   0%
     136|   0%
     140|   0%
     144|   1%
     149|  30%
     153|   1%
     157|   3%
     161|   2%
     165|   1%



The list of changes

Document versionIssue dateRevisions
Version 1.224.01.2022

Syncronization with firmware version 1.2.2

Added sections:

  • 5.4.2 The "WDS" submenu
  • 5.7 The “WDS” menu
  • 6.2.1 Network parameters configuration via set-management-vlan-mode utility
  • 6.2.2 IPv6 network parameters configuration
  • 6.5 WDS configuring
  • 6.6.5 Advanced system settings
  • 6.8.2 WDS
  • 6.8.7 Environment scan

Corrected:

  • 2.2 Device specification
  • 5.6.1 The “Summary” submenu
  • 5.6.2 The “VAP” submenu
  • 6.3.5 Advanced VAP settings
  • 6.8.1 Wi-Fi Clients
  • 6.8.3 Device info
Version 1.1
30.06.2020Syncronization with firmware version 1.1.0
Version 1.016.03.2020First issue
Firmware version 1.2.2