User Manual EKI-6331AN-BE/ EKI-6332GN-AE IEEE 802.
Copyright The documentation and the software included with this product are copyrighted 2016 by Advantech Co., Ltd. All rights are reserved. Advantech Co., Ltd. reserves the right to make improvements in the products described in this manual at any time without notice. No part of this manual may be reproduced, copied, translated or transmitted in any form or by any means without the prior written permission of Advantech Co., Ltd. Information provided in this manual is intended to be accurate and reliable.
Declaration of Conformity CE This product has passed the CE test for environmental specifications. Test conditions for passing included the equipment being operated within an industrial enclosure. In order to protect the product from being damaged by ESD (Electrostatic Discharge) and EMI leakage, we strongly recommend the use of CE-compliant industrial enclosure products.
Technical Support and Assistance 1. 2. Visit the Advantech web site at www.advantech.com/support where you can find the latest information about the product. Contact your distributor, sales representative, or Advantech's customer service center for technical support if you need additional assistance.
Safety Instructions 1. 2. 3. Read these safety instructions carefully. Keep this User Manual for later reference. Disconnect this equipment from any AC outlet before cleaning. Use a damp cloth. Do not use liquid or spray detergents for cleaning. 4. For plug-in equipment, the power outlet socket must be located near the equipment and must be easily accessible. 5. Keep this equipment away from humidity. 6. Put this equipment on a reliable surface during installation.
Safety Precaution - Static Electricity Follow these simple precautions to protect yourself from harm and the products from damage. To avoid electrical shock, always disconnect the power from your PC chassis before you work on it. Don't touch any components on the CPU card or other cards while the PC is on. Disconnect power before making any configuration changes. The sudden rush of power as you connect a jumper or install a card may damage sensitive electronic components.
Contents Chapter 1 Introduction..........................................1 1.1 1.2 Introduction ............................................................................................... 2 Appearance............................................................................................... 2 Figure 1.1 EKI-6332GN-AE/EKI-6331AN-BE .............................. 2 Key Features............................................................................................. 3 Typical Application ......
4.2 4.3 4.4 4.5 Chapter 5 Management ...................................... 39 5.1 Password ................................................................................................ 40 Figure 5.1 Password Settings.................................................... 40 Upgrade Firmware .................................................................................. 40 Figure 5.2 Firmware Upgrade.................................................... 40 Backup/ Retrieve Settings....................
Appendix A ASCII ...................................................59 A.1 ASCII....................................................................................................... 60 Table A.1: ASCII ........................................................................
EKI-6331AN-BE/EKI-6332GN-AE User Manual x
Chapter 1 Introduction 1
1.1 Introduction EKI-6332GN-AE/EKI-6331AN-BE is a high-performance last-mile broadband solution that provides reliable wireless network coverage. Designed with IEEE 802.11n standard, 2x2 MIMO technology and high output power makes it possible deliver up to 300Mbps high data rate with longer range for general purpose application. EKI6332GN-AE operates at 2.4GHz band while EKI-6331AN-BE operates at 5GHz band. EKI-6332GN-AE/EKI-6331AN-BE can be used as the access point, the client, the WDS and the AP Repeater.
Compliant with IEEE 802.11n standard Support passive PoE which is supplied with 24V. High reliable watertight housing endures almost any harsh environments Support 64/128/152-bit WEP and 802.1X, WPA, WPA2, WPA&WPA2,WPAPSK, WPA2-PSK, and WPA-PSK&WPA2-PSK etc User-friendly Web and SNMP-based management interface EKI-6332GN-AE/EKI-6331AN-BE can be applied into the following environments: Cost-effectively provide long distance backhaul for remote areas (e.g.
EKI-6331AN-BE/EKI-6332GN-AE User Manual 4
Chapter 2 2 Hardware Installation
This chapter describes safety precautions and product information you have to know and check before installing EKI-6332GN-AE/EKI-6331AN-BE. 2.1 Preparation before Installation 2.1.1 Professional Installation Required Please seek assistance from a professional installer who is well trained in the RF installation and knowledgeable in the local regulations. 2.1.2 Safety Precautions 1. 2. 3. 4. 5. To keep you safe and install the hardware properly, please read and follow these safety precautions.
Note! Product CD contains Quick Installation Guide and User Manual. Pole Mounting Ring Round Cable Suppression Core 24VDC Power Cord & PoE Injector Warning! Users MUST use the “Power cord & PoE Injector” shipped in the box with EKI-6332GN-AE/EKI-6331AN-BE. Use of other options will likely cause damage to EKI-6332GN-AE/EKI-6331AN-BE. 7 EKI-6331AN-BE/EKI-6332GN-AE User Manual Hardware Installation The product package you have received should contain the following items.
2.2 Hardware Installation 2.2.1 Connect up 1. The bottom of the Access Point is a movable cover. Grab the cover and pull it back harder to take it out as the figure shown below. 2. Plug a standard Ethernet cable into the RJ45 port.
Slide the cover back and press down the lock button to seal the bottom of the Access Point. EKI-6332GN-AE/EKI-6331AN-BE is equipped with a grounding wire. It is important that the Access Point, cables, and PoE Injector must be properly connected to earth ground during normal use against surges or ESD. 1. Remove the screw on the grounding point at the bottom of the Access Point. 2. Put the grounding wire on the grounding point at the bottom of the Access Point. Then screw the grounding wire to tighten up.
2.2.3 Install External Antennas The Access Point provides two reverse SMA antenna connectors for connecting external antennas. 1. Connect external antennas that came with the package to the SMA-type connectors on top of the Access Point. For longer coverage distance, it is recommended that higher gain antennas be used to best suit the application. Warning! Users MUST power off the Access Point first before connecting the external antenna to it.
3. You may turn one antenna 45 degrees to the left and the other 45 degrees to the right. The tilted antennas are a reasonable way to operate and the best way if the antennas are fairly close together since they couple together much less than if they are both pointed in the same direction (parallel). Note! The polarization of antennas should be properly aligned. Maximum signal strength between bridges occurs when both bridges are using identical polarization.
4. Tighten up the connector joint clockwise to fix the antennas. 5. To adjust antennas, loose the connector joint counterclockwise first, then adjust antenna to the desired position. DO NOT bend or turn the antennas without loosening the connector joint, otherwise, damage might be caused to the antennas.
Antenna installation is complete. Chapter 2 6. 1. Turn the Access Point over. Put the pole mounting ring through the middle hole of it. Note that you should unlock the pole mounting ring with a screw driver before putting it through the device as the following right picture shows. 13 EKI-6331AN-BE/EKI-6332GN-AE User Manual Hardware Installation 2.2.
2. Mount the Access Point steadily to the pole by locking the pole mounting ring tightly. 2.2.5 Power Up 1. Connect power cord to the PoE injector as the following right picture shows. 2. Connect the Ethernet cable that connects the Access Point to the “POE” port of the PoE injector as figured below.
Connect the power plug to a power socket. The Access Point will be powered up immediately. 2.2.6 Connect to the Access Point To be able to configure and manage the Access Point, please do the followings: 1. Open the ferrite core by unsnapping the connector latches. The core will open, revealing a concave surface. Lay the Ethernet cable into the core, usually within 2 to 3 inches of the connector.
4. Close the core and snap the halves back together. 5. Connect the Ethernet cable with suppression core to the “Data In” port of the PoE injector.
Connect the other end of Ethernet cable to a PC or a switch hub. The hardware installation is complete. Chapter 2 6. Hardware Installation To configure the Access Point, please refer to Chapter 3 Basic Settings.
EKI-6331AN-BE/EKI-6332GN-AE User Manual 18
Chapter 3 Basic Settings 3
3.1 Factory Default Settings We’ll elaborate EKI-6332GN-AE/EKI-6331AN-BE factory default settings. You can reacquire these parameters by default. If necessary, please refer to the “Restore Factory Default Settings”. Table 3.1: EKI-6332GN-AE/EKI-6331AN-BE Factory Default Settings Features Factory Default Settings Username admin Password password Wireless Device Name apXXXXXX (X represents the last 6 digits of Ethernet MAC address) Operating Mode AP Data Rate Auto LAN IP Address 192.168.1.
EKI-6332GN-AE/EKI-6331AN-BE provides you with user-friendly Web-based management tool. Open Web browser and enter the IP address (Default: 192.168.1.1) of EKI6332GN-AE/EKI-6331AN-BE into the address field. You will see the login page as below. Chapter 3 3.3 How to Login the Web-based Interface Basic Settings Figure 3.1 Login Page Enter the username (Default: admin) and password (Default: password) respectively and click “Login” to login the main page of EKI-6332GN-AE/EKI-6331ANBE.
Note! The username and password are case-sensitive, and the password should be no more than 19 characters! 3.4 Basic System Settings For users who use EKI-6332GN-AE/EKI-6331AN-BE for the first time, it is recommended that you begin configuration from “Basic Settings” in “System” shown below: Figure 3.3 Basic System Settings Device Name: Specify the device name, which is composed of no more than 15 characters with (0-9), (A-Z), (a-z) or (-).
Note! When the IP address of the Access Point is changed, the clients on the network often need to wait for a while or even reboot before they can access the new IP address. For an immediate access to the bridge, please flush the netbios cache on the client computer by running the “nbtstat –r” command before using the device name of the Access Point to access its Web Management page.
Figure 3.5 TCP/IP Settings (Router) WAN Access Type: Specify the Internet access method to Static IP, DHCP or PPPOE. Users must enter WAN IP Address, Subnet Mask, Gateway settings provided by your ISPs. LAN Settings: When DHCP Server is disabled, users can specify IP address and subnet mask for the Access Point manually. Make sure the specified IP address is unique on your network in order to prevent IP conflict.
Compliant with NTP, EKI-6332GN-AE/EKI-6331AN-BE is capable of keeping its time in complete accord with the Internet time. Make configuration in “Time Settings” from “System”. To use this feature, check “Enable NTP Client Update” in advance. Current Time: Display the present time in Yr, Mon, Day, Hr, Min and Sec. Time Zone Select: Select the time zone from the dropdown list. NTP Server: Select the time server from the “NTP Server” dropdown list.
Authentication RADIUS Server This is for RADIUS authentication. It can communicate with RADIUS through IP Address, Port and Shared Secret. – IP Address: Enter the IP address of the Radius Server; – Port: Enter the port number of the Radius Server; – Shared Secret: This secret, which is composed of no more than 31 characters, is shared by EKI-6332GN-AE/EKI-6331AN-BE and RADIUS during authentication. Global-Key Update: Check this option and specify the time interval between two global-key updates. 3.
27 EKI-6331AN-BE/EKI-6332GN-AE User Manual Basic Settings Chapter 3 wireless network. Keep it identical on all those devices. Note that the SSID is case-sensitive and cannot exceed 32 characters. Broadcast SSID: Under AP mode, hiding network name is necessary when you are in a wireless environment that may have potential risk.
3.9 Site Survey Under wireless client mode, EKI-6332GN-AE/EKI-6331AN-BE is able to perform site survey, through which, information on the available Access Points will be detected. Open “Basic Settings” in “Wireless”, by clicking the “Site Survey” button beside “Wireless Mode” option, the wireless site survey window will pop up with a list of available AP in the vicinity. Select the AP you would like to connect and click “Selected” to establish connection. Figure 3.
Available in AP mode, EKI-6332GN-AE/EKI-6331AN-BE allows up to 8 virtual SSIDs on a single BSSID and to configure different profile settings such as security and VLAN ID to each SSID. To create a virtual AP, you may check the Enabled box of the profile and click on the profile (eg. Profile 2) to configure wireless and security settings. Hit Apply to active the profile. Chapter 3 3.10 VAP Profile Settings Basic Settings Figure 3.10 VAP Profile Settings Figure 3.
ronment that may have potential risk. By disabling broadcast SSID, the STA cannot scan and find EKI-6332GN-AE/EKI-6331AN-BE, so that malicious attack by some illegal STA could be avoided. Wireless Separation: Wireless separation is an ideal way to enhance the security of network transmission. Under the mode except wireless client mode, enable “Wireless Separation” can prevent the communication among associated wireless clients. WMM Support: WMM (Wi-Fi Multimedia) is a subset of 802.11e.
Chapter 4 4 Advanced Settings
4.1 Advanced Wireless Set tings Open “Advanced Settings” in “Wireless” to make advanced wireless settings. Figure 4.1 Advanced Wireless Settings MPDU/A-MSDU Aggregation: The data rate of your AP except wireless client mode could be enhanced greatly with this option enabled; however, if your wireless clients don’t support AMPDU/A-MSDU aggregation, it is not recommended to enable it. Short GI: Under 802.
4.2 Traffic Shaping It allows the administrator to manage the traffic flow to ensure optimal performance. 33 EKI-6331AN-BE/EKI-6332GN-AE User Manual Advanced Settings Figure 4.2 Traffic Shaping Enable Traffic Shaping: Check this box to control the overall bandwidth for a specific VAP network. Interface Selection: Select the VAP network you would like to enable traffic shaping. Outgoing Traffic Rate: To specify maximum outgoing bandwidth to a certain rate in kbit/s.
4.3 Wireless Security Settings To prevent unauthorized radios from accessing data transmitting over the connectivity, EKI-6332GN-AE/EKI-6331AN-BE provides you with rock solid security settings. Open “Profile Setting” in “Wireless” and enter “VAP Profile 1 Settings” as below. Figure 4.3 Security Settings Network Authentication – Open System: It allows any device to join the network without performing any security check.
We strongly recommend you enable wireless security on your network! Only setting the same Authentication, Data Encryption and Key in EKI6332GN-AE/EKI-6331AN-BE and other associated wireless devices, can the communication be established! 35 EKI-6331AN-BE/EKI-6332GN-AE User Manual Advanced Settings Note! Chapter 4 – WPA&WPA2 with RADIUS: Available in AP mode, it provides options of WPA (TKIP) or WPA2 (AES) for the client.
4.4 Access Control The Access Control appoints the authority to wireless client on accessing EKI6332GN-AE/EKI-6331AN-BE, thus a further security mechanism is provided. This function is available only under AP mode. Open “Access Control” in “Wireless” as below. Figure 4.
Bridge mode extends the range of your network without having to use cables to link the Access Points by using the Wireless Distribution System (WDS): Simply put, you can link the Access Points wirelessly. To enable Bridge mode, please go to Wireless > Basic Settings and choose “Bridge” in Operation Mode. Then go to “WDS Settings” in “Wireless” as below: Enter the MAC address of another AP you wirelessly want to connect to into the appropriate field and click “Apply” to save settings.
EKI-6331AN-BE/EKI-6332GN-AE User Manual 38
Chapter 5 Management 5
5.1 Password From “Password Settings” in “Management”, you can change the password to manage your IEEE 802.11n VAC Access Point. Figure 5.1 Password Settings Current Password: Enter the current password. New Password: Enter the new password. Confirm Password: Enter the new password again for confirmation. Note! The password is case-sensitive and its length cannot exceed 19 characters! 5.
Do NOT cut the power off during upgrade, otherwise the system may crash! 5.3 Backup/ Retrieve Settings Figure 5.3 Backup/Retrieve Settings Save Setting to File: By clicking “Save”, a dialog box will pop up. Save it, then the configuration file ap.cfg will be generated and saved to your local computer. Load Settings from File: By clicking “Browse”, a file selection menu will appear, select the file you want to load, like ap.cfg; Click “Upload” to load the file.
5.4 Restore Factory Default Settings The IEEE 802.11n VAC Access Point provides two ways to restore the factory default settings: Restore factory default settings via Web From “Configuration File”, clicking “Reset” will eliminate all current settings and reboot your device, then default settings are applied. Figure 5.4 Restore to Default Settings Restore factory default settings via Reset Button If software in IEEE 802.
Under Wireless Client mode, when EAP-TLS is used, the RADIUS server must know which user certificates to trust. The Server can trust all certificates issued by a given CA. To import a user certificate, from Import User Certificates, click “Browse” and specify the location where the user certificate is placed. Click “Import”. Chapter 5 5.6 User Certificate Management Figure 5.6 User Certificate Delete User Certificate: Delete the selected user certificate.
5.8 SNMP Management The IEEE 802.11n VAC Access Point supports SNMP for convenient remote management. Open “SNMP Settings” in “Management” shown below. Set the SNMP parameters and obtain MIB file before remote management. Figure 5.8 SNMP Management Protocol Version: Select the SNMP version, and keep it identical on the IEEE 802.11n VAC Access Point and the SNMP manager. The IEEE 802.11n VAC Access Point supports SNMP v2/v3.
Chapter 5 – Access Type: Select “Read Only” or “Read and Write” accordingly. – Authentication Protocol: Select an authentication algorithm. SHA authentication is stronger than MD5 but is slower. – Privacy Protocol: Specify the encryption method for SNMP communication. None and DES are available. None means no encryption is applied. DES is a Data Encryption Standard that applies a 58-bit key to each 64-bit block of data.
EKI-6331AN-BE/EKI-6332GN-AE User Manual 46
Chapter 6 Monitoring Tools 6
6.1 System Log System log is used for recording events occurred on the IEEE 802.11n VAC Access Point, including station connection, disconnection, system reboot and etc. Open “System Log” in “Tools” as below. Figure 6.1 Syslog Remote Syslog Server: Enable System log to alert remote server. – IP Address: Specify the IP address of the remote server. – Port: Specify the port number of the remote server. 6.
Ping Interval: Specify the interval time to ping the remote unit. Startup Delay: Specify the startup delay time to prevent reboot before the IEEE 802.11n VAC Access Point is fully initialized. Failure Count To Reboot: If the ping timeout packets reached the value, the IEEE 802.11n VAC Access Point will reboot automatically.
EKI-6331AN-BE/EKI-6332GN-AE User Manual 50
Chapter 7 Status 7
7.1 View Basic Information Open "Information" in "Status" to check the basic information of the Access Point, which is read only. Information includes system information, LAN settings, wireless setting and interface status. Click "Refresh" at the bottom to have the real-time information. Figure 7.1 Basic Information 7.2 View Association List Open "Connections" in "Status" to check the information of associated wireless devices such as MAC address, signal strength, connection time, IP address, etc.
Chapter 7 By clicking on the MAC address of the selected device on the web you may see more details including device name, connection time, signal strength, noise floor, ACK timeout, link quality, IP information, current data rate, current TX/RX packets. Status Figure 7.3 Association Node Details 7.3 View Network Flow Statistics Open "Statistics" in "Status" to check the data packets received on and transmitted from the wireless and Ethernet ports. Click "Refresh" to view current statistics. Figure 7.
7.4 View ARP Table Open "ARP Table" in "Status" as below. Click "Refresh" to view current table. Figure 7.5 ARP Table 7.5 View Bridge Table Open "Bridge Table" in "Status" as below. Click "Refresh" to view current connected status.. Figure 7.6 Bridge Table 7.6 View Routing Table Available in Router mode, the routing table shows the current route information. Figure 7.
Available in Router mode, the DHCP allows to check the assigned IP address, MAC address and time expired for each DHCP leased client. Click "Refresh" to view current table. Chapter 7 7.7 View Active DHCP Client Table Status Figure 7.
EKI-6331AN-BE/EKI-6332GN-AE User Manual 56
Chapter 8 Troubleshooting 8
This chapter provides troubleshooting procedures for basic problems with EKI6332GN-AE/EKI-6331AN-BE. For warranty assistance, contact your service provider or distributor for the process. Q1. How to know the MAC address of EKI-6332GN-AE/EKI-6331AN-BE? MAC Address distinguishes itself by the unique identity among network devices. There are two ways available to know it. • Each device has a label posted with the MAC address. Please refer below. Figure 8.
Appendix A ASCII A
A.1 ASCII WEP can be configured with a 64-bit, 128-bit or 152-bit Shared Key (hexadecimal number or ACSII). As defined, hexadecimal number is represented by 0-9, A-F or a-f; ACSII is represented by 0-9, A-F, a-f or punctuation. Each one consists of two-digit hexadecimal. Table A.
Appendix A ASCII 61 EKI-6331AN-BE/EKI-6332GN-AE User Manual
www.advantech.com Please verify specifications before quoting. This guide is intended for reference purposes only. All product specifications are subject to change without notice. No part of this publication may be reproduced in any form or by any means, electronic, photocopying, recording or otherwise, without prior written permission of the publisher. All brand and product names are trademarks or registered trademarks of their respective companies. © Advantech Co., Ltd.
