dLAN® 200 AVpro Wireless N The Network Innovation
® devolo dLAN 200 AVpro Wireless N
© 2012 devolo AG Aachen (Germany) While the information in this manual has been compiled with great care, it may not be deemed an assurance of product characteristics. devolo shall be liable only to the degree specified in the terms of sale and delivery. The reproduction and distribution of the documentation and software supplied with this product and the use of its contents is subject to written authorization from devolo.
Content Content 1 Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 1.1 Thank you for placing your trust in this devolo product . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 1.1.1 About this manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 1.2 CE conformity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Content 4.4 4.5 4.6 4.7 4.8 4.9 4.3.1 dLAN status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 4.3.2 WLAN status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 Device configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 4.4.1 Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Preface 5 1 Preface 1.1 Thank you for placing your trust in this devolo product devolo dLAN business solutions are a favourably priced option for using the power grid infrastructure in a building to establish a broadband IP network. The advantage this brings is obvious: no new cables have to be laid – expenditure and costs remain low. The dLAN 200 AVpro Wireless N is devolo's innovative access point for mobile as well as stationary network devices in a professional environment.
6 Preface devolo on the Internet For detailed information on our products, visit www.devolo.com. The download area provides you not only with product descriptions and documentation, but also updates of devolo software and your device's firmware. We especially recommend the descriptions on the topic of "dLAN networking" that contain a wealth of interesting background information. 1.
Introduction 7 2 Introduction dLAN is an intelligent, secure technology that lets you set up a home network easily, quickly and economically via your household electrical wiring, without the need for complex and expensive dedicated cabling. The available performance and effort required for the installation also compares favourably to traditional methods. 2.
8 Introduction ple logical networks that are independent of each other and can be better protected against intrusion and interception than switched networks. They optimise data distribution and relieve the burden on overloaded networks. Using VLANs prevents the need for complicated physical wiring. This gives you greater spatial flexibility and saves you having to purchase multiple costly individual devices (e.g. router, switches).
Introduction 9 쎲 WLAN time control with configurable usage times. 쎲 Two internal WLAN antennas; MIMO technology for the best transmission and reception performance. 2.5 Sample applications 2.5.1 dLAN 200 AVpro Wireless N as a WLAN access point By default, the dLAN 200 AVpro Wireless N is configured as a WLAN access point and makes the dLAN network connected via the mains outlet available wirelessly to other client devices, such as laptops, IP radios or IP telephones.
10 Introduction The following illustration shows how the Internet connection is set up using the dLAN 200 AVpro Wireless N and a router, and how the connection within the network is set up using additional dLAN AVpro devices. Fig.
Introduction 11 2.5.2 dLAN 200 AVpro Wireless N as a WLAN client Alternatively, the dLAN 200 AVpro Wireless N can also be configured as a WLAN client. In this case, the adapter connects the WLAN network with the devices in the dLAN network. This is especially practical if net- work access is not possible either via dLAN or via Ethernet wiring.
12 Introduction 2.5.3 dLAN 200 AVpro Wireless N and VLAN Using the VLAN function, the dLAN 200 AVpro Wireless N is now also capable of setting up complex networks in a more secure and structured manner. The following illustration shows three separate VLAN networks, within which data are transmitted via dLAN or WLAN using the respective dLAN 200 AVpro Wireless N. Fig.
Introduction 13 This example involves three port-based VLANs (colourcoded): 쎲 VLAN group one (PCs 1, 7, 8, 9) e.g. at Ethernet port two 쎲 VLAN group two (PCs 2, 10, 11, 12) e.g. at Ethernet port one 쎲 VLAN group three (PCs 3, 4, 5, 6) e.g. at Ethernet port three 쎲 One WLAN is assigned to each VLAN group. The configuration of the networking example can have the following appearance: 햲 Under VLAN configuration enable the VLAN function and create the desired VLANs with a corresponding VLAN ID.
14 Introduction devolo dLAN 200 AVpro Wireless N
Introduction 15 햳 Then under VLAN port settings define the assignment of the port and its behaviour. You can find a detailed functional description for the VLAN configuration under 4.8 VLAN configuration.
16 Introduction devolo dLAN 200 AVpro Wireless N
Initial use 17 3 Initial use This chapter covers everything you need to know to set up your dLAN 200 AVpro Wireless N. It will explain connecting the device and its functions. We will also briefly introduce the included devolo software and then guide you through its installation.
18 Initial use 3.1 Package contents Please ensure that the delivery is complete before beginning with the installation of your dLAN 200 AVpro Wireless N.
Initial use 19 3.3 Functions The dLAN 200 AVpro Wireless N has the following elements: 3.3.1 Control lamps Power Green: Lights up when dLAN 200 AVpro Wireless N is operational. the dLAN Green: The network connection is suitable for HD video streaming; flashes when data is being transmitted. Orange: The network connection is suitable for SD video streaming and online gaming; flashes when data is being transmitted.
20 Initial use 3.3.2 Buttons will find the 16-character security ID on the label on the back of the housing. All buttons can be enabled or disabled on the configuration interface. ON/OFF Use the ON/OFF button to switch the WLAN function on or off. Make sure that the WLAN function in the factory defaults is enabled and the WLAN encryption is set to WPA2. The default WLAN key is the security ID of the dLAN 200 AVpro Wireless N.
Initial use 21 dLAN Via the dLAN encryption button, you secure your dLAN network at the touch of a button: 쎲 To encrypt your dLAN AVpro network individually, press each encryption button on the connected devices for approx. 1 second – within 2 minutes. 쎲 To remove a dLAN AVpro device from your network, press the encryption button of the corresponding device for at least 10 seconds.
22 Initial use dLAN 200 AVpro Wireless N via commercially available network cables. 햳 The power outlet should be in range of the connected network device. The dLAN 200 AVpro Wireless N and the network device should be easily accessible. To switch off the dLAN 200 AVpro Wireless N or disconnect it from the mains supply, pull the power plug out of the power outlet. ETH 1 ETH 2 ETH 3 3.3.4 WLAN antennas The internal WLAN antennas are for connecting to other network devices wirelessly. 3.
Initial use 23 햵 In order to be able to configure the WLAN network, first install the dLAN 200 AVpro Wireless N software as described in the following chapter. 3.4.1 Software for Windows The installation wizard installs the adapter's configuration software as well as the devolo dLAN AVpro manager and the associated manual on the Windows operating system. 쎲 In addition to the individual encryption of your dLAN network, devolo dLAN AVpro manager offers other expanded dLAN functions.
24 Initial use devolo dLAN 200 AVpro Wireless N
Network configuration 25 4 Network configuration The dLAN 200 AVpro Wireless N has a built-in configuration interface that can be called up using a standard web browser. All settings for operating the device can be modified here. 4.1 Calling up the built-in configuration interface You will arrive at the built-in online configuration interface of the dLAN 200 AVpro Wireless N by using the dLAN AVpro manager program under Start All Programs devolo dLAN AVpro manager.
26 Network configuration The five central areas of the configuration interface are displayed on the left edge. Click the button of an area to move directly into it. 쎲 In the Status overview area, you get general information about all connected dLAN, WLAN and LAN devices. 쎲 You can change or modify the various device settings for security, network, dLAN and time under Device configuration. 쎲 You can change or modify WLAN settings in the WLAN configuration area.
Network configuration 27 devolo dLAN 200 AVpro Wireless N
28 Network configuration 4.3.1 dLAN status To display all connected dLAN devices, click either the Ready to operate icon or the dLAN devices arrow. Each connected dLAN device, regardless of whether it is connected locally or remote in the network, is dis- 4.3.2 WLAN status To display all connected WLAN devices, click either the Ready to operate icon or the WLAN stations arrow. Each connected WLAN client is displayed with its MAC address.
Network configuration 29 4.4 Device configuration In the configuration area of the device you can modify settings for security, network, dLAN, date and time. 4.4.1 Security In this area you can control the access to the configuration interface as well as enable and disable the functions of the interfaces and buttons on the dLAN 200 AVpro Wireless N.
30 Network configuration Password You can set a login password for access to the configuration interface. By default, the built-in configuration interface of the dLAN 200 AVpro Wireless N is not protected with a password. However, we recommend assigning a password when the installation of the dLAN 200 AVpro Wireless N is devolo dLAN 200 AVpro Wireless N complete to protect it against tampering by third parties.
Network configuration 31 햳 Call up the configuration interface again later; the following window appears first: 햴 Enter admin in the User name field and your individual password in the Password field. The admin user name cannot be changed.
32 Network configuration Interfaces You can enable or disable the interface on the dLAN 200 AVpro Wireless N by enabling or disabling the corresponding options. Buttons You can enable or disable the function of the WLAN, WPS and dLAN encryption buttons on the devolo dLAN 200 AVpro Wireless N Note that the dLAN 200 AVpro Wireless N can no longer be reached once all interfaces have been switched off. dLAN 200 AVpro Wireless N by enabling or disabling the corresponding options.
Network configuration 33 Configuration over the web The option The device can be configured over the web has to be enabled in order for the configuration interface to be accessible at all. 4.4.2 Network settings The dLAN 200 AVpro Wireless N also communicates via the TCP/IP protocol as a component of your home network. The IP address required for this can either be entered manually as a static address or obtained automatically from a DHCP server.
34 Network configuration Management VLAN If you use VLAN and have enabled it under VLAN configuration, specify a Management VLAN here by assigning the corresponding VLAN ID via the selection box. The configuration interface can be accessed only via the management VLAN. The factory defaults of the dLAN 200 AVpro Wireless N have the Management devolo dLAN 200 AVpro Wireless N VLAN configured with VLAN ID 1.
Network configuration 35 If you ever "lock" yourself out of the interface, e.g. by deleting all VLANs, the adapter has to be returned to the factory defaults by being reset (see the Reset section).
36 Network configuration 4.4.4 Time server A time server is a server on the Internet whose task consists of providing the exact time. Most time servers are coupled with a radio clock. To see which Internet time server your computer uses to communicate, simply click the clock in the lower right corner of the screen and select the Internet time tab. Enable the option Retrieve date and time automatically, so that the dLAN 200 AVpro Wireless N can automatically synchronise the date and time.
Network configuration 37 4.5 Disabling WLAN configuration If you would like, you can completely shut off the WLAN part of your dLAN 200 AVpro Wireless N, e.g. if you want to operate it exclusively as a simple dLAN device via the built-in Ethernet connections. To do so, under WLAN configuration select the Off mode and confirm your entry with Save WLAN mode or simply press the WLAN ON/OFF button on the housing.
38 Network configuration Keep in mind that after saving this setting, you will be disconnected from any existing wireless connection to the dLAN 200 AVpro Wireless N. In this case, configure the device via Ethernet or dLAN. 4.6 WLAN configuration as access point If you would like the dLAN 200 AVpro Wireless N to act as an access point, select Access point mode under WLAN configuration and confirm your entry with Save WLAN mode or simply press the WLAN ON/ OFF button on the housing.
Network configuration 39 devolo dLAN 200 AVpro Wireless N
40 Network configuration 4.6.1 WLAN basic settings In the WLAN basic settings you can set the time control and the RADIUS server, regardless of whether the dLAN 200 AVpro Wireless N acts as an access point or a client. These settings apply for both modes. For operation as an access point, a (transmission) channel must be specified. There are 13 channels available.
Network configuration 41 WLAN time control To be able to use the WLAN time control, the option Retrieve date and time automatically must be enabled under Device configuration Date and time. An active Internet connection is also required. (see 4.4.4 Time server) To be able to use the WLAN time control, enable the option Enable time control. The time control automatically switches your wireless network on and off at certain times of the day.
42 Network configuration You can define two time periods during which your wireless network is to be enabled for each weekday. Then the time control automatically switches the wireless network on or off. Keep in mind that, as long as the dLAN 200 AVpro Wireless N registers connected stations, the wireless network remains enabled. The wireless network is not switched off until the last station has logged off.
Network configuration 43 4.6.2 Security settings for the access point If you want to enable this WLAN network, select Enable this access point. The dLAN 200 AVpro Wireless N supports up to 4 SSIDs or access points (Multi SSID), i.e. up to 4 WLAN networks can be operated via the dLAN 200 AVpro Wireless N. The SSID specifies the name of your wireless network. You can see this name when logging onto the WLAN and thereby identify the correct subnet.
44 Network configuration WLAN filter In addition to encryption, you can secure your wireless network even more by using a WLAN filter to limit access via WLAN to the dLAN 200 AVpro Wireless N for selected devices. Even if the encryption is switched off, the device will not establish a connection.
Network configuration 45 The WLAN filter should be used only as an additional option. By using it you could limit access to your wireless network, but without encryption it would be relatively easy for third parties to eavesdrop on all of your data transmissions. To use the WLAN filter, enable the option Enable filters. Now you can enter various network devices by means of what is known as your MAC address for ac- cess to your dLAN 200 AVpro Wireless N. Confirm each entry with Add.
46 Network configuration The MAC address designates the hardware interface of each individual network device uniquely (e.g. the WLAN adapter of a computer or the Ethernet port of a printer). It consists of six double-digit hexadecimal numbers, each separated by a colon (e.g. 00:0B:3B:37:9D:C4). In general, the MAC address is on the housing of the device.
Network configuration 47 To secure the data transmission in your wireless network there are two security standards available. 쎲 The older and weaker WEP standard can protect communication with the help of a key having either 10 or 26 hexadecimal characters. 쎲 The state-of-the-art WPA and WPA2 (Wi-Fi Protected Access) methods allow individualised keys consisting of letters and numbers with a length of up to 63 characters. You can simply enter them via the keyboard.
48 Network configuration can limit access of clients to the dLAN 200 AVpro Wireless N to the method you have selected. In addition to the WPA/WPA2 encryption key, the dLAN 200 AVpro Wireless N also supports Enterprise Mode. As a central authentication server, the RADIUS server assumes the user administration (for multiple access points; see RADIUS server). Enterprise Mode does not support any WPS. Save all modified settings before leaving this configuration area again.
Network configuration 49 쑗 by pressing the Start setup button on the user interface under WLAN configuration Wi-Fi Protected Setup (WPS). WPS via PBC (Push Button Configuration): 햲 Start the encryption process dLAN 200 AVpro Wireless N on the 쑗 either by pressing the WPS button on the front panel of the device or 햳 Then press either the WPS key of the WLAN client you are adding or the WPS button on the configuration interface.
50 Network configuration encryption keys and establish a secure WLAN connection. The WLAN LED on the front panel indicates the synchronisation process by flashing. WPS via PIN: 햲 To interconnect WLAN clients securely in your wireless network via PIN variants, enter an individualised key in the configuration interface under WLAN configuration Wi-Fi Protected Setup (WPS) PIN and start the encryption process by pressing the Start setup button.
Network configuration 51 The operating state of the device is displayed under Status display.
52 Network configuration You can find a detailed description of the WLAN basic settings under 4.6.1 WLAN basic settings.
Network configuration 53 4.7.1 Security settings for the WLAN client In the SSID field, enter the SSID of the corresponding access point. To secure the data transmission in your wireless network there are two security standards available. 쎲 The older and weaker WEP standard can protect communication with the help of a key having either 10 or 26 hexadecimal characters.
54 Network configuration . Save all modified settings before leaving this configuration area again.
Network configuration 55 The factory defaults have the dLAN 200 AVpro Wireless N configured as an access point and the WPA2 WLAN encryption is set with the security ID as the default WLAN key. You will find the 16-character security ID on the label on the back of the housing.
56 Network configuration devolo dLAN 200 AVpro Wireless N
Network configuration 57 4.8.1 Create VLAN The factory defaults have VLAN 1 configured with VLAN ID 1. You can configure additional VLANs under Create VLAN. In doing so, a VLAN (VLAN 1 to VLAN 15) has to be selected and a VLAN ID (1 to 4094) assigned. When creating VLANs, already assigned VLAN IDs cannot be assigned a second time. Configured VLANs are illustrated in the overview.
58 Network configuration 4.8.3 VLAN port settings The VLAN port settings are configured here. The existing ports of the dLAN 200 AVpro Wireless N are listed in the first left column. The configured VLANs are listed in the row header. The ports can be assigned to the VLANs via the matrix. Multiple VLANs can be assigned to the Ethernet ports and the dLAN port.
Network configuration 59 WLAN ports can be assigned only to a VLAN. For more detailed help on verifying the settings, refer to our online FAQs on our website at www.devolo.com. If the WLAN mode Access Point is enabled, only the access points are assigned to the VLANs. If the WLAN mode WLAN client is enabled, only the WLAN client is assigned to the VLAN. only "tagged" frames (Tagged Only). If the All setting is enabled, all "untagged" frames are forwarded to the VLAN with the PVID configured for this port.
60 Network configuration 4.9 Management In the Management area you can reset the current configuration to the factory defaults, save it to your devolo dLAN 200 AVpro Wireless N computer as a file or restore it from there and update the firmware of the dLAN 200 AVpro Wireless N.
Network configuration 61 4.9.1 Resetting the configuration With the Management Reset configuration command, the dLAN 200 AVpro Wireless N is reset to the original factory defaults. In doing so, you lose your personal settings. The last-assigned dLAN password for the dLAN 200 AVpro Wireless N is also reset. To re-secure your dLAN AVpro network individually, read further at 4.4.3 dLAN settings.
62 Network configuration 4.9.2 Saving a configuration file To save the active configuration to your computer as a file, select the corresponding button in the area Man- devolo dLAN 200 AVpro Wireless N agement Save configuration file. Then enter a storage location and name for the settings file.
Network configuration 63 4.9.3 Restoring a configuration An existing configuration file can be sent to the dLAN 200 AVpro Wireless N in the area Management Restore device configuration and enabled there. Select a suitable file via the Browse… button and start the operation by clicking the Restore device configuration button. 4.9.4 Update firmware The firmware of the dLAN 200 AVpro Wireless N includes the software for operating the device.
64 Network configuration 햲 To bring the firmware up to the latest version, first go to the devolo website, www.devolo.com, and download the appropriate file for the dLAN 200 AVpro Wireless N to your computer. 햳 Then in the configuration dialogue, go to the area Management Update Firmware. Click Browse… and select the downloaded file. 햴 Then start the update procedure with the Update Firmware button. After a successful update, the dLAN 200 AVpro Wireless N restarts automatically.
dLAN network 65 5 dLAN network 5.1 Security in the dLAN Before you can use the dLAN 200 AVpro Wireless N in your dLAN network, first you have to connect it to other dLAN AVpro devices as a home network. Two specific pieces of information are especially important for this: 쎲 Shared use of the dLAN password serves as access control to the dLAN network and results in a delimited dLAN network.
66 dLAN network The following section contains exact instructions of encryption on the basis of possible network scenarios: Adapters cannot be configured while in Standby mode. Encrypting a new dLAN AVpro network with a dLAN 200 AVpro Wireless N and an additional dLAN AVpro adapter (Fig. 4) Once both dLAN AVpro adapters have been successfully connected, press each encryption button for >one second within two minutes of one another.
dLAN network 67 Expanding an existing dLAN AVpro network by adding another dLAN AVpro adapter (Fig. 5) encryption button (> one second) of your new dLAN AVpro adapter within two minutes. If you have already secured your existing dLAN AVpro network using the encryption button, use the same method to integrate further adapters.
68 dLAN network Removing a dLAN AVpro adapter from a network (Fig. 6) To remove a dLAN 200 AVpro Wireless N or another dLAN AVpro adapter from an existing network, press its encryption button for at least ten seconds. The device will be assigned a new randomly generated password and will thus no longer be able to access the network.
dLAN network 69 5.3 dLAN AVpro manager for Windows The installation wizard installs the devolo dLAN AVpro manager configuration software as well as the associated manual on the Windows operating system (see 3.4.1 Software for Windows). In addition to the individual encryption of your dLAN network and the security from unauthorised access, devolo dLAN AVpro manager offers other expanded dLAN functions.
70 dLAN network devolo dLAN 200 AVpro Wireless N
Appendix 71 6 Appendix For the permitted voltage range for operating the device and the power consumption, refer to the label on the rear side of the device. Additional technical information is available on the product sheet. 6.1 Important safety instructions All safety and operating instructions should be read and understood before using the device, and should be kept for future reference. 쎲 Never open the device. There are no user-serviceable parts inside the device.
72 Appendix 쑗 the power cable or plug is damaged. 쑗 liquid has been spilled on the device or objects have fallen into the device. 쑗 the device has been exposed to rain or water. 쑗 the device does not work, even though the operating instructions have been followed properly. 쑗 the device’s case is damaged. 6.
Appendix 73 3 Warranty procedure a) If defects appear during the warranty period, the warranty claims must be made immediately, at the latest within a period of 7 days. b) In the case of any externally visible damage arising from transport (e.g. damage to the housing), the person carrying out the transportation and the sender should be informed immediately.
74 Appendix devolo dLAN 200 AVpro Wireless N
Index C CE declaration 6 Control lamps 19 D Default WLAN key 20, 48, 55 devolo dLAN AVpro manager 23, 69 DHCP server 33 Disposal of old devices 72 dLAN AVpro network 65 dLAN encryption 35 dLAN password 35 E Encryption button 65 Enterprise Mode 48 Enterprise mode 53 I Important safety instructions 71 IP address 33 L LAN (Network connection) 21 M MAC address 46 Management VLAN 34 Multi SSID 43 P Package contents 18 R RADIUS server 42 Reset 21 S Security ID 20 Software installation 23 SSID 43 System requireme
devolo dLAN 200 AVpro Wireless N
