User Guide For TP-Link Omada Access Points 1910013169 REV4.7.
CONTENTS About This User Guide........................................................................................................ 1 Overview.................................................................................................................................. 3 1 Quick Start........................................................................................................................ 4 1.1 Determine the Management Method..............................................................
Monitor the Network...................................................................................................62 3.1 Monitor the EAP.........................................................................................................................................63 3.2 Monitor the Wireless Parameters.......................................................................................................65 Monitor the SSIDs.....................................................................
5.3 Configure the System Time..................................................................................................................94 Configure the System Time...................................................................................................................... 95 Configure Daylight Saving Time.............................................................................................................. 97 5.4 Reboot and Reset the EAP............................................
About This User Guide When using this guide, notice that features available in the EAP may vary by model and software version. Availability of the EAP may also vary by region or ISP. All images, steps, and descriptions in this guide are only examples and may not reflect your actual experience. Some models featured in this guide may be unavailable in your country or region. For local sales information, visit https://www.tp-link.com . The information in this document is subject to change without notice.
More Info Some models featured in this guide may be unavailable in your country or region. For local sales information, visit https://www.tp-link.com . For technical support, latest software, and management app, visit https://www.tp-link.com/support . The Quick Installation Guide can be found where you find this guide or inside the package of the EAP. The authentication information can be found where you find this guide. Specifications can be found on the product page at https://www.tp-link.com .
Overview Omada series products provide wireless coverage solutions for small-medium business and households. They can either work independently as standalone APs or be centrally managed by Omada Software Controller, Omada Hardware Controller (OC200/OC300), or Omada Cloud-Based Controller, providing a flexible, richly-functional but easily configured wireless network for smallmedium business and households.
1 Quick Start This chapter introduces how to build a wireless network using the EAPs and how to complete the basic settings. Follow the steps below: 1.1 Determine the Management Method 1.2 Connect Network Devices 1.3 Log in to the EAP and Change the SSID 1.
1.1 Determine the Management Method Before building your network, choose a proper method to manage your EAPs. You have the following two options: ■ Controller Mode If you want to manage a large-scale network centrally, choose Controller Mode. In Controller Mode, you can configure and monitor mass EAPs, switches, and gateways via Omada SDN Controller. For detailed instructions, go to the Support Webpage of Omada Controller and download the User Guide.
1.2 Connect Network Devices To connect your EAPs to the local network, refer to the following topology. Internet EAP WAN LAN Router (DHCP Server) EAP Clients 1. Connect the WAN port (or Internet port) of the router to the internet. 2. Connect your EAPs to the LAN port of the router. 3. Connect your wireless clients such as phones, tablets and laptops to the WiFi of the EAP. The default SSID is printed at the bottom of the EAP. Now you can surf the internet on your phones, tablets and laptops.
Tips: • If you want to power your EAPs using a PoE switch, refer to the following topology. Internet EAP WAN LAN Router (DHCP Server) PoE Switch EAP Clients • The router is the gateway of the network, and devices in the LAN surf the internet via the router. At the same time, the router acts as a DHCP server to assign dynamic IP addresses to the EAPs and clients. • The dual-band EAP has two default SSIDs named TP-Link_2.4GHz_XXXXXX on the 2.
1.3 Log in to the EAP and Change the SSID By default, anyone can connect to the WiFi of EAP without authentication, because the default SSID has no password. For security purposes, we recommend changing the default SSID. Log in to the EAP before changing the default SSID. You can use either Omada App on your mobile device or the web browser on your PC. Choose a method from the following sections and follow the instructions. Tips: • Only one user is allowed to log in to the EAP at one time.
2. Connect your mobile device to the WiFi of the EAP. The default SSID is printed at the bottom of the EAP. 3. Launch the Omada app, tap Standalone APs and wait for the EAP to be discovered. Tips: All the EAPs in the same subnet will be discovered by Omada app and shown on the page.
4. Tap on the EAP appearing on the page. Set a new username and password for your login account of the EAP. 5. Change the SSID and password to keep your wireless network secure. Tap Next.
6. Confirm the settings in the summary page. Tap Next, and the settings will take effect in several minutes. 7. To join your new wireless network, select the SSID and tap Join.
8. Tap Continue to go to the managment page. In this page, you can view the information and settings of the EAP. If you want to change the settings incuding radio, SSID and device account, tap . Now you can connect your phones, tablets and laptops to the new WiFi. If you cannot access the internet, follow the FAQ to troubleshoot the problem.
1. Set your PC to obtain an IP address automatically. 2. Connect your PC to the WiFi of the EAP. The default SSID is printed at the bottom of the EAP.
3. Make sure that your PC has got the IP address, default gateway, and DNS server from the DHCP server. 4. To log in to the EAP, launch a web browser and enter http://tplinkeap.net in the address bar. The login page will appear. By default, both the username and password are admin.
5. After logging in to the EAP, follow the step-by-step instructions to complete the basic configurations. In the pop-up window, configure a new username and a new password for your user account, then click Next. 6. Configure the SSID and password. For the dual-band EAP, you can configure the SSID and password for both 2.4GHz and 5GHz. Click Save. Tips: You can skip this step and configure wireless settings later on the management page. If needed, you can also create more SSIDs.
7. The following page will appear. Make sure that your device has connected to the new wireless network and tick the checkbox. Then click Finish. Now you can connect your phones, tablets and laptops to the new WiFi. If you cannot access the internet, follow the FAQ to troubleshoot the problem. ■ Using Web Browser on Your PC and Connecting to the Ethernet 1. Get the IP address of the EAP. There are two methods. • Using DHCP Client List of the Router Log in to the router which acts as the DHCP server.
the bottom of the EAP. In the following figure, for example, the IP address of the EAP is 192.168.0.118. Tips: When the DHCP server is not available in your network, the EAP has the DHCP fallback IP address, which is 192.168.0.254 by default. • Using EAP Discovery Utility Go to https://www.tp-link.com/download/EAP-Controller.html#EAP_Discovery_Tool to download, install and launch EAP Discovery Utility on your PC.
scan all EAPs in the same network segment, and find the IP address of the EAP. In the following figure, for example, the IP address of the EAP is 192.168.0.5. Tips: Some EAP models only works with certain software version of Discovery Utility. If your Discovery Utility can’t discover your EAP anyway, try a different software version. 2. To log in to the EAP, launch a web browser and enter the IP address of the EAP in the address bar. The login page will appear.
3. After logging in to the EAP, follow the step-by-step instructions to complete the basic configurations. In the pop-up window, configure a new username and a new password for your user account, then click Next. 4. Configure the SSID and password. For the dual-band EAP, you can configure the SSID and password for both 2.4GHz and 5GHz. Click Save. Tips: You can skip this step and configure wireless settings later on the management page. If needed, you can also create more SSIDs.
5. The following page will appear. Make sure that your device has connected to the new wireless network and tick the checkbox. Then click Finish. Now you can connect your phones, tablets and laptops to the new WiFi. If you cannot access the internet, follow the FAQ to troubleshoot the problem.
1.4 Configure and Manage the EAP If you use the web browser to configure your EAP, you can configure more advanced functions according to your needs, and manage it conveniently on the web page. On the top of the page, you can click support website. to log out and click to open the technical There are four tabs: Status, Wireless, Management and System. The following table introduces what you can configure under each tab, and the following chapters discuss these topics in detail.
2 Configure the Network This chapter introduces how to configure the network parameters and the advanced features of the EAP, including: • 2.1 Configure the Wireless Parameters • 2.2 Configure Portal Authentication • 2.3 Configure VLAN • 2.4 Configure MAC Filtering • 2.5 Configure Scheduler • 2.6 Configure Band Steering • 2.7 Configure QoS • 2.
2.1 Configure the Wireless Parameters To configure the wireless parameters, go to the Wireless > Wireless Settings page. For a dual-band EAP, there are two bands: 2.4GHz and 5GHz. The wireless parameters are separately set on each band. You can click wireless parameters on this band.
Before configuring the wireless parameters on each band, check the box to enable 2.4GHz or 5GHz Wireless Radio. Only when this option is enabled will the wireless radio on 2.4GHz or 5GHz band works. Demonstrated with 2.4GHz, the following sections introduce these contents: 2.1.1 Configure SSIDs and 2.1.2 Configure Wireless Advanced Settings . 2.1.1 Configure SSIDs SSID (Service Set Identifier) is used as an identifier for a wireless LAN, and is commonly called as the “network name“.
Follow the steps below to create an SSID on the EAP: 1. If your EAP is a dual-band device, click which the new SSID will be created. 2. Click to choose a frequency band on to add a new SSID on the chosen band. Tips: You can also click to edit the specific SSID which already exists in the list. And you can click to delete the SSID in the list. 3. Configure the following required parameters for this SSID: SSID Specify a name for the wireless network.
protection for wireless networks. Since WPA-Personal and WPA-Enterprise are much safer than WEP, we recommend that you choose WPA-Personal or WPA-Enterprise if your clients also support them. Note: WEP is not supported in 802.11n mode or 802.11ac mode. If WEP is applied in 802.11n, 802.11 ac or 802.11n/ac mixed mode, the clients may not be able to access the wireless network. If WEP is applied in 802.11b/g/n mode (2.4GHz) or 802.11a/n (5GHz), the EAP may work at a low transmission rate.
Key Value Enter the WEP keys. The length and valid characters are determined by the key format and key type. • WPA-Enterprise WPA-Enterprise (Wi-Fi Protected Access-Enterprise) is a safer encryption method compared with WEP and WPA-Personal. It requires a RADIUS server to authenticate the clients via 802.1X and EAP (Extensible Authentication Protocol). WPA-Enterprise can generate different passwords for different clients, which ensures higher network security.
Encryption Select the Encryption type. Note that some encryption type is only available under certain circumstances. Auto: The default setting is Auto and the EAP will select TKIP or AES automatically based on the client device’s request. TKIP: Temporal Key Integrity Protocol. TKIP is not supported in 802.11n mode, 802.11ac mode or 802.11n/ac mixed mode. If TKIP is applied in 802.11n, 802.11 ac or 802.11n/ac mixed mode, the clients may not be able to access the wireless network.
• WPA-Personal WPA-Personal is based on a pre-shared key. It is characterized by high safety and simple settings, so it is mostly used by common households and small businesses. The following table introduces how to configure each item: Version Select the version of WPA-Personal according to your needs. If you select WPA/WPA2-PSK, the EAP automatically decides whether to use WPA-PSK or WPA2-PSK during the authentication process. Encryption Select the Encryption type.
2.1.2 Configure Wireless Advanced Settings Proper wireless parameters can improve the performance of your wireless network. This section introduces how to configure the advanced wireless parameters of the EAP, including Radio Setting, Load Balance, Airtime Fairness and More Settings. Radio Setting Radio settings directly control the behavior of the radio in the EAP and its interaction with the physical medium; that is, how and what type of signal the EAP emits.
Select the frequency band (2.4GHz/5GHz) and configure the following parameters. Wireless Mode Select the IEEE 802.11 mode the radio uses. • For 2.4GHz: 802.11b/g/n/ax mixed: All of 802.11b, 802.11g, 802.11n, and 802.11ax clients operating in the 2.4GHz frequency can connect to the EAP. Note that 802.11ax is only available for certain devices. 802.11b/g/n mixed: All of 802.11b, 802.11g, and 802.11n clients operating in the 2.4GHz frequency can connect to the EAP. 802.11b/g mixed: Both 802.11b and 802.
Channel Limit Check the box to enable the Channel Limit function. With this function enabled, the wireless frequency 5150MHz~5350MHz will be disabled. This function can influence the available options in Channel. This feature is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface. Channel Select the channel used by the EAP. For example, 1/2412MHz means that the channel is 1 and the frequency is 2412MHz.
Airtime Fairness Note: Airtime Fairness is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface. With Airtime Fairness enabled, each client connected to the EAP can get the same amount of time to transmit data, avoiding low-data-rate clients to occupy too much network bandwidth. Compared with the relatively new client devices, some legacy client devices support slower wireless rate.
More Settings Proper wireless parameters can improve the network’s stability, reliability and communication efficiency. The advanced wireless parameters consist of Beacon Interval, DTIM Period, RTS Threshold, Fragmentation Threshold, and OFDMA. The following table introduces how to configure each item: Beacon Interval Beacons are transmitted periodically by the EAP to announce the presence of a wireless network for the clients. Beacon Interval determines the time interval of the beacons sent by the EAP.
RTS Threshold RTS/CTS (Request to Send/Clear to Send) is used to improve the data transmission efficiency of the network with hidden nodes, especially when there are lots of large packets to be transmitted. When the size of a data packet is larger than the RTS Threshold, the RTS/ CTS mechanism will be activated. With this mechanism activated, before sending a data packet, the client will send an RTS packet to the EAP to request data transmitting.
2.2 Configure Portal Authentication Portal authentication provides authentication service to the clients that only need temporary access to the wireless network, such as the customers in a restaurant or in a supermarket. To access the network, these clients need to enter the authentication login page and use the correct login information to pass the authentication. In addition, you can customize the authentication login page and specify a URL which the authenticated clients will be redirected to.
Configure Portal Three portal authentication types are available: No Authentication , Local Password and External RADIUS Server. The following sections introduce how to configure each authentication type. • No Authentication With this authentication type configured, clients can pass the authentication and access the network without providing any login information. They only need to accept the term of use on the authentication page.
Authentication Timeout Specify the value of authentication timeout. A client’s authentication will expire after the authentication timeout and the client needs to log in to the authentication page again to access the network. Options include 1 Hour, 8 Hours, 24 Hours, 7 Days, and Custom. With Custom selected, you can customize the time in days, hours, and minutes. Redirect With this function configured, the newly authenticated client will be redirected to the specific URL.
• Local Password With this authentication type configured, clients are required to provide the correct password to pass the authentication. Follow the steps below to configure Local Password as the portal authentication type: 1. Select the SSID on which the portal will take effect. 2. Select Local Password as the authentication type. 3. Configure the relevant parameters as the following table shows: Password Specify a password for authentication.
Authentication Timeout Specify the value of authentication timeout. A client’s authentication will expire after the authentication timeout and the client needs to log in to the authentication page again to access the network. Options include 1 Hour, 8 Hours, 24 Hours, 7 Days, and Custom. With Custom selected, you can customize the time in days, hours, and minutes. Redirect With this function configured, the newly authenticated client will be redirected to the specific URL.
• External RADIUS Server If you have a RADIUS server on the network to authenticate the clients, you can select External Radius Server. Clients need to provide the correct login information to pass the authentication.
Follow the steps below to configure External Radius Server as the portal authentication type: 1. Select the SSID on which the portal will take effect. 2. Build a RADIUS server on the network and make sure that it is reachable by the EAP. 3. Go to the Portal configuration page on the EAP. Select External Radius Server as the authentication type. 3. Configure the relevant parameters as the following table shows: RADIUS Server IP Enter the IP address of RADIUS server.
Redirect With this function configured, the newly authenticated client will be redirected to the specific URL. Redirect URL With Redirect enabled, you also need to enter the URL in this field. The newly authenticated client will be redirected to this URL. Portal Customization Configure the authentication page. There are two options: Local Web Portal and External Web Portal. • Local Web Portal Enter the title and term of use in the two boxes.
the clients can visit the login page provided by the web portal server and then pass the subsequent authentication process. Follow the steps below to add free authentication policy. 1. In the Free Authentication Policy section, click to load the following page. 2. Configure the following parameters. When all the configured conditions are met, the client can access the network without authentication. Policy Name Specify a name for the policy.
Destination Port Specify the port number of the service. When using this service, the clients can access the specific resources without authentication. Leaving the field empty means that clients can access the specific resources no matter what service they are using. Status Check the box to enable the policy. Tips: When External Web Portal is configured in the portal configuration, you should set the IP address and subnet mask of the external web server as the Destination IP Range.
2.3 Configure VLAN Wireless VLAN is used to set VLANs for the wireless networks. With this feature, the EAP can work together with the switches supporting 802.1Q VLAN. Traffic from the clients in different wireless networks is added with different VLAN tags according to the VLAN settings of the wireless networks. Then the wireless clients in different VLANs cannot directly communicate with each other. Note that the traffic from the wired clients will not be added with VLAN tags.
2.4 Configure MAC Filtering MAC Filtering is used to allow or block the clients with specific MAC addresses to access the network. With this feature you can effectively control clients’ access to the wireless network according to your needs. To configure MAC Filtering, go to the Wireless > MAC Filtering page. Follow the steps below to configure MAC Filtering on this page: 1. In the Settings section, check the box to enable MAC Filtering, and click Save.
2. In the Station MAC Group section, click appear. and the following page will 1 ) Click and specify a name for the MAC group to be created. Click OK. You can create up to eight MAC groups. 2 ) Select a MAC group in the group list (the color of the selected one will change to to add group members to the MAC group. Specify blue). Click the MAC address of the host and click OK. In the same way, you can add more MAC addresses to the selected MAC group. 3.
For example, the following configuration means that the hosts in Group 2 are denied to access the SSID SSID-1 on the 2.4GHz band and allowed to access the SSID SSID-2 on the 5GHz band.
2.5 Configure Scheduler With the Scheduler feature, the EAP or its wireless network can automatically turn on or off at the time you set. For example, you can schedule the radio to operate only during the office working time to reduce power consumption. To configure Scheduler, go to the Wireless > Scheduler page. Follow the steps below to configure Scheduler on this page: 1. In the Settings section, check the box to enable Scheduler and select the Association Mode.
2. In the Scheduler Profile Configuration section, click page will appear. and the following 1 ) Click and specify a name for the profile to be created. Click OK. You can create up to eight profiles. 2 ) Select a profile in the list (the color of the selected one will change to blue). Click to add time range items to the profile. Specify the Day, Start Time and End Time of the time range, and click OK. Tips: You can add up to eight time range items for one profile.
3. In the Scheduler Association section, configure the scheduler rule. There are two association modes: Association with SSID and Association with AP. The following sections introduce how to configure each mode. ■ Association with SSID If you select Association with SSID in step 1, the Scheduler Association table will display all the SSIDs on the EAP. For each SSID, you can select a profile in the Profile Name column and select the scheduler rule (Radio On/Radio Off) in the Action column.
2.6 Configure Band Steering A client device that is capable of communicating on both the 2.4GHz and 5GHz frequency bands will typically connect to the 2.4GHz band. However, if too many client devices are connected to an EAP on the 2.4GHz band, the efficiency of communication will be diminished. Band Steering can steer dual-band clients to the 5GHz frequency band which supports higher transmission rates and more client devices, and thus to greatly improve the network quality.
Connection Threshold/Difference Threshold Connection Threshold defines the maximum number of clients connected to the 5GHz band. The value of Connection Threshold is from 2 to 40, and the default is 20. Difference Threshold defines the maximum difference between the number of clients on the 5GHz band and 2.4GHz band. The value of Difference Threshold is from 1 to 8, and the default is 4.
2.7 Configure QoS Quality of service (QoS) is used to optimize the throughput and performance of the EAP when handling differentiated wireless traffic, such as Voice-over-IP (VoIP), other types of audio, video, streaming media, and traditional IP data. In QoS configuration, you should set parameters on the transmission queues for different types of wireless traffic and specify minimum and maximum wait time for data transmission. In normal use, we recommend that you keep the default values.
2. Check the box to enable Wi-Fi Multimedia (WMM). With WMM enabled, the EAP uses the QoS function to guarantee the high priority of the transmission of audio and video packets. Note: If 802.11n only mode is selected in 2.4GHz (or 802.11n only, 802.11ac only, or 802.11 n/ac mixed mode selected in 5GHz), the WMM should be enabled. If WMM is disabled, the 802.11n only mode cannot be selected in 2.4GHz (or 802.11n only, 802.11ac only, or 802.11 n/ac mixed mode in 5GHz). 3.
Minimum Contention Window A list to the algorithm that determines the initial random backoff wait time (window) for retry of a transmission. Maximum Contention Window The upper limit (in milliseconds) for the doubling of the random backoff value. This doubling continues until either the data frame is sent or the Maximum Contention Window size is reached. This value cannot be higher than the value of Maximum Contention Window. This value must be higher than the value of Minimum Contention Window.
