Arbitration InterFrame Space A wait time for data frames. The wait time is measured in slots. Valid values are from 0 to 15. Minimum Contention Window A list to the algorithm that determines the initial random backoff wait time (window) for retry of a transmission. Maximum Contention Window The upper limit (in milliseconds) for the doubling of the random backoff value. This doubling continues until either the data frame is sent or the Maximum Contention Window size is reached.
.8 Configure Rogue AP Detection A Rogue AP is an access point that is installed on a secure network without explicit authorization from the network administrator. With Rogue AP Detection, the EAP can scan all channels to detect the nearby APs and display the detected APs in the Detected Rogue AP list. If the specific AP is known as safe, you can move it to the Trusted APs list. Also, you can backup and import the Trusted AP list as needed.
Detect Rogue APs and Move the Rogue APs to the Trusted AP List Follow the steps below to detect the nearby APs and move the trusted ones to the Trusted AP list. 1. In the Settings section, check the box to enable Rogue AP Detection. Click Save. 2. In the Detected Rogue AP List section, click . 3. Wait for a few seconds without any operation. After detection is finished, the detected APs will be displayed in the list.
Beacon Interval Displays the Beacon Interval value of the EAP. Signal Displays the signal strength of the AP. Beacon frames are sent periodically by the AP to announce to the stations the presence of a wireless network. Beacon Interval determines the time interval of the beacon frames sent by the AP device. 4. To move the specific AP to the Trusted AP list, click in the Action column. For example, we move the first two APs in the above Detected Rogue AP list to the Trusted AP list. 5.
• Manually create a trusted AP list. Create a txt. file, input the MAC addresses of the trusted APs in the format XX:XX:XX:XX:XX:XX and use the Space key to separate each MAC address. Save the file as a cfg file. 2. On this page, check the box to choose Download (PC to AP). 3. Click and select the trusted AP list from your local host. 4. Select the file management mode. Two modes are available: Replace and Merge. Replace means that the current trusted AP list will be replaced by the one you import.
3 Monitor the Network This chapter introduces how to monitor the running status and statistics of the wireless network, including: • 3.1 Monitor the EAP • 3.2 Monitor the Wireless Parameters • 3.
3.1 Monitor the EAP To monitor the EAP information, go to the Status > Device page. The following device information is displayed: Device Name Displays the name of the EAP. The name consists of the product model followed with the MAC address of the EAP by default. Device Model Displays the product model of the EAP. Firmware Version Displays the current firmware version the EAP. To update the firmware, you can refer to 5.6 Update the Firmware . Hardware Version Displays the hardware version the EAP.
CPU Utilization Displays the CPU occupancy. If this value is too high, the EAP may work abnormally. Memory Utilization Displays the memory occupancy.
3.2 Monitor the Wireless Parameters You can view the wireless parameters of the EAP, including SSID lists, radio settings, radio traffic and LAN traffic. Tips: To change the wireless parameters, you can refer to 2.1 Configure the Wireless Parameters . To monitor the wireless parameters, go to the Status > Wireless page.
Monitor the SSIDs You can monitor the SSID information of the EAP. The following table introduces the displayed information of the SSID: SSID Name Displays the SSID name. Clients Displays the number of clients currently connected to the SSID. Band Displays the frequency band the SSID is currently using. Security Displays the security mode of the SSID. Portal Displays whether portal function is enabled on the SSID. VLAN ID Displays the VLAN ID of the SSID.
Monitor the Radio Settings You can monitor the radio settings of the EAP. For a dual-band EAP, there are two bands: 2.4GHz and 5GHz. You can click to select a band to view. The following figure posted in the introduction takes 2.4GHz as an example. The following table introduces the displayed information of the EAP. 2.4GHz/5GHz Wireless Radio Displays whether wireless function is enabled on the radio band. Channel Frequency Displays the channel and frequency which are currently used by the EAP.
The following traffic information of the radio is displayed: Rx Packets Displays the total number of the received packets on the 2.4GHz/5GHz band since the EAP starts up. Tx Packets Displays the total number of the sent packets on the 2.4GHz/5GHz band since the EAP starts up. Rx Bytes Displays the total received traffic on the 2.4GHz/5GHz band since the EAP starts up. Tx Bytes Displays the total sent traffic on the 2.4GHz/5GHz band since the EAP starts up.
Rx Dropped Packets Displays the total number of the dropped packets which are received by the EAP since it starts up. Tx Dropped Packets Displays the total number of the dropped packets which are sent by the EAP since it starts up. Rx Errors Displays the total number of the received error packets since the EAP starts up. Tx Errors Displays the total number of the sent error packets since the EAP starts up.
3.3 Monitor the Clients You can monitor the information of the clients connected to the EAP. To monitor the client information, go to the Status > Client page. View Client Information There are two types of clients: users and portal authenticated guests. Users are the clients that connect to the SSID with portal authentication disabled. Guests are the clients that connect to the SSID with portal authentication enabled. Click the to select the client types to view the information of the EAP.
MAC Address Displays the MAC address of the user. Band Displays the frequency band the user is working on. SSID Displays the SSID the user is connecting to. Active Time Displays how long the user has been connected to the SSID. Up (Byte) Displays the user’s total uploaded traffic to the EAP since the last connection. Down (Byte) Displays the user’s total downloaded traffic from the EAP since the last connection. RSSI (dBm) Displays the RSSI(Received Signal Strength Indication) of the user.
View Block Client Information You can view the information of the clients that have been blocked and resume the client’s access. The following information of the blocked client is displayed: Hostname Displays the hostname of the user. MAC Address Displays the MAC address of the user. Up (Byte) Displays the user’s total uploaded traffic to the EAP since the last connection. Down (Byte) Displays the user’s total downloaded traffic from the EAP since the last connection.
4 Manage the EAP The EAP provides powerful functions of device management and maintenance. This chapter introduces how to manage the EAP, including: • 4.1 Manage the IP Address of the EAP • 4.2 Manage System Logs • 4.3 Configure Web Server • 4.4 Configure Management Access • 4.5 Configure LED • 4.6 Configure Wi-Fi Control (Only for Certain Devices) • 4.7 Configure PoE Out (Only for Certain Devices) • 4.8 Configure SSH • 4.
4.1 Manage the IP Address of the EAP The IP address of the EAP can be a dynamic IP address assigned by the DHCP server or a static IP address manually specified by yourself. By default, the EAP gets a dynamic IP address from the DHCP server. You can also specify a static IP address according to your needs. Tips: For detailed introduction about how to find the dynamic IP address of the EAP, refer to Using Web Browser on Your PC and Connecting to the Ethernet .
• Dynamic If you choose Dynamic as the IP address mode, make sure that there is a reachable DHCP server on your network and the DHCP sever is properly configured to assign IP address and the other network parameters to the EAP. For network stability, you can also configure the fallback IP parameters for the EAP: Fallback IP With the fallback IP configured, if the EAP fails to get an IP address from a DHCP server within 10 seconds, the fallback IP will work as the IP address of the EAP.
Configure the IP address and network parameters as the following table shows: IP Address Specify a static IP address for the EAP. IP Mask Specify the network mask. Gateway Specify the network gateway. Primary DNS Specify the primary DNS server. Secondary DNS Specify the secondary DNS server. (Optional) 3. Click Save.
4.2 Manage System Logs System logs record information about hardware, software as well as system issues and monitors system events. With the help of system log, you can get informed of system running status and detect the reasons for failure. To manage system logs, go to the Management > System Log page. On this page, you can view the system logs and configure the way of receiving system logs. View System Logs In the Log section, you can click to refresh the logs and view them in the table.
Configure the Way of Receiving Logs In the Log Settings section, you can configure the ways of receiving system logs. Follow the steps below to configure this feature: 1. Check the corresponding box to enable one or more ways of receiving system logs, and configure the related parameters. Two ways are available: Auto Mail and Server. ■ Auto Mail If Auto Mail is configured, system logs will be sent to a specified mailbox. Check the box to enable the feature and configure the related parameters.
Time Mode Select Time Mode: Fixed Time or Period Time. Fixed Time If you select Fixed Time, specify a fixed time to send the system log mails. For example, 08:30 indicates that the mail will be sent at 8:30 am everyday. Period Time If you select Period Time, specify a period time to regularly send the system log mail. For example, 6 indicates that the mail will be sent every six hours. Fixed Time means that the system logs will be sent at the specific time every day.
4.3 Configure Web Server With the web server, you can log in to the management web page of the EAP. You can configure the web server parameters of the EAP according to your needs. To configure Web Server, go to the Management > Web Server page. Follow the steps below to configure Web Server: 1. Refer to the following table to configure the parameters: Secure Server Port Designate a secure server port for web server in HTTPS mode. By default the port is 443.
4.4 Configure Management Access By default, all hosts in the LAN can log in to the management web page of the EAP with the correct username and password. To control the hosts’ access to the web page of the EAP, you can specify the MAC addresses and management VLAN of the hosts that are allowed to access the web page. To configure Management Access, go to the Management > Management Access page.
Follow the steps below to configure Management Access on this page: 1. Check the box to enable MAC Authentication. 2. Specify one or more MAC addresses in the MAC1/MAC2/MAC3/MAC4 fields. Up to four MAC addresses can be added. 3. Click Save. Tips: • You can click to quickly add the MAC address of your current logged-in host, . • Verify the MAC addresses carefully. Once the settings are saved, only the hosts in the MAC address list can access the web page of the EAP.
4.5 Configure LED You can turn on or off the LED light of the EAP and flash the LED to locate your device. To configure LED, go to the Management > LED Control page. Check the box to turn on or turn off the LED light of the EAP, and click Save. To flash the LED, click Locate. Then the LED will flash for 10 minutes or until the locate button is clicked again.
4.6 Configure Wi-Fi Control (Only for Certain Devices) Note: Wi-Fi Control is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface. If Wi-Fi Control is available, there is Management > Wi-Fi Control in the menu structure. Certain devices have an LED/Wi-Fi button on the front panel. With Wi-Fi Control enabled, you can press the button to turn on or off both of the Wi-Fi and LED at the same time.
4.7 Configure PoE Out (Only for Certain Devices) Note: PoE Out is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface. If PoE Out is available, there is Management > LAN Port Config in the menu structure. Certain devices have a PoE OUT port that can transmit data and supply power to the client simultaneously. You can also disable PoE Out to make the port transmit data only.
4.8 Configure SSH If you want to remotely log in to the EAP via SSH, you can deploy an SSH server on your network and configure the SSH feature on the EAP. To configure SSH, go to the Management > SSH page. Follow the steps below to configure SSH on this page: 1. Refer to the following table to configure the parameters: Server Port Designate a server port for SSH. By default the port is 22.
4.9 Configure SNMP The EAP can be configured as an SNMP agent and work together with the SNMP manager. Once the EAP has become an SNMP agent, it is able to receive and process request messages from the SNMP manager. At present, the EAP supports SNMP v1 and v2c. To configure the EAP as an SNMP agent, go to the Management > SNMP page. Follow the steps below to complete the configuration on this page: 1. Check the box to enable SNMP Agent. 2.
Set Community Set Community has the read and write right of the device’s SNMP information. Enter the community name that allows read/write access to the device’s SNMP information. The community name can be considered a group password. The default setting is private. Set Source Defines the IP address (for example, 10.10.10.1) for management systems that can serve as Set Community to read and write the SNMP information of this device. The default is 0.0.0.
5 Configure the System This chapter introduces how to configure the system of the EAP, including: • 5.1 Configure the User Account • 5.2 Controller Settings • 5.3 Configure the System Time • 5.4 Reboot and Reset the EAP • 5.5 Backup and Restore the Configuration • 5.
5.1 Configure the User Account Every EAP has a user account, which is used to log in to the management page of the EAP. When you start the EAP at the first time, the username and password of the user account are both admin. After the first login, the system will require you to set a new username and a new password for the user account. And then you can use the new user account to log in to the EAP. Also, you can change your user account as needed. Tips: Please remember your user account well.
5.2 Controller Settings To make your controller adopt your EAP, make sure the EAP can be discovered by the controller. Controller Settings enable your EAP to be discovered in either of the following scenarios. • If you are using Omada Cloud-Based Controller, Enable Cloud-Based Controller Management . • If your EAP and controller are located in the same network, LAN and VLAN, the controller can discover and adopt the EAP without any controller settings.
EAP to your Omada Cloud-Based Controller, you can check the connection status on this page.
Configure Controller Inform URL Go to the System > Controller Settings page. In the Controller Inform URL section, inform the EAP of the controller’s URL/IP address, and click Save. Then the EAP make contact with the controller so that the controller can discover the EAP.
5.3 Configure the System Time System time is the standard time for Scheduler and other time-based functions. The EAP supports the basic system time settings and the Daylight Saving Time (DST) feature. To configure the system time, go to the System > Time Settings page. The following two sections introduce how to configure the basic system time settings and the Daylight Saving Time feature.
Configure the System Time In the Time Settings section, you can configure the system time. There are three methods to set the system time: Set the System Time Manually, Acquire the System Time From an NTP Server , and Synchronize the System Time with PC’s Clock. Determine the way of setting the system time and follow the steps below to complete the configurations: • Set the System Time Manually To set the system time manually, follow the steps below: 1.
Note: If you use an NTP server on the internet, make sure that the gateway address is set correctly on the EAP. Otherwise, the EAP cannot get the system time from the NTP server successfully. To set the gateway address, refer to 2.1 Configure the Wireless Parameters. 2. Specify the NTP server for the EAP. If you have two NTP servers, you can set one of them as the primary NTP server, and the other as the secondary NTP server.
Configure Daylight Saving Time Daylight saving time is the practice of advancing clocks during summer months so that evening daylight lasts longer, while sacrificing normal sunrise times. The EAP provides daylight saving time configuration. Follow the steps below to configure daylight saving time: 1. Check the box to enable Daylight Saving. 2. Select the mode of daylight saving time. Three modes are available: Predefined Mode, Recurring Mode and Date Mode. 3.
■ Recurring Mode If you select Recurring Mode, manually specify a cycle time range for the daylight saving time of the EAP. This configuration will be used every year. The following table introduces how to configure the cycle time range. Time Offset Specify the time to set the clock forward by. Start Specify the start time of daylight saving time. The interval between the start time and end time should be more than 1 day and less than 1 year (365 days).
5.4 Reboot and Reset the EAP You can reboot and reset the EAP according to your need. To reboot and reset the EAP, go to the System > Reboot&Reset page. • To reboot the EAP, click the Please wait without any operation. button , and the EAP will be rebooted automatically. • To reset the EAP, click the button , and the EAP will be reset to the factory defaults automatically. Please wait without any operation. Note: After reset, all the current configuration of the EAP will be lost.
5.5 Backup and Restore the Configuration You can save the current configuration of the EAP as a backup file and save the file to your host. And if needed, you can use the backup file to restore the configuration. We recommend that you backup the configuration before resetting or upgrading the EAP. To backup and restore the configuration, go to the System > Backup&Restore page. • To backup the configuration, click the button backup file will be saved to the host automatically.
5.6 Update the Firmware We occasionally provide the firmware update files for the EAP products on our official website. To get new functions of the EAP, you can check our official website and download the update files to update the firmware of your EAP. To update the firmware, go to the System > Firmware Update page. Follow the steps below to update the firmware of your EAP: 1. Go to our website https://www.tp-link.com and search your EAP model.
6 Application Example This chapter provides an application example about how to establish and manage a EAP wireless network: A restaurant wants to provide the wireless internet access for the employees and guests. The restaurant now has a router, a switch, a dual-band EAP and a computer. Follow the steps below to establish the wireless network: 1. 6.1 Determine the Network Requirements 2. 6.2 Build the Network Topology 3. 6.3 Log in to the EAP 4. 6.4 Configure the EAP 5. 6.
6.1 Determine the Network Requirements Before starting to build the network, we need to first analyze and determine the network requirements. In this restaurant example, the network requirements are as follows: • On both 2.4GHz and 5GHz bands, there are two SSIDs needed: one for the restaurant employees and one for the guests. • In order to advertise the restaurant, the Portal feature needs to be configured on the SSIDs for the guests.
6.2 Build the Network Topology Build the network topology as the following figure shows. Router (DHCP Server) LAN: 192.168.88.1 Switch Internet Management Host EAP • The router is the gateway of the network and acts as a DHCP server to assign dynamic IP addresses to the management host, EAP and clients. The LAN IP of the router is 192.168.88.1/24. • Connect the switch to the LAN port of the router. • Connect the management host and the EAP to the switch.
6.3 Log in to the EAP After building the network topology, follow the steps below to log in to the web page of the EAP: 1. On the management host, launch the web browser and enter “192.168.88.1” in the address bar. Then log in to the router and find the IP address of the EAP. As the following figure shows, the IP address of the EAP is 192.168.88.101. 2. Enter “192.168.88.101” in the address bar to load the login page of the EAP.
6.4 Configure the EAP To achieve the network requirements in this application example, we need to Configure SSIDs , Configure Portal Authentication and Configure Scheduler. Configure SSIDs 1. After Logging in to EAP, follow the step-by-step instructions to complete the basic configurations of creating SSIDs. Configure the SSID as “employee_2.4GHz” and “employee_5GHz”, specify the Password as “restaurant123abc“. Click Save. 2. Go to the Wireless > Wireless Settings page. Create SSIDs for guests on 2.
3. The following page will appear. Configure this SSID as “guest_2.4GHz“, keep the Security Mode as “None” and check the box to enable the Portal feature for this SSID. Click OK. 4. Click to enter the configuration page for the 5GHz band. Similarly to the configurations for the 2.4GHz band, configure another SSID for the guests on the 5GHz band. Configure Portal Authentication Follow the steps below to configure portal authentication: 1. Go to the Wireless > Portal page.
2. Configure the portal feature as the following figure shows. 1 ) Select the SSIDs for the guests on which the portal will take effect. 2 ) Select the Authentication Type as “Local Password” and specify the Password as “restaurant123”. 3 ) Configure Authentication Timeout. Here we customize the timeout as 2 hours. It means that guests will be logged out after they have been authenticated for 2 hours.
5 ) Configure the authentication page. Specify the title and the term of use. To access the internet, guests need to enter the correct password in the Password field, accept the Term of Use, and click the Login button. 3. Click Save. Configure Scheduler Follow the steps below to schedule the radio to operate only during the working time (9:00 am to 22:00 pm). 1. Go to the Wireless > Scheduler page. 2.
2 ) Choose the newly added profile “worktime”, and click . Then the item configuraiton page will appear. Specify the time range as everyday 9:00 to 22:00. Click OK. 4. In the Scheduler Association section, select “worktime“ in the Profile Name column and select “Radio On” in the Action column. Click Save.
6.5 Test the Network To ensure that the employees and guests can surf the internet via the wireless network, we can use a client device, such as a telephone, to test whether the SSIDs are working normally. • To test the SSIDs for the employees, follow the steps below: 1 ) Enable the Wi-Fi feature of the client device. 2 ) Choose the SSID “employee_2.4GHz“ or “employee_5GHz“ among the detected SSIDs. 3 ) Enter the password “restaurant123abc“ to join the wireless network.