Tp link eap225 outdoor инструкция

Теперь трафик IPv6 можно блокировать через настройки ACL шлюза.

Добавлена возможность настройки RA IPv6 для шлюза Omada.

Добавлена возможность фильтрации MAC-адресов в разделе «Вид локации» > «Настройки» > «Безопасность сети» > «Фильтрация MAC-адресов».

В раздел «Аналитика» добавлена возможность отслеживания лимитов сеанса. Эта функция отображает количество сеансов, используемых одним IP-адресом.

Добавлена поддержка MSS Clamping («Вид локации» > «Настройки» > «Проводные сети» > «Интернет» > «PPPoE» > «Настройки»). MSS Clamping позволяет указать верхний предел значения максимального размера сегмента (MSS), о котором договариваются отправляющая и принимающая сторона при установке подключения TCP во избежание IP-фрагментации.

Добавлена поддержка кеша DNS («Вид локации» > «Настройки» > «Сервисы»). Кеш DNS повышает скорость преобразования доменного имени — перед отправкой запроса в интернет сначала анализируются недавние локальные преобразования адресов.

В шлюз добавлены ping, трассировка и «Инструменты терминала».

Добавлена возможность загрузки информации о шлюзе. Для получения доступа к функции откройте боковую панель шлюза и нажмите «Загрузить» в разделе «Настройка» > «Управление устройством». Для получения информации об устройстве контроллер Omada использует порт TCP 29815.

Для PFS добавлена поддержка групп DH 14 и 15.

Добавлена возможность использования диапазона IP-адресов локальной сети 0.0.0.0/0 для VPN-подключения IPsec типа «узел—сеть».

Добавлена возможность тегирования одного идентификатора VLAN в разных сетях.

Добавлена поддержка псевдонимов IP WAN («Вид локации» > «Настройки» > «Проводные сети» > «Интернет»). Эта функция позволяет создать несколько IP-адресов для одного порта WAN и использовать эти адреса для проброса портов.

В список управления доступом шлюза добавлена поддержка групп локаций, что позволяет блокировать передачу данных на определённые локации или приём данных с них.

В журналы добавлено отображение IP-адреса источника атак TCP с нулевым значением в поле «flags» и атак Ping of Death, а также отображение изменений в сети провайдера во время резервирования канала. Также увеличено количество журналов шлюза.

В раздел «Устройства» > «Порты» шлюзов Omada добавлена поддержка управления потоком.

Добавлена возможность изменения интервала обновления динамического DNS (1–60 минут).

User Guide

EAP Controller Software

1910012227 REV 2.5.3

November 2017

CONTENTS

 1 Quick Start ……………………………………………………………………………………………………….. 1

1.1 Determine the Network Topology ………………………………………………………………………………………………………….2

1.1.1  Management in the Same Subnet ………………………………………………………………………………………………….. 2

1.1.2  Management in Different Subnets …………………………………………………………………………………………………. 3

1.2 Install the EAP Controller …………………………………………………………………………………………………………………………3

1.2.1  Installation on Windows Host ………………………………………………………………………………………………………….. 3

1.2.2  Installation on Linux Host ………………………………………………………………………………………………………………… 4

1.3 Inform the EAPs of the Controller Host’s Address ………………………………………………………………………………5

1.4 Start and Log in to the EAP Controller …………………………………………………………………………………………………..6

1.4.1  Launch the EAP Controller ………………………………………………………………………………………………………………. 6

1.4.2  Do the Basic Configurations……………………………………………………………………………………………………………. 7

1.4.3  Log in to the Management Interface ……………………………………………………………………………………………… 9

1.5 Create Sites and Adopt EAPs ………………………………………………………………………………………………………………….9

1.5.1  Create Sites ……………………………………………………………………………………………………………………………………….. 9

1.5.2  Adopt the EAPs ………………………………………………………………………………………………………………………………. 10

1.6 Monitor and Manage the EAPs …………………………………………………………………………………………………………….. 11

 2 Monitor and Manage the Network ……………………………………………………………….12

2.1 Monitor the Network with the Map ………………………………………………………………………………………………………13

2.1.1  Add a Map ………………………………………………………………………………………………………………………………………… 13

2.1.2  Monitor the EAPs on the Map ………………………………………………………………………………………………………. 15

2.2 View the Statistics of the Network ………………………………………………………………………………………………………16

2.2.1  View the Client Distribution on SSID …………………………………………………………………………………………… 16

2.2.2  Have a Quick Look at EAPs and Clients ……………………………………………………………………………………… 16

2.2.3  View Current Usage-Top EAPs ……………………………………………………………………………………………………. 17

2.2.4  View Recent Activities …………………………………………………………………………………………………………………… 17

2.3 Monitor and Manage the EAPs …………………………………………………………………………………………………………….. 18

2.3.1  Manage the EAPs in Different Status ………………………………………………………………………………………….. 18

2.3.2  View the Detailed Information of EAPs……………………………………………………………………………………….. 19

2.3.3  Manage the EAPs in the Action Column …………………………………………………………………………………….. 19

2.4 Monitor and Manage Clients ………………………………………………………………………………………………………………… 20

2.4.1  View the Current Information of Clients …………………………………………………………………………………….. 20

2.4.2  Manage Clients in the Action Column …………………………………………………………………………………………. 20

2.5 View Clients Statistics During the Specified Period ………………………………………………………………………..21

2.5.1  Select a Specified Period ……………………………………………………………………………………………………………… 21

2.5.2  View the History Information of Clients ……………………………………………………………………………………… 21

2.5.3  Manage Clients in the Action Column …………………………………………………………………………………………. 22

2.6 Manage the Rogue APs List ………………………………………………………………………………………………………………….22

2.6.1  Manage the Untrusted Rogue APs List ………………………………………………………………………………………. 22

2.6.2  Manage the Trusted Rogue APs List …………………………………………………………………………………………… 23

2.7 View Past Guest Authorization ……………………………………………………………………………………………………………..24

2.8 View Logs …………………………………………………………………………………………………………………………………………………24

2.9 View Alerts ……………………………………………………………………………………………………………………………………………….25

 3 Configure the EAPs Globally ………………………………………………………………………..26

3.1 Wireless Network ……………………………………………………………………………………………………………………………………27

3.1.1  Add Wireless Networks …………………………………………………………………………………………………………………. 27

3.1.2  Configure Advanced Wireless Parameters ……………………………………………………………………………….. 32

3.1.3  Configure Band Steering ………………………………………………………………………………………………………………. 33

3.2 Access Control ……………………………………………………………………………………………………………………………………….34

3.3 Portal Authentication ……………………………………………………………………………………………………………………………..35

3.3.1  No Authentication…………………………………………………………………………………………………………………………… 36

3.3.2  Simple Password ……………………………………………………………………………………………………………………………. 40

3.3.3  Local User ………………………………………………………………………………………………………………………………………… 43

3.3.4  Voucher ……………………………………………………………………………………………………………………………………………. 50

3.3.5  SMS …………………………………………………………………………………………………………………………………………………… 57

3.3.6  Facebook …………………………………………………………………………………………………………………………………………. 61

3.3.7  External RADIUS Server ………………………………………………………………………………………………………………… 62

3.3.8  External Portal Server ……………………………………………………………………………………………………………………. 66

3.4 Free Authentication Policy ……………………………………………………………………………………………………………………67

3.5 MAC Filter ………………………………………………………………………………………………………………………………………………..67

3.6 Scheduler …………………………………………………………………………………………………………………………………………………69

3.7 QoS ……………………………………………………………………………………………………………………………………………………………71

3.8 System ……………………………………………………………………………………………………………………………………………………..74

3.8.1  Reboot Schedule ……………………………………………………………………………………………………………………………. 74

3.8.2  Log Setting ………………………………………………………………………………………………………………………………………. 74

3.8.3  Device Account ………………………………………………………………………………………………………………………………. 76

3.8.4  LED ……………………………………………………………………………………………………………………………………………………. 76

3.8.5  SSH …………………………………………………………………………………………………………………………………………………… 77

3.8.6  Management VLAN ………………………………………………………………………………………………………………………… 77

3.8.7  Backup&Restore …………………………………………………………………………………………………………………………….. 78

3.8.8  Batch Upgrade ………………………………………………………………………………………………………………………………… 78

 4 Configure the EAPs Separately …………………………………………………………………..79

4.1 View the Information of the EAP …………………………………………………………………………………………………………..80

4.1.1  Overview ………………………………………………………………………………………………………………………………………….. 80

4.1.2  LAN ……………………………………………………………………………………………………………………………………………………. 80

4.1.3  Radio …………………………………………………………………………………………………………………………………………………. 81

4.2 View Clients Connecting to the EAP ……………………………………………………………………………………………………81

4.2.1  User …………………………………………………………………………………………………………………………………………………… 81

4.2.2  Guest ………………………………………………………………………………………………………………………………………………… 82

4.3 Configure the EAP ………………………………………………………………………………………………………………………………….82

4.3.1  Basic Config …………………………………………………………………………………………………………………………………….. 82

4.3.2  IP Setting ………………………………………………………………………………………………………………………………………….. 83

4.3.3  Radio …………………………………………………………………………………………………………………………………………………. 83

4.3.4  Load Balance …………………………………………………………………………………………………………………………………… 85

4.3.5  WLANs ……………………………………………………………………………………………………………………………………………… 85

4.3.6  Trunk Settings…………………………………………………………………………………………………………………………………. 86

4.3.7  Rouge AP Detection ………………………………………………………………………………………………………………………. 86

4.3.8  Forget this AP …………………………………………………………………………………………………………………………………. 87

4.3.9  Local LAN Port VLAN Settings …………………………………………………………………………………………………….. 87

 5 Manage the EAP Controller ………………………………………………………………………….88

5.1 Information About the Software …………………………………………………………………………………………………………..89

5.2 User Account ………………………………………………………………………………………………………………………………………….. 89

5.3 Controller Settings …………………………………………………………………………………………………………………………………90

5.3.1  Configure Controller Hostname/IP ……………………………………………………………………………………………… 90

5.3.2  Configure Mail Server ……………………………………………………………………………………………………………………. 90

 6 Application Example ……………………………………………………………………………………..92

6.1 Basic Configuration ………………………………………………………………………………………………………………………………..93

6.2 Advanced Settings …………………………………………………………………………………………………………………………………93

6.2.1  Monitor the EAPs with Map …………………………………………………………………………………………………………… 93

6.2.2  Configure Portal Authentication ………………………………………………………………………………………………….. 94

6.2.3  Create a SSID for the Employees ………………………………………………………………………………………………… 95

6.2.4  Configure Scheduler ……………………………………………………………………………………………………………………… 96

1

1 Quick Start

The EAP Controller is a management software for the TP-Link EAP devices. It allows you to centrally

manage your EAP devices using a web browser. You can configure EAPs in batches and conduct

real-time monitoring of each EAP in the network.

Follow the steps below to complete the basic settings of the EAP Controller.

1. Determine the Network Topology

2. Install the EAP Controller

3. Inform the EAPs of the Controller Host’s Address

4.

Start and Log in to the EAP Controller

5. Create Sites and Adopt the EAPs

6. Monitor and Manage the EAPs

2

1.1 Determine the Network Topology

There are two kinds of network topologies to centrally manage EAPs via the EAP Controller:

·The EAP Controller and EAPs are in the same subnet.

·The EAP Controller and EAPs are in different subnets.

Determine your management method according to your need and refer to the following

introductions to build your network toplogy.

1.1.1  Management in the Same Subnet

If your EAP Controller and EAPs are in the same subnet, refer to the following network topology.

A router acts as a DHCP server to assign IP addresses to EAPs and clients. EAP Controller should

be installed on one host, which is called as Controller Host. The other hosts in the same LAN can

access the Controller Host to manage the network. Taking the following topology as an example,

you can enter “192.168.0.100:8043“ in a web browser on Host B to visit the EAP Controller interface

on Host A. It’s recommended to set a static IP address to the Controller Host for the convenient

login to the EAP Controller interface.

Note:

· The EAP Controller must be running all the time when you manage the network.

· The EAP Controller can be running on only one host in a LAN. When other users in the LAN try to launch EAP

Controller on their own hosts, they will be redirected to the host that is already running EAP Controller.

3

1.1.2  Management in Different Subnets

If your EAP Controller and EAPs are in different subnets, refer to the following topology.

A router acts as the gateway of the network. A layer 3 switch acts as a DHCP server to assign IP

addresses to EAPs and clients. The Controller Host and the EAPs are connected to the switch’s

different network segments. To help the EAPs find the Controller Host, EAP Discover Utility should

be installed on Host B which is in the same subnet with the EAPs. For how to use EAP Discovery

Utility, refer to 1.3 Inform the EAPs the Controller Host’s Address for detailed instructions.

Host B

IP: 192.168.2.100/24

Layer 3 Switch

(DHCP Server)

LAN WAN

EAPs

Clients

Router

EAP Controller

EAP

Discovery Utility

Internet

Host A (Controller Host)

IP: 192.168.1.100/24

192.168.1.0/24

192.168.2.0/24

1.2 Install the EAP Controller

We provide EAP Controller for both Windows and Linux operating systems. Determine your

operation system and follow the introductions below to install EAP Controller.

1.2.1  Installation on Windows Host

Make sure your PC meets the following system requirements and then properly install the EAP

Controller software.

System Requirements

Operating System: Microsoft Windows XP/Vista/7/8/10.

Web Browser: Mozilla Firefox 32 (or above), Google Chrome 37 (or above), Opera 24 (or above), or

Microsoft Internet Explorer 11 (or above).

4

Note:

We recommend that you deploy the EAP controller on a 64-bit operating system to guarantee the software

stability.

Install the EAP Controller

Download the installation file of EAP Controller from the website

http://www.tp-link.com/en/

download/EAP-Controller.html.

Then follow the instructions to properly install the EAP Controller

software. After successful installation, a shortcut icon of the EAP Controller will be created on

your desktop.

1.2.2  Installation on Linux Host

Make sure your PC meets the following system requirements and then install the EAP Controller

software.

System Requirements

Operating System: 64-bit Linux operating system, including Ubuntu 14.04/16.04/17.04, CentOS

6.x/7.x and Fedora 20 (or above).

Web Browser: Mozilla Firefox 32 (or above), Google Chrome 37 (or above), Opera 24 (or above), or

Microsoft Internet Explorer 11 (or above).

Install the EAP Controller

Download the installation file of EAP Controller from our website

http://www.tp-link.com/en/

download/EAP-Controller.html

.

Follow the steps below to install EAP Controller on your Linux PC:

1. Make sure your PC is runnning in root mode. You can use this command to enter root mode:

sudo

2. Extract the tar.gz file using the command:

tar zxvf EAP_Controller_v2.5.3_linux_x64.tar.gz

3. Install EAP Controller using the command:

sudo ./install.sh

Tips:

· To uninstall EAP Controller, go to the insatllation path: /opt/tplink/EAPController, and run the command:

sudo ./uninstall.sh.

· During uninstallation, you can choose whether to backup the database.The backup folder is /opt/tplink/eap_

db_backup.

· During installation, you will be asked whether to restore the database if there is any backup database in the

folder /opt/tplink/eap_db_backup.

5

1.3 Inform the EAPs of the Controller Host’s Address

If your Controller Host and EAPs are in the same network segment, you can skip this section.

If your Controller Host and EAPs are in different subnets, you need to install EAP Discovery Utility

on a host that is in the same network segment with the EAPs. EAP Discovery Utility can help the

EAPs find the Controller Host.

System Requirements

WinXP/Vista/7/8/8.1/10/Server2008/Server2012

Mac OS X 10.7/10.8/10.9/10.10/10.11

Install and Use EAP Discovery Utility

Follow the steps below to install EAP Discovery Utility and use it to inform the EAPs of the Controller

host’s IP address:

1. Download the installation file from our website

http://www.tp-link.com/en/download/EAP-

Controller.html#EAP_Discovery_Tool

. Then follow the instructions to properly install EAP

Discovery Utility.

2. Open the EAP Discovery Utility and the following window will pop up. This window shows the

information of all EAPs in the same LAN.

3. Click manage in the Action column or select multiple EAPs and click Batch Setting.

6

4. Enter the hostname or IP address of the Controller Host.

5. Enter the EAP’s username and password (both are admin by default).

6. Click Apply to inform the EAP of the Controller’s hostname or IP address. And then the

connection can be established between the EAP and the Controller Host.

1.4 Start and Log in to the EAP Controller

Launch the software on the Controller Host and follow the instructions to complete the basic

configurations, and then you can log in to the management interface.

1.4.1  Launch the EAP Controller

Launch EAP Controller on Windows Host

To launch EAP Controller on a Windows host, double click the icon and the following window will

pop up. You can click Hide to hide this window but do not close it. After a while, your web browser

will automatically open.

7

Note:

· If your browser does not open automatically, click Launch a Browser to Manage Wireless Network. You can

also launch a web browser and enter http://127.0.0.1:8088 in the address bar.

· If your web browser opens but prompts a problem with the website’s security certificate, click Continue.

Launch EAP Controller on Linux Host

To launch EAP Controller on a Linux host, follow the steps below:

1. Start the EAP Controller service using the command: tpeap start.

2. Launch a web browser and enter http://127.0.0.1:8088 in the address bar to visit the web page of

EAP Controller.

Tips:

You can also use the following commands to stop the service or view the service status:

· To stop the service: tpeap stop

· To view the service status: tpeap status

1.4.2  Do the Basic Configurations

In the web browser you can see the configuration page. Follow the setup wizard to complete the

basic settings for EAP Controller.

1. The EAP Controller displays all the detected EAPs in the network. Select the one or more EAPs

to be managed and click Next.

2. Set the SSID name (wireless network name) and password for the EAPs to be managed. The EAP

Controller will create two wireless networks, a 2.4GHz one and a 5GHz one both encrypted in the

WPA2-PSK mode. Click Next.

8

3. Specify a username and a password to create an administrator account. Specify the email

address to receive the notification emails and reset your password if necessary. Click Next.

Note:

After logging into the EAP Controller, please set a mail server so that you can receive the notification emails

and reset your password in case that you forget the password. Please refer to Configure Mail Server.

4. Review your settings and click Finish.

9

1.4.3  Log in to the Management Interface

Once the basic configuration is finished, the browser will be redirected to the following page. Log

in to the management interface of EAP Controller with the username and password you have set in

the basic configuration.

Note::

In addition to the Controller Host, other hosts in the same LAN can also manage EAP devices via remote

access to the Controller Host. For example, when the IP address of the Controller Host is 192.168.0.100

and the EAP Controller is running normally on this host, you can enter https://192.168.0.100:8043/login, or

https://192.168.0.100:8043, or http://192.168.0.100:8088 in the web browser of other hosts in the same LAN

to log into the management interface and manage EAP devices.

1.5 Create Sites and Adopt EAPs

The EAP Controller can manage multiple EAP networks, which are called sites. Multiple sites are

logically separated, and each site has its own configurations. There is an initial site named Default.

If you have no need to manage EAPs with different sites, you can use the default site and skip the

Create Sites section. However, Adopt the EAPs is a necessary step to manage the EAPs.

1.5.1  Create Sites

Follow the steps below to add sites.

1. Click in the top left corner of the page and select , and then the following

window will pop up.

2. Click and set a name for the site.

10

3. Click Apply to create the site.

1.5.2  Adopt the EAPs

The EAP Controller can discover all EAP devices currently connected in the network and display

their connection statuses. All the EAPs are in Pending status when first discovered by the EAP

Controller. To manage the EAPs, you need to adopt them. In the quick setup process, the EAP

Controller will automatically adopt the selected EAPs using the default username and password

(both are admin). However, if you have changed the username or password of your EAPs before, the

EAP Controller cannot automatically adopt the them.

To ensure that all EAPs are adopted, follow the steps below:

1. Select a site and go to Access Points > Pending. The table displays all the EAPs that have not

been adopted.

2. Click the Retry button in the Action column and enter the current username and password of the

EAP. Click Apply.

Tips:

· If you have a new discovered EAP, you can click the Adopt button in the Action column to adopt the EAP. The

EAP Controller will automatically adopt the EAP using the default username and password (both are admin).

· If you have multiple new discovered EAPs, and all of them have the default username and password (both

are admin), you can click the Batch Adopt button to adopt them all at once. But if there are any EAPs with the

Retry button, it means that the username and password of these EAPs have been changed. You need to first

adopt them before batch adopt the rest EAPs.

3. Wait for a moment, the EAPs will be adopted and the status will change to Connected. All the

EAPs’ username and password will become the same as those of the Controller’s administrator

account you created in the Basic Configuration.

Tips:

If you want to change the EAPs’ username and password, please refer to Device Account.

11

1.6 Monitor and Manage the EAPs

When all the configurations above are finished, you can centrally monitor and manage the EAPs via

the EAP Controller’s management interface. The management interface is mainly divided into three

sections as the following screen.

Section A In Section A, you can check the status of EAPs and clients in the network. Also,

you can click to refresh the current page, click to globally configure the

wireless network, and click to sign out from the management interface.

Furthermore, the Sites allows you to group your EAPs and manage them in

batches. To configure sites, refer to Create Sites.

Section B In Section B, you can centrally monitor and manage the EAPs and clients.

Section C In Section C, you can globally configure the wireless network. The global

configurations will take effect on all the adopted EAPs.

12

2 Monitor and Manage the Network

With the EAP Controller you can monitor the EAP devices and centrally manage your wireless

network. This chapter includes the following sections:

·

Monitor the Network with the Map

·

View the Statistics of the Network

·

Monitor and Manage the EAPs

·

Monitor and Manage Clients

·

View Clients Statistics during the Specified Period

·

Manage the Rogue APs List

·

View Past Guest Authorization

·

View Logs

·

View Alerts

13

2.1 Monitor the Network with the Map

You can upload your local map images and monitor the status and coverage range of each EAP with

the map. When you initially launch the EAP Controller, a default map is displayed as the following

figure shows. Follow the instructions below to add your own map and manage the EAPs via the map.

2.1.1  Add a Map

Prepare a map image in .jpg, .gif, or .webp format. And then follow the steps below to add the map to

the EAP Controller.

1. Click Configure Maps on the upper right corner of map and click Add.

2. Enter the map description, select your map image, and click Create.

3. Select your local map from the drop-down list on the upper right corner of map area.

14

4. Click . Draw a line on the map and enter the distance the line represents. Then the EAP

Controller will compute and generate the map scale automatically based on your configuration.

5. Drag the EAPs from the Unplaced APs list to the appropriate locations on the map according to

their actual locations.

You can click to reveal additional options:

Lock the selected EAP in the current location on the map.

15

Unlock the selected EAP and you can drag it to another location.

Display the EAP’s details and configure the wireless parameters. Refer to

Configure the EAPs Separately.

Remove the selected EAP back into the Unplaced APs list.

2.1.2  Monitor the EAPs on the Map

Click any of the following options to display EAP Label, Details, and Coverage on the map.

Label Display the EAP’s name. The default name is the MAC address of the EAP.

Details Display the EAP’s name, MAC address, IP address, transmitting/receiving

channel, number of connected users, and number of connected guests.

Coverage Display a visual representation of the wireless range covered by EAPs. The

actual signal coverage may be smaller than the visual coverage on the map

because the obstacles around the EAPs will weaken the signal.

16

2.2 View the Statistics of the Network

The EAP Controller collects all statistics of the managed EAPs and displays the statistical

information via graphs, pie charts and tables, providing an overview of your wireless network.

2.2.1  View the Client Distribution on SSID

A visual pie chart represents the client distribution on each SSID. For example, the ssid_211 has

one client, which occupies 50% of all the clients.

2.2.2  Have a Quick Look at EAPs and Clients

This tab displays the Most Active AP, the Most Active Clients and the All-Time Top Client. You can

click the MAC address of the EAP or the client to see more details.

17

Most Active AP The current connected AP with the maximum traffic.

Most Active

Client

The current connected client with the maximum traffic.

All-time Top

Client

The client with the maximum traffic among all the clients that have ever

accessed the EAP network.

2.2.3  View Current Usage-Top EAPs

This tab lists the hostname, the number of connected clients and the data traffic condition of the

ten APs with the most traffic currently.

Clients The amount of clients connected to this EAP.

%Clients The proportion of current connected clients to the Top EAPs’ total client

amount.

Traffic The total amount of data transmitted by this EAP, which equals the sum of the

transmission traffic of all the current clients that connect to the AP.

%Traffic The proportion of the EAP’s current data transmission amount to the Top EAPs’

total transmission amount.

2.2.4  View Recent Activities

The Recent Activities statistics can be toggled between a view for the past specific 24 hours and

one for the past specific 30 days.

18

The left ordinate axis indicates the traffic and the right one represents the number of the clients.

The abscissa axis shows the selected time period. Traffic indicates a visual graph of the network

traffic during the selected time period. Client indicates a visual graph of the number of the

connected clients during the selected time period. For example, the statistics information at 10:00

indicates the traffic size and client number from 9:00 to 10:00. In the following figure, at 10 o’clock,

the traffic is about 8 and there is 1 client connected to the AP.

2.3 Monitor and Manage the EAPs

The EAP Controller can discover all the EAP devices currently connected to the network and display

the information about them on the Access Points page.

2.3.1  Manage the EAPs in Different Status

According to their connection status, all the EAPs are divided into three categories: connected,

disconnected and pending. You can view the EAPs in different status on different pages:

All Displays the information of all the EAPs in different status.

Pending Displays the pending EAPs.

All the EAPs are in pending state by default when first discovered by the EAP

Controller, and only after they are adopted and connected, you can monitor and

manage them. To adopt pending EAPs, please refer to Adopt EAPs.

19

Connected Displays the connected EAPs.

Only connected EAPs can be managed. After you adopt a pending EAP, its status will

become provisioning and then connected. A connected EAP will turn into a pending

one after you forget this EAP. You can refer to Forget this AP to forget a EAP or click

Forget All on the page to forget all the connected EAPs.

Disconnected Displays the disconnected EAPs.

If a connected or pending EAP powers off, it will be disconnected. When a

disconnected EAP is reset to factory default settings or you forget it, it will turn into a

pending one again. You can refer to Forget this AP to forget a EAP or click Forget All

on the page to forget all the disconnected EAPs.

2.3.2  View the Detailed Information of EAPs

You can click Overview, Config, and Performance tab to view different detailed information of

EAPs.

Overview Overview displays the EAP’s name/MAC address, IP address, status, model, software

version, number of connected clients and download/upload bytes.

Config Config displays the EAP’s name/MAC address, IP address, status, model, software

version, WLAN Group bounded with the 2G and 5G of the EAP, and radio of the 2G and

5G.

Performance Performance displays the EAP’s name/MAC address, IP address, status, model,

software version, number of connected 2G clients and 5G clients, TX(Downloaded

Traffic), RX(Uploaded Traffic), TX 2G and TX 5G.

2.3.3  Manage the EAPs in the Action Column

You can execute the corresponding operation to the EAP by clicking an icon in the Action column.

Locate the EAP in the map.

Reboot the EAP.

20

Upgrade the EAP.

Click Browse to locate and choose the upgrade file in your computer, then click

Upgrade to install the latest EAP firmware. The Status will appear as Upgrading until

the process is complete and the EAP reconnects to the EAP Controller.

Note:

· Only managed EAPs can be rebooted or upgraded.

· If you want to login to the EAP’s own management interface, you need to forget the EAP before that.

2.4 Monitor and Manage Clients

The Clients tab displays the clients connected to the EAP network.

2.4.1  View the Current Information of Clients

The clients are divided into two types: User and Guest. Users are the clients connected to the EAP

wireless network without the Portal Authentication. Guests are the clients connected to the EAP

wireless network with the Portal Authentication.

You can click the following tabs to respectively view the detailed information of users and guests.

All Clients The page will display the information of all clients including users and guests.

Users The page will display the information of Users.

Guests The page will display the information of Guests.

2.4.2  Manage Clients in the Action Column

You can execute the corresponding operation to the EAP by clicking an icon in the Action column:

21

Reconnect the client to the network.

Restrict the client’s access to the network.

If the client is Guest, you can click this icon to cancel the authorization for it.

2.5 View Clients Statistics During the Specified Period

The Clients Statistics page under the Insight tab displays the information of clients that have

connected to the EAPs network during a specified period.

2.5.1  Select a Specified Period

Select a period from the drop-down menu. Then the page will display clients that have connected to

the EAPs network during the period.

2.5.2  View the History Information of Clients

You can click the client’s MAC address to get its connection history or click the following tabs to

view the information of different types of clients:

22

All The page will display the history information of all the clients.

User The page will display the history information of Users.

Users are the clients connected to the EAP wireless network without the Portal

Authentication.

Guest The page will display the history information of Guests.

Guests are the clients connected to the EAP wireless network with the Portal Authentication.

Blocked The page will display the clients that have been blocked.

All The page will display the history information of all clients.

Offline Only The page will display the history information of the offline clients.

2.5.3  Manage Clients in the Action Column

You can execute the corresponding operation to the EAP by clicking an icon in the Action column:

Block the client’s access to the network.

Resume the client’s access.

2.6 Manage the Rogue APs List

A Rogue AP is an access point that has been installed on a secure network without explicit

authorization from a system administrator. The EAP Controller can scan all channels to detect

all nearby EAPs. If rogue APs are detected, they will be shown on the Untrusted Rogue APs list.

Besides, you can move the untrusted rogue APs to the Trusted Rogue APs list.

2.6.1  Manage the Untrusted Rogue APs List

The Untrusted Rogue APs page displays the detailed information of untrusted rogue APs.

23

You can execute the corresponding operation to the EAP by clicking an icon in the Action column:

Move the untrusted rogue AP to the Trusted Rogue APs list.

Delete this record.

Delete all records.

2.6.2  Manage the Trusted Rogue APs List

The Trusted Rogue APs page displays the detailed information of trusted rogue APs.

You can execute the corresponding operation to the EAP by clicking an icon in the Action column:

Move the trusted rogue AP to the Untrusted Rogue APs list.

Export and download the current Trusted Rogue APs list and save it on your PC.

24

Import a saved Trusted Rogue APs list. If the MAC address of an AP appears in list, it will

not be detected as a rogue AP.

Please follow the steps below:

1. Select Replace (replace the current Trusted Rogue APs list with the one you import) or

Merge (add the APs in the file to the current Trusted Rogue APs list).

2. Click Browse to locate the file and choose it.

3. Click Import to import the Trusted Rogue APs list.

2.7 View Past Guest Authorization

The Past Guest Authorization page displays the details about all the clients that accessed the

network during a certain time period. You can select a period in the drop-down list.

2.8 View Logs

The logs of the EAP Controller can effectively record, classify and manage the system information

of the managed EAPs, providing powerful support for network administrator to monitor network

operation and diagnose malfunctions. The Logs page displays EAP’s MAC address, level, occurred

time and content.

25

2.9 View Alerts

You can see the status change of your EAPs on the Unarchived Alerts page. You can click or

to move unarchived alerts to the Archived Alerts page.

As follows, the Archived Alerts page displays the alerts archived by you. You can click or

to delete the records.

26

3 Congure the EAPs Globally

This chapter introduces the global configurations applied to all the managed EAPs. To configure a

specific EAP, please refer to Chapter 4 Configure the EAPs Separately.

In global configurations, you can configure the following items:

·

Wireless Network

·

Access Control

·

Portal Authentication

·

Free Authentication Policy

·

MAC Filter

·

Scheduler

·

System

27

3.1 Wireless Network

In addition to the wireless network you created in Quick Start, you can add more wireless networks

and configure the advanced wireless parameters to improve the quality of the wireless network.

3.1.1  Add Wireless Networks

To add wireless networks, follow the steps below.

1. Go to Wireless Settings > Basic Wireless Setting.

2. Select a band frequency and click at the right of to add a WLAN

group. If you have no need to group your wireless networks, you can use the default WLAN

group and skip this step.

3. Specify a name for the group and click Apply.

4. Select the brand frequency and WLAN group .

5. Click to add an SSID to the specific WLAN group.

6. Configure the parameters in the following window.

28

SSID Name Enter an SSID name contains up to 32 characters.

Wireless Vlan ID Set a VLAN ID for the wireless network. Wireless networks with the same VLAN ID

are grouped to a VLAN.

The value ranges from 0 to 4094. 0 means VLAN function is disabled.

SSID Broadcast With the option enabled, EAPs will broadcast the SSID to the nearby hosts, so that

those hosts can find the wireless network identified by this SSID. If this option is

disabled, users must enter the SSID manually to connect to the EAP.

Enabled by default.

Security Mode Select the security mode of the wireless network.

None: The hosts can access the wireless network without authentication.

WEP/WPA-Enterprise/WPA-PSK: The hosts need to get authenticated before

accessing the wireless network. For the network security, you are suggested to

encrypt your wireless network. Settings vary in different security modes and the

details are in the following introduction.

Portal With the option enabled, the configurations in Portal will be applied. Portal provides

authentication service for the clients who just need temporary access to the

wireless network, such as the customers in shopping mall and restaurant.

Disabled by default.

SSID Isolation With the option enabled, the devices connected in the same SSID of the same AP

cannot communicate with each other.

Disabled by default.

Access Control Select an Access Control rule for this SSID. For more information, refer to Access

Control.

29

Following is the detailed introduction of WEP, WPA-Enterprise and WPA-PSK.

WEP

WEP is based on the IEEE 802.11 standard and less safe than WPA-Enterprise and WPA-PSK.

Note:

WEP is not supported in 802.11n mode or 802.11ac mode. If WEP is applied in 802.11n, 802.11 ac or 802.11n/

ac mixed mode, the clients may not be able to access the wireless network. If WEP is applied in 11b/g/n mode

(2.4GHz) or 11a/n (5GHz), the EAP device may work at a low transmission rate.

Type Select the authentication type for WEP.

Auto: The EAP Controller can select Open System or Shared Key automatically

based on the wireless station’s capability and request.

Open System: Clients can pass the authentication and associate with the wireless

network without password. However, correct password is necessary for data

transmission.

Shared Key: Clients have to input password to pass the authentication, otherwise it

cannot associate with the wireless network or transmit data.

Key Selected Select one key to specify. You can configure four keys at most.

WEP Key Format Select ASCII or Hexadecima as the WEP key format.

ASCII: ASCII format stands for any combination of keyboard characters of the

specified length.

Hexadecimal: Hexadecimal format stands for any combination of hexadecimal

digits (0-9, a-f, A-F) with the specified length.

Key Type Select the WEP key length for encryption.

64Bit: Enter 10 hexadecimal digits or 5 ASCII characters.

128Bit: Enter 26 hexadecimal digits or 13 ASCII characters.

152Bit: Enter 32 hexadecimal digits or 16 ASCII characters.

Key Value Enter the WEP keys. The length and valid characters are affected by key type.

30

WPA-Enterprise

The WPA-Enterprise mode requires a RADIUS server to authenticate clients. Since the WPA-

Enterprise can generate different passwords for different clients, it is much safer than WPA-PSK.

However, it costs much more to maintain and is usually used by enterprise.

Version Select the version of WPA-Enterprise.

Auto: The EAP will automatically choose the version used by each client device.

WPA/WPA2: Two versions of Wi-Fi Protected Access.

Encryption Select the Encryption type.

Auto: The default setting is Auto and the EAP will select TKIP or AES

automatically based on the client device’s request.

TKIP: Temporal Key Integrity Protocol. TKIP is not supported in 802.11n mode,

802.11ac mode or 802.11n/ac mixed mode. If TKIP is applied in 802.11n,

802.11 ac or 802.11n/ac mixed mode, the clients may not be able to access the

wireless network of the EAP. If TKIP is applied in 11b/g/n mode (2.4GHz) or 11a/

n mode(5GHz), the device may work at a low transmission rate.

AES: Advanced Encryption Standard. We recommend you select AES as the

encryption type because it is more secure than TKIP.

RADIUS Server IP Enter the IP address of the RADIUS Server.

RADIUS Port Enter the port number of the RADIUS Server.

RADIUS Password Enter the shared secret key of the RADIUS server.

Group Key Update

Period

Specify a group key update period, which instructs the EAP how often it should

change the encryption keys. The value can be either 0 or 30~8640000 seconds.

0 means no change of the encryption key anytime.

31

WPA-PSK

Based on a pre-shared key, WPA-PSK is characterized by high safety and simple settings and is

mostly used by common households and small businesses.

Version Select the version of WPA-PSK.

Auto: The EAP will automatically choose the version for each client device.

WPA-PSK: Pre-shared key of WPA.

WAP2-PSK: Pre-shared key of WPA2.

Encryption Select the Encryption type.

Auto: The default setting is Auto and the EAP will select TKIP or AES automatically

based on the client request.

TKIP: Temporal Key Integrity Protocol. TKIP is not supported in 802.11n mode,

802.11ac mode or 802.11n/ac mixed mode. If TKIP is applied in 802.11n, 802.11

ac or 802.11n/ac mixed mode, the clients may not be able to access the wireless

network of the EAP. If TKIP is applied in 11b/g/n mode (2.4GHz) or 11a/n mode(5GHz),

the device may work at a low transmission rate.

AES: Advanced Encryption Standard. We recommend you select AES as the

encryption type for it is more secure than TKIP.

Wireless

Password

Configure the wireless password with ASCII or Hexadecimal characters.

For ASCII, the length should be between 8 and 63 characters with combination of

numbers, letters (case-sensitive) and common punctuations. For Hexadecimal, the

length should be 64 characters (case-insensitive, 0-9, a-f, A-F).

Group Key

Update Period

Specify a group key update period, which instructs the EAP how often it should

change the encryption keys. The value can be either 0 or 30~8640000 seconds. 0

means the encryption keys will not be changed all the time.

7. Enable Rate Limit for the clients to guarantee the network balance. Enter the value for Download

Limit and Upload Limit. 0 means unlimited.

8. Click Apply to add the new SSID.

32

3.1.2  Configure Advanced Wireless Parameters

Proper wireless parameters can improve the network’s stability, reliability and communication

efficiency. The advanced wireless parameters consist of Beacon Interval, DTIM Period, RTS

Threshold, Fragmentation Threshold and Airtime Fairness.

To configure the advanced wireless parameters, follow the steps below.

1. Go to Wireless Settings > Advanced Wireless Setting.

2. Select the band frequency .

3. Configure the following parameters.

Beacon Interval Beacons are transmitted periodically by the EAP device to announce the

presence of a wireless network for the clients. Beacon Interval value determines

the time interval of the beacons sent by the device.

You can specify a value between 40 and 100ms. The default is 100ms.

DTIM Period The DTIM (Delivery Traffic Indication Message) is contained in some Beacon

frames. It indicates whether the EAP device has buffered data for client devices.

The DTIM Period indicates how often the clients served by this EAP device

should check for buffered data still on the EAP device awaiting pickup.

You can specify the value between 1-255 Beacon Intervals. The default value is 1,

indicating clients check for buffered data on the EAP device at every beacon. An

excessive DTIM interval may reduce the performance of multicast applications,

so we recommend you keep it by default.

RTS Threshold RTS (Request to Send) can ensure efficient data transmission. When RTS is

activated, the client will send a RTS packet to EAP to inform that it will send data

before it send packets. After receiving the RTS packet, the EAP notices other

clients in the same wireless network to delay their transmitting of data and

informs the requesting client to send data, thus avoiding the conflict of packet.

If the size of packet is larger than the RTS Threshold, the RTS mechanism will be

activated.

If you specify a low threshold value, RTS packets are sent more frequently

and help the network recover from interference or collisions that might occur

on a busy network. However, it also consumes more bandwidth and reduces

the throughput of the packet. We recommend you keep it by default. The

recommended and default value is 2347.

33

Fragmentation

Threshold

The fragmentation function can limit the size of packets transmitted over the

network. If a packet exceeds the Fragmentation Threshold, the fragmentation

function is activated and the packet will be fragmented into several packets.

Fragmentation helps improve network performance if properly configured.

However, too low fragmentation threshold may result in poor wireless

performance caused by the extra work of dividing up and reassembling of

frames and increased message traffic. The recommended and default value is

2346 bytes.

Airtime Fairness With this option enabled, each client connecting to the EAP can get the same

amount of time to transmit data, avoiding low-data-rate clients to occupy

too much network bandwidth and improving the network throughput. We

recommend you enable this function under multi-rate wireless networks.

4. Click Apply.

3.1.3  Configure Band Steering

A client device that is capable of communicating on both the 2.4GHz and 5GHz frequency bands

will typically connect to the 2.4 GHz band. However, if too many client devices are connected to an

EAP on the 2.4 GHz band, the efficiency of communication will be diminished. Band Steering can

steer clients capable of communication on both bands to the 5GHz frequency band which supports

higher transmission rates and more client devices, and thus to greatly improve the network quality.

To configure Band Steering, follow the steps below.

1. Go to Wireless Settings > Band Steering.

2. Check the box to enable the Band Steering function.

3. Configure the following parameters to balance the clients on both frequency bands:

34

Connection

Threshold/Difference

Threshold

When the number of clients on the 5GHz band reaches the value of

Connection Threshold and the difference value between the number

of clients on the 2.4GHz band and the 5GHz band reaches the value of

Difference Threshold, EAPs will refuse the requests of communication on

the 5GHz band from other clients and no longer steer other clients to the

5GHz band.

The value of Connection Threshold is from 2 to 40, and the default is 20.

The value of Difference Threshold is from 1 to 8, and the default is 4.

Max Failures If a client repeatedly attempts to associate with the EAP on the 5GHz band

and the number of rejections reaches the value of Max Failures, the EAP will

accept the request.

The value is from 0 to 100, and the default is 10.

4. Click Apply.

3.2 Access Control

Access Control is used to block or allow the clients to access specific subnets. To configure

Access Control rules, follow the steps below.

1. Go to Wireless Control > Access Control.

2. Click to add a new Access Control rule.

3. Configure the following parameters.

35

Rule Name Specify a name for this rule.

Rule Mode Select the mode for this rule.

Block: Select this mode to block the rule members to access the network.

Allow: Select this mode to allow the rule members to access the network.

Rule Memebers Subnets: Clients of the subnet will be controlled by the rule. Enter the subnet for

this rule in the format X.X.X.X/X and click . Up to 16 subnets can be added.

Except Subnets: Clients of the subnet will be controlled by the rule. Enter the

subnet that does not follow this rule in the format X.X.X.X/X and click . Up

to 16 subnets can be added.

The rule will not apply to the subnets that is in both the Subnets list and the

Except Subnets list.

4. Click Apply.

5. Go to Wireless Settings > Basic Wireless Setting and enable Access Control function of a

selected SSID.

3.3 Portal Authentication

Portal authentication enhances the network security by providing authentication service to the

clients that just need temporary access to the wireless network. Such clients have to log into a

web page to establish verification, after which they will access the network as guests. What’s more,

you can customize the authentication login page and specify a URL which the newly authenticated

clients will be redirected to.

To configure Portal Authentication, go to Wireless Control > Portal and click .

36

Then the following window will pop up:

These authentication methods are available: No Authentication, Simple Password, Local User,

Voucher, SMS, Facebook, External RADIUS Server and External Portal Server. The following

sections introduce how to configure each Portal authentication.

3.3.1  No Authentication

With No Authentication configured, clients can access the network without any authentication.

Follow the steps below to configure No Authentication:

1. Go to Wireless Settings > Basic Wireless Settings and create an SSID for the Portal.

2. Go back to the Portal configruation page. In the Basic Info section, complete the basic settings

for the portal authentication.

Congure the following parameters:

Portal Name Specify a name for the Portal.

SSID Select an SSID for the Portal.

Authentication Type Select No Authentication.

Authentication

Timeout

The client’s authentication will expire after the time period you set and

the client needs to log in the web authentication page again to access the

network.

Options include 1 Hour, 8 Hours, 24 Hours, 7 Days, Custom. Custom allows

you to define the time in days, hours, and minutes. The default value is one

hour.

37

Redirect If you enable this function, the portal will redirect the newly authenticated

clients to the configured URL.

Redirect URL If the Redirect function above is enabled, enter the URL that a newly

authenticated client will be redirected to.

3. In the Login Page section, configure the login page for the Portal.

Congure the following parameters:

Background Select the background type. Two types are supported: Solid Color and

Picture.

Background Color If Solid Color is selected, configure your desired background color through

the color picker or by entering the RGB value manually.

Background Picture If Picture is selected, click the Choose button and select a picture from

your PC. Drag and scale the clipping region to edit the picture and click

Confirm.

Logo Picture Click the Choose button and select a picture from your PC. Drag and scale

the clipping region to edit the picture and click Confirm.

In addtion, you can click and configure the logo position. The options

include Middle, Upper and Lower.

38

Welcome Information Specify the welcome information.

In addtion, you can click and select your desired text color for the

welcome information through the color picker or by entering the RGB value

manually.

Copyright Specify the copyright information.

In addtion, you can click and select your desired text color for Copyright

information through the color picker or by entering the RGB value manually.

39

Button Click and configure the button.

Button Position: Set the position of the login button. The options include

Middle, Upper and Lower.

Button Color: Select your desired login button color through the color

picker or by entering the RGB value manually.

Button Text Color: Select your desired text color for the button through the

color picker or by entering the RGB value manually.

4. In the Advertisement section, select whether display advertisement pictures for users and

configure the related parameters.

Congure the following parameters:

Advertisement Specify whether to enable the Advertisement feature. With this feature

enabled, you can add advertisement pictures on the authentication page.

These advertisement pictures will be displayed before the login page

appears. You can also allow users to skip the advertisement by enabling

Allow to Skip Advertisement.

Picture Resource Upload advertisement pictures. When several pictures are added, they will

be played in a loop.

Advertisement

Duration Time

Specify how long the advertisement will be displayed for. For this duration,

the pictures will be played in a loop. If the duration time is not enough for all

the pictures, the rest will not be displayed.

40

Picture Careusel

Interval

Specify the picture carousel interval. For example, if this value is set as 5

seconds, the first picture will be displayed for 5 seconds, followed by the

second picture for 5 seconds, and so on.

Allow Users To Skip

Advertisement

Specify whether to enable this feature. With this feature enabled, the user

can click the Skip button to skip the advertisement.

5. Click Apply.

3.3.2  Simple Password

With Simple Password configured, clients are required to enter the correct password to pass the

authentication.

Follow the steps below to configure No Simple Password Portal:

1. Go to Wireless Settings > Basic Wireless Settings and create an SSID for the Portal.

2. Go back to the Portal configruation page. In the Basic Info section, complete the basic settings

for the portal authentication.

Congure the following parameters:

Portal Name Specify a name for the Portal.

SSID Select an SSID for the Portal.

Authentication Type Select Simple Password.

Password Set the password for authentication.

Authentication

Timeout

The client’s authentication will expire after the time period you set and

the client needs to log in the web authentication page again to access the

network.

Options include 1 Hour, 8 Hours, 24 Hours, 7 Days, Custom. Custom allows

you to define the time in days, hours, and minutes. The default value is one

hour.

Redirect If you enable this function, the portal will redirect the newly authenticated

clients to the configured URL.

Redirect URL If the Redirect function above is enabled, enter the URL that a newly

authenticated client will be redirected to.

3. In the Login Page section, configure the login page for the Portal.

41

Congure the following parameters:

Background Select the background type. Two types are supported: Solid Color and

Picture.

Background Color If Solid Color is selected, configure your desired background color through

the color picker or by entering the RGB value manually.

Background Picture If Picture is selected, click the Choose button and select a picture from

your PC. Drag and scale the clipping region to edit the picture and click

Confirm.

Logo Picture Click the Choose button and select a picture from your PC. Drag and scale

the clipping region to edit the picture and click Confirm.

In addtion, you can click and configure the logo position. The options

include Middle, Upper and Lower.

Welcome Information Specify the welcome information.

In addtion, you can click and select your desired text color for the

welcome information through the color picker or by entering the RGB value

manually.

42

Copyright Specify the copyright information.

In addtion, you can click and select your desired text color for Copyright

information through the color picker or by entering the RGB value manually.

Button Click and configure the button.

Button Position: Set the position of the login button. The options include

Middle, Upper and Lower.

Button Color: Select your desired login button color through the color

picker or by entering the RGB value manually.

Button Text Color: Select your desired text color for the button through the

color picker or by entering the RGB value manually.

4. In the Advertisement section, select whether display advertisement pictures for users and

configure the related parameters.

43

Congure the following parameters:

Advertisement Specify whether to enable the Advertisement feature. With this feature

enabled, you can add advertisement pictures on the authentication page.

These advertisement pictures will be displayed before the login page

appears. You can also allow users to skip the advertisement by enabling

Allow to Skip Advertisement.

Picture Resource Upload advertisement pictures. When several pictures are added, they will

be played in a loop.

Advertisement

Duration Time

Specify how long the advertisement will be displayed for. For this duration,

the pictures will be played in a loop. If the duration time is not enough for all

the pictures, the rest will not be displayed.

Picture Careusel

Interval

Specify the picture carousel interval. For example, if this value is set as 5

seconds, the first picture will be displayed for 5 seconds, followed by the

second picture for 5 seconds, and so on.

Allow Users To Skip

Advertisement

Specify whether to enable this feature. With this feature enabled, the user

can click the Skip button to skip the advertisement.

5. Click Apply.

3.3.3  Local User

With Local User configured, clients are required to enter the correct username and password of

the login account to pass the authentication. You can create multiple accounts and assign different

accounts for different users.

Configure Local User Portal

Follow the steps below to configure Local User Portal:

1. Go to Wireless Settings > Basic Wireless Settings and create an SSID for the Portal.

2. Go back to the Portal configruation page. In the Basic Info section, complete the basic settings

for the portal authentication.

44

Congure the following parameters:

Portal Name Specify a name for the Portal.

SSID Select an SSID for the Portal.

Authentication Type Select Local User.

User Management You can click this button to configure user accounts for authentication later.

Please refer to Create Local User Accounts.

Redirect If you enable this function, the portal will redirect the newly authenticated

clients to the configured URL.

Redirect URL If the Redirect function above is enabled, enter the URL that a newly

authenticated client will be redirected to.

3. In the Login Page section, configure the login page for the Portal.

Congure the following parameters:

Background Select the background type. Two types are supported: Solid Color and

Picture.

Background Color If Solid Color is selected, configure your desired background color through

the color picker or by entering the RGB value manually.

Background Picture If Picture is selected, click the Choose button and select a picture from

your PC. Drag and scale the clipping region to edit the picture and click

Confirm.

Logo Picture Click the Choose button and select a picture from your PC. Drag and scale

the clipping region to edit the picture and click Confirm.

In addtion, you can click and configure the logo position. The options

include Middle, Upper and Lower.

45

Welcome Information Specify the welcome information.

In addtion, you can click and select your desired text color for the

welcome information through the color picker or by entering the RGB value

manually.

Copyright Specify the copyright information.

In addtion, you can click and select your desired text color for Copyright

information through the color picker or by entering the RGB value manually.

46

Button Click and configure the button.

Button Position: Set the position of the login button. The options include

Middle, Upper and Lower.

Button Color: Select your desired login button color through the color

picker or by entering the RGB value manually.

Button Text Color: Select your desired text color for the button through the

color picker or by entering the RGB value manually.

4. In the Advertisement section, select whether display advertisement pictures for users and

configure the related parameters.

Congure the following parameters:

Advertisement Specify whether to enable the Advertisement feature. With this feature

enabled, you can add advertisement pictures on the authentication page.

These advertisement pictures will be displayed before the login page

appears. You can also allow users to skip the advertisement by enabling

Allow to Skip Advertisement.

Picture Resource Upload advertisement pictures. When several pictures are added, they will

be played in a loop.

Advertisement

Duration Time

Specify how long the advertisement will be displayed for. For this duration,

the pictures will be played in a loop. If the duration time is not enough for all

the pictures, the rest will not be displayed.

47

Picture Careusel

Interval

Specify the picture carousel interval. For example, if this value is set as 5

seconds, the first picture will be displayed for 5 seconds, followed by the

second picture for 5 seconds, and so on.

Allow Users To Skip

Advertisement

Specify whether to enable this feature. With this feature enabled, the user

can click the Skip button to skip the advertisement.

5. Click Apply.

Create Local User Accounts

Follow the steps below to create the user accounts for authentication:

1. In the Basic Info section on the portal configuration page, select the authentication type as Local

User and click User Management. The management page will appear. Go to the User page and

click .

2. The following window will pop up. Configure the required parameters and click Apply.

48

Congure the following parameters:

Username Specify the username. The username should not be the same as any

existing one.

Password Specify the password. Users will be required to enter the username and

password when they attempt to access the network.

Authentication

Timeout

Specify the authentication timeout for formal users. After the timeout, the

users need to log in at the web authentication page again to access the

network.

MAC Address Binding

Type

There are three types of MAC binding: No Binding, Static Binding and

Dynamic Binding.

Static Binding: Specify a MAC address for this user account. Then only the

user with the this MAC address can use the username and password to

pass the authentication.

Dynamic Binding: The MAC address of the first user that passes the

authentication will be bound. Then only this user can use the username and

password to pass the authentication.

Maximum Users Specify the maximum number of users able to use this account to pass the

authencitation. This option is available only when the MAC Address Binding

Type is set as No Binding.

Name Specify a name for identification.

Telephone Specify a telephone number for identification.

Rate Limit (Download) Select whether to enable download rate limit. With this option enabled, you

can specify the limit of download rate.

Rate Limit (Upload) Select whether to enable upload rate limit. With this option enabled, you

can specify the limit of upload rate.

Traffic Limit Select whether to enable traffic limit. With this option enabled, you can

specify the total traffic limit for the user. Once the limit is reached, the user

can no longer use this account to access the network.

3. In the same way, you can add more user accounts. The created user accounts will be displayed

in the list. Users can use the username and password of the account to pass the portal

authentication.

By default, the account Status is , which means that the user account is enabled and valid. You

can also click this icon to disable the user account. The icon will be changed to , which means

that the user account is disabled.

49

Additionally, you can click to backup all the user account information into a CSV le

or XLS le and save the le to your PC. If needed, you can click and select the le to

import the account information to the list.

Note:

Using Excel to open the CSV file may cause some numerical format changes, and the number may be

displayed incorrectly. If you use Excel to edit the CSV file, please set the cell format as text.

Manage the Guests

On the Guest page, you can view the information of clients that have passed the portal

authentication and manage the clients.

You can select an icon to execute the corresponding operation:

Disconnect client.

Extend the effective time.

Create Operator Accounts

Operator account can be used to remotely manage the Local User Portal and Voucher Portal. Other

users can visit the URL https://EAP Controller Host’s IP Address:8043/hotspot (For example:

https://192.168.0.64:8043/hotspot) and use the Operator account to enter the portal management

page.

Note:

The users who enter the portal management page by Operator account can only create local user accounts

and vouchers and manage the clients.

Follow the steps below to create Operator account.

1. Go to the Operator page.

2. Click and the following window will pop up.

50

3. Specify the Name, Password and Notes of the Operator account.

4. Choose Site Privileges (more than one options can be chosen) for the Operator account.

5. Click Apply to create an Operator account. Then other users can use this account to enter the

hotspot management page.

3.3.4  Voucher

With Voucher configured, you can distribute the vouchers automatically generated by the EAP

Controller to the clients. Clients can use the vouchers to access the network.

Configure Voucher Portal

Follow the steps below to configure Voucher Portal:

1. Go to Wireless Settings > Basic Wireless Settings and create an SSID for the Portal.

2. Go back to the Portal configruation page. In the Basic Info section, complete the basic settings

for the portal authentication.

Congure the following parameters:

Portal Name Specify a name for the Portal.

SSID Select an SSID for the Portal.

Authentication Type Select Voucher.

User Management You can click this button to configure vouchers for authentication later.

Please refer to

Create Vouchers

.

Redirect If you enable this function, the portal will redirect the newly authenticated

clients to the configured URL.

Redirect URL If the Redirect function above is enabled, enter the URL that a newly

authenticated client will be redirected to.

51

3. In the Login Page section, configure the login page for the Portal.

Congure the following parameters:

Background Select the background type. Two types are supported: Solid Color and

Picture.

Background Color If Solid Color is selected, configure your desired background color through

the color picker or by entering the RGB value manually.

Background Picture If Picture is selected, click the Choose button and select a picture from

your PC. Drag and scale the clipping region to edit the picture and click

Confirm.

Logo Picture Click the Choose button and select a picture from your PC. Drag and scale

the clipping region to edit the picture and click Confirm.

In addtion, you can click and configure the logo position. The options

include Middle, Upper and Lower.

Welcome Information Specify the welcome information.

In addtion, you can click and select your desired text color for the

welcome information through the color picker or by entering the RGB value

manually.

52

Copyright Specify the copyright information.

In addtion, you can click and select your desired text color for Copyright

information through the color picker or by entering the RGB value manually.

Button Click and configure the button.

Button Position: Set the position of the login button. The options include

Middle, Upper and Lower.

Button Color: Select your desired login button color through the color

picker or by entering the RGB value manually.

Button Text Color: Select your desired text color for the button through the

color picker or by entering the RGB value manually.

4. In the Advertisement section, select whether display advertisement pictures for users and

configure the related parameters.

53

Congure the following parameters:

Advertisement Specify whether to enable the Advertisement feature. With this feature

enabled, you can add advertisement pictures on the authentication page.

These advertisement pictures will be displayed before the login page

appears. You can also allow users to skip the advertisement by enabling

Allow to Skip Advertisement.

Picture Resource Upload advertisement pictures. When several pictures are added, they will

be played in a loop.

Advertisement

Duration Time

Specify how long the advertisement will be displayed for. For this duration,

the pictures will be played in a loop. If the duration time is not enough for all

the pictures, the rest will not be displayed.

Picture Careusel

Interval

Specify the picture carousel interval. For example, if this value is set as 5

seconds, the first picture will be displayed for 5 seconds, followed by the

second picture for 5 seconds, and so on.

Allow Users To Skip

Advertisement

Specify whether to enable this feature. With this feature enabled, the user

can click the Skip button to skip the advertisement.

5. Click Apply.

Create Vouchers

Follow the steps below to create vouchers for authentication:

1. In the Basic Info section, select the authentication type as Voucher and click Voucher

Manager. The voucher management page will appear. Go to the Voucher page and click

.

2. The following window will pop up. Configure the required parameters and click Apply.

54

Congure the following parameters:

Code Length Specify the length of the voucher codes to be created.

Amount Enter the voucher amount to be generated.

Type Select Single Use or Multi Use.

Single Use means one voucher can only be distributed to one client. Multi Use

means one voucher can be distributed to several clients, who can use the

same voucher to access the network at the same time.

If you select Multi Use, enter the value of Max Users. When the number of

clients who are connected to the network with the same voucher reaches the

value, no more clients can use this voucher to access the network.

Duration Select the period of validity of the Voucher.

The options include 8 hours, 2 days and User-defined. The period of valid of

the voucher is reckoned from the time when it is used for the first time.

Rate Limit

(Download)

Select whether to enable download rate limit. With this option enabled, you

can specify the limit of download rate.

Rate Limit (Upload) Select whether to enable upload rate limit. With this option enabled, you can

specify the limit of upload rate.

Traffic Limit Specify the total traffic limit for one voucher. Once the limit is reached, the

client can no longer access the network using the voucher.

Notes Enter a description for the Voucher (optional).

3. The Vouchers will be generated and displayed on the page.

55

4. Click or to print and save the vouchers.

5. Distribute the vouchers to clients, and then they can use the codes to pass authentication.

6. When the vouchers are invalid, you can click to delete the Voucher or click to delete all of

them.

Manage the Guests

On the Guest page, you can view the information of clients that have passed the portal

authentication and manage the clients.

56

You can select an icon to execute the corresponding operation:

Restrict the client to access the network.

Extend the effective time.

Create Operator Accounts

Operator account can be used to remotely manage the Local User Portal and Voucher Portal. Other

users can visit the URL https://EAP Controller Host’s IP Address:8043/hotspot (For example:

https://192.168.0.64:8043/hotspot) and use the Operator account to enter the portal management

page.

Note:

The users who enter the portal management page by Operator account can only create local user accounts

and vouchers and manage the clients.

Follow the steps below to create Operator account.

1. Go to the Operator page.

2. Click and the following window will pop up.

3. Specify the Name, Password and Notes of the Operator account.

4. Choose Site Privileges (more than one options can be chosen) for the Operator account.

5. Click Apply to create an Operator account. Then other users can use this account to enter the

hotspot administrative system.

57

3.3.5  SMS

With SMS portal configured, client can get verification codes using their mobile phones and enter

the received codes to pass the authentication.

Follow the steps below to configure SMS Portal:

1. Go to www.twilio.com/try-twilio and get a Twilo account. Buy the Twilio service for SMS. Then get

the account information, including ACCOUNT SID, AUTH TOKEN and Phone number.

2. Go to Wireless Settings > Basic Wireless Settings and create an SSID for the Portal.

3. Go back to the Portal configruation page. In the Basic Info section, complete the basic settings

for the portal authentication.

Congure the following parameters:

Portal Name Specify a name for the Portal.

SSID Select an SSID for the Portal.

Authentication Type Select SMS.

Twilio SID Enter the Account SID for Twilio API Credentials.

Auth Token Enter the Authentication Token for Twilio API Credentials.

Phone Number Enter the phone number that is used to send verification messages to the

clients.

Maximum Users A telephone can get several codes via messages one by one, and different

clients can use different codes to pass the authentication. However, the

number of clients that are allowed to be authenticated using the same

telephone at the same time has a upper limit.

Specify the upper limit in this field.

Authentication

Timeout

The client’s authentication will expire after the time period you set and

the client needs to log in the web authentication page again to access the

network.

Options include 1 Hour, 8 Hours, 24 Hours, 7 Days, Custom. Custom allows

you to define the time in days, hours, and minutes. The default value is one

hour.

58

Preset Country Code Set the default country code that will be filled automatically on the

authentication page.

Redirect If you enable this function, the portal will redirect the newly authenticated

clients to the configured URL.

Redirect URL If the Redirect function above is enabled, enter the URL that a newly

authenticated client will be redirected to.

4. In the Login Page section, configure the login page for the Portal.

Congure the following parameters:

Background Select the background type. Two types are supported: Solid Color and

Picture.

Background Color If Solid Color is selected, configure your desired background color through

the color picker or by entering the RGB value manually.

Background Picture If Picture is selected, click the Choose button and select a picture from

your PC. Drag and scale the clipping region to edit the picture and click

Confirm.

Logo Picture Click the Choose button and select a picture from your PC. Drag and scale

the clipping region to edit the picture and click Confirm.

In addtion, you can click and configure the logo position. The options

include Middle, Upper and Lower.

59

Welcome Information Specify the welcome information.

In addtion, you can click and select your desired text color for the

welcome information through the color picker or by entering the RGB value

manually.

Copyright Specify the copyright information.

In addtion, you can click and select your desired text color for Copyright

information through the color picker or by entering the RGB value manually.

60

Button Click and configure the button.

Button Position: Set the position of the login button. The options include

Middle, Upper and Lower.

Button Color: Select your desired login button color through the color

picker or by entering the RGB value manually.

Button Text Color: Select your desired text color for the button through the

color picker or by entering the RGB value manually.

5. In the Advertisement section, select whether display advertisement pictures for users and

configure the related parameters.

Congure the following parameters:

Advertisement Specify whether to enable the Advertisement feature. With this feature

enabled, you can add advertisement pictures on the authentication page.

These advertisement pictures will be displayed before the login page

appears. You can also allow users to skip the advertisement by enabling

Allow to Skip Advertisement.

Picture Resource Upload advertisement pictures. When several pictures are added, they will

be played in a loop.

Advertisement

Duration Time

Specify how long the advertisement will be displayed for. For this duration,

the pictures will be played in a loop. If the duration time is not enough for all

the pictures, the rest will not be displayed.

61

Picture Careusel

Interval

Specify the picture carousel interval. For example, if this value is set as 5

seconds, the first picture will be displayed for 5 seconds, followed by the

second picture for 5 seconds, and so on.

Allow Users To Skip

Advertisement

Specify whether to enable this feature. With this feature enabled, the user

can click the Skip button to skip the advertisement.

6. Click Apply.

For more details about how to configure SMS Portal, you can go to http://www.tp-link.com/en/

configuration-guides.html and download the configuration guide for SMS Portal.

3.3.6  Facebook

With Facebook Portal configured, when clients connect to your Wi-Fi, they will be

redirected to your Facebook page. To access the internet, clients need to pass the

authentication on the page.

Follow the steps below to configure Facebook Portal:

1. Go to www.facebook.com and get a Facebook account. Create your Facebook page according

to your needs.

2. Go to Wireless Settings > Basic Wireless Settings and create an SSID for the Portal.

3. Go back to the Portal configruation page. In the Basic Info section, complete the settings for the