Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
For each Gateway, EnGenius Cloud collects and aggregates lots of data reported by the Gateway periodically. Sophisticated graphs and tables are available on the gateway detail page to ease the monitoring and tracking of a gateway. To get all the details, on the Gateway page, hover your mouse cursor on the row of Gateway you are interested in. A Detail button is shown click on it to get into the Gateway detail page.
This will display the WAN Info that you configured in the Configure > Gateway > Interface > WAN
Interface: Display WAN1 or WAN2
Name: The name of WAN1 or WAN2
Connection: DHCP, PPPoE, or Static
Public IP: This is the Internet public IP address of the WAN interface seen by the EnGenius Cloud. If there is an upstream NAT device, then this is the public IP address of the NAT device. If the gateway WAN interface is directly connected to the Internet, then this is the native IP address of the WAN interface.
WAN IP: The native IP address of the WAN interface. If the WAN interface is directly connected to the Internet, then this IP address is the same as the Public IP. If the WAN interface is connected to an upstream NAT device, then this IP address is usually a private IP address.
Gateway: the Gateway IP address of the WAN interface which is used as the next-hop gateway for Internet access through this WAN interface.
Good to know
The status bar near the WAN1/WAN2, Green means that this Interface has an internet connection, and Grey means this interface has no internet connection.
This graph shows the Latency between the EnGenius Security Gateway and Google Public DNS in a day/week/month view. Hover and click Day/Week/Month to see the latency graph view by Day/Week/Month.
The LAN tab displays the following information.
LAN Interface: the name of the LAN Interface
Subnet: the subnet IP address of the LAN Interface of the gateway
Used: the number of leased DHCP IP addresses of the gateway DHCP server for this LAN interface
Free: the number of remaining leasable DHCP IP addresses of the gateway DHCP server for this LAN interface
The DHCP Lease tab shows the current DHCP leasing status of the gateway. The following information is displayed.
Client: the name of the DHCP client
MAC: the MAC address of the DHCP client
IP: the DHCP IP address of the DHCP client
LAN Interface: the LAN interface that the DHCP client was connected to
Expires in: the expiration time of the leased DHCP IP address
The following clients will not appear in the DHCP leases table:
Clients with statically assigned addresses
Clients with fixed DHCP assignments
Clients receiving an address from another DHCP server
Clients that have not successfully received an address from the EnGenius Gateway
Clients connected over the client VPN
This allows you to run the diagnostic tests that can help the Network administrator to troubleshoot.
Under AP detail page > you can easily see the “Diag Tools” icon
Under Manage > Access Points > Diag
So the Full-screen tools are displayed, So you can use them.
Diag Tools are all “real-time”
AP diagnostic tools includes (1) Activity: CPU/Memory/Throughput/Channel Utilization(2) Speed test / Ping (3) traceroute (4) All channel utilization (5) Live Clients + (6) Spectrum Analyzer
Except Spectrum Analyzer is for “S” models only, (1)-(5) are all available for all models
Activity: The info is as now and we add “non-WiFi” channel utilization % to let users know how much of the total channel utilization rate is from non-WiFi, so users can know if the interfering is from other AP or the environment of the channel is dirty and got high white noise.
For the Speed test, users can choose one from the “Test Server” list (detected by AP) and do a speed test, so when users have an issue on “slow connectivity” issue, the admin can check if it’s due to “Slow uplink” of AP or due to dirty WiFi between client and AP.
Ping: We put 3 default servers for users to check the latency change. User can also define their own server for the ping test.
Traceroute: By default, we set the destination site to Google for the traceroute, and max hop is set to 8, which can be changed by the user. Traceroute allows user to know “the path” from the AP to the destination and will list every router/gateway (hop) and its latency, so if the destination is unreachable, then there must be some setting issue on router/gateway; and from the latency of each hop, the user will know the “slow uplink” is caused by which router/gateway. When the latency is over 10ms, the color will change to yellow, and if > 40ms, the color will change to red.
All channel utilization: This is a useful tool that user can easily see how dirty each channel is at a glance, and decide if he wants to change the channel of the AP manually. “Green” is “WiFi” traffic and “Orange” is “non-WiFi” interfering. By mouse-over, you can see the details of how much the % of WiFi and non-WiFi.
For the spectrum analysis tool (spectrogram or waterfall graph), we provide a rolling timeline view of signal strengths measured. The upper part shows the signal strength (RSSI) detected and the color indicates how many sources have been detected. The Lower part is the timeline view to let users know that, for example, channel 8 is dirtier than others, which might not be able to show from glance view of all channel utilization at the time, because the interfering source might not emit continuously but in high frequency.
In the Live clients, you can monitor the clients that are connected to specific AP. You can use it when the AP feature plan is PRO.
In the AP Basic feature plan, we only allow you to use the Diag tool in 1 min, after 1 min, Diag tools will be deactivated. If you want to use it longer, you can switch the AP feature plan to PRO.
you can use the diag tool when the AP firmware is 1.x.35 or above.
For each AP, there are more settings available to configure and fine-tune the system. In addition, EnGenius Cloud collects and aggregates lots of data reported by AP periodically. Sophisticated graphs and tables are available on the AP detail page to ease the monitoring and tracking of an AP. To get all the details, on AP list page, hover your mouse cursor on the row of AP you are interested in. A Details button is shown and clicks on it to get into AP detail page.
The first TAB page summarizes AP's current settings and states. All details of configurations and statistics are shown on this page.
The SSID section allows you to check and configure the exact SSID settings for this AP.
SSID: shows the SSID name.
Radio: shows the Radio (2.4GHz or 5GHz bands) turned on in this AP.
Security: security type set on the SSID.
Captive portal: shows authentication type for captive portal.
The Throughput section allows you to check the throughput statistics for this AP. Note that you can control the filters to get different results based on your requirement:
By SSID
By Time (daily/weekly/monthly)
The Radio section allows you to configure individual radio settings. The default radio setting will be followed by the network radio setting. If you want the radio settings of an access point to be different from the default, you can override them with custom values.
Enables customization of RSSI thresholds for specific APs to address unique scenarios. This will override the settings located on Configure Radios > Fast Handover
This requires AP Firmware V1.X.82 or later version.
This section allows you to configure IP address settings for the AP individually.
DHCP: You can choose to auto assign IP addresses if there is a DHCP server in the network.
Static: Allows you to manually assign an IP address.
Enter the IP address you wish to assign to the access point and fill in the subnet mask, default gateway, and DNS server address.
IPV4 Address: Enter the IP address for the access point.
Subnet Mask: Enter the subnet mask for the access point.
Gateway: Enter the default gateway for the access point.
DNS Server 1: Enter the primary DNS server name.
DNS Server 2: Enter the secondary DNS server name.
When an AP is just installed, you can take a photo (or several) on the AP and uploaded it to EnGenius Cloud as a property data for the AP. It's helpful for the installer to memorize where and how he installed the AP.
Good to Know: It is easier to take photo and upload it in Cloud-to-go App.
The EnGenius Cloud Log contains several logging subsystems that each have unique data retention and export options available. Datasets like device event, system configuration, and analytics are used for starkly different purposes (business intelligence, operations, risk management, etc.) and are reflected in the native logging capabilities. In the Log TAB page, the system list all the device logs for current AP. If you need to track events across a network, check Device Events for more details.
While the device log provides a thorough timeline of events on the AP, it is usually unnecessary to view all events. The following options are available to filter down the event log as needed.
Filtering events to a specific client can help troubleshoot individual connectivity issues. Entering the MAC address, hostname, or custom name in the Client field will display only events affecting that client, excluding other client information and device events. For the same reason, SSID field can be used to filter out events related with other SSIDs.
The event log shows all events for clients and devices, starting with the most recent event by default. The date and time filters are useful to display only events that happened at or before the specified time.
The event log are categorized in different severity:
Error
Warning
General
You can also set the filter to only show the logs with dedicated severity.
The following types of events will be reported by ECW access points:
WLAN Client Connection
WLAN Client Control
WLAN Radio
Client Roaming
Device Status
Mesh
AirGuard
The filter also support all types of events listed above.
Clients page provides comprehensive details of wireless clients that ever managed by the access point.
This page is filtered for current AP and supports all features as same as in Managing Clients. To get more details, please refer to the Managing Clients section.
Tips:
To browse the clients page by page, you just need to scroll down the page to the end of screen. The web system will automatically load next page for you.
The clients in the list are historical data reported by AP minutes ago. If you want to see clients connecting with AP in realtime, click on the Live Clients link. It will lead you to the diag tools which give you an update of client list in seconds.
EnGenius Cloud provides powerful diag tools to track every details of your network in REALTIME. To trigger the Diag Tools, simply click on the diag button shown below:
Please refer to Diag Tools to get more details.
On the top of AP detail page, the are two buttons available to control AP LEDs instantly.
LED Light: This allows you to enable or disable all LEDs on the AP. This is helpful if users does not want to LEDs of AP interfering their vision at night.
LED Blinking: Click light bulb icon. LEDs on the AP will blink for 10 seconds. This helps the installer to find and identify a AP.
This page will show you the VPN status of the Gateway in relation to all other EnGenius Gateways or Non-EnGenius Gateways in your organization with site-to-site VPN enabled. You can access the VPN Status page by navigating to Manage > VPN Status.
If you are in the Organization scope, you could select the gateway to monitor the current VPN status in relation to other EnGenius Peers or NonEnGenius Peers by switching the tab
Under the EnGenius Peers tab, the following information is available
Gateway: The name of the EnGenius Gateway.
Network: The Network to which the gateway is assigned.
WAN IP: The WAN IP of the remote gateway.
Subnet: The remote subnet network address behind the remote gateway that can be reached through Site to Site VPN.
Type: The type that is configured on the Configure > Gateway > Site to Site VPN
Usage: The amount of traffic to and from that EnGenius VPN peer.
Latency: Round-trip time latency between the EnGenius Gateway and the remote peers.
Uptime: This shows the time that the VPN tunnel has been active
If You are in the Network scope, it will display the gateway in the network to monitor the current VPN status in relation to other EnGenius Peers or NonEnGenius Peers.
On the non-EnGenius peer's tab, the following information is available
Gateway: Name of the EnGenius Gateway.
WAN IP: The WAN IP is configured for the non-EnGenius peer.
Subnet: The remote subnet network address behind the remote non-EnGenius gateway that can be reached through Site to Site VPN.
Users can drag & drop EnGenius Gateway and Non-EnGenius Gateway in the Organization to Google Maps and have a holistic view of the gateway deployed on google Maps and see the VPN topology. You can access this page Manage > VPN Status > Map
the color will show the latency of the VPN link to let the user has a quick view of the quality of each VPN link.
Once you created Orgs and Networks to define the scope of managed networks, next step is to add the devices to the managed network and manage them. To manage the Access Points in a Network, trigger the toolbar menu at the left-hand side: Manage > Access Points.
Click on Add from Inventory button. You can then pick the devices registered to the Org previously and add them to current Network.
Must Know:
One device can only be added to one network. All devices in the same network should apply the same network-wide settings except the settings are overridden individually.
Tips:
when you have multiple Org/Networks, you can stay in the AP list page and directly change the scope of Org/Networks. The system would lead you to different AP list pages quickly.
Single click on the row of a AP (anywhere but hyperlink). It invokes a Quickview Panel that helps showing important status and key configurations for you. User can quickly finetune settings and do comparisons among different APs without going in and out different pages.
It's pretty common that for some cases you need to set channel or Tx power for specific APs. This would require the capability to override network's default radio settings.
Follow these steps to customize the radio settings for an AP.
Choose an access point from the list to show its expanded settings.
2. In the Radio section, click the checkbox below the lock icon to override default settings.
3.Configure the following settings for both the 2.4GHz and 5GHz radio band:
Channel
Tx Power
Channel Width
4. Click Apply.
Although APs in the same network share the same SSID settings, sometimes you just do not want a specific AP to enable all SSIDs in the network. For example, you don't want the SSID of financial department to be enabled and accessible everywhere. In the Quickview Panel, you can also finetune and override SSID settings.
Follow the steps to override network-wide settings and enable or hide the SSID of a network.
1. In the WLAN section, click on the checkbox near lock icon to override default settings.
2. Configure SSID to be enabled or hidden per your request.
3. Click Apply.
Once you have APs added to the network, you can apply more actions on the APs:
Move
Select one or multiple access points and click to move the AP(s) to another hierarchy view/network.
Remove
Select one or multiple access points and click to remove from the current org/hierarchy view/network.
Click Manage > Switches to access this screen and double-click the organization/hierarchy view/network on the tree to change the scope.
The Switch List page lists all switches within your organization/hierarchy view/network, and allows you to choose each switch to view the port status, VLAN , STP and PoE.
The following describes the functions in this screen:
Move to: Select one or multiple switches and click to move the switches to another hierarchy view/network.
Remove From Networks: Select one or multiple switches and click to remove the switches from the current organization/hierarchy view/network.
Add From Inventory: Click this button to add switches from your existing inventory.
Detail: Click to display the individual switch details.
This allows you to view and configure PoE schedules that can be applied to the ports. Below screens display the existing schedules visually. Click Manage > Switch lists > detail > PoE scheduling to access this screen
Select the ports to be set the PoE scheduling then click Edit
2. Enable scheduling and then customize the PoE on or Off by dragging the bar. This behavior is the same when you configure the SSID scheduling.
3. If you want to do the PoE reset, you can simply click PoE rest and then drag the icon to the specific time.
4. Click Apply.
PDLG is a function that will automatically reboot PD devices when PoE switch found it was not responding. Which minimizes the downtime of network services and reduces admin effort via automatic processes.
In PDLG force ping mode, user have to set PD device IP manually. By keep pinging PDs, switch knows if PD is still alive or has to be rebooted.
PDLG also support auto mode which allows switch collecting PD information/status through LLDP preventing any PD IP changes under DHCP environment.
By fine tuning the reboot profiles, PDLG can correctly detects/reboot various PDs since every PD devices may have different response or bootup time.
ACLG is one of the option in PDLG auto mode. By enable ACLG, switch also considers Onvif discovery result to verify if the connected PD is surveillance device or not. Once switch make sure it is a surveillance device, it applies a ACLG reboot profile to corresponding port automatically.
Specified IP: Setting specified IP on a specific port.
Ping Interval: Setting ping IP interval on a specific port.
Ping Max Count: Setting ping max count on a specific port.
Power Recovery Interval: The waiting time between power off and power on a specific port.
PD BootUp Time: Setting Powered Device boot-up time on a specific port.
Reboot Max retry count : Setting the max number of reboot
LLDP/ACLG Expiry pending time: Settings the corresponding LLDP expiry pending time.
The default value of PDLG & ACLG is from the network wide profile settings
You can click lock icon to override the settings
Must know
ECS1xxx/2xxx - Switch firmware v1.2.80 or later
ECS5xxx - Switch firmware v2.2.10 or later
This allows you to run the diagnostic tests that can help the Network administrator to troubleshoot.
Under switch detail page > you can easily see the “Diag Tools” icon
Under Manage > Switches > Diag
So the Full-screen tools are displayed, So you can use them.
The Switch diag tool is required SW firmware V1.2.60 and above except for Packet capture is V1.2.61 and above.
Overall port status view - It’s a good way to let users see all ports throughput at a glance
The bar indicates the throughput of the port and the color of the bar indicates the speed of the port.
CRC error
This is an important indication to see if anything is wrong with the transmission including the cable issues. The red square indicates there are CRC errors found. Users can mouse over to the port and see more details of throughput and CRC error count.
This is the real-time client list of the Switch or the content of the forwarding table. Users can refresh the table by clicking the refresh button
Cable diag helps to check the Cable status of selected ports. (It can be multiple selections) and will show the possible distance of breaking points.
In order to send packets on LAN, network devices need to know the IP and MAC address of the hosts they intend to communicate with. Address Resolution Protocol provides the mechanism to determine the MAC address associated with an IP address. These IP to MAC bindings are stored in each switch's ARP cache.
The packet capture utility can be used to observe live network traffic passed by EnGenius Switches. Since captures provide a live snapshot of traffic on the network, they can be immensely helpful in diagnosing and troubleshooting network issues. This article outlines how to remotely take a packet capture in Diag tools.
Choose ports to capture packets > input Duration in sec > click on “Capture”, then the Switch will collect the packets and download them with the .pcap file
2. Download Wireshark or other packet analysis tools to open up the .pcap file
AirGuard is EnGenius technology to detect the rogue source, evil twins, DoS attacks, and RF jamming. You can access this screen under Manage > AirGuard
Users should enable AirGuard first (by default: off) to activate AP to detect the rogue source
If Enabled "Contain all Rogue Devices", all rogue SSID devices will be contained automatically and Zero-Wait DFS will not be functional.
Scanning APs list down all APs who can do AirGuard (AirGuard AP), click “Details” will redirect to the AP detail page.
Users can set rules to categorize specific SSID or BSSIDs with a partial match or exact match.
Must know
AirGuard requires at least one AP with dedicated scanning radio in this network. eg, ECW220S, ECW230S
All SSID match “Rogue rules”
All SSID match legitimate SSID but are not recognized by Cloud-managed device (It could be rogue AP, it also could be other vendors' legitimate AP)
Broadcast MACs are the BSSID (MAC), detected by our AP, broadcasting the rogue SSID. It could be multiple BSSIDs. Click on the line to see detailed information.
Seen by: the Rogue SSID might be detected by multiple EnGenius AP
Severity: The rogue reason severity could be high and require the user’s attention. The color bar in front of the SSID indicates the severity: Very high: Red; High: Orange…
Containment: Contained means the rogue SSID that your EnGenius AP is currently containing. Whenever a client attempts to connect to the rogue SSID, they will be forced off. Uncontained means the Rogue SSID is not currently contained.
Move to Whitelist: If the user found the SSID should be legitimate, then he can select it and move to whitelist (move to “Other SSIDs”)
Contain: This is the action that if you determine the Rogue SSIDs are threats to your network, you could click contain so the client will be forced off when the client attempts to connect the Rogue SSIDs.
Uncontain: This is the action that the Rogue SSIDs were noticed during a scan, but has not been determined to be a threat to your network, so you could click Uncontain.
AP impersonation: SSID = legitimate SSID and BSSID = legitimate BSSID, which means someone is using the legitimate AP’s MAC and SSID trying to steal client information
AP spoofing: BSSID = legitimate BSSID, but not legitimate SSID
The severity is always “Very High” and requires attention.
DoS attack trying to let clients or specific clients not able to connect to the AP
De-Auth attack: The rogue client sends a high volume of “De-Auth” traffic, so clients are always de-auth.
Dis-association attack: The rogue client sends a high volume of “Dis-association” traffic, so clients are always disassociated.
Attacked Party: Either specific client (MAC address) or broadcast (all MAC ff:ff:ff:ff:ff:ff)
RF Jammer sends RF noise on a certain channel to increase the SNR rate or keep the SSID/channel busy, so the client cannot connect to SSIDs on the channel.
There are many BYOD devices (employee’s mobile phones) broadcasting SSID for their own use, which is harmless
Whitelisted SSID
From the Switches page, you can click Details on the web interface to display detailed information about a switch.
PoE reset from the Switch Panel : User can mouse-over to the PoE port of the switch port panel and power-cycle the port, so the device attached to the port will be rebooted
Total PoE Usage: This bar graph displays the consumed, remaining, and total wattage utilized by Power over Ethernet.
Total PoE Utilization by Port: Displays the current PoE utilization by each port, in watts.
The System Settings section allows you to configure all primary networking options for your switch.
A Spanning Tree Protocol is a Layer 2 protocol that prevents loops in a network with redundant paths created by multiple switches. We recommend using this feature if your environment incorporates multiple switches.
Enable the STP option
Select a Protocol
Select a Bridge Priority value
Click Apply
The Link Layer Discovery Protocol (LLDP) is a Layer 2, vendor-neutral protocol that allows network devices to advertise capabilities, identity, and other information. This data can potentially be queried by SNMP.
Enable the LLDP option
Click Apply
The Voice VLAN feature configures switches to automatically allow and prioritize voice traffic over a designated VLAN. This keeps voice traffic separate and prioritized over other traffic types.
Mode: Allows you to define the Voice VLAN mode.
Auto: Automatically advertises the Voice VLAN to connected devices via the LLDP-MED protocol.
OUIs: Determines whether a received packet is a voice packet by checking its source MAC address.
Switch Voice VLAN: Allows you to choose what VLAN is used for Voice VLAN. You can set up VLANs in Port Settings.
QoS Priority: Lets you define whether the switch will use the Quality of Service CoS value of the incoming packet, or tag the packet with a CoS value between 1-7.
OUIs: VoIP traffic has a pre-configured Organizationally Unique Identifier (OUI) prefix in the source MAC address. You can manually add a specific manufacturer's MAC address and description to the OUI table. All traffic received on the Voice VLAN ports from the specific IP phone with a listed OUI is forwarded on the voice VLAN.
Quality of service (QoS) allows operators to prioritize application traffic to ensure that latency-affected data, such as VoIP and video conferencing, is uninterrupted during periods of network congestion. Switches implement this by reading tagged packets and prioritizing them accordingly. Packets are classified using Class of Service (CoS) on the data link layer, and Differentiated Services Code Points (DSCP) on the network layer, mapped to a queue, then sent out accordingly as per QoS.
Trust Mode: Allows you to define whether the switch will use CoS, DSCP, or both trust modes for QoS.
Scheduling Method: Allows you to define what method the switch will use when assessing transmitting incoming packets in queues. Strict priority always prioritizes queues with a higher priority, while Weighted Round Robin (WRR) weights each queue by priority, then applies a round-robin policy when choosing packets for transmission. The queues are weighted as follows:
Queue Mapping: Tagged packets are sent to queues defined in this setting. For each CoS or DSCP value, you can choose the queue to which tagged packets are mapped.
IGMP Snooping is used for controlling multicast traffic. It listens to IGMP messages being processed by the switch and prevents these messages from being sent to hosts not part of the respective multicast.
Version: The available IGMP Snooping versions are v2 and v3. You can select either/or in the Version dropdown.
VLANS: You can enable IGMP Snooping for any VLAN by selecting the corresponding checkbox next to the VLAN ID.
Ethernet has used the 1500 byte frame size since its inception. Jumbo frames are network layer PDUs that have a size much larger than the typical 1500 byte Ethernet Maximum Transmission Unit (MTU) size. Jumbo frames extend Ethernet to 9000 bytes, making them large enough to carry an 8 KB application datagram plus packet header overhead. If you intend to leave the local area network at high speeds, the dynamics of TCP will require you to use large frame sizes.
The switch supports a jumbo frame size of up to 9216 bytes. Jumbo frames need to be configured to work on the ingress and egress port of each device along the end-to-end transmission path. Furthermore, all devices in the network must also be consistent on the maximum jumbo frame size, so it is important to do a thorough investigation of all your devices in the communication paths to validate their settings.
Jumbo Frame : Enter the size of a jumbo frame. The range is from 1522 to 9216 bytes.
Selecting one or more ports and clicking Configure will display the following settings:
Enabled: Allows you to enable or disable the connection for this port.
Label: Allows you to add a descriptor for this port.
Speed/Duplex: Allows you to define the following speed/duplex communication settings for this port:
Auto: Speed/Duplex will auto-negotiate based on the connected node.
1Gbps / Full Duplex
100 Mbps / Full Duplex
100 Mbps / Half Duplex
10 Mbps / Full Duplex
10 Mbps / Half Duplex
Power over Ethernet (PoE): Allows you to power a connected device through an Ethernet cable using your switch.
VLANs: Allows you to group devices to create a partitioned network on the same LAN.
Forward Ports: By configuring the forward ports, ports can be separated into different groups where traffic between different group are blocked.
Must know
ECS1xxx/2xxx - Firmware v1.2.74 or later
ECS5xxx - Firware v2.2.3 or later
EXT – Firmware v1.0.10 or later
Rate Limit: Allows you to limit the amount of incoming and outgoing traffic in Mbps.
Flow Control: Enabling this will have the switch regulate traffic during times of congestion.
QoS: If QoS is enabled in Switch Settings, you can configure additional settings per port.
CoS Value: All incoming packets that lack a CoS value will use the one set in this dropdown.
Trust CoS: If checked, the switch will queue packets tagged with CoS into their designated queues. If unchecked, all packets will leave the same queue.
VLAN Trunking: This allows the specific ports to receive/forward VLAN without adding this port to the member port of a specific VLAN. please notice that VLAN trunking will override the current VLAN port member setting except management VLAN.
System setting is followed by Switch setting from the Configure > Switch settings as default settings. If you want individual AP System settings to be different from the Switch Network- wide setting , you can click below part in the screen to override the setting .
More details:
More details:
More Details:
More details:
More Details :
1
1
2
2
3
4
4
8
5
16
6
32
7
64
8
128
Link aggregation groups multiple ports together in parallel to act as a single logical link. Aggregation-enabled devices treat all physical links (ports) in an aggregation group entirely as a single logical link (port). Member ports in an aggregation group share egress/ingress traffic load, delivering a bandwidth that is multiple of a single physical link. The feature is available is at Manage > Switch < Details > Link Aggregation
To Configure trunk , you must select aggregation type . Select from the following options:
LACP: LACP is a dynamic protocol which helps to automate the configuration and maintenance of LAG’s. The main purpose of LACP is to automatically configure individual links to an aggregate bundle, while adding new links and helping to recover from link failures if the need arises. LACP can monitor to verify if all the links are connected to the authorized group. LACP is a standard in computer networking, hence LACP should be enabled on the Switch's trunk ports initially in order for both the participating Switches/devices that support the standard to use it.
Static: Static configuration is used when connecting to a switch that doesn't support LACP.
Disable : Disable the trunk that you configured previously.
Then select the Member Ports to add into the trunk group. There are two ways to select the ports
Click on the port picker to select multiple ports.
2. Click Pencil icon to input port numbers
After you complete the trunk settings , remember to click Apply to take effect .
you can access this page through Configure > Switches > Detail > VLAN
Using the VLAN tab, you can manually configure VLANs on the switch. Click Add to add another VLAN.
enter the VLAN ID and VLAN name of the switch.
Click the edit button to have the Port Assignment.
You can click the Tagged field or Untagged field to assign the tagged / Untagged port.
The (T) indicates the ports that will have Tagged data.
The (U) indicates the ports that will have data Untagged
If you used to input manually. You can click the pencil icon to input the port numbers.
Remember to click Apply to finalize the settings
For Apartments or other network environments, a network administrator might need to create VLANs for each unit, so needs to create hundreds of VLANs for the whole network switches. This will help the network admin to configure VLAN at a time instead of creating the VLAN one by one in each switch.
This will export the current VLAN JSON file of the switch and allows you to edit locally.
You can manually set up multiple VLANs for a specific switch by importing a JSON file.
Click the example hyperlink to download the JSON file
and then adjust the VLAN settings locally
then click JSON file upload to import your custom JSON file.
So you can import VLAN settings at a time instead use the current Web GUI to edit them one by one. Please notice that It will override your VLAN settings if you ever create the VLAN manually.
After a single configuration, you can go to another Switch VLAN setting page to import the same text file, so to save time to go over the creation.
This allows you to view and configure outlet schedules that can be applied to the outlets. Below screens display the existing schedules visually. Click Manage > PDUs > detail > Schedule to access this screen
Select the outlets to be set for the outlet scheduling then click Edit
2. Enable scheduling and customize the outlet on or Off by dragging the bar. This behavior is the same when you configure the SSID/ PoE scheduling.
Available: the outlet will be powered on according to the scheduled criteria.
Unavailable: the outlet will be powered off according to the scheduled criteria.
3. If you want to do the outlet reset, click outlet reset and then drag the icon to the specific time.
Outlet reset: Specify when to temporarily disable and enable the outlet when the outlet's availability is set to Available.
4. Click Apply.
Provide a more flexible schedule configuration, allowing users to adjust the specific days of the week for each outlet according to environmental needs to set up to three available time slots.
1. Navigate to MANAGE > PDUs > Schedule to select the specific outlet and then click the Edit Button.
2. Use the parameters of the "Time Slider" to adjust the availability of time slots for each day.
Available firmware: PDU firmware v1.0.5 or later version.
Port Mirroring allows you to copy packets on one or more ports to a mirroring destination port. You can attach a monitoring device to the mirroring destination port to view details about the packets passing through the copied ports. This is useful for network monitoring and troubleshooting purposes. The feature is available is at Manage > Switch < Details > Mirror
The following describe the labels on this screen :
Session id : A number identifying the mirror session. Switch supports up to 3 mirror sessions.
Session State : Select whether to enable or disable port mirroring.
Destination Port : The port which all mirrored data is sent to .
Ingress : indicates that only data being received will be mirrored.
Egress : indicates that only data being sent will be mirrored
Click the edit icon towards the right .
Enable the Session state.
Select the Destination port
Select the Ingress and Egress port
Click Apply
There are four types of port that you configured .
The Summary page displays the outlet information and configuration of the PDU(s) that are under the management of the EnGenius Cloud.
You can access this page from Manage > PDU > Details > Summary
Power on: this means the outlet is enabled but not connected to any device.
Powered off: this means the outlet is disabled and not able to provide power to the connected device.
Powered: this means the outlet is providing power to the connected device.
Click the outlet icon to view the outlet power and current usage history or reset the individual outlet.
The graph can be displayed based on different time intervals such as days, weeks, or months. Reset is only available when the outlet is enabled and never power off is disabled.
Name: Specify the outlet name.
Enabled: If you enabled the outlets, this means enabling full control of the outlets. Disabling the outlet means this outlet will be shut down and is not able to provide power to the connected device.
Never Power Off: The Outlet is always providing power. This function prevents users from accidentally powering off the outlet, which could cause the connected device to shut down suddenly. When enabled, the following happens:
The ability to power the outlet on or off via a time schedule is disabled.
The ability to power off the outlet from the LCD on the PDU is disabled.
The scheduled outlet reset function is disabled.
Rebooting the outlet will not stop it from providing power.
Pressing the power button on the PDU will not stop it from providing power.
Resetting the outlet from the LCD on the PDU will not stop it from providing power.
The autoreboot function will not work.
The hardware reset button is the sole method to disable the "never power off" function and deactivate the outlet. To perform a factory reset, press the button for 15 seconds.
Current: The measured electric current flowing through the device that is connected to the outlet. A current of zero amps means that there is no device connected to the outlet.
Consumed Power: Power consumption of the device that is connected to the outlet.
Power On Delay: Delays the outlet enabled time after the outlet has been powered on.
Power Off Delay: Delays the outlet disabled time after the outlet has been powered off.
Connected Device: the type of device connected to the outlet, which could be an EnGenius or non-EnGenius device. If an EnGenius device is connected, you can specify its model by clicking the chain icon and selecting the model name from the list.
Schedule: This will display what the outlet going to do according to the outlet scheduling.
Reset outlets: This will temporarily power off and power on the enabled outlet(s) that never power off is disabled.
Configures the following IP address settings:
IP Assignment: There are two IP assignments to choose from:
DHCP: Auto assigns the IP addresses if there is a DHCP server in the network.
Static: Manually assigns an IP address. The following fields need to be filled in:
IPV4 Address: PDU IP address.
Subnet Mask: PDU subnet mask.
Gateway: PDU default gateway.
DNS Server 1: Primary DNS server name.
DNS Server 2: Secondary DNS server name.
Port was assigned to a destination port . Port was assigned only data being sent will be mirrored . Port was assigned only data being received will be mirrored . Port was assigned both directions of data are being mirrored to the destination port.
This allows you to run the diagnostic tests that can help the Network administrator to troubleshoot.
Under the PDU detail page > you can easily see the “Diag Tools” icon
or Under Manage > PDUs > Diag
Click it and then the Full-screen tools are displayed, So you can use them.
Diag Tools are all “real-time”
PDU diagnostic tools include (1) Activity: CPU/Memory/Power/Current (2) Ping (3) Traceroute
Ping: We put 3 default servers for users to check the latency change. User can also define their own server for the ping test.
Traceroute: By default, we set the destination site to Google for the traceroute, and max hop is set to 8, which can be changed by the user. Traceroute allows users to know “the path” from the PDU to the destination and will list every router/gateway (hop) and its latency, so if the destination is unreachable, then there must be some setting issue on the router/gateway; and from the latency of each hop, the user will know the “slow uplink” is caused by which router/gateway. When the latency is over 10ms, the color will change to yellow, and if > 40ms, the color will change to red. These color variations help you quickly identify potential performance issues in the network path. To conduct a trace, click the Trace icon.
If Outlet AutoReboot is Enabled, PDU will perform a power cycle for outlets that are ON when communication with the assigned website/IP address is lost.
You can access this page from Manage > PDUs > Detail > AutoReboot
Outlet AutoReboot will not be able to function when the outlet's never power off is Enabled.
To configure the outlet reboot, complete the following steps:
Select the outlet from the list and click Edit.
Enable the AutoReboot function.
Specify the condition that prompts an auto reboot and enter the host details.
Click OK and then click Apply.
This allows you to configure the Autoreboot timeout settings.
AutoReboot Ping interval: the time period that will ping to the connected devices.
AutoReboot Delay Time: Sets the amount of time before AutoReboot resumes pinging once an auto reboot has been performed.
AutoReboot Attempts: Amount of auto-reboots to attempt when communication with a website/IP address is lost.
The Reset action will appear when the outlet has reached the maximum number of auto-reboot attempts. The AutoReboot feature uses Ping to check if devices connected to its outlets are working properly. If the "Pinged Host" encounters ongoing network issues, the PDU automatically reboots the related outlet to resolve the problem. This is particularly useful in unmanned locations, as it minimizes downtime, reduces the need for manual intervention, and ensures the stable operation of critical infrastructure.
Currently, the releated outlet will STOP the AutoReboot mechanism once the maximum number of AutoReboot attempts has been reached.
However, after the administrator resolves the issue with the abnormal device connected to the outlet, they may not always be aware that the AutoReboot function has stopped.
To address this challenge, a new feature "Reset" Action is introduced to allow the AutoReboot mechanism to be restarted directly from the cloud interface.
When an outlet reaches the maximum reboot attempts, EnGenius Cloud will show a "Reset" button in the "TIMEOUT SETTINGS" section of the AutoReboot page, located under MANAGE > PDU > PDU List > Click Specific PDU > Detail, prompting the user to take action.
After clicking "Reset" to allow the AutoReboot mechanism to be restarted. It requires firmware: v1.0.20 or later.
While the outlet is attempting to reboot, adjusting the configuration of other outlets will reset the ongoing reboot attempts.
When the actual Amp/Voltage exceeds the configured Voltage/Amp safe range, Cloud will log the events.
You can access this page from Manage > PDUs > Detail > Alerts
You can drag the bar to adjust the safe range and enable to logging the event that exceeds the configured voltage safe range.
You can drag the bar to adjust the amp safe range and enable to logging the event that exceeds the configured Amp safe range.
EnGenius Cloud provides management views that collect information about connected clients in your organization/hierarchy view/network.
Click Manage -> Clients to access this screen and double-click the organization/hierarchy view/network on the tree to change the scope.
The list of clients can be customized based on time intervals, and the chart can be customized based on time intervals and SSIDs. To change these parameters, use the appropriate dropdown menu at the top of the screen.
You can search for a client in the current client list by using the search. You can search by any parameter included in the search options, and it will attempt to match your query across all fields. You can also specify multiple parameters by clicking on the icon in the search box, as seen below:
This allows you to block clients on the current SSID that clients connected.
Once you want to unblock clients, please go to Configure > SSID > Access control to delete the Mac Address from the Block list.
This allows you to make clients VIP on the current SSID or on Network-wide that clients are connected.
Once you want to delete clients from the VIP list, please go to Configure > Access control to delete the Mac Address from the VIP list.
If you don't want to block clients permanently, you could just kick them so that they can connect again if they want to.
This will display the clients that are directly connected to the downlink port on switches.
Must know
ECS1xxx/2xxx requires switch firmware v1.2.85 or above.
ECS5xxx requires switch firmware v2.2.15 or above.
This will display clients that are assigned by the Gateway DHCP server.
You can also see this information regarding the client:
MAC Address - The MAC address of the client device in the packets sent from the device.
IP - Assigned IP address of the client device.
Hostname - Host Name of the client device.
OS - Operating System that the device is Running.
After configuring the client VPN and users are starting to connect, it may be useful to see how many and which client devices are connected to your network. To see connected client VPN devices, navigate to Manage > Clients > VPN Client
You can also see this information regarding the client:
Name: the name of the VPN client.
VPN IP: the IP of the VPN client.
Remote IP: the external IP of the VPN client.
The Client Timeline is a great feature that aggregates and analyzes activities of a specific wireless client to provide an intuitive and historical view. With Client Timeline, user can easily know how clients associate, authenticate, and roam among Access Points. It is extremely useful when you need to debug or trace your wireless network. The feature is available at Manage > Client > Client name.
The EnGenius Cloud AI system categorizes client activities into five different states:
Client was connecting to an AP. Client was roaming and connecting to another AP. Client changed to associate with different radio or SSID of the same AP. Client failed to authenticate with an SSID. Client was denied because of it is in block list.
The states are displayed at the left hand side of timeline. User can easily see how a client transited its states among APs.
The drawing and content of client timeline follows the color conventions as below:
Green: represent a 5G session.
Blue: represent a 2.4G session.
In the right hand side of each session, the system shows the channel, band, protocol, and signal strength of client detected at the beginning of that session.
The communication between wireless client and AP could be very complicated. Different clients with different wifi chips and wireless drivers can behave very differently while communicating with the same AP. The intelligent engine behind Client Timeline is capable of analyzing communication packets effectively and performs clean and human readable transition details for the user.
User can click on the event summary inside a connection session to expand the sequence of transition details:
Table below displays client leave patterns when client leaves each connection session.
Leaving reason
Description
Incorrect password
Client entered the incorrect password for WPA or wrong authentication information for EAP
Client switch to {device_name}/{radio}
When the RSSI signal is not good enough, the client did not disassociated from the AP and it connected to new AP directly with regular authentication procedure.
Roam out to {device_name}
When the RSSI signal is not good enough. The client disconnected from the original AP and connected to the new AP by 802.11r fast roaming protocol.
Steer to {radio}
The client disconnected from the AP due to band steering protocol. It received the 802.11v trigger and connected to suggested band accordingly.
Disconnected by {device_name}
The client was disconnected by the AP due to bad RSSI signal (fast handover).
AP disconnect
The client was disconnected by the AP due to unknown reason.
Kicked by Cloud
The client was kicked by the cloud administrator.
Denied by ACL
The connection was refused by AP because the client was on the blocked list under access control.
Exceed client limit
The connection was refused because the client count has exceeded the maximum 2.4G/5G client limit.
Client inactive
The client was inactive because it was on power saving mode or far away from the AP.
Client disconnect
The client disconnected because the user disabled the Wi-Fi or choose to connect to other AP.
Disconnected due to SSID configuration change
The clients was disconnected due to SSID configuration change. Some configuration change took effect only after recycled (down&up) the NIC (network interface controller). When the NIC is down, all connection are disconnected.
The LCD panel on the front of the PDU allows you to quickly access information about the PDU and its outlets. When you power on the PDU for the first time, the EnGenius logo will appear, followed by a QR code. You can scan the QR code to access the PDU quick start guide.
To access the Home page, long press the bottom of the control buttons beside the LCD panel. The Home page shows the current PDU usage, including the usage percentage, wattage, electric current, and voltage. The usage percentage is divided into four levels to indicate the overall power consumption status:
Green: Low usage.
Orange: Moderate high usage.
Red: High usage.
Dark red: Critical usage.
You can check the usage of each outlet by pressing the upper control button. Pressing the upper control button again will show the usage of the next outlet. The following screenshot shows the Outlet 6 details of an EnGenius switch (the model name is ECS1008P) that is plugged into the PDU.
The next time you power on the LCD panel, the Home page will be displayed automatically.
See below for how to use the LCD panel.
1
Status icons
2
PDU information
3
Action icon
4
Action icon
5
Control Button for Callout 3
6
Control Button for Callout 4
The function of the upper and lower control buttons depends on the corresponding icon shown on the screen.
Long-pressing the upper control button functions as a Go Back command.
Long-pressing the lower control button takes you to the Home page.
See below for the different icon definitions.
To access the Menu, complete the following steps:
Go to the Home page.
Press the lower control button.
To navigate through the options, use the upper control button, which functions as the Next button. To view the details of a selected topic, use the lower control button as the Enter button. In some cases, you may need to drill down further to view more specific details.
The following shows the available options displayed on the Menu.
Depending on the model, the options displayed on the Menu might be different.
Displays the following information when an Outlet is selected.
Press Menu > Outlets > (Select an outlet).
Peak Data: Recorded the highest current and power usage over a specific time interval.
Data Interval: Frequency at which the PDU collects and reports power/current usage information. This information is used to create the line charts in Peak Data.
Enable: Enables the outlet, so outlet is able to provide power to the connected device.
Disable: Disables the outlet, so the outlet will be powered off.
Reset: This will temporarily disable and enable the outlets.
Displays the power on / power off/ reset time on the schedule for each outlet.
Press Menu > Schedule
Displays the alert message for each outlet.
Press Menu > Alert
Displays the PDU details, which include the IP address, MAC address, software version, and time zone.
Press Menu > Information
Displays the following configurable display settings:
Press Menu > Display Settings
Orientation: Configures the content on the screen to be presented in a horizontal or vertical orientation.
Theme: Choose between a dark or light theme for the content display.
Screen saver: the idle time that the LCD will turn off.
Displays the QR code to view the PDU quick start guide or product web page.
Press Menu > QR Code
Reboots the PDU. The outlets still provide power during a PDU reboot.
Press Menu > Reboot
The PDU will be restored to its default settings, and all the data will be deleted. The power supply will be temporarily interrupted until the reset process is completed.
Press Menu > Factory Reset
Network topology is a powerful tool to provide administrators a graphic overview of the logical network topology and the status of EnGenius devices.
Use this screen to view the topology of the Org/Network. Click Manage > Topology to access this screen and double-click the organization/hierarchy view/network on the tree to change the scope.
Learn which physical links in your network are most heavily-trafficked; simply hover over individual network links and devices to learn statistics about that connection’s negotiated speed, usage, and a number of directly connected clients using it in the past 5 minutes.
The following describes the functions on this screen:
Show label: Click to display or hide the device name & HW status on each device.
HW status: Click to display or hide the POE utilization on each switch.
Redundant: Click to display or hide the redundant link .
Other Devices: Click to display the third party devices as well as EWS series devices. This requires switch PRO license and switch feature plan to PRO on switches.
Export : Click to download topology as PDF format .
Floor plans allow you to simulate the heatmap. This article will discuss how to upload custom floor plans, pin them on the map, and place devices within these floor plans.
Before uploading floor plans, a building must be created to contain them (see Managing Devices > Device Map Location in the user manual).
To upload a custom floor plan/map:
1. Navigate to Manage > Map & Floor plans.
2. Click Building and click Add.
3. Enter a name and then click Create.
4. Find the building you have just created in the building list and click the picture icon.
5. Enter a name and upload the floor plan, then click Apply.
If you no longer use a floor plan that you previously imported, you can delete it.
Follow these steps to delete a floor plan:
Find the building you created in the building list.
When the floor plan appears, hover over it and click Delete.
Virtual AP” is now available for users to add virtual AP together with “physical AP”, so users can simulate the heat map if he adds more AP to increase the coverage
Add Virtual AP and choose units of models to add
The Tool icon for users to modify the tx power and channel for heat map simulation
Drag the physical AP to Virtual AP (model needs to be the same) then physical AP could use the Virtual AP configuration.
When drawing the walls, users used to draw the line one by one by click “start” and “end” for straight lines, now with the “Polyline” option available, users can simply click on the turning point to draw lines quicker.
This screen allows you to locate a device on the world map to show the relationship between the space and EnGenius Devices. Maps provide a visualization for buildings and access points.
A building means a group of floor plans. You can create a new building with the + button.
After you create a building, you can drag it to the map. Single-click on the building icon and a hyperlink will appear to allow you to edit floor plans.
Click access point list or buildings list.
Enter the street address in the address field.
Drag the access point/building onto the map.
There are a number of ways to navigate through the map display.
Single Click: If the user single-clicks on the focus icon on the access point or building lists, it will auto-locate the same item in the map.
Double Click: If the user double-clicks on the building icon in the access point list, the UI will auto-navigate to the floor plans of that building.