This allows you to run the diagnostic tests that can help the Network administrator to troubleshoot.
Under AP detail page > you can easily see the “Diag Tools” icon
Under Manage > Access Points > Diag
So the Full-screen tools are displayed, So you can use them.
Diag Tools are all “real-time”
AP diagnostic tools includes (1) Activity: CPU/Memory/Throughput/Channel Utilization(2) Speed test / Ping (3) traceroute (4) All channel utilization (5) Live Clients + (6) Spectrum Analyzer
Except Spectrum Analyzer is for “S” models only, (1)-(5) are all available for all models
Activity: The info is as now and we add “non-WiFi” channel utilization % to let users know how much of the total channel utilization rate is from non-WiFi, so users can know if the interfering is from other AP or the environment of the channel is dirty and got high white noise.
For the Speed test, users can choose one from the “Test Server” list (detected by AP) and do a speed test, so when users have an issue on “slow connectivity” issue, the admin can check if it’s due to “Slow uplink” of AP or due to dirty WiFi between client and AP.
Ping: We put 3 default servers for users to check the latency change. User can also define their own server for the ping test.
Traceroute: By default, we set the destination site to Google for the traceroute, and max hop is set to 8, which can be changed by the user. Traceroute allows user to know “the path” from the AP to the destination and will list every router/gateway (hop) and its latency, so if the destination is unreachable, then there must be some setting issue on router/gateway; and from the latency of each hop, the user will know the “slow uplink” is caused by which router/gateway. When the latency is over 10ms, the color will change to yellow, and if > 40ms, the color will change to red.
All channel utilization: This is a useful tool that user can easily see how dirty each channel is at a glance, and decide if he wants to change the channel of the AP manually. “Green” is “WiFi” traffic and “Orange” is “non-WiFi” interfering. By mouse-over, you can see the details of how much the % of WiFi and non-WiFi.
For the spectrum analysis tool (spectrogram or waterfall graph), we provide a rolling timeline view of signal strengths measured. The upper part shows the signal strength (RSSI) detected and the color indicates how many sources have been detected. The Lower part is the timeline view to let users know that, for example, channel 8 is dirtier than others, which might not be able to show from glance view of all channel utilization at the time, because the interfering source might not emit continuously but in high frequency.
In the Live clients, you can monitor the clients that are connected to specific AP. You can use it when the AP feature plan is PRO.
In the AP Basic feature plan, we only allow you to use the Diag tool in 1 min, after 1 min, Diag tools will be deactivated. If you want to use it longer, you can switch the AP feature plan to PRO.
you can use the diag tool when the AP firmware is 1.x.35 or above.
AirGuard is EnGenius technology to detect the rogue source, evil twins, DoS attacks, and RF jamming. You can access this screen under Manage > AirGuard
Users should enable AirGuard first (by default: off) to activate AP to detect the rogue source
If Enabled "Contain all Rogue Devices", all rogue SSID devices will be contained automatically and Zero-Wait DFS will not be functional.
Scanning APs list down all APs who can do AirGuard (AirGuard AP), click “Details” will redirect to the AP detail page.
Users can set rules to categorize specific SSID or BSSIDs with a partial match or exact match.
Must know
AirGuard requires at least one AP with dedicated scanning radio in this network. eg, ECW220S, ECW230S
All SSID match “Rogue rules”
All SSID match legitimate SSID but are not recognized by Cloud-managed device (It could be rogue AP, it also could be other vendors' legitimate AP)
Broadcast MACs are the BSSID (MAC), detected by our AP, broadcasting the rogue SSID. It could be multiple BSSIDs. Click on the line to see detailed information.
Seen by: the Rogue SSID might be detected by multiple EnGenius AP
Severity: The rogue reason severity could be high and require the user’s attention. The color bar in front of the SSID indicates the severity: Very high: Red; High: Orange…
Containment: Contained means the rogue SSID that your EnGenius AP is currently containing. Whenever a client attempts to connect to the rogue SSID, they will be forced off. Uncontained means the Rogue SSID is not currently contained.
Move to Whitelist: If the user found the SSID should be legitimate, then he can select it and move to whitelist (move to “Other SSIDs”)
Contain: This is the action that if you determine the Rogue SSIDs are threats to your network, you could click contain so the client will be forced off when the client attempts to connect the Rogue SSIDs.
Uncontain: This is the action that the Rogue SSIDs were noticed during a scan, but has not been determined to be a threat to your network, so you could click Uncontain.
AP impersonation: SSID = legitimate SSID and BSSID = legitimate BSSID, which means someone is using the legitimate AP’s MAC and SSID trying to steal client information
AP spoofing: BSSID = legitimate BSSID, but not legitimate SSID
The severity is always “Very High” and requires attention.
More details: https://docs.engenius.ai/whitepapers/airguard/evil-twin
DoS attack trying to let clients or specific clients not able to connect to the AP
De-Auth attack: The rogue client sends a high volume of “De-Auth” traffic, so clients are always de-auth.
Dis-association attack: The rogue client sends a high volume of “Dis-association” traffic, so clients are always disassociated.
Attacked Party: Either specific client (MAC address) or broadcast (all MAC ff:ff:ff:ff:ff:ff)
RF Jammer sends RF noise on a certain channel to increase the SNR rate or keep the SSID/channel busy, so the client cannot connect to SSIDs on the channel.
More details: https://docs.engenius.ai/whitepapers/airguard/rf-jamming
There are many BYOD devices (employee’s mobile phones) broadcasting SSID for their own use, which is harmless
Whitelisted SSID
Once you created Orgs and Networks to define the scope of managed networks, next step is to add the devices to the managed network and manage them. To manage the Access Points in a Network, trigger the toolbar menu at the left-hand side: Manage > Access Points.
Click on Add from Inventory button. You can then pick the devices registered to the Org previously and add them to current Network.
Must Know:
One device can only be added to one network. All devices in the same network should apply the same network-wide settings except the settings are overridden individually.
Tips:
when you have multiple Org/Networks, you can stay in the AP list page and directly change the scope of Org/Networks. The system would lead you to different AP list pages quickly.
Single click on the row of a AP (anywhere but hyperlink). It invokes a Quickview Panel that helps showing important status and key configurations for you. User can quickly finetune settings and do comparisons among different APs without going in and out different pages.
It's pretty common that for some cases you need to set channel or Tx power for specific APs. This would require the capability to override network's default radio settings.
Follow these steps to customize the radio settings for an AP.
Choose an access point from the list to show its expanded settings.
2. In the Radio section, click the checkbox below the lock icon to override default settings.
3.Configure the following settings for both the 2.4GHz and 5GHz radio band:
Channel
Tx Power
Channel Width
4. Click Apply.
Although APs in the same network share the same SSID settings, sometimes you just do not want a specific AP to enable all SSIDs in the network. For example, you don't want the SSID of financial department to be enabled and accessible everywhere. In the Quickview Panel, you can also finetune and override SSID settings.
Follow the steps to override network-wide settings and enable or hide the SSID of a network.
1. In the WLAN section, click on the checkbox near lock icon to override default settings.
2. Configure SSID to be enabled or hidden per your request.
3. Click Apply.
Once you have APs added to the network, you can apply more actions on the APs:
Move
Select one or multiple access points and click to move the AP(s) to another hierarchy view/network.
Remove
Select one or multiple access points and click to remove from the current org/hierarchy view/network.
For each AP, there are more settings available to configure and fine-tune the system. In addition, EnGenius Cloud collects and aggregates lots of data reported by AP periodically. Sophisticated graphs and tables are available on the AP detail page to ease the monitoring and tracking of an AP. To get all the details, on AP list page, hover your mouse cursor on the row of AP you are interested in. A Details button is shown and clicks on it to get into AP detail page.
The first TAB page summarizes AP's current settings and states. All details of configurations and statistics are shown on this page.
The SSID section allows you to check and configure the exact SSID settings for this AP.
SSID: shows the SSID name.
Radio: shows the Radio (2.4GHz or 5GHz bands) turned on in this AP.
Security: security type set on the SSID.
Captive portal: shows authentication type for captive portal.
The Throughput section allows you to check the throughput statistics for this AP. Note that you can control the filters to get different results based on your requirement:
By SSID
By Time (daily/weekly/monthly)
The Radio section allows you to configure individual radio settings. The default radio setting will be followed by the network radio setting. If you want the radio settings of an access point to be different from the default, you can override them with custom values.
This section allows you to configure IP address settings for the AP individually.
DHCP: You can choose to auto assign IP addresses if there is a DHCP server in the network.
Static: Allows you to manually assign an IP address.
Enter the IP address you wish to assign to the access point and fill in the subnet mask, default gateway, and DNS server address.
IPV4 Address: Enter the IP address for the access point.
Subnet Mask: Enter the subnet mask for the access point.
Gateway: Enter the default gateway for the access point.
DNS Server 1: Enter the primary DNS server name.
DNS Server 2: Enter the secondary DNS server name.
When an AP is just installed, you can take a photo (or several) on the AP and uploaded it to EnGenius Cloud as a property data for the AP. It's helpful for the installer to memorize where and how he installed the AP.
Good to Know: It is easier to take photo and upload it in Cloud-to-go App.
The EnGenius Cloud Log contains several logging subsystems that each have unique data retention and export options available. Datasets like device event, system configuration, and analytics are used for starkly different purposes (business intelligence, operations, risk management, etc.) and are reflected in the native logging capabilities. In the Log TAB page, the system list all the device logs for current AP. If you need to track events across a network, check Device Events for more details.
While the device log provides a thorough timeline of events on the AP, it is usually unnecessary to view all events. The following options are available to filter down the event log as needed.
Filtering events to a specific client can help troubleshoot individual connectivity issues. Entering the MAC address, hostname, or custom name in the Client field will display only events affecting that client, excluding other client information and device events. For the same reason, SSID field can be used to filter out events related with other SSIDs.
The event log shows all events for clients and devices, starting with the most recent event by default. The date and time filters are useful to display only events that happened at or before the specified time.
The event log are categorized in different severity:
Error
Warning
General
You can also set the filter to only show the logs with dedicated severity.
The following types of events will be reported by ECW access points:
WLAN Client Connection
WLAN Client Control
WLAN Radio
Client Roaming
Device Status
Mesh
AirGuard
The filter also support all types of events listed above.
Clients page provides comprehensive details of wireless clients that ever managed by the access point.
This page is filtered for current AP and supports all features as same as in Managing Clients. To get more details, please refer to the Managing Clients section.
Tips:
To browse the clients page by page, you just need to scroll down the page to the end of screen. The web system will automatically load next page for you.
The clients in the list are historical data reported by AP minutes ago. If you want to see clients connecting with AP in realtime, click on the Live Clients link. It will lead you to the diag tools which give you an update of client list in seconds.
EnGenius Cloud provides powerful diag tools to track every details of your network in REALTIME. To trigger the Diag Tools, simply click on the diag button shown below:
Please refer to Diag Tools to get more details.
On the top of AP detail page, the are two buttons available to control AP LEDs instantly.
LED Light: This allows you to enable or disable all LEDs on the AP. This is helpful if users does not want to LEDs of AP interfering their vision at night.
LED Blinking: Click light bulb icon. LEDs on the AP will blink for 10 seconds. This helps the installer to find and identify a AP.
