Access Point Settings

General Settings

Items	Descriptions
Device Name	The device name of the access point. Users can enter a custom name for the access point for recognition like its location.
Administrator Username	Displays the current administrator login username for the access point. Enter a new Administrator username for the access point if you wish to change the username. The default username is admin.
New Password	Enter a new password of between 1~12 alphanumeric characters.
Verify Password	Enter the password again for confirmation.
Auto Configuration	Select whether the device IP address will use the static IP address specified in the IP Address field or will be obtained automatically when a DHCP server is available for LAN IP rendering.
IP Address	When “Static” is selected, enter the IP address for the access point.
Subnet Mask	When “Static” is selected, enter the Subnet Mask for the access point.
Default Gateway	When “Static” is selected, enter the default Gateway for the access point.
Primary/Secondary DNS Server	When “Static” is selected, enter the Primary/Secondary DNS server name.

Wireless Radio Settings

Items	Descriptions
Country	Select a country/region to conform to local regulations. Different regions have different rules that govern which channels can be used for wireless communications.
Channel HT Mode	Use the drop-down menu to select the Channel HT as 20MHz, 20/40MHz or 40MHz for 2.4GHz and 20MHz, 40MHz, or 80MHz(AC/AX) for 5GHz. A wider channel improves the performance, but some legacy devices operate only on either 20MHz or 40 MHz, and this option only applies to AP with 802.11n or above modes.
Channel	Use the drop-down menu to select the wireless channel the radio will operate on. Optimizing channel assignments reduce channel interference and channel utilization for the network, thereby improving overall network performance and increasing the network's client capacity. The list of available channels that can be assigned to radios is based on which country is selected above.
Operating Channel	This shows the current operating channel
Transmit Power	This allows you to manually set the transmit power on 2.4GHz or 5GHz radios. Increasing the power improves performance, but if two or more access points are operating in the same area on the same channel, it may cause interference.
Client Limits	Specify the maximum number of wireless clients that can associate with the radio. Enter a range from 1 to 127 or fill in 0 for an unlimited client limit.
Data Rate	Use the drop-down list to set the available transmit data rates permitted for wireless clients. The data rate affects the throughput of the access point. The lower the data rate, the lower the throughput, but the longer the transmission distance.
Bit Rate	Configure the minimum bit rates for respective 2.4GHz and 5GHz radios.

WLAN Settings - 2.4GHz/5GHz

Under the WLAN settings, you can create and manage SSID configurations and profiles for the access points to fit your needs. An SSID is basically the name of the wireless network to which a wireless client can connect to. Multiple SSIDs allow administrators to use a single physical network to support multiple applications with different configuration requirements. Up to 8 SSIDs are available per radio. Click on the SSID you wish to make changes to, and you'll be directed to the SSID configuration page.

Items	Descriptions
ID	The ID displays the SSID profile identifier.
SSID	This displays the SSID name as it appears to the wireless clients in the network.
2.4GHz	This check-box option displays the current SSID profile is enabled or disabled for 2.4GHz and allows user to check/uncheck.
5GHz	This check-box option displays the current SSID profile is enabled or disabled for 5GHz and allows user to check/uncheck.
Captive Portal	This indicates whether the Captive Portal is enabled or disabled for this SSID profile.
Security	It displays the security mode the SSID uses.
Encryption	It displays the data encryption type the SSID uses.
Hidden SSID	It indicates whether the hidden SSID is enabled or disabled.
VLAN	This displays the VLAN ID associated with the SSID. Note: For multi-SSID applications, different VLAN IDs can be assigned to an individual SSID where this ID should match its corresponding subnet’s VLAN ID with respect to local network segmentation on VLAN assignment. If a specific VLAN ID is configured to SSID, please also make sure that AP’s connected port and uplink port (on all cascading switches as well) have enclosed this VLAN ID in their VLAN settings (refer to VLAN settings under “Switch” tab.)

SSID Config

Items	Descriptions
Enable SSID	Select to enable or disable this SSID profile.
SSID	Enter the SSID for the current profile. This is the name that is visible to wireless clients on the network.
Hidden SSID	Enable this option if you do not want to broadcast this SSID. This can help discourage wireless users from connecting to a particular SSID.
VLAN Isolation	When enabled, all traffic frames from wireless clients connected to this SSID will be tagged with a corresponded 802.1Q VLAN tag when going out from the AP’s Ethernet port.
VLAN ID	When VLAN Isolation is enabled, enter the VLAN ID for the SSID profile. The range is from 1~4094. When VLAN tagging is configured per SSID, all data traffic from wireless users associated with that SSID is tagged with the configured VLAN ID. Please be advised multiple SSIDs also can be configured to use the same VLAN tag; for example, a single VLAN ID could be used to identify all wireless traffic traversing the network, regardless of the SSID. When AP receives VLAN-tagged traffics from the upstream switch or router, it forwards the traffics to the corresponding SSID.
L2 Isolation	When enabled, wireless client traffic from all hosts and clients on the same subnet will be blocked.
Add Whitelist	When L2 Isolation is enabled, users can still enter a specific MAC address per line to be exempt from L2 isolation like a specific file server on the same subnet.
Band Steering	When enabled, upon the wireless client first connecting to the SSID, the AP will detect whether or not the wireless client is dual-band capable, and, if it is, it will facilitate the client to connect to the less congested 5GHz SSID to relieve WLAN congestion and overcrowding on the mainstream 2.4GHz frequency. Please be advised it does this by actively discouraging the client's attempts to associate with the 2.4GHz SSID.

👨‍🏫 Note: For Band Steering to take effect, both 2.4GHz and 5GHz SSIDs must have the same SSID and security settings. Wireless clients must be in both 2.4GHz and 5GHz wireless coverage zone upon being authenticated with the AP for the Band Steering algorithm to take effect. Several Band Steering options are listed below:

• Prefer 5GHz: All dual-band clients with 5GHz RSSI above the threshold will be connected to the 5GHz band.

  
• Force 5GHz: All dual-band clients will be connected to the 5GHz.

• Band Balance: This option automatically balances the number of newly connected clients across both 2.4GHz and 5GHz bands based on configured percentage for 5GHz clients.

  

👩‍🏫 IMPORTANT INFORMATION

Band Steering only defines the action when a wireless client associates with an AP for the first time, and the wireless client must be in both 2.4GHz and 5GHz wireless coverage zone when being authenticated with the AP for the Band Steering algorithm to take effect.

Captive Portal: When enabled, users will see a captive portal page upon connecting to SSID. The captive portal profile can be customized by clicking “Profile Setting” which can also be configured in Hotspot Service from controller settings.

Wireless MAC Filter: This is default disabled and users can select either “Allow MAC in the List” or “Deny MAC in the List” to make this filter as whitelist or backlist for SSID.

Traffic Shaping: This feature regulates the allowed maximum download/upload speed per SSID or per user. Select to enable or disable wireless traffic shaping for this SSID profile with respective download/upload limits per SSID or user.

• Download Limit: This specifies the allowed maximum download speed.

• Upload Limit: This specifies the allowed maximum upload speed.

Fast Roaming: This feature uses protocols defined in 802.11r to facilitate continuous connectivity for wireless devices roaming from one AP to another. Coupled with 802.11k, wireless devices are able to quickly identify nearby APs that are available for roaming and, once the signal strength of the current AP weakens and your device needs to roam to a new AP, it will already know which AP is best to connect with.

👨‍🏫 Note that not every wireless client supports 802.11k and 802.11r. Both the SSID and security options must be the same for this fast roaming to work. Fast roaming is available when either WPA2-Enterprise or WPA2-PSK security methods are configured.

Security: Select the security method (None, WPA2 Enterprise, or WPA2-PSK):

WPA2 Enterprise: WPA2 is the Wi-Fi Alliance IEEE 802.11i standard, which include AES mechanisms.

• RADIUS Server: Enter the IP address of the RADIUS server.

• RADIUS Port: Enter the port number used for connections to the RADIUS server.

• RADIUS Secret: Enter the secret required to connect to the Radius server.

• Group Key Update Interval: Specify how often, in seconds, the group key changes. Select 0 to disable.

• NAS-ID: This attribute contains a string identifying the NAS originating the Access-Request.

• NAS-PORT: This attribute indicates the physical port number of the NAS which is authenticating the user.

• NAS-IP: This attribute indicates the identifying IP Address of the NAS which is requesting authentication of the user.

• RADIUS Accounting: This can be checked to enables the accounting feature.

• RADIUS Accounting Server: Enter the IP address of the RADIUS accounting server.

• RADIUS Accounting Port: Enter the port number used for connection to the RADIUS accounting server.

• RADIUS Accounting Secret: Enter the secret required to connect to the RADIUS accounting server.

• Accounting Group Key Update Interval: Specify how often, in seconds, the accounting data send. The range is from 60~600 seconds.

WPA2-PSK: WPA2 with PSK (Pre-shared key), designed for home and smaller office networks that don't require the complexity of an 802.1X authentication server.

• WPA2 Passphrase: Enter the passphrase you wish to use. If you are using the ASCII format, the Key must be between 8~64 characters in length.

• Group Key Update Interval: Specify how often, in seconds, the Group Key changes.

Advanced Settings

LED Control: In some environments, the blinking LEDs on APs are not welcomed. This option allows you to enable or disable the device’s LED indicators. Note that only indoor models support this feature.

RSSI Threshold: With this feature enabled, in order to minimize the time the wireless client spends on passively scanning for a new AP to connect to, the AP will send a disassociation request to the wireless client upon detecting the wireless client's RSSI value lower than the specified. The RSSI value can be adjusted to allow for more clients to stay connected to this access point. Note that setting the RSSI threshold value too low may cause sticky wireless clients to reconnect frequently. Disabling this feature is recommended unless you deem it necessary.

Management VLAN: This specific VLAN ID can be used to separate management traffic from regular network traffic.

IMPORTANT INFORMATION

When configuring or updating AP's management VLAN settings, make sure that the same management VLAN settings are applied to the EWS switch as well.