INT-525794-UM-0715-01
TABLEOFCONTENTS
Introduction.......................................................................................................................................................................................................................3
PackageContents.........................................................................................................................................................................................................3
ProductFeatures..........................................................................................................................................................................................................3
ProductSpecifications..................................................................................................................................................................................................4
Hardware...........................................................................................................................................................................................................................4
DeviceStatusLEDs........................................................................................................................................................................................................4
Connectors....................................................................................................................................................................................................................5
PassivePoEInjector......................................................................................................................................................................................................5
Connectingthedevicetothenetwork..........................................................................................................................................................................6
Configuringthedevice.......................................................................................................................................................................................................7
Accessingthewebconfigurationinterface...................................................................................................................................................................7
SetupWizard................................................................................................................................................................................................................8
OperationModesWhentousewhich.....................................................................................................................................................................11
Router(Gateway)...................................................................................................................................................................................................11
WISPWirelessISP..................................................................................................................................................................................................12
AccessPoint...........................................................................................................................................................................................................13
Repeater................................................................................................................................................................................................................14
Status..........................................................................................................................................................................................................................15
WirelessSettings........................................................................................................................................................................................................16
Basic.......................................................................................................................................................................................................................16
MSSID...................................................................................................................................................................................................................16
ACL.........................................................................................................................................................................................................................16
WDS.......................................................................................................................................................................................................................17
WMM.....................................................................................................................................................................................................................19
Advanced...............................................................................................................................................................................................................20
Network......................................................................................................................................................................................................................23
NetworkSettingsinRouterMode.........................................................................................................................................................................23
NetworkSettingsinWISPMode............................................................................................................................................................................26
NetworkSettingsinAccessPoint(AP)Mode.........................................................................................................................................................27
NetworkSettingsinRepeaterMode......................................................................................................................................................................28
QoS(inRouterandWISPMode).................................................................................................................................................................................29
Security(inRouterandWISPMode)..........................................................................................................................................................................32
IP/PortFilter:.........................................................................................................................................................................................................33
URLFiltering:.........................................................................................................................................................................................................33
MACFiltering:........................................................................................................................................................................................................33
DoSProtection:......................................................................................................................................................................................................34
System........................................................................................................................................................................................................................35
PasswordSettings..................................................................................................................................................................................................35
TimeSettings.........................................................................................................................................................................................................35
Backup&Restore..................................................................................................................................................................................................35
FactoryDefaults.....................................................................................................................................................................................................36
Reboot...................................................................................................................................................................................................................36
SmartReboot.........................................................................................................................................................................................................36
WebServer............................................................................................................................................................................................................37
FirmwareUpgrade.................................................................................................................................................................................................37
DebugTools................................................................................................................................................................................................................38
LogSettings............................................................................................................................................................................................................38
PingTest................................................................................................................................................................................................................38
AppendixA:ChangingtheIPAddressofaNetworkAdapter...........................................................................................................................................39
AppendixB:Troubleshooting..........................................................................................................................................................................................44
AppendixC:DSCPValueTable.........................................................................................................................................................................................45
AppendixD:WarrantyInformation.................................................................................................................................................................................46
-2-
INTRODUCTION
TheIntellinetHighPowerWireless150NOutdoorCPEAccessPoint,Model525794,isacosteffectiveWISPCPE
(customerpremisesequipment)andlongdistancewirelessbridgesolution.Itcombinesthefunctionalityofaclassic
wirelessaccesspoint,awirelessISP(WISP)client,a10dBihighgainantennaandanIP65weatherproofenclosure.High
outputpower(upto4wattsinFCCregulatedcountries)andhighreceiversensitivitysignificantlyextendthe
transmissionrange,makingtheIntellinet525794WirelessCPEanexcellentchoiceforpointtopointwireless
connections.
TheHighPowerWireless150NOutdoorCPE/AccessPointprovidesmaximumwirelesssecuritybysupporting802.1x
userauthenticationforexternalRADIUSservers.OthersecurityfeaturesincludedinthisaccesspointareMACaddress
filtering,disableSSIDbroadcastandsupportforthelatestwirelessencryptionmechanisms.
PACKAGECONTENTS
Ensurethatthefollowingitemsareincluded:
HighPowerWireless150NOutdoorCPE/AccessPoint
Quickinstallationguide
InstallationCDwithusermanual(thisdocument)
PassivePoEpoweradapter
Polemountclamp
PRODUCTFEATURES
WirelessoutdoorCPEprovidesInternetconnectivitytoyour2.4GHzWirelessISP(WISP)
AlsosuitableforlongrangePtPbridgeconnections
Builtin10dBiantenna
Weatherproofandcorrosionresistant,IP65
Supportedmodes:Router(Gateway),AccessPoint,APClient,WISPandWDSBridge
Complieswith2.4GHzIEEE802.11nstandardandisbackwardcompatiblewithIEEE802.11g/bstandards
SupportsWEPandWPA/WPA2(TKIPandAES)dataencryption
SupportsmultipleESSIDswithindividualsecuritysettings
SupportsVPNpassthroughforL2TP,IPsecandPPTPconnections
Upto150Mbpsnetworklinkspeed
SMAconnectorforoptionalexternalantenna
LNA(LowNoiseAmplifier)technologyforimprovedradioperformance
IncludedpassivePOEinjectorforupto60meters(200feet)connectiondistance
-3-
PRODUCTSPECIFICATIONS
Standards
IEEE802.11b(11MbpsWirelessLAN)
IEEE802.11g(54MbpsWirelessLAN)
IEEE802.11n(150MbpsWirelessLAN)
IEEE802.1x(NetworkAccessControl)
IEEE802.3(10BaseTEthernet)
IEEE802.3u(100BaseTXFastEthernet)
Wireless
Wirelessfrequencyrange:2.4002.484GHz
EIRPOutputpowerEU(ETSI):20dBm
EIRPOutputpowerU.S.(FCC):36dBm
WirelesschannelsEU(ETSI):113,US(FCC):111
Power
Externalpoweradapter:12VDC,1.0A
HARDWARE
DEVICESTATUSLEDS
-4-
CONNECTORS
Item Description
1 Connectionforexternalpoweradapter(12VDC,1.0A).Usethis,ifyoudonotwanttoutilizethe
includedPassivePoEinjector.
2 FemaleRPSMAconnectorfortheconnectionofanexternalhighgainantenna.
3 Resetbutton.Depressfor10secondstoinitiatearesettofactorydefaultvalues.
4 LANconnectorandpassivePoEinputport.
ThisportneedstobeconnectedtoyourlocalnetworkviaaRJ45cable,ifyouusetheIntellinetCPE
AccessPointasaregularaccesspointorrepeater
5 OptionalWANconnector.ThisneedstobeusedifyouruntheIntellinetCPEAccessPointin
router/gatewaymode.Inthatscenario,theWANportmustbeconnectedtoaportthatprovides
Internetaccess,i.e.,theLANportonthecablemodem.
PASSIVEPOEINJECTOR
TheIntellinetCPEAccessPointcomeswithaPassivePoEInjectorthatenablestomergethepowersupplyanddatato
oneEthernetcableandsupplythemtotheaccesspointswithPoEinput(LAN)port.Ithasthreeconnectionpoints.A
powerinputportfortheexternal12VDCpoweradapter,aLANportfortheconnectiontoyourlocalnetwork,anda
PoEportfortheconnectiontotheaccesspointsLANport.
-5-
CONNECTINGTHEDEVICETOTHENETWORK
Item Description
1 Connecttheexternalpoweradapter(12VDC,1.0A) toapoweroutlet,andtothePassivePoE
injector.Oncetheconnectionismade,thepowerLEDonthePoEinjectorwilllightup.
2 ConnectastandardRJ45EthernetcabletotheLANportonthePassivePoEInjector.Thatcable
connectsthePoEinjector(andthustheaccesspoint)totherestofyournetwork.
3 ConnectastandardRJ45Ethernetcable(8P8C)fromthePoEportofthePassivePoEInjectortothe
LANportoftheIntellinetCPEAccessPoint.Thisconnectionprovidespoweranddataconnectivityto
theaccesspoint.
-6-
CONFIGURINGTHEDEVICE
ACCESSINGTHEWEBCONFIGURATIONINTERFACE
TheIntellinetCPEAccessPointisequippedwithanarrayoffeatures,whichcanbeconfiguredtoyourneeds.
Configurationisdonebymeansofastandardwebbrowser.Openhttp://192.168.2.1inyourWebbrowser,andthen
typeinadminastheusernameand1234asthepassword.ClickLogIntoconnect.
DefaultIPaddress:192.138.2.1
DefaultIPsubnetmask:255.255.255.0
Username:admin
Password:1234
Shouldyouencounterproblemsconnectingtothewebinterfaceoftheaccesspoint,oneofthefollowingissuesmaybe
occurring.
YourcomputersIPaddressisnotcompatibletotheIPaddressoftheIntellinetCPEAccessPoint.Itmustbein
rangeof192.168.2.2to192.168.2.254.
RefertoAppendixAforinformationonhowtosetuptheIPaddressofthenetworkadapter.
TheIntellinetCPEAccessPointisntproperlyconnectedtoeithertheLANportofyourcomputer,orthe
network.VerifythattheLANstatusLEDislit.
TheIPaddressofyourIntellinetCPEAccessPointmayhavebeenchanged.Tovecertain,ahardwarereset
shouldbeperformed.Todothat,simplypresstheresetbuttonfor10secondswhilethedeviceispoweredup.
-7-
SETUPWIZARD
Thesetupwizardshouldonlybeused,ifyouwanttosetuptheIntellinetCPEAccessPointasaCPEforawirelessISP.
Allotheroperationalmodesaresetupwithouttheuseofthesetupwizard.Foradescriptionoftheoperationalmodes,
refertothenextsection.
Onthefirstscreenofthesetupwizardyouneedtodefinewhichwirelesssignalyouwanttoconnectto.Thatsignal
shouldbethewirelesssignalofyourwirelessISP.ClickonScantodisplayofalistofallavailablewirelessnetworks,
selectthenetworkofyourWISP,andthentypeinthepasswordrequiredfortheWISPintheWPAKeyfield.
YoualsoneedtoselecttheWANTypethatiscompatibletothesettingsofyourWISP.
ThesecondscreenallowsyoutodefinethedeviceIPaddressoftheIntellinetCPEAccessPoint.Thedefaultvalueis
192.168.2.1.
-8-
ThethirdsetupwizardscreendealswiththeDHCPserverfunctionoftheIntellinetCPEAccessPoint.Whetherornot
youwillneedtousethis,willdependonyourWISP.However,itismorelikelythannot,thattheDHCPservershouldbe
disabled.IfyoudoneedtoenabletheDHCPserver,thenyouwillneedtofillouttheIPaddressrelatedfields.
Screennumberfourletsyousetupwirelessserviceforyourlocalclients.Ifyoudisableit,thenInternetservicewillonly
beavailabletoclientsthatareconnectedtotheLANportoftheaccesspoint,eitherdirectly,orindirectlyviaaswitch.
Ifyouenablethewirelessfunction,thenyouneedtodefinetheusualwirelessparameters,suchastheSSIDandthe
securitysettings.
ClickApplytosavethesettingsandreboottheaccesspoint.
-9-
Oncetherebootiscompleted,theIntellinetCPEAccess
PointwilltrytoestablishaconnectionwiththeWISPsignal,
indicatedbythestatusConnecting.ClickRefreshafterabout
30secondsandthestatuswillhavechangedtoConnected.
Thisscreenprovidesdetailedinformationaboutthe
connectiontotheWISPsignal,anditallowstoDisconnect
andReconnecttheWISPsignalusingthecorresponding
buttons.
- 10 -
OPERATIONMODESWHENTOUSEWHICH
YourIntellinetCPEAccessPointsupports4operationmodes:Router(Gateway),
WISP,AccessPoint(AP)andRepeater.Beforeyoustartmakingchangestothe
configuration,youshouldfamiliarizeyourselfwiththesemodes.
ROUTER(GATEWAY)
ArouterconnectsmultiplelocalnetworkclientstooneInternetconnection,andprovidesbasicNATfirewallprotection
atthesametime.UsethismodeifyouwanttheIntellinetCPEAccessPointtofunctionasthe(wireless)routerinyour
network.Ifyouchoosethismode,youmustconnecttheWANportoftheaccesspointtoanetworkportthatprovides
Internetconnection,suchasaDSLorcablemodem.
SelectthecorrectWANtypeforyourISP,e.g.,PPPOEforxDSLconnections,orDHCPforcableInternetservice.Ifyou
selectPPPOE,youmustprovidetheusernameandpassword,aswellasadvancedparameterssuchasMTU,LCPecho
intervalandfailure.YourDSLserviceprovidehasthisinformation.IfyourInternetserviceusesstaticIP,youllneedto
entertheIPaddressandrelatedinformationintotheconfigurationinterface.Inmanycases,however,yourInternet
accessisestablishedbymeansofDHCP.InthiscasethereisnothingtoconfigurebuttheoptionalclonedMACaddress,
whichyouonlyneedtoenterifyourInternetservicerequiresacertainMACaddress.
TheNATfunctionshouldbeenabled,asitprovidesthebasicrouterandfirewallfunctionalityyouwouldexpectfroma
router.
- 11 -
WISPWIRELESSISP
AwirelessInternetserviceprovider(WISP)isanInternetserviceproviderwithanetworkbasedonwireless
networking.IfyouliveinanareawhereInternetserviceisprovidedbya2.4GHzWirelessIEEE802.11nsignal,youcan
utilizetheIntellinetAccessPointasaCPE(Customerpremisesequipment).WhenyouactivateWISPmode,youwill
needtospecifytheSSIDoftheWISPsignal,alongwiththesecuritysettingsifsorequired.Youalsoneedtodefinehow
theconnectiontotheWISPisestablished,i.e.,DHCP,PPPoE,etc.Aftertheobligatoryreboot,theIntellinetCPE
wirelesslyconnectstotheWISP,andalsoprovideslocalwirelessaccessinyournetwork.
ClickonScantosearchforavailablewirelesssignalsinthearea.Selectthewirelessnetwork(wlan_ISPinthe
exampleabove),andthechannel,securitymodeandWLANEncryptwillbefilledoutautomatically.Typeinthe
passwordforthewirelessnetworkinthefieldWPAKey.NotethatthisisonlyrequirediftheWISPsignalusesWPA
encryption.ShouldtheWISPsignaluseWEPencryption,theinterfacepresentsyouwithslightlydifferentfieldsthat
needtobefilledout,namelytheWEPkeytype,keyidentifierandtheactualWEPkeyfields.
LockBSSIDmakessurethattheIntellinetCPEAccessPointwillalwaysconnecttothisWISPsignal,evenifthenameof
theWISPsignalweretoeverchange.
- 12 -
ACCESSPOINT
ThisisthedefaultoperationmodeoftheIntellinetCPEAccessPoint.Awirelessaccesspoint(AP)isadevicethatallows
wirelessdevicestoconnecttoawirednetworkusingWiFi.Inthismode,thedeviceactsasasimplenetworkswitch
connectingwirelessandwirednetworkclients.
InordertousetheIntellinetCPEasanaccesspoint,youneedtosettheStatustoEnable,settheModeto11B/G/N
(recommended),settheChanneltoavaluethatputsthiswirelessnetworkatleast4channelsapartfromanexisting
wirelessnetworkthatmightbeincloseproximity.Forexample,ifanotherwirelessnetworkinrangeissettochannel2,
thenitdbebesttosetyourIntellinetCPEAccessPointtochannel6orhigher.Next,providetheSSIDandsetupthe
SecurityModeforthewirelessnetwork.WPA2PSKisrecommendedasitprovidesthemostrobustsecurityforyour
wirelessnetwork.
IfyouuseaRadiusserverinyournetworktoauthenticatethewireless
clients,youmustselectEnterpriseasthesecuritymode,andagainthe
WPA2variantisthepreferredchoice.IfyouselectEnterpriseencryption,
youmustprovidetheserveraddress,portandsharedsecretkey.
Finally,youmustspecifythelocalIPaddressforyouraccesspoint.Thedefaultaddressis192.168.2.1,butyoucan
changeithereifyousodesire.Seenextpageforfurtherdetails.
- 13 -
REPEATER
Awirelessrepeater(alsocalledwirelessrangeextender)takesanexistingsignalfromawirelessrouterorwireless
accesspointandrebroadcastsittoamplifythewirelesssignal,extendingitsrangeintheprocess.Whenyouactivate
thismode,youneedtospecifythewirelessnetworkwhichyouwishtorepeat,oramplify.Afteryouprovidethe
requiredsecurityinformation,theIntellinetCPEAccessPointperformsarestart.
ThesetupisvirtuallyidenticaltotheWISPmode.ClickScantoshowwirelessnetworksinrange,thenselectthe
wirelessnetworkthatyouwithtorepeat(extenditsrange),andprovidetherequiredsecurityforthenetwork.Similar
totheAccessPointmode,youcanalsodefinetheLocalIPSettings.SelectDHCP,andtheIntellinetaccesspointwill
receiveitsIPsettingsfromaDHCPserverinyournetwork,mostlikelythatwillbeyourrouter,andselectStaticifyou
wanttocontroltheIPaddressandrelatedsettingsyourself.
- 14 -
STATUS
ThissectionprovidesvariousbitsandpiecesofinformationaboutthecurrentstatusoftheIntellinetCPEWireless
AccessPoint.Dependingontheoperationalmodethedeviceissetto,youwillseeoneofthefourpossiblemenus
below.
WAN
IftheaccesspointisoperatinginRouter(Gateway)mode,you
canseeinformationaboutthestatusoftheInternetconnection
onthispage,including,butnotlimitedtotheWANIPaddress
anddatatraffic.Additionalinformationcanbefoundonthe
WANpagessidebarinyourwebbrowser.
WISP
IftheIntellinetCPEAccessPointisconnectedtoawirelessISP,somerelatedinformationabouttheWISP
connectioncanbeobtainedfromthisstatusscreen.RefertothehelpsidebarontheWISPinformationpage
inyourwebbrowser.
Repeater
Ifthedeviceissetupasarepeater,youcanseeinformationonthecurrentconnectionstatusonthispage.
Thiscanbehelpfulifyouneedtotroubleshootapotentialproblemrelatedtotherepeaterconnection.
AccessPoint
Thisoptionisavailableregardlessoftheoperationalmodeandshowsrelatedinformationtothecurrent
wirelessfunction,suchastheSSID,channel,securityorconnectedclients.
LAN
ThisoptionisavailableregardlessoftheoperationalmodeandshowsinformationrelevanttotheLAN
connectionstatusoftheIntellinetCPEAccessPoint,includingforexampleitsIPaddress.
DHCPServer
TheIntellinetCPEAccessPointisequippedwithaninternalDHCPserver,whichmeansitcanprovideIP
addressestoconnectedclients.Thisscreenshowswhichclientsareconnectedintotal,andofthose,which
haveobtainedanIPaddressfromtheIntellinetCPEAccessPoint.
System
Basicsysteminformation,includingfirmwareversion,hardwareversionandsystemuptime.
- 15 -
WIRELESSSETTINGS
ThismenuprovidesaccesstoallparametersrelatedtothewirelessfunctionoftheIntellinetCPEAccessPoint.
BASIC
Asthenamesuggests,hereyoucancontrolthebasicsettings
relatedtothewirelessfunction.Youcandefinethenameof
thewirelessnetwork(SSID),thechannel,securitysettings,
i.e.,thewirelesspassword,youcanactivatewirelessclient
isolationwhichpreventscommunicationbetweenwireless
clients,andyoucanenableordisablethebroadcastofthe
SSID.Forinformationaboutthesecuritysettings,referto
sectionOperationModesAccessPoint.
MSSID
TheIntellinetCPEcansimultaneouslybroadcastfourdifferent
wirelessnetworks(SSIDs).Eachwirelessnetworkcanhaveits
ownsettings.
MSSIDSelectletsyoudefine,whichofthethreeadditional
SSIDsyouwanttoconfigure.Onceselected,youcanproceed
settinguptheparametersthesamewayasyoudidforthe
mainSSIDaboveunderBasic.
ACL
ACLstandardsforaccesscontrollist.Withthisfeature,you
cancontrolwhohasaccesstothewirelessnetwork,andhow
manysimultaneoususersareaallowed.Allofthiscanbe
controlledforeachofthefourSSIDsindependently.
MSSIDSelectletsyoudefine,whichofthefourSSIDsyou
wanttoconfigure.TheMaxStationparameterallowsto
defineanupperconnectionlimitfortheparticularSSID.This
canbehelpfuliftheaccesspointisinstalledinabusyareaand
youneedtoputacapontheactiveuserstoensureadecent
wirelessperformancefortheconnectednetworkclients.
- 16 -
ThesecondfeatureistheACLStatus,whichallows(valueAccept)ordisallows(valueDrop)accessbasedonthe
MACaddressofthewirelessnetworkclient.EntertheMacAddressmanually,orclicktheRescanbuttontofindthe
MACaddressofaconnectedwirelessclientautomatically,andthenclickAddtoaddtheMACaddresstothe
configuration.
WDS
WDS(WirelessDistributionSystem)isamethodoflinkingtwoormorewirelessaccesspointsorwirelessrouters
together,withoutphysicallyconnectingthem.WDSisasystemenablingthewirelessinterconnectionofaccesspoints
inanIEEE802.11network.Itallowsawirelessnetworktobeexpandedusingmultipleaccesspointswithoutthe
traditionalrequirementforawiredbackbonetolinkthem,andthatsavesinstallationcost.
ButWDSisntwithoutitsproblems.DependingontheWDSsetup,theperformancecansuffergreatly,asmuchasa
lossof50%oftransferspeedperhop(accesspointinWDSmode).Ifthroughputandlowlatencyareimportanttoyou,
thenWDS,asimplementedinnonenterpriseequipmentsuchasyourIntellinetCPEAccessPoint,isntreallyagood
option.WDSalsosuffersfromtheproblemthatonlystaticWPAkeyscanbeused,eliminatingoneofthekeystrength
ofWPA2encryptedwirelessnetworks.Ifsecurityisofgreatimportancetoyou,WDSisnttheidealmodetousefor
yourwirelessnetwork.WDSsetupsarealsorestrictedinthatonlythesameequipmentcanbeusedinthesetup.Even
otheraccesspointsfromthesamemanufacturer,Intellinetincluded,maynotbecompatibleduetothefactthatoften
differentchipsetsfromdifferentchipsetmanufacturersareused.
Availablemodes:
LazyInthismodetheaccesspointwillautomaticallyconnectwithotherWDSdevicesthatusethesameSSID,
channel,encryptionmode,andphysicalmode.ThereisnoneedtomanuallytypeintheMACaddressesoftheother
WDSAPs.However,oneoftheparticipatingaccesspointsmustbesettoBridgeorBridge+mode.Theycantallbelazy.
BridgeThismodecanbeusedtoconnecttwonetworkstogether.AllWDSbridgesmustbesettothesamechannel,
SSID,encryptionmodeandphysicalmode.NotethattheaccesspointinWDSBridgemodeonlycommunicateswith
otherWDSbridges,butnotwithwirelessclients.
- 17 -
Bridge+Thismodecanbeusedtoconnecttwonetworkstogether.AllWDSbridgesmustbesettothesamechannel,
SSID,encryptionmodeandphysicalmode.UnlikeBridgemode,theBridge+modeallowstheaccesspointto
communicatewithwirelessclientsandotherWDSbridgesatthesametime.However,donotethatduetothe
directionalantennacharacteristicsoftheIntellinetCPEAccessPoint,theuseablewirelesssignalislimitedtoarather
narrowbeam.Thatisgoodforpointtopointconnections,butwhenyouwanttoconnectwirelessclientsthatarein
thevicinityoftheaccesspointonallsides,notjustintheareaofthebeam,itisnotanidealsolution.Insucha
situation,theuseofanOmnidirectionalantennaconnectedtotheexternalantennaconnectorwouldbe
recommended.
RepeaterInthismode,WPSrepeatersrebroadcastanexistingwirelesssignalandbydoingsoextendtherangeof
thewirelessnetwork.Itworksprettymuchthesamewayastheuniversalrepeatermode(seesectionOperation
Modes),excepttheWDSrepeaterofferssomeadvantagesanddisadvantagesoverthestandardrepeatermode.The
advantageisthattheWDSrepeatercreatesatransparentwirelessrepeatednetworkwheretheconnectingdevices
MACaddressescansuccessfullypassthroughthenetworkandaccesstoothernetworkclients.Assuch,theWDS
repeaterconnectionisinvisibletothenetworkclients.Itsasiftheywereconnectedviaacable.Ontheotherhand,
theuniversalrepeatermodedoesnotprovidethistransparency,anditisnotguaranteedthatallclientsinthelocal
networkcanalwaysproperlyseeeachother.Notonlythat,butwhenusingauniversalrepeaterincombinationwitha
wirelesshotspot(suchasIntellinetsGuestGateMKII),theloginorwelcomepagemaynotappearcorrectlyforyouas
mostWiFihotspotauthenticationsolutionsrequirecapturingtheMACaddressofyourtablet,smartphoneorlaptop
whichmaynotsuccessfullypassthroughtheuniversalrepeater.ButWDS,asweheardbefore,hasitsownshareof
problems:massiveperformancepenalties,poorcompatibilitytootherhardwareandreducedsecurity.
- 18 -
ThePhysicalModemustbesettothesamevaluesonallparticipatingWDSaccesspoints.YouwillwanttouseHTMIX
for11b/g/nmixedmode,andGreenFieldfor802.11nonlymode.SelectCCKfor802.11bmodeandOFDMfor802.11g
mode.
YouneedtoprovidetheMACaddressesoftheotherWDSAPsunderWDS14Settings,unlessyouusethelazymode.
ClickonScantodisplayalistofwirelessnetworksinrangeandselectthenetworktowhichyouwanttocreateaWDS
connection.SelectthecorrectEncryptTypeandprovidetherequiredKey.Youcanconnecttoupto4differentaccess
pointsinWDSmode.
WMM
WirelessMultimediaExtensions(WME),alsoknownas
WiFiMultimedia(WMM),isaWiFiAlliance
interoperabilitycertification,basedontheIEEE
802.11estandard.ItprovidesbasicQualityofservice
(QoS)featuresforwirelessIEEE802.11networks.
WMMprioritizestrafficaccordingtofouraccess
categories(ACforshort):
1.Voice
2.Video
3.Besteffort
4.Background.
ItissuitableforwelldefinedapplicationsthatrequireQoS,suchasVoiceoverIP(VoIP)onWiFiphones(VoWLAN).
However,itdoesnotprovideguaranteedthroughput.
AsfortheIntellinetCPEAccessPoint,WMMcanbedisabledorenabledforeachofthefourSSIDsindependently.
WMMshouldbeenabledforallSSIDstoensurethehighestpossiblelinkspeedof150Mbps.Thereisreallynoreason
todisable,unlessyouareexperiencingtechnicaldifficultiesandwanttodisableWMMaspartofthetroubleshooting.
- 19 -
ADVANCED
Thispageprovidesaccesstosettingsand
parametersthatarebestleftattheirfactory
defaultvalues,unlessyouhavesufficient
knowledgeaboutwirelessnetworks.While
impropersettingscannotcauseanyharmtothe
accesspoint,theycanhaveanegativeimpacton
theperformanceofyourwirelessnetwork,tothe
pointwhereyoumayneedtoperformahardware
resetontheIntellinetCPEAccessPointtoget
thingsrunningsmoothlyagain.
TXPower:Controlsthestrengthofthewireless
signal.
TXBurst:TxBurstmode(packetoverdrive)isonly
applicableforIEEE802.11b/gclients,whichmeans
thatTxBurstingdoesnotapplytowirelessIEEE
802.11norIEEE802.11acnetworks.
TXPreamble:Enableordisabletheshort
preamble.IfsettoEnable,theaccesspointwill
operatewiththeshortpreamblesettings,andif
settoDisable,thelongpreambleisactive.Unless
youhavelegacy802.11b(1or2Mbps)clientsin
yournetwork,there'snoneedforalongpreamble,andyoucanleavethisoptionenabled.
BeaconInterval:AwirelessaccesspointssendsoutspecificdatapacketscontainingtheSSID,thechannelnumber,and
securitysettings.Thesepacketsarecalledbeacons.Anyclientthatwantstojoinawirelessnetworklistensforthese
beaconframes,andanywirelessclientalreadyconnectedalsoreceivesthemwhenevertheyaresentout.Thebeacon
intervalcontrolshowoftentheaccesspointbroadcaststhebeaconframes.Possiblevaluesrangefrom20to1000(ms).
Theshorterthebeaconinterval,themoreoftenarethebeaconframessentout.Themoreoftenthebeaconframes
aresentout,thequickertheassociationandroamingprocesswillbe,butitalsoleadstomorenetworkoverhead,
whichthenleadstoadropinthroughputperformance.Increasethebeaconintervaltoreducethenetworkoverhead,
butthatcomesattheexpensiveofaslightlyslowerassociationtime,whichmeansittakesjustalittlebitlongerfor
wirelessclientstojointhenetwork.Thedefaultvalueis100.
DataBeaconRate(DTIM):TheDTIM(deliverytrafficindicationmap)ratenotifiesawirelessclientwithpowersave
modehowmanybeaconsuntilbufferedmulticasttrafficwillbebroadcastbytheaccesspoint.ThehighertheDTIM
rate,thelongeraclientdevicemaysleepandthereforethemorepowerthatparticularclientdevicemaypotentially
save.Youcanspecifyavaluebetween1and255.Thedefaultvalueis1,whichmakestheDTIMIntervalthesameasthe
BeaconInterval.
BGProtection:B/GProtection,shouldbesettoOn.TheB/GProtectionmodeensuresthatolderwireless802.11band
802.11gdeviceswillnotdegradetheperformanceofthemuchfasterwireless802.11nnetwork.So,ifyouhaveamix
ofolderandnewerwirelessstationsinthenetwork,itsrecommendedthatyouenabletheprotectionmechanism.
OnlyifyouknowforcertainthatyournetworkconsistsonlyofwirelessNclientsshouldyouconsiderdisablingthis
option,asitcanincreasetheperformanceofyourconnectionseversoslightly.
- 20 -
FragmentThreshold:Thefragmentationthresholdisusedtosetthemaximumpacketssizethataclientwillsend.The
smallerthemaximumsizesthebetterthereliabilityofthewirelessconnection,buttheperformanceislikelyto
decrease.Possiblevaluesrangefrom256tothedefaultvalueof2346(bytes).So,thenwhenshouldyouchangethis
value?Onlyifyouneedtoimprovethereliabilityofawirelessconnectionwhereperformanceissecondary.Usually
youdomoreharmthangoodifyoulowerthefragmentthreshold.
RTSThreshold:RTS(Requesttosend)packetsaresentbywirelessclientstoaccesspoints.Theclientsessentiallyask
forpermissiontosendthenextdatapacket.Thelowerthethreshold,themorestableyourwirelessnetwork,sinceit
essentiallyasksmoreoftenwhensendingpackages.Thedefaultvalueis2347,andyouarewelladvisedtoleavethis
valueunchanged.
GuardInterval:Thisoptionactivatestheshortguardinterval(SGI)whensetto400ns,whichcanincreaseyour
wirelessperformancebyupto11%.Ifyourwirelessaccesspointisinstalledinaverycrowdednetworkenvironment
withdifferentaccesspointsoccupydifferentchannelsallaroundyou,theslowerguardintervalof800nswillprovide
betterresults.
SpaceTimeBlockCoding(STBC):STBCisanoptionalfeatureinthe802.11nstandardisusedtoachievethesignalto
noiseratioontheRFreceiver.
ReverseDirectionGrant(RDG):Improvestheefficiencyofatwowaycommunication.Enablingthisisrecommended.
AggregationMSDU(AMSDU)andAutoBlockACK:
Everyframetransmittedbyan802.11devicehasasignificantamountofoverhead,includingradiolevelheaders,
MediaAccessControl(MAC)framefields,interframespacing,andacknowledgmentoftransmittedframes.Atthe
highestdatarates,thisoverheadcanconsumemorebandwidththanthepayloaddataframe.Toaddressthisissue,the
802.11nstandarddefinestwotypesofframeaggregation:MACServiceDataUnit(MSDU)aggregationandMAC
ProtocolDataUnit(MPDU)aggregation.Bothtypesgroupseveraldataframesintoonelargeframe.Because
managementinformationneedstobespecifiedonlyonceperframe,theratioofpayloaddatatothetotalvolumeof
dataishigher,allowinghigherthroughput.
MSDUaggregationreliesonthefactthatmostmobileaccesspointsandmostmobileclientprotocolstacksuse
Ethernetastheir"native"frameformat.ItcollectsEthernetframestobetransmittedtooneormultipledestinations
andwrapstheminasingle802.11nframe.ThisisefficientbecauseEthernetheadersaremuchshorterthan802.11
headers.AnAMSDUcontainsonlyMSDUswhoseDAandSAparametervaluesmaptothesamereceiveraddress(RA)
andtransmitteraddress(TA)values,i.e.,alltheMSDUsareintendedtobereceivedbyasinglereceiver,andnecessarily
theyarealltransmittedbythesametransmitter.
MPDUaggregationalsocollectsEthernetframestobetransmittedtoasingledestination,butitwrapseachframeinan
802.11nMACheader.NormallythisislessefficientthanMSDUaggregation,butitmaybemoreefficientin
environmentswithhigherrorrates,becauseofamechanismcalledblockacknowledgement.Thismechanismallows
eachoftheaggregateddataframestobeindividuallyacknowledgedorretransmittedifaffectedbyanerror.
DeclineBARequest:TheBlockACKRequest(BAR)frameissentpriortoaseriesofframesthatthetransmitterwould
liketobeacknowledged.WithoutablockACKrequest,thereceivercannotsendablockACK.Withthisoptionyoucan
selecttoeitheracceptorrejectpeerBArequests.
- 21 -
HTSupportTKIP:HTstandsforHighThroughputandisoftenusedasanabbreviationforIEEE802.11n.Whenenabled,
thisoptionpreventstheuseofTKIPdataencryptionwhenusing802.11nhighthroughputdatarates.
PacketAggregate:Packetaggregationistheprocessofjoiningmultiplepacketstogetherintoasingletransmissionunit,
inordertoreducetheoverheadassociatedwitheachtransmission.
ShortSlot:Shortslottimereducestheslottimefrom20microsecondsto9microseconds.Whenenabled,itincreases
thethroughputonthe802.11g,2.4GHzradio.IEEE802.11bisnotcompatiblewithshortslottime.
SSIDIsolated:SettoenabledifyouwanttopreventthedifferentSSIDsfromseeingeachother.Whenenabled,traffic
ononeSSIDwillnotbeforwardedtoanyotherSSIDs.Notethatunlikewirelessclientisolation,SSIDisolationdoesnot
preventwirelessclientsthatareconnectedtothesameSSIDfromcommunicatingwitheachother.
StationIdletoDisconnect(second):DisconnectsidelWLANclientsfromthenetworkafterthespecifiedidletimehas
elapsed.
StationLowSignaltoDisconnect(dBm):IfyouenablethisbyenteringadBMvalue,youcanforceawirelessclientto
dropthenetwork,ifthesignalstrengthisbelowthespecifiedthresholdvalue.Theideaisthatoncetheclientisforced
todisconnect,thestationswillattempttoreassociatewiththebestavailableAP,eliminatingthe'stickynode'or
stickyclientproblem.Olderwirelessadaptersoftenexhibitthisstickyclientbehaviorwheretherewillassociatetoan
accesspointandholdontothatassociationuntilthatsignalisgone,despitethefactthatallalongtherewerecloser
accesspointsforthemtoassociatetothatwouldhaveprovidedamuchstrongerconnection.
AntennaMode:ifyouconnectanexternalantennatotheSMAportoftheaccesspoint,youneedtosetittoexternal,
otherwiseinternalistherightchoice.
- 22 -
NETWORK
TheIntellinetWirelessCPEAccessPointsnotonlyprovideswirelessfunctionality,butitalso
allowstheclientstoconnecttoandcommunicatewiththelocalwirednetwork.Thissection
explainsthevariousnetworkconfigurationoptionsforthedifferentoperationmodes.
NETWORKSETTINGSINROUTERMODE
Inroutermode,theWANportoftheIntellinetCPEAccessPointmustbeconnectedtoacableorDSLmodemwiththe
WANport.Inaddition,youmustsetuptheWANconnectioninthedevicesettings.First,youmustselecttheWAN
TypeappropriateforyourInternetconnection.AvailablearePPPoE(forDSL),DHCP(forcabletypeInternet)orStatic
(forstaticIPsetups).
PPPoE:
Youmustprovidetheusernameandpasswordforthe
DSLconnection.AdditionalparameterssuchastheMTU
size,LCP,ISPnameandtheMACaddressmayalsobe
required,butthatdependsonyourInternetservice
provider.
AnMTUsizeof1500isconsideredstandard,butsmaller
MTUvalues(aslowas1400)cansometimesbe
required.Again,whenindoubt,checkwithyour
Internetserviceprovider.
DHCP:
Themostcommonandeasiesttosetupmethod.It
sometimesrequirestheMACaddresstomatchthe
recordsoftheInternetserviceprovider,inwhichcase
youcanusetheMACAddressClonefunction.
Static:
ShouldyourInternetconnectionrequirestaticIP
settings,thenyouhavetoenterthemonthisscreen.IP
address,subnetmaskandDNS1andmandatoryentries.
DNS2isrecommendedasabackup,andtheMAC
AddressClonefunctioncanbeusediftheInternet
servicerequiresaspecificMACaddresstobeused.
HereyoudefinetheIPaddressoftheAccessPointinthe
localnetwork.Thedefaultvalueis192.168.2.1andgives
youaccesstothewebUIviahttp://192.168.2.1.YoucanmakechangestothisIPaddress,e.g.,tomaketheIntellinet
accesspointpartofthelocalnetwork,whichmayberunningonadifferentsubnet.
- 23 -
WhenusingtheIntellinetCPEAccessPointasarouter,
youwilltypicallywanttoenabletheDHCPserver
function.Onceenabled,therouterprovidesIPaddress
informationtotheconnectedclients,justlikeany
ordinaryrouterwoulddo.Withthatinformation,clients
canaccesstheInternetviatherouter.
ForinformationabouttheIPaddresses,lease,gatewayandDNS,refertotheonscreenhelp.
CustomStaticRoutes:Staticroutingisaformofroutingthatoccurswhenarouterusesamanuallyconfiguredrouting
entry,ratherthaninformationfromadynamicroutingprotocoltoforwardtraffic.Unlikedynamicrouting,staticroutes
arefixedanddonotchangeifthenetworkischangedorreconfigured.Staticroutinganddynamicroutingarenot
mutuallyexclusive.
Example:TorouteIPtrafficdestinedforthenetwork10.10.42.0/24viathenexthoprouterwiththeIPv4addressof
192.168.42.1,enterthefollowinginformation:
AddStaticIP/MACBindingRules:Inordertoensurethat
anetworkclientalwaysreceivesthesameIPaddress
fromtherouter,youcanhavetherouterassignastaticIP
addresstothatclient.Thiscanbehelpfulifyouhavea
localserverforwhichyouwanttoassignastaticIP
withoutactuallyhavingtoconfigureastaticIPaddresson
thelocalserver.Toassignastaticallocation,typeintheMACaddressoftheclientforwhichyouwanttocreateastatic
DHCPlease,andalsotypeintheIPaddressandleasetimeyouwishtouse.ClickAddtocreatethestaticIP/Mac
bindingrule.
Ifyouwanttomakecertainlocalnetworkclients,called
serversinthiscircumstance,accessiblefromtheInternet,
youneedtocreatesocalledportforwardingrules.
Withoutthoserulesinplace,therouterwouldsimply
rejectanyconnectionattemptmadetotheserviceportin
question.Forexample,ifyouhavealocalFTPServerthat
isinstalledwithastaticIPaddressof192.168.2.100,then
youneedtocreateaportforwardingruleforport21TCP(StandardFTP)forthatIPaddress.Nowifauserfromoutside
yourLANsendsarequesttotherouteronport21,therouterwillthenpromptlyforwardtherequesttoIPaddress
192.168.2.100.Refertotheonscreenhelpforadditionalinformation.
DMZstandsfordemilitarizedzone.Youcanactivatethis
optionforasingleIPaddressonyourlocalnetwork.Once
activated,anytrafficsenttoyourpublicIPaddressforanyserviceportwillberedirectedtothelocalIPaddress
specifiedastheDMZhost.IfweapplythistoourexampleofFTPserveratIP192.168.2.100,itwouldmeanthatnot
onlypacketsforport21arebeingforwardedtoitsIPaddress,butanyrequestonanyport.Asthiscompletelyexposes
thelocalserveronIP192.168.2.100totrafficontheInternet,thatserverisatgreaterriskofbeingattackedbyhackers,
- 24 -
worms,virusesorscriptkiddies.
Staticroutingisaformofroutingthatoccurswhena
routerusesamanuallyconfiguredroutingentry,rather
thaninformationfromadynamicroutingprotocolto
forwardtraffic.Settingupstaticroutesrequires
fundamentalunderstandingofTCP/IPandshouldonlybe
donebyqualifiedpersonal.Refertotheonscreenhelpfor
additionalinformation.
DDNS(DynamicDNS)isanIPtohostnamemapping
serviceforInternetuserswhodonthaveastatic(fixed)IP
address.Itwillbeaproblemwhenauserwantstoprovide
servicestootherusersontheInternetbecausetheirIP
addresseswillvaryeverytimetheyconnect,andtheywillnotbeabletoknowtheIPaddresstheyreusingatany
certaintime.ThisroutersupportstheDDNSserviceofaplethoraofserviceproviders.Refertotheonscreenhelpfor
additionalinformation.
Thisfunctionenablesnetworkautoconfigurationforpeer
topeercommunications.Withthisfunction,network
deviceswillbeabletocommunicatewithotherUPnPenableddevicesdirectlyandlearnaboutotherdevices.Many
networkdevicesandapplicationsrelyonUPnPfunctionnowadays.
- 25 -
NETWORKSETTINGSINWISPMODE
WhentheIntellinetCPEAccessPointoperatesinWISPmode,itconnectswirelesslytoa2.4GHzWiFisignalfroma
WirelessInternetServiceProvider.
AlloptionsexceptforWISPareidenticaltotheRoutermodeasdiscussedintheprevioussection.
ClickonScan/Rescantosearchforavailable
wirelesssignalsinthearea.Selectthewireless
network(wlan_ISPintheexample),andthe
channel,securitymodeandWLANEncryptwillbe
filledoutautomatically.Typeinthepasswordfor
thewirelessnetworkinthefieldWPAKey.Note
thatthisisonlyrequirediftheWISPsignaluses
WPAencryption.ShouldtheWISPsignaluseWEP
encryption,theinterfacepresentsyouwithslightly
differentfieldsthatneedtobefilledout,namely
theWEPkeytype,keyidentifierandtheactual
WEPkeyfields.
LockBSSIDmakessurethattheIntellinetCPEAccessPointwillalwaysconnecttothisWISPsignal,evenifthenameof
theWISPsignalweretoeverchange.
WISPAccessSettingsareusedtodefinewhattypeofInternetconnectiontheWISPsignaluses.Availablechoicesare
PPPoE(forDSL),DHCP(forcable)andStatic(IP).
- 26 -
NETWORKSETTINGSINACCESSPOINT(AP)MODE
WhenusingtheIntellinetCPEasastandardaccesspoint(AP),therearenot
nearlyasmanysettingstoconfigure.LANandDHCPareevenidenticaltothe
routermode.
VLAN:TheIntellinetCPEAccessPointsupportstaggedVLAN.AVLAN(VirtualLocalAreaNetwork)isamethodof
creatinganindependentlogicalnetworkwithinaphysicalnetwork.VLANTaggingisthepracticeofinsertingaVLANID
intoapacketheader,whichservesasanidentifierforwhichVLANthepacketbelongsto.Morespecifically,switches
usetheVLANIDtodeterminewhichportorportstosendthepacketto.
ManageVLANID:DefinewhichVLANIDisusedto
managetheaccesspoint.Notethatifyouchangethis
valueandclickApply,theaccesspointwillrebootand
afterthatyouwillneedtohaveastationthatisin
thatVLANinordertoaccesstheWebadmin
interface.Ifyouaccidentallychangedthe
ManagementVLANIDandhavelostaccesstothe
webadmininterface,youwillneedtoperforma
hardwareresettorestorethefactorydefaultsettings.
SwitchPort:TheIntellinetCPEAccessPointis
equippedwithtwoRJ45FastEthernetports.TheLAN
connectorislistedasPortID1andtheWAN
connectorislistedasPortID0seesection
Connectors.ForeachportyoucandefinethePVID(PortVLANIDforportbasedVLANs)andthetaggingstatus
untaggedortagged.
SSIDTable:EachoftheSSIDsofyourIntellinetCPEAccessPointcanbeassignedtoaVLANID(VID).LeavetheVID
emptyifyouwanttrafficonthatSSIDnottobetagged.
VLANMember:DefinetowhichVLANsthephysicalports0and1belongto.
- 27 -
NETWORKSETTINGSINREPEATERMODE
Repeatermodehasthepurposeofstrengtheninganexistingwirelesssignaland
extendingitsrange.Soitcomesasnosurprisethattherepeatermodeisalso
referredtoasrangeextendermode.
ClickScantoshowwirelessnetworksinrange,then
selectthewirelessnetworkthatyouwithtorepeat
(extenditsrange),andprovidetherequiredsecurity
forthenetwork.Youdonotneedtomanuallyspecify
thechannelorsecuritymode.Thesevalueswillbe
automaticallyfilledoutbaseduponwhichSSIDyou
select.
SimilartotheAccessPointmode,youcanalsodefine
theLocalIPSettings.SelectDHCP,andtheIntellinet
accesspointwillreceiveitsIPsettingsfromaDHCP
serverinyournetwork,mostlikelythatwillbeyour
router.SelectStaticifyouwanttocontroltheIPaddressandrelatedsettingsyourself.Ifyouwanttomaintaincontrol
overtheLANIPaddressoftheIntellinetCPEAccessPointsothatyoucanalwaysquicklyaccessitswebconfiguration
interface,usingastaticIPaddressmightbebeneficialunlessyoucanhaveyourDHCPserverassignastaticIPaddress
totheIntellinetCPAAccessPoint.
- 28 -
QOS(INROUTERANDWISPMODE)
Qualityofservice(QoS)istheoverallperformanceofcomputernetwork,
particularlytheperformanceseenbytheusersofthenetwork.Qualityof
serviceisparticularlyimportantforthetransportoftrafficwithspecial
requirements.Inparticular,videoorvoiceoverIPapplications.QoS,whichis
alsoknownastrafficshaping,assignsaprioritytoeachdevice(orservice)
operatingonthenetworkandcontrolstheamountofbandwidtheachis
allowedtoconsumebasedonitsrole.Withoutthiskindofcontrol,eachdevicewoulduseupasmuchbandwidthas
possible.ProperQualityofServiceisadvisableifyouuseyournetworktoplayonlinegames,makeVoIPsuchasSkype
calls,watchYouTubeorstreamvideoforexampletoTwitch.
ConfiguringQoScanbequitecomplex,andtheIntellinetCPEAccessPointallowsaverydetailedcontroloverthedata
andhowitisprioritizedindeed.Settingthisupincorrectlycancausemoreharmthangood,andbecauseofthatitis
highlyrecommendedthatyouarefamiliarwithQoSanditsrelatedtermssuchasDSCP,etc.
Thisiswherethingsgettrickier.Upstreamdescribesalldatatrafficthatyousendfromyourlocalnetworktothe
Internet,forinstance,trafficfromyourPCtoyourTwitchorYouTubelivebroadcast.Downstreamistheopposite.If
youwatchavideoonYouTube,dataissentfromtheInternettoyourlocalnetwork,andthatisconsidereddownload
ordownstream.
ModeEquity:Theaccesspointwilltryitsbestto
distributetheavailablebandwidthevenlyand
fairlybetweentheavailablenetworkclients.No
oneclientwillbeespeciallylimitedorgivenany
specialtreatmentovertheother.ThismodeisnotaseffectiveasPriority,LimitorAssure.
ModePriority:Whenselected,youcanassign
networkclientsoneofthreepossiblepriorities.
Thisallowsyoutoquicklycategorizenetwork
clients,forexampleguests,normalusersand
powerusers.Theexampleontherightshowsan
exampleonhowtocreatearulefor10computers
(IP192.168.2.50192.168.2.59)whichhavehigh
priorityLevelwithDSCPsettoAF11.
YoucanidentifycomputersbasedontheirIP
addresses(asshown),orbasedontheirMACaddress.Furthermore,youcanlimittheruletoonlyaffecttrafficfora
certainProtocol(TCPorUDP)andPort.
- 29 -
ModeLimit:Withthismodeyouhavetheability
tolimitthebandwidthavailableacertainnetwork
clientoragroupofnetworkclients.Theidea
behindthisistoprovideacapfortheavailable
uploadordownloadbandwidth.
Theexampleshowshowwecreatearulethat
limitstheavailablebandwidthforaPC
(presumablyDaves)withtheMACaddress
5C:26:0A:02:8B:14to2048Kbpsor2Mbps.TheDSPvalueiskeptatdefault(=besteffort),whichmakessenseinthis
typeofscenario.
ModeAssure:Withthismodeyouhavethe
abilitytoguaranteebandwidthtoanindividual
client,oragroupofclients.Theexampleonthe
rightshowshowtoaddaNetflixvideostreaming
deviceandmakesureithassufficientbandwidth
availabletostreamin1080presolution.Netflix
usestheTCPProtocolonPort80.Asforthe
bandwidth,5Mbpsaretypicallysufficient,butto
beonthesafeside,wereservealittlebitmore
andsettheRate(kbps)to8192(=8Mbps).The
Ceil(kbps)canbeusedtolimitthemaximumbandwidthavailabletothedevice,butwedontwanttodothatinthis
case.WealsosettheDSCPtoAF11toboostthetrafficpriority.
DefaultDSCP:DSCPstandsfordifferentiatedservicescodepoint.Itisafieldin
anIPpacketthatenablesdifferentlevelsofservicetobeassignedtonetwork
traffic.TheDSCPvaluecantellyourISPhowtohandleyourtraffic,butmost
ISPswillignoreDSCPmarkingsastheyleaveyournetworkandentertheirs,
andforgoodreasons:NetNeutrality.IfISPSwouldrespectandactuponthese
headers,theywouldquicklybecomemeaninglesssinceeverybodywouldcode
theirtrafficforthehighestpriority(ExpeditedForwardingEF).Inreality
DSCPcanreallyonlyaffectthedatatrafficinsideyournetwork,andhowthe
routerprioritizesit.CombineaDSCPvalueofEFwithPrioritymodefor
example,andtherouterwillgivethehighestprioritytothattrafficuptothe
pointwhereitleavesyournetwork.SeeAppendixCforinformationaboutthe
DSCPvalues.
Totalrate(kbps):Definehowmuchtotalbandwidth(upstreamplusdownstream)inkbpsisavailable.Thisparameter
needstobeprovidedinAssuremode.
- 30 -
OnefeatureofQoSdoesnotrequireanyconfiguration.
ItscalledWMM,whichstandardsforWiFiMultimedia.
WMMprioritizesnetworktrafficinfourcategories:
1.Voice
2.Video
3.Besteffort(thisisthemajorityoftrafficfromapplicationsotherthanvideoandvoice)
4.Backgroundjobssuchasprinting,filedownloadsandothernonlatencysensitiveapplications.
SimplybyactivatingWMMfortheSSIDsoftheIntellinetCPEAccessPointyoucanalreadyachieveanoticeable
improvementofthequalityofservice.
- 31 -
SECURITY(INROUTERANDWISPMODE)
TheIntellinetCPEAccessPointisequippedwithaFirewallthatprotectslocal
networkusersfromhackerattacksfromtheInternetwheneverrouterorWISP
modeisused.INthesemodestherearetwolayersofsecurity.First,NATitself.
ANATrouterbydesignprovidesprotectionforlocalnetworkusersinthatitwill
notforwardarequestmadefromtheInternettoaspecificserviceport,unless
thatrequestisaresponsetoaninquirymadefromalocalclient.Second,the
IntellinetCPEAccessPointprovidesadditionalfeaturessuchasIP,PortorMAC
addressfiltering,whichallowamoredirectcontrolofwhocanaccessthedevice
andservices,andwhocannot.
DefaultRules:Specifythedefaultbehavior.
Everythingthatisntcoveredbyanyofthesecurity
rulesiseitherbeingdroppedoraccepted(default)
dependingonhowyousetthisvalueup.Acceptis
thecorrectchoiceinthevastmajorityofthecases.
IP/PortFiltering:YoucancreatespecificrulesforIP
addressesandports.
MACFiltering:Youcancreatespecificrulesfor
individualMACaddreses.
URLFiltering:Blockorallowaccesstowebpages.
DoSProtection:ProvidesadditionalsecurityagainstDoS(DialofService)attacks.
Thereareseveralparametersthatcanbeactivatedordeactivated.Notethatthedefaultvaluesaresuch,thatremote
accesstolocalservicesisprohibitedthatincludesPing,WEB,Telnet,SNMP,FTPandSambaaccess.Unlessyouhave
goodreasons,itsbesttoleavetheseoptionssettoDisable.
- 32 -
IP/PORTFILTER:
WiththisscreenyoucancreaterulesforspecificIPaddresses,
protocolsandTCP/UDPports.Youcaneithergrantordeny
access.
Status:Enableordisablethisfilter.
DefaultRules:Defaultbehaviorforanypacketnotmatchingany
ofthedefinedrules(default=accept).
RulesName:Provideaneasilyreconizeablenamefortherule.
SrcStartIPAddress:LocalIPaddressaffectedbytherule.
SrcEndIPAddress:IftheruleisforarangeofIPaddresses,you
needtospecifyastartandendaddress.
DestStartIPAddress:DestinationIPaddressaffectedbythe
rule.
DestEndIPAddress:IftheruleisforarangeofIPaddresses,youneedtospecifyastartandendaddress.
Protocol:DefinewhethertheruleappliestoTCP,UDPorbothtypesofconnections.
SourceandDestPort:Iftheruleistoonlyapplytocertainports,definethemhere.
Action:Definewhethertoallow(Accept)ordisallow(Drop)anypacketthatmatchesthisrule.
URLFILTERING:
WiththisfunctionyoucanlimitaccesstoindividualWebpages.
Status:Enableordisablethisfilter.
DefaultRules:Defaultbehaviorforanypacketnotmatchingany
ofthedefinedrules(default=accept).
URLAddress:TypeintheURLofthesiteyouwishtoblockor
grantaccessto.
Action:DefinewhetheraccesstothisURLshouldbeallowedor
disallowed.
MACFILTERING:
Amediaaccesscontroladdress(MACaddress)isaunique
identifierassignedtonetworkinterfacessuchaswiredor
wirelessadapters.MACaddressesareusedasanetwork
addressformostIEEE802networktechnologies,including
EthernetandWiFi.Thisscreenletsyoucreaterulesforspecific
MACaddresses.Youcaneithergrantordenyaccessbasedon
theMACaddress.
MACAddress:ManuallytypeintheMACaddress,orusetheScanbuttontodisplayalistofallconnectednetwork
clientsandthenselecttheoneyouwishtocreatetherule.
Action:Definewhethertoallow(Accept)ordisallow(Drop)anypacketthatmatchesthisrule.
- 33 -
DOSPROTECTION:
Incomputing,adenialofservice(DoS)ordistributeddenial
ofservice(DDoS)attackisanattempttomakeamachineor
networkresourceunavailabletoitsintendedusers.ADoS
attackgenerallyconsistsofeffortstotemporarilyor
indefinitelyinterruptorsuspendservicesofahostconnected
totheInternet.TheIntellinetCPEAccessPointallowsyouto
enableadditionalbarriersagainstthesekindsofattacks.As
thisfunctionrequiresamoredetailedinspectionofthedata
packets,itcanhaveanegativeimpactontheoverall
performanceofthewirelessnetwork.
Formaximumsecurityyoumayenablealloftheseoptions.
- 34 -
SYSTEM
TheIntellinetCPEAccessoffersseveralsystemrelatedfunctions,whicharediscussedinthissection.Hereyoucan
rebootthedevice,upgradethefirmware,backupandrestoretheconfiguration,andmore.
PASSWORDSETTINGS
Thedefaultpasswordforaccessingtheweb
administratorinterfaceis1234.Inthismenuyoucan
changethatpassword.Changingthispasswordafter
theinitialinstallationisrecommendedtoprevent
unauthorizedaccesstotheconfigurationpagesofthe
IntellinetCPEAccessPoint.
TIMESETTINGS
Withthisscreenyoucansetuptheinternaltimeof
theIntellinetCPEAccessPoint.DefinetheLocalTime
Zone,theSynchronizeMode,theNTPServerandthe
SynchronizeInterval.
IftheAccessPointisconnectedtotheInternet,you
canusethemodeNTP.ThedefaultNTPserveris
pool.ntp.org,andittypicallyworksjustfine.Youcan,
however,changetheNTPserveraddresstosomethingelse.Ifyouselectstatic,youmustprovidethetimemanually.If
youdo,beawarethatthetimewillslowlybutsurelybecomeoutofsyncwiththeactualtime.
BACKUP&RESTORE
TheBackup&Restoreoptionallowsyoutosaveafile
containingallyouraccesspoint'sconfiguration
settings,likeIPaddress,SSIDandsecuritysettings,etc.
toafileonyourcomputer'sHDD.Thisfilecanthenbe
usedtorestorethesettingsiftheaccesspointisreset
tothefactorydefaultsettings.
Backup:ClickthisbuttontosavethecurrentconfigurationtoyourcomputersHDDandUSBstick.
Restore:ClickBrowse,selecttheconfigurationfilethatyoupreviouslysaved,andthenclickRestoretoreloadthe
configuration.
- 35 -
FACTORYDEFAULTS
WiththisfunctionyoucanrestorethefactorydefaultconfigurationoftheIntellinetCPEAccessPoint.Allofyour
customconfigurationsettingswillbelostwhentheresetisperformed.ClickontheLoadDefaultsbuttontobeginthe
processandconfirmyourdecisionbyclickingonOK.
REBOOT
Restarttheaccesspointfromtimetotimetofreeupsystemresources,orincasethedevicedoesnotperformproperly
anymore.ClickonReboottobegintheprocessandconfirmyourdecisionbyclickingonOK.
SMARTREBOOT
Inadditiontothemanualrebootoption(see
above),thereisanothermethod:TheSmart
Reboot.Whatisitfor,andhowcanitbeused?
ThiswirelessAccessPoint,likeanyothercomputer,hasafiniteamountofsystemresources.Overtime,freeresources
willbecomelessandless,andeventually,thesystemstabilitycanbecompromised.Arebootfreesupthesesystem
resourcesandallowscontinueduseofthedevice.
ScheduledReboot:Whenthesystemreachesaspecifiedrunningtime,thesystemwillrebootautomatically.The
devicewilldothisreboot,regardlessofwhetherornotanydevicesareconnected.Sodokeepinmindthatyou
potentiallydisconnectyourwirelessusers.
Rebootattime:Inthismodethedevicewillrebootonceevery24hours.Youcanspecifyatwhattimethisshould
happen.Ideally,youwillwanttochooseatimethathaslittletonoactiveconnectionsgoingon,e.g.,inthemiddleof
thenight,becauseexistingwirelessconnectionswillbeignoredandexistingsessionswillbeinterrupted.
- 36 -
SmartReboot:ThismodeworkssimilartoReboot
attime,withtheexceptionthattheIntellinetCPE
AccessPointwilltrytokeeptheinterruptiontothe
networkatanabsoluteminimum.Thewaythis
worksisasfollows:Youspecifyatimeintervalin
whichtheaccesspointwilltrytoperformthe
restart.YoualsospecifytheWiFiidletime,whichspecifieshowmanyminutesofnoWLANtraffichavetopassbefore
thesmartrebootcanoccur.FinallyyoucanspecifyhowlongtheIntellinetCPEAccessPointwillwait,beforeforcefully
restartingwithoutanyregardforactiveconnections,byprovidingaMaximumuptime(mins.).Forexample,ifyou
wanttoforcearebootatleastonceperweek,youtypein10080asthemaximumuptime(10080minutes=7days).
WEBSERVER
Thewebadministratorconfigurationinterfaceis
accessiblelikeanyotherwebpage.Bydefaultyou
canaccessitbygoingtohttp://192.168.2.1with
yourWebbrowser.EachstandardHTTPrequestismadetoport80,unlessyouspecifyotherwise.Thismeansthat
http://192.168.2.1isthesameashttp://192.168.2.1:80.Ifyouwanttochangetheport,forexamplebecauseyouwant
tobeabletoremotelyaccessthewebadministratorconfigurationinterfacebutport80isalreadyinuse,thenyoucan
changetheWEBPorttosomethingelse.Inourexampletheportischangedtothevalue1024andthenewURLto
accessthewebadministratorconfigurationinterfaceishttp://192.168.2.:1024.
RemoteWEBAccess:EnableordisableremoteWEBserveraccess.Ifyouneedtoconfigurethedevicefromoutside
yourLAN,thisoptionshouldbeenabled.Inaddition,youwillneedtoaddtheWEBPorttoyourrouter'sport
forwardingtableandsetuptheIntellinetCPEAccessPointasaninternalserver.
FIRMWAREUPGRADE
Fromtimetotimetheremightbeanewfirmware
versionavailablefortheIntellinetCPEAccessPoint.
Anewfirmwareversioncanbereleasedtoaddnew
featuresortofixbugsthathavebeendiscovered.A
newfirmwarewouldbepostedontheIntellinetweb
site(intellinetnetwork.com).Inordertoupgradethefirmware,thefollowingstepshavetobeperformed:
1. DownloadthenewfirmwarefromIntellinetnetwork.com.Searchfor525794togettotheproductdetailpage
wherethedownloadwouldbelocated.UncompresstheZIPfileoncethedownloadiscompleted.
2. ConnecttotheIntellinetCPEAccessPointwebadministratorconfigurationinterfaceandopentheFirmware
Upgrademenu.Note:BesuretoconnecttotheAccessPointviathewirednetwork.
3. ClickonBrowsetoselectthefirmwareyouhavepreviouslydownloaded.
4. ClickonUpgradetobegintheprocessandconfirmyourdecisionbyclickingonOK.
- 37 -
DEBUGTOOLS
InthissectionyoucanfindinformationabouttwoadditionalfeaturesoftheIntellinetCPEAccessPoint.
LOGSETTINGS
Theaccesspointgeneratesruntimemessages
(warnings,errors,etc.)andcanprovidethemfor
laterreviewinalog.ThiscaneitherbeaLocalLog,
oraRemotelogutilizingthesyslogprotocol.Syslog
isawidelyusedstandardformessagelogging.Itpermitsseparationofthesoftwarethatgeneratesmessages,suchas
theIntellinetCPEAccessPoint,andthesystemthatstoresthem,forexampletheremotesyslogserver.Ifyouwantto
utilizearemoteserver,thenyouneedtoactivatetheRemoteLogoptionandprovidetheLogServerIP.Thedefault
syslogLogServerPortis514.Youcanmakechangestotheportasneeded.
PINGTEST
TheIntellinetCPEAccessPointhastheabilitytopingothernetworkdevices.Thiscanbeausefulfunctionifyou
connecttotheaccesspointremotely,butwanttoverifythatacertainclientisavailableonthelocalnetwork,inwhich
theaccesspointitinstalled.SimplytypeintheIPAddressoftheclientandclickonTest.
- 38 -
APPENDIXA:CHANGINGTHEIPADDRESSOFANETWORKADAPTER
TheIntellinetCPEAccessPointoperatesontheIPaddress192.168.2.1.Foryourcomputertoaccesstheadministrator
configurationinterface,theIPaddressofthenetworkadapterinyourcomputerhastobeinthesamerange;e.g.,
192.168.2.50.RefertotheinstructionsthatcamewithyourcomputerforinformationonhowtochangetheIPaddress
onthenetworkadapterinyourcomputerforanyoperatingsystemthatisnotexplainedinthisusermanual.
WINDOWS8
1.IfyouareusingaPC,movethemousecursortothebottomortoprightcornerofthescreenandselectthecogicon
forSettings.Ifyouareusingatablet,swipeleftfromtherightsideofthescreenandselectSettings.
2.ClickControlPanel.
3.SelectSmallicons.
4.OpenNetworkandSharingCenter.
- 39 -
5.ClickChangeadaptersettings.
6.RightclickyournetworkadapterandselectProperties.
7.SelectInternetProtocolVersion4fromthelistandclickProperties.
8.Entertheinformationasshownbelow,thenclickOKtosavethesettings.
- 40 -
WINDOWS7:
1.OpentheNetworkandSharingCenter.
2.ClickonChangeadaptersettings.
3.RightclickyournetworkadapterandselectProperties.
4.SelectInternetProtocolVersion4fromthelistandclickProperties.
5.Entertheinformationasshownbelow,thenclickOKtosavethesettings.
- 41 -
WINDOWSXP:
1.DoubleclicktheNetworkConnectionsiconinthecontrolpanel.
2.Rightclicktheconnection(e.g.,LocalAreaConnection)andselectProperties.
3.SelectInternetProtocol(TCP/IP)fromthelistandclickProperties.
4.Entertheinformationasshownbelow,thenclickOKtosavethesettings.
- 42 -
MACOSX
1.OpentheSystemPreferencespage.
2.IntheInternet&Networksection,clicktheNetworkicon.
3.SelecteitherBuiltinEthernetorAirPort,dependingonhowyouconnecttothewirelessrangeextender,thenclick
Configure.
4.SetthevalueforConfigureIPv4toManuallyandenter192.168.2.50intheIPAddressfield.ClickApplyNow(not
showninscreenshot)tosavethesettings.
- 43 -
APPENDIXB:TROUBLESHOOTING
Symptom Howtoaddress
ThePowerLEDisnotlit. Makesurethatthepoweradapteriseitherproperlyinsertedintothe
powerconnectoronthePoEinjectorortheaccesspointitself.Ifyouuse
thePoEinjector,besurethatyouusean8pinnetworkcablebetweenthe
PoEinjectorandtheaccesspointsLANport.A4pincablewontwork.
Also,ifyouusethePoEinjector,besurethatthePowerLEDontheinjector
islit,andthatyouhaveconnectedtheportlabeledasPOEwithanetwork
cabletotheLANportontheaccesspoint.
Inaddition,checkandmakesurethatthepoweroutletprovidespower.
TheLANLEDdoesnotlightup. CheckthenetworkconnectionbetweentheaccesspointsLANportandthe
Ethernetportofthedeviceyoureconnecting.Thenetworkcablemustbe
insertedproperlyandtheEthernetdevicemustbeturnedon.Tryusinga
differentnetworkcable,ifavailable.
TheWANLEDdoesnotlightup. CheckthenetworkconnectionbetweentheaccesspointsWANport and
theEthernetportofthemodemyoureconnectingto.Thenetworkcable
mustbeinsertedproperlyandtheEthernetdevicemustbeturnedon.Try
usingadifferentnetworkcable,ifavailable.
TheWLANLEDisnotlit. TheWLANLEDshouldalwaysbelight,whetherawirelessconnectionhas
beenestablishedornot.Itessentiallyindicatesthatthewirelessmodule
hasstartedsuccessfully.IftheLEDisoff,itmeansthatthewirelessfunction
hasbeendisabledinthebasicwirelesssettings.
Ifthewirelessfunctionisenabledinthewirelesssetting,buttheLEDisoff
andyoucannotconnecttoanywirelessnetwork,theaccesspointneedsto
bereplacedthroughyourdealer(placeofpurchase).
IftheLEDisoffyetyouhaveaworkingwirelessconnection,theLEDmay
simplyhavefailed.
Thehardwareresetisnot Theresetbuttonneedstobepressedfirmlyfor10 secondswhilethe
working. wirelessrangeextenderispoweredon.Ifitstilldoesnotwork,thereset
buttoncouldbemalfunctioning.
- 44 -
APPENDIXC:DSCPVALUETABLE
- 45 -
APPENDIXD:WARRANTYINFORMATION
DeutschGarantieinformationenfindenSiehierunterintellinetnetwork.com/warranty.
English Forwarrantyinformation,gotointellinetnetwork.com/warranty.
Espaol Sideseaobtenerinformacinsobrelagaranta,visiteintellinetnetwork.com/warranty.
FranaisPourconsulterlesinformationssurlagarantie,rendezvousladresseintellinetnetwork.com/warranty.
Italiano Perinformazionisullagaranzia,accedereaintellinetnetwork.com/warranty.
Polski Informacjedotyczcegwarancjiznajdujsinastronieintellinetnetwork.com/warranty.
Mxico PlizadeGarantaIntellinetDatosdelimportadoryresponsableanteelconsumidorICIntracomMxico,
S.A.P.I.deC.V.Av.InterceptorPoniente#73,Col.ParqueIndustrialLaJoya,CuautitlanIzcalli,Estadode
Mxico,C.P.54730,Mxico.Tel.(55)15004500
Lapresentegarantacubrelossiguientesproductoscontracualquierdefectodefabricacinensusmaterialesymano
deobra.
A.GarantizamoscmarasIPyproductosconpartesmvilespor3aos.
B.Garantizamoslosdemsproductospor5aos(productossinpartesmviles),bajolassiguientescondiciones:
1.Todoslosproductosaqueserefiereestagaranta,amparasucambiofsico,sinningncargoparaelconsumidor.
2.Elcomercializadornotienetalleresdeservicio,debidoaquelosproductosquesegarantizannocuentancon
reparaciones,nirefacciones,yaquesugarantaesdecambiofsico.
3.Lagarantacubreexclusivamenteaquellaspartes,equipososubensamblesquehayansidoinstaladasdefbricayno
incluyeenningncasoelequipoadicionalocualesquieraquehayansidoadicionadosalmismoporelusuarioo
distribuidor.
Parahacerefectivaestagarantabastarconpresentarelproductoaldistribuidoreneldomiciliodondeueadquiridoo
eneldomiciliodeICIntracomMxico,S.A.P.I.deC.V.,juntoconlosaccesorioscontenidosnsuempaque,acompaado
desuplizadebidamentellenadayselladaporlacasavendedoraindispensableelselloyfechadecompra)dondelo
adquiri,obien,lafacturaoticketdecompraoriginaldondesemencioneclaramenteelmodelo,numerodeserie
(cuandoaplique)yfechadeadquisicin.Estagarantanoesvlidaenlossiguientescasos:Sielproductosehubiese
tilizadoencondicionesdistintasalasnormales;sielproductonohasidooperadoconformealosinstructivosdeuso;o
sielproductohasidoalteradootratadodeserreparadoporelconsumidoroterceraspersonas.
- 46 -
intellinetnetwork.com
ICIntracom.Allrightsreserved.
IntellinetisatrademarkofICIntracom,registeredintheU.S.andothercountries.
- 47 -