Ceiling AP Series User Guide
Ceiling AP Series User Guide
User Guide
1
Copyright Statement
© 2019 Shenzhen Tenda Technology Co., Ltd. All rights reserved.
is a registered trademark legally held by Shenzhen Tenda Technology Co., Ltd. Other
brand and product names mentioned herein are trademarks or registered trademarks of their
respective holders. Copyright of the whole product as integration, including its accessories and
software, belongs to Shenzhen Tenda Technology Co., Ltd. No part of this publication can be
reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language
in any form or by any means without the prior written permission of Shenzhen Tenda Technology
Co., Ltd.
Disclaimer
Pictures, images and product specifications herein are for references only. To improve internal
design, operational function, and/or reliability, Tenda reserves the right to make changes to the
products without obligation to notify any person or organization of such revisions or changes.
Tenda does not assume any liability that may occur due to the use or application of the product
described herein. Every effort has been made in the preparation of this document to ensure
accuracy of the contents, but all statements, information and recommendations in this document
do not constitute a warranty of any kind, express or implied.
i
Preface
Thank you for choosing Tenda! Please read this user guide before you start.
Conventions
The typographical elements that may be found in this document are defined as follows.
UI control Bold On the Quick Setup page, click the Save button.
The symbols that may be found in this document are defined as follows.
Symbol Meaning
This format is used to highlight a procedure that will save time or resources.
ACK Acknowledge
AP Access Point
BE Best Effort
BK Background
ii
Acronym or
Full Spelling
Abbreviation
GI Guard Interval
IP Internet Protocol
PoE Power-over-Ethernet
RF Radio Frequency
iii
Acronym or
Full Spelling
Abbreviation
STA Station
SYS System
UI User Interface
VI Video Stream
VID Virtual ID
VO Voice Stream
iv
Technical Support
If you need more help, contact us by any of the following means. We will be glad to assist you as
soon as possible.
http://www.tendacn.com
Website
v
Contents
1 Login ................................................................................................................................................ 1
2 Status .............................................................................................................................................. 5
3 Working mode............................................................................................................................... 12
4.1.2 Configuring the AP to obtain IP address automatically (for multiple APs) ................. 21
4.1.3 Configuring the AP to use static IP address (for few APs) ........................................... 22
vi
4.2.2 Configuring DHCP server of the AP ............................................................................. 24
5 Wireless......................................................................................................................................... 26
vii
6 Advanced....................................................................................................................................... 73
6.2 SNMP...................................................................................................................................... 76
7 Tools .............................................................................................................................................. 81
7.2.2 Reset............................................................................................................................ 87
viii
7.5.2 Executing Ping command to detect connection quality ............................................. 95
Appendix .............................................................................................................................................. 99
A.1 Configuring a static IP address for your computer (Example: Windows 7) ........................... 99
A.2 FAQ.......................................................................................................................................104
ix
1 Login
1.1 Logging in to the web UI of the AP
Before you start, ensure that:
The IP address of the management computer is in the same network segment of the AP. For
example, if the IP address of the AP is 192.168.0.254, the management computer should be
configured with an IP address of 192.168.0.X (X: 2~253). For how to configure the computer
with a specified IP address, see A.1 in Appendix.
Procedure
Step 1 Start a web browser on the computer, enter the IP address of the AP (default:
192.168.0.254) in the address bar, and press Enter (Windows) or Return (Mac) on the
keyboard.
Step 2 Enter the login user name and password (default: admin/admin), and click Login.
1
If the login page does not appear, refer to Q1 in A.2 FAQ.
To modify the login user name and password, see Account.
---- End
Login Time Interval allows you to set how long you can stay on the web UI, which could be modified by
navigating to Tools > Date & Time > Login Timeout Interval.
2
1.3 Web UI layout
The web UI of the AP consists of four sections, including the level-1, and level-2 navigation bars, tab
page area, and the configuration area. See the following figure.
1 3
2 4
The functions and parameters dimmed on the web UI indicate that they cannot be changed in the
current configuration or they are not supported by the AP. To configure such functions or parameters,
configure their related functions or parameters first.
3
1.4 Frequently-used buttons
The following table describes the frequently-used buttons available on the web UI of the AP.
Button Description
Used to save the configuration on the current page and enable the configuration to
take effect.
Used to modify the current configuration on the current page back to the original
configuration.
4
2 Status
This module presents you with an overall running status of the AP, including system status, LAN port
status, wireless status (2.4 GHz and 5 GHz), traffic statistics, and information of wireless clients
connected to the AP. You are allowed to view rather than modifying here.
Parameter description
Parameter Description
Uptime It specifies the time that has elapsed since the AP starts up last time.
System Time
To make time-related configurations work properly, ensure that the system time is
correct. You can modify it on Tools > Date & Time page.
Firmware Version It specifies the current firmware version number of the AP.
Hardware Version It specifies the current hardware version number of the AP.
5
Parameter Description
Number of Wireless
It specifies the quantity of wireless devices currently connected to the AP.
Client
Parameter description
Parameter Description
It specifies the IP address of the AP’s LAN port, which can be used to log in to the
IP Address web UI.
You can modify it on Internet Settings > LAN Setup page.
Primary DNS Server It specifies the primary DNS server of the AP.
Secondary DNS Server It specifies the secondary DNS server of the AP.
6
2.2 Wireless status
This page displays radio information and SSID information of the AP. You can get a glance of
whether or not the radio frequency (RF) function is enabled, the network mode it currently uses,
and the channel it operates, as well as all the SSIDs-related information. This page includes RF status
and SSID status.
To access the page, choose Status > Wireless Status.
RF status
Parameter description
Parameter Description
Network Mode It specifies the network mode currently enabled by the AP on each radio band.
Channel It specifies the current channel the AP operates on either2.4 GHz or 5 GHz band.
7
SSID status
Parameter description
Parameter Description
Wireless network name of the AP. The AP supports up to 8 SSIDs on 2.4 GHz and 4 SSIDs
on 5 GHz.
SSID
The 1st SSID on the list indicates the primary SSID. By default, only the primary SSID on
each radio band is enabled.
MAC Address It specifies the physical address of the corresponding wireless network.
Security Mode It specifies the security mode adopted by the corresponding WiFi network.
8
2.3 Traffic statistics
This page allows you to view statistical information about traffic based on SSIDs.
To access the page, choose Status > Traffic Statistics.
9
2.4 Client list
This page allows you to view wireless clients connected to each SSID of the AP and their basic
information, and to block unknown wireless clients. Here, “client” refers to the devices connected
to the AP’s wireless networks.
To access the page, choose Status > Client List.
Parameter description
Parameter Description
Select the SSID from the drop-down list menu to view client information connected
SSID
to it.
Otherwise, -- is displayed.
Transmit Rate It specifies the real time traffic the client has transmitted.
Receive Rate It specifies the real time traffic the client has received.
10
Parameter Description
Click to block the client from accessing the AP’s wireless network.
Block
To unblock a client, navigate to Wireless > Access Control.
11
3 Working mode
The AP supports AP mode (default mode) and Client+AP mode. This chapter introduces how to set
the working mode of the AP.
Internet
PoE Switch Router
AP (in AP mode)
12
3.1.2 Getting familiar with AP mode configuration page
To access the configuration page, choose Quick Setup.
Parameter description
Parameter Description
SSID
The 1st SSID on each radio band indicates the primary SSID.
It specifies the security mode you set for your AP’s WiFi network, including None, WEP,
Security Mode WPA-PSK, WPA2-PSK, Mixed WPA/WPA2-PSK, WPA and WPA2.
13
By default, the device works in AP mode.
The following introduces how to set the device into AP mode on 2.4 GHz band. Configuration on 5
GHz is identical.
The device supports up to 8 SSIDs on 2.4 GHz band and 4 SSIDs on 5 GHz band. The SSID-related
parameters on this page refer to the first (primary) SSID of the AP.
Ensure that the upstream router has connected to the internet successfully.
Procedure
Step 1 Select 2.4 GHz from the Radio Band drop-down list menu.
Step 2 Set Working Mode to AP.
Step 3 Customize an SSID (wireless network name) in the SSID box, which is Tenda_WiFi in this
example. This SSID is also your primary SSID on 2.4 GHz band.
Step 4 Select the security mode from the Security Mode drop-down list menu, which is
WPA2-PSK in this example.
Step 5 Select the Encryption Algorithm, which is AES in this example.
Step 6 Set a WiFi password in the Key box.
Step 7 Click Save to apply your settings.
---- End
After configuration, you can connect wireless devices to the WiFi network of your AP using the SSID
and WiFi password you set.
14
3.2 Client+AP mode
3.2.1 Typical network topology
In this mode, the AP extends the existing wireless network by bridging the upstream wireless signals.
See the following typical network topology.
Internet
PoE Switch Router
Upstream AP
(in AP mode) This AP
(in Client+AP mode)
15
3.2.2 Getting familiar with Client+AP mode configuration page
To enter the configuration page, set Working Mode to Client+AP. See the following figure.
Parameter description
Parameter Description
SSID It specifies the wireless network name of the upstream wireless network you selected.
It specifies the security mode adopted by the upstream wireless network you selected.
Security Mode
See Security Mode for details.
Key It specifies the WiFi password for the upstream wireless network you selected.
Scan: Used to scan nearby available wireless networks. The scan results are
displayed on the lower page.
Scan/Disable
Disable: The button only appears after you clicked Scan. It is used to end the scan
operation and collapse the scan result.
16
3.2.3 Configuring Client+AP mode
Log in to the web UI of the AP, and choose Quick Setup to enter the configuration page first.
Procedure
Step 1 Select 2.4 GHz from the Radio Band drop-down list menu.
Step 2 Set Working Mode to Client+AP.
Step 3 Click Scan. The nearby available radio signals appear on the lower page.
If the SSID for bridging is not displayed, check if your upstream wireless network is enabled. If not,
enable it. Then refresh the scan result.
Step 4 Select the WiFi network to bridge, which is Tenda_Router in this example.
The device detects and auto-fills SSID, Security Mode, Encryption, and Algorithm of the
upstream wireless network for you, except the Key, which requires you to enter manually.
Step 5 Click Save to apply your settings.
17
Click to refresh
Click to collapse scan result
scan result.
Scan result
---- End
After the configuration, devices connected to the AP can access the upstream wireless network.
18
4 Internet settings
4.1 LAN setup
4.1.1 Overview
This section introduces how to:
To access the configuration page, choose Internet Settings > LAN Setup.
19
Parameter description
Parameter Description
MAC Address It specifies the MAC address of the AP’s LAN port.
It specifies the LAN IP address (also the login IP address) of the AP. Default:
IP Address
192.168.0.254.
Subnet Mask It specifies the subnet mask of the AP. Default: 255.255.255.0.
Primary DNS If DNS proxy function is supported on your router connected to the internet, you can
set the IP address of the primary DNS server to the LAN IP address of your router.
Otherwise, enter a correct DNS server IP address.
It specifies the IP address of the secondary DNS server of the AP. This parameter is
Secondary DNS
optional.
Device Name
For later convenient management, you are recommended to modify each AP’s name.
Faster Speed (Auto Negotiation): This option features a high data rate but short
transmission distance. Generally, we recommend you select this option.
Longer Distance (10 Mbps Half Duplex): This option features long transmission
distance but low data rate. Generally, the negotiated speed is 10 Mbps.
Optimize Ethernet
for
If the Ethernet cable connecting the Ethernet port of the AP to the peer device is longer
than 100 meters, the Longer Distance mode is recommended. In this case, ensure that
the peer device adopts auto negotiation option.
20
4.1.2 Configuring the AP to obtain IP address automatically (for
multiple APs)
To access the configuration page, choose Internet Settings > LAN Setup first.
Procedure
Step 1 Select DHCP (Dynamic IP Address) from the IP Address Type drop-down list menu.
The IP address-related parameters dimmed and cannot be configured.
Step 2 Click Save to apply your settings.
---- End
To view the new IP address assigned to the AP, go to the upstream DHCP client list.
21
4.1.3 Configuring the AP to use static IP address (for few APs)
To access the configuration page, choose Internet Settings > LAN Setup first.
Procedure
Step 1 Select Static IP from the IP Address Type drop-down list menu.
The IP address-related parameters become configurable.
Step 2 Customize required parameters.
Step 3 Click Save to apply your settings.
*
*
*
*
*
---- End
After the configuration, if the new IP address of the AP belongs to the same network segment as
the IP address of your management computer, you can log in to the web UI of the AP directly using
the new IP address. Otherwise, before logging in to the AP’s web UI using the new IP address, assign
your computer an IP address that belongs to the same network segment as the new IP address.
22
4.2 DHCP server
4.2.1 Overview
The AP supports the DHCP server function to assign IP addresses to devices connected to it. By
default, this function is disabled. After this function enabled, the following page appears.
If another DHCP server is available in your LAN, ensure that the IP address pool of the AP does not
overlap the IP address pool of that DHCP server. Otherwise, IP address conflicts may occur.
Parameter description
Parameter Description
DHCP Server It specifies whether or not to enable the DHCP server function of the AP.
It specifies the start IP address of the DHCP server’s IP address pool. The default value
Start IP Address
is 192.168.0.100.
It specifies the end IP address of the DHCP server’s IP address pool. The default value is
192.168.0.200.
End IP Address
23
Parameter Description
It specifies the subnet mask assigned by the DHCP server to devices. The default value
Subnet Mask
is 255.255.255.0.
It specifies the gateway IP address assigned by the DHCP server to devices. Generally, it
is the LAN IP address of the router connected to the internet. The default value is
192.168.0.1.
Gateway Address
Only through a gateway can a LAN device access a server or host which is not in the
local network segment. You are recommended to enter a gateway IP address which can
access the internet. Otherwise, the device in the LAN network cannot access the
internet.
It specifies the DNS server address provided by your ISP. If you do not know it, please
consult your ISP.
Primary DNS
To enable devices to access the internet, set this parameter to a correct DNS server IP
address or DNS proxy IP address.
It specifies the second DNS server address (if any) provided by your ISP. This parameter
Secondary DNS is optional, which indicates you can leave it blank if your ISP does not provide this
parameter.
It specifies the validity period of an IP address assigned by the DHCP server to a device.
By default, it is 1 day.
When half of the lease time has elapsed, the device sends a DHCP request to the DHCP
server to renew the lease time. If the request succeeds, the lease time is extended
Lease Time based on the request. Otherwise, the device sends a request again when 7/8 of the
lease time has elapsed. If the request succeeds, the lease time is extended based on
the request. Otherwise, the device must request a new IP address from the DHCP
server after the lease time expires.
You are recommended to retain the default value.
24
The End IP Address must be greater than the Start IP Address.
The Start IP Address, End IP Address, and Gateway Address must belong to the same network
segment as that of the LAN IP of the device.
---- End
25
5 Wireless
5.1 SSID
5.1.1 Overview
This module enables you to set SSID-related parameters of the AP.
26
Parameter description
Parameter Description
SSID
The AP allows you to enable 8 SSIDs on 2.4 GHz band, and 4 SSIDs on 5 GHz band.
This parameter implements a function similar to the VLAN function for wired networks.
It isolates the wireless devices connected to the same WiFi network, so that the
Isolate Client wireless devices can access only the wired network connected to the AP. You can apply
this function to hotspot setup in public spaces, such as hotels and airports to improve
network security.
The number of wireless devices keeps increasing currently, but wired and wireless
bandwidth resources are limited. Therefore, the multicast technology, which enables
single-point data transmission and multi-point data reception, has been widely used in
networks in order to reduce bandwidth requirements and prevent network congestion.
Nevertheless, if a large number of devices are connected to a wireless interface of a
WiFi network and multicast data is intended for only one of the devices, the data is still
WMF
sent to all the devices, which increases unnecessary wireless resource usage and may
lead to wireless channel congestion. In addition, multicast stream forwarding over an
802.11 network is not secure, either.
The WMF function of the AP converts multicast traffic into unicast traffic and forwards
the traffic to the multicast traffic destination in the WiFi network, helping save wireless
resources, ensuring reliable transmission, and reducing delays.
Suppress Broadcast If enabled, this device does not respond to the requests without an SSID, saving
Probe Response wireless resources.
This parameter specifies the maximum number of devices that can connect to the WiFi
network corresponding to an SSID. If the number is reached, the WiFi network rejects
new connection requests from devices. This limit helps balance load among SSIDs.
Max. Number of
Clients
The AP supports 128 clients at most. That is to say, clients connected to all the enabled
wireless networks of the AP cannot exceed 128. If you enable multiple SSIDs, plan your
maximum number of clients to each SSID first.
A proper encoding format lets the SSID containing Chinese characters be displayed
27
Parameter Description
Security Mode
A WiFi network uses radio open to the public as its data transmission medium. If the WiFi network
is not protected by necessary measures, any device can connect to the network to access
unprotected data over the network or the resources of the network. To ensure communication
security, transmission links of WiFi network must be encrypted.
The AP supports various security modes for network encryption, including None, WEP, WPA-PSK,
WPA2-PSK, Mixed WPA/WPA2-PSK, and WPA/WPA2.
None
It indicates that any wireless device can connect to the WiFi network. This option is not
recommended because it leads to network insecurity.
WEP
It uses a static key to encrypt all exchanged data, and ensures that a WLAN has the same level of
security as a wired LAN. However, data encrypted based on WEP can be easily cracked. In addition,
WEP supports a maximum WiFi network throughput of only 54 Mbps. Therefore, this security mode
is not recommended.
Select WEP from the Security Mode drop-down list menu, the following parameters appear. See the
following figure.
28
Parameter description
Parameter Description
Default Key It indicates the designated key used for wireless clients to connect to the access point.
Enter one to four WEP keys, each of which consists of 5 or 13 ASCII printable
Key1/2/3/4 characters or 10 or 26 hexadecimal characters. Only the key that is designated as the
Default Key is effective.
They belong to pre-shared key or personal key modes, where Mixed WPA/WPA2-PSK supports both
WPA-PSK and WPA2-PSK.
WPA-PSK, WPA2-PSK, and Mixed WPA/WPA2-PSK adopt a pre-shared key for authentication, while
the AP generates another key for data encryption. This prevents the vulnerability caused by static
WEP keys, and makes the three security modes suitable for ensuring security of home WiFi
networks. Nevertheless, because the initial pre-shared key for authentication is manually set and all
devices use the same key to connect to the same AP, the key may be disclosed unexpectedly. This
makes the security modes not suitable for scenarios where high security is required.
29
Select WPA-PSK (or WPA2-PSK, or Mixed WPA/WPA2-PSK) from the Security Mode drop-down list
menu, the following parameters appear. See the following figure.
Parameter description
Parameter Description
Key It indicates the key used for wireless clients to connect to the access point.
It indicates the interval at which a WPA key is updated. A shorter interval leads to
Key Update Interval
higher security.
To address the key management weakness of WPA-PSK and WPA2-PSK, the WiFi Alliance puts
forward WPA and WPA2, which use 802.1x to authenticate devices and generate data encryption–
oriented root keys. WPA and WPA2 use the root keys to replace the pre-shared keys that set
manually, but adopt the same encryption process as WPA-PSK and WPA2-PSK.
WPA and WPA2 uses 802.1x to authenticate devices and the login information of a device is
managed by the device. This effectively reduces the probability of information leakage. In addition,
each time a device connects to an AP that adopts the WPA or WPA2 security mode, the RADIUS
server generates a data encryption key and assigns it to the device, which makes it difficult for
attackers to obtain the key. These features of WPA and WPA2 security modes help increase network
security significantly, making WPA and WPA2 the preferred security modes of WiFi networks that
require high security.
Select WPA (or WAP2) from the Security Mode drop-down list menu, the following parameters
30
appear. See the following figure.
Parameter description
Parameter Description
RADIUS Port Enter the authentication port number of the RADIUS sever.
The following takes configuration on 2.4 GHz band for example. Configuration on 5 GHz is identical.
The following introduces how to modify parameters on this page. Modify them based on your
actual requirements.
Step 1 Select the SSID from the SSID drop-down list menu.
Step 2 Set Status to Enable.
Step 3 (Optional) Enable Broadcast SSID, Isolate Client, Isolate SSID, WMF, and modify the
number of client that can connect to this specific SSID in the Max. Number of Clients box.
31
The AP supports 128 clients at most. That is to say, clients connected to all the enabled wireless
networks of the AP cannot exceed 128. If you enable multiple SSIDs, plan your maximum number
of clients to each SSID first.
The AP allows you to enable 8 SSIDs on 2.4 GHz band, and 4 SSIDs on 5 GHz.
---- End
32
5.1.3 Example of configuring a WiFi network encrypted by WPA
or WPA2
Network topology
Internet
PoE switch Router
RADIUS server
IP: 192.168.0.200
AP
IP: 192.168.0.254
SSID: hot_spot
Configuration description
Configuring a WiFi network encrypted by WPA or WPA2 involves operations across various devices.
This guide will walk you through the configuration step by step.
The following table summarizes the overall steps. Get yourself familiar with the whole process
before you start.
Select the SSID you want to implement the RADIUS authentication, and
1 Configure the AP. enable it. Modify the SSID as required. Then set the security mode to
WPA2 and enter the RADISU server-related parameters.
2 Create RADIUS client. Create a RADIUS client first, and then create a remote access policy.
33
Procedure
Step 1 Configure the AP.
In this case, we assume that you have installed and configured a RADIUS server in your company, and
have obtained the following information:
RADIUS Server: IP address or domain name of the RADIUS server, which is 192.168.0.200 in this
example.
RADIUS Port: Port number used for authentication, which is 1812 in this example
RADIUS Password: Password used for authentication which is 12345678 in this example.
1. Select an SSID from the SSID drop-down list menu, and set the Status to Enable.
2. Modify the SSID to hot_spot.
3. Select WPA2 from the Security Mode drop-down list menu. The RADIUS-related
parameters appear.
4. Enter your RADIUS Server, RADIUS Port, and RADIUS Password. Parameters on the
following figure are only for examples.
5. Set Encryption Algorithm to AES.
6. Click Save to apply your settings.
34
*
*
*
*
*
*
*
35
(2) Enter a RADIUS client name (device name of the AP is recommended) and the IP
address of the AP, and click Next.
IP address of the AP
36
(3) Enter 12345678 in the Shared secret and Confirm shared secret text boxes, and click
Finish.
(2) In the New Remote Access Policy Wizard dialog box that appears, click Next.
37
(3) Enter a policy name and click Next.
38
(5) Select Group and click Add.
(6) Enter 802.1x in the Enter the object names to select text box, click Check Names, and
click OK.
39
(7) Select Protected EAP (PEAP) and click Next.
40
(9) Right-click root and choose Properties. Select Grant remote access permission, select
NAS-Port-Type matches "Ethernet" AND, and click Edit.
41
(11) Click Edit Dial-in Profile, click the Authentication tab, configure settings as shown in
the following figure, and click OK.
42
(2) Click Add.
43
(4) Enter WiFi network information, select Connect even if the network is not
broadcasting, and click Next.
44
(6) Click the Security tab, select Microsoft: Protected EAP (PEAP), and click Settings.
45
(7) Deselect Validate server certificate and click Configure.
(8) Deselect Automatically use my Windows logon name and password (and domain if
any) and click OK.
46
(10) Select User or computer authentication and click OK.
47
---- End
Verification
Step 1 Click the network icon in the lower-right corner of the desktop and choose the WiFi
network of the AP, which is hot_spot in this example.
Step 2 In the Windows Security dialog box that appears, enter the user name and password set
on the RADIUS server and click OK.
48
---- End
49
5.2 RF settings
5.2.1 Overview
RF (Radio Frequency) settings allow you to configure advanced settings about the AP, such as
channel, power, short GI etc.
Parameter description
Parameter Description
Wireless Network It specifies whether to enable the radio function of the AP.
50
Parameter Description
region.
It specifies the wireless network mode (also called 802.11 mode, radio mode, or
wireless mode) of the AP. A proper network mode enables the clients to get the
maximum transfer rate and compatibility.
Network Mode Available options for 2.4 GHz band: 11b, 11g, 11b/g, and 11b/g/n (default).
Available options for 5 GHz band: 11a, 11ac (default), and 11a/n mixed.
You are recommended to keep the default settings.
It specifies the operating channel of the AP. To configure this parameter, deselect Lock
Channel.
Channel
Auto indicates that this device automatically changes to a channel rarely used in the
ambient environment to prevent interference.
Lock Power If selected, the Transmit Power cannot be adjusted. By default, it is selected.
It specifies a group of bits located at the beginning of a packet, according to which the
receiver of the packet can perform synchronization and prepare for receiving data.
Preamble
By default, the Long Preamble option is selected for compatibility with old network
adopters installed on wireless devices.
51
Parameter Description
wireless resources.
52
5.3 RF optimization
5.3.1 Overview
The AP allows you to configure advanced settings about radio frequency to optimize the AP
performance. Please modify these parameters under the professional guidance.
Parameter description
Parameter Description
53
Parameter Description
It specifies the frame length threshold for triggering the RTS/CTS mechanism. Unit:
byte.
If a frame exceeds this threshold, the RTS/CTS mechanism is triggered to reduce
conflicts.
RTS Threshold Set the RTS threshold based on the actual situation. An excessively small value
increases the RTS frame transmission frequency and bandwidth requirement. A higher
RTS frame transmission frequency enables a WiFi network to recover from conflicts
quicker. For a WiFi network with high user density, you can reduce this threshold for
reducing conflicts. The RTS mechanism requires some network bandwidth. Therefore, it
is triggered only when frames exceed this threshold.
Coverage-oriented: This mode broadens WiFi coverage of APs, and is usually used
in scenarios deployed with fewer APs, such as offices, warehouses, and hospitals.
Signal Transmission Capacity-oriented: This mode effectively decreases mutual interference among
APs, and is usually used in scenarios deployed with massive APs, such as
conferences, exhibition halls, banquet halls, stadiums, classrooms of
higher-education institutes, airports and so on.
It specifies the interval for transmitting the Delivery Traffic Indication Message (DTIM)
frame. Unit: Beacon.
A countdown starts from this value. The AP transmits broadcast and multicast frames
DTIM Interval
in its cache only when the countdown reaches zero.
For example, if DTIM Interval is set to 1, the AP transmits all cached frames after each
beacon frame is transmitted.
Set a minimum strength of received signals acceptable to the AP. If the strength of the
signals transmitted by a wireless device is weaker than this threshold, the wireless
RSSI Threshold device cannot connect to the AP.
If there are multiple APs, an appropriate RSSI Threshold ensures that wireless devices
can connect to the AP’ WiFi networks with strong signals.
If enabled, devices that support 5 GHz band choose to connect the AP’s 5 GHz WiFi
network first. Otherwise, they randomly connect to 2.4GHz or 5 GHz WiFi network. This
option is available on the 5 GHz configuration page.
Prioritize 5 GHz
The default RSSI threshold to enable this function is -80 dBm. You can adjust the
54
Parameter Description
threshold by customizing the Prioritize 5 GHz Threshold parameter.
It specifies the RSSI threshold value to trigger the Prioritize 5 GHz function. The default
Prioritize 5 GHz value is -80 dBm.
Threshold
You are recommended to keep the default settings.
MU-MIMO If enabled, AP can communicate with multiple users concurrently, avoiding WiFi
network congestion and improving communication. This option is available on the 5
GHz configuration page.
It specifies the maximum period before a WiFi client is disconnected from the AP if the
Client Timeout
client exchanges no data with the AP. When data is exchanged within the period,
Interval
countdown stops.
It specifies that any connected wireless clients that support the data rate options ticked
Mandatory Rate
here may communicate with the router using that rate.
You are recommended to keep the default settings. If you need to modify them, please
Optional Rate do under professional guidance.
55
5.3.2 Modifying radio optimization settings
You are strongly recommended to modify the settings only with professional guidance to prevent
degrading wireless performance.
The following takes configuration on 2.4 GHz band for example. Configuration on 5 GHz is identical.
Procedure
Step 1 Locate and modify the parameters as required.
Step 2 Click Save to apply your settings.
---- End
56
5.4 Frequency analysis
This section introduces how to evaluate signal interference in ambient environment. You can use
the analysis result to help you configure the AP for best performance.
This module consists of Frequency Analysis and Channel Scan. Choose Wireless > Frequency
Analysis, and click the corresponding tab to enter the page.
Color-code explanation:
Red: High channel usage. The channel is not recommended to use.
Yellow: Moderate channel usage.
Green: Low channel usage. The channel is recommended to use.
57
58
5.5 WMM
5.5.1 Overview
WMM is a wireless QoS protocol used to ensure that packets with high priorities are transmitted
first. This ensures better experience of voice and video service over WiFi networks.
According to the No ACK policy, no ACK packet is used during wireless packet transmission to
acknowledge packet reception. This policy is applicable to scenarios where interference is mild
and can effectively improve transmission efficiency. In case of strong interference, lost packets
are not sent again if this policy is adopted. This leads a higher packet loss rate and reduces the
overall performance.
According to the Normal ACK policy, each time a receiver receives a packet, it sends back an
ACK packet to acknowledge packet reception.
EDCA Parameters
802.11 networks offer wireless access services based on the Carrier Sense Multiple Access with
Collision Avoidance (CSMA/CA) channel competition mechanism, which allows all wireless devices
to fairly compete for channels. All the services implemented over WiFi networks share the same
channel competition parameters. Nevertheless, different services usually have different
requirements for bandwidth, delay, and jitter. This requires wireless networks to offer accessibility
based on the services implemented over the networks.
WMM changes the contention mechanism of 802.11 networks by dividing packets into four ACs,
among which the ACs with higher priorities have more opportunities to access channels. The ACs
help achieve different service levels.
59
WMM assigns each AC a set of EDCA parameters for channel contention, including:
Arbitration Inter Frame Spacing Number (AIFSN): Different from the fixed distributed
inter-frame spacing (DIFS) specified in the 802.11 protocol family, AIFSN varies across ACs. A
greater AIFSN indicates a longer backoff period. See AIFS in the following figure.
Contention window minimum (CWmin) and contention window maximum (CWmax) specify the
average backoff period. The period increases along with these two values. See the backoff slots
in the following figure.
Transmission Opportunity (TXOP): It specifies the maximum channel use duration after
successful channel contention. The duration increases along with this value. The value 0
indicates that a device can send only one packet through a channel after winning contention for
the channel.
The AP offers 3 options for WMM optimization. You can choose the scenario-based (1 – 10 users, or
over 10 users) option and let the AP helps you optimize WMM automatically. Or you can choose
Custom to configure the parameters yourself to meet your very specific requirement.
60
According to your actual situations, select Optimized for scenario with 1 - 10 users or Optimized
for scenario with more than 10 users, and click Save to apply your settings.
Tick Custom, the following page appears. Customize the related parameters and click Save to apply
your settings.
Parameter description
Parameter Description
61
Parameter Description
62
5.6 Access control
This module allows you to configure MAC address-based wireless access control rules.
5.6.1 Overview
To enter the configuration page, choose Wireless > Access Control. By default, this function is
disabled.
Parameter description
Parameter Description
SSID It specifies the SSID on which the MAC address access control is implemented.
Blacklist: Clients with MAC addresses on the access control list cannot access the
wireless network of AP.
Mode
Whitelist: Client with MAC addresses on the access control list can access the
wireless network of AP.
63
5.6.2 Configuring access control
To enter the configuration page, choose Wireless > Access Control first.
Before configuration, obtain and note down the MAC address(es) of the target device(s).
The following introduces how to configure on 2.4 GHz band. Configuration on 5 GHz is identical.
Procedure
Step 1 Select the SSID to which the access control is applied from the SSID drop-down list menu.
Step 2 Enable Access Control.
Step 3 Select the control Mode as required.
Step 4 Add the MAC address of the client.
Option 1: Enter the MAC address manually
Enter the MAC address into the MAC Address box.
Option 2: Add online clients
1. Click Add Online Devices. The Online Device configuration window appears.
Tick to select
64
Toggle the button to enable or disable the rule.
---- End
65
5.7 Advanced settings
This module enables you to make AP’s WiFi network and wireless transmission more efficiently
through enabling identifying client type and filtering broadcast packet. By default, these two
functions are disabled.
To enter the configuration page, choose Wireless > Advanced Settings.
Enabling this function may impact on the wireless performance of the AP. Therefore, enable this
function only when necessary.
With this function enabled, the AP can identify the operating system of the client connected to it. To
enable this function, tick Enable next to the Identify Client Type, and click Save.
You can view the client type information by navigating to Status > Client List.
66
The AP identities the client type on two conditions:
The Identity Client Type function is enabled.
The client connected to the AP has accessed an http:// website.
Otherwise, -- is displayed.
You are strongly recommended to configure this function only under the professional guidance to
prevent degrading the WiFi performance of the AP.
By default, the AP will forward lots of invalid broadcast packets, which may affect normal packets
transmission. However, this function can filter broadcast packets and reduce airtime consumption,
ensuring bandwidth of normal packets transmission.
The AP supports to filter broadcast packets and allows you to keep DHCP and ARP packets, or ARP
packets only.
To enter the configuration page, choose Wireless > Advanced Settings first.
Procedure
Step 1 Tick Enable next to the Broadcast Packet Filter.
Step 2 Select the broadcast packets you do not want to filter from the drop-down list menu of
Filters.
Step 3 Click Save to apply your settings.
*
*
---- End
67
5.8 QVLAN settings
This AP supports the IEEE 802.1q VLAN function and can work with switches supporting that
function to establish multiple VLANs. Devices connecting to VLANs with different VLAN IDs cannot
communicate with each other. By default, the AP’s QVLAN function is disabled.
5.8.1 Overview
To enter the configuration page, choose Wireless > QVLAN Settings.
Parameter description
Parameter Description
QVLAN It specifies whether to enable the QVLAN function of the AP. By default, it is disabled.
2.4 GHz SSID It specifies the currently enabled SSID(s) over the 2.4 GHz band of the AP.
5 GHz SSID It specifies the currently enabled SSID(s) over the 5 GHz band of the AP.
68
Parameter Description
It specifies the VLAN IDs corresponding to SSIDs. By default, this value is 1000.
VLAN ID After the QVLAN function is enabled, the wireless ports corresponding to SSIDs
functions as access ports. The PVID of an access port is the same as its VLAN ID.
If the QVLAN function is enabled, tagged data received by a port of the AP is forwarded to the other
ports of the VLAN corresponding to the VID in the data, whereas untagged data received by a port
of the AP is forwarded to the other ports of the VLAN corresponding to the PVID of the port that
receives the data.
The following table describes how ports of different link types process transmitted and received
data.
Guests are allowed to connect to VLAN2 and only able to access the internet.
Hotel staffs are allowed to connect to VLAN3 and only able to access the intranet.
Hotel administrators are allowed to connect to VLAN4, able to access both the intranet and the
internet.
Assume that the SSID for guests is internet, the SSID for staffs is oa and the SSID for administrators
is VIP. The SSIDs are enabled and configured successfully on the AP.
69
Network topology
Internet
PoE switch Router
Internal
server
AP
Guest SSID: internet (VLAN2)
Staff SSID: oa (VLAN3)
Administrator SSID: VIP (VLAN4)
Configuration description
Configuring QVLAN function involves operations across various devices. This guide will walk you
through the configuration step by step.
The following table summarizes the overall steps. Get yourself familiar with the whole process
before you start.
1 Configure the AP. Enable QVLAN on the AP, and set required parameters.
2 Configure the switch. Create IEEE 802.1q VLANs on the switch as required.
Configure the router Enable QVLAN function on your router and internal server, and configure
3
and the internal server. parameters as required.
Procedure
Step 1 Configure the AP.
1. Log in to the web UI of the AP and choose Wireless > QVLAN Settings.
2. Enable QVLAN.
3. Modify the VLAN IDs as shows in the following figure.
70
*
*
*
*
*
AP 1, 2, 3, 4 Trunk 1
Router 2, 4 Trunk 1
71
Port Connected To Accessible VLAN ID Port Type PVID
Switch 2, 4 Trunk 1
Switch 3, 4 Trunk 1
For configuration details, refer to the user guides of your router and internal server.
---- End
Verification
Wireless devices connected to the SSID internet can access only the internet. Wireless devices
connected to the SSID oa can access only the intranet. Wireless devices connected to the SSID VIP
can access both the internet and the intranet.
72
6 Advanced
6.1 Deployment mode
If a large number of APs are deployed, you are recommended to adopt an Tenda AC (Access
Controller) to manage the APs in a centralized manner. The AP supports Local Deployment (default)
and Cloud Deployment.
Internet
Core switch Router
AC
PoE switch
Management PC
73
Cloud deployment
If you need to deploy many APs distributed across a large area, you are recommended to select the
cloud deployment mode, which uses an AC (in Cloud AC mode) over the internet to manage the APs
in a centralized manner. The following figure shows the topology for the cloud deployment mode.
Internet
Router
Core switch
Router
PoE switch
AC
74
Parameter description
Parameter Description
Device Name You can customize the device name here, or on Internet Settings > LAN Setup page.
Modification of the device name is globally applied.
For later convenient management, you are recommended to customize the device
name.
It specifies the WAN IP address of the router to which the cloud AC connects, or the
Cloud AC Address
domain name to which the router’s WAN IP address is bound.
Cloud AC It specifies port of the egress router to which the cloud AC connects for managing this
Management Port device.
Cloud AC Upgrade It specifies port of the egress router to which the cloud AC connects for upgrading this
Port device.
---- End
75
6.2 SNMP
6.2.1 Overview
The Simple Network Management Protocol (SNMP) is the most widely used network management
protocol in TCP/IP networks. SNMP enables you to remotely manage all your network devices
compliant with this protocol, such as monitoring the network status, changing network device
settings, and receiving network event alarms.
SNMP supports managing devices bought from various vendors automatically, regardless of physical
differences among the devices.
Get: An SNMP manager performs this operation to query the SNMP agent of the AP for values
of one or more objects.
Set: An SNMP manager performs this operation to set values of one or more objects in the MIB
of the SNMP agent of the AP.
76
attempts of SNMP managers.
SNMP V2C is compatible with SNMP V1 and provides more functions than SNMP V1. Compared
with SNMP V1, SNMP V2C supports more operations (GetBulk and InformRequest) and data types
(such as Counter64), and provides more error codes for better distinguishing errors.
MIB introduction
An MIB adopts a tree structure. The nodes of the tree indicate managed objects. A path consisting
of digits and starting from the root can be used to uniquely identify a node. This path is calling an
object identifier (OID). The following figure shows the structure of an MIB. In the figure, the OID of
A is 1.3.6.1.2.1.1, whereas the OID of B is 1.3.6.1.2.1.2.
77
6.2.2 Configuring the SNMP function
To enter the configuration page, choose Advanced > SNMP first.
Procedure
Step 1 Enable SNMP Agent.
Step 2 Set related parameters.
Step 3 Click Save to apply your settings.
---- End
Parameter description
Parameter Description
It specifies whether to enable the SNMP agent function of the AP. By default, it is
disabled.
SNMP Agent An SNMP manager and the SNMP agent can communicate with each other only when
their SNMP versions are the same. Currently, the SNMP agent function of the AP
supports SNMP V1 and SNMP V2C.
It specifies the administrator’s name of the AP. The default name is Administrator. You
Administrator
can modify the administrator’s name if required.
It specifies the device name of the AP. By default, the device name is Access Point. You
can modify it if required.
Device Name
You are recommended to modify the AP name so that you can identify your AP easily
when managing the AP using SNMP.
Location It specifies the location where the AP is used. You can modify the location according to
78
Parameter Description
your actual situation.
It specifies the read password shared between SNMP managers and the SNMP agent.
The default password is public.
Read Community
The SNMP agent function of the AP allows an SNMP manager to use the password to
read variables in the MIB of the AP.
It specifies the read/write password shared between SNMP managers and the SNMP
Read/Write agent. The default password is private.
Community The SNMP agent function of the AP allows an SNMP manager to use the password to
read/write variables in the MIB of the AP.
Internet
PoE switch Router
NMS
192.168.0.212/24
AP
192.168.0.254/24
79
Procedure
Step 1 Configure the AP.
Assume that the administrator name is Tom, read community is Tom, and read/write
community is Tom123.
On an NMS that uses SNMP V1 or SNMP V2C, set the read community to Tom and
read/write community to Tom123. For details about how to configure the NMS, refer to the
user guide of the NMS.
---- End
Verification
After the configuration, the NMS can connect to the SNMP agent of the AP and can query and set
some parameters on the SNMP agent through the MIB.
80
7 Tools
7.1 Date & time
This section introduces how to set the system time and login timeout interval of your AP.
7.1.1 Overview
This function is used to set the system time. To make the time-related functions effective, ensure
that the system time of the AP is set correctly.
The section introduces how to:
Sync with internet time.
Set system time manually (default).
To access the configuration page, choose Tools > Date & Time. See the following figure.
81
7.1.2 Configuring system time
Configuring AP to synchronizing with internet time
With this method, the AP automatically synchronizes its system time with the network time server
(NTS). As long as the AP is connecting to the internet, the system time is correct.
Procedure
Step 1 Choose Tools > Date & Time.
Step 2 Tick the Sync with Internet Time box.
Step 3 Select a value from the Sync Interval drop-down list menu as required, which is 30 min in
this example.
Step 4 Choose the Time Zone where the AP locates.
Step 5 Click Save to apply your settings.
---- End
82
Configuring date and time manually
With this method, you need to manually reconfigure the system time each time the AP reboots.
Procedure
Step 1 Choose Tools > Date & Time.
Step 2 For manual setup, you can:
Option one: Enter a correct date and time manually.
Option two: Click Sync with PC Time, the AP auto-fills the system time of your
management computer in the Date & Time fields.
Make sure that the system time of your management computer is correct.
---- End
Procedure
Step 1 Choose Tools > Date & Time, and click the Login Timeout Interval tab.
Step 2 Set the login timeout interval as required.
Step 3 Click Save to apply your settings.
83
---- End
The AP logs you out automatically if you perform no operation within the interval you set here.
84
7.2 Maintenance
This section introduces how to:
Reboot the AP manually, or as scheduled.
Reset the AP either using web UI, or the RESET button.
Upgrade the AP.
Back up the AP’s configuration to your local computer.
Restore your previous configurations.
Control the LED indicator of the AP.
7.2.1 Reboot
If a parameter does not take effect or the AP does not work properly, you can try rebooting the AP
to resolve the problem.
The AP supports two rebooting methods:
Manual reboot: Reboot the AP by clicking the Reboot button.
Reboot schedule: Let the AP reboot at the specified time or interval you set.
Rebooting the AP disconnects all connections. You are recommended to reboot the AP in spare time.
Manual reboot
Procedure
Step 1 Choose Tools > Maintenance.
Step 2 Click Reboot.
Step 3 Click OK on the pop-up window.
---- End
85
Reboot schedule
You can let the AP reboot:
At interval: The AP reboots at the interval you set.
At specified time: The AP reboots regularly at the time you set.
Configuring the AP to reboot at an interval
Step 1 Click Tools > Maintenance, and click the Reboot Schedule tab.
Step 2 Enable Reboot Schedule.
Step 3 Select Reboot Interval from the Type drop-down list menu.
Step 4 Set Interval as required, which is 1440 minutes in this example.
Step 5 Click Save to apply your settings.
---- End
86
---- End
7.2.2 Reset
If the internet is inaccessible for unknown reasons, or you forget the login password, you can reset
the AP to resolve the problems.
The AP supports two resetting methods:
Resetting the AP using web UI.
Resetting the AP using the Reset button.
Resetting the AP deletes all your current configurations, and you need to reconfigure the AP again.
Therefore, resetting the AP only when necessary.
If it is necessary to reset the AP, backing up your current configuration first.
When resetting, do not power off the AP.
87
---- End
To enable your AP to work properly after an upgrade, ensure that the firmware used to upgrade
complies with your product model.
When upgrading, do not power off the AP.
Procedure
Step 1 Download the latest firmware version for the AP from http://www.tendacn.com to your
local computer.
Step 2 Log in to the web UI of the AP, navigate to Tools > Maintenance, and locate the Upgrade
Firmware configuration area.
Step 3 Click Upgrade, select and upload the firmware that has been downloaded to your
computer.
Step 4 Click Upgrade. Wait until the progress bar completes.
88
If you upgrade low transmit power version to/from high transmit power version, reset the AP after
upgrading completes to apply your settings.
---- End
Wait until the progress bar completes. Then log in to the web UI of the AP again. Click Status >
System Status and check whether the upgrade is successful according to the Firmware Version
parameter.
If you need to apply same or similar configuration to many APs, you can configure one of the APs, back
up its configuration, and use the backup configuration file to restore the configuration of other APs.
---- End
89
If the following warning message appears, click Keep.
90
7.3 Account
7.3.1 Overview
The router supports two account types: Administrator and Guest. The difference between them is
their permission.
The Administrator account has permission to view and modify the settings. The default username
and password for this account are admin/admin (both are case-sensitive). You can view and modify
it here.
The Guest account can only view other than modifying the settings. The default username and
password for this account are user/user (both are case-sensitive). You can view and modify it here.
To access the configuration page, choose Tools > Account.
91
7.4 System Log
System logs record information about system running status and the operation you performed on it.
When system malfunctions occur, you can use system log for troubleshooting.
The AP also supports Log Service that allows you to sync the system logs of the AP to the log server
you specified. Therefore, you can use syslog software to view the logs on the server.
92
7.4.2 Modifying number of logs to be displayed on Web UI
Choose System Log, and then click the Log Settings page first.
Procedure
Step 1 Enable Log Service.
Procedure
Step 1 Choose Tools > System Log, and click the Log Settings tab.
Step 2 Enable Log Service, and click Save to apply your settings.
93
Step 3 Click Add. The following window appears.
Step 4 Enter the Log Server IP Address and Log Server Port as required, which is 192.168.20.213
and 514 in this example. And click Add.
---- End
You can view the system log of the AP remotely on the third-party log server software you use.
94
7.5 Diagnostic tool
7.5.1 Overview
The AP supports Ping command, which is used to check whether or not the connection between the
AP and a specified host is correct and the connection quality when facing network reachability
issues.
95
96
7.6 Uplink check
7.6.1 Overview
In AP mode, the AP connects to its upstream network using the LAN port. If a critical node between
the LAN port and the upstream network fails, the AP as well as the wireless devices connected to
the AP cannot access the upstream network. If uplink detection is enabled, the AP regularly pings
specified hosts through the LAN port. If all the hosts are not reachable, the AP stops its wireless
service and wireless devices cannot find the SSIDs of the AP. The device can reconnect to the AP
only after the connection between the AP and the upstream networks is recovered.
If the uplink of the AP with uplink check enabled is faulty, wireless devices can connect to the
upstream network through another nearby AP that works properly.
See the following topology (The LAN port serves as the uplink port).
Internet
PoE switch Router
LAN WAN
AP Ethernet port
Devices
97
Both Host1 to Ping and Host2 to Ping are mandatory. If you have only one host to ping, repeat the IP
address of Host1 in Host2 to Ping box.
Step 3 Enter the interval at which the AP detects its uplink in Ping Interval box.
Step 4 Click Save to apply your settings.
---- End
98
Appendix
A.1 Configuring a static IP address for your computer (Example:
Windows 7)
Procedure
Step 1 Right-click in the lower-right corner of the desktop and choose Open Network and
Sharing Center.
99
Step 3 Click Properties.
100
Step 5 Select Use the following IP address and Use the following DNS server address.
Step 6 IP address, Subnet mask: Set a static IP address, subnet mask for your computer, which is
192.168.0.10 and 255.255.255.0 in this example, and click OK.
---- End
Configuration succeeds. You can check whether your configuration is successful on the Network
Connection Details page. Procedure is as follows:
Step 1 Right-click in the lower-right corner of the desktop and choose Open Network and
Sharing Center.
101
Step 2 Click Local Area Connection.
102
Step 4 Check whether your configuration is successful on the Network Connection Details page.
Parameters in IPv4 Address, IPv4 Subnet Mask represent the IP address, subnet mask of
your computer.
103
A.2 FAQ
Q1: I cannot access the web UI of the AP after entering 192.168.0.254. What should I do?
Q2: My access controller (AC) cannot find my AP. What should I do?
Ensure that all the devices in the network are connected properly and the LED of the AP blinks.
If VLANs have been defined in your network, verify that the corresponding VLAN has been
added to your AP controller.
Reboot your AP.
Upgrade firmware your AP to the latest version.
Reset your AP.
104
A.3 Default parameter values
The following table lists the default parameter values of the AP.
IP Address 192.168.0.254
105
Parameter Default Value
WMF Disable
Channel Auto
Short GI Enable
106
Parameter Default Value
APSD Disable
MU-MIMO Enable
No ACK Disable
WMM
WMM Optimization Custom
PVID 1
Administrator Administrator
Location ShenZhen
107
Parameter Default Value
108