TP-Link EAP220 - Manual

IC STATEMENT This Class A digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada. Продукт сертифіковано згідно с правилами системи УкрСЕПРО на відповідність вимогам нормативних документів та вимогам, що передбачені чинними з...

1 CONTENTS Chapter 1 Introduction ...................................................................................................................................... 3 1.1 Overview of the EAP ............................................................................................................

3 Chapter 1 Introduction 1.1 Overview of the EAP EAP series products provide wireless coverage solutions for small-medium business. They can either work independently as standalone APs or be centrally managed by the EAP Controller software, providing a flexible, richly-functional but easily-configur...

4 Figure 1-1 Top View of the EAP LED Status Indication Solid green The device is working properly. Flashing red System errors. RAM, flash, Ethernet, WLAN or firmware may be malfunctioning. Flashing yellow Firmware update is in progress. Do not disconnect or power off the device. Double-flashing red,...

5 EAP120/EAP220: Figure 1-3 Interface Panel of EAP120/EAP220 Please note that EAP110 does not have the CONSOLE port, POWER port and ON/OFF button. The interface panel components of the EAP, from left to right, are described in the following list.  Kensington Security Slot: Secure the lock (not prov...

6 Passive PoE Adapter:  Power LED: The Power LED indicates the status of the electric current: green (0-0.8A), red (0.8A-1A).  POE Port: This port is used to connect the ETHERNET port of the EAP110.  LAN Port: This port is used to connect your LAN. 1.2.3 Mounting Bracket The following figure desc...

7 Chapter 2 Network Topology A typical network topology for the EAP is shown below. Figure 2-1 Typical Topology To deploy an EAP in your local network, a DHCP server is required to assign IP addresses to the EAP and clients. Typically, a router acts as the DHCP server. Ensure the EAPs are in the sam...

8 Chapter 3 Management Mode 300Mbps Wireless N Access Point EAP110 and Wireless N Gigabit Access Point EAP120/EAP220 can either work under the control of the EAP Controller software or work independently as a standalone access point. When user establishes a large-scale wireless network, the manageme...

10 Chapter 4 Network On Network page you can configure the IP address of the standalone EAP. Figure 4-1 Network Page Dynamic/Static: By default, the EAP device obtains an IP address from a DHCP server (typically a router). Select Static to configure IP address manually. Fallback IP: If the EAP fails...

12 5.1 Wireless Settings Following is the page of Wireless Settings. Figure 5-2 Wireless Settings Page

13 5.1.1 Wireless Basic Settings Figure 5-3 Wireless Basic Settings 2.4GHz Wireless Radio: Check the box to enable 2.4GHz Wireless Radio. Wireless Mode: Select the protocol standard for the wireless network. Wireless network created by the EAP is able to operate in the 2.4GHz frequency The EAP suppo...

14 If the maximum transmit power is set to be larger than local regulation allows, the maximum Tx power regulated will be applied in actual situation. NOTE : In most cases, it is unnecessary to select maximum transmit power. Selecting larger transmit power than needed may cause interference to neigh...

15 SSID Broadcast: Enable this function, AP will broadcast its SSID to hosts in the surrounding environment, as thus hosts can find the wireless network identified by this SSID. If SSID Broadcast is not enabled, hosts must enter the AP’s SSID manually to connect to this AP. Security Mode: Select the...

18 Encryption: Select the encryption type, including Auto , TKIP , and AES . The default setting is Auto, which can select TKIP (Temporal Key Integrity Protocol) or AES (Advanced Encryption Standard) automatically based on the wireless station's capability and request. AES is more secure than TKIP a...

19 Fragmentation Threshold: Specify the fragmentation threshold for packets. If the size of the packet is larger than the fragmentation threshold, the packet will be fragmented into several packets. Too low fragmentation threshold may result in poor wireless performance caused by the excessive packe...

20 Following is the page of Portal. Figure 5-10 Portal Page NOTE: To apply Portal in a wireless network, please go to Wireless → Wireless Settings → SSIDs to enable Portal of a selected SSID. 5.2.1 Portal Configuration Three authentication types are available: No Authentication, Local Password and E...

21 2. Local Password ： Users are required to enter the preset user name and password, which are saved in the EAP. 3. External RADIUS Server ： Users are required to enter the preset user name and password, which are saved in the database of the RADIUS server. The RADIUS server acts as the authenticat...

23  Local Password Figure 5-12 Portal Configuration_Local Password Authentication Type: Select Local Password . Username: Enter the user name for local authentication. Password: Enter the password for local authentication. Please refer to No Authentication to configure Authentication Timeout , Redi...

24 1. Local Web Portal Figure 5-13 Portal Configuration_External RADIUS Server_Local Web Portal Authentication Type: Select External RADIUS Server . RADIUS Server IP: Enter the IP address of the RADIUS server. Port: Enter the port for authentication service. RADIUS Password: Enter the shared secret ...

25 2. External Web Portal Figure 5-14 Portal Configuration_External RADIUS Server_External Web Portal Authentication Type: Select External RADIUS Server . RADIUS Server IP: Enter the IP address of the RADIUS server. Port: Enter the port for authentication service. RADIUS Password: Enter the shared s...

26 Click to add a new authentication policy and configure its parameters. Figure 5-16 Configure Free Authentication Policy Policy Name: Enter a policy name. Source IP Range: Enter the source IP address and subnet mask of the clients who can enjoy the free authentication policy. Leaving the field emp...

27 Click the button OK in Figure 5-16 and the policy is successfully added as Figure 5-17 shows. Figure 5-17 Add Free Authentication Policy Here is the explanation of Figure 5-17: The policy name is Policy 1. Clients with IP address range 192.168.2.0/24 are able to visit IP range 10.10.10.0/24. Poli...

28  Settings Enable MAC Filtering: Check the box to enable MAC Filtering.  Station MAC Group Follow the steps below to add MAC groups. Step 1: Click , two tables will be shown. Figure 5-19 Station MAC Group Step 2: Click and fill in a name for the MAC group. Figure 5-20 Add a Group Step 3: Click a...

29 Figure 5-21 Add a Group Member Click in Modify column to edit the MAC group name or MAC address. Click to delete the MAC group or group member.  MAC Filtering Association Figure 5-22 MAC Filtering Association SSID Name: Displays the SSID of the wireless network. Band: Displays the frequency band...

30 Figure 5-23 Scheduler Page  Settings Scheduler: Check the box to enable Scheduler. Association Mode: Select Associated with SSID/AP , you can perform configurations on the SSIDs/AP. The display of Scheduler Association is based on your option here.  Scheduler Profile Configuration Follow the st...

32  Scheduler Association This zone will display different contents based on your selection of association mode in Settings . 1. Associated with SSID Figure 5-27 Scheduler Association_Associated with SSID SSID Name: Displays the SSID of the standalone AP. Band: Displays the frequency band which the...

33 5.5 QoS The EAP supports Quality of Service (QoS) to prioritize voice and video traffic over other traffic types. In normal use, the default values for the EAP device and station EDCA should not need to be changed. Changing these values affects the QoS provided. Figure 5-29 QoS Page Wi-Fi Multime...

34 5.5.1 AP EDCA Parameters AP Enhanced Distributed Channel Access (EDCA) parameters affect traffic flowing from the EAP device to the client station. Figure 5-30 AP EDCA Parameters Queue: Displays the transmission queues: Data 0>Data 1>Data 2>Data 3. Arbitration Inter-Frame Space: A wait t...

35 5.5.2 Station EDCA Parameters Station EDCA parameters affect traffic flowing from the client station to the EAP device. Figure 5-31 Station EDCA Parameters Queue ： Displays the transmission queues: Data 0>Data 1>Data 2>Data 3. Arbitration Inter-Frame Space ： A wait time for data frames. ...

36 5.6 Rogue AP Detection A Rogue AP is an access point that has been installed on a secure network without explicit authorization from a system administrator. The EAP device can scan all channels to detect all APs in the vicinity of the network. If rogue APs are detected, they are shown on the Dete...

37 5.6.1 Settings Figure 5-33 Enable Rogue AP Detection Rogue AP Detection: Check the box to enable Rogue AP Detection, then click Save . 5.6.2 Detected Rogue AP List Information about the detected rogue APs is displayed in the list. By default, the status of the detected rogue AP is unknown. You ca...

38 Beacon Interval: The beacon interval used by the rogue AP. Beacon frames are transmitted by an AP at regular intervals to announce the existence of the wireless network. The default behavior is to send a beacon frame once every 100 milliseconds (or 10 per second). Signal: The strength of the radi...

40 Chapter 6 Monitoring On Monitoring page, you can monitor the network running status and statistics based on AP, SSID and Client. 6.1 AP AP List on the Monitoring page displays the device name, its MAC address and the number of clients. Below the AP List the AP’s detailed information will be shown...

41 Device Name: Displays the device name. MAC: Displays the MAC address of the EAP. Num of Clients: Displays the number of clients connected to the EAP.  Device Information Figure 6-3 Device Information Device Name: Displays the device name. Device Model: Displays the model of the device. Firmware ...

43 LAN Port: Displays the maximum transmission rate and duplex mode (half-duplex or full-duplex) of the port.  Client Figure 6-6 Client MAC: Displays the MAC address of the client of the AP selected in AP List. SSID: Displays the SSID the client is connected to. SNR(dB): Signal to Noise Ratio, the ...

44 Rx/Tx Packets: Displays the total amount of packets received/sent on the LAN port. Rx/Tx Bytes: Displays the total amount of data (in bytes) received/sent on the LAN port. Rx/Tx Dropped Packets: Displays the total amount of dropped packets received/sent on the LAN port. Rx/Tx Errors: Displays the...

45 6.2 SSID Figure 6-9 SSID Monitoring 6.2.1 SSID List In SSID List you can monitor the related parameters of the wireless network. Figure 6-10 SSID List SSID Name: Displays the SSID name. If you want to modify it, please refer to 5.1.2 SSIDs . VLAN ID: Displays the VLAN which the SSID belongs to. I...

46 Isolation: Displays the enabling or disabling of SSID Isolation. If you want to modify it, please refer to 5.1.2 SSIDs . Down(Byte): Displays the throughput of the downstream data. Up(Byte): Displays the throughput of the upstream data. 6.3 Client From User List, you can monitor the status of all...

47 SNR(dB): Signal to Noise Ratio, the power ratio between the received wireless signal strength and the environmental noise strength. The bigger the value of SNR, the better network performance the device provides. CCQ(%): Displays the wireless Client Connection Quality (CCQ). CCQ refers to the rat...

48 Active Time: Displays the amount of time the authenticated client has been connected to the root AP. Action: Click Unauthorize to stop giving authorization to the clients connected to the wireless network.

49 Chapter 7 Management Management page is mainly used for device management and maintenance. 7.1 System Log System log records information about hardware, software as well as system issues and monitors system events. With the help of system log, you can get informed of system running status and det...

50 Figure 7-2 Log List 7.1.2 Log Settings You can choose the way to receive system logs in Log Settings zone, where these parameters can be configured: Enable Auto Mail , Enable Server and Enable Nvram . Figure 7-3 Log Settings  Enable Auto Mail If Auto Mail is enabled, system logs will be sent to ...

51 SMTP Server: Enter the IP address of the SMTP server. Enable Authentication: Generally users are required to log in to the SMTP server by entering user name and password.  User Name : Enter the sender’s email address.  Password : Enter the password of the sender’s email address.  Confirm Passw...

52 Following is the page of Web Server. Figure 7-6 Web Server Page HTTPS: HTTPS (Hypertext Transfer Protocol Secure) is enabled by default. Secure Server Port: Designate a secure server port for web server in HTTPS mode. By default the port is 443. Server Port: Designate a server port for web server...

53 Following is the page of Management Access. Figure 7-7 Management Access Page MAC Authentication: Check the box to enable MAC Authentication. After MAC Authentication is enabled, only the PCs in MAC address list can log in the device’s web management page. By default this function is disabled. Al...

54 SSH (Secure Shell) is a security protocol established on application and transport layers. SSH-encrypted-connection is similar to a telnet connection, but essentially the old telnet remote management method is not safe, because the password and data transmitted with plain-text can be easily inter...

55 Once the device has become an SNMP agent, it is able to receive and process request messages from SNMP manager. Following is the page of SNMP. Figure 7-10 SNMP Page SNMP Agent: Enable SNMP Agent and the SNMP Agent will collect the information of this device and respond to information requests fro...

57 Chapter 8 System System page is mainly used to configure some basic information like user account and time, and realize functions including reboot, reset, backup, restore and upgrade the device. 8.1 User Account You can change the username and password to protect your device from unauthorized log...

59 Primary/Secondary NTP Server: If you’ve selected Get GMT from an NTP server, please input the primary NTP sever address and an alternative NTP server address. 8.2.2 Daylight Saving Figure 8-4 Daylight Saving Daylight Saving: Enable or disable the DST. DST is disabled by default. Mode: Options inc...

60  Recurring Mode Figure 8-6 Recurring Mode Mode: Select Recurring Mode . The configuration is recurring in use. Time Offset: Specify the time adding in minutes when Daylight Saving Time comes. Start/End: Select starting time and ending time of Daylight Saving Time.  Date Mode Figure 8-7 Date Mod...

61 8.4 Backup & Restore Figure 8-9 Backup & Restore You can save the current configuration of the EAP as a backup file and restore the configuration via a backup file. Back up the settings before you upgrade the device or upload a new configuration file can prevent it from being lost. Restor...

63 Appendix A: Specifications HARDWARE FEATURES Model EAP110 EAP120 EAP220 Interface Kensington lock slot RESET button ETHERNET: 10/100Mbps Ethernet port (RJ-45) ETHERNET: 10/100/1000Mbps Ethernet port (RJ-45) CONSOLE port (RJ-45) Power connector (DC-2) Power Supply 24V/1A passive PoE adapter (inclu...