AP-90M INSTRUCTION MANUAL WIRELESS ACCESS POINT INTRODUCTION 1 BEFORE USING THE AP-90M 2 INSTALLATION GUIDE 3 CONNECTING WIRELESS LAN [BASIC]

Transcription

1 INSTRUCTION MANUAL WIRELESS ACCESS POINT AP-90M INTRODUCTION 1 BEFORE USING THE AP-90M 2 INSTALLATION GUIDE 3 CONNECTING WIRELESS LAN [BASIC] [IEEE802.11ac] standard [IEEE802.11n] standard [IEEE802.11a/b/g] standard Dual band communications [IEEE802.3af] PoE standard 4 CONNECTING WIRELESS LAN [ADVANCED] 5 OTHER FUNCTIONS 6 MAINTENANCE 7 INFORMATION

2 INTRODUCTION Thank you for choosing this Icom product. The AP-90M wireless access p o i n t is designed and built with Icom s IP network technology. We hope you agree with Icom s philosophy of technology first. Many hours of research and development went into the design of your AP-90M. The AP-90M complies with the IEEE802.11ac/n/a/b/g standards and enables you to communicate in dual bands. The wireless LAN unit for the internal and external antenna is built into the AP-90M. The IEEE802.11ac standard can only be used when 5 GHz is selected for the external antenna. If you set the same frequency band to the internal antenna and the external antenna, the wireless system will not work properly. ALL RIGHTS RESERVED. This document contains material protected under International and Domestic Copyright Laws and Treaties. Any unauthorized reprint or use of this material is prohibited. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage and retrieval system without express written permission from Icom Incorporated. All stated specifications and design are subject to change without notice or obligation. Adobe and Reader are registered trademarks of Adobe Systems Incorporated in the United States and/or other countries. Microsoft and Windows are registered trademarks of Microsoft Corporation in the United States and/or other countries. Icom, Icom Inc. and the Icom logo are registered trademarks of Icom Incorporated (Japan) in Japan, the United States, the United Kingdom, Germany, France, Spain, Russia, and/or other countries. All other products or brands are registered trademarks or trademarks of their respective holders. i

3 INTRODUCTION About the wireless LAN standards The AP-90M s wireless LAN standards and the maximum communication rates are shown in the table below. Frequency band Wireless LAN standard Bandwidth* Maximum communication rate (theory) 5 GHz IEEE802.11ac 80 MHz 867 Mbps 40 MHz 400 Mbps 20 MHz 173 Mbps IEEE802.11n 40 MHz 300 Mbps 20 MHz 144 Mbps IEEE802.11a 54 Mbps 2.4 GHz IEEE802.11n 40 MHz 300 Mbps 144 Mbps IEEE802.11g IEEE802.11b * The bandwidth that can be used differs, depending on the country. 20 MHz 54 Mbps 11 Mbps About the Wireless LAN information The maximum communication rate is written based on the maximum theoretical rate of the IEEE wireless LAN standard, and is not the actual data communication rate. The actual data communication rate differs, depending on the condition in which the AP-90M is used, such as distance, obstacles, PC specifications, network vacancy, and so on. The AP-90M s wireless LAN standards and the maximum communication distance is shown in the table below. The wireless communication distance differs, depending on the installed location or the frequencies used. Refer to the table below as a reference. Frequency band Wireless LAN standard Indoor Outdoor* 5 GHz IEEE802.11ac IEEE802.11n IEEE802.11a 2.4 GHz IEEE802.11n IEEE802.11g IEEE802.11b * Use this product outdoors according to your local regulations. Approximately 30 m; 32 yd Approximately 30 m; 32 yd Approximately 100 m; 109 yd Approximately 100 m; 109 yd ii

4 INTRODUCTION About the wireless LAN standards (Continued) Bandwidth and Channel Wireless LAN unit for both the internal and external antennas are built into the AP-90M. As the default setting, Wireless 1 (internal antenna) is set to 2.4 GHz, and Wireless 2 (external antenna) is set to 5 GHz. Set the desired Frequency Band or Bandwidth. The channels written in the table below are the channels used in the world. However, the channels and bandwidth that can be used differ, depending on the country, or the local regulations. When setting multiple access points with the 80 MHz bandwidth on 5 GHz, or 20/40 MHz bandwidth on 2.4 GHz, set the channels away from each other, to prevent signal interference. Frequency band Bandwidth Channel 5 GHz 80 MHz* 2 36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140, 144, 149, 153, 157, MHz* 3 36, 44, 52, 60, 100, 108, 116, 124, 132, 140, 149, MHz 36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140, 144, 149, 153, 157, 161, 165, Automatic 2.4 GHz 40 MHz 1, 2,3,4, 5, 6, 7, 8, 9 20 MHz 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, Automatic * 1 Wireless 1 and 2 s frequency bands cannot be used when both of them are set to 2.4 GHz or 5 GHz. * 2 80 MHz bandwidth can only be used in Wireless 2. (80 MHz bandwidth cannot be used, depending on the country.) * 3 For Wireless 1, when 5 GHz is selected for Frequency Band, and 40 MHz is selected for Bandwidth, the DFS function channels cannot be used. iii

5 INTRODUCTION Features A communication can be made on the maximum rate 867 Mbps (theory) based on the [IEEE802.11ac] and the [IEEE802.11n] standards. The [IEEE802.11ac] standard can only be used when 5 GHz is selected for the external antenna. The [IEEE802.11ac] and the [IEEE802.11n] standards are enabled when None or AES are set for Encryption. Dual band communications using the 5 GHz and 2.4 GHz bands can be made, based on the [IEEE802.11a] and the [IEEE802.11b/g] standards. For using multiple wireless devices that are based on different wireless LAN standards at the same time, a protection system is built into the AP-90M, for the communication rate maintenance. The DFS function automatically avoids radio-frequency interference to Weather radars. The DFS conditions differ, depending on your location. The authentication system supports Open System, Shared Key, IEEE802.1X, WPA, WPA2, WPA-PSK, and WPA2-PSK. If IEEE802.1X, WPA or WPA2 is selected, the RADIUS authentication server can be used. Web authentication function, which authorizes wireless LAN stations is built into the AP-90M. The AP-90M complies with the PoE (Power over Ethernet) power reception function based on the [IEEE802.3af] standard. Therefore, power can be received using a HUB (user supplied) that supports the [IEE802.3af] standard. With the function that the Wi-Fi Alliance proposes, SSID and Security (WPA-PSK/WPA2-PSK) can automatically be set to the AP-90M (virtual AP) and the wireless LAN station that supports the WPS (Wi-Fi Protected Setup) function. This device is not certified by the Wi-Fi alliance. (As of December 2014) Supports the 10BASE-T/100BASE-TX/1000BASE-T automatic switching function. Auto MDI/MDI-X system for the port polarity. Settings can be automatically backed-up at power ON, using a USB flash drive. Also, the firmware can be updated or settings can be restored, using a flash drive. To use these functions, a setting file or a firmware file with a proper file name is required. Set the USB Authentication Key function to avoid data theft or accidental setting changes, using other than the USB flash drive set to this function. Supports the SNMP system for the network management. No license nor certificate needed to use this product. iv

6 INTRODUCTION About default settings Menu Setting screen Setting Title Default setting Network Settings IP Address IP Address IP Address Subnet Mask DHCP Server DHCP Server DHCP Server Disable Wireless Settings Wireless LAN Wireless LAN Frequency Band 2.4 GHz (Wireless 1) * 5 GHz (Wireless 2) * Bandwidth 20 MHz Virtual AP Virtual AP Interface ath0 (Wireless 1) ath4 (Wireless 2) SSID WIRELESSLAN-0 Security Authentication Open System/Shared Key Encryption None Management Administrator Administrator Password Username admin (Cannot be changed) Current Password admin (Lower case letters) *The wireless LAN unit for Wireless 1 (internal antenna) and Wireless 2 (external antenna). Wireless 1 and 2 s frequency bands cannot be used when both of them are set to 2.4 GHz or 5 GHz. The IEEE802.11ac standard can only be used when 5 GHz is selected in Wireless 2 (external antenna). To prevent unauthorized access You must carefully chose your password, and change it occasionally. Choose one that is not easy to guess. Use numbers, characters and letters (both lower and upper case). v

7 INTRODUCTION Setting procedures Follow the procedures below to set up the AP-90M. 1 Main functions +p.1-5 to p Wireless communication settings +p.2-2 to p Wireless LAN settings +p.3-2 to p Date, time and other settings +p.5-2 to p Settings backup/restore +p.6-2 to p Resetting to defaults +p.6-4 to p Troubleshooting +p.7-2 to p.7-3 vi

8 INTRODUCTION Index INTRODUCTION...i About the wireless LAN standards...ii Features...iv About default settings...v Setting procedures...vi Index...vii 1. BEFORE USING THE AP-90M Panel description Main functions INSTALLATION GUIDE About the PC to use Setting the static IP address to a PC Connecting to the PC Accessing the setting screen Changing the IP address Manually entering the SSID and Encryption Assigning the automatic SSID and PSK in the WPS function Checking and saving the settings Uploading the saved settings Restoring the factory defaults Firmware Update Automatic setting using a USB flash drive Automatically restoring from a USB flash drive Firmware update using a USB flash drive Setting the USB Authentication Key INFORMATION Troubleshooting Connecting using Telnet About the setting screen Feature functions About the characters Specifications CONNECTING WIRELESS LAN [BASIC] Disabling the wireless communication [IEEE802.11ac] standard (5 GHz band) communication Setting the WEP RC4 encryption Automatically setting the SSID and Shared Key Setting the Virtual AP Setting the Wireless Bridging function Setting the MAC Address Filtering CONNECTING WIRELESS LAN [ADVANCED] Automatically setting the channels Setting the Accounting server Setting the MAC Authentication Server (RADIUS) Setting the RADIUS OTHER FUNCTIONS Controlling the setting screen access Setting the internal clock Using the DHCP Server Using the Packet Filter Setting Web Authentication Disabled HTTP/HTTPS About the PIN code About SYSLOG MAINTENANCE vii

9 BEFORE USING THE AP-90M 1 1. Panel description Top panel Rear panel/back side Antenna attachment Main functions Access point function Wireless LAN (SSID) Maximum Number of Stations IEEE802.11ac standard IEEE802.11n standard Wireless LAN (SSID) Roaming function Wireless bridging function Wireless bridging function (Continued) Virtual AP function DFS function and automatic channel setting WPS function

10 1 BEFORE USING THE AP-90M 1. Panel description Top panel q w e r q POWER Indicates the status. It also lights when the [MODE] button is pushed. Lights green: Power is ON. Lights red: Accessing the USB flash drive error. Blinks red: Duplicated IP address error. (Detected only when booting) Lights orange: Accessing the USB flash drive. A firmware update is ready (Online update). Blinks orange: Booting. When [MODE] is operated. No light: Power is OFF. w LAN Indicates the LAN status. Lights green: LAN is connected (1000BASE-T) Blinks green: LAN is communicating (1000BASE-T) Lights orange: LAN is connected (10BASE-T/100BASE-TX) Blinks orange: LAN is communicating (10BASE-T/100BASE-TX) No light: Not connected. e WIRELESS 1 Indicates the WIRELESS 1 (internal antenna) status. Lights green: More than 1 connection/wps succeeded* 1. Blinks green: WPS is running. Blinks red: WPS failed. Lights orange: Internal antenna enabled. (Wireless station is not connected) Blinks orange: Wireless operation is waiting for DFS. No light: Internal antenna disabled* 2 r WIRELESS 2 Indicates the WIRELESS 2 (external antenna) status. Lights green: More than 1 connection/wps succeeded* 1. Blinks green: WPS is running. Blinks red: WPS failed. Lights orange: Internal antenna enabled. (Wireless station is not connected) Blinks orange: Wireless operation is waiting by for DFS. No light: External antenna disabled* 2 * 1 When there is no wireless LAN station to connect with the AP-90M, or no wireless communication is made while Wireless Unit is enabled, the LED lights orange. The time when the LED turns orange differs, depending on the communication status. * 2 The LED also turns OFF when the same Frequency Band is set to both the internal antenna and the external antenna. When the LED OFF Mode is set to Enable, the POWER indicator is dimmed, and when set to Enable (Completely), the all indicators are turned OFF. (Default: Disable) 1-2

11 1 BEFORE USING THE AP-90M 1. Panel description (Continued) Rear panel/back side y Back side q WPS DC USB LAN GND t u w e r q [WPS] Push to start the Automatic setting by WPS. When the AP-90M is set to the factory defaults, first set the WPS Interface to use in the WPS settings. (+p.2-11) w DC jack Connect to the supplied or optional power adapter. When you use the power from the Ethernet cable (PoE), you do not need a separate power adapter. e [USB] port (USB2.0/1.1) Insert a USB flash drive (user supplied) to backup the configurations or to update the firmware. Disconnect the power adapter, and then securely insert the USB flash drive. Icom is not responsible for the USB flash drives used with the AP-90M. DO NOT insert a USB device other than the USB flash drive See page 6-9 for the flash drive requirements. r [LAN] port (RJ-45 type) Connect to network devices such as a HUB. t Ground terminal Connect to the ground wire. (User supplied) y Antenna connector Connect to the supplied external antennas. (+p.1-4) Connect both of the external antennas for the best performance. u [MODE] button Used to reset the AP-90M to its default settings. (+p.6-4) We recommend that you use a pen to hold down this button. 1-3

12 1 BEFORE USING THE AP-90M 1. Panel description (Continued) Antenna attachment The two antennas have diversity scheme and MIMO (Multiple-Input and Multiple-Output) systems that are resistant to multi-path propagation and enable you to communicate in stable signal status. Securely attach the antennas. The antennas can be pointed in 3 different directions. (0/45/90 degrees) Also, they can be rotated to the left or right. To detach the antennas, hold the base of the antennas and rotate counterclockwise. For the best performance, attach both antennas. In case you find difficulties receiving signals, change the antenna s direction. 90 Antenna x2 (Supplied) 45 Rotate to the right 0 WIRELESS ACCESS POINT AP-90M AP-90M RWARNING! DO NOT swing the AP-90M by holding the antennas. This may cause injury and/or damage to the AP-90M. NOTE The AP-90M complies with the certification of conformance to technical standards. Do not use other than the supplied antennas. 1-4

13 1 BEFORE USING THE AP-90M 2. Main functions Access point function The AP-90M is a wireless access point that complies with the IEEE802.11ac and IEEE802.11n standards. It is designed for dual band communications in the 2.4 GHz and 5 GHz bands. Communication with wireless LAN stations that comply with IEEE (14CH) cannot be made. PC AP-90M PC 5 GHz band 2.4 GHz band Wireless LAN (SSID) An SSID (or ESS ID) is preset in the AP-90M and the wireless LAN to separate the connecting destination. (+p.2-9) The AP-90M is equipped with a wireless LAN unit using internal and external antenna. To use multiple virtual APs, the same SSIDs cannot be set in one unit. Maximum Number of Stations This function limits the number of wireless LAN stations that can be connected at a time to each virtual AP. This prevents the communication traffic speed from being reducing. IEEE802.11ac standard With data communication using a quadruple frequency bandwidth (channel) and multiple antennas, communication with a maximum speed of 867 Mbps* (theoretical value) can be made. * The IEEE802.11ac standard can be used only when Encryption is set to None or AES. The maximum speed of 867 Mbps (theoretical value) can only be used on the external antenna (Wireless 2) and when the Frequency Band is set to 5 GHz. In addition, the Bandwidth must be set to 80 MHz to use the maximum 867 Mbps. (+p.3-3) The IEEE802.11ac is compatible with the IEEE802.11n/a standard. IEEE802.11n standard With data communication using a double frequency bandwidth (channel) and multiple antennas, communication with a maximum speed of 300 Mbps* (theoretical value) can be made. * The IEEE802.11n standard can be used only when Encryption is set to None or AES. In addition, the Bandwidth must be set to 40 MHz to use the maximum of 300 Mbps. (+p.3-3) The IEEE802.11n is compatible with the IEEE802.11a/b/g standard. 1-5

14 1 BEFORE USING THE AP-90M 2. Main functions (Continued) Wireless LAN (SSID) The AP-90M is equipped with the following security systems that are required for wireless LAN communication. MAC Address Filtering This security system is used to permit or to prohibit access to only the wireless LAN stations with the MAC address preset to the AP-90M s Virtual AP (ath0 to ath7). 1 WEP RC4* This is an old and weak encryption method that has been used in the radio communications. This is used when connecting to an old wireless LAN station. 2 TKIP* This is a weak encryption method based on WEP RC4 and used when connecting to an old wireless LAN station. 2 AES* This is a strong encryption method that is regularly used for wireless LAN communications. WPA/WPA2 This is used to authorize IEEE 802.1X on a RADIUS server. WPA-PSK/WPA2-PSK This is a simple authentication method that uses a Shared Key instead of a RADIUS server. 3 IEEE802.1X* This system sets authentication on accessing from wireless LAN stations using a RADIUS server. MAC Authentication This system authorizes wireless LAN station s MAC addresses using a RADIUS server. * 1 If the encryption method or key settings do not match those of the communication partner, communication cannot be made. The WEP RC4 152 (128) method cannot be connected to the AP-90M using a Windows standard wireless network. * 2 IEEE802.11n and IEEE802.11ac standards can be used only when the Encryption is set to None or AES. The Encryption for Wireless Bridging on Wireless 1 (internal antenna) is set to AES. (+p.3-13) * 3 Must be set to WEP RC4. Authentication and encryption Open System Shared Key Open System/ Shared Key WPA/WPA2 WPA-PSK/WPA2-PSK IEEE802.1X None WEP RC4 TKIP AES To prevent unauthorized access You must carefully chose your WEP Key and PSK (Pre-Shared Key) to set to the AP-90M. Use numbers, characters and letters (both lower and upper case), and change it occasionally. 1-6

15 1 BEFORE USING THE AP-90M 2. Main functions (Continued) Roaming function Even if you moved a wireless LAN station, this function will automatically switch to the access point (AP- 90M) with the best signal. This enables you to use the wireless LAN station in larger areas. IEEE802.11g standard SSID: WIRELESSLAN-0 Channel: 001CH (2412 MHz) IEEE802.11g standard SSID: WIRELESSLAN-0 Channel: 006CH (2437 MHz) HUB To cabled LAN Wireless LAN device SSID: WIRELESSLAN-0 Moving Automatically switches when moved The setting values in this diagram are examples. Using the roaming function Set the identical SSID, encryption and so on to both the AP-90M and wireless LAN station. When using this function with multiple wireless LAN stations and wireless LAN standard stations all mixed, set a channel where there is no interference, or set Automatic for Channel in the Wireless LAN screen. In the wireless LAN standard (IEEE802.11g) used in the example above, set more than 4 channels between access points. Set the roaming threshold value on the wireless LAN station according to the equipment used. 1-7

16 1 BEFORE USING THE AP-90M 2. Main functions (Continued) Wireless bridging function The wireless bridging function enables you to connect Icom s wireless access points together. See pages 3-12 through 3-18 of this manual for wireless bridging setting examples. Wireless bridging on Wireless 1 (internal antenna) (+p.3-12) If Automatic is set, ( +p.4-3) or when channels where the DFS function can be used are selected, the wireless bridging function cannot be used. BSSID* 1 must be set to each built-in wireless LAN unit. A maximum of 8 peers can be set, and you can communicate with up to 8 peers at a time. * 1 BSSID can be checked on the Wireless Bridging (WDS) screen of the AP-90M software. (+p.3-12) In the example in the illustration below, B s BSSID is entered into A, and A s BSSID is entered into B. BSSID can be easily set because it automatically detects the AP-90Ms that operate on the same channel. In order to communicate using the wireless bridging function, you need to set the same channel and PSK (Pre-Shared Key)* 2, * 3 with the peer. * 2 Set the AES encryption s PSK on the Wireless Bridging (WDS) screen. (+p.3-13) * 3 Settings for the virtual AP (ath0 to ath3) s SSID or encryption are used only for connecting your AP-90M and wireless LAN stations. Therefore, the wireless bridging communication can be made regardless of the peer s settings. Set only the peer s BSSID. Setting multiple BSSIDs that are unnecessary may lower the speed. With or without VLAN ID, all packets can use the wireless bridging communication. A (BSSID: C ) PSK: wirelessmaster Channel: 001CH (2412MHz) B (BSSID: C ) PSK: wirelessmaster Channel: 001CH (2412MHz) Cable LAN A B Wireless bridging connecting AP-90M AP-90M Cable LAN * Values are set as example 1-8

17 1 BEFORE USING THE AP-90M 2. Main functions Wireless bridging function (Continued) Wireless bridging on Wireless 2 (external antenna) (+p.3-14) If Automatic is set ( +p.4-3) or when channels where the DFS function can be used is selected, the wireless bridging function cannot be used. Set the virtual AP (ath4) and the client on the master side, and then build a star-shaped network. Multiple clients can be connected to the master. A client can only be connected to one master. Check the client s BSSID on the Wireless Bridging (WDS) screen, and then enter in the Peer BSSID field. A maximum of 8 clients can be registered to the master. The master s SSID (ath4) and encryption can be set on the Virtual AP screen. Master settings Channel: Virtual AP: SSID: Authentication: Encryption: PSK: BSSID: 036 CH (5180 MHz) ath4 WIRELESSLAN-0 WPA2-PSK AES wirelessmaster C (Client BSSID) Client settings SSID: Authentication: Encryption: PSK: WIRELESSLAN-0 WPA2-PSK AES wirelessmaster Cable LAN Master Wireless bridging Client Cable LAN *The values are set as examples. The client scans the matching SSID and encryption. Set the master s SSID and encryption on the client s Wireless Bridging screen. The client side automatically changes to master channels. When the AP-90M operates as a client, the channel and WMM Advanced settings are invalid. If there are multiple masters, the master to connect will depend on the radio signal strength. Roaming will not be performed unless the signal is cut off, even if the signal strength is changed. 1-9

18 1 BEFORE USING THE AP-90M 2. Main functions (Continued) Virtual AP function With an AP-90M, you can make multiple wireless station groups by their settings (SSID/Security/VLAN ID). The illustration below is an example of using ath0 to ath2 for different wireless station groups virtual AP. See pages 3-9 to 3-10 of this instruction manual for the setting examples. Wireless LAN station group SSID: WIRELESSLAN-1 VLAN ID: 10 Security: WPA-PSK AES ath1 Management ID: 0 (No tag) Cable LAN station group VLAN ID: 10 SSID: WIRELESSLAN-0 VLAN ID: 0 (No tag) Security: WPA-PSK AES ath0 AP-90M LAN without VLAN tag SSID: WIRELESSLAN-2 VLAN ID: 20 Security: WPA-PSK TKIP ath2 VLAN switch VLAN ID: 20 Using the Virtual AP function Using the Virtual AP (ath0 to ath7)*, you can create a wireless network of up to 8 groups. * If you want to create an [IEEE802.11ac] standard wireless network, set the Virtual AP (ath4 to ath7) on the Virtual AP screen of Wireless 2 (External antenna). When using multiple virtual AP functions, the same [SSID] cannot be set to a unit. You can set VLAN IDs (0 to 4094) to the virtual AP (ath0 to ath7) s wireless station groups. [Management VLAN ID] is set to 0 as default. Therefore, you cannot access the setting screen from the network with the VLAN ID set. 1-10

19 1 BEFORE USING THE AP-90M 2. Main functions (Continued) DFS function and automatic channel setting The DFS (Dynamic Frequency Selection) function can be used when a 5 GHz band channel is set and automatically avoids radio interference to weather radars. NOTE: Use the DFS function, or select the channels according to the local regulations. The usable channels and bandwidth differ, depending on the country. The DFS required channels differ, depending on the country. If the DFS function is required on the selected channel, the wireless bridging function cannot be used. See page 4-3 for more details on automatic channel setting MH 40 MH 80 MH MHz MHz MHz MHz After selecting a DFS required channel on the setting screen and then restarting the AP-90M, the function will check for the weather radar for approximately 1* minute after power ON. While searching for signals, [WIRELESS](1/2) blinks orange and shuts out all access to the AP-90M. When the AP-90M power is turned ON, or when a signal from a weather radar is detected while operating, the function automatically changes to a different channel to avoid interference. * The checking time differs, depending on the local regulations. If radar is detected on a DFS required channel and moves to a DFS non required channel, the DFS function is cancelled. When radar is detected and there is no channel that can be used, [WIRELESS](1/2) blinks orange, and Current Channel: Scanning will be displayed on the Wireless LAN screen at the same time. Also, wireless communication cannot be made. In such case, do not operate the device for approximately 30 minutes while the channel list that detected the radar is cleared, and enabled to use. The radar detecting channel list needs to be reset if: you turned OFF the power before channel list resets. you restarted the device to save setting changes. Note: After restarting, you cannot communicate for approximately another 30 minutes. In such case, you may be able to use other band channels. The bandwidth mode that can be used while the DFS function is used may differ, depending on the wireless LAN unit built into the AP-90M. Wireless 1 (internal antenna): Only the 20 MHz bandwidth mode Wireless 2 (external antenna): 20/40/80 MHz bandwidth modes In the 40/80 MHz bandwidth mode, all channels with a radar signal detected, cannot be used for 30 minutes. When a radar signal is detected, 2 channels on the 40 MHz bandwidth mode, and 4 channels on the 80 MHz cannot be used for 30 minutes. ( Example: While operating on the 80 MHz bandwidth mode and a radar is detected on 100 CH, four channels (100 CH, 104 CH, 108 CH and 112 CH) cannot be used for 30 minutes.) The detection results are shared in both Wireless 1 and 2 s Wireless LAN units. If you set the channel on the AP-90M screen to Automatic, it automatically changes to a different channel with less interference. Automatic can be set in only the 20 MHz bandwidth mode. If a channel with the DFS function disabled is selected when starting the AP-90M, the channel will not be changed and the radar will not be detected. However, if a channel with the DFS function enabled is selected, the channel will change if a radar signal is detected. 1-11

20 1 BEFORE USING THE AP-90M 2. Main functions (Continued) WPS function With the function that the Wi-Fi Alliance proposed, SSID and Security (WPA-PSK/WPA2-PSK) can automatically be set to the AP-90M and the wireless LAN station that supports the WPS (Wi-Fi Protected Setup) function. To automatically set it and start the WPS function, you can select either of the following methods. Using the [WPS] button ( p.1-3) that is located on the back of the AP-90M. (Push Button) Setting the communicator s PIN code. (PIN (Personal Identification Number)) See Section 2 ( p.2-11) for examples on setting the SSID and Shared Key to the wireless LAN station using the WPS function. See Section 3 ( p.3-8) for an example on automatically setting with the WPS function. Not using the WPS function q Connect the cabled LAN station. w Access the setting screen. e Set the SSID and Shared Key. Using the WPS function q Push [WPS] WPS DC USB LAN GND Wireless LAN station AP-90M r Start the connection software. t Select the SSID of the virtual AP. y Select the encryption. Wireless LAN station w Push [WPS] AP-90M Using the WPS function Use a wireless LAN station that supports the WPS function. If your wireless LAN station has no [WPS] button, use the application that supports WPS, or a regular wireless network connection using Windows (Windows 7 or later). Enable the virtual AP and select the Interface (ath0 to ath7) to automatically set the virtual AP using the WPS function. ( p.2-11) If you select an invalid virtual AP for Interface, the [WPS] button cannot be used. ( p.1-3) 1-12

21 INSTALLATION GUIDE 2 1. About the PC to use Setting by connecting the cable LAN station Setting by connecting the wireless LAN station Setting the static IP address to a PC Connecting to the PC Using a cable LAN station Using a wireless LAN station Accessing the setting screen Changing the IP address Manually entering the SSID and Encryption Manually entering the SSID Manually entering the Encryption Assigning the automatic SSID and PSK in the WPS function Enabling the WPS function Automatically setting the wireless LAN by using the WPS function

22 2 INSTALLATION GUIDE 1. About the PC to use The AP-90M s IP address is set to , and the DHCP server to Disable as the default. To access the AP-90M s setting screen, a static IP address needs to be set to your PC. ( p.2-3) Setting by connecting the cable LAN station To set the AP-90M, a PC that can connect a LAN cable is required. Laptop PC Desktop PC [LAN] port [LAN] port The location of the [LAN] port depends on each PC. See the PC s instruction manual for connecting the LAN cable. Setting by connecting the wireless LAN station A PC with a built-in wireless LAN function is required. The AP-90M complies with the [IEEE802.11ac/n/a/b/g] standards. 2-2

23 2 INSTALLATION GUIDE 2. Setting the static IP address to a PC The following procedures describe how to set the a static IP address (example: ), based on Microsoft Windows 7. The AP-90M s IP address is set to , and the DHCP server to Disable as the default Click [Start] (Windows logo) and then click [Control Panel]. In the [Control Panel] window, click [Network and Internet] and then click [Network and Sharing Center]. Click [Change adapter settings]. Right-click [Local Area Connection] (cable LAN station) or [Wireless Network Connection] (wireless LAN station), and then click [Properties] in the displayed menu list. q Right-click w Click If the [User Account Control] message appears, click [Yes] to continue. In the [Local Area Connection Properties] (for a cable LAN station) or the [Wireless Network Connection Properties] (for a wireless LAN station) screen, select Internet Protocol Version 4 (TCP/IPv4), and then click [Properties]. The Internet Protocol Version 4 (TCP/IPv4) Properties screen is displayed. Select Use the following IP address and enter the IP address (example: ) and the Subnet mask (example: ), and then click [OK]. q Select w Enter If necessary, change the PC s IP address after setting up the AP-90M. e Click 8 Close the window. 2-3

24 2 INSTALLATION GUIDE 3. Connecting to the PC If you are connecting the AP-90M using its default settings, disconnect the network from your PC. Using a cable LAN station Turn ON the AP-90M and the PC (cable LAN). Make sure the devices are turned OFF when you connect them to together. Indication check [POWER]: [LAN]: Green/Orange* [WIRELESS1]: Orange [WIRELESS2]: Orange WIRELESS ACCESS POINT AP-90M *Indication differs, depending on the status To the DC jack To the [LAN] port To the ground terminal Power adapter (User supplied) Ground terminal Ground wire (User supplied) AC outlet AP-90M (Default: ) PC (Example ) LAN cable (User supplied Category 5e or higher) R WARNING! To prevent electrical shock, television interference (TVI), broadcast interference (BCI) and other problems, ground the AP-90M through the ground terminal. NEVER connect the ground terminal to a gas or electric pipe. This may result in an electrical shock or cause a fire or explosion. 2-4 ( Continued on the next page)

25 2 INSTALLATION GUIDE 3. Connecting to the PC (Continued) Using a wireless LAN station Turn ON the AP-90M and the PC (cable LAN). 1 Turn the ON the AP-90M s power and then start a PC (wireless LAN) that is equipped with a wireless LAN system. Indication check [POWER]: Green [LAN]: OFF [WIRELESS1]: Orange [WIRELESS2]: Orange WIRELESS ACCESS POINT AP-90M To the DC jack To the ground terminal Power adapter (User supplied) AC outlet AP-90M (Default: ) Wireless LAN PC Ground terminal Ground wire (User supplied) R WARNING! To prevent electrical shock, television interference (TVI), broadcast interference (BCI) and other problems, ground the AP-90M through the ground terminal. NEVER connect the ground terminal to a gas or electric pipe. This may result in an electrical shock or cause a fire or explosion. 2 Click the wireless network connection icon. It may take a few minutes until the icon appears. Click 2-5 ( Continued on the next page)

26 2 INSTALLATION GUIDE 3. Connecting to the PC Using a wireless LAN station (Continued) 3 Select the SSID set to the AP-90M and click [Connect], and then follow the steps as instructed. The SSID is set to WIRELESSLAN-0 by default. q Select w Click If you have set the shared key to the AP-90M, the Connecting to network screen appears. Follow the displayed screen to enter the Shared Key. To prevent unauthorized access, make sure to set the authentication. The WEP Key and Pre-Shared Key must be very unique to prevent unauthorized access. Use numbers, characters and letters (both lower and upper case) and change them occasionally. 4 Confirm that Connected is displayed. Confirm 5 Make sure that [WIRELESS](1/2) lights green. Indication check [POWER]: Green [LAN]: OFF [WIRELESS1]: Green/Orange* [WIRELESS2]: Green/Orange* WIRELESS ACCESS POINT AP-90M AP-90M (Default: ) *If more than 1 wireless LAN station is connected, the indicator lights green. Wireless LAN PC 2-6

27 2 INSTALLATION GUIDE 4. Accessing the setting screen The following procedures describe how to access the AP-90M setting screen using a web browser. 1 2 Open your web browser. Enter the IP address of the AP-90M into the address bar. The default IP address is ( Enter 3 Push [Enter]. The Login Authentication screen will appear. 4 Enter admin (fixed username) and admin (default password) in their respective input fields in the Login Authentication window, and then click [OK]. q Enter w Click About web browsers We recommend using Microsoft Internet Explorer 11 or later with the AP-90M. Enable JavaScript and set to allow Cookies on your web browser to correctly display the setting screen. If other browsers are used, the screen may not be correctly displayed. 2-7

28 2 INSTALLATION GUIDE 5. Changing the IP address Network Settings > IP Address > IP Address Make sure the AP-90M s IP address is not the same as the other equipment s address. 1 2 Click [Network Settings], and then click [IP Address]. In the IP Address screen, change the IP Address settings and then click [Apply]. The changes are saved. q Enter w Click If you have changed the Network (example: ) digits on the AP-90M s IP address, also change the PC s network digits on the IP address with the same value. 3 Click [Reboot]. Click 4 After the reboot is complete, click [Back]. The Username and Password screen is displayed. ( p.2-7) IP Address assigning An IP Address consists of two parts, the Network and Host. For example, in the AP-90M s IP address (Class C), the digits are the network digits and the 1 at the end is the host digit. Network devices with the same network numbers are recognized to belong in the same network. Furthermore, the network devices in the network are identified by the host part. Assign the IP Address as described in following points. Set the identical network digits for all the devices that you want to add into the network. Do not set the same host digit to devices in the same network. Do not set the network address (the first digit of the host part or 0 ). Do not set the broadcast address (the last digit of the host part or 255 ). 2-8

29 2 INSTALLATION GUIDE 6. Manually entering the SSID and Encryption Wireless Settings > Wireless 1/Wireless 2 > Virtual AP Manually entering the SSID Entering the SSID is required in order for a wireless LAN station to be identified. Communicating with Wireless 1 (internal antenna) ath0 is used as an example. (Factory defaults: WIRELESSLAN-0) If you are automatically setting the SSID and the Encryption, see page Click [Wireless 1] in the Wireless Settings menu, and then click [Virtual AP]. In the Virtual AP menu, enter the desired SSID of up to 32 characters. (Example: ICOM) Enter Select Enable to hide the SSID to prevent ANY connections. (Default: Disable) The Hide SSID function and the WPS function cannot be used at the same time. 3 Click [Apply]. The A reboot is required to apply all the new settings message appears. 2-9 ( Continued on the next page)

30 2 INSTALLATION GUIDE 6. Manually setting the SSID and Encryption (Continued) Wireless Settings > Wireless 1/Wireless 2 > Virtual AP Manually entering the Encryption Enter the same encryption to the wireless LAN station. Communicating with Wireless 1 (internal antenna) ath0 is as an example. Authentication: WPA-PSK/WPA2-PSK Encryption: TKIP/AES PSK (Pre-Shared Key): wirelessmaster (See pages 3-4 to 3-7 for details on the encryptions that are not mentioned in this instruction.) 1 Select WPA-PSK/WPA2-PSK for Authentication and TKIP/AES for Encryption, and then enter wirelessmaster in the PSK (Pre-Shared Key) field. The entry mode (hexadecimal digits/ascii characters) is automatically differentiated according to the number of digits or characters entered to the PSK (Pre-Shared Key) field. q Select w Enter 2 3 Click [Apply]. Click [Reboot]. Click Follow the instructions to reboot the AP-90M. 4 After the reboot is complete, click [Back]. 2-10

31 2 INSTALLATION GUIDE 7. Assigning the automatic SSID and PSK in the WPS function This topic explains how to assign the automatic SSID and PSK (Pre-Shared Key) set to the Virtual AP for the WPS (Wi-Fi Protected Setup) function on a wireless LAN station. See page 2-9 for the SSID and encryption setting details. The Authentications that can be used for the WPS function are WPA-PSK and WPA2-PSK. Wireless Settings > WPS Enabling the WPS function Push Button is used in this example. ( p.1-12) The [WPS] button on the AP-90M s back panel is disabled when the WPS function is enabled. 1 2 Click [Wireless Settings], and then click [WPS]. Select Interface (example: ath0) to use the WPS function, and then click [Apply]. (Default: None) q Select w Select e Click 3 Click [Reboot]. Click Follow the instructions to reboot the AP-90M. 4 After the reboot is complete, click [Back]. 5 Check WPS Status. To reset the selected interface, Select None and click [Apply]. Check The set Virtual AP settings are displayed ( Continued on the next page)

32 2 INSTALLATION GUIDE 7. Assigning the automatic SSID and PSK in the WPS function (Continued) This page describes how to assign the automatic set by using the [WPS] button. (Automatically setting the SSID and PSK (Pre-Shared Key) contents to the wireless LAN station.) Wireless Settings > WPS Automatically setting the wireless LAN by using the WPS function A Windows 7 s regular network connection is used as an example to describe how to automatically set the wireless LAN station using the WPS function. See the wireless station s instruction manual for more details. If [WIRELESS] (1/2) blinks red and settings cannot be made, set None for Interface (+p.2-11) to set it manually. 1 Click the wireless network connection icon on the PC. It may take a few minutes until the icon appears. Click 2 Select the SSID assigned to the AP-90M (example: WIRELESSLAN-0) and click [Connect]. Connect to a Network is displayed. q Select w Click Security key does not need to be entered. If the connection fails, enter the PSK and click [OK]. 3 Push [WPS] on the AP-90M. [WIRELESS] (1/2) slowly blinks green. 4 The setting is completed when [WIRELESS] (1/2) stops blinking and lights green. The indication differs, depending on the Virtual AP (example: ath0) setting Wireless 1 (ath0 to ath3) Wireless 2 (ath4 to ath7)

33 CONNECTING TO A WIRELESS LAN 3 (BASIC) 1. Disabling the wireless communication Disabling the Wireless Unit [IEEE802.11ac] standard (5 GHz band) communication Communicating in the 80 MHz bandwidth Setting the WEP RC4 encryption About the WEP Key ASCII characters and hexadecimal digits Entering the WEP Key with hexadecimal digits Entering the WEP Key with ASCII characters Generating the WEP Key Automatically setting the SSID and Shared Key Enabling the WPS function Setting the Virtual AP Setting the Wireless Bridging function Using Wireless 1 (internal antenna) Using Wireless 2 (External antenna) Setting the Master unit Setting the wireless bridging function to the AP-90M for the RS-AP3 management Setting the MAC Address Filtering

34 3 CONNECTING TO A WIRELESS LAN (BASIC) 1. Disabling the wireless communication As the default setting, 2.4 GHz is set to Wireless 1 and 5 GHz is set to Wireless 2. You cannot set the same Frequency Band to both the Wireless 1 and 2. Wireless Settings > Wireless 1/Wireless 2 > Wireless LAN Disabling the Wireless Unit Disabling the wireless communication with the Wireless 2 is used as an example. 1 2 Click [Wireless Settings] and [Wireless 2], and then click [Wireless LAN]. For Wireless Unit, select Disable. (Default: Enable) Select 3 4 Click [Apply]. Click [Reboot]. Click Follow the instructions to reboot the AP-90M. 5 After the reboot is complete, click [Back]. 3-2

35 3 CONNECTING TO A WIRELESS LAN (BASIC) 2. [IEEE802.11ac] standard (5 GHz band) communication The [IEEE802.11ac] standard can be used when 5 GHz is selected for Wireless 2 and None or AES is selected as Encryption on the Virtual AP screen. If Encryption is set to WEP RC4 or TKIP, the communication is made in the [IEEE802.11a/b/g] standard, according to the set Frequency Band. Wireless Settings > Wireless 2 > Wireless LAN Communicating in the 80 MHz bandwidth Follow the steps below to set the bandwidth. 1 2 Click [Wireless Settings] and [Wireless 2], and then click [Wireless LAN]. Select 80 MHz for the Bandwidth. (Default: 20 MHz) Select 3 4 Click [Apply]. Click [Reboot]. Click Follow the instructions to reboot the AP-90M. 5 After the reboot is complete, click [Back]. 40 MHz/80 MHz bandwidth communication When you are using the 40 MHz or 80 MHz bandwidth mode on the wireless LAN, first check the radio wave environment around in order to not to interfere other radio stations. In case you have harmfully interfered a radio station using this device, set the Bandwidth to 20 MHz (default). 3-3

36 3 CONNECTING TO A WIRELESS LAN (BASIC) 3. Setting the WEP RC4 encryption There are three ways to configure the WEP RC4 encryption. Directly entering the hexadecimal encryption keys. ( p.3-5) Directly entering the ASCII lettered encryption keys. ( p.3-6) Generating the encryption keys according to the entered Key Generator character strings. ( p.3-7) Encryption is not set as a default. If you cannot set WEP RC4, the WPS function may be set to the Virtual AP (ath0 to ath7) used. ( p.2-11) See page 2-11 for the WPA-PSK (TKIP)/(AES) setting examples. About the WEP Key Depending on the Encryption setting and the bit number in the parenthesis, the number of digits or characters that can be entered differs. The entry mode (hexadecimal digits/ascii characters) is automatically selected according to the number of entered digits or characters. Authentication Entry mode Encryption Open System Shared Key Hexadecimal ASCII None (Default) WEP RC4 64 (40) 10 digits 5 characters WEP RC4 (128) 26 digits 13 characters WEP RC4 152 (128) 32 digits 16 characters ASCII characters and hexadecimal digits If Encryption cannot be set for the communicator s entry mode, enter characters, according to the following table. For example, (10 hexadecimal digits) in the hexadecimal code will be ASCII (5 numbers and letters) in the ASCII characters. ASCII! # $ % & ( ) * +, -. / Hexadecimal a 2b 2c 2d 2e 2f ASCII : ; < = >? Hexadecimal a 3b 3c 3d 3e 3f A B C D E F G H I J K L M N O Hexadecimal a 4b 4c 4d 4e 4f ASCII P Q R S T U V W X Y Z [ \ ] ^ _ Hexadecimal a 5b 5c 5d 5e 5f ASCII ` a b c d e f g h i j k l m n o Hexadecimal a 6b 6c 6d 6e 6f ASCII p q r s t u v w x y z { } ~ Hexadecimal a 7b 7c 7d 7e To prevent unauthorized access You must carefully chose the WEP Key, and change it occasionally. Choose one that is not easy to guess and use numbers, characters and letters (both lower and upper case). 3-4

37 3 CONNECTING TO A WIRELESS LAN (BASIC) 3. Setting the WEP RC4 encryption (Continued) Wireless Settings > Wireless 1/Wireless 2 > Virtual AP Entering the WEP Key with hexadecimal digits The following example is when Wireless 1 is set to ath0. Authentication: Open System/Shared Key (default) Encryption: WEP RC4 128 (104) WEP Key: 26 digits and characters (0 to 9, a to f or A to F) 1 2 Click [Wireless Settings] and [Wireless 1], and then click [Virtual AP]. Select [WEP RC4 128 (104)] for Encryption and enter the 26 digit or character WEP Key. Make sure Open System/Shared Key is selected. q Select w Enter 3 4 Click [Apply]. Click [Reboot]. Click Follow the instructions to reboot the AP-90M. 5 After the reboot is complete, click [Back]. 3-5

38 3 CONNECTING TO A WIRELESS LAN (BASIC) 3. Setting the WEP RC4 encryption (Continued) Wireless Settings > Wireless 1/Wireless 2 > Virtual AP Entering the WEP Key with ASCII characters The following example is when the Wireless 1 (internal antenna) is set to ath0. Authentication: Open System/Shared Key (default) Encryption: WEP RC4 128 (104) WEP Key: 13 characters (example: RETSAMEVAWNAL) 1 2 Click [Wireless Settings] and [Wireless 1], and then click [Virtual AP]. Select [WEP RC4 128 (104)] for Encryption and enter the 13 character WEP Key. Make sure Open System/Shared Key is selected. q Select w Enter 3 4 Click [Apply]. Click [Reboot]. Click Follow the instructions to reboot the AP-90M. 5 After the reboot is complete, click [Back]. 3-6

39 3 CONNECTING TO A WIRELESS LAN (BASIC) 3. Setting the WEP RC4 encryption (Continued) Wireless Settings > Wireless 1/Wireless 2 > Virtual AP Generating the WEP Key The following example is when Wireless 1 is set to ath0. Authentication: Open System/Shared Key (default) Encryption: WEP RC4 128 (104) Key Generator: Desired character string of up to 31 characters (example: ICOM) 1 2 Click [Wireless Settings] and [Wireless 1], and then click [Virtual AP]. Select [WEP RC4 128 (104)] for Encryption and enter the desired character string of up to 31 characters into Key Generator. Make sure Open System/Shared Key is selected. q Select w Enter The generated WEP Key is displayed. 3 4 Click [Apply]. Click [Reboot]. Click Follow the instructions to reboot the AP-90M. 5 After the reboot is complete, click [Back]. About the Key Generator The Key Generator is not compatible with other than Icom products. Enter the desired characters to automatically generate the WEP key into the text box. The generated digits or characters differ, depending on the Encryption setting. 3-7

40 3 CONNECTING TO A WIRELESS LAN (BASIC) 4. Automatically setting the SSID and Shared Key Using the WPS (Wi-Fi Protected Setup) function, you can use the SSID and Shared Key that are automatically generated in the AP-90M and the PC (WPS compatible). To manually set the SSID and Security without using the WPS function, see page 2-9. Wireless Settings > WPS Enabling the WPS function The Push Button method is used an example. ( p.1-12) If you enable the WPS function, the [WPS] button on the AP-90M s back panel is enabled. Changing SSID and Security on the Virtual AP screen (example: ath0) will be disabled. 1 2 Click [Wireless Settings], and then click [WPS]. Select the Virtual AP to use the WPS function. (Example: ath0) (default: None) Select 3 Select [Automatic Setting by WPS] for SSID and Security and then click [Apply]. A reboot is required to apply all the new settings. is displayed. To use the SSID and Shared Key that are manually set to the AP-90M, select Use the Virtual AP settings. (default) q Select w Click 4 Click [Reboot]. Click Follow the instructions to reboot the AP-90M. 5 After the reboot is complete, click [Back]. 3-8