WI-AC150

AC Controller User Manual

1
 This manual is subject to guide users on how to use this Network Gateway and WLAN
Controller properly, suit for those familiar with basic networking knowledge and
terminology,
It including the product main features such as packing content, hardware introduce and
AC Controller, Routing, Firewall, Management,VLAN Setting and VPN Setting. It is
highly recommended to learn this manual before starting the configuration.

Content:

Chapter 1: Product Instruction, Default Data, Packing....................................................3

Chapter 2: Hardware Introduce....................................................................................... 4
Chapter 3: Login..............................................................................................................4
Chapter 4: WEB GUI Configuration.................................................................................5
4.1 AC................................................................................................................6
4.1.1 Device List.......................................................................................6
4.1.2 Server Config...................................................--.............................7
4.1.3 Zero Config......................................................................................8
4.1.4 Device Group.................................................................................10
4.1.5 Device Log.....................................................................................11
4.2 LAN............................................................................................................11
4.2.1 LAN ...............................................................................................12
4.2.2 Static DHCP...................................................................................13
4.3 WAN...........................................................................................................13
4.3.1 WAN Setting...................................................................................13
4.3.2 Load Balance..................................................................................15
4.3.3 Policy Routing.................................................................................15
Chapter 5 Behavior.........................................................................................................18
Chapter 6 Flow Control...................................................................................................18
Chapter 7 Security Center..............................................................................................19
7.1 Port Mapping.....................................................................................19
7.2 URL Filter..........................................................................................20
7.3 IP Filter..............................................................................................20
7.4 MAC Filter..........................................................................................21
7.5 DMZ...................................................................................................21
Chapter 8 IP/Time Group................................................................................................22
Chapter 9 Authentication.................................................................................................22
Chapter 10 Routing.........................................................................................................27
Chapter 11 Device..........................................................................................................28
11.1 Management...................................................................................28
11.2. Device Log.....................................................................................29

2
 11.3. Firmware Upgrade.........................................................................29
11.4 Modify Password............................................................................29
11.5 Maintenance.................................................................................30
11.6 Reboot Device................................................................................30
11.7 System time....................................................................................31
Chapter 12: Cloud..........................................................................................................32
Chapter 13: DDNS.........................................................................................................32

3
Chapter 1: Product Instruction, Default Data, Packing

1.1 Product Instruction:

WI-AC150 is an SMB Gateway and WLAN Controller, With main function of Router, AC
Controller, Management, VLAN Management functions;
Work as a router, it can access into 500 end users, to do advertisement and captive portal
authentication。
Work as a controller, it can manage 150PCS FIT wireless access points produced by
The working diagram showed as follow:

1.2 Default Data:

Management IP address & LAN IP address: 192.168.10.1
Login Password: admin
WAN 1 IP address: Dynamic IP Access

1.3 Packing and Accessory

 Gateway & WLAN Controller
 Power Cable
 Setting Accessory
 User Manual
 Warranty Card

Chapter 2: Hardware Introduce

Hardware:

WAN1: WAN Port in Default

WAN2/LAN5; WAN3/LAN4; WAN4/LAN3: LAN Ports in default, but can set up as WAN
ports in gateway operation mode based on needs.
LAN1, LAN 2: LAN Ports in default
CONSOLE: serial port
Power: When power on, power LED indicator will be on;
RUN: When this device run in good status, this LED indicator will be flashing

Chapter 3: Login
3.1: Setup an IP address for PC, The IP address should be anyone between
192.168.10.2~192.168.10.254;

4
3.2 Open IE browser, input AC Controller’s IP address 192.168.10.1, Enter to log in AC
controller’s WEB GUI.

3.3 Input login password, the default password is admin, then click on Login button.

Chapter 4: WEB GUI Configuration

When login this AC controller, the following home page will pop up as follow:

5
Hardware Info: Mean the CPU, Memory usage status
RealTime Users: Mean the QTY of end users access into it when it work as Gateway.
Link Count: Mean the QTY of internet link.
Auth User count: The QTY of authentication users.

Network Port Status: Show the WAN/LAN Ports

connect status; Green mean connected; Yellow mean not connected
Device Basic Status: The status of system time, uptime, MAC address, firmware version.
Max AP Count: QTY of wireless AP connected, MAX is 200, Online AP show working AP,
Offline AP mean not working AP; WLAN Users: User QTY connected to wireless AP
Behavior: Mean users behavior, for example, user use QQ, Ali Wangwang, WeChat...
Real time speed: Mean the WAN Ethernet speed, different WAN with different color
Uptime: Mean AC controller running time

: Log out the WLAN Controller

Let’s introduce AC, LAN, WAN, Behavior, Flow Control and other function one by one to
make users with more understanding in this product.

4. 1. AC
AC: Wireless AP control and management
Click button of AC, it will pop up following picture, which showed all the wireless AP
connected into this WLAN controller.
4.1.1 Device List
Device List to show the online/offline wireless AP list.

All AP: Show QTY of wireless AP which connected with this WLAN controller
Offline AP: Show QTY of wireless AP which offline already
Online AP: Show QTY of wireless AP which online
WLAN Users: Show QTY of end users which access into wireless AP.
Search: Search the wireless AP by IP address or MAC address

6
Batch Set: Set Channel, TX Power, Time to restart, Max users, device login password in
batch.
Delete: Delete the choosed wireless AP from this device list.
Reboot: Restart this wireless AP
Reset: return to factory default
Upgrade: Upgrade firmware.

: if tick it, mean select all the wireless AP; If tick here, mean select this
wireless AP;
Name: Can mark AP the location or model number other information which easy to know
this wireless AP.
IP: The wireless AP’s IP address
MAC: MAC address of wireless AP
SSID: Show the SSID of device 1 and device 2
Users: Mean how many users connected with this wireless AP
Channel: Show this wireless AP’s channel, including device 1 and device 2
TxPower: Mean the wireless AP’s RF power
Device Model: Model number of this wireless AP
Uptime: running time
Group: Show group name directly, N/A mean no group for this wireless AP;

Config : to check the wireless AP’s working status, configure the wireless AP’s basic
and advanced data.

4.1.2: Server Config:

Server: Mean this AC controller can assign IP address for wireless AP automatic, no need
to change wireless AP’s IP address one by one

7
Refresh: to refresh the wireless AP’s IP address
Function: Enable/Disable, default is Enable
Server IP address: default is 192.168.200.1; can change to anyone you like, but pls note,
if server IP is 192.168.200.1, then wireless AP’s IP address will be one from
192.168.200.2 to 192.168.200.254, to 192.168.201.X, to 192.168.202.X... if server
address count is 1500.
Server Address Count: default is 1500, can be 1~1500, based on the QTY of wireless
AP.
Effective Time: can be 1~24 hours
Allocated AP number: show the QTY of wireless AP which assigned IP address by this
WLAN controller.
When setup the above data, click Apply to save it.

AP address information list: to show wireless AP’s model number, IP address, MAC
address and running time.

4.1.3: Zero Config

This function make wireless AP plug and play, but recommend to configure this function
before connect wireless AP into this network as following reason:
1. If configure this function after wireless AP connected into this network, then all wireless
AP should be reboot, then wireless AP will get the configuration from Zero config.
2. There is one group only in Zero config, which will make all wireless AP in same SSID,
password, channel..., if want to different AP in different group, recommend Device Group
function in 4.1.4.

8
Wireless Basic: to setup wireless AP’s SSID, password, Tag VLAN
Device List: Wlan Device 1 and Wlan Device 2; Wlan Device 1 mean 2.4G Radio mainly;
Wlan Device 2 mean 2.4G or 5.8G radio, based on wireless AP.
Main AP Configuration: setup the wireless AP’s main SSID, Tag VLAN, Configure
Password.
Virtual AP Configuration: setup the wireless AP’s virtual SSID, Tag VLAN, Configure
Password. The default status is disable for this virtual SSID.
Automatic Reboot at: Mean can setup this wireless AP reboot at certain time automatic,
to improve the performance.
Wireless Advanced: to set up the channel, RF power, ShortGI, Coverage Threshold of
wireless AP

9
Channel: Auto in default, but recommend to setup channel by manual based on
environment.
RF Output Power: 100%, 75%, 50%, 25%, 12.5%, can adjust it based on application.
More RF Power, mean more WiFi Range;
Coverage Threshold: This make end users to connect the outdoor CPE with stronger

signal strength;

For example, If one outdoor CPE with -80dBm coverage threshold data, another outdoor

CPE with -95dBm coverage threshold data, then end users will connect the outdoor CPE

with -95dBm coverage threshold always even this outdoor CPE with very weak signal

strength.

After setup all the data, click Apply to add zero config group as follow:

Please note, click config button , can modify the parameters if need.

Delete Group: If need, can delete this zero config group.

4.1.4 Device Group

In device group, can be more than one group, then different AP can be in different group.

The steps is: Add Group----Config Group----Click to Add AP into this group----Wireless
AP will get data from this group.
Please note, the configuration in device group is same as Zero Config.

Add Group

10
Add AP to Group:

4.1.5: Device Log

Device Log is keeping the operation record of this WLAN controller.

11
4.2 LAN
This including LAN setting and Static DHCP
4.2.1 LAN Setting:

IP address: mean AC controller’s IP address

Subnet Mask: to set the subnet of LAN
Spanning Tree: Enable to show the assigned IP list in DHCP list; Disable mean will not
show it.
DHCP Server Setting: Enable mean can assign IP address automatic.
Start IP: The started DHCP IP address
Maximum Allocation: QTY of max DHCP address
DHCP Lease Time: the IP address lease time by DHCP server

12
DHCP allocation number: QTY of IP address that DHCP assigned.

4.2.2 Static DHCP

Static DHCP: Banding certain users with certain IP address by scan MAC address and IP
address;

4.3. WAN
If AC controller work as Gateway also in the whole networking, then we should click WAN,
which including WAN setting, Load Balance, Policy Routing

4.3.1 WAN Setting:

WAN1 is WAN port in default; WAN2, WAN3, WAN4 is LAN ports in default, but can config
as WAN ports, which make Ethernet backup and Ethernet superposition.

When click WAN, it will show following picture, click config button , will show Connect
Method, MTU, Band Type, Downstream, Upstream, DNS Priority, Remote control

13
In connect method, it including Dynamic IP, PPPoE, Static IP, here show one by one:

If WLAN Controller work as controller only, then can disable the WAN function as follow:

14
Remark: When WAN disable, make AC controller connect with gateway’s LAN port, then
AC controller have Ethernet. Under this conditions, AC controller access into cloud server.
For the details configure, please help to refer to Chapter 12 Cloud.

4.3.2 Load Balance

Load Balance is set bandwidth when there are multiple WAN ports; It can detect the IP
address auto or manual;
But please note, when WLAN controller is in multiple WAN, please restart the WLAN
controller by manual.

4.3.3 Policy Routing

Policy Routing is some policy to control the router; Manager can make this policy to
control the router.

15
Policy Type:
Source IP Address: Policy based on source IP address

Destination IP address: Policy based on destination IP address

Source MAC address: Policy based on source MAC address

16
Network Interface: Policy based on router interface

Domain Policy: Policy based on router domain

Destination Port: Policy based on destination port.

17
Chapter 5 Behavior
In behavior part, it allow/reject end users some behavior based on rules.

Status: Enable or Disable

IP Group: Can add the IP group if need based on following picture

Time Group: Can add time group based on requirement in following picture:

18
Application Class: Including
Instant messaging (QQ, Trade Manager, WeChat);
Network Download (Thunder, BT, Edonkey);
Network Video (Youtube, PPTV, Tencent Video, Ppstream, Youku, Sohu Video, Letv,
RSTP, Douyu, Storm web version, funsh, YY)
Office ( FTP, DNS, Http, NTP, NFS, DHCP, RTSP, IRC, Telnet, Stun, System Log, IPSEC,
IGMP, SSH, TFTP, PPTP, Radius, OpenVPN)
Finance and other ( ICMP, Flush, DZH, Eastmoney)

Chapter 6 Flow Control

Flow Control mean Ethernet speed limit, to limit end users Ethernet speed;
Should add IP group first, then choose the limited mode.
Please note: Shared Mode: mean all users end this IP group share the downstream and
upstream Ethernet speed; Exclusive Mode mean each end users in this IP group get the
downstream and upstream.

Chapter 7 Security Center

In this part, including port mapping, IP Filter, Url Filter, MAC Filter, MAC Filter, DMZ

7.1 Port Mapping

Port forwarding: called port forwarding also, it an application of network address
translation(NAT) that redirects a communication request from one address and port
number combination to another while the packets are traversing a network gateway, such
as a router or firewall

19
Status: Enable/Disable
Rule Class: Including user defined, http, https, FTP, POP3, SMTP, DNS, telnet, IPSEC,
Remote Desktop
Rule name: Show the name of choosed rule class;
Protocol: Including TCP, UDP, TCP+UDP
LAN IP: port mapping LAN IP address
External Port: Set external port rule
Internet Port: Set internal port rule
Line: the Ethernet Line which will be applied in this rules

7.2 URL Filter

When enable URL filter, the router can reject users to visit the denied URL.

7.3 IP Filter
When enable this function, router will allow or limited this IP address to access into this

20
router based on rules.

7.4 MAC Filter

When enable MAC filter, router will allow or prohibit this MAC address to access into this
router based on rules.

7.5 DMZ
DMZ or Demilitarized Zone is a physical or logical subnetwork that contains an exposes
an organization’s external-facing service to a usually larger and untrusted network, usually
the Internet. The purpose of a DMZ is to add an additional layer of security to an
organization’s local area network, an external network node can access only what is
exposed in the DMZ, while the rest of organization’s network is firewall.

21
Chapter 8 IP/Time Group
For this part, pls check more on chapter 5 Behavior

Chapter 9 Authentication
There are local authentication and remote authentication.
Remote Authentication:
Remote authentication need to access into cloud server, then make this cloud server as
an authentication server;
A: Authentication: Remote Authentication
B: Port: 2060, no need to change
C. Authentication server: XXX (This is cloud server from XXX, or if you have other server
developed by yourself, can input your server address)
D. Authentication Port: 80, no need to change.
E. Authentication server path: /, no need to change
F: Client Timeout: Mean how long the un-active client will be offline from this network.
G: Url white list: Mean when client visit this domain, no need authentication, click Add
domain to finish.
H: MAC white list: Mean this MAC address access into network, no need authentication,
click scan MAC, choose, then Add MAC to finish.
I: Free Port: mean the authentication will be not valid on some LAN ports

22
Local Authentication:
Local authentication, no need access into cloud server to do the captive portal
authentication. Here we show the step one by one:
1st : in Auth Switch, change to local authentication in authentication, fill in the client timeout,
Url white list, MAC white list and Free Port.

B. Upload advertisement pictures in local auth showed in following picture:

2nd: Click Local Auth page, design the advertisement page:
Auth Title: the title of this advertisement, which will be showed before verify into the
networking.
Pictures: Here can upload three pictures in total, choose the picture, then update, please
make sure, the picture can’t be more than 200K.
Guide Url: this is the website will be jump to after authentication. Pls make sure this site is
http:// format.
Auth Time: mean how long this authentication will be lasted.

23
Free auth days: which day this authentication is invalid.
Page color: choose the color you are prefer to.
When finish here, click Save to finish.

3rd: Config the Local Auth Params: main to setup the authentication method, Wechat Auth,
Onekey Auth(No Auth), SMS Auth, Member Auth, Custom Auth, Radius available.

Wechat Auth: Input the Wechat ID and password, then apply it.
Please note: this authentication not suit for oversea customer, because there is no English version
APPID and password create page

Onekey Auth: mean no auth, when showed the advertisement pictures, click onekey auth, then
access into this network and get the Ethernet.

SMS Auth: Get authentication code by messages, but this have to work with SMS gateway, or
work with cloud server.

24
Member Auth: can port member list by data spread form, or can work with other radius server to
do the member auth.

Custom Auth: need to banding the auth API, have to contact with supplier for this part if want
to do this.

Radius: can work with other radius server, make it work as authentication server.

25
4th: Set up the local auth policy for users: Like which IP address will get the authentication, and
what time they will be authenticated, which authentication method will be pop up, apply to save.

5th: do the member management for authentication users. Can import or export this member list
if need. Please note: ID Card No.: This is for Chinese people, no need to input if for oversea
customer. Apply to finish this authentication.

26
Chapter 10 Routing
Including system routing and static route
In System routing, it show system routing form as follow:

Static Route: add the static router based on destination IP address.

Chapter 11 Device
This is management for WLAN Controller, such as backup, reset, reboot, device log,
upgrade firmware, modify password...

27
11.1 Management

Backup
Save the WLAN controller configuration file to your computer, can restore to the same
configuration if restore this file.
Restore
Using the saved configuration file to recovery configuration
Restore default
Restore the factory default settings, please press this button

11.2. Device Log

Device Log
Enable or Disable to show system log
Remote Log Service
To decide whether send System log into some pointed remote server synchronously;

28
11.3. Firmware Upgrade
This feature allows the device firmware upgrade.
Noted:Upgrading software may cause system outage, In the process of upgrading the
firmware, do not power off, otherwise it may damage the AC controller!

11.4 Modify Password

Modify the login password here:

11.5: Maintenance
In this part, including two part:
Timer reboot: Reboot in certain time everyday.
Telnet server

29
11.6 Reboot Device
To Reboot the WLAN controller now

11.7 System time

30
Sync with the host
Synchronization time with connected PC and router
NTP Eable
Enable or Disable NTP
NTP Server
Select the server time synchronization
Manual IP Setting
Setting user-defined IP address
Time Zone Select
Setting the router’s time zone

Chapter 12 Cloud
Cloud server is under developing, please wait...

Chapter 13 DDNS
DDNS or Dynamic DNS, is a method of automatically updating a name server in the
Domain Name System(DNS), often in real time, with the active DDNS configuration of its
configured hostname, address or other information.

31