Altai AP Generic Web UI Configuration Manual

Altai Super WiFi Access Point
____________________________________________________________________________________
Web UI Configuration Manual

For Firmware Release 2.1.0
Version 1.0
Altai Technologies Ltd. All rights reserved

Federal Communication Commission Interference Statement (FCC) – USA
This equipment has been tested and found to comply with the limits for a Class B digital
device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference in a residential installation. This
equipment generates, uses and can radiate radio frequency energy and, if not installed
and used in accordance with the instructions, may cause harmful interference to radio
communications. However, there is no guarantee that interference will not occur in a
particular installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off and on, the
user is encouraged to try to correct the interference by one of the following measures:
• Reorient or relocate the receiving antenna.

• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to which the
receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help.
FCC Caution: Any changes or modifications not expressly approved by the party
responsible for compliance could void the user's authority to operate this equipment.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following
two conditions: (1) This device may not cause harmful interference, and (2) this device
must accept any interference received, including interference that may cause undesired
operation.
This transmitter must not be co-located or operating in conjunction with any other
antenna or transmitter.
Operations in the 5.15-5.25GHz band are restricted to indoor usage only.
IMPORTANT NOTE:
FCC Radiation Exposure Statement:
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled
environment. This equipment should be installed and operated with minimum distance
25cm between the radiator & your body.
European Conformity (CE) – EU
This is a Class B product. In a domestic environment, this product may cause radio
interference, in which case the user may be required to take adequate measures.
ii

Warning
AP may require professional installation depending on the deployment scenario.
Only use the power adaptor supplied with AP. Using a different power adaptor might
damage AP.
Disclaimer
All specifications are subject to change without prior notice. Altai Technologies assumes
no responsibilities for any inaccuracies in this document or for any obligation to update
information in this document. This document is provided for information purposes only.
Altai Technologies reserves the right to change, modify, transfer, or otherwise revise this
publication without notice.
iii

Table of Contents
1. INTRODUCTION ........................................................................................................................ 1
2. ACCESS TO WEB ADMINISTRATION INTERFACE (WEB UI) ...................................................... 2

2.1. Configure TCP/IP Setting on Your Computer................................................................................... 2
2.2. Login to the AP (via Ethernet) ............................................................................................................ 2
Secondary IP Address of Altai Access Points ................................................................................... 3
2.3. AP Menu Tabs and Shortcut Links...................................................................................................... 4
2.4. Status Overview ................................................................................................................................... 8
System Status ........................................................................................................................................ 9
Remote Management Status ............................................................................................................ 9
Network Status ................................................................................................................................... 10
Interfaces – Ethernet (eth0/eth1) .................................................................................................... 11
Interfaces – Radio0(2.4G) ................................................................................................................. 11
Interfaces – Radio1(5G) .................................................................................................................... 15
3. SYSTEM AND IP SETTING ........................................................................................................ 19

3.1. System Info Setting ............................................................................................................................ 19
3.2. Assigning an IP Address to AP .......................................................................................................... 25
Assigning Static IPv4 IP Address ....................................................................................................... 25
Assigning IPv4 IP Address from DHCP server .................................................................................. 26
Assigning Static IPv6 IP Address ....................................................................................................... 27
Assigning IPv6 IP Address from DHCP server .................................................................................. 28
4. RADIO SETTINGS .................................................................................................................... 29

4.1. Access Point Mode ........................................................................................................................... 29
Radio0 – 2.4G, General Wireless Settings (A2 Series, A3 Series, C2s, C1n, and C1xn) ............. 29
Radio0 – 2.4G, General Wireless Settings (A8n Series).................................................................. 33
Radio1 – 5G General Wireless Settings (A2 Series, A3 Series, A8n Series, C2s, C1an, and
C1xan)................................................................................................................................................. 37
WLAN Settings .................................................................................................................................... 41
4.2. Station Mode...................................................................................................................................... 60
Station Configuration for Radio0 (2.4G) / Radio1(5G) ................................................................. 60
4.3. Repeater Mode ................................................................................................................................. 74
Repeater Configuration for Radio0 (2.4G) / Radio1(5G) ............................................................ 74
4.4. Bridge Mode....................................................................................................................................... 78
Bridge Configuration for Radio1(5G) .............................................................................................. 78
5. WIRELESS ADVANCED RADIO SETTINGS ............................................................................... 83
6. VLAN CONFIGURATION ........................................................................................................ 89

6.1. Enable VLAN ...................................................................................................................................... 89
6.2. Create VLAN Profile........................................................................................................................... 90
iv

6.3. Select Management VLAN .............................................................................................................. 91
6.4. Assign an Interface as Trunk VLAN .................................................................................................. 92
6.5. Assign an Interface as an Access VLAN ........................................................................................ 93
7. OTHER SYSTEM SETTINGS ....................................................................................................... 94

7.1. Network Time Protocol (NTP) Settings ............................................................................................. 94
7.2. Auto Refresh & HTTP Port Configuration ......................................................................................... 94
7.3. Management IP Settings .................................................................................................................. 95
8. STP .......................................................................................................................................... 97
9. SAFE MODE ............................................................................................................................ 98
10. QUALITY OF SERVICE (QOS) ................................................................................................. 99

10.1. QoS for Each Radio ........................................................................................................................... 99
10.2. DSCP-to-WMM Mapping for SSID(s) .............................................................................................. 100
11. IP GATEWAY......................................................................................................................... 101

11.1. IP Gateway ....................................................................................................................................... 101
Configure WAN IP Setting ............................................................................................................... 101
Configure Radio Settings ................................................................................................................ 101
Enable Gateway Mode .................................................................................................................. 101
Configure LAN IP Setting................................................................................................................. 101
WAN / LAN Interface Assignment & NAT Setting ........................................................................ 102
11.2. DHCP Server ..................................................................................................................................... 102
Configure as Gateway Mode ....................................................................................................... 103
Enable DHCP Server ........................................................................................................................ 103
Assign IP Address Range for Leasing on DHCP Server................................................................ 104
11.3. Port Forward ..................................................................................................................................... 105
Configure as Gateway Mode ....................................................................................................... 105
Configure Port Forwarding ............................................................................................................. 105
12. REMOTE MANAGEMENT ...................................................................................................... 107

12.1. AP managed by AltaiCare ............................................................................................................ 107
12.2. AP managed by Access Controller .............................................................................................. 108
13. WEB UI ADMINISTRATION .................................................................................................... 110

13.1. HTTPS Certification ........................................................................................................................... 110
13.2. User Administration .......................................................................................................................... 111
Local authentication ...................................................................................................................... 111
RADIUS authentication ................................................................................................................... 112
14. CONFIGURATION BACKUP AND FIRMWARE MANAGEMENT............................................ 113

14.1. Backup & Restore Device Configuration ..................................................................................... 113
Backup Device Configuration ....................................................................................................... 113
v

Restore Device Configuration ....................................................................................................... 113
14.2. Firmware Update ............................................................................................................................. 113
14.3. Factory Default ................................................................................................................................ 114
14.4. Default Configuration Customization ........................................................................................... 115
15. SNMP .................................................................................................................................... 117

15.1. SNMP Configuration ........................................................................................................................ 117
15.2. Trap Host Setting .............................................................................................................................. 118
16. RADIO AND CONNECTION STATUS .................................................................................... 119

16.1 Radio0(2.4G)/Radio1(5G) Status Info ........................................................................................... 119
16.2 Radio0(2.4G)/Radio1(5G) Association List ................................................................................... 121
16.3 Radio0(2.4G)/Radio1(5G) Connection Info ................................................................................ 122
16.4 Radio1(5G) Connection Info (Bridge) .......................................................................................... 123
16.5 Ethernet Status ................................................................................................................................. 123
17. ADDITIONAL TOOLS ............................................................................................................. 124

17.1. System Logs ...................................................................................................................................... 124
17.2. Historical Statistic ............................................................................................................................. 125
17.3. Channel Scan .................................................................................................................................. 126
17.4. Ping Test ............................................................................................................................................ 126
17.5. Traceroute Test................................................................................................................................. 128
17.6. Tcpdump .......................................................................................................................................... 129
17.7. Watchdog ........................................................................................................................................ 130
Schedule Reboot............................................................................................................................. 130
Ping Watchdog................................................................................................................................ 131
18. PRODUCT INFORMATION .................................................................................................... 133
vi

AP Web UI Configuration Manual
1. Introduction
This guide covers the initial configuration for all models of Altai Super WiFi Access Point via
its built-in Web Administration Interface (Web UI). In there, you can configure, monitor,
and manage the device using any common web browsers. Mozilla Firefox, Google
Chrome, and Internet Explorer 8+ are recommended.
This guide, with the firmware general availability release 2.1.0, is applicable to the
following AP models and hardware platforms:
Model Name Product Code Hardware Ver.

A2 SD.A2-0000-00 2.0 ++
A2e SD.A2-E000-00 2.0 ++
A2 (ac) SD.A2AC-2222-000 2.0 ++
A2e (ac) SD.A2AC-2223-000 2.0 ++
A2c SD.A2-2221-000 1.0 ++
A2-Ei SD.A2-EH00-00 2.0 ++
A3c SD.A3-C000-00 1.0 ++
A3w SD.A3-W000-00 1.0 ++
A3-Ei SD.A3-EH00-00 1.0 ++
A8n(ac) SD.A8-NAC0-00 1.0 ++
A8-Ein(ac) SD.A8-EHNAC-00 1.0 ++
A8in(ac) SD.A8-HNAC-00 1.0 ++
A8n SD.A8-N000-00 1.0 ++
A8-Ein SD.A8-EHN0-00 1.0 ++
A8in SD.A8-HN00-00 1.0 ++
C2s C2-2221-000 1.0 ++
C1n SD.C1-N000-00 1.3 ++
C1xn SD.C1-XN00-00 1.3 ++
C1an SD.C1-AN00-00 1.2 ++
C1xan SD.C1-XAN0-00 1.2 ++
Table 1 – Compatible AP Models and Hardware Versions
1
2. Access to Web Administration Interface (Web UI)
This chapter covers the procedures for logging into / out AP Web Administration Interface
(Web UI) via Ethernet, and walks you through the device status check.
2.1. Configure TCP/IP Setting on Your Computer

1. For Windows XP or Windows 7 OS, open the Network Connections (or Change adapter
settings) via the following ways:
On Windows XP, click Start > Control Panel > Network Connections
On Windows 7, click Start > Control Panel > Network and Internet > Network and
Sharing Center > Change adapter settings
2. Right-click the icon for Local Area Connection, and then click Properties.
3. A dialog box “Local Area Connection Properties” appears. Under the Networking tab,
click Internet Protocol (TCP/IP) (or Internet Protocol Version 4 (TCP/IPv4)) in the list box,
and then click Properties.
4. Another dialog box “Internet Protocol (TCP/IP) Properties” pops up. Configure IP
address and subnet mask settings as specified in Table 2.
IP Address Any address in the subnet 192.168.1.x, except

192.168.1.222 and 192.168.1.255
Example: 192.168.1.2
Subnet Mask 255.255.255.0
Default Gateway Leave it blank
DNS Leave it blank
Table 2 - Configure administrative computer’s IP address settings
5. Click OK to save the changes and close the “Internet Protocol (TCP/IP) Properties”
dialog box.
6. Click OK again to close the “Local Area Connection Properties” dialog box.
2.2. Login to the AP (via Ethernet)

1. Make sure the AP is in operation with Power LED on solid green
2. Open a Web browser on the computer
3. Type http://192.168.1.222 or https://192.168.1.222 in the address bar and then hit Enter
4. Login page will come up. Enter the default credentials below:
Username: admin
Password: admin
5. Click Login button
2
Figure 1 - AP Login Page
Secondary IP Address of Altai Access Points

In addition to default IP address: 192.168.1.222/24. Altai AP supports Secondary IP Address
as backdoor IP for emergency Ethernet access. This IP is permanent and assigned on the
subnet of 192.168.99.x/24 where x denotes the decimal value of the last byte of the
Ethernet MAC address on the access point.
Example 1:
Device Ethernet MAC address: 00:19:BE:20:03:8C
Secondary IP Address of this device is:
192.168.99.140 (8C (HEX) 140 (DEC))
The secondary IP address occupies the range from 192.168.99.5 to 192.168.99.254. The rest
of IP addresses are reserved for particular purposes. If the last byte of MAC address
matches any of the reserved IP addresses, the supported device shall follow the MAC to
IP address mapping shown in Table 3:
3
Ethernet MAC Reserved Last MAC Byte Secondary IP

Address Purpose Replaced By Address
XX:XX:XX:XX:XX:00 Invalid IP A0 192.168.99.160
XX:XX:XX:XX:XX:01 For gateway A1 192.168.99.161
For operator
XX:XX:XX:XX:XX:02 A2 192.168.99.162
computer
For operator
XX:XX:XX:XX:XX:03 A3 192.168.99.163
computer
For operator
XX:XX:XX:XX:XX:04 A4 192.168.99.164
computer
XX:XX:XX:XX:XX:FF Invalid IP AF 192.168.99.175
Table 3 - Secondary IP Address
Example 2:
Device Ethernet MAC address: 00:19:BE:20:03:FF
Secondary IP Address of this device is:
192.168.99.175 (FF (HEX)AF (HEX)175 (DEC))
2.3. AP Menu Tabs and Shortcut Links

Once access to the AP Web UI, you will find two layers of menu bars and a bunch of
shortcut links showing up on each page for fast navigation and operation. The menu bars,
consisting of Primary Tabs and Secondary Tabs, are placed at the top of the content
window to provide various AP operation, e.g. monitoring, configuration, administration,
troubleshooting tools, and AP device information. Besides, some useful shortcut links,
located in the top right corner of the Web UI, are available for common operation such
as AP reboot, log file download and system logout.
Shortcut Links
Primary Tabs
Secondary Tabs
Figure 2 – AP Menu Tabs and Shortcut Links

4
Status:
Figure 3 - Tabs of Status Section
Under Status tab, you can view AP current status about the AP system itself, radio and
Ethernet interfaces, and system logs, which are all displayed in the different secondary
menu tabs below:
Overview Summarizes the entire device’s status related to AP system itself,

remote management, network, and Ethernet & radio interfaces
Radio0 (2.4G) or Displays 2.4G or 5G radio information including radio settings,

Radio1 (5G) channel usage, nearby AP list, radio Transmit/Receive statistics,
WLAN statistics, station association list, etc.
Ethernet Shows the current status of Ethernet interfaces, such as MAC

address, auto-negotiation status, speed and duplex mode status,
link detection status, real-time uplink (Tx)/downlink (Rx)
throughput, and accumulated uplink (Tx)/downlink (Rx) traffic
statistics
Logs Provides different kinds of logs such as syslog and wifi log, and
historical statistics data about system and interfaces for download
Configuration:
Figure 4 - Tabs of Configuration Section
Under Configuration tab, you can configure the device in different aspects below:
System Configure system information, logging control, trusted IP

management, Network Time Protocol (NTP), and Web setting
Network Configure network mode setting, IPv4/IPv6 network setting,

WAN/LAN interface assignment, STP, VLAN, DHCP server, port
forwarding, and safe mode
Wireless Configure radio-related settings for 2.4G and 5G radios. It includes

radio mode, wireless mode, channel, Tx power, band steering
mode, layer 2 user isolation, WLAN (SSID) settings and security
mode, bandwidth control, QOS, etc.
Remote Mgmt Configure AP as thin AP mode for remote management via

AltaiCare or Access Controller
5
Administration:
Figure 5 - Tabs of Administration Section
Under Administration tab, you can perform administrative operation on the device in
different aspects below:
User Admin Manage user accounts for the user login to the device
SNMP Configure SNMP settings for remote network management and

monitoring, e.g. AWMS
Certificate Upload certification file and key file for HTTPS connection (Port
443) to the device
Firmware Update Upload firmware image on the device for getting updates with
new features and bug fixes
Factory Default Perform factory reset for the device
Backup/Restore Perform configuration file backup and restore for the device
Customization Perform customized factory default settings for the device
Tools:
Figure 6 - Tabs of Tool Section
Under Tools tab, you can make use of the following tools for network deployment and
troubleshooting.
Channel Scan Perform channel scan on 2.4G and 5G radio for the AP
surroundings. It gathers wireless information including noise floor,
channel air busy percentage and number of AP/BSS for each
channel
Diagnosis Provides testing tools such as ping, traceroute, and packet

capture for network troubleshooting
Watchdog Provides automatic operation features such as scheduled reboot,

scheduled log file upload, and ping watchdog for fail-safe
operation and maintenance
6
About:
Figure 7 - Secondary tabs under About tab
Under About tab, you can find out product information related to hardware, firmware
and company information.
Shortcut Links:
Figure 8 – Shortcut Links
简体中文/English Swap the Web UI language between simplified Chinese and

English
Reboot AP Perform AP reboot
Logout Log out from the Web UI
Unsaved Changes Lists all unsaved configuration changes. You can discard the
changes and revert to previous settings in there
Save & Apply Make all configuration changes take effect
Download Logs Download ALL log files packaged in a tarball from the device
7
2.4. Status Overview

The status overview page consists of 4 major windows: (1) System; (2) Remote
Management; (3) Network; (4) Ethernet Interface; (5) Radio0(2.4G) Interface; and (6)
Radio1(5G) Interfaces.
2
4
Figure 9 – AP Status Overview Page
8
System Status
Figure 10 – System Status
System Name Displays AP name for device identification. It is configurable under

Configuration tab
Product Name Displays product name/model of the AP
CPU Usage Displays current CPU usage out of the total CPU resources
available
Memory Usage Displays current Memory usage out of the total Memory resources
available
Time of Day Displays current date and time for the system time which is
synchronized with a provided NTP server (see Section for the
configuration)
Uptime Displays how long the AP has been running after the last
reboot/power cycle
Remote Management Status
Figure 11 – Remote Management Status
Remote Mgmt Shows the thin AP mode status for the AP. If off, that means it is
running in fat AP or standalone AP mode
9
Status Displays the connection status between the AP and the remote
management server, e.g. AltaiCare or Access Controller
Connect Time Displays how long the connection is up since the AP successfully
associates with the server
Network Status
Figure 12 – Network Status (Switch Mode)
IPv4 DHCP Client Applicable to the case when DHCP client is enabled for IP
connection. It shows if the AP can successfully obtain IP from the
DHCP server
Disabled For the case when the AP is configured using static IP
Success For the case when the AP is configured using DHCP and successfully
obtains IP address from the DHCP server
Failed For the case when the AP is configured using DHCP but unable to obtain
IP address from the DHCP server
IPv4 Address Shows the IPv4 address the AP is currently using
IPv4 Subnet Mask Shows the IPv4 subnet mask for the AP IP
IPv4 Default Gateway Shows the IPv4 address of the default gateway which the AP is
using. For the packets which are not destined for the local
network, AP will forward those packets to the gateway
IPv4 DNS Server Shows the IPv4 address of the DNS server(s) which the AP is using
when it comes to domain names to be resolved to IP
10
Interfaces – Ethernet (eth0/eth1)
Figure 13 – Ethernet Interface
MAC Shows the MAC address of the Ethernet interface
Link Shows the link status with transmission mode for the Ethernet
interface
Transmit: xKB (yKbps) x denotes the accumulated data transmitted by the AP via
Ethernet interface. y denotes the real time speed of data being
transmitted by the AP via Ethernet interface
Receive: xKB (yKbps) x denotes the accumulated data received by the AP via Ethernet
interface. y denotes the real time speed of data being received
by the AP via Ethernet interface
Interfaces – Radio0(2.4G)
This section shows various indicators related to AP performance for different radio mode
operation on 2.4G radio. By default, the interface is set to AP mode. To switch to other
modes, refer to Section.
Note: This section is not applicable to C1an and C1xan models.
AP Mode
Figure 14 – Radio0(2.4G) Interface for AP mode
MAC Displays MAC address of the Radio0(2.4G) interface
Mode Displays the AP radio operation mode. For this case, it should show
and be running in “AP” mode.
11
Channel Displays current frequency channel on which the interface is

operating
WLANs Displays current number of SSIDs being broadcasted by the AP via

this interface
Wireless Mode Displays current wireless mode which the interface is operating
Clients Displays the number of clients being associated to the AP via this
interface
Noise Level Displays noise level (in dBm) of the current 2.4G channel on which
the AP is in operation
In A8n and A8n(ac) series, there are four different sector antennas
and each of them has its own noise level figures according to their
respective RF condition
Busy Displays the air busy% or utilization of current frequency channel

on which the AP is operating. This value can be contributed by the
AP itself (Tx%) and the surrounding APs and clients (Rx%)
In A8n and A8n(ac) series, each of the four sector antennas has its
own busy% level according to their respective RF condition
Transmit Power Displays current AP transmit power (in dBm)
Radio0(2.4G) interface. y denotes the real time speed of data
being transmitted by the AP via Radio0(2.4G) interface
Receive: xKB (yKbps) x denotes the accumulated data received by the AP via
being received by the AP via Radio0(2.4G) interface
12
Station Mode
Note: This section is not applicable to A8n and A8n(ac) series.
Figure 15 – Radio0(2.4G) Interface for Station Mode
MAC Displays MAC address of the Radio0(2.4G) interface
and be running in “Station” mode

operating
Connection Displays the status of wireless connection with the remote AP for
the device (as Station mode)
AP SSID Displays the SSID which the Station is currently associated to
Noise Level Displays noise level (in dBm) of the current 2.4G channel on which
the device is in operation
AP SNR Displays the SNR of the remote AP signal received at the device
(as Station)
Transmit Power Displays current transmit power (in dBm)

on which the device is operating. This value can be contributed
by the device itself (Tx%) and the surrounding APs and clients
(Rx%)
Transmit: xKB (yKbps) x denotes the accumulated data transmitted by the device via
being transmitted by the device via Radio0(2.4G) interface
13
Receive: xKB (yKbps) x denotes the accumulated data received by the device via
being received by the device via Radio0(2.4G) interface
Repeater Mode
Note: This section is not applicable to A8n and A8n(ac) series.
Figure 16 – Radio0(2.4G) Interface for Repeater Mode
and be running in “Repeater” mode
the device (as Repeater mode)
AP SSID Displays the SSID which the Repeater is currently associated to
(as Repeater)
WLANs Displays current number of SSIDs being broadcasted by the

device (as Repeater mode) via this interface
Clients Displays the number of clients being associated to the device (as
Repeater mode) via this interface
14
Interfaces – Radio1(5G)
This section shows various indicators related to AP performance for different radio mode
operation on 25G radio. By default, the interface is set to AP mode. To switch to other
modes, refer to Section.
Note: This section is not applicable to C1n and C1xn models.
AP Mode
Figure 17 – Radio1(5G) Interface for AP mode
MAC Displays MAC address of the Radio1(5G) interface
and be running in “AP” mode

operating
WLANs Displays current number of SSIDs being broadcasted by the AP via

this interface
Clients Displays the number of clients being associated to the AP via this
interface
Noise Level Displays noise level (in dBm) of the current 5G channel on which
the AP is in operation

on which the AP is operating. This value can be contributed by the
AP itself (Tx%) and the surrounding APs and clients (Rx%)
Transmit Power Displays current AP transmit power (in dBm)
15
Radio1(5G) interface. y denotes the real time speed of data

being transmitted by the AP via Radio1(5G) interface
Receive: xKB (yKbps) x denotes the accumulated data received by the AP via
being received by the AP via Radio1(5G) interface
Station Mode
Figure 18 – Radio1(5G) Interface for Station mode
MAC Displays MAC address of the Radio1(5G) interface
and be running in “Station” mode

operating
the device (as Station mode)
AP SSID Displays the SSID which the Station is currently associated to
Noise Level Displays noise level (in dBm) of the current 5G channel on which
the device is in operation
(as Station)
Transmit Power Displays current transmit power (in dBm)

on which the device is operating. This value can be contributed
16
by the device itself (Tx%) and the surrounding APs and clients
(Rx%)
Transmit: xKB (yKbps) x denotes the accumulated data transmitted by the device via
being transmitted by the device via Radio1(5G) interface
Receive: xKB (yKbps) x denotes the accumulated data received by the device via
being received by the device via Radio1(5G) interface
Repeater Mode
Figure 19 – Radio1(5G) Interface for Repeater mode
and be running in “Repeater” mode
the device (as Repeater mode)
AP SSID Displays the SSID which the Repeater is currently associated to
(as Repeater)
WLANs Displays current number of SSIDs being broadcasted by the

device (as Repeater mode) via this interface
Clients Displays the number of clients being associated to the device (as
Repeater mode) via this interface
Bridge Mode
Figure 20 – Radio1(5G) Interface for Bridge mode
17
and be running in “Bridge” mode
Remote Bridge Displays the 5G MAC address of the remote bridge device
Connection Displays the connection status of the wireless bridge
Remote Bridge SNR Displays the SNR of the remote bridge signal received at the local
bridge device
18
3. Basic System Setting
3.1. System Info Setting
Figure 21 - System Info Setting
Directory: Configuration > System > Sytem Info Setting
System Name Assign a name to the AP (up to 255 string characters) for
identification. This entry is optional
System NE ID Assign NE (Network Element) ID to the AP (up to 64 string

characters). This entry is optional
System Location Assign location information of the AP (up to 255 string characters).
This entry is optional
Power Save PoE Applicable to A3 series ONLY.

It is used when the AP is in connection with 802.3af PoE switches
for power supply. By default, it is disabled. If enabled, AP will run in
2x3 MIMO with a reduced transmit power to ensure stable
operation with the lower power supplied by the switch
Click Submit button to store the configuration changes temporarily.
Click Save & Apply on the top right corner to make all the submitted configuration
changes take effect.
3.2. Network Time Protocol (NTP) Settings

Network Time Protocol (NTP), a networking protocol for clock synchronization, is supported
by the AP (as NTP client) to obtain the precise time from a NTP server. It is particularly
useful to get the correct system timestamp for logging and troubleshooting. By default, it is
enabled for its request polling if the NTP server is available and reachable.
19
Figure 22 - NTP Setting
Directory: Configuration > System > NTP Setting
IP Address Type Select either IPv4 or IPv6 address type for the NTP Server IP
configuration (next item)
NTP Server IP Specify a valid domain name or IP address of the NTP server for
the AP to synchronize its system time with.
You can click the button to add multiple NTP servers if

necessary.
Note: Valid DNS configuration is required to resolve the domain

name to IP if applicable.
NTP Polling Interval Specify the time interval (between 15 sec and 86400 sec) for the
AP to send request packets regularly to the NTP server. By default,
it is set to 600 sec
NTP Time Zone Select the appropriate time zone for time offset. By default, it is set
to “Asia/Hong Kong”
Daylight Saving Time If enabled, it will set the clock one hour (01:00) or half an hour
(00:30) forward during the summer time, based on the Time Zone
setting. By default, it is disabled
20
3.3. Logging Settings
Directory: Configuration > System > Logging Settings
Remote Syslog If enabled, AP will send various log messages of system events and
status in real time to a remote syslog server using UDP port 514 of
the IP address defined in the next item
Server IP Address Set the IP address of the remote syslog server
Severity Set the following severity level to filter syslog messages to the local
host and remote syslog server. The lower the value, the more
severe the condition it describes. For normal operation, we should
keep it as default, “Informational”, which will filter out messages
with severity level >=6
Emergency Severity level 0. It describes that the system is unusable. Setting this
value filters out the messages with severity level = 0
Alert Severity level 1. It describes the situation is so severe that action

must be taken immediately. Setting this value filters out the
messages with severity level >= 1
Critical Severity level 2. It describes critical conditions. Setting this value

filters out the messages with severity level >= 2
Error Severity level 3. It describes error conditions. Setting this value filters
out the messages with severity level >= 3
Warning Severity level 4. It describes warning conditions. Setting this value

filters out the messages with severity level >= 4
Notice Severity level 5. It describes normal but significant conditions.

Setting this value filters out the messages with severity level >= 5
21
Informational Severity level 6. It describes informational conditions. Setting this

value filters out the messages with severity level >= 6
Debug Severity level 7. It is set for debugging purpose. Setting this value
does not filter any messages
Debug Log This is for debugging purpose. For normal operation, we should
turn it off to avoid log flooding due to unnecessary debug log
messages. By default, it is disabled.
The debug log messages will be written to /var/log/message if the

feature is enabled
Historical Statistics By default, it is enabled and the AP will record the statistics data in
local host at an interval defined in the next item “Sampling
Frequency”. The files (packaged in a tar ball) can be retrieved in
the path: Status > Logs > Download Historical Data. The statistics
includes:
 Ethernet Tx/Rx traffic volume and throughput

 2.4G/5G radio Tx/Rx traffic volume and throughput; air
busy%; and noise floor
 2.4G/5G station MAC and IP address; association absolute
time and uptime; Tx/Rx traffic volume and throughput; Tx/Rx
data rate; and uplink SNR
 System memory and CPU usage
Sampling Frequency Used with the above item “Historical Statistics” and set the
frequency of four levels: 1s, 5s, 10s, or 30s for data sampling. By
default, it is set to 30s.
22
3.4. Web Setting
Figure 24 - Auto Refreshment Setting
Directory: Configuration > System > WEB Setting
Auto Refresh Interval Select the automatic refresh interval of the Web UI among six
options: Disabled, 5s, 10s, 20s, 30s, and 40s. If Disabled is selected,
the Web UI has to be refreshed manually
Enable HTTP If selected, AP will be able to be accessed through HTTP port
HTTP Port Specify the HTTP port number for HTTP connection. The default
value is 80
HTTPS Port Specify the HTTPS port number for HTTPS connection. The default
value is 433
Click Submit to store the configuration.
Click Save & Apply on the top right corner to apply the submitted configurations.
3.5. Logging Settings
Directory: Configuration > System > Logging Settings
23
Remote Syslog If enabled, AP will send various log messages of system events and
status in real time to a remote syslog server using UDP port 514 of
the IP address defined in the next item
24
3.6. Assigning an IP Address to AP
Assigning Static IPv4 IP Address
Figure 26 - IPv4 WAN Setting (Static IP Address)
Go to Configuration > Network > General > WAN Setting (IPv4)
Internet Select Static.

Connection Type
IPv4 Address Specify a valid IP address. The default value is

192.168,1,222.
IPv4 Subnet Mask Specify a valid IP subnet mask. The default value
is 255.255.255.0.
IPv4 Default Specify a valid default gateway IP address. The

Gateway default value is 192.168.1.1.
IPv4 DNS Server Specify a valid DNS server IP address.

Address
Click on the button to add a new entry for
additional DNS servers if necessary.
Click on the button to remove a particular

entry of a DNS server.
25
Assigning IPv4 IP Address from DHCP server
Figure 27 - IPv4 WAN Setting (DHCP Client)
Go to Configuration > Network > General > WAN Settings (IPv4)
Internet Select DHCP.

Connection Type
DNS Auto Update Select to disable or enable the DNS auto update.
If enabled, AP will get a DNS server IP address
from the DHCP server. If disabled, specify a DNS
server IP address manually.
DHCP Option 60 Specify the DHCP Option 60 Enterprise code. The

Enterprise Code entry value is between 0 and 65535. This entry is
optional.
26
Assigning Static IPv6 IP Address
Figure 28 - Enable IPv6 Option
Go to Configuration>Network>General>Network Setting
Enable IPv6 If selected, IPv6 will be enabled.
Figure 29 - IPv6 WAN Setting
Internet Select Static.

Connection Type
IPv6 Address Specify a valid IP address.
IPv6 Subnet Mask Specify a valid IP subnet mask.
IPv6 Default Specify a valid default gateway IP address. The

Gateway default value is 192.168.1.1.
IPv6 DNS Server Specify a valid DNS server IP address.

Address
Click on the button to add a new entry for
additional DNS servers if necessary.
Click on the button to remove a particular

entry of a DNS server.
27
Assigning IPv6 IP Address from DHCP server
Figure 30 - Enable IPv6 Option
Go to Configuration>Network>General>Network Setting
Enable IPv6 If selected, IPv6 will be enabled.
Figure 31 - IPv6 WAN Setting
Go to Configuration>Network>General>WAN Setting (IPv6)
Internet Select DHCP.

Connection Type
28
4. Radio Settings
Altai AP has both 2.4GHz radio and 5GHz radio. Both of the radios can be assigned with
different role in the network. This chapter shows the typical deployment scenarios and
configuration procedures.
4.1. Access Point Mode

Access Point (AP) allows wireless client devices to connect to a wired network using
802.11 a/b/g/n/ac standards. Wireless clients such as laptops, smartphones, etc. connect
to the AP to join the network.
Radio0 – 2.4G, General Wireless Settings (A2 Series, A3 Series, C2s,

C1n, and C1xn)
Figure 32 - Radio0(2.4G) General Settings
Go to Configuration>Wireless>Radio0 (2.4G)>General
29
Enable Radio If selected, the Radio0 interface will be enabled.
Radio Mode Operation mode of radio0, It can be configured

as AP / Station / Repeater. Select AP.
Country Code Specify the country in which the AP is located.

This option ensures that the AP uses only the radio
channels allowed in its country or region.
Wireless Mode Specify wireless mode; User may configure the

WLAN Standard and channel bandwidth via this
option. The options are shown below :
For A2 Series, C2s,

C1n and C1xn.
Figure 33 – 2.4G Wireless Mode for A2 Series,

and C2s (2x2 MIMO radios)
For A3 Series
Figure 34 – 2.4G Wireless Mode for A3 Series

(3x3 MIMO radios)
Legacy 11b Data Select suitable option for legacy client

Rate Support compatibility. In order to enhance the spectrum
efficiency, low data rates (1/2/5.5/11M) should
be eliminated. This entry is optional. The options
include:
1/2/5.5/11M Support all legacy clients.

(Best compatibility /
Poor performance)
5.5/11M Clients only capable of 1 or 2 Mbps will not be

(Good compatibility supported.
/ Good
performance)
30
Disable All Clients only capable of 802.11b standard will not be

(Poor compatibility / supported.
Best performance)
Note: This entry is not applicable when 2.4G

11Mbps (802.11 b) is selected on the Wireless
Mode option.
Channel Select the operating frequency channel. If Auto is

selected, the AP will scan the selected channels
in the Channel List and choose the best
operating channel.
Note: The suitable operating channel should be

chosen based on the on-site channel scan result.
Channel List If Auto is selected in the Channel option, this

option will be available. In Channel List
administrators can specify the channel scan
range, this entry is optional. If no channels are
selected then the AP will scan the whole
frequency band.
Scheduled Auto If Auto is selected in the Channel option, this

Channel Selection option will be available. If this option is enabled,
the AP will scan for a new transmission channel
on every scheduled period. The schedule is set in
the following options.
Run On This option is available if the Scheduled Auto

Channel Selection is enabled. Select the day and
time on which the Auto Channel Selection will be
scheduled to be done.
Run Every This option is available if the Scheduled Auto

Channel Selection is enabled. Select the period
on when the Auto Channel Selection will be
Dynamic Channel If Auto is selected in the Channel option, DCS will

Switching (DCS) switch the operating channel to a new channel
which has lower noise level. The value 1-10
specifies the aggressiveness of DCS (The higher
the value, the more often the channel switches).
Transmit Power Specify the transmission power (dBm) of radio0.
Note: The transmit power should be configured

31
based on the local communications authority

regulation.
Maximum Client Specify the maximum number of associated

clients which the radio interface serves. The value
ranges from 1 to 256. This entry is optional.
User Isolation in If selected, AP will block users’ communication

different WLAN across different SSID on the same AP directly. This
(SSID) entry is optional.
Band Steering This option is not available in C1n and C1xn.

Mode
This option will be functional if both 2.4G radios
and 5G radios are configured as AP, and there
are an identical SSID in the two radios (with the
same security profile as well).
If selected, the AP will determine which radio is

preferred for client association. Client associating
to the SSID will be steered to the same SSID on a
different frequency band. The options include :
Disabled Disable band steering function
Steer Stations to 5G Stations are preferred to associate to Radio1(5G)
Steer Stations to 2G Stations are preferred to associate to Radio0(2.4G)
Steer Stations for Stations are preferred to associate to the Radio which
load balancing have less loading
32
Radio0 – 2.4G, General Wireless Settings (A8n Series)
Figure 35 – Radio0(2.4G) General Configuration (A8n series)
Go to Configuration>Wireless>Radio0 (2.4G)>General


33
Wireless Mode Select the desired wireless mode; Each different

wireless mode has a different WLAN Standard,
max data rate, and frequency channel width.
The options are shown below :
For A8n Series
Figure 36 – 2.4G Wireless Mode for A8n Series
Legacy 11b Data Select suitable option for legacy client

Rate Support compatibility. In order to enhance the spectrum
efficiency, low data rates (1/2/5.5/11M) should
be eliminated. It is recommended to leave this
entry to its default value. The options include:
Note: This entry is not applicable when 2.4G

11Mbps (802.11 b) is selected on the Wireless
Mode option.
1/2/5.5/11M Support all legacy clients.

(Best compatibility /
Poor performance)
5.5/11M Clients only capable of 1 or 2 Mbps will not be

(Good compatibility supported.
/ Good
performance)
Disable All Clients only capable of 802.11b standard will not be

(Poor compatibility / supported.
Best performance)

in the Channel List and choose the best
operating channel.

34

frequency band.





regulation.


Band Steering This option is not available in C1n and C1xn.

Mode
This option will be functional if both 2.4G radio
and 5G radio are configured as AP, and there
35

Sector Power The A8n and A8n(ac) series each has 4 antenna
Control elements. Enable this option to manually adjust each
antennas’ transmit power.
State Turn each particular antenna element on or off.
Sector Power Select the transmit power for each particular antenna
element.
36
Radio1 – 5G General Wireless Settings (A2 Series, A3 Series, A8n

Series, C2s, C1an, and C1xan)
Figure 37 - Radio1 (5G) General Setting
Go to Configuration>Wireless>Radio1 (5G)>General



37
For A2 Series, A8n

Series, and C2s.
Figure 38 – 5G Wireless Modes for A2 Series, A8n

Series, and C2s (802.11ac 2x2 MIMO Radios)
For A3 Series
Figure 39 – 5G Wireless Modes for A3 Series

(3x3 MIMO Radios)
For C1an and C1xan
Figure 40 – 5G Wireless Modes for A2 Series, A8n Series,

C1an and C1xan (802.11n 2x2 MIMO Radios)

in the Channel List option and choose the best
operating channel.


38
frequency band.
Dynamic DFS is a spectrum-sharing mechanism that allows

Frequency wireless LANs (WLANs) to coexist with radar
Selection (DFS) systems. If selected, AP will automatically select a
frequency that does not interfere with certain
radar systems while operating in the 5 GHz band.
Note: If this entry is enabled, AP will automatically

select its operating channel.





regulation.

ranges from 1 to 256 (512 on A8n series). This entry
is optional.

39
Band Steering This option is not available in C1an and C1xan.

Mode
This option will be functional if both 2.4G radio
and 5G radio are configured as AP, and there

40
WLAN Settings
All Altai products support a maximum of 16 WLANs on each radio. Each WLAN can be
configured separately with its own configuration. Both Radio0(2.4G) and Radio1(5G) has
the exact same layout for each configuration window. Please also remark the dual band
and single band AP as following:
 Radio0(2.4G) and Radio1(5G) WLAN Settings are both available for A2 Series, A3
Series, A8n Series, and C2s.
 Radio0(2.4G) is solely available in C1n and C1xn.
 Radio1(5G) is solely available in C1an and C1xan.
WLAN # General Setting

Go to Configuration>Wireless>Radio0 (2.4G) / Radio1 (5G)>WLAN
Figure 41 - WLAN# General Setting
Select the WLAN which is going to be configured / enabled, then click on More…
Enable WLAN If selected, the chosen WLAN will be enabled.
Hide SSID If selected, the SSID will be hidden and will not be
broadcasted.
SSID Specify the SSID name of the WLAN (up to 32

string characters).
41
Note: The SSID name can be the same with

another SSID name of a different WLAN. However,
their security setting MUST be different from each
other.
User Isolation If selected, intra-WLAN user communication will

be blocked. Users will not be able to
communicate to each other in the same WLAN.
DHCP Trust Port If selected, AP will prevent illegal DHCP servers on

untrusted wireless port from offering IP addresses.
This entry is optional.
Enable WiFi Syslog If selected, AP will obtain the MAC address of the
clients associated to the SSID and forward the
info to the remote syslog server.
This option will only work if remote syslog is

enabled and the AP is connected to the remote
syslog server. See chapter 16.1 for more details
related to syslog.
Access Traffic Right Select the suitable privilege of clients associated

with the WLAN. The options include:
Full Access Associated clients will be able to access the internet

and manage the AP.
AP Management Associated clients will be able to manage the AP, but

Only not be able to access the internet.
AP Management Associated clients will be able to access the internet,

Disabled but not be able to manage the AP.
Max Clients Specify the maximum number of associated

clients (between 1 and 256).
Note: Max clients in WLAN 0 to 15 MUST be smaller

than or equal to the Max Clients on the radio
general settings.
802.11r FT Roaming If selected, 802.11r will be enabled. 802.11r

eliminates handshaking overhead and reduces
handoff times between APs while providing
security mode and QoS. This option will reduce
the delay caused by re-authentication when a
client roams from one AP to another. This entry is
optional.
42
Note: To support fast roaming operation, all APs,

having the same Mobility Domain ID, must be in
the same Layer 2 network, time synchronized,
and configured in WPA2/WPA2-PSK security
mode.
Mobility Domain ID Specify the mobility domain ID of the 802.11r FT

Roaming.
Profinet Support Enable if the AP is connected using Profinet.
Min Client SNR Specify an additional requirement on Signal

Strength to Noise Ratio (SNR) for associated
clients. Sticky clients will be able to roam
between APs easily if this entry is specified. This
entry is optional.
New clients can only connect to the AP if they

have SNR higher than the specified threshold.
Existing clients will be kicked out from the AP if
their SNR is falling below the SNR threshold.
43
WLAN # Security Setting Configuration
Go to Configuration>Wireless>Radio0(2.4G) / Radio1(5G)>WLAN >WLAN #>WLAN Security
Configure WLAN as Open Network with no Encryption

Open authentication mode means the WLAN opens to the public without any
authentication and no security measure is enforced. This setting is typically only used in a
guest network. No security measure is enforced.
Figure 42 - WLAN# Security Setting : Open Network
Authentication Select Open.

Mode
Cipher Mode Select Disabled.
44
Configure WLAN as Open network with WEP encryption

This setting provides minimal security as it allows all requesting devices to join a given
network.
Figure 43 - WLAN# Security Setting: Open Network with WEP

Mode
Cipher Mode Select WEP.
Default WEP Key Specify the default WEP key used (key 1 to 4)
Key Entry Method Select the character coding scheme of the WEP
key. The options include:
Ascii Text Key is encoded as ASCII Characters (0-9, a-z, A-Z).
Hexadecimal Key is encoded as Hexadecimal characters (0-

9,A-F)
WEP Key 1/2/3/4 Enter the WEP Key(s). The entry is up to 13 ASCII
characters or up to 10 Hexadecimal characters.
45
Configure WLAN as Shared network with Shared Key Authentication

Shared Key authentication is one of the authentication methods with WEP encryption.
Stations are authenticated using a shared secret.
Figure 44 - WLAN# Security Setting: Shared Key Authentication
Authentication Select Shared.

Mode

9,A-F)
Configure WLAN with WPA / WPA2 / WPA-auto Authentication

WPA (Wi-Fi Protected Access) or WPA2 provides enhanced security over WEP, and allows
client authentication based on an external authentication server such as a RADIUS server,
46
for corporate networks. WPA-auto is a mixed security mode which supports multiple
implementations of the WPA standard, such as WPA and WPA2.
Figure 45 - WLAN# Security Setting: WPA / WPA2 / WPA-Auto Authentication
Authentication Select WPA / WPA2 / WPA-auto.

Mode
Cipher Mode There are different Cipher Mode selections

depending on the authentication mode
selected.
TKIP This algorithm generates a new 128-bit key for each

packet which prevents the types of attack that
compromise WEP. This option is only available to be
selected together with AES (AES + TKIP).
AES This algorithm provides enhanced security over TKIP,

and is the only encryption algorithm supported by the
802.11i standard. AES is the only option in WPA2 mode
AES + TKIP This algorithm automatically selects TKIP or AES based

on the client’s compatibility. AES + TKIP is the only
47
option in WPA-Auto mode.
Note: TKIP is not supported by 802.11n standard. If

selected TKIP, the 802.11n’s devices will be limited to
802.11g transfer rate, i.e. up to 54 Mbps
RADIUS Server Setting
NAS Identifier Specify the Network Access Server’s ID. RADIUS

server uses NAS ID to identify its clients. This entry is
available for WPA and WPA2 only.
RADIUS Server IP Specify the RADIUS server location in either IPv4

Address Type network or IPv6 network. IPv6 option is available if
user configures IPv6 in general network settings.
RADIUS Retry Specify the timeout interval for each connection

Timeout request from AP to the RADIUS server. The entry
value is between 0 (disabled) and 86400. The
default value is 300s. This entry is optional.
RADIUS Server Specify the IP address of the remote radius server.
RADIUS Port Specify the service port of the Radius Server. The
default value is 1812.
RADIUS Server Specify the Radius secret; it is used along with the
Secret MD5 hashing algorithm to obfuscate passwords.
This entry MUST be the same as the entry
specified in RADIUS server.
Secondary RADIUS Repeat the last three steps if a secondary RADIUS

Server server is available. This entry is optional.
RADIUS Accounting Server Setting
RADIUS Accounting Specify RADIUS accounting server location in

Server IP Address either IPv4 network or IPv6 network; IPv6 option is
Type available if user configures IPv6 network in
general network setting.
Accounting interim Specify accounting interim interval value. The

interval entry value is between 0 (disabled) and 86400.
The default value is 300s. This entry is optional.
RADIUS Accounting Specify Radius Accounting Server’s IP address

Server
48
RADIUS Accounting Specify Radius Accounting Server’s service port.

Port The default value is 1813.
RADIUS Accounting Specify Radius Accounting Server secret; it is used

Server Secret along with the MD5 hashing algorithm to
obfuscate passwords. This entry MUST be the
same as the entry specified in RADIUS Accounting
server.
Secondary RADIUS Repeat the last three steps if a secondary RADIUS

Accounting Server accounting server is available. This entry is
optional.
49
Configure WLAN with WPA-PSK / WPA2-PSK / WPA-PSK-auto Authentication

WPA-PSK or WPA2-PSK provides enhanced security over WEP, and allows client
authentication based on a pre-shared key (PSK), for either home or small office networks.
WPA-PSK-auto is a mixed security mode which supports multiple implementations of the
WPA standard, such as WPA-PSK and WPA2-PSK.
Figure 46 - WLAN# Security Setting: WPA-PSK / WPA2-PSK/ WPA-auto-PSK Authentication
Authentication Select WPA-PSK / WPA2-PSK / WPA-auto-PSK.

Mode
Cipher Mode There are different Cipher Mode selections

depending on the authentication mode
selected.
TKIP This algorithm generates a new 128-bit key for each

packet which prevents the types of attack that
compromise WEP. This option is only available to be
selected together with AES (AES + TKIP).
AES This algorithm provides enhanced security over TKIP,

and is the only encryption algorithm supported by the
802.11i standard. AES is the only option in WPA2-PSK
mode
AES + TKIP This algorithm automatically selects TKIP or AES based

on the client’s compatibility. AES + TKIP is the only
option in WPA-Auto-PSK mode.

Group Key Update Specify the interval for group key updating. The
50
Interval default value is 86400s.
Pass Phrase Specify the passphrase for authentication. Clients

need this pass phrase to associate with the
wireless AP. The entry is between 8 and 63 ASCII
characters or 64 Hexadecimal characters.
51
ACL Setting
Access Control List (ACL) is feature which is used to allow or block associations from clients
based on their MAC addresses.
Figure 47 - WLAN# ACL Setting
Access Control List Select the access control mode. The options
include:
Disable Disable the ACL. The AP will not limit any access from
client devices.
Enabled – Black List AP enables the ACL and blocks any access from the
devices with MAC addresses specified on the Black
List entry below.
Enabled – White List AP enables the ACL and will only allow access from
the devices with MAC addresses specified on the
White List entry below.

ACL Input Method Select the way to input the ACL. The options
include:
Manual Input Input the MAC addresses which are going to be

added to the ACL manually (one by one).
File Upload a file which contains MAC addresses for ACL.
Figure 48 – ACL File Example
52
WLAN # Portal Configuration

Altai AP can be associated with an external portal server + RADIUS to authenticate its
users. The captive portal settings require the portal server URL and secret, as well as the
RADIUS server details for the user authentication part.
Figure 49 – WLAN# Portal Configuration
Enable Portal Select to enable the portal authentication on the

particular WLAN.
DHCP Lease Time Specify the DHCP lease time of the client devices
associated to the WLAN.
Portal URL Specify the URL of the external portal server.
Portal Secret Specify the shared secret of the portal server.
Enable Portal ACL Select to enable Portal ACL. Using the ACL, users
can only access the websites listed in the ACL file
from accessing particular websites specified in
the ACL File. The ACL is a .txt file, with the
following format :
Figure 50 – Portal ACL file Example
Whitelist Web addresses marked with “w” are whitelisted. These

websites can be accessed by users which are
authenticated through the portal.
53
Blacklist Web addresses marked with “b” are blacklisted. These

websites cannot be accessed by users which are
authenticated through the portal.
Note: the format as shown in the example is :

“w”/”b” “web address”
Primary RADIUS Specify the IP address of the main or primary

Server RADIUS server.
Secondary RADIUS Specify the IP address of the secondary RADIUS

Server server. This entry is optional.
RADIUS Shared Specify the RADIUS server secret.

Secret
RADIUS Auth Port Specify the service port of the RADIUS

Authentication Server. The default value is 1812.
RADIUS Acct Port Specify the service port of the RADIUS

Accounting Server. The default value is 1813.
RADIUS NASID Specify the RADIUS server’s associated Network

Access Server’s ID.
54
WLAN # Rogue Station List Configuration

Rogue stations are devices that can potentially disrupt wireless networks and can
sometimes cause irrevocable damage to the network owners. AP supports Rogue Station
List to prevent potential damages caused by rogue stations; User may input the rogue
station’s MAC address into rogue station list. This station will not be able to associate to the
WLAN.
Figure 51 - WLAN# Rogue Station List
Go to Configuration>Wireless>Radio0(2.4G) / Radio1(5G)>WLAN>WLAN #>Rogue Station

List
Rogue Station Specify the rogue station’s MAC address. Click on

the button to add a new entry for additional
rogue stations if necessary.
To remove a rogue station, clear the MAC

address on the entry. Click on the button to
remove a particular entry.
WLAN # QoS Configuration

Please refer to Chapter 10 “Quality of Service”.
55
WLAN # Bandwidth Control Configuration

AP supports different bandwidth control for each WLAN. User specifies the maximum
speed (kbps) of bandwidth based on WLAN or based on station.
Bandwidth control based on WLAN specifies the maximum speed limitation of uplink and
downlink for particular WLAN. All wireless clients share the limited bandwidth in this WLAN.
Bandwidth control based on station specifies the maximum speed limitation of uplink and
downlink for each associated wireless client. Wireless client cannot exceed the limitation
even it is the only client in WLAN.
Figure 52 - WLAN# Bandwidth Control
Uplink Specify the maximum uplink bandwidth (from

wireless clients to the AP); the entry range is
between 0 (disabled) and 1000000Kbps. The
default value is “0”.
Downlink Specify the maximum uplink bandwidth (from the

AP to wireless clients); the entry range is between
0 (disabled) and 1000000Kbps. The default value
is “0”.
56
WLAN # Passpoint Configuration

Passpoint (Hotspot 2.0) provides simple, seamless and secure roaming between mobile
network and Wi-Fi network without user intervention. Users no longer need to find and
authenticate a network every time a connection is required. To enable and implement
Passpoint is only available if WPA2 authentication is selected on the WLAN Security
configuration.
Figure 53 - WLAN# Passpoint
Go to Configuration>Wireless>Radio0(2.4G) / Radio1(5G)>WLAN >WLAN #> Passpoint
Passpoint If selected, the Passpoint feature will be enabled.
Operator Name Specify the Mobile Operator Name. It is used

when mobile device users select manual hotspot
selection and network access via ANQP queries
(Access Network Query Protocol). This entry is
optional.
HESSID Specify HESSID for Wi-Fi roaming. A Homogenous

Extended Service Set (ESS) is a group of Basic
Service Sets (BSS) that provide access to the
same external networks. The value of HESSID must
be in the form of MAC address (6 Bytes) and
57
should be taken as the Basic Service Set Identifier

(BSSID) of one of the APs within the homogenous
ESS. Generally APs in the same network should be
configured with the same HESSID. This entry is
optional.
Access Network Specify the network type in the beacon

Type broadcast and probe response frames to let the
clients know more about the network information
before association. This field is optional.
Internet Specify if the network is internet accessible in the

beacon broadcast and probe response frames
to let the clients know more about the network
information before association.
If the box is selected, it means the network

provides internet access service. If not, no
relevant information will be provided in the
beacon broadcast and probe response frames.
Venue Name Specify additional information of the venue in

which the hotspot is located. It will be put in the
ANQP element which is used by clients to
discover more information about the network.
This entry is optional.
Venue Group Specify the general venue category in the

beacon broadcast and probe response frames
to let the clients know more about the network
information. It may be used to improve network
selection behavior by the clients. This field can
be optionally left unspecified.
Venue Type Specify the specific type of venue under the

selected Venue Group in the beacon broadcast
and probe response frames for additional
information. This field can be optionally left
unspecified.
Domain Name Specify a list of one or more domain names to

identify the hotspot operator in the ANQP
element. Clients will query the domain name list
via ANQP and check against its profile setting to
determine whether they are in home or visitor
hotspot. This field is mandatory.
58
3GPP Mobile It is part of the PLMN ID (Public Land Mobile

Country Code Network) for cellular network identification. This
(MCC) information, together with MNC, is put in the
ANQP element from which mobile device users
determine if the home 3GPP cellular network can
be accessed through the Passpoint AP by
checking against with its SIM (Subscriber Identity
Module) or USIM (Universal SIM). If accessible, the
clients can use EAP-SIM or EAP-AKA for user
authentication with its home AAA server and HLR
(Home Location Register) for hotspot access.
3GPP Mobile Refer to MCC above.

Network Code
(MNC)
Roaming Specify the list of Organization Identifiers (OI) for

Consortium (OI) roaming identification. Upon receipt of the list of
OIs via the beacon frames and ANQP request,
the client can then decide its network selection
and roaming policies. OI is globally unique and
consists of 6-30 characters to identify the
roaming consortium which is a group of service
providers reaching an agreement in user
roaming service.
Realm Group Specify a group of NAI (Network Access

Identifier) realm including the realms of the
roaming partner accessible at the Passpoint AP.
It identifies the authentication server or domain
for the user authentication and tells what kind of
authentication to be used upon request via
ANQP. Mobile clients will then check the realm
information received against the profiles stored
for network selection and access.
EAP Method Specify the Extensible Authentication Protocol to

be supported in the NAI realm group.
Auth Method Specify the Authentication method for the EAP-

TTLS.
59
4.2. Station Mode

In Station mode, the AP acts as a Station / CPE. The Station will be connected to an AP
through a particular SSID. This connection will provide backhaul connectivity to the Station
and any other devices connected to it.
Station Configuration for Radio0 (2.4G) / Radio1(5G)

The station mode is available in both Radio0(2.4G) and Radio1(5G). The configuration
layout is exactly the same in both radios. However there is an exception for the A8n series,
as the Rado0(2.4G) is not configurable as a station. Please also remark the dual band and
single band AP as following:
Series and C2s.
 A8n Series only have Station mode on its Radio1(5G)
General Wireless Setting (A2 Series, A3 Series, A8n Series, and C2s).
Figure 54 - Radio0(2.4G) / Radio1(5G) General Setting
Go to Configuration>Wireless>Radio0(2.4G) / Radio1(5G)>General
Enable Radio If selected, the Radio interface will be enabled.
Radio Mode Operation mode of radio, It can be configured

as AP / Station / Repeater. Select Station.

60

regulation.
General Wireless Setting (C1n, C1an, C1xn and C1xan).
Figure 55 - Radio0(2.4G) / Radio1(5G) General Setting (C1n, C1an, C1xn and C1xan)
Enable Radio If selected, the Radio interface will be enabled.
Radio Mode Operation mode of radio, It can be configured

as AP / Station / Repeater. Select Station.


regulation.
Signal Level (SNR) Specify the SNR level which will be indicated by
61
Indicators the LED on the back of the Station unit. There are
four LED bars which can indicate the SNR level
received by the station. The LED will be turned on
if the SNR is higher than the value specified in the
entry.
Example: From Figure 56, the first and second LED

will be turned on if the SNR is above 30, but below
40.
62
WLAN General Setting

Go to Configuration > Wireless>Radio0(2.4G) / Radio1(5G) > Station > WLAN0 > Click on
More… on the Detail column.
Figure 57 - WLAN0 General Setting
General Setting
WLAN Mode Station is the default value of the entry.
Lock AP Mac If selected, the AP will not perform any roaming

algorithms. The MAC address of the remote AP
has to be specified in the Remote AP Mac entry.
Remote SSID Specify the SSID of access point that the AP is

going to associate; the SSID should be up to 32
characters. User may select “[Scan]” to look for
surrounding SSID.
Select one SSID checkbox shown in the AP Scan

Result (see figure 40 below). Afterwards, click on
63
the Select button at the bottom of the page.
Figure 58 - AP scan result
Preferred AP0 Mac/ Specify the MAC address of the AP(s) that the AP
Preferred AP1 Mac/ prefers to associate. Up to 3 AP MAC addresses in
Preferred AP2 Mac the order of priority can be specified. Preferred
AP0 has the highest priority.
If the AP loses its connection to the Preferred AP0,

it will try to connect to the Preferred AP1. The
Preferred AP1 Mac and Preferred AP2 Mac
entries are optional.
802.11r FT Roaming Select to enable 802.11r FT Roaming. Details on

802.11r FT Roaming can be found in the WLAN
General Settings section.
Multi-Address MAC Clone Setting

MAC Clone Type Select to enable or disable the MAC Clone
function. MAC Clone is a feature which allows the
station to set its own wireless MAC address to be
64
the same with the MAC address of a device

which is connected to the station via Ethernet.
This feature will limit the data flow only to the

connected device(s) which has its MAC address
cloned. This entry is optional. The options are:
Disabled Disable the MAC Clone Feature.
Static AP enables the MAC Clone and will only allow data
flow to the MAC address specified.
Static + Dynamic AP enables the MAC Clone and will automatically

clone the MAC address of the connected device.
Clone MAC List Specify the MAC address of a device which is

going to be cloned. Click on the button to
add a new entry for additional MAC address
option if necessary.
To remove a device’s MAC address, clear the

MAC address on the entry. Click on the button
to remove a particular entry.
Roaming Setting
Enable Roaming If selected, channel roaming will be enabled.
Station will scan channels and roam to another
AP which has a better SNR, based on the
specified scanning and roaming parameters in
the entries below.
If roaming is disabled, station will not perform any

roaming to a new AP.
Scan SNR Threshold Specify the SNR threshold which will trigger the
station to start scanning the available channels. If
the SNR of the currently associated AP is below
the specified threshold, the AP will initiate
channel scan. The entry value is between 0 and
100. The default value is 35 dB.
Roaming SNR Specify the SNR threshold which will trigger the
Threshold station to roam. If the SNR of the currently
associated AP is below the specified threshold,
the station will roam to a different AP. The entry
value is between 0 and 100. The default value is
35 dB.
Note: The value of Scan SNR Threshold has to be

65
larger than the Roaming SNR Threshold.
Max Scan Interval Specify the maximum interval of each channel

scan. At least one channel scan will be
conducted within the specified interval. The entry
60s.
Min Scan Interval Specify the minimum interval of each channel

scan. No more than one channel scan will be
conducted within the specified interval. This
interval is used to prevent data transmission from
being affected by too frequent channel scans.
The entry value is between 1 and 60. The default
value is 10s.
Note: The value of Max Scan Interval has to be

larger than Min Scan Interval.
Scan SNR Specify the value of SNR Fluctuation which will

Fluctuation trigger the station to start scanning the available
Threshold channels. If the fluctuation of the received signal
level is larger than the specified value, channel
scan will be conducted. The entry value is
between 0 and 10. The default value is 5 dB.
Roaming Hysteresis Select the hysteresis level. If the signal strength of

Level a neighboring is larger than current AP by this
value, the station will roam to it.
This function is to reduce the roaming frequency

when the station is located on or close to the
border between two AP coverage areas. This
entry is optional.
Wireless Mode If selected, Wireless Mode Weighting will be

Weighting enabled. This feature is used to prevent the
station from jumping between two APs due to the
received signal level fluctuation. This entry is
optional.
Min Scan Duration Specify the value of the minimum channel scan
(Each Channel) duration. The entry is between 5 and 50. The
default value is 10ms. This entry is optional.
Scan Channel List Select the channels which the station will scan
whenever a channel scan for roaming is
66
triggered. If there is no channel selected, all

channels will be scanned. This entry is optional.
67
Station Security Setting
Go to Configuration>Wireless>Radio0(2.4G) / Radio1(5G)> Station> WLAN0> More…>

WLAN Security
Configure to associate with Open WLAN
Figure 59 - WLAN 0 Security Setting – Associating Open Network

Mode
68
Configure to associate Open WLAN with WEP encryption
Figure 60 - WLAN 0 Security Setting: Open Network with WEP

Mode

9,A-F)
69
Configure to associate WLAN with Shared Key authentication
Figure 61 - WLAN 0 Security Setting – Associating WLAN with Shared Key authentication
Authentication Select Shared.

Mode

9,A-F)
70
Configure to associate WLAN with WPA / WPA2 authentication
Figure 62 - WLAN 0 Security Setting – Associating WLAN with WPA / WPA2 authentication
Authentication Select WPA / WPA2.

Mode
Cipher Mode Select the cipher mode which is the same as the
associated AP. The options include AES, AES+TKIP.
AES is the only option for WPA2. ,
EAP Method Select the suitable EAP Method. The options

include PEAP-MSCHAPV2, TTLS-MSCHAPV2, TTLS-PAP,
TTLS-CHAP.
Username Specify the correct username for authentication.
Password Specify the correct password for authentication.
Configure to associate network with WPA-PSK / WPA2-PSK authentication
Figure 63 - WLAN 0 Security Setting – Associating WLAN with WPA-PSK / WPA2-PSK authentication
71
Authentication Select WPA-PSK / WPA2-PSK / WPA-auto-PSK.

Mode
Cipher Mode Select the cipher mode which is the same as the
associated AP. The options include AES / AES+TKIP.
AES is the only option for WPA2-PSK.
Pass Phrase Specify the passphrase for authentication. Clients

need this pass phrase to associate with the
wireless AP. The entry is between 8 and 63 ASCII
characters or 64 Hexadecimal characters.
QoS Configuration
72
Bandwidth Control Configuration

AP supports different bandwidth control for each WLAN. User specifies the maximum
speed (kbps) of bandwidth based on WLAN or based on station.
Bandwidth control based on WLAN specifies the maximum speed limitation of uplink and
downlink for particular WLAN. All wireless clients share the limited bandwidth in this WLAN.
Figure 64 - WLAN0 bandwidth control setting
Go to Configuration>Wireless>Radio0(2.4G) / Radio1(5G)> Station>WLAN0>

More…>Bandwidth Control
WLAN Uplink Specify the maximum uplink bandwidth (from

Control wireless clients to the AP); the entry range is
between 0 (disabled) and 1000000Kbps. The
default value is “0”.
WLAN Downlink Specify the maximum uplink bandwidth (from the

Control AP to wireless clients); the entry range is between
0 (disabled) and 1000000Kbps. The default value
is “0”.
73
4.3. Repeater Mode

AP 2.4GHz and 5GHz Radio can act as wireless relay base station if it is configured as
“Repeater” mode. It relays the data between remote base station and wireless clients. In
“Repeater” Mode AP uses WLAN15 in 2.4GHz or 5GHz Radio to associate with remote AP
for setting up a wireless backhaul link. The rest of the WLAN can be configured to
broadcast SSIDs as a relay point of the remote base station.
Repeater Configuration for Radio0 (2.4G) / Radio1(5G)

The repeater mode is available in both Radio0(2.4G) and Radio1(5G). The configuration
layout is exactly the same in both radios. However there is an exception for the A8n series,
as the Rado0(2.4G) is not configurable as a repeater. Please also remark the dual band
and single band AP as following:
Series and C2s.
 A8n Series only have Repeater mode on its Radio1(5G)
Repeater General Wireless Setting (A2 Series, A3 Series, A8n Series, and C2s)
Figure 65 - Repeater General Setting
Enable Radio If selected, the radio will be enabled.
Radio Mode Select Repeater.

74


regulation.


Band Steering If selected, when both radios are configured as

Mode AP, AP will determine which radio is preferred for
client association. The options include :
Disabled Disable band steering function.
Steer Stations to 5G Stations are preferred to associate to Radio1(5G).
Steer Stations to 2G Stations are preferred to associate to Radio0(2.4G).
load balancing has less loading.
75
Repeater General Wireless Setting (C1an, C1n, C1xan, and C1xn)
Figure 66 – Repeater General Setting (C1an, C1n, C1xan, and C1xn)
Enable Radio If selected, the radio will be enabled.
Radio Mode Select Repeater.


regulation.


Signal Level (SNR) Specify the SNR level which will be indicated by
Indicators the LED on the back of the Station unit. There are
four LED bars which can indicate the SNR level
76
received by the station. The LED will be turned on

if the SNR is higher than the value specified in the
entry.
Example: From Figure 67 , the first and second LED

will be turned on if the SNR is above 30, but below
40.
Station Configuration (WLAN 15)

The WLAN15 interface is the receiver interface for the repeater.
1. Go to Configuration> Wireless> Radio0 (2.4G)> WLAN> Station Configuration> WLAN 15

>More…
2. The configurations available are “WLAN General”, “WLAN Security”, “QoS”,
“Bandwidth Control”. These configurations are the same with the Station mode. Please
refer to Section 4.2 Station Mode configuration Radio-2.4G.
WLAN Configuration – WLAN #

WLAN0 – WLAN14 are the transmitter interface for the repeater.
1. Go to Configuration>Wireless>Radio0 (2.4G)> WLAN> WLAN Configuration> WLAN #

>More…
2. The configurations available are “WLAN General”, “WLAN Security”, “QoS”,
“Bandwidth Control”. These configurations are the same with the AP mode. Please
refer to Section 4.1 Access Point Mode Radio-2.4G.
77
4.4. Bridge Mode

AP 5G Radio can work as wireless bridge to build up a wireless backhaul link. This
connection is a point-to-point connection. The setting of the two connected bridge
devices MUST be the same in “Wireless Mode”, “Radio Frequency”, and “Security”.
Bridge Configuration for Radio1(5G)

The bridge mode is only available in Radio1(5G). The configuration layouts are exactly the
same for all AP models. Please also remark the following:
 C1n and C1xn doesn’t have Radio1(5G) interface, thus the bridge mode is not
available in these two models
General Wireless Setting
Figure 68 - 5GHz Bridge General Setting
Go to Configuration>Wireless>Radio1(5G)>General



78
For A2 Series, A8n

Series, and C2s.
Figure 69 – 5G Wireless Modes for A2 Series,

A8n Series, and C2s
For A3 Series
Figure 70 – 5G Wireless Modes for A3 Series
For C1an and C1xan
Figure 71 – 5G Wireless Modes for

C1an and C1xan
Channel Select the operating frequency channel.
Note : The suitable operating channel should be


regulation.
79
5GHz Static Bridge General Setting
Figure 72 - 5GHz Static Bridge General Setting
Go to Configuration>Wireless>Radio1(5G)>Static Bridge >Bridge 0 >More…>Bridge

General
Remote Mac Specify the MAC address of the Radio1(5G)

Address interface of the peer device.
5GHz Static Bridge Security Setting

Go to Configuration>Wireless>Radio1(5G)> Static Bridge >Bridge 0 >More…>Bridge
Security
Disabled Cipher Mode Configuration
Figure 73 - 5GHz Bridge Security Setting - No Cipher
AES Cipher Mode Configuration
80
Figure 74 - 5GHz Bridge Security Setting –AES Cipher Mode
Cipher Mode Select AES.
Pass Phrase Specify a 128-Bit Hexadecimal key which

matches with the remote bridge configuration.
WEP Cipher Mode Configuration
Figure 75 - 5GHz Bridge Security Setting –WEP Cipher Mode

9,A-F)
81
Configure 5GHz Bridge QoS
82
5. Wireless Advanced Radio Settings
Advanced radio settings are available on both Radio0(2.4G) and Radio1(5G); these
settings include Frame Aggregation, Data Rate setting, Medium Access Protection
Mechanism, Spatial Stream, Throughput Optimization mechanism, etc.
Figure 76 - Advanced Radio Setting
Caution:
Inappropriate configuration may bring negative impact on the

network performance
Only technically advanced users who have sufficient knowledge

about WLAN technology should use the advanced wireless settings.
Default setting is recommended

Go to Configuration > Wireless > Radio0(2.4G) / Radio1(5G) > Advanced > Advanced
Settings
Advanced Setting
AMPDU If selected, AMPDU will be enabled. AMPDU
83
stands for Aggregated MAC Protocol Data Unit,

which is basically a frame aggregation system.
Frame aggregation allows the device to send
multiple frames per single access to the medium
by combining frames together into one larger
frame. By default, this entry is enabled.
AMPDU Limit Specify the maximum number of data frame

which will be pushed into a single PPDU. The entry
is between 1 and 64. The default value is 64.
AMSDU If selected, the aggregation of MAC Service Data

Unit (MSDU) will be enabled. Aggregated MSDU
will be pushed into a single MPDU.
ShortGI If selected, short guard interval will be enabled.

Guard Intervals (GI) are used to ensure that
distinct transmissions do not interfere with one
another. The standard symbol guard interval used
in 802.11 OFDM is 800ms. To increase data rate,
802.11n/ac added optional supports for a 400ms
guard interval. It is known as Short Guard Interval.
This provides an 11% increase in data rate.
Max Tx Stream / With multiple-input and multiple-output (MIMO)

Max Rx Stream technique, AP can use one or more individual
stream for data transmission and reception. In
general, more available streams increase spatial
efficiency. Max Tx Stream configures the number
of spatial streams used for data transmission. Max
Rx Stream configures the number of spatial
streams used for data reception.
Beacon Interval (This option is only available in AP mode and

Auto Repeater mode)
If selected, beacon interval will be enabled.

Beacon interval stands for the time interval of
beacon transmissions of each supported BSS.
Beacon Interval (This option is only available in AP mode and

Repeater mode)
Specify the time interval between each beacon

transmission. The entry value is between 40 and
3500. The default setting is 100ms, i.e. 10 beacons
per second.
84
DTIM Specify the DTIM time. According to the 802.11

standards, a Delivery Traffic Indication Map
(DTIM) period value is a number that determines
how often a beacon frame includes a Delivery
Traffic Indication Message, and this number is
included in each beacon frame.
The 802.11 standards define a power-save mode

for client devices. In power-save mode, a client
device may choose to sleep for one or more
beacon intervals waking for beacon frames that
include DTIMs. When the DTIM period is 2, a client
device in power-save mode will awaken to
receive every other beacon frame. Upon
entering power-save mode, a client device will
transmit a notification to the access point, so that
the access point will know how to handle unicast
traffic destined for the client device. The entry
value is between 1 and 255. Default value is 1.
Protection Mode Select the WiFi protection mechanism against the

hidden node problem. In wireless networking, the
hidden node problem or hidden terminal
problem occurs when a node is visible from a
wireless access point (AP), but not from other
nodes communicating with that AP. This leads to
difficulties in media access control sublayer. IEEE
802.11 uses 802.11 RTS/CTS acknowledgment and
handshake packets to partly overcome the
hidden node problem. The options are:
None No protection mechanism is used.
CTS-only This feature is also known as CTS-to-Self; AP issues

a CTS (Clear-To-Send) frame to itself before
sending data. All clients will not transmit during
the time.
RTS-CTS AP sends an RTS (Request-To-Send) frame, waits

for the client’s CTS frame and then sends the
data packet. It allows more robust operation, but
at the expense of additional overheads.
Obtain RTS/CTS (This option is only available in Station mode and

Threshold from AP Repeater mode)
If enabled, the RTS / CTS threshold of the Station

or Repeater will be inherited from the RTS / CTS
85
threshold of the associated AP.
RTS/CTS Threshold Specify the frame size threshold in byte. If a frame

is smaller than the RTS/CTS threshold, it will be sent
by the AP without modification. If a frame is larger
than the RTS/CTS threshold, then two frames will
be sent by the AP.
The first frame is an RTS (request to send) frame.

After the RTS frame is sent, the AP listens for the
corresponding CTS from the target client. Upon
reception of the CTS, the AP then sends the data
frame.
There are trade-offs when considering what value

you should set for the RTS/CTS threshold. Smaller
values will cause RTS to be sent more often,
increasing overheads. However, the more often
RTS packets are sent, the sooner the system can
recover from collisions.
It is recommended to use the default value or

only minor reductions of the default setting. The
entry value is between 0 and 2347. The default
value is 2346.
Distance Specify the estimated distance of the target

coverage area (round to the nearest km). AP will
adjust the round-trip latency according to the
specified value.
Multicast to Unicast Select to enable Multicast to Unicast. If enabled,

Altai AP converts multicast packets to unicast
packets and delivers them to devices registered
with the multicast group.
If enabled multicast packets should be dropped

at the WLAN exit if there is no client from the
WLAN who has joined the corresponding
multicast group.
Multicast Traffic If selected, AP will be able to process multicast

traffic in WLANs. Otherwise, multicast traffic will be
discarded.
Enable Nearby AP If selected, AP will scan for surrounding AP(s)

List periodically. The scan result shows a list of the
surrounding Wi-Fi transmitters (APs) and their RSSI
86
values.
CCA (Energy (This setting will not take effect on 802.11ac

Detect) wireless modes)
Select the RSSI threshold on which the AP will

perform CCA. CCA is a feature to detect non Wi-
Fi interference in order for the AP to avoid. If the
AP sense non Wi-Fi interference more than a
certain threshold, it will try to avoid by not
transmitting at the same time as the interference
source.
AirFi Setting (only available in Radio0 (2.4G))

AirFi Mode If selected, AirFi feature will be enabled. AirFi
technology is an advanced software control
wireless algorithm developed by Altai for
optimizing network throughput capacity
performance. AirFi control algorithm can optimize
the wireless bandwidth for both the high speed
clients as well as the low speed clients, and as a
result the system throughput can be improved
substantially.
AirFi Level Select the suitable AirFi level. The options include:
Level 1 Throughput will be optimized for clients with faster

(Recommended) capabilities (802.11n).
Level 2 Throughput will be balanced between clients

with faster capabilities and clients with slower
capabilities.
Level 3 Throughput will be optimized for clients with

slower capabilities.
Data Rate Setting

Data Rate Specify the unicast data rate for transmission. This
option lets AP device to determine the best data
rate for transferring data time by time. Otherwise,
AP uses the selected data rate for unicast packet
transmission under any condition. The default
setting is best.
Multicast Data Rate Specify the multicast data rate for transmission.
The default setting is min.
87
88
6. VLAN Configuration
VLAN is layer-2 network domain that may be partitioned to create multiple distinct
broadcast domains, which are mutually isolated so that packets can only pass between
them via one or more routers.
Note:
- VLAN is applicable ONLY on Switch mode.
6.1. Enable VLAN
Figure 77 - VLAN Setting
Go to Configuration>Network>VLAN
Enable VLAN If selected, the VLAN will be enabled.
Note: Click to remove existing VLAN profile.
89
6.2. Create VLAN Profile
Figure 78 - VLAN Profile Setting
Go to Configuration>Network>VLAN>VLAN Profiles>Click Add VLAN
VLAN ID Specify the VLAN identification number, which is

a unique number representing a VLAN.
IPv4 Address Specify a valid IP Address of the VLAN.
IPv4 Subnet Mask Specify a valid subnet mask of the VLAN.
Note: The default setting is min.
90
6.3. Select Management VLAN

Management VLAN stands for a VLAN profile / a network which is allowed for remote
administration. Network administrator can access the AP Web UI via the management
VLAN only if VLAN is enabled on AP device.
Figure 79 - Management VLAN Setting
Go to Configuration>Network>VLAN > VLAN Profile
Management VLAN Select the VLAN ID which is going to be assigned

as management VLAN.
Note: The IP address of the Management VLAN

should be the same as the IP address of the WAN
setting by default.
91
6.4. Assign an Interface as Trunk VLAN

Trunk port carries traffic that comes from all of the VLAN assigned to the port. Typically,
interface that is carrying out the data from the backhaul network is assigned as trunk port.
Go to Configuration>Network>VLAN>Interfaces
Click Edit on the particular interface which is going to be assigned as an access port.
Figure 80 - VLAN Profile Assignment
Type Select Trunk.
PVID Select the native VLAN ID which is going to be

tagged to the packets received by the interface.
Default VLAN If selected, AP will tag all untagged packets

Tagging leaving the interface with the selected PVID
before forwarding them. This entry is optional.
VLAN Pass Through If selected, AP will allow all VLAN to pass through
the interface. If only specific VLANs are allowed
to pass through, do not select this entry.
VLAN(s) Select the VLAN ID(s) which will be forwarded

through the interface. Packets will only be
forwarded to the selected VLAN ID(s).
92
6.5. Assign an Interface as an Access VLAN

Access port belongs to a single VLAN and does not provide any identifying marks on the
frames that are passed between devices. Access port also carries traffic that comes from
only the VLAN assigned to the port. Typically, interface that end-user device connects to
is assigned as access port.
Go to Configuration>Network>VLAN>Interfaces
Click Edit on the particular interface which is going to be assigned as an access port.
Figure 81 - VLAN Profile Assignment
Type Select Access.
VLAN Select the VLAN ID which is going to be assigned

to the particular interface.
After finish configuring all of the required VLANs, click Save & Apply on the top right corner
to apply the submitted configurations.
93
7. Other System Settings
7.1. Network Time Protocol (NTP) Settings

Network Time Protocol (NTP), a networking protocol for clock synchronization, is required
to obtain the precise time from a server and to regulate the local time in each network
element. The NTP server on AP is set to 0.pool.ntp.org by default.
Figure 82 - NTP Setting
Go to Configuration > System > NTP Setting
NTP Server IP Specify a valid domain name or IP address of the

NTP server which is going to be synchronized with.
Click on the button to add a new entry for an

additional NTP server if necessary.
Note: IP address type is changed automatically

based on whether IPv6 is selected or not.
NTP Polling Interval Specify the time interval between each

synchronization request from the AP to the NTP
server. The entry value is between 15 and 86400.
The default value is 600s.
NTP Time Zone Select the appropriate time zone.
Daylight Saving If selected, daylight saving will be enabled.

Time
7.2. Auto Refresh & HTTP Port Configuration
94
Figure 83 - Auto Refreshment Setting
Click Configuration > System > WEB Setting
Auto Refresh Select the automatic refresh interval of the Web

Interval UI. The options include Disabled, 5s, 10s, 20s, 30s,
and 40s. If Disabled is selected, the Web UI has to
be refreshed manually.
Enable HTTP If selected, AP will be able to be accessed

through HTTP port.
HTTP Port Specify the HTTP port number for HTTP

connection. The default value is 80.
HTTPS Port Specify the HTTPS port number for HTTPS

connection. The default value is 433.
7.3. Management IP Settings

The Management IP Settings specify an IP, or an IP Block from which the AP can be
managed from. Clients with IP address different with the one(s) specified in the Trust IP List
will not be able to reach the AP Web UI to manage the AP.
Figure 84 – Management IP Settings
95
Click Configuration > System > WEB Setting
Trus IP1 / Trust IP 2 / Specify an IP, an IP/Netmask, or a CIDR of a

Trust IP 3 / Trust IP 4 network device that can manage the AP. Any
other users with different IP as the one(s) specified
will not be able to manage the AP. If nothing is
specified, then any IP can manage the AP.
96
8. STP
Spanning Tree Protocol (STP) is a network protocol that ensures a loop-free topology for
any bridged Ethernet local area network.
Figure 85 - STP Setting
Go to Configuration > Network > General > STP Setting
Enable STP Mode If selected, STP will be enabled.
97
9. Safe Mode
Safe Mode is used for backhaul link integrity detection. If the AP loses its backhaul
connectivity, it forces the clients to re-associate with another AP by changing its SSID to a
default Safe Mode_X, where X is the MAC address of the radio interface in hexadecimal.
This mechanism protects the clients from connecting to the AP which has no backhaul to
the Internet end. Total duration for AP from losing backhaul link to safe mode is 3 x ping
interval seconds.
AP will automatically recover from the safe mode if the backhaul link is recovered.
Figure 86 - Safe Mode Setting
Go to Configuration>Network>Safe Mode
Enable Safe Mode If selected, safe mode will be enabled.
Ping Host 1,2,3 Specify up to three IP addresses which the AP will

ping periodically through its backhaul link. At
least one entry has to be specified.
Ping interval Specify the time interval between each ping. The
entry value is between 3 and 30. The default
value is 10s.
98
10. Quality of Service (QoS)
AP supports Wireless Multimedia Extensions (WME), also known as Wi-Fi Multimedia (WMM),
based on the IEEE 802.11e standard. It provides Quality of Service (QoS) feature on WiFi
network. Network administrator can select the suitable per-defined profile or specify
WMM parameters to maintain the network’s QoS.
10.1. QoS for Each Radio
Figure 87 - Quality of Service (WMM)
Go to Configuration > Wireless > Radio0(2.4G) / Radio1(5G) >QoS
Optimization Mode Select the QoS optimization mode of the radio.

The options include :
Default Optimization A set of QoS / WMM parameters as a default

configuration for most deployment scenario.
Optimized for A set of QoS / WMM parameters that can

Throughput achieve the highest throughput for a single user.
Optimized for A set of QoS / WMM parameters that can

Capacity achieve the highest throughput for multiple
users (i.e. more than 30 users).
Manual Configuration Set up the WMM parameters manually.
Click Save & Apply on the top right corner to apply the submitted configurations
99
10.2. DSCP-to-WMM Mapping for SSID(s)
Aside from QoS configuration on each AP’ radio interface, AP also provide DSCP-to-WMM
mapping on each individual SSID. Network administrator specifies different DSCP value on
the four WMM access categories; they are Best Effort (BE), Background (BK), Video (VI),
and Voice (VO).
Figure 88 - WLAN# QoS
Go to Configuration > Wireless > Radio0(2.4G) / Radio1(5G) > WLAN > WLAN # > More… >
QoS
Enable DSCP-to- If selected, the QoS feature on the particular

WMM Mapping WLAN will be enabled. AP will provide different
QoS to incoming packets with the corresponding
DSCP value. This entry is optional.
Specify the DSCP value on the entries of Best

Effort (BE), Background (BK), Video (VI), and
Voice (VO).
Note: AP treats the packets without DSCP value

as Best Effort (BE) traffic.
100
11. IP Gateway
To provide the flexibility on network deployment, AP device can act as IP gateway on the
network. IP Gateway is a network element that connects to two or more IP network
physically, no matter via wire medium or wireless medium.
Note:
- Interfaces under the same group work as switch interfaces.
E.g. Ethernet 0 and WLAN 0 of Radio 1 are assigned as WAN,
they forward packet between them based on MAC address.
11.1. IP Gateway
Configure WAN IP Setting

Refer to Assigning an IP Address to AP for more detail
Configure Radio Settings

Please refer to Radio Setting to complete the radio settings
Enable Gateway Mode
Figure 89 - Network Setting
Go to Configuration > Network > Network Setting
Network Setting Select Gateway Mode.
Configure LAN IP Setting
Figure 90 - LAN Setting (IPv4)

Go to Configuration>Network>LAN Setting (IPv4)
LAN IP Address Specify a valid IP address. The default value is
101
192.168.98.1.
LAN IP Address Specify a valid IP subnet mask. The default value

Mask is 255.255.255.0.
WAN / LAN Interface Assignment & NAT Setting
Figure 91 - WAN / LAN Interface Assignment and NAT Setting
Go to Configuration > Network > WAN/LAN Interface Assignment
Click at the Detail column at the end of WAN/LAN row
WAN Interfaces / Select appropriate interface(s) which is going to

LAN Interfaces be assigned as WAN/LAN interface.
Enable NAT Mode Select appropriate interface(s) which is going to

be assigned as WAN/LAN interface.
11.2. DHCP Server

AP products have built-in DHCP server; it can dynamically distribute network
configuration parameters to the connected end devices on all LAN interfaces.
Note:
102
- DHCP Server is ONLY applicable on Gateway mode
Configure as Gateway Mode

Refer to IP Gateway for more detail
Enable DHCP Server
Figure 92 - DHCP Server Setting
Go to Configuration > Network > DHCP
DHCP Server Select Server Mode.
103
Assign IP Address Range for Leasing on DHCP Server
Figure 93 - Address Pool Setting

Go to Configuration>Network>DHCP
Click on the last column of any Pool ID.
Enable Pool If selected, the particular DHCP pool will be

enabled.
Start IP Address Enter the first valid IP address of the IP address

range.
End IP Address Enter the last valid IP address of the IP address

range.
DNS 1/2/3 Specify the IP address of the DNS server of this

pool.
Default Lease Time Specify the lease time of each IP address

assigned. The entry value is between 60 and
604800. The default value is 86400s.
Note: All IP address for lease MUST be within the

LAN IP subnet. Please refer to LAN IP Setting for
more details.
104
11.3. Port Forward

Port forward is an application of Network Address Translation (NAT) that redirects a
communication request between WAN interface(s) and LAN interface(s) while the
packets are traversing AP device in gateway mode. This technique is most commonly
used to make services on a host residing on LAN interface(s) available to hosts on WAN
interface(s), by remapping the destination IP address and port number of the
communication to a host on LAN side.
Configure as Gateway Mode

Refer to IP Gateway for more detail
Configure Port Forwarding

Go to Configuration>Network>Port Forward
Figure 94 - Port Forward List

Click on any ID
105
Figure 95 - Port Forward Setting
Enable If selected, the particular profile will be enabled.
Local IP Address Specify the internal host’s IP address which is

accessible from an external network.
Local Port Specify the internal host’s port number of the

running application which is accessible from an
external network.
Protocol Type Select the suitable protocol. The options include

TCP&UDP, TCP, and UDP.
Description Enter additional information about the port

forwarding entry. This entry is optional.
106
12. Remote Management
AP can be remotely managed by AltaiCare and Access Controller.

AltaiCare is a cloud-based content, network management, and service control system.
The goal is to help customers to deploy their WiFi service as easy as possible, using this All-
in-One system.
Access controller is required if AP work in “thin AP” mode, Thin AP stands for AP simply
passes wireless network traffic to the switch, performing few complex tasks locally. All
encryption, authentication, and policy settings generally occur on a central switch or
controller, to which multiple thin access points are connected, rather than on the AP itself.
12.1. AP managed by AltaiCare
Figure 96 - Remote Management by AltaiCare
Go to Configuration>Remote Mgmt
Enable Remote If selected, remote management will be

Management enabled.
Management Type Select Altai Care.
Connection Type Select the connection type. The options include:
Cloud AP is connected to the AltaiCare Cloud platform. AP

will use a full qualified domain name, which is
care.altaitechnologies.com to connect to AltaiCare
Cloud platform automatically. In order to use this
feature, DNS Server has to be specified in the IP
Address setting.
Custom Use a custom server to run AltaiCare.
Custom Address Specify the custom server’s IP address. This entry is

only available if Custom is selected in Connection
107
Type entry.
Radio0(2.4G) / Select the management access rights of the

Radio1(5G) AltaiCare. The options include:
Not Management AltaiCare cannot manage nor monitor the radio.
Full Management AltaiCare can manage and monitor the radio.
Monitor AltaiCare can only monitor the radio.
12.2. AP managed by Access Controller
Figure 97 - Remote Management by Access Controller
Go to Configuration>Remote Mgmt
Enable Remote If selected, remote management will be

Management enabled.
Management Type Select Access Controller.
Primary Controller Specify the primary controller’s IP address.

Address
Secondary Specify the secondary controller’s IP address.

Controller Address
Debug Level Select the debug level value if necessary. It is

108
recommended to keep the value as 0.
Managed Radio Select the radio which is going to be managed

by the Access Controller.
Management Select to enable management WLAN which can

WLAN also be manage the AP even if it is disconnected
from the Access Controller.
When Controller Select the action to do when the AP is

Disconnected disconnected from the Access Controller. The
options include Close ALL WLAN and Close
Tunneled WLAN.
109
13. Web UI Administration
13.1. HTTPS Certification

AP devices support both HTTP and HTTPS connection for their web UI. Certificate
management allows network administrator to upload their own certifications for HTTPS
connection.
Figure 98 - Certificate Management
Go to Administration > Certificate
HTTP Cert File Browse the computer for HTTP certification file for
HTTP connection. After selecting the file, click
upload to upload the file to the AP.
HTTP Key File Browse the computer for HTTP key file for HTTP
connection. After selecting the file, click upload
to upload the file to the AP.
Note: The existing certification file and key file will

be overwritten for executing installation each
time.
110
13.2. User Administration

AP device allows network administrator to manage user account and privilege for
accessing Web UI via local authentication and/or RADIUS authentication. Error! Reference
ource not found. describes the authentication setting on AP device.
Authentication Description
Local (Default) Support 3-level User Login (root/admin/guest)
RADIUS Authenticate user through RADIUS; if no
response returned from RADIUS server, AP
fallbacks to local authentication
RADIUS + Local Login AP with local user login or RADIUS user
login
Table 4 - Authentication setting on AP device
Figure 99 - User Admin Setting
Local authentication
Modify an account password

Go to Administration>User Admin
Username Select the account which password is going to

be changed.
Password Specify a new password.

Confirm Password Re-specify the new password.
111
Note: Please log in using admin account to

modify account passwords.
RADIUS authentication
Go to Administration>User Admin> Login Authentication Setting
Authentication Select RADIUS Authentication / Radius + Local

Type Authentication.
Authentication Select the suitable authentication mode. The

Mode options include PAP, and EAP.
Encryption Select the encryption algorithm. This option is only

Algorithm available for EAP Authentication Mode. The
options include PEAP-GTC, PEAP-MS-CHAP-V2,
TTLS-PAP, TTLS-CHAP, TTLS-MS-CHAP, and TTLS-MS-
CHAP-V2.
RADIUS Server Specify the IP address of the primary RADIUS

server.
RADIUS Secret Specify the secret of the primary RADIUS server.
Secondary RADIUS Specify the IP address of the secondary RADIUS

Server server.
Secondary RADIUS Specify the secret of the secondary RADIUS

Secret server.
112
14. Configuration Backup and Firmware Management
14.1. Backup & Restore Device Configuration
Backup Device Configuration
Figure 100 - Backup Configuration
Go to Administration>Backup/Restore >Backup Configuration File
Click Create backup and save configuration file
Restore Device Configuration
Figure 101 - Restore Configuration
Go to Administration>Backup/Restore > Restore Configuration File
Click Browse/Choose File, then select suitable configuration file (.tar.gz)
Click Restore backup
14.2. Firmware Update
113
Figure 102 - Firmware Update
Go to Administration>Firmware Update
Click Browse/Choose File, then select suitable firmware image file (.bin)
Select the suitable options under the Browse button. The options include:
Keep all settings Device keeps all operating settings after updating
firmware.
Keep Network Device keeps IP address and subnet mask after

Address settings only updating firmware. The other settings will be restored
as default settings.
Full Factory Reset Device restores all settings as default settings

after updating firmware.
Click Upload Image
If uploaded firmware image is valid, click Proceed to continue; otherwise, error message
will be shown
Wait unit AP completes updating firmware
Login with correct username and password, then check the firmware version on
About>Product Version
Caution:
Do not interrupt the process of firmware update. Please maintain

network connection and power supply during updating firmware;
otherwise AP may not function.
14.3. Factory Default

Network administrator restores AP settings as default settings via web UI.
114
Figure 103 - Restore to Factory Default
Go to Administration>Factory Default
Select Keep Network Address settings checkbox for keeping IP address and subnet mask
settings; otherwise, deselect the checkbox
Click Restore to Factory Default
14.4. Default Configuration Customization

Network administrator may create customized settings as factory default settings for AP.
Once the customized configuration file is imported, AP restores its factory default settings
with the customized settings instead of the original default settings.
Figure 104 - Default Configuration Customization
Go to Administration>Customization >Default Configuration Customization
Click Product Customization Template to download configuration template file (.tar.gz).

After download, follow the steps below to modify the AP settings.
1. Use 7-zip software to open the template file, and edit the files in the factory_default.zip.
2. Edit system, network, and wireless files with the desired settings;
System Contains system settings, such as SNMP, syslog, etc.
Network Contains network settings of all interfaces, such as IP

address, VLAN, STP, etc.
115
Wireless Contain radio interfaces settings, such as radio

enabling, WLAN settings, etc.
3. Save the modified files
Go to Administration>Customization >Default Configuration Customization
Click Browse/Choose File, select the modified customization file.
Click Install
Caution:
Do not unzip the file during edit; otherwise, error may appear after
uploading the customization file. 7-zip is recommended software to use
in customization.
Note:
- Customization will take effect after reboot. Since improper
customization may cause malfunction of AP, please contact
Altai support team (support@altaitechnologies.com) for any
queries.
116
15. SNMP
Simple Network Management Protocol (SNMP) is a Network management protocol used

almost exclusively in TCP/IP networks. SNMP provides a means to monitor and control
network devices, and to manage configurations, statistics collection, performance, and
security.
15.1. SNMP Configuration
Figure 105 - SNMP Setting
Go to Administration>User Admin> SNMP
Enable SNMP If selected, the SNMP function will be enabled.
Read Community Specify a suitable string, which is identical with

the Read Community entry specified in the
Network Management System (NMS). Otherwise,
NMS will not be able to receive any information
from AP. The default value is public.
Write Community Specify a suitable string, which is identical with

the Write Community entry specified in the
Network Management System (NMS). Otherwise,
NMS will not be able to receive any information
from AP. The default value is netman.
117
15.2. Trap Host Setting

In the SNMP Configuration page, there are 4 trap hosts which can be configured. Click
in the Detail column of any of the trap hosts to modify them.
Figure 106 - Trap Host Setting
Enable Trap If selected, the particular trap host will be

enabled.
Trap Host Specify the IP address of the SNMP manager.
Trap Port Specify the port number of the SNMP manager.

The default value is 162.
Trap Community Specify the trap community entry. The default

value is public.
118
16. Radio and Connection Status
16.1 Radio0(2.4G)/Radio1(5G) Status Info

This information is only available on AP mode and Repeater mode.
Figure 107 – Radio1(2.4G) Status Page for A8n Series
Radio Settings
Radio Status Indicates the current status of Radio0/1.
MAC MAC address of the Radio0/1 interface.
Radio Channel Indicates the operating frequency (channel) of

Radio 0/1.
Mode Indicate operating 802.11 standards of Radio 0/1.

119
Country Code Indicates the country code of Radio 0/1
Transmission Power Indicates the transmission power of Radio 0/1.
Channel Usage List

All AP models have a single channel usage statistics, except for the A8n series. The A8n
series has 4 sector antenna elements. Each of them has its own statistics. Each of the
antenna elements has the following parameters:
Tx (%) Indicates the average transmit frames

percentage of the operating channel.
Rx (%) Indicates the average receive frames

percentage of the operating channel.
Busy (%) Indicates the average busy percentage of the

operating channel.
Noise Floor (dBm) Indicate noise floor of operating channel and

noise floor of chain 0, chain 1, and chain 2 on the
control channel; if operating with 40MHz
bandwidth, it shows the noise floor of chain 0,
chain 1, and chain 2 on the extension channel as
well.
Rx SNR Indicates the SNR received by the AP.
IMO(0-50dB) IMO stands for Interference Mitigation Offset. This

is a feature to mask out interference by a defined
level of x dB to improve AP radio operation.
IMO is particularly useful under noisy environment

with a very high busy % contributed by adjacent
APs and non-Wi-Fi interference. The entry value is
between 0 (disabled) and 50. The default value is
0dB.
Nearby AP List
If Nearby AP List is enabled, the device collects nearby AP information and builds Nearby
AP List from all beacon frames received during operation. The nearby AP list shows
information about the SSID, BSSID, authentication mode, cipher mode, operating channel,
data rate, and received SNR of detected APs.
120
Tx/Rx Statistics
This statistic shows traffic distribution of Radio 0/1 interface. The statistical data includes
distribution in terms of data rate and frame type for all incoming and outgoing data
frame via Radio 0/1 interface.
16.2 Radio0(2.4G)/Radio1(5G) Association List

This information is only available on AP mode and Repeater mode.
Figure 108 - Radio Association List
WLAN
It shows the current status of all operating WLAN on Radio 0/1 interface. The information
includes WLAN ID, SSID, MAC Address, authentication mode, cipher mode, number of
associated clients, instant throughput, and total traffic of each operating WLAN
respectively.
Station List
It shows the real time status of first 50 associated stations. The information includes Station
ID, MAC Address, IP address, SNR(dB) of uplink, RSSI (dBm) of uplink, instant throughput,
cumulated traffic of uplink and downlink, and instant data rate of uplink and downlink for
each associated station respectively.
Rogue Station List
It lists out the stations that can potentially disrupt wireless networks and can sometimes
cause irrevocable damage to the network owners. Network administrator inputs the
rogue station’s MAC address manually or selects any station from the station List by
clicking .
121
16.3 Radio0(2.4G)/Radio1(5G) Connection Info

This information is only available on Station mode and Repeater mode.
Figure 109 - Radio Connection Info
STA Info
It shows station information on Radio 0/1. The information includes MAC Address,
Authentication Mode, Unicast Cipher, Multicast Cipher, and State.
AP Info
It shows remote AP information on Radio 0/1. The information includes MAC Address, SSID,
SNR (dB), RSSI (dBm), Channel, Max Data Rate, Throughput of uplink and downlink, Data
Rate of uplink and downlink, and Connected Status.
122
16.4 Radio1(5G) Connection Info (Bridge)

This information is only available on Bridge Mode.
Figure 110 - Radio Connection Info (Bridge)
Bridge Local Info

It shows station information of the AP which is currently accessed. The information includes
Unicast Cipher, Multicast Cipher, Throughput, Traffic, and State.
Bridge Remote Info
It shows remote Bridge information The information includes MAC Address, IP Address, SNR
(dB), RSSI (dBm), Throughput, Traffic, and Data Rate.
16.5 Ethernet Status
Figure 111 - Ethernet Status
It shows the current status of Ethernet interface. The information includes Port, MAC
Address, Auto-negotiation, Speed, Duplex, Link Detected, instant throughputof uplink and
downlink and traffic of of uplink and downlink on Ethernet.
123
17. Additional Tools
17.1. System Logs
Figure 112 – Logs
In order to realize easier monitoring and diagnosis, AP provide log function for system
information, association activity, and alarm event.
syslog This file records the information about system

information, such as software, hardware, system
configuration, and self-checking result.
wifi This file records the information about association

activity, such as association, dissociation, and
roaming event
alarm This file records the alert information of AP device,

such as radio down, too high CPU usage
Note:
- System logs are the vital information for Altai’s engineer for
troubleshooting. It is highly recommended that system logging
MUST be enabled
Download system logs
Figure 113 - Download Logs
Click Download Logs from the top on the right
124
OR
Go to Status>Logs
Click Download Logs
17.2. Historical Statistic

Network administrator and engineer monitor may collect the historical statistical data
about system, interfaces, wireless condition, and wireless client information from AP
Go to Status>Logs
Click Download Historical Data
125
17.3. Channel Scan

Network administrator and engineer collect the status of radio0(2.4G) and radio1(5G) in
the surrounding area. Throughout this tool, network administrator and engineer collect
noise floor, percentage of channel busy, and the number of BSS in particular radio
channels.
Figure 114 - Channel Scan Result (Overview)
Overview Tab – displays general information of channel. Information includes noise floor,
percentage of channel busy, and the number of BSS on each channel respectively.
AP List Tab - displays information scanned WLAN; information includes SSID, BSSID,
authentication Mode, cipher, channel, rate in kbps, and received SNR (dB)
Go to Tools>Channel Scan> Radio0(2.4G) / Radio1(5G)
Duration Specify the scan interval. The entry value is

between 100 and 1000. The default value is
100ms. This entry is optional.
Click Start Scan
Wait until Scan Status is changed from In Process to Success; it will take approximately 20
seconds.
Note:
- Wi-Fi service will be interrupted during channel scan
17.4. Ping Test

Network administrator and engineer test the reachability of a host and measures the
round-trip time between AP and the host over an Internet Protocol (IP) network by using
ping tool.
126
Figure 115 - Ping Test
Go to Tools>Diagnosis>Ping
Ping IP Address / Specify the target IP address or host name which

Host Name is going to be pinged.
Packet Count Specify how many ICMP (ping) packets which

are going to be sent to the target. The entry
value is between 1 and 10000. The default value
is 4.
Packet Size Specify the packet size of ICMP packet which is

going to be sent (in Bytes). The entry value is
between 0 and 65500. The default value is 56
Bytes.
Click Start
Click Stop to terminate ping test if necessary
127
17.5. Traceroute Test

Network administrator tests the route (path) and measuring transit delays of packets
across an Internet Protocol (IP) network by using traceroute test.
Figure 116 - Traceroute Test
Go to Tools>Diagnosis>traceroute
Destination IP Specify the target IP address or host name.

Address/ Host
Name
Enable Resolve IP If selected, AP will translate the specified IP

Address address as a corresponding domain name.
Timeout Specify the timeout interval. The entry value is

between 1 and 100. The default value is 3s.
Ping per TTL Specify the TTL value for ping. The entry value is
between 1 and 100. The default value is 3.
Maximum TTL Specify the maximum TTL value for ping. The entry
30.
Click Start
128
17.6. Tcpdump
AP provides a tool to capture packets that passing through a particular interface. It helps
network administrator for troubleshooting.
Figure 117 - Tcpdump Tool
Go to Tools>Diagnosis>Tcpdump
Interface Select the particular interface which will be

captured.
Packet Count Specify the number of packets. The entry value is

between 1 and 1000000. The default value is 30.
Capture File Size Specify the maximum file size. The entry value is
between 1 and 100. The default value is 100
Mbyte.
Click Start
Download capture file after finished.
129
17.7. Watchdog
Watchdog is an electronic timer that is used to detect and recover from system
malfunctions. The watchdog is separated into two parts. The first part is a timer which is
used for periodic AP reboot. The second part is a timer which is used for periodic log
uploading.
Schedule Reboot
Figure 118 - Schedule Reboot
Go to Tools>Watchdog>Schedule Reboot
Periodic Reboot If selected, periodic log uploading will be

enabled.
Random Delay If selected, random delay will be added to the

periodic log upload schedule. The random delay
prevents a scenario of high usage traffic where
all APs in a network are uploading their
respective logs at the same time.
FTP Server User Specify the FTP account user name for FTP server
Name login authentication.
FTP Server Password Specify the FTP account password for FTP server
login authentication.
FTP Server IP Specify the IP address of the FTP server.
Address
130
FTP Server Port Specify the port number of the FTP server.
Schedule Mode Select the specific day(s) and time for log
uploading.
Periodic Mode Specify a period of which the AP will upload the

logs. The maximum period is 30 days. 0 means
periodic reboot is disabled.
Ping Watchdog
Ping watchdog is mechanism that AP reboots itself if it fails to communicate (ping) to
target host for several time.
Figure 119 - Ping Watchdog
Go to Tools>Watchdog>Ping watchdog
Enable Ping If selected, ping watchdog will be enabled.

Watchdog
IP Address To Ping Specify the target host IP address which will be

pinged by the AP.
Ping interval Specify the interval between each ICMP request.

The default value is 300.
Startup Delay Specify the initial time delay (in seconds) of the
first ICMP echo requests are sent by Ping
Watchdog after the connection lost. The entry
300 seconds.
131
300 seconds is recommended value for the

Startup Delay as the network interface and
wireless connection initialization takes a
considerable amount of time if the device is
rebooted.
Failure Count to Specify the number of ICMP echo response

Reboot replies. If the specified number of ICMP echo
response packets is not received continuously,
Ping Watchdog will reboot the device. The
default value is 3
132
18. Product Information
The Web UI shows the information about product information, hardware, software and
company information in About tab.
Figure 120 – AP About Page
133
Copyright © 2017 Altai Technologies Limited
ALL RIGHTS RESERVED.
Altai Technologies Limited

Unit 209, 2/F, Lakeside 2,
10 Science Park West Avenue,
Hong Kong Science Park,
Shatin, New Territories,
Hong Kong
Telephone: +852 3758 6000

Fax: +852 2607 4021
Web: www.altaitechnologies.com
Customer Support Centre:

Email: support@altaitechnologies.com
134

Altai AP Generic Web UI Configuration Manual

Uploaded by

Document Information

Original Description:

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Altai AP Generic Web UI Configuration Manual

Uploaded by

Copyright:

Available Formats

Altai Super WiFi Access Point

Web UI Configuration Manual

Altai Technologies Ltd. All rights reserved

• Reorient or relocate the receiving antenna.

European Conformity (CE) – EU

Altai Technologies Ltd. All rights reserved

AP may require professional installation depending on the deployment scenario.

Altai Technologies Ltd. All rights reserved

2. ACCESS TO WEB ADMINISTRATION INTERFACE (WEB UI) ...................................................... 2

3. SYSTEM AND IP SETTING ........................................................................................................ 19

4. RADIO SETTINGS .................................................................................................................... 29

5. WIRELESS ADVANCED RADIO SETTINGS ............................................................................... 83

6. VLAN CONFIGURATION ........................................................................................................ 89

Altai Technologies Ltd. All rights reserved

7. OTHER SYSTEM SETTINGS ....................................................................................................... 94

9. SAFE MODE ............................................................................................................................ 98

10. QUALITY OF SERVICE (QOS) ................................................................................................. 99

11. IP GATEWAY......................................................................................................................... 101

12. REMOTE MANAGEMENT ...................................................................................................... 107

13. WEB UI ADMINISTRATION .................................................................................................... 110

14. CONFIGURATION BACKUP AND FIRMWARE MANAGEMENT............................................ 113

Altai Technologies Ltd. All rights reserved

15. SNMP .................................................................................................................................... 117

16. RADIO AND CONNECTION STATUS .................................................................................... 119

17. ADDITIONAL TOOLS ............................................................................................................. 124

18. PRODUCT INFORMATION .................................................................................................... 133

Altai Technologies Ltd. All rights reserved

Model Name Product Code Hardware Ver.

2. Access to Web Administration Interface (Web UI)

2.1. Configure TCP/IP Setting on Your Computer

IP Address Any address in the subnet 192.168.1.x, except

2.2. Login to the AP (via Ethernet)

Figure 1 - AP Login Page

Secondary IP Address of Altai Access Points

Device Ethernet MAC address: 00:19:BE:20:03:8C

Secondary IP Address of this device is:

192.168.99.140 (8C (HEX) 140 (DEC))

Ethernet MAC Reserved Last MAC Byte Secondary IP

Device Ethernet MAC address: 00:19:BE:20:03:FF

Secondary IP Address of this device is:

192.168.99.175 (FF (HEX)AF (HEX)175 (DEC))

2.3. AP Menu Tabs and Shortcut Links

Figure 2 – AP Menu Tabs and Shortcut Links

Figure 3 - Tabs of Status Section

Overview Summarizes the entire device’s status related to AP system itself,

Radio0 (2.4G) or Displays 2.4G or 5G radio information including radio settings,

Ethernet Shows the current status of Ethernet interfaces, such as MAC

Figure 4 - Tabs of Configuration Section

System Configure system information, logging control, trusted IP

Network Configure network mode setting, IPv4/IPv6 network setting,

Wireless Configure radio-related settings for 2.4G and 5G radios. It includes

Remote Mgmt Configure AP as thin AP mode for remote management via

Figure 5 - Tabs of Administration Section

SNMP Configure SNMP settings for remote network management and

Factory Default Perform factory reset for the device

Customization Perform customized factory default settings for the device

Figure 6 - Tabs of Tool Section

Diagnosis Provides testing tools such as ping, traceroute, and packet

Watchdog Provides automatic operation features such as scheduled reboot,

Figure 7 - Secondary tabs under About tab

Figure 8 – Shortcut Links

简体中文/English Swap the Web UI language between simplified Chinese and

Reboot AP Perform AP reboot