Edimax AC-M1000 manual

AC-M3000 / AC-M1000 Network Access Controller User ’ s Manual V ersion 1.00[...]

The product you have purchased and the setup screen may appear slight ly different from those shown in this QIG. For more detailed information about this product, pleas e refer to the User's Manual on the CD-ROM. Software and specifications subjec t to change without notice. Pleas e visit our web site for the update. All rights reserved. Trade[...]

Edimax AC-M3000/AC-M1000 User ’s Manual i T able of Content s 1. Before Y ou S t art ............................................................................................................................3 1.1 Preface .............................................................................................................................[...]

Edimax AC-M3000/AC-M1000 User ’s Manual ii 4.3.4 T emplate Settings .............................................................................................................. .......................... 95 4.3.5 Firm ware Management ............................................................................................................ ...[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 3 1. Before You Start 1.1 Preface This manual is for Hotspot own ers, SM Bs, or administ rators in ente rpri ses to set up network environment using Edimax AC-M3000/AC-M1000. It contains step by step procedures and graphic examples to guide MIS staf f or individuals with slight network system knowl edge to [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 4 2. System Overview 2.1 Introduction of Edimax AC-M 3000 Edimax AC-M3000 is a Network Access Controller , specially designed for the small scaled wireless and wired network management and access control. The major functional are as include user man agement, access control, AP management, and security manag[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 5 2.3 S pecification 2.3.1 Hardware Specification y General Form Factor: Mini-desktop Dimensions (W x D x H): 243 mm x 150 mm x 45.5 mm Weight: 1.4 Kg Operating T emperature: 0 ~ 45 ℃ S torage T emperature: 0 ~ 65 ℃ Power: 1 10~220 V AC, 50/60 Hz Ethernet Interfaces: 10 x Fast Ethernet (10/100 Mbps) y C[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 6 Supports Do S attack protection Supports use r Black List Allows user identity plus MAC address authenticatio n for local a ccounts y User Management Supports up to 120 con current users for AC -M3000 (50 concurrent users for AC-M1000) Provides 500 local account s for AC-M3000 (250 local accounts for AC-M[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 7 Built-in billing profiles for on-demand accounts Enables session expiration control for on -dem and accounts by time (hour) an d data volume (MB) Provides billing report on screen for on-dem and accounts Detailed per-use r traffic history based o n time and data volume for both local and on-d ema nd accou[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 8 3. Base Installation 3.1 Hardware Inst allation 3.1.1 System Requirement s y S tandard 10/100BaseT n etwork cables with RJ-45 connectors y All PCs need to install the TCP/IP network p rotocol 3.1.2 Package Contents The standa rd package of Edimax AC-M3000 includes: y Edimax AC-M3000 x 1 y CD-ROM x 1 y Qui[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 9 3.1.3 Panel Function Descriptions Front Panel y LED: There are four kinds of LED, Power , S tatus, W AN and LAN, to indicate dif ferent status of the system. y W AN1/W AN2: The two W AN port s a re conne cted to a network which is not managed by the Edimax AC-M3000 system, and this port can be used to con[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 10 3.1.4 Inst allation Step s Please follow the following step s to inst all Edimax AC-M3000: 1. Connect the 12V power adapter to the power so cket on the rea r p anel. The Power LED sho uld be on to indicate a proper connection. 2. Connect an Ethernet cable to the W AN1 Port on the front panel. Connect the[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 11 3.2 Sof tware Configuration 3.2.1 Quick Configuration There are two ways to configure the system: using Configurati on Wizard or changing the setting by demands manually . The Configuration Wi zard has 6 step s providing a simple and ea sy way to guide you through the setup of Edimax AC-M3000. Follow the[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 12 Edimax AC-M3000 supports three kinds of account interface. Y ou can log in as admin , manager or operator . The default username and password a s follows. Admin: The administrator can a ccess all area of the Edimax AC-M3000. User Name: admin Password: 1234 Manager: Th e manag er can access the area unde [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 13 4. Then, click on Configuration Wizard a nd click the Run Wizard to start the wizard.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 14 5. Configuration Wizard A welcome page that briefly introduces the 6 step s will appear . Click Next to begin. y Step 1. Change Admin’ s Password Enter a new passwo rd for the admin account and retype it in the V erify Password field (twenty-character is the maximum and spa ces are not allowed). Click [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 15 y Step 3. Set Sy stem Information Home Page: Enter the URL to where the users should be directed when they are successfully authenticated. NTP Serv er: Enter the IP address or the domain name of an external time server for Edimax AC-M3000 to do time synchronization or use the default. DNS Server: Enter a[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 16 ¾ PPPoE Client: Set PPPoE Client’ s Information Enter the “Username” and “Password” provided by the ISP . Click Next to continue. y Step 5. Set Authentication Methods Enter an identified name as the post fix name in the Postfix field (e.g. Local), select a policy to assign to, and choose an au[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 17 ¾ POP3 User: POP3 Enter Domain Name/IP , Server Port of the POP3 server provided by the ISP , and then choose to enable SSL or not. Click Next to continue. ¾ RADIUS User: RADI US Enter the Domain Name/IP of the RADIUS server , Authentication Port , Accounting Port and Secret Key . Then choose to enable[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 18 ¾ NT Domain User: NT Do main When NT Domain authentication method is selected, enter the Server IP Address , and choose to enable/disable T ransparent Login . If “T ransparent Login” i s selected, use rs will be logged in Edimax AC-M3000’s NT Domain active directory and authe nticated automaticall[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 19 Caution: During each step of the wizard, if you want to go back to modify the setting, please click the Back button to go back to the previous step. 3.2.2 User Login Portal Page T o login from the login port al page via the controlled port, the user has to be authenticated by the username and password. T[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 20 3. When an on-demand user logs in su ccessfully , the following Login Successfully p age will appear . There is an extra line showing “Remaining usage” an d a “Redeem ” button on the button. y Remaining usage: Show the remaining time or data v olume that the on-demand user can use to surf Interne[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 21 4. Web Interface Configur ation This chapter will guide you through furth er detailed settings. The fol lowing table is the UI and functio ns of Edimax AC-M3000. OPTION System Configuration User Authentication AP Management Network Configuration Utilities S tatus Configuration Wizard Authentication Confi[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 22 4.1 System Configuration This section includes the following funct ions: Configuration Wizard , System Information , W AN1 Configuration , W AN2 & Failover , LAN Port Roles , Controlled Configuration and Uncontrolled Configuration . 4.1.1 Configuration Wizard There are two ways to configure the syste[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 23 4.1.2 System Information Most of the major system information about Edimax AC-M3000 can be set he re. Please refer to the following description for each field:[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 24 y System Name: Set the name of the system or use the default. y Device Name: FQDN (Ful ly-Qualified Domain Name). This is used as the domain name used in login p age. For example, if Device Name=ashop.com, the URL of login p age will be https://ashop.com/loginpages/login.shtml . y Home Page: Enter the we[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 25 time into these fields. 4.1.3 W AN1 Configuration There are 4 connection types for the W AN1 Port: St atic IP Address , Dynamic IP Address , PPPoE Client and PPTP Client .[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 26 y St atic IP Address: Manual ly specifying the IP addre s s of t he W AN1 Port is applicable for the network environment where the DHCP service is unavailable. The fi elds with red asterisks are required to be filled in. IP Address: the IP address of the W AN1 port. Subnet Mask: the subnet mask of the W [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 27 y PPTP Client: Point to Point T unnelin g Protocol is a service th at ap plies to broad band co nne ct ion used m ai nly in Europe and Israel. Select Stati c to specify the IP address of t he PPTP Client manually or select DHCP to get the IP address a utomatically . The fields with red a sterisks are req[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 28 4.1.4 W AN2 & Failover Except select ing Non e to disable W A N2 port, there are 2 connection types for th e W AN2 port: St atic IP Address and Dynamic IP Address . The probe t arget supports up to three URL s. Check “War ning of Internet Disconnection” to work with the W AN Failover function. Wh[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 29 y St atic IP Address: S pecify the IP Address , Subnet Mask and Default Gate way of W AN2 Port, which should be applicable for the network environ ment. The pro be t arget sup port s up to three URLs. Che ck the “W arning of Internet Disconnection” box to work with the W AN Failover function. If W AN[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 30 For Dynamic IP Address, W AN Failover and Fallback to W AN1 when possible functions also can be enabled like as the functions for S t atic IP Address . If W arning of Internet Disconnection is enabl ed, a warning message can be entere d to ind icate what the system should display when Internet connection[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 31 4.1.6 Controlled Configuration The clients of Controlled Port need authentication bef ore they can access the network. In this section, you can set the related configuration of Controlled Port. y Controlled Operation Mode: Choose one of the two mode s, NA T mode and Router mode, accordin g to requi remen[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 32 DHCP Scope : Enter the “St art IP Address” and the “End IP Address” . St art IP Address means the fist IP address of the DHCP scope. End IP Address means the last IP addre ss of the DHCP scope. These two settings define the IP address range that will be assigned to the client s’ of Controlled P[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 33 Enable DHCP Relay : The DHCP Server IP addre s s must be ente red when this function is enabled. For more details about DHCP Relay , please see Appendix G—DHCP Relay . 4.1.7 Uncontrolled Configuration The clients of Uncontroll ed Port don’t need authentication bef ore they can access the network. In [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 34 Operation Mode: Choose one of the two mode s, NA T mode and Router mode, accordin g to requi rements. IP Address: Enter the de sired IP address for t he inte rface of the controlled port. Subnet Mask: Enter the desired subnet mask for the controlled port. y DHCP Serv er Configuration There are three type[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 35 Preferred DNS Server: This mea ns th e primary DNS server for the DHCP of Un controlled Port. Alternate DNS Server: This means the substitute DNS server for the DHCP of Uncontrolled Port. Domain Name: This means the domain name of Uncontrolled Port. WINS Server IP: This mea ns the IP address of the WINS [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 36 4.2 User Authentication This section includes the following funct ions: Authentication Configuration , Black List Configuration , Policy Configuration , and Additional Configuration . 4.2.1 Authentication Configuration This function is used to configure the settings of auth ent ication servers. Edimax AC[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 37 y Server 1~3: There are 5 kinds of authentication methods that Edimax AC-M3000 support s: Local User , POP3, RADIUS, LDAP and NTDomain. Click the server na me to enter the Authentication Server page. Server Name: Set a name for the server using numbers (0 to 9), al phabets (a to z or A to Z), dash (-), u[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 38 y On-demand User: When the custom ers need to use wirel ess Internet se rvice in store s, they have to get p rinted receipts with use rnames and password s from the store to log in the system for wireless access. There are 2000 On-demand User account s available. Server S tatu s: The statu s sho w s that[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 39 Users List: Click to enter the On-demand Use rs Lis t page. In the On-demand Users List , detailed information will be shown here. ¾ Search: Enter a keyword of a username to be searched in t he text field and click this button to perform the search. All usernames matching the keyword will be listed. ¾ [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 40 ¾ Stat us : Select to enable or disable this billing plan. ¾ Ty p e : Set the billing plan by “V olume” (the maximum volume allowed is 9999999 Mbytes) or “T ime” (the maximum time allowed is 999 hours and 59 minute s). ¾ Expired info: This is the duration of time that the user need s to act iv[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 41 Pressing the Create button for the desired plan, an on-de m and user will be created, then click Printout to print a receipt which will contain this on-demand user’s informati on. There are 2000 on-demand user accounts available. Billing Report: Click this to enter the On-demand users Summa ry report p[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 42 Summary report page, the admini strat or can get a complete report or a report within a p articular period. ¾ Report All: Click this to get a complete report including all the on-demand records. This report shows the tot al expenses and individual accounting of each plan for all plans available. ¾ Sear[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 43 4.2.1.1 Authentication Method – Local Use r Setting Choose Local User in the Authenticati on Metho d field, the hyperlink besides the drop-down menu will be come to Local User Setting . Click the hyperlink of Local User Setting for further configuration. y Edit Local User List: Click the hyperlink of E[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 44 VPN T ermination . Click Apply to save all the settings after fini shing to add users. Upload User: Click this to enter the Upload User interface. Click the Browse button to select the text file for uploading the user account s . Then click Submit to complete the up load process.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 45 The uploading file should be a text file and the format of each line is "ID, Password, MAC, Policy , Remark, IPSec" without the quotes. There must be no spaces betwee n the fields and commas. The MAC field coul d be omitted but the trailing comma must be ret aine d. The Gr oup field indicate s [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 46 Refresh: Click this to renew the Users List page. Search: Enter a keyword of a username that you want to sear ch and click this button to perform the search. All[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 47 usernames matching the keyword will be listed. Del All: This will delete all users at once. Delete: This will delete a specific user individually . Edit User: If you want to edit the content of an individual us er account, click the username of the desired user account to enter the User Profile page of t[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 48 Click the hyperlink of Radi us Client Lis t to enter the Radius Client Configuration page. Ch oose the desired type, Disable , Roaming Out or 802.1x and key in the related d ata and then click Apply to complete the configurations. Radius Roaming Out: When Radius Roaming Out is enabled, local users can lo[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 49 When POP3 , Radius , LDAP or NTDomain is selected from the drop-down me mu, the functi on of Enable VPN T ermination will show up. Check Enable VPN T ermination to enable this function. Click the hyperlink of POP3 Setting for further configuration. Enter the related information of the primary server and/[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 50 When POP3 , Radius , LDAP or NTDomain is selected from the drop-down me mu, the functi on of Enable VPN T ermination will show up. Check Enable VPN T ermination to enable this function. Click the hyperlink of Radius Setting for further configuration. Enter the related information of the primary server an[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 51 y 802.1X Authentication: Whe n enabling this function, the hyperlink of Radius Client List will appear . Click the hyperlink to get into the Radius Client Configuration page for further configuration. In the Radius Client Configuration page, the cl ients, which are using 802.1X as t he aut hentication m [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 52 y Class Attribute: Class attribute sent fr om the RADIUS serv e r . y Policy: Select the mapping policy of this class attribute. y Remark: Add some description if needed. 4.2.1.4 Authentication Method – LDAP Choose LDAP in the Authentication M ethod field, the hyperlink next to the drop-down menu will [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 53 y Server IP: Enter the IP address/domain name of the LDAP server . y Port: Enter the Port of the LDAP server , and the default value is 389. y Base DN: Enter the base DN d efined of the LDAP se rver . y Account Attribute: Enter the account attribute of the LDAP server . 4.2.1.5 Authentication Method – [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 54 y Server IP address: Enter the server IP address of the domain controller . y T ransparen t Login: If the function is en abled, users will log i nto Edimax AC-M3000 automatically when they log into the Windows domain and the IP of NT Domain Server sho uld be added into walled garden. 4.2.2 Black List Con[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 55 After enterin g the usernames in the Username field and the related i nformation in the Remark field (not required). Click Apply to save the settings.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 56 If the administrator wants to remove a user from the black list, just select the user ’s “Delete” check box and then click the Delete button to remove that user from the black list. 4.2.3 Policy Configuration Each policy has three profiles, Fire wall Profile , Specific Route Profile , and Schedule [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 57 y Firewall Profile Click the hyperlink of Setting for Firewall Profile , the Firew all Profile p age will appear . Click the numbers of Filter Rule Item to edit individual rules and click Apply to save the setting s. The rule st atus will show on the list. Check Activ e to enable that rule. Attention: Fi[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 58 Rule Item: This is the rule selected. Rule Name: The rule nam e can be changed here. The rule name can be set to easily identify , for example: “from file server” , “HTTP request” or “to web” , etc. Enable this Rule: After checking this function, the rule will be enabled. Action: There are tw[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 59 Specific De fault Rou te Enable: Click to enable the setting of specific default route. Default Gateway: There a re 3 methods of the default gateway that Specific Default Route support s. Select W AN1 Default Gateway to set W AN1 as the default gateway . Select W AN2 Default Gate w ay to set W AN2 as the[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 60 y T otal Band width Select the bandwidth from the drop-down menu. It’s the tot al bandwidth the users unde r this particular policy need to share. y Individual Maximum Band w id th Select the bandwid th from the dro p-d own menu. It’ s the most bandwid th an indiv idual u ser ca n obt ain under this[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 61 particular policy , which cannot exceed the value for To t a l B a n d w i dt h . y Individual Request Band width Select the bandwidth from the drop-down menu. It’s the requested band width for a user un der this particular policy , which cannot exceed the value for Indivi dual Maximum Bandwidth . 4.2.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 62 Interim Up date: The system will update the users’ current status and usa ge a ccording to this time periodically . y Upload File 1. Certificate: The admini strator can upload new private key and customer certifica tion. Click the Browse button to select the file for t he certificate upload. Then click[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 63 c. Choose Uploaded Page and upload a login p age. Click the Browse button to select the file to upload. Then click Submit to complete the upload proce ss.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 64 After the upload proce s s is complete d, the new login page can be previewed by clicking Preview button at the bottom. The user-defined login pa ge must include the following HTML codes to provide the necessary fields for username and p a ssword.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 65 I f the user-defined login p age includes an image file, the image file p ath in the HTML code must be the image file you will upload. Then, enter or browse the filename of the images to upload in the Upload Images field on the Upload Images Files page and the n click Submit . The system will show the us[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 66 “Pr evi ew ” can be clicked to see the uploaded p age. If a user checks “I agree” and clic ks Next , then he/ she is prompted to fill in the login name and pass wor d. If a user checks “I disagree” and clicks Next , a window will p op up to tell user that he/she cannot log in[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 67 d. Choose the External Page selection and get the login pag e from the specific website. Enter the website address in the “External Page Setting” field and then click Apply . After applying the setting, the new login page can be previewed by clicking Preview button at the bottom of this page.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 68 3. Logout Page: The administrator can apply customi zed logout p age here. The p r ocess is similar to that of Login Page. The differe nt p art is the HTML code of the user-def ined logout interface mu st incl ude the following HTML code that the user can enter the userna me and p asswor d. After the upl[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 69 4. Login Success Page: The administrator can use the default logi n success p age or get the customized login success page by setting the template p age, uploading t he p age o r using the external we bsite. After finishing the setting, you can click Preview to see the login success page. a. Choose Defau[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 70 c. Choose Uploaded Page and you can get the login succe ss p age by uploading. Click the Br owse button to select the file for the logi n success pa ge upload. Then cli ck Submit to complete the upload process.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 71 After the upload proce s s is complete d, the new login success page can be previewed by clicking Preview button at the bottom. I f the user-defined login success p age includes an im age file, the image file path in the HTML code must be the image file you will upload. Then, enter or browse the filename[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 72 and click Delete to delete the file. d. Choose the Exte rnal Page selection and you can get the login succe ss page e from the specific website. Enter the website address in the External Page Setting field and then cli ck Apply . After applying the setting, the new login success p a ge can be previewed b[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 73 c. Choose Uploaded Page and you can get the Login Success Page Section for On-Demand Use rs . Click the Browse button to sele ct the file for the logi n success p ag e for On-Demand. Then click Submit to complete the upload process.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 74 After the upload proce s s is complete d, the new logi n success page for On-Demand can be previewed by clicking Preview button at the bottom. I f the user-defined login su ccess page for On-Deman d in cludes an image file, the image file path in the HTML code must be the image file you will upload. Then[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 75 and click Delete to delete the file. d. Choose the External Page selection and you can get the login success pag e for On-Dema nd from the specific website. Enter t he website address in the “Extern al Page Setting” field and then click Apply . After applying the setting, the new login success page f[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 76 c. Choose Uploaded Page and you can get the logout succ ess page by uploading. Click the Browse button to select the file for the l ogout success p age upload. Then click Submit to complete the upload proces s.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 77 After the upload proce s s is complete d, the new l ogout success p age can be previewed by clicking Preview button at the bottom. I f the user-defined logout succe ss page includes an image file, the image file p ath in the HTML code must be the image file you will upload. Then, enter or browse the file[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 78 After the image file is uploaded, the file name will show on the “Existing Image Files” field. Check the file and click Delete to delete the file. d. Choose the Exter nal P age selection and you can get the logout su ccess page fro m the specific website. Enter the website address in the “External [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 79 y Enhance User Authentication: With this functio n enabled, only the users with their MAC addresses in this list can log into Edimax AC-M3000. There wi ll only be 40 use rs allowed in this MAC address list. User authentication is still required for these users. Please click the Per mit MAC Address List t[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 80 4.3 AP Management This section includes the following funct ions: AP List , AP Discovery , Manual Configuration , T emplate Settings , Firmware Management and AP Upgrade . 4.3.1 AP List All of the supported APs under the management of Edimax AC -M3000 will be shown in the list. At first the list is empty[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 81 After adding an AP: Check any AP and click the button below to Reboot , Enable , Disable and Delet e the checked AP . Click Apply T emplate to select one template to apply to the AP .[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 82 y AP Nam e Click AP Name and enter the interface about rel ated se ttings. There four kinds o f settings, General Settings , LAN Interface Setting , Wi reless Interface Setting and Access Control Setting . Click the hyperlin k of e ach individual setting to have further configurations. ¾ General Setting[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 83 Password and Remark he re if desi red. Firmware information can also be viewed here. ¾ LAN Setting: Click LAN to enter the LAN Setting interface. Input the data of LAN incl uding IP address , Subnet Mask and Default Gat e way of AP . ¾ Wireless LAN: Click Wireless LAN to enter the Wireless interfac e. [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 84 Properties y SSID: The SSID is the u nique n ame shared amo ng all devices in a wirele ss net work. The SSID must be the same for all devices in the wireless network. It is case sen sitive and has a maximum length of 32 bytes. y SSID Broadcast: Select this option to e nable the SSID to br oadcast in your[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 85 y CTS Protection: The default value is Di sable . When select “Enable” , a protecti on mechanism will decrease collision probabili ty when many 802.11g devices exist simultaneously . However, performance of the 802.11g devices may decrease. y Fragment Threshold: Breaking a pa cket into smalle r units[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 86 y WP A: WPA is Wi-Fi’s encryption method that protects unauthorized netwo rk acce ss by verifying network users through a server. Select 802.1x or WPA-PSK security type an d enter the related information below. y WP A2 : Wi-Fi Protected Access version 2. The follow on se cu rity method to WP A for Wi-F[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 87 y WP A Mixed: If using TKIP and AES encryption type at the same time is desired, choose this security type. Select 802.1x or WPA-PSK security ty pe and enter the related information below. ¾ Access Control: In this function, when the statu s is Enabled , onl y these clients whi ch MA C addresses are lis[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 88 y Stat u s After clicking the hyperlink of S tatus, t he basic information of the AP includi ng AP Name , AP T ype , LAN MAC , LAN MAC , Wi reless LAN MAC , Up Time , Report T ime , SSID , Number of As sociated Cli ents and Re mark will be shown. In the below of the AP S tatus Det ail , there are the rel[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 89 ¾ System S t atus: Th e table shows the informatio n about AP Name , AP S t atus and Last Reporting Time . ¾ LAN St atus: The t able shows the information about IP Address , Subnet Mask and Gate way .[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 90 ¾ Wireless LAN S tatus: Th e table shows all of the related wireless information. ¾ Access Control St atus: The table shows the status of MAC of client s u nder the control of the AP . ¾ Associated Client S tatus: The table shows the clie nts conne cting to the AP and the related information of the cl[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 91 4.3.2 AP Discovery Use this function to detect and manage all t he supported APs in the network segment s. y T o discover AP manually , please fill in the required data. ¾ Interface: Ch eck Uncontrolled or/and Controlled and enter the Bas e IP and Pool Size (the discovered APs will be given an IP addre [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 92 for APs and then click Discover again. For the desired AP , input t he desired name and password, select one template to apply , select the check box, and clic k Add to add the AP to the AP Li st. (About the template, please see 4.3.4 T emplate Settings ). When the matched AP is discov ered, it will be s[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 93 Click Configuring to go to the related conf iguration. For the det ails, please refer to 4.3.1 AP List . y Auto-Discovery: Click Configure to enter the Auto-Discov ery interface and have further configuration.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 94 The Interface and AP Ac cess configuration is the same as the se ttings mentioned above. Click “Configure” button for more Auto-Discovery functions. A selection known as “ Interval ” can be sele cted from the drop-down box, and the system will scan periodically acco rding to the its setting (the [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 95 4.3.4 T emplate Settings T emplate is a model that can be copied to every AP wit hout having to configure the each AP individually . T here are three templates provided. Click Edit to go to configuration. Except configuring all the template setting, copy the configuration of an AP to the template by sele[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 96 After click the hyperlink of T emplate ID to enter the T emplate Edit page, revise the configuration for demand su ch as SSID or Channel . About other functions of Wireless section, please refer to 4.3.1 AP List . Access Control function provides to control the clien ts’ devices that are allowed to ass[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 97 4.3.5 Firmware Management In this function, AP’s firmware can be uploaded. The current fi rmware can also be downloaded to the local storage.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 98 4.3.6 AP Upgrade Check the APs which need to be upgraded and select the upgrade version of firmware, and click Apply to upgrade firmware.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 99 4.4 Network Configuration This section includes the following funct ions: Network Address T ranslation , Pr ivilege List , Monitor IP List , W alled Garden List , Proxy Server Properties and Dynam i c DNS , IP Mobility and VPN T ermination . 4.4.1 Network Address T ranslation There are three part s, DMZ [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 100 W AN side network can access the private machi ne by ac cessing the external IP . Choose to enable Automatic W AN IP Assignment by checking the Enable check box and enter t he Internal IP address . When Automatic W AN IP Address function is enabled, a c ce ssing W AN1 will be mapped to access the Intern[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 101 y Port and IP Redire ct In this function, the administrator can set up to 40 set s of the IP address port s for redirection p urpose. When users attempt to connect to the port of a Destination IP Address listed here, the connection packet will be converted and redire cted to the port of the T ranslated [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 102 4.4.2 Privilege List Edimax AC-M3000 provides two privilege lists, Privilege IP Address List and Privilege MAC Address List . In the Privilege List function, the administrator can add de si red IP addresses and MA C addresses in these list s. The IP addresses and MAC addresses in the se lists are allo w[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 103 War ni ng : Permitting specific IP addresses to have network access right s without going through st andard authentication process at t he co ntrolled port may cause security problem s. y Privilege MAC Address List In addition to the IP addres se s, you can also set the client s’ MAC addresses in this[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 104 effective immediately . When the monitored devices have built-in W eb servers an d conne ct to the LAN interfaces o perating under NA T mode, they can be accessed by the hy perlink of theirs IP addresses. T o add the monitored IP addresses as hyperlink accessible mode by clicking Add button in Link colu[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 105 Caution: T o use the domain name, the Edimax AC-M3000 has to conne ct to DNS server first or this function will not work. 4.4.5 Proxy Server Properties Edimax AC-M3000 supports External Proxy Server func tions and provides a buil t -in Internal P roxy Server[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 106 y External Proxy Server: Under the Edimax AC-M3000 security manag ement, the system wil l match the proxy setting of External Proxy Server list to the clients’ proxy setting when clients’ have proxy setting in their browsers. If there is no matching, the client s will not b e able to get the login p[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 107 4.4.6 Dynamic DNS Edimax AC-M3000 provides a convenient DNS function to translate a domain na me to the corresponding IP address of W AN port that helps the admini strator memorize and co nnect to W A N port. If the DHCP is activated at W AN port, this function will also update the newest IP address reg[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 108 POPS. VPN creates a private encrypted tunnel from the end user' s compute r, through the local wireless network, through the Internet, all the way to the corporate servers and database. VPN has serveral kind s of proto cols and Edimax AC-M3000 supports IPSec . IPSec is a technology provided by Wind[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 109 4.5 Utilities This section provides four utilities to cu stomize and maint ain the system including Change Password , Backup/Restore Settings , Firmware Upgrade and Restart . 4.5.1 Change Password Edimax AC-M3000 supports three types of account interface. Y ou can log in as admin , manager or operator .[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 11 0 Caution: If the administrator ’ s password is lost, the adminis trator ’s p assword still can be cha nged throug h the text mode management interface on the seri al port, console/printer port. 4.5.2 Backup/Restore Settings This function is used to backup/restore the setting s of Edimax AC-M3000. Al[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 111 y Backup current system setting s: Click Backup to create a .db databa se ba ckup file and save it on disk. y Restore system settings: Click Browse to search for a .db dat abase backu p file created by Edimax AC-M3000 and click Restore to restore to the same settings at the time the backup file was crea[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 11 2 War ni ng : 1. Firmware upgrade may cause the lo ss of some of the data. Please refer to the release notes for the limitation before upgradin g the firmware. 2. Pleas e restart the system af ter upgrading the firmware. Do not power on/of f the system during the upgrade or th e restart pro c ess. It may[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 11 3 4.6 S t atus This section includes Sy stem St atus , Interface St atus , Current Users , Tr a f f i c History , and Notification Configuration to provide system status i nformatio n and online user status. 4.6.1 System St atus This section provides an overview of the system for t he administrator .[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 11 4 The description of the tabl e is as follows: Item Description Current Firmware V ersion The present firmware version of Edimax AC-M3000 System Name The system name. The default is Edimax AC-M3000[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 11 5 Home Page The page to whi ch the users are directed after initial login success. Syslog server-T raffic History The IP address and port number of the external Syslog Server . N/A means that it is not configured. Syslog server-On demand User log The IP address a nd port number of the external Syslog Ser[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 11 6 The description of the tabl e is as follows. Item Description MAC Address The MAC address of the W AN1 port. IP Address The IP address of the W AN1 po rt. W AN1 Subnet Mask The Subnet Mask of the WAN1 port.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 11 7 MAC Address The MAC address of the W AN2 port. IP Address The IP address of the W AN2 po rt. W AN2 Subnet Mask The Subnet Mask of the WAN2 port. Mode The mode of the controlled port. MAC Address The MAC address of the controlle d po rt. IP Address The IP address of the cont rolled port. Controlled Subn[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 11 8 4.6.4 T raffic History This function is used to check the history of Edimax AC-M3000. The history of each day will be saved separately in the DRAM for 3 days. Caution: Since the history is saved in the DRAM, if you nee d to restart the system and also keep the history , then please manually copy and sa[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 11 9 y On-demand User Log As shown in the following figure, each line is a on -dem and u ser log reco rd con si sting of 13 fields, Da te , System Name , Ty p e , Name , IP , MAC , Pkts In , Bytes In , Pkt s Out, Bytes Out, Expiretim e , V alid time and Remark , of user activities. y Roaming Out T raffic Hi[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 120 y Send T o: The e-mail address of the person whom the history email is for . This will be the receiver’s e-mail. Check which type of report to be sent— Monitor IP Report, T raffic History , On-demand User Log, and AP S tatus. y Interval: The time interval to send the e -mail report. C hoose a proper[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 121 4.7 Help On the screen, the Help button is on the upper right corner . Click Help to the Online Help window and then click the hyperli nk of the items to get the information.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 122 5. Appendix A – Console Interface Via this port to enter the co nsole interface for the admin istrator to handle the problems an d situations occurred during operation. 1. T o connect the console port of Edimax AC-M3000, you need a console, modem cable and a terminal simulation program, such as the Hy[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 123 y Utilities for network debugging The console interface provides severa l utilities to assi st the Administra tor to check the system conditions and to debug any problems. The utilities are described as follow: ¾ Ping host (IP): By sending ICMP echo reque st to a sp ecified host and wait for the respon[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 124 system also support s the SSH onli ne connection for the setu p. When using a null modem to connect to the system console, we do not need to enter administrator’s password to enter the con sole management interface. But connecting the system by SSH, we have to enter the username and p assword. The use[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 125 6. Appendix B – Network Confi gurati on on PC After Edimax AC-M3000 is installed, the followin g configurations must be set up on the PC: Internet Conne ction Setup and TCP/IP Net work Setup . y Internet Connection Setu p If the Internet Connection of this client PC has been configured as use local ar[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 126 3. Click Next when Welcome to the Ne w Connection Wizard screen appears. 4. Choose “Connect to the Internet” and then click Next . 5. Choose “Set up my connection manually ” and then click Next .[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 127 6. Choose “Connect using a broadband connection that is always on” and then click Next . 7. Finally , click Finish to exit the Connection Wizard . Now , you have completed the setup.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 128 y TCP/IP Net work Setup In the default configuration, Edimax AC-M3000 will assign an appropriate IP address to a client PC which uses DHCP to obt ain IP addre ss automatically . Windo ws 95/98/2000/XP configures IP setup to “Obt ain an IP address automatically” in default setti ngs. If you want to c[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 129 1-2. Using DHCP: If want to use DHCP, please choose “Obtain an IP address au tomatically” and click OK . This is also t he default setting of Windows. Then, reboot the PC to make sure an IP address is obtained from Edimax AC-M3000. 2-2. Using Specific IP Address: If want to use specific IP address, [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 130 7. Appendix C – IPSec VPN Edimax AC-M3000 has equ ipped with IPSec VPN feature start s fro m release version v1.00. T o fully utilize the nature supported IPSec VPN by Microsoft Win dows XP SP2(wit h patch ) and Windows 2000 operating system s, Edimax AC-M3000 implement IPSec VPN tunneling technolo gy[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 131 During the first-time login to Edimax AC-M3000, Inte rnet Explorer will ask user to download the ActiveX component of IPSec VPN. This ActiveX component once downloa ded will be running paralleled with the “L ogin Success Page” after the p age being brought up successfu lly . The ActiveX component he[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 132 Suggestion: Please TURN OFF Internet Connection Firewall feature or upgra de the Windows OS into Wind ows XP SP2. 4. ICMP and Active Mode FTP On Windows XP SP2 without patching by KB889527, it will drop ICMP p ackets from IPSec tunnel. This problem can be fixed by upgrading patch KB889 527. Before enabl[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 133 Reasons may cause the Internet Explorer to stop the ActiveX unexpectedly as followings: a. The crash of Internet Explorer on running ActiveX Suggestion: Please reboot client’ s computer , once Windows se rvice is re sumed, go through the login process again. b. T erminate the Internet Explorer T ask f[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 134 c. There are some cases of Windows messages by wh ich Edimax AC-M3000 will hint current user to: (1) Close the Windo ws Internet Explorer , (2) Click “logout ” button on “login success” p age, (3) Click “b ack” or “refresh” of the sam e Internet Explorer , (4) Enter new URL in the same I[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 135 8. Appendix D –Proxy Setting for Hotspot HotSpot is a place such as a coffee sho p, hotel, or a publ ic area where provides Wi-Fi service for mobile and temporary users. HotSpot is usually implemented without complicat ed network architecture and using some proxy servers provided by Intern et Service [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 136 3. Click the Proxy Server Properties from lef t menu and the homepage of the Proxy Server Properties will appear .[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 137 4. Add the ISP’s proxy Server IP and Port into External Proxy Server Setting.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 138 5. Enable Built-in Proxy Server in Internal Proxy Server Setting.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 139 6. Click Apply to save the settings .[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 140 9. Appendix E –Proxy Setting for Enterprise Enterprises usually isolate their intr a net and internet b y using more elaborated network archite cture. Many enterprises have their own proxy server whi ch is usua lly at intranet or DMZ under the firewall protection. In enterprises, network managers or M[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 141 3. Click the Proxy Server Properties from lef t menu and the homepage of the Proxy Server Properti es will appear .[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 142 4. Add your proxy Server IP and Port into Extern al Proxy Server Setting. 5. Disable Built-in Proxy Server in Internal Proxy Server Setting.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 143 6. Click Apply to save the settings . Warning ： If your proxy server is disabled, it will make the user authentication operati on abnormal. When users open the browser, the login page won’t appear because the proxy se rver is down. Plea se make sure your proxy server is always available.  Client [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 144 2. Open browser to add default gateway I P address (e.g. 192.168.1.254) and logout page IP address “1.1.1.1” into proxy exception information. z For I.E z For firefox[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 145[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 146 10. Appendix F –Disclaimer for On-Demand Users In Edimax AC-M3000, the end user first gets a logi n page when she/he opens its we b browser right afte r associating with an access point. Ho wever , in some si tuations, the hotspot owners or MIS st aff may want to display “terms of use” or announce[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 147 return unescape(pham.sub string(offset, endstr)); // return cookie value section } i = pham.indexOf(" ", i) + 1; // move i to next name=value pair i f ( i = = 0 ) b r e a k ; / / n o m o r e v a l u e s i n c o o k i e s t r i n g } return null; // cookie not found } function CodeCookie(str) {[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 148 var i,j=d.MM_p.length,a=MM_preloadI mages.arguments; for(i =0; i<a.length; i++) if (a[i].indexOf("#")!=0){ d. MM_p[j]=n ew Image; d. MM_p[j++].src=a[ i];}} } function MM_findObj(n, d) { //v4.01 var p,i,x; if(!d) d=document; if ((p=n.indexOf("?"))>0&&p arent.frames.lengt[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 149 if(form.mypassword.value == "") { alert("Please enter password."); form.mypassword.focus(); form.mypassword.select(); disableButton=false; return false; } if(disableButton==true) { alert("The system is now logging you in, plea se wait a moment."); return false; } e l s e { [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 150 disclaimer .style.display='none'; login.style.display=''; return true; } </script> </head> <body style="font-family: Arial" bgcolor="#FFFFFF" onload="init(Enter);MM_preloadI mages('../images/submit0.gif ','../images/clear0.gif&ap[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 151 illegal activities; customize, measure, an d improve o u r services and the site's content and layout; comp are information for accuracy , and verify it with third parties. We may discl ose personal information to respond to legal re qui reme nts, enforce our poli cie s, re spond to claims that an [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 152 </tr> < t r > <td height="40"><t able wid th="170" height=" 20" b order="0" align="center" cellp ad ding="2"> < t r > <td align="left"><i nput name="selection" value="1" type=[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 153 < / t r > < t r > < t d c o l s p a n = " 2 " > <div align="center"> <a onclick="javascript:if(Before_S ubmit(Enter)) {Enter .submit();}" onMouseOut="MM_swapImgRestore()" onMouseOver="MM_swapIm age('Image3','',&a[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 154 <tr> <td width="100%"> <font color="#808080" size="2" ><script language="JavaSc ript">document.write(copyri ght);</script></font></t d> </tr> </table> </div> </body> </html>[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 155 11. Appendix G—DHCP Relay AC-M3000 supports DHCP Relay define d accordin g to RFC 3046 . For scaling reasons, it is advantageous to set up an external DHCP server other than having the intern a l DH CP server implemented in AC-M3000 to assign an IP. When forwarding client-originated DHCP packets to a [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 156 Here is an example of configurat ion file of the DHCP server: From the file, client that connects to AC-M3000 sends out a DHCP request. DHCP relay functi on in AC-M3000 is enabled and sending a Circuit ID 00:90: 0B:07:60:91_192.168.1. 254 to the external DHCP server . When DHCP server gets the Circuit I[...]