Edimax Technology AC-M3000 manual

AC-M3000 / AC-M1000 Network Access Controller User ’ s Manual V ersion 1.00[...]

The product you have purchased and the setup screen may appear slight ly different from those shown in this QIG. For more detailed information about this product, pleas e refer to the User's Manual on the CD-ROM. Software and specifications subjec t to change without notice. Pleas e visit our web site for the update. All rights reserved. Trade[...]

Edimax AC-M3000/AC-M1000 User ’s Manual i T able of Content s 1. Before Y ou S t art ............................................................................................................................3 1.1 Preface .............................................................................................................................[...]

Edimax AC-M3000/AC-M1000 User ’s Manual ii 4.3.4 T emplate Settings .............................................................................................................. ..........................95 4.3.5 Firm ware Management ............................................................................................................ ....[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 3 1. Before You Start 1.1 Preface This manual is for Hotspot own ers, SM Bs, or administrators in enterprises to set up network environment using Edimax AC-M3000/AC-M1000. It contains step by step procedures and grap hic examples to guide MIS staf f or individuals with slight network system knowl edge to co[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 4 2. System Overview 2.1 Introduction of Edimax AC-M 3000 Edimax AC-M3000 is a Network Access Controller , specially designed for the small scaled wireless and wired network management and access control. The major functional are as include user man agement, access control, AP management, and security manag[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 5 2.3 S pecification 2.3.1 Hardware Specification y General Form Factor: Mini-desktop Dimensions (W x D x H): 243 mm x 150 mm x 45.5 mm Weight: 1.4 Kg Operating T emperature: 0 ~ 45 ℃ S torage T emperature: 0 ~ 65 ℃ Power: 1 10~220 V AC, 50/60 Hz Ethernet Interfaces: 10 x Fast Ethernet (10/100 Mbps) y C[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 6 Supports Do S attack protection Supports u se r Black List Allows user identity plus MAC address authenticatio n for local accounts y User Management Supports u p to 120 con current use rs fo r AC -M3000 (50 concu rrent users for AC-M1000) Provides 500 local account s for AC-M3000 (250 local accounts for [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 7 Built-in billing profiles for on-demand accounts Enables session expiration control for on -demand accounts by time (hou r) and data volume (MB) Provides billing report on screen for on-dem and accounts Detailed pe r-use r traffic history based o n time and data volume for both local and on-d ema nd accou[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 8 3. Base Installation 3.1 Hardware Inst allation 3.1.1 System Requirement s y S tandard 10/100BaseT network cables with RJ-45 connectors y All PCs need to install the TCP/IP network p rotocol 3.1.2 Package Contents The standa rd package of Edimax AC-M3000 includes: y Edimax AC-M3000 x 1 y CD-ROM x 1 y Quic[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 9 3.1.3 Panel Function Descriptions Front Panel y LED: There are four kinds of LED, Power , S tatus, W AN and LAN, to indicate dif ferent status of the system. y W AN1/W AN2: The two W AN port s are connected to a network which is not managed by the Edimax AC-M3000 system, and this port can be used to con n[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 10 3.1.4 Inst allation Step s Please follow the following step s to install Edimax AC-M3000: 1. Connect the 12V power adapter to the power socket on the rea r p anel. The Power LED sho uld be on to i ndicate a proper connection. 2. Connect an Ethernet cable to the W AN1 Port on the front panel. Connect the [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 11 3.2 Sof tware Configuration 3.2.1 Quick Configuration There are two ways to configure the system: using Configurati on Wizard or changing the setting by demands manually . The Configuration Wi zard has 6 step s providing a simple and easy way to guide you through the setup of Edimax AC-M3000. Follow the [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 12 Edimax AC-M3000 supports three kinds of account interface. Y ou can log in as admin , manager or operator . The default username and pa ssword a s follows. Admin: The administrato r can a ccess all area of the Edimax AC-M3000. User Name: admin Password: 1234 Manager: Th e manag er can access the area und[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 13 4. Then, click on Configuration Wizard a nd click the Run Wizard to start the wizard.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 14 5. Configuration Wizard A welcome page that briefly introduces the 6 step s will appear . Click Next to begin. y Step 1. Chan ge Admin’s Password Enter a new passwo rd for the admin account and retype it in the V erify Password field (twenty-character is the maximum and sp a ces are not allowed). Click[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 15 y Step 3. Set Sy stem Information Home Page: Enter the URL to where the users should be directed when they are successfully authenticated. NTP Serv er: Enter the IP address or the domain name of an external time server for Edimax AC-M3000 to do time synchronization or use the default. DNS Server: Enter a[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 16 ¾ PPPoE Client: Set PPPoE Client’ s Information Enter the “Username” and “Password” provided by the ISP . Click Next to continue. y Step 5. Set Authentication Methods Enter an identified name as the post fix name in the Postfix field (e.g. Local), select a policy to assign to, and choose an au[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 17 ¾ POP3 User: POP3 Enter Domain Name/IP , Server Port of the POP3 server provided by the ISP , and then choose to enable SSL or not. Click Next to continue. ¾ RADIUS User: RADI US Enter the Domain Name/IP of the RADIUS server , Authentication Port , Accoun ting Port and Secret Key . Then choose to enabl[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 18 ¾ NT Domain User: NT Do main When NT Domain authentication method is selected, enter the Server IP Address , and choose to enable/disable T ransparen t Login . If “T ransparent Login” i s selecte d, use rs will be logged in Edimax AC-M3000’s NT Domain active directory and authe nticated automatica[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 19 Caution: During each step of the wizard, if you want to go back to modify the se tting, please click the Back button to go back to the previous st ep. 3.2.2 User Login Portal Page T o login from the login port al page via the controlled port, the user has to be authenticated by the username and password.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 20 3. When an on-demand user logs in successfully , the following Login Successfully p age will appear . There is an extra line showing “Remaining usage” an d a “Redeem” button on the button. y Remaining usage: Show the remaining time or data v olume that the on-demand user can use to surf Internet.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 21 4. Web Interface Configur ation This chapter will guide you through fu rth er detailed settings. The fol lowing table is the UI and f unctio ns of Edimax AC-M3000. OPTION System Configuration User Authentication AP Management Network Configuration Utilities S tatus Configuration Wizard Authentication Con[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 22 4.1 System Configuration This section includes the followin g funct ions: Configuration Wizard , System Information , W AN1 Configuration , W AN2 & Failover , LAN Port Roles , Controlled Configuration and Uncontrolled Configuration . 4.1.1 Configuration Wizard There are two ways to configure the syst[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 23 4.1.2 System Information Most of the major system information ab out Edimax AC-M3000 can be set he re. Please refer to the following description for each field:[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 24 y System Name: Set the na me of the system or use the default. y Device Name: FQDN (Ful ly-Qualified Domain Nam e). This is used as the domain name use d in login p age. For example, if Device Name=ashop.com, the URL of login page will be https://ashop.com/loginpages/login.shtml . y Home Page: Enter the [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 25 time into these fields. 4.1.3 W AN1 Configuration There are 4 connection types for the W AN1 Port: St atic IP Address , Dynamic IP Address , PPPoE Client and PPTP Client .[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 26 y St atic IP Address: Manually specifying the IP addre s s of t he WAN1 Port is appli cabl e for the network environment where the DHCP service is unavailable. The fi elds with red asterisks are required to be filled in. IP Addres s: the IP address of the W AN1 port. Subnet Mask: the subnet mask of the W[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 27 y PPTP Client: Point to Point T unneling Protocol is a service that applies to bro adband co nnect ion u sed m ainly in Europe and Israel. Select Stat ic to specify the IP address of t he PPTP Client manually or select D HCP to get the IP addre ss a utomatically . The fields with red a sterisks are requi[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 28 4.1.4 W AN2 & Failover Except select ing Non e to disable W AN2 port, there are 2 connectio n types for th e W AN2 port: St atic IP Address and Dynamic IP Address . The probe t arget supports up to three URL s. Check “War ning of Internet Disconnection” to work with the W AN Failover function. Wh[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 29 y St atic IP Address: S pecify the IP Address , Subnet Mask and Default Gate way of W AN2 Port, which should be applicable for the network environ ment. The pro be t arget sup port s up to three URLs. Che ck the “W arning of Internet Disconnection” box to work with the W AN Failover function. If W AN[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 30 For Dynamic IP Address, W AN Failover and Fallback to W AN1 when possible functions also can be enabled like as the functions for S t atic IP Address . If W arning of Internet Disconnection is enabl ed, a warning message can be entere d to indicate what the system should display when Internet connection [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 31 4.1.6 Controlled Configuration The clients of Controlled Port need authentication bef ore they can access the network. In this section, you can set the related configuration of Controlled Port. y Controlled Operation Mode: Choose one of the two mode s, NA T mode and Router mode, accordin g to requi remen[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 32 DHCP Scope : Enter the “St art IP Address” and the “End IP Address” . St art IP Address means the fist IP addre ss of the DHCP scope. End IP Address means the last IP addre s s of the DHCP scope. The se two settings define the IP address range that will be assigned to the client s’ of Controlle[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 33 Enable DHCP Relay : The DHCP Server IP addre ss must be entered when this function is enabled. Fo r more details about DHCP Relay , please see Appendix G—DHCP Relay . 4.1.7 Uncontrolled Configuration The clients of Uncontrolled Port don’t need authentication bef ore they can a ccess the network. In t[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 34 Operation Mode: Choose one of the two mode s, NA T mode and Router mode, accordin g to requi rements. IP Addres s: Enter the desired IP address fo r t he inte rface of the controlled port. Subnet Mask: Enter the desired subnet mask for the controlled port. y DHCP Serv er Configuration There are three typ[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 35 Preferred DNS Server: This mea ns the primary DNS server for the DHCP of Un controlled Port. Alternate DNS Server: This means the substitute DNS server for the DHCP of Uncontrolled Port. Domain Name: This means the domain name of Uncontrolled Port . WINS Server IP: This mea ns the IP address of the WINS [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 36 4.2 User Authentication This section includes the followin g funct ions: Authentication Configuration , Black List Configuration , Policy Configuration , and Additional Configuration . 4.2.1 Authentication Configuration This function is used to configure the settings of auth ent ication servers. Edimax A[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 37 y Server 1~3: There are 5 kinds of authentication methods that Edimax AC-M3000 support s: Local User , POP3, RADIUS, LDAP and NTDomain. Click the server na me to enter the Authentication Server page. Server Name: Set a name for the server using numbe rs (0 to 9), al phabets (a to z or A to Z), dash (-), [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 38 y On-demand User: Whe n the customers need to use wirel ess Internet se rvice i n store s, they have to get p rinted receipts with use rnames and password s from the store to log in the system for wireless access. There are 2000 On-demand User account s available. Server S tatu s: The statu s shows that [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 39 Users List: Click to enter the On-demand Use rs Lis t page. In the On-demand Users List , det ailed information will be shown here. ¾ Search: Enter a keyword of a username to be searche d in the text field and click this button to perform the search. All usernames matching the keyword will be listed. ¾[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 40 ¾ Stat us : Select to enable or disable this billing plan. ¾ Ty p e : Set the billing plan by “V olume” (the maximum volume allowed is 9999999 Mbytes) o r “T ime” (the maximum time allowed is 999 hours and 59 minute s). ¾ Expired info: This is the duration of time that the user need s to act i[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 41 Pressing the Create button for the desired plan, an on-de m and user will be created, then click Printout to print a receipt which will contain this on-demand user’s informati on. There are 2000 on-demand user accounts available. Billing Report: Click this to enter the On-demand users Summa ry report p[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 42 Summary report page, the admini strator can get a complete report or a report within a p articular period. ¾ Report All: Click this to get a complete report including all the on-deman d records. This report shows the tot al expenses and individual accounting of each plan for all plans available. ¾ Sear[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 43 4.2.1.1 Authentication Method – Local Use r Setting Choose Local User in the Authenticati on Method field, the hyperlink besides the drop-do wn menu will be come to Local User Setting . Click the hyperlink of Local User Settin g for further configuration. y Edit Local User List: Click the hyperlink of [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 44 VPN T ermination . Click Apply to save all the settings after fini shing to add users. Upload User: Click this to enter the Upload User interface. Click the Browse button to select the text file for uploading the user accou nt s. Then click Submit to complete the upload process.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 45 The uploading file should be a text file and the format of each line is "ID, Password, MAC, Policy , Remark, IPSec" without the quotes. There must be no space s betwee n the fields and commas. The MAC field coul d be omitted but the trailing comma must be ret aine d. The Gr oup field indicate s[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 46 Refresh: Click this to renew the Users List pa ge. Search: Enter a keyword of a username that you want to sear ch and click this button to perform the search. All[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 47 usernames matching the keyword will be listed. Del All: This will delete all users at once. Delete: Thi s will delete a specific user individually . Edit User: If you want to edit the content of an individual us er account, click the username of the desired user account to enter the User Profile page of [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 48 Click the hyperlink of Radi us Client List to enter the Radius Client Configuration page. Ch oose the desired type, Disable , Roaming Out or 802.1x and key in the related d ata and then click Apply to complete the configurations. Radius Roaming Out: When Radius Roaming Out is enabled, local use rs can lo[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 49 When POP3 , Radius , LDAP or NTDomain is selected from the drop-down me mu, the function of Enable VPN T ermination will show up. Check Enable VPN T ermination to enable this function. Click the hyperlink of POP3 Setting for further configuration. Enter the related information of the primary server and/o[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 50 When POP3 , Radius , LDAP or NTDomain is selected from the drop-down me mu, the function of Enable VPN T ermination will show up. Check Enable VPN T ermination to enable this function. Click the hyperlink of Radius Setting for further configuration. Enter the related information of the primary server and[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 51 y 802.1X Authentication: When enabling this function, the hyperlink of Radius Client List will appea r . Click the hyperlink to get into the Radius Client Configuration page for further configuration. In the Radius Client Configuration page, the cl ients, which are using 802.1X as t he aut hentication m [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 52 y Class Attribute: Class attribute sent fr om the RADIUS server . y Policy: Select the mapping policy of this class attribute. y Remark: Add some description if needed. 4.2.1.4 Authentication Method – LDAP Choose LDAP in the Authentica tion M ethod field, the hyperlink next to the drop-down menu will b[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 53 y Server IP: Enter the IP address/domain name of the LDAP server . y Port: Enter the Port of the LDAP server , and the default value is 389. y Base DN: Enter the base DN d efined of the LDAP se rver . y Account Attribute: Enter the account attribute of the LDAP server . 4.2.1.5 Authentication Method – [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 54 y Server IP address: Enter the server IP address of the domain controller . y T ransparen t Login: If the function is en abled, users will log i nto Edimax AC-M3000 automatically when they log into the Windows domain and the IP of NT Domain Server sho uld be added into walled garden. 4.2.2 Black List Con[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 55 After enterin g the usernames in the Username field and the related i nformation in the Remark field (not required). Click Apply to save the settings.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 56 If the administrator wants to remove a u ser from the black list, just select the user ’s “Delete” check box and then click the Delete button to remove that user from the black list. 4.2.3 Policy Configuration Each policy has three profiles, Fire w all Profile , Specific Route Profile , and Schedul[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 57 y Firewall Profile Click the hyperlink of Setting for Firewall Profile , the Firew all Profile p age will appear . Click the numbers of Filter Rule Item to edit individual rules and click Apply to save the setting s. The rule st atus will show on the list. Check Activ e to enable that rule. Attention: Fi[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 58 Rule Item: This is the rule selected. Rule Name: The rule nam e can be changed here. The rule name can be set to easily identify , for example: “from file server” , “HTTP request” or “to web” , etc. Enable this Rule: After checking this function, the rule will be enabled. Action: There are tw[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 59 Specific De fault Rou te Enable: Click to enable the setting of specific d efault route. Default Gateway : There are 3 methods of the default gateway that Specific Default Route support s. Select W AN1 Default Gateway to set W AN1 as the default gateway . Select W AN2 Default Gate w ay to set WAN2 as the[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 60 y T ot al Band width Select the bandwidth from the drop-down menu. It’s the tot al bandwidth the users unde r this particular policy need to share. y Individual Maximum Band w id th Select the bandwid th from the drop-d own menu. It’ s the most band wid th an indiv idual user can obtain und er this[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 61 particular policy , which cannot exceed the value for To t a l B a n d w i dt h . y Individual Request Band w id th Select the bandwidth from the drop-down menu. It’s the requeste d bandwidth for a user un der this particular policy , which cannot exceed the value for Indiv idual Maximum Bandwidth . 4.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 62 Interim Up date: The system will update the users’ current status and usa ge a ccording to this time periodically . y Upload File 1. Certificate: The admini strator can upload new private key and customer certifica tion. Click the Browse button to select the file for t he certificate upload. Then click[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 63 c. Choose Uploaded Page and upload a login p age. Click the Browse button to select the file to upload. Then click Submit to complete the upload proce ss.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 64 After the upload pro ces s is completed, the new login page ca n be previewed by clicking Preview button at the bottom. The user-defined login pa ge must include the following HTML codes to provide the necessary fields for username and p assword.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 65 I f the user-defined login p age includes an image file, the image file p ath in the HTML code mu st be the image file you will upload. Then, enter or browse the filename of the images to upload in the Upload Images field on the Upload Images Files page and the n click Submit . The system will show the u[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 66 “Pr evi ew ” can be clicked to see the uploaded p age. If a user checks “I agree” and clic ks Ne xt , then he/sh e is prompted to fill in the login name and pass wor d. If a user checks “I disagree” and clicks Next , a window will p op up to tell user that he/she cannot log in[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 67 d. Choose the External Page selection and get the login p ag e from the specific website. Enter the website address in the “External Page Setting” field and then click Apply . After applying the setting, the ne w login page can be previewed by clicking Preview button at the bottom of this page.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 68 3. Logout Page: The administrator can apply customi ze d logout p age here. The p r oce ss is similar to that of Login Page. The differe nt part is the HTML code of the user-def ined logout interface mu st include the following HTML code that the user can enter the userna me and passwor d. After the uplo[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 69 4. Login Success Page: The administrator can use the default logi n success p age or get the customized login success page by setting the template p age, uploading t he p age o r using the external we bsite. After finishing the setting, you can click Preview to see the login success page. a. Choose Defau[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 70 c. Choose Uploaded Page and you can g et the login success p age by uploadi ng. Click the Br owse button to select the file for the logi n success pa ge upload. Then cli ck Submit to complete the upload process.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 71 After the upload pro ce s s is complete d, the new login success page can be previewed by clicking Preview button at the bottom. I f the user-defined login success page includes an im age file, the image file path in the HTM L code must be the image file you will upload. Then, enter or browse the filenam[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 72 and click Delete to delete the file. d. Choose the Exte rnal Page selection and you can get the logi n succe ss p age e from the specifi c website. Enter the website address in the External Page Setting field and then cli ck Apply . After applying the setting, the new login success p age can be previewed[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 73 c. Choose Uploaded Page and you can get the Login Success Page Section for On-Demand Use rs . Click the Browse button to select the file for the logi n su ccess pag e for On-Demand. Then click Submit to complete the upload process.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 74 After the upload pro ce s s is complete d, the new logi n success page for On-Demand can be previewed by clicking Preview button at the bottom. I f the user-defined login su ccess page for On-Deman d in cludes an image file, the image file path in the HTML code must be the image file you will upload. The[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 75 and click Delete to delete the file. d. Choose the External Page selection and you can get the login success pag e for On-Demand from the specific website. Enter t he website address in the “Extern al Page Setting” field and then click Apply . After applying the setting, the ne w login success page f[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 76 c. Choose Uploaded Page and you can get the logout succ ess p age by uploading. Click the Browse button to select the file for the l ogout success page upload. Then click Submit to complete the upload proces s.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 77 After the upload pro ce s s is complete d, the new l ogout success p age can be previewed by clicking Preview button at the bottom. I f the user-defined logout succe ss page includes an image file, the image file p ath in the HTML code must be the image file you will upload. Then, enter or browse the fil[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 78 After the image file is uploaded, the file name will show on the “Existing Image Files” field. Check the file and click Delete to delete the file. d. Choose the Exter nal P age selection and you can get the logout su ccess page fro m the specific web site. Enter the website address in the “External[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 79 y Enhance User Authentication: With this functio n enabled, only the users with their MAC addresses in this list can log into Edimax AC-M3000. There wi ll only be 40 use rs allowed in this MAC address list. User authentication is still required for these users. Please click the Permit MAC Address List to[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 80 4.3 AP Management This section includes the followin g funct ions: AP List , AP Discovery , Manual Configuration , T emplate Settings , Firmware Management and AP Upgrade . 4.3.1 AP List All of the supported APs under the management of Edimax AC -M3000 will be shown in the list. At first the list is empt[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 81 After adding an AP: Check any AP and click the button below to Reboot , Enable , Disable and Delet e the checked AP . Click Apply T emplate to select one template to apply to the AP .[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 82 y AP Nam e Click AP Name and enter the interface about rel ated se ttings. There four kinds o f settings, General Settings , LAN Interface Setting , Wi reless Interface Setting and Access Control Setting . Click the hyperlink of each individual setting to have further configurations. ¾ General Setting: [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 83 Password and Remark he re if desi red. Firmware information can also be viewed here. ¾ LAN Setting: Click LAN to enter the LAN Setting interface. Input the data of LAN incl uding IP address , Subnet Mask and Default Gat e way of AP . ¾ Wireless LAN: Click Wireless LAN to enter the Wireless interfa c e.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 84 Properties y SSID: The SSID is the u nique n ame shared amo ng all devices in a wirele ss net work. The SSID must b e the same for all devices in the wireless n etwork. It is case sen sitive and has a maximum length of 32 bytes. y SSID Broadcast: Select th is option to e nable the SSID to br oadcast in y[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 85 y CTS Protection: The default value is Di sable . When select “Enable” , a protecti on mechanism will decrease collision probabili ty when many 802.11g devices exist simultaneously . However, performance of the 802.11g devices may decrease. y Fragment Threshold: Breaking a pa cket into smaller units [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 86 y WP A: WPA is Wi-Fi’s encryption method that protects unauthorized netwo rk acce ss by verifying network users through a server. Select 802.1x or WPA-PSK security type an d enter the related information below. y WP A2 : Wi-Fi Protected Access version 2. The follo w on secu rity method to WP A for Wi-F[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 87 y WP A Mixed: If using TKIP and AES encryption type at the same time is desired, choose this security type. Select 802.1x or WPA-PSK security ty pe and enter the related inform ation below. ¾ Access Control: In this function, when the statu s is Enabled , only these clients whi ch MAC addresses are list[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 88 y Stat u s After clicking the hyperlink of S tatus, t he basic information of the AP includi ng AP Name , AP T ype , LAN MAC , LAN MAC , W i reless LAN MAC , Up Time , Report T ime , SSID , Number of As sociated Cli ents and Re mark will be shown. In the below of the AP S tatus Det ail , there are the re[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 89 ¾ System S t atus: The table shows the inf ormation about AP Nam e , AP S t atus and Last Reporting Time . ¾ LAN S t atus: The t able shows the information about IP Address , Subnet Mask and Gate way .[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 90 ¾ Wireless LAN S tatus: Th e table shows all of the related wireless information. ¾ Access Control St atus: T he t able shows the st atus of MAC of clients unde r the control of the AP . ¾ Associated Client S tatus: The table sh ows the clie nts connecting to the AP and the related information of the [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 91 4.3.2 AP Discovery Use this function to detect and manage all t he supported APs in the network segment s. y T o discover AP manually , please fill in the required data. ¾ Interface: Ch eck Uncontrolled or/and Controlled and enter the Bas e IP and Pool Size (the discovered APs will be given an IP addres[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 92 for APs and then click Discover again. For the desired AP , input t he desired name and password, select one template to apply , select the check box, and cli c k Add to add the AP to the AP Li st. (About the template, please see 4.3.4 T emplate Settings ). When the matched AP is discov ered, it will be [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 93 Click Configuring to go to the related conf iguration. For the det ails, please refer to 4.3.1 AP List . y Auto-Discovery: Click Configure to enter the Auto-Discov ery interface and have further configuration.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 94 The Interface and AP Ac cess configuration is the same as the se ttings mentioned above. Click “Configure” button for more Auto-Discovery functions. A selection known as “ Interval ” can be selected from the drop-down box, and the system will scan periodicall y acco rding to the its setting (the [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 95 4.3.4 T emplate Settings T emplate is a model that can be copied to every AP wit hout having to configure the each AP individually . T here are three templates provided. Click Edit to go to configuration. Except configuring all the t emplate setting, copy the configuratio n of an AP to the template by se[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 96 After click the hyperlin k of T emplate ID to enter the T emplate Edit page, revise the config uration for demand such as SSID or Channel . About other functions of Wireless section, please refer to 4.3.1 AP List . Access Control function provides to control the clien ts’ devices that are allowed to as[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 97 4.3.5 Firmware Management In this function, AP’s firmware can be uploaded. The current fi rmware can also be downloaded to the local stora ge.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 98 4.3.6 AP Upgrade Check the APs which need to be upgraded and select the upgrade version of firmware, and click Apply to upgrade firmware.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 99 4.4 Network Configuration This section includes the followin g funct ions: Network Address T ranslation , Pr ivilege List , Monitor IP List , W alled Garden List , Proxy Server Properties and Dynam ic DNS , IP Mobility and VPN T ermination . 4.4.1 Network Address T ranslation There are three part s, DMZ [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 100 W AN side network can access the private machi ne by ac cessing the external IP . Choose to enable Automatic W AN IP Assignment by checking the Enable check box and enter t he Internal IP address . When Automatic W AN IP Address function is enabled, a c cessing W AN1 will be mapped to access the Interna[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 101 y Port and IP Redire ct In this function, the administrator can set up to 40 set s of the IP address port s for redire ction p urpose. When users attempt to connect to the port of a Destination IP Address listed here, the connection packet will be converted and redire cted to the port of the T ranslated[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 102 4.4.2 Privilege List Edimax AC-M3000 provides two privilege lists, Privilege IP Address List and Privilege MAC Address List . In the Privilege List function, the administrator can a dd de si red IP addresses and MA C addresses in these list s. The IP addresses and MAC addresses in the se lists are allo [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 103 War ni ng : Permitting specific IP addresses to have network access right s without going through st andard authentication process at t he controlled port may cause security pr oblem s. y Privilege MAC Address List In addition to the IP addre s se s, you can also set the client s’ MAC addresses in thi[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 104 effective immediately . When the monitored devices have built-in W eb servers an d conne ct to the LAN interfaces o perating under NA T mode, they can be accessed by the hy perlink of theirs IP addresses. T o add the monitored IP addresses as hyperlink accessible mode by clicki ng Add button in Link col[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 105 Caution: T o use the domain name, the Edimax AC-M3000 has to conne ct to DNS server first or this function will not work. 4.4.5 Proxy Server Properties Edimax AC-M3000 supports External Proxy Server func tions and provides a buil t-in Internal Proxy Server[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 106 y External Proxy Server: Under the Edimax AC-M3000 security manag ement, the syste m wil l match the proxy setting of External Proxy Server list to the clients’ proxy setting when clients’ have proxy setting in their browsers. If there is no matching, the client s will not be able to get the login p[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 107 4.4.6 Dynamic DNS Edimax AC-M3000 provides a convenient DNS function to translate a domain name to the corresponding IP address of W AN port that helps the admini strator memorize and co nnect to W AN port. If the DHCP is activated at W AN port, this function will also update the newest IP address regul[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 108 POPS. VPN creates a private encrypted tunnel from the end user' s computer, through the local wireless network, through the Internet, all the way to the corporate servers and database. VPN has serveral kind s of protocols and Edimax AC-M3000 supports IPSec . IPSec is a technology provided by Window[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 109 4.5 Utilities This section provides four utilities to cu stomize and maint ain the system including Change Password , Backup/Restore Settings , Firmware Upgrade and Restart . 4.5.1 Change Password Edimax AC-M3000 supports three types of account interface. Y ou can log in as admin , manager or operator .[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 11 0 Caution: If the administrator ’ s password is lost, the adminis trator ’ s p assword still can be cha nged throug h the text mode management interface on the seri al port, console/printer port. 4.5.2 Backup/Restore Settings This function is used to backup/restore the setting s of Edimax AC-M3000. A[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 111 y Backup current sy stem setting s: Click Backup to create a .db databa se ba ckup file and save it on disk. y Restore system settings: Click Browse to search for a .db dat abas e backup file created by Edimax AC-M3000 and click Restore to restore to the same settings at the time the backup file was cre[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 11 2 War ni ng : 1. Firmware upgrade may cau se the lo ss of some of the data. Please refer to the release notes for the limitation before up gradin g the firmware. 2. Pleas e restart the system af ter upgrading the firmware. Do not power on/of f the system during the upgrade or th e restart p ro c ess. It [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 11 3 4.6 S t atus This section includes Sy stem St atus , Interface St atus , Current Users , Tr a f f i c History , and Notificatio n Configuration to provide system statu s i nformatio n and online user status. 4.6.1 System St atus This section provides an overview of the system for t he administrator .[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 11 4 The description of the t abl e is as follows: Item Description Current Firmware V ersion The present firmware version of Edimax AC-M3000 System Name The system name. The default is Edimax AC-M3000[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 11 5 Home Page The page to whi ch the users are directed after initial login success. Syslog server-T raffic History The IP address and port number of the external Sysl og Server . N/A means that it is not configured. Syslog server-On demand Use r log The IP addre ss a nd port number of the external Syslog [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 11 6 The description of the t abl e is as follows. Item Description MAC Address The MAC address of the W AN1 port. IP Addres s The IP addre ss of the WA N1 po rt. W AN1 Subnet Mask The Subnet Mask of the WAN1 port.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 11 7 MAC Address The MAC address of the W AN2 port. IP Addres s The IP addre ss of the WA N2 po rt. W AN2 Subnet Mask The Subnet Mask of the WAN2 port. Mode The mode of the controlled port. MAC Address The MAC address of the controlle d port. IP Addres s The IP addre ss of the cont rolled port. Controlled S[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 11 8 4.6.4 T raffic History This function is used to check the history of Edimax AC-M3000. The history of each day will be saved sepa rately in the DRAM for 3 days. Caution: Since the history is saved in th e DRAM, if you nee d to restart the system and also keep the history , then please manually copy and [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 11 9 y On-demand User Log As shown in the following figure, each line is a on -de mand u ser log reco rd consi sting of 13 fields, Da te , System Name , Ty p e , Name , IP , MAC , Pkt s In , Bytes In , Pkts Out, By tes Out, Expiretime , V alidtime and Remark , of user activities. y Roaming Out T raffic Hist[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 120 y Send T o: The e-mail address of the person whom the history em ail is for . This will be the receiver’s e-mail. Check which type of report to be sent— Monitor IP Report, T raffic History , On-demand User Log, and AP S tatus. y Interval: The time interval to send the e-mail report. C hoose a proper[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 121 4.7 Help On the screen, the Help button is on the upper right corner . Click Help to the Online Help window and then click the hyperli nk of the items to get the information.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 122 5. Appendix A – Console Interface Via this port to enter the co nsole interface for the admin istrator to handle the probl ems an d situations occurred during operation. 1. T o connect the console port of Edimax AC-M3000, you need a console, modem cable and a terminal simulation program, such as the H[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 123 y Utilities for network debugging The console interface provides severa l utilities to assi st the Administra tor to che ck the system conditions and to debug any problem s. The utilities are described as follow: ¾ Ping host (IP): By sending ICMP echo re que st to a sp ecified host and wait for the res[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 124 system also support s the SSH onli ne conne ction for the setu p. When using a null modem to connect to the system console, we do not need to enter administrator’s password to enter the console management interface. But connecting the system by SSH, we have to enter the username and p assword. The use[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 125 6. Appendix B – Network Confi gurati on on PC After Edimax AC-M3000 is install ed, the followin g configurations must be set up on the PC: Internet Conne ction Setup and TCP/IP Net work Setup . y Internet Connection Setu p If the Internet Connection of this client PC has been configured as use local a[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 126 3. Click Next when Welcome to the New Connection Wizard screen appears. 4. Choose “Connect to the Internet” and then click Next . 5. Choose “Set up my connection manually ” and then click Next .[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 127 6. Choose “Connect using a broadband connection that is al ways on” and then click Next . 7. Finally , click Finish to exit the Connection Wizard . Now , you have completed the setup.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 128 y TCP/IP Net work Setup In the default configuration, Edimax AC-M3000 will assign an appropriate IP address to a client PC which uses DHCP to obt ain IP addre ss automatically . Windo ws 95/98/2000/XP configures IP setup to “Obt ain an IP address automatically” in default setti ngs. If you want to c[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 129 1-2. Using DHCP: If want to use DHCP, please choose “Obtain an IP address au tomatically” and click OK . This is al so t he default setting of Windows. Then, reboot the PC to make sure a n IP address is obtained from Edimax AC-M3000. 2-2. Using Specific IP Address: If want to use specific IP address[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 130 7. Appendix C – IPSec VPN Edimax AC-M3000 has equ ipped with IPSec VPN feature start s fro m release version v1.00. T o fully utilize the nature supported IPSec VPN by Microsoft Win dows XP SP2(wit h p atch ) and Windows 2000 operating systems, Edimax AC-M3000 implement IPSec VPN tunneling technolo gy[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 131 During the first-time login to Edimax AC-M3000, Inte rnet Explorer will ask user to download the ActiveX component of IPSec VPN. This ActiveX component once d ownloa ded will be running paralleled with the “L ogin Success Page” after the p age being brought up successfu lly . The ActiveX component h[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 132 Suggestion: Please TURN OFF Internet Connection Firewall feature or upgra de the Windows OS into Wind ows XP SP2. 4. ICMP and Active Mode FTP On Windows XP SP2 without patching by KB889527, it will drop ICMP p ackets from IPSec tunnel. This problem can be fixed by upgrading p atch KB889 527. Before e na[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 133 Reasons may cause the Internet Explorer to stop the ActiveX unexpectedly as followings: a. The crash of Internet Explorer on running ActiveX Suggestion: Please reboot client’ s computer , once Windows se rvice is re sumed, go through the login process again. b. T erminate the Internet Explorer T ask f[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 134 c. There are some cases of Windows messages by wh ich Edimax AC-M3000 will hint current user to: (1) Close the Windo ws Internet Explorer , (2) Click “logout ” button on “login success” p age, (3) Clic k “b ack” or “refresh” of the sam e Internet Explorer , (4) Enter new URL in the same [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 135 8. Appendix D –Proxy Setting for Hotspot HotSpot is a place such as a coffee sho p, hotel, or a publ ic area where provides Wi-Fi service for mobile and temporary users. HotSpot is usually implemented without complicat ed network architecture and using some proxy servers provided by Intern et Service [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 136 3. Click the Proxy Server Properties from lef t menu and the homepage of the Proxy Server Properties will appear .[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 137 4. Add the ISP’s proxy Server IP and Port into External Proxy Server Setting.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 138 5. Enable Built-in Proxy Server in Internal Proxy Server Setting.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 139 6. Click Apply to save the settings .[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 140 9. Appendix E –Proxy Setting for Enterprise Enterprises usually isolate their intr a net and internet by using more elaborated net work archite cture. Many enterprises have their own proxy server whi ch is usua lly at intranet or DMZ under the firewall protection. In enterprises, network managers or M[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 141 3. Click the Proxy Server Properties from lef t menu and the homepage of the Proxy Server Properti es will appear .[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 142 4. Add your proxy Server IP and Port into Extern al Proxy Server Setting. 5. Disable Built-in Proxy Server in Internal Proxy Server Setting.[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 143 6. Click Apply to save the settings . Warning ： If your proxy server is disabled, it will make the user authentication operati on abnormal. When users open the browser, the login page won’t appear because the proxy se rver is down. Plea se make sure your proxy server is always available.  Client [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 144 2. Open browser to add default gateway I P address (e.g. 192.168.1.254) and logout page IP address “1.1.1.1” into proxy exception information. z For I.E z For firefox[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 145[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 146 10. Appendix F –Disclaimer for On-Demand Users In Edimax AC-M3000, the end user first gets a logi n page when she/he opens its we b browser right afte r associating with an access point. Ho wever , in some si tuations, the hotspot owners or MIS st aff may want to display “terms of use” or announce[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 147 return unescape(pham.sub string(offset, endstr)); // return cookie value section } i = pham.indexOf(" ", i) + 1; // move i to next name=value pair i f ( i = = 0 ) b r e a k ; / / n o m o r e v a l u e s i n c o o k i e s t r i n g } return null; // cookie not found } function CodeCookie(str) {[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 148 var i,j=d.MM_p.length,a=MM_preloadI mages.argument s; for(i =0; i<a.length; i++) if (a[i].indexOf("#")!=0){ d. MM_p[j]=new Image; d. MM_p[j++].src=a[i];}} } function MM_findObj(n, d) { //v4.01 var p,i,x; if(!d) d=document; if ((p=n.indexOf("?"))>0&&p arent.frames.length[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 149 if(form.mypassword.value == "") { alert("Please enter passwo rd."); form.mypassword.focus(); form.mypassword.select(); disableButton=false; return false; } if(disableButton==true) { alert("The system is now logging you in, plea se wait a moment."); return false; } e l s e {[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 150 disclaimer .style.display='none'; login.style.display=''; return true; } </script> </head> <body style="font-family: Arial" bgcolor="#FFFFFF" onload="init(Enter);MM_preloadI mages('../images/submit0.gif ','../images/clear0.gif&ap[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 151 illegal activities; customize, measure, an d improve o u r services and the site's content and layout; comp are information for accuracy , and verify it with third parties. We may discl ose personal information to respond to legal re qui reme nts, enforce our poli cie s, re spond to claims that an [...]

Edimax AC-M3000/AC-M1000 User ’s Manual 152 </tr> < t r > <td height="40"><table width="170" height=" 20" border="0" alig n="center" cellpadding="2" > < t r > <td align="left"><input name="selection" value="1" type=&quo[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 153 < / t r > < t r > < t d c o l s p a n = " 2 " > <div align="center"> <a onclick="javascript:if(Before_S ubmit(Enter)) {Enter .submit();}" onMouseOut="MM_swapImgRestore()" onMouseOver="MM_swapIm age('Image3','',&a[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 154 <tr> <td width="100%"> <font color="#808080" si ze="2" ><script language="JavaSc ript">document.write(copyri ght);</script></font></t d> </tr> </table> </div> </body> </html>[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 155 11. Appendix G—DHCP Relay AC-M3000 support s DHCP Relay define d accordin g to RFC 3046 . For scaling reasons, it is advantageous to set up an external DHCP server other than having the intern al DH CP server implemented in AC-M3000 to assign a n IP. When forwarding client-originated DHCP packets to a[...]

Edimax AC-M3000/AC-M1000 User ’s Manual 156 Here is an example of configurat ion file of the DHCP server: From the file, client that connects to AC-M3000 sends out a DHCP request. DHCP relay functi on in AC-M3000 is enabled and sending a Circuit ID 00:90: 0B:07:60:91_192.168.1. 254 to the external DHCP server . When DHCP server gets the Circuit I[...]