High-Power Wireless

150N Outdoor CPE /

Access Point
User Manual
Model 525794

INT-525794-UM-0715-01
TABLEOFCONTENTS
Introduction.......................................................................................................................................................................................................................3
PackageContents.........................................................................................................................................................................................................3
ProductFeatures..........................................................................................................................................................................................................3
ProductSpecifications..................................................................................................................................................................................................4
Hardware...........................................................................................................................................................................................................................4
DeviceStatusLEDs........................................................................................................................................................................................................4
Connectors....................................................................................................................................................................................................................5
PassivePoEInjector......................................................................................................................................................................................................5
Connectingthedevicetothenetwork..........................................................................................................................................................................6
Configuringthedevice.......................................................................................................................................................................................................7
Accessingthewebconfigurationinterface...................................................................................................................................................................7
SetupWizard................................................................................................................................................................................................................8
OperationModesWhentousewhich.....................................................................................................................................................................11
Router(Gateway)...................................................................................................................................................................................................11
WISPWirelessISP..................................................................................................................................................................................................12
AccessPoint...........................................................................................................................................................................................................13
Repeater................................................................................................................................................................................................................14
Status..........................................................................................................................................................................................................................15
WirelessSettings........................................................................................................................................................................................................16
Basic.......................................................................................................................................................................................................................16
MSSID...................................................................................................................................................................................................................16
ACL.........................................................................................................................................................................................................................16
WDS.......................................................................................................................................................................................................................17
WMM.....................................................................................................................................................................................................................19
Advanced...............................................................................................................................................................................................................20
Network......................................................................................................................................................................................................................23
NetworkSettingsinRouterMode.........................................................................................................................................................................23
NetworkSettingsinWISPMode............................................................................................................................................................................26
NetworkSettingsinAccessPoint(AP)Mode.........................................................................................................................................................27
NetworkSettingsinRepeaterMode......................................................................................................................................................................28
QoS(inRouterandWISPMode).................................................................................................................................................................................29
Security(inRouterandWISPMode)..........................................................................................................................................................................32
IP/PortFilter:.........................................................................................................................................................................................................33
URLFiltering:.........................................................................................................................................................................................................33
MACFiltering:........................................................................................................................................................................................................33
DoSProtection:......................................................................................................................................................................................................34
System........................................................................................................................................................................................................................35
PasswordSettings..................................................................................................................................................................................................35
TimeSettings.........................................................................................................................................................................................................35
Backup&Restore..................................................................................................................................................................................................35
FactoryDefaults.....................................................................................................................................................................................................36
Reboot...................................................................................................................................................................................................................36
SmartReboot.........................................................................................................................................................................................................36
WebServer............................................................................................................................................................................................................37
FirmwareUpgrade.................................................................................................................................................................................................37
DebugTools................................................................................................................................................................................................................38
LogSettings............................................................................................................................................................................................................38
PingTest................................................................................................................................................................................................................38
AppendixA:ChangingtheIPAddressofaNetworkAdapter...........................................................................................................................................39
AppendixB:Troubleshooting..........................................................................................................................................................................................44
AppendixC:DSCPValueTable.........................................................................................................................................................................................45
AppendixD:WarrantyInformation.................................................................................................................................................................................46

-2-
INTRODUCTION

TheIntellinetHighPowerWireless150NOutdoorCPEAccessPoint,Model525794,isacosteffectiveWISPCPE
(customerpremisesequipment)andlongdistancewirelessbridgesolution.Itcombinesthefunctionalityofaclassic
wirelessaccesspoint,awirelessISP(WISP)client,a10dBihighgainantennaandanIP65weatherproofenclosure.High
outputpower(upto4wattsinFCCregulatedcountries)andhighreceiversensitivitysignificantlyextendthe
transmissionrange,makingtheIntellinet525794WirelessCPEanexcellentchoiceforpointtopointwireless
connections.

TheHighPowerWireless150NOutdoorCPE/AccessPointprovidesmaximumwirelesssecuritybysupporting802.1x
userauthenticationforexternalRADIUSservers.OthersecurityfeaturesincludedinthisaccesspointareMACaddress
filtering,disableSSIDbroadcastandsupportforthelatestwirelessencryptionmechanisms.

PACKAGECONTENTS

Ensurethatthefollowingitemsareincluded:
HighPowerWireless150NOutdoorCPE/AccessPoint
Quickinstallationguide
InstallationCDwithusermanual(thisdocument)
PassivePoEpoweradapter
Polemountclamp

PRODUCTFEATURES

WirelessoutdoorCPEprovidesInternetconnectivitytoyour2.4GHzWirelessISP(WISP)
AlsosuitableforlongrangePtPbridgeconnections
Builtin10dBiantenna
Weatherproofandcorrosionresistant,IP65
Supportedmodes:Router(Gateway),AccessPoint,APClient,WISPandWDSBridge
Complieswith2.4GHzIEEE802.11nstandardandisbackwardcompatiblewithIEEE802.11g/bstandards
SupportsWEPandWPA/WPA2(TKIPandAES)dataencryption
SupportsmultipleESSIDswithindividualsecuritysettings
SupportsVPNpassthroughforL2TP,IPsecandPPTPconnections
Upto150Mbpsnetworklinkspeed
SMAconnectorforoptionalexternalantenna
LNA(LowNoiseAmplifier)technologyforimprovedradioperformance
IncludedpassivePOEinjectorforupto60meters(200feet)connectiondistance

-3-
PRODUCTSPECIFICATIONS

Standards
IEEE802.11b(11MbpsWirelessLAN)
IEEE802.11g(54MbpsWirelessLAN)
IEEE802.11n(150MbpsWirelessLAN)
IEEE802.1x(NetworkAccessControl)
IEEE802.3(10BaseTEthernet)
IEEE802.3u(100BaseTXFastEthernet)

Wireless
Wirelessfrequencyrange:2.4002.484GHz
EIRPOutputpowerEU(ETSI):20dBm
EIRPOutputpowerU.S.(FCC):36dBm
WirelesschannelsEU(ETSI):113,US(FCC):111

Power
Externalpoweradapter:12VDC,1.0A

HARDWARE

DEVICESTATUSLEDS

LEDIndicator State Description

PWR On TheIntellinetCPEAccessPointisturnedon.
Off TheIntellinetCPEAccessPointisturnedoff.
WLAN On Thewirelessradioisactive.
Off Thewirelessradioisinactive.
Flashing Thewirelessradioisactive,anddataisbeingtransmittedandreceived.
WAN On LinkonWANportisactive.
Off LinkonWANportisinactive.
Flashing LinkonWANportisactive,anddataisbeingtransmittedandreceived.
LAN On LinkonLANportisactive.
Off LinkonLANportisinactive.
Flashing LinkonLANportisactive,anddataisbeingtransmittedandreceived.

-4-
CONNECTORS

Item Description
1 Connectionforexternalpoweradapter(12VDC,1.0A).Usethis,ifyoudonotwanttoutilizethe
includedPassivePoEinjector.
2 FemaleRPSMAconnectorfortheconnectionofanexternalhighgainantenna.
3 Resetbutton.Depressfor10secondstoinitiatearesettofactorydefaultvalues.
4 LANconnectorandpassivePoEinputport.
ThisportneedstobeconnectedtoyourlocalnetworkviaaRJ45cable,ifyouusetheIntellinetCPE
AccessPointasaregularaccesspointorrepeater
5 OptionalWANconnector.ThisneedstobeusedifyouruntheIntellinetCPEAccessPointin
router/gatewaymode.Inthatscenario,theWANportmustbeconnectedtoaportthatprovides
Internetaccess,i.e.,theLANportonthecablemodem.

PASSIVEPOEINJECTOR

TheIntellinetCPEAccessPointcomeswithaPassivePoEInjectorthatenablestomergethepowersupplyanddatato
oneEthernetcableandsupplythemtotheaccesspointswithPoEinput(LAN)port.Ithasthreeconnectionpoints.A
powerinputportfortheexternal12VDCpoweradapter,aLANportfortheconnectiontoyourlocalnetwork,anda
PoEportfortheconnectiontotheaccesspointsLANport.

-5-
CONNECTINGTHEDEVICETOTHENETWORK

Item Description
1 Connecttheexternalpoweradapter(12VDC,1.0A) toapoweroutlet,andtothePassivePoE
injector.Oncetheconnectionismade,thepowerLEDonthePoEinjectorwilllightup.
2 ConnectastandardRJ45EthernetcabletotheLANportonthePassivePoEInjector.Thatcable
connectsthePoEinjector(andthustheaccesspoint)totherestofyournetwork.
3 ConnectastandardRJ45Ethernetcable(8P8C)fromthePoEportofthePassivePoEInjectortothe
LANportoftheIntellinetCPEAccessPoint.Thisconnectionprovidespoweranddataconnectivityto
theaccesspoint.

-6-
CONFIGURINGTHEDEVICE

ACCESSINGTHEWEBCONFIGURATIONINTERFACE

TheIntellinetCPEAccessPointisequippedwithanarrayoffeatures,whichcanbeconfiguredtoyourneeds.
Configurationisdonebymeansofastandardwebbrowser.Openhttp://192.168.2.1inyourWebbrowser,andthen
typeinadminastheusernameand1234asthepassword.ClickLogIntoconnect.

DefaultIPaddress:192.138.2.1
DefaultIPsubnetmask:255.255.255.0
Username:admin
Password:1234

Shouldyouencounterproblemsconnectingtothewebinterfaceoftheaccesspoint,oneofthefollowingissuesmaybe
occurring.

YourcomputersIPaddressisnotcompatibletotheIPaddressoftheIntellinetCPEAccessPoint.Itmustbein
rangeof192.168.2.2to192.168.2.254.
RefertoAppendixAforinformationonhowtosetuptheIPaddressofthenetworkadapter.
TheIntellinetCPEAccessPointisntproperlyconnectedtoeithertheLANportofyourcomputer,orthe
network.VerifythattheLANstatusLEDislit.
TheIPaddressofyourIntellinetCPEAccessPointmayhavebeenchanged.Tovecertain,ahardwarereset
shouldbeperformed.Todothat,simplypresstheresetbuttonfor10secondswhilethedeviceispoweredup.

-7-
SETUPWIZARD

Thesetupwizardshouldonlybeused,ifyouwanttosetuptheIntellinetCPEAccessPointasaCPEforawirelessISP.
Allotheroperationalmodesaresetupwithouttheuseofthesetupwizard.Foradescriptionoftheoperationalmodes,
refertothenextsection.

Onthefirstscreenofthesetupwizardyouneedtodefinewhichwirelesssignalyouwanttoconnectto.Thatsignal
shouldbethewirelesssignalofyourwirelessISP.ClickonScantodisplayofalistofallavailablewirelessnetworks,
selectthenetworkofyourWISP,andthentypeinthepasswordrequiredfortheWISPintheWPAKeyfield.
YoualsoneedtoselecttheWANTypethatiscompatibletothesettingsofyourWISP.

ThesecondscreenallowsyoutodefinethedeviceIPaddressoftheIntellinetCPEAccessPoint.Thedefaultvalueis
192.168.2.1.

-8-

ThethirdsetupwizardscreendealswiththeDHCPserverfunctionoftheIntellinetCPEAccessPoint.Whetherornot
youwillneedtousethis,willdependonyourWISP.However,itismorelikelythannot,thattheDHCPservershouldbe
disabled.IfyoudoneedtoenabletheDHCPserver,thenyouwillneedtofillouttheIPaddressrelatedfields.

Screennumberfourletsyousetupwirelessserviceforyourlocalclients.Ifyoudisableit,thenInternetservicewillonly
beavailabletoclientsthatareconnectedtotheLANportoftheaccesspoint,eitherdirectly,orindirectlyviaaswitch.
Ifyouenablethewirelessfunction,thenyouneedtodefinetheusualwirelessparameters,suchastheSSIDandthe
securitysettings.

ClickApplytosavethesettingsandreboottheaccesspoint.

-9-
Oncetherebootiscompleted,theIntellinetCPEAccess
PointwilltrytoestablishaconnectionwiththeWISPsignal,
indicatedbythestatusConnecting.ClickRefreshafterabout
30secondsandthestatuswillhavechangedtoConnected.

Thisscreenprovidesdetailedinformationaboutthe
connectiontotheWISPsignal,anditallowstoDisconnect
andReconnecttheWISPsignalusingthecorresponding
buttons.

- 10 -
OPERATIONMODESWHENTOUSEWHICH

YourIntellinetCPEAccessPointsupports4operationmodes:Router(Gateway),
WISP,AccessPoint(AP)andRepeater.Beforeyoustartmakingchangestothe
configuration,youshouldfamiliarizeyourselfwiththesemodes.

ROUTER(GATEWAY)
ArouterconnectsmultiplelocalnetworkclientstooneInternetconnection,andprovidesbasicNATfirewallprotection
atthesametime.UsethismodeifyouwanttheIntellinetCPEAccessPointtofunctionasthe(wireless)routerinyour
network.Ifyouchoosethismode,youmustconnecttheWANportoftheaccesspointtoanetworkportthatprovides
Internetconnection,suchasaDSLorcablemodem.

SelectthecorrectWANtypeforyourISP,e.g.,PPPOEforxDSLconnections,orDHCPforcableInternetservice.Ifyou
selectPPPOE,youmustprovidetheusernameandpassword,aswellasadvancedparameterssuchasMTU,LCPecho
intervalandfailure.YourDSLserviceprovidehasthisinformation.IfyourInternetserviceusesstaticIP,youllneedto
entertheIPaddressandrelatedinformationintotheconfigurationinterface.Inmanycases,however,yourInternet
accessisestablishedbymeansofDHCP.InthiscasethereisnothingtoconfigurebuttheoptionalclonedMACaddress,
whichyouonlyneedtoenterifyourInternetservicerequiresacertainMACaddress.

TheNATfunctionshouldbeenabled,asitprovidesthebasicrouterandfirewallfunctionalityyouwouldexpectfroma
router.

- 11 -
WISPWIRELESSISP
AwirelessInternetserviceprovider(WISP)isanInternetserviceproviderwithanetworkbasedonwireless
networking.IfyouliveinanareawhereInternetserviceisprovidedbya2.4GHzWirelessIEEE802.11nsignal,youcan
utilizetheIntellinetAccessPointasaCPE(Customerpremisesequipment).WhenyouactivateWISPmode,youwill
needtospecifytheSSIDoftheWISPsignal,alongwiththesecuritysettingsifsorequired.Youalsoneedtodefinehow
theconnectiontotheWISPisestablished,i.e.,DHCP,PPPoE,etc.Aftertheobligatoryreboot,theIntellinetCPE
wirelesslyconnectstotheWISP,andalsoprovideslocalwirelessaccessinyournetwork.

ClickonScantosearchforavailablewirelesssignalsinthearea.Selectthewirelessnetwork(wlan_ISPinthe
exampleabove),andthechannel,securitymodeandWLANEncryptwillbefilledoutautomatically.Typeinthe
passwordforthewirelessnetworkinthefieldWPAKey.NotethatthisisonlyrequirediftheWISPsignalusesWPA
encryption.ShouldtheWISPsignaluseWEPencryption,theinterfacepresentsyouwithslightlydifferentfieldsthat
needtobefilledout,namelytheWEPkeytype,keyidentifierandtheactualWEPkeyfields.
LockBSSIDmakessurethattheIntellinetCPEAccessPointwillalwaysconnecttothisWISPsignal,evenifthenameof
theWISPsignalweretoeverchange.

- 12 -
ACCESSPOINT
ThisisthedefaultoperationmodeoftheIntellinetCPEAccessPoint.Awirelessaccesspoint(AP)isadevicethatallows
wirelessdevicestoconnecttoawirednetworkusingWiFi.Inthismode,thedeviceactsasasimplenetworkswitch
connectingwirelessandwirednetworkclients.

InordertousetheIntellinetCPEasanaccesspoint,youneedtosettheStatustoEnable,settheModeto11B/G/N
(recommended),settheChanneltoavaluethatputsthiswirelessnetworkatleast4channelsapartfromanexisting
wirelessnetworkthatmightbeincloseproximity.Forexample,ifanotherwirelessnetworkinrangeissettochannel2,
thenitdbebesttosetyourIntellinetCPEAccessPointtochannel6orhigher.Next,providetheSSIDandsetupthe
SecurityModeforthewirelessnetwork.WPA2PSKisrecommendedasitprovidesthemostrobustsecurityforyour
wirelessnetwork.
IfyouuseaRadiusserverinyournetworktoauthenticatethewireless
clients,youmustselectEnterpriseasthesecuritymode,andagainthe
WPA2variantisthepreferredchoice.IfyouselectEnterpriseencryption,
youmustprovidetheserveraddress,portandsharedsecretkey.


Finally,youmustspecifythelocalIPaddressforyouraccesspoint.Thedefaultaddressis192.168.2.1,butyoucan
changeithereifyousodesire.Seenextpageforfurtherdetails.

- 13 -
REPEATER
Awirelessrepeater(alsocalledwirelessrangeextender)takesanexistingsignalfromawirelessrouterorwireless
accesspointandrebroadcastsittoamplifythewirelesssignal,extendingitsrangeintheprocess.Whenyouactivate
thismode,youneedtospecifythewirelessnetworkwhichyouwishtorepeat,oramplify.Afteryouprovidethe
requiredsecurityinformation,theIntellinetCPEAccessPointperformsarestart.

ThesetupisvirtuallyidenticaltotheWISPmode.ClickScantoshowwirelessnetworksinrange,thenselectthe
wirelessnetworkthatyouwithtorepeat(extenditsrange),andprovidetherequiredsecurityforthenetwork.Similar
totheAccessPointmode,youcanalsodefinetheLocalIPSettings.SelectDHCP,andtheIntellinetaccesspointwill
receiveitsIPsettingsfromaDHCPserverinyournetwork,mostlikelythatwillbeyourrouter,andselectStaticifyou
wanttocontroltheIPaddressandrelatedsettingsyourself.

- 14 -
STATUS

ThissectionprovidesvariousbitsandpiecesofinformationaboutthecurrentstatusoftheIntellinetCPEWireless
AccessPoint.Dependingontheoperationalmodethedeviceissetto,youwillseeoneofthefourpossiblemenus
below.

WAN
IftheaccesspointisoperatinginRouter(Gateway)mode,you
canseeinformationaboutthestatusoftheInternetconnection
onthispage,including,butnotlimitedtotheWANIPaddress
anddatatraffic.Additionalinformationcanbefoundonthe
WANpagessidebarinyourwebbrowser.

WISP
IftheIntellinetCPEAccessPointisconnectedtoawirelessISP,somerelatedinformationabouttheWISP
connectioncanbeobtainedfromthisstatusscreen.RefertothehelpsidebarontheWISPinformationpage
inyourwebbrowser.

Repeater
Ifthedeviceissetupasarepeater,youcanseeinformationonthecurrentconnectionstatusonthispage.
Thiscanbehelpfulifyouneedtotroubleshootapotentialproblemrelatedtotherepeaterconnection.

AccessPoint
Thisoptionisavailableregardlessoftheoperationalmodeandshowsrelatedinformationtothecurrent
wirelessfunction,suchastheSSID,channel,securityorconnectedclients.

LAN
ThisoptionisavailableregardlessoftheoperationalmodeandshowsinformationrelevanttotheLAN
connectionstatusoftheIntellinetCPEAccessPoint,includingforexampleitsIPaddress.

DHCPServer
TheIntellinetCPEAccessPointisequippedwithaninternalDHCPserver,whichmeansitcanprovideIP
addressestoconnectedclients.Thisscreenshowswhichclientsareconnectedintotal,andofthose,which
haveobtainedanIPaddressfromtheIntellinetCPEAccessPoint.

System
Basicsysteminformation,includingfirmwareversion,hardwareversionandsystemuptime.

- 15 -
WIRELESSSETTINGS

ThismenuprovidesaccesstoallparametersrelatedtothewirelessfunctionoftheIntellinetCPEAccessPoint.

BASIC
Asthenamesuggests,hereyoucancontrolthebasicsettings
relatedtothewirelessfunction.Youcandefinethenameof
thewirelessnetwork(SSID),thechannel,securitysettings,
i.e.,thewirelesspassword,youcanactivatewirelessclient
isolationwhichpreventscommunicationbetweenwireless
clients,andyoucanenableordisablethebroadcastofthe
SSID.Forinformationaboutthesecuritysettings,referto
sectionOperationModesAccessPoint.

MSSID
TheIntellinetCPEcansimultaneouslybroadcastfourdifferent
wirelessnetworks(SSIDs).Eachwirelessnetworkcanhaveits
ownsettings.

MSSIDSelectletsyoudefine,whichofthethreeadditional
SSIDsyouwanttoconfigure.Onceselected,youcanproceed
settinguptheparametersthesamewayasyoudidforthe
mainSSIDaboveunderBasic.

ACL
ACLstandardsforaccesscontrollist.Withthisfeature,you
cancontrolwhohasaccesstothewirelessnetwork,andhow
manysimultaneoususersareaallowed.Allofthiscanbe
controlledforeachofthefourSSIDsindependently.

MSSIDSelectletsyoudefine,whichofthefourSSIDsyou
wanttoconfigure.TheMaxStationparameterallowsto
defineanupperconnectionlimitfortheparticularSSID.This
canbehelpfuliftheaccesspointisinstalledinabusyareaand
youneedtoputacapontheactiveuserstoensureadecent
wirelessperformancefortheconnectednetworkclients.

- 16 -
ThesecondfeatureistheACLStatus,whichallows(valueAccept)ordisallows(valueDrop)accessbasedonthe
MACaddressofthewirelessnetworkclient.EntertheMacAddressmanually,orclicktheRescanbuttontofindthe
MACaddressofaconnectedwirelessclientautomatically,andthenclickAddtoaddtheMACaddresstothe
configuration.

WDS
WDS(WirelessDistributionSystem)isamethodoflinkingtwoormorewirelessaccesspointsorwirelessrouters
together,withoutphysicallyconnectingthem.WDSisasystemenablingthewirelessinterconnectionofaccesspoints
inanIEEE802.11network.Itallowsawirelessnetworktobeexpandedusingmultipleaccesspointswithoutthe
traditionalrequirementforawiredbackbonetolinkthem,andthatsavesinstallationcost.

ButWDSisntwithoutitsproblems.DependingontheWDSsetup,theperformancecansuffergreatly,asmuchasa
lossof50%oftransferspeedperhop(accesspointinWDSmode).Ifthroughputandlowlatencyareimportanttoyou,
thenWDS,asimplementedinnonenterpriseequipmentsuchasyourIntellinetCPEAccessPoint,isntreallyagood
option.WDSalsosuffersfromtheproblemthatonlystaticWPAkeyscanbeused,eliminatingoneofthekeystrength
ofWPA2encryptedwirelessnetworks.Ifsecurityisofgreatimportancetoyou,WDSisnttheidealmodetousefor
yourwirelessnetwork.WDSsetupsarealsorestrictedinthatonlythesameequipmentcanbeusedinthesetup.Even
otheraccesspointsfromthesamemanufacturer,Intellinetincluded,maynotbecompatibleduetothefactthatoften
differentchipsetsfromdifferentchipsetmanufacturersareused.

Availablemodes:
LazyInthismodetheaccesspointwillautomaticallyconnectwithotherWDSdevicesthatusethesameSSID,
channel,encryptionmode,andphysicalmode.ThereisnoneedtomanuallytypeintheMACaddressesoftheother
WDSAPs.However,oneoftheparticipatingaccesspointsmustbesettoBridgeorBridge+mode.Theycantallbelazy.

BridgeThismodecanbeusedtoconnecttwonetworkstogether.AllWDSbridgesmustbesettothesamechannel,
SSID,encryptionmodeandphysicalmode.NotethattheaccesspointinWDSBridgemodeonlycommunicateswith
otherWDSbridges,butnotwithwirelessclients.

- 17 -
Bridge+Thismodecanbeusedtoconnecttwonetworkstogether.AllWDSbridgesmustbesettothesamechannel,
SSID,encryptionmodeandphysicalmode.UnlikeBridgemode,theBridge+modeallowstheaccesspointto
communicatewithwirelessclientsandotherWDSbridgesatthesametime.However,donotethatduetothe
directionalantennacharacteristicsoftheIntellinetCPEAccessPoint,theuseablewirelesssignalislimitedtoarather
narrowbeam.Thatisgoodforpointtopointconnections,butwhenyouwanttoconnectwirelessclientsthatarein
thevicinityoftheaccesspointonallsides,notjustintheareaofthebeam,itisnotanidealsolution.Insucha
situation,theuseofanOmnidirectionalantennaconnectedtotheexternalantennaconnectorwouldbe
recommended.

RepeaterInthismode,WPSrepeatersrebroadcastanexistingwirelesssignalandbydoingsoextendtherangeof
thewirelessnetwork.Itworksprettymuchthesamewayastheuniversalrepeatermode(seesectionOperation
Modes),excepttheWDSrepeaterofferssomeadvantagesanddisadvantagesoverthestandardrepeatermode.The
advantageisthattheWDSrepeatercreatesatransparentwirelessrepeatednetworkwheretheconnectingdevices
MACaddressescansuccessfullypassthroughthenetworkandaccesstoothernetworkclients.Assuch,theWDS
repeaterconnectionisinvisibletothenetworkclients.Itsasiftheywereconnectedviaacable.Ontheotherhand,
theuniversalrepeatermodedoesnotprovidethistransparency,anditisnotguaranteedthatallclientsinthelocal
networkcanalwaysproperlyseeeachother.Notonlythat,butwhenusingauniversalrepeaterincombinationwitha
wirelesshotspot(suchasIntellinetsGuestGateMKII),theloginorwelcomepagemaynotappearcorrectlyforyouas
mostWiFihotspotauthenticationsolutionsrequirecapturingtheMACaddressofyourtablet,smartphoneorlaptop
whichmaynotsuccessfullypassthroughtheuniversalrepeater.ButWDS,asweheardbefore,hasitsownshareof
problems:massiveperformancepenalties,poorcompatibilitytootherhardwareandreducedsecurity.

- 18 -
ThePhysicalModemustbesettothesamevaluesonallparticipatingWDSaccesspoints.YouwillwanttouseHTMIX
for11b/g/nmixedmode,andGreenFieldfor802.11nonlymode.SelectCCKfor802.11bmodeandOFDMfor802.11g
mode.

YouneedtoprovidetheMACaddressesoftheotherWDSAPsunderWDS14Settings,unlessyouusethelazymode.
ClickonScantodisplayalistofwirelessnetworksinrangeandselectthenetworktowhichyouwanttocreateaWDS
connection.SelectthecorrectEncryptTypeandprovidetherequiredKey.Youcanconnecttoupto4differentaccess
pointsinWDSmode.

WMM
WirelessMultimediaExtensions(WME),alsoknownas
WiFiMultimedia(WMM),isaWiFiAlliance
interoperabilitycertification,basedontheIEEE
802.11estandard.ItprovidesbasicQualityofservice
(QoS)featuresforwirelessIEEE802.11networks.
WMMprioritizestrafficaccordingtofouraccess
categories(ACforshort):
1.Voice
2.Video
3.Besteffort
4.Background.
ItissuitableforwelldefinedapplicationsthatrequireQoS,suchasVoiceoverIP(VoIP)onWiFiphones(VoWLAN).
However,itdoesnotprovideguaranteedthroughput.

AsfortheIntellinetCPEAccessPoint,WMMcanbedisabledorenabledforeachofthefourSSIDsindependently.
WMMshouldbeenabledforallSSIDstoensurethehighestpossiblelinkspeedof150Mbps.Thereisreallynoreason
todisable,unlessyouareexperiencingtechnicaldifficultiesandwanttodisableWMMaspartofthetroubleshooting.

- 19 -
ADVANCED
Thispageprovidesaccesstosettingsand
parametersthatarebestleftattheirfactory
defaultvalues,unlessyouhavesufficient
knowledgeaboutwirelessnetworks.While
impropersettingscannotcauseanyharmtothe
accesspoint,theycanhaveanegativeimpacton
theperformanceofyourwirelessnetwork,tothe
pointwhereyoumayneedtoperformahardware
resetontheIntellinetCPEAccessPointtoget
thingsrunningsmoothlyagain.

TXPower:Controlsthestrengthofthewireless
signal.

TXBurst:TxBurstmode(packetoverdrive)isonly
applicableforIEEE802.11b/gclients,whichmeans
thatTxBurstingdoesnotapplytowirelessIEEE
802.11norIEEE802.11acnetworks.

TXPreamble:Enableordisabletheshort
preamble.IfsettoEnable,theaccesspointwill
operatewiththeshortpreamblesettings,andif
settoDisable,thelongpreambleisactive.Unless
youhavelegacy802.11b(1or2Mbps)clientsin
yournetwork,there'snoneedforalongpreamble,andyoucanleavethisoptionenabled.

BeaconInterval:AwirelessaccesspointssendsoutspecificdatapacketscontainingtheSSID,thechannelnumber,and
securitysettings.Thesepacketsarecalledbeacons.Anyclientthatwantstojoinawirelessnetworklistensforthese
beaconframes,andanywirelessclientalreadyconnectedalsoreceivesthemwhenevertheyaresentout.Thebeacon
intervalcontrolshowoftentheaccesspointbroadcaststhebeaconframes.Possiblevaluesrangefrom20to1000(ms).
Theshorterthebeaconinterval,themoreoftenarethebeaconframessentout.Themoreoftenthebeaconframes
aresentout,thequickertheassociationandroamingprocesswillbe,butitalsoleadstomorenetworkoverhead,
whichthenleadstoadropinthroughputperformance.Increasethebeaconintervaltoreducethenetworkoverhead,
butthatcomesattheexpensiveofaslightlyslowerassociationtime,whichmeansittakesjustalittlebitlongerfor
wirelessclientstojointhenetwork.Thedefaultvalueis100.

DataBeaconRate(DTIM):TheDTIM(deliverytrafficindicationmap)ratenotifiesawirelessclientwithpowersave
modehowmanybeaconsuntilbufferedmulticasttrafficwillbebroadcastbytheaccesspoint.ThehighertheDTIM
rate,thelongeraclientdevicemaysleepandthereforethemorepowerthatparticularclientdevicemaypotentially
save.Youcanspecifyavaluebetween1and255.Thedefaultvalueis1,whichmakestheDTIMIntervalthesameasthe
BeaconInterval.

BGProtection:B/GProtection,shouldbesettoOn.TheB/GProtectionmodeensuresthatolderwireless802.11band
802.11gdeviceswillnotdegradetheperformanceofthemuchfasterwireless802.11nnetwork.So,ifyouhaveamix
ofolderandnewerwirelessstationsinthenetwork,itsrecommendedthatyouenabletheprotectionmechanism.
OnlyifyouknowforcertainthatyournetworkconsistsonlyofwirelessNclientsshouldyouconsiderdisablingthis
option,asitcanincreasetheperformanceofyourconnectionseversoslightly.

- 20 -
FragmentThreshold:Thefragmentationthresholdisusedtosetthemaximumpacketssizethataclientwillsend.The
smallerthemaximumsizesthebetterthereliabilityofthewirelessconnection,buttheperformanceislikelyto
decrease.Possiblevaluesrangefrom256tothedefaultvalueof2346(bytes).So,thenwhenshouldyouchangethis
value?Onlyifyouneedtoimprovethereliabilityofawirelessconnectionwhereperformanceissecondary.Usually
youdomoreharmthangoodifyoulowerthefragmentthreshold.

RTSThreshold:RTS(Requesttosend)packetsaresentbywirelessclientstoaccesspoints.Theclientsessentiallyask
forpermissiontosendthenextdatapacket.Thelowerthethreshold,themorestableyourwirelessnetwork,sinceit
essentiallyasksmoreoftenwhensendingpackages.Thedefaultvalueis2347,andyouarewelladvisedtoleavethis
valueunchanged.

GuardInterval:Thisoptionactivatestheshortguardinterval(SGI)whensetto400ns,whichcanincreaseyour
wirelessperformancebyupto11%.Ifyourwirelessaccesspointisinstalledinaverycrowdednetworkenvironment
withdifferentaccesspointsoccupydifferentchannelsallaroundyou,theslowerguardintervalof800nswillprovide
betterresults.

SpaceTimeBlockCoding(STBC):STBCisanoptionalfeatureinthe802.11nstandardisusedtoachievethesignalto
noiseratioontheRFreceiver.

ReverseDirectionGrant(RDG):Improvestheefficiencyofatwowaycommunication.Enablingthisisrecommended.

AggregationMSDU(AMSDU)andAutoBlockACK:
Everyframetransmittedbyan802.11devicehasasignificantamountofoverhead,includingradiolevelheaders,
MediaAccessControl(MAC)framefields,interframespacing,andacknowledgmentoftransmittedframes.Atthe
highestdatarates,thisoverheadcanconsumemorebandwidththanthepayloaddataframe.Toaddressthisissue,the
802.11nstandarddefinestwotypesofframeaggregation:MACServiceDataUnit(MSDU)aggregationandMAC
ProtocolDataUnit(MPDU)aggregation.Bothtypesgroupseveraldataframesintoonelargeframe.Because
managementinformationneedstobespecifiedonlyonceperframe,theratioofpayloaddatatothetotalvolumeof
dataishigher,allowinghigherthroughput.
MSDUaggregationreliesonthefactthatmostmobileaccesspointsandmostmobileclientprotocolstacksuse
Ethernetastheir"native"frameformat.ItcollectsEthernetframestobetransmittedtooneormultipledestinations
andwrapstheminasingle802.11nframe.ThisisefficientbecauseEthernetheadersaremuchshorterthan802.11
headers.AnAMSDUcontainsonlyMSDUswhoseDAandSAparametervaluesmaptothesamereceiveraddress(RA)
andtransmitteraddress(TA)values,i.e.,alltheMSDUsareintendedtobereceivedbyasinglereceiver,andnecessarily
theyarealltransmittedbythesametransmitter.
MPDUaggregationalsocollectsEthernetframestobetransmittedtoasingledestination,butitwrapseachframeinan
802.11nMACheader.NormallythisislessefficientthanMSDUaggregation,butitmaybemoreefficientin
environmentswithhigherrorrates,becauseofamechanismcalledblockacknowledgement.Thismechanismallows
eachoftheaggregateddataframestobeindividuallyacknowledgedorretransmittedifaffectedbyanerror.

DeclineBARequest:TheBlockACKRequest(BAR)frameissentpriortoaseriesofframesthatthetransmitterwould
liketobeacknowledged.WithoutablockACKrequest,thereceivercannotsendablockACK.Withthisoptionyoucan
selecttoeitheracceptorrejectpeerBArequests.

- 21 -
HTSupportTKIP:HTstandsforHighThroughputandisoftenusedasanabbreviationforIEEE802.11n.Whenenabled,
thisoptionpreventstheuseofTKIPdataencryptionwhenusing802.11nhighthroughputdatarates.

PacketAggregate:Packetaggregationistheprocessofjoiningmultiplepacketstogetherintoasingletransmissionunit,
inordertoreducetheoverheadassociatedwitheachtransmission.

ShortSlot:Shortslottimereducestheslottimefrom20microsecondsto9microseconds.Whenenabled,itincreases
thethroughputonthe802.11g,2.4GHzradio.IEEE802.11bisnotcompatiblewithshortslottime.

SSIDIsolated:SettoenabledifyouwanttopreventthedifferentSSIDsfromseeingeachother.Whenenabled,traffic
ononeSSIDwillnotbeforwardedtoanyotherSSIDs.Notethatunlikewirelessclientisolation,SSIDisolationdoesnot
preventwirelessclientsthatareconnectedtothesameSSIDfromcommunicatingwitheachother.

StationIdletoDisconnect(second):DisconnectsidelWLANclientsfromthenetworkafterthespecifiedidletimehas
elapsed.

StationLowSignaltoDisconnect(dBm):IfyouenablethisbyenteringadBMvalue,youcanforceawirelessclientto
dropthenetwork,ifthesignalstrengthisbelowthespecifiedthresholdvalue.Theideaisthatoncetheclientisforced
todisconnect,thestationswillattempttoreassociatewiththebestavailableAP,eliminatingthe'stickynode'or
stickyclientproblem.Olderwirelessadaptersoftenexhibitthisstickyclientbehaviorwheretherewillassociatetoan
accesspointandholdontothatassociationuntilthatsignalisgone,despitethefactthatallalongtherewerecloser
accesspointsforthemtoassociatetothatwouldhaveprovidedamuchstrongerconnection.

AntennaMode:ifyouconnectanexternalantennatotheSMAportoftheaccesspoint,youneedtosetittoexternal,
otherwiseinternalistherightchoice.

- 22 -
NETWORK

TheIntellinetWirelessCPEAccessPointsnotonlyprovideswirelessfunctionality,butitalso
allowstheclientstoconnecttoandcommunicatewiththelocalwirednetwork.Thissection
explainsthevariousnetworkconfigurationoptionsforthedifferentoperationmodes.

NETWORKSETTINGSINROUTERMODE

Inroutermode,theWANportoftheIntellinetCPEAccessPointmustbeconnectedtoacableorDSLmodemwiththe
WANport.Inaddition,youmustsetuptheWANconnectioninthedevicesettings.First,youmustselecttheWAN
TypeappropriateforyourInternetconnection.AvailablearePPPoE(forDSL),DHCP(forcabletypeInternet)orStatic
(forstaticIPsetups).

PPPoE:
Youmustprovidetheusernameandpasswordforthe
DSLconnection.AdditionalparameterssuchastheMTU
size,LCP,ISPnameandtheMACaddressmayalsobe
required,butthatdependsonyourInternetservice
provider.
AnMTUsizeof1500isconsideredstandard,butsmaller
MTUvalues(aslowas1400)cansometimesbe
required.Again,whenindoubt,checkwithyour
Internetserviceprovider.

DHCP:
Themostcommonandeasiesttosetupmethod.It
sometimesrequirestheMACaddresstomatchthe
recordsoftheInternetserviceprovider,inwhichcase
youcanusetheMACAddressClonefunction.

Static:
ShouldyourInternetconnectionrequirestaticIP
settings,thenyouhavetoenterthemonthisscreen.IP
address,subnetmaskandDNS1andmandatoryentries.
DNS2isrecommendedasabackup,andtheMAC
AddressClonefunctioncanbeusediftheInternet
servicerequiresaspecificMACaddresstobeused.

HereyoudefinetheIPaddressoftheAccessPointinthe
localnetwork.Thedefaultvalueis192.168.2.1andgives
youaccesstothewebUIviahttp://192.168.2.1.YoucanmakechangestothisIPaddress,e.g.,tomaketheIntellinet
accesspointpartofthelocalnetwork,whichmayberunningonadifferentsubnet.

- 23 -


WhenusingtheIntellinetCPEAccessPointasarouter,
youwilltypicallywanttoenabletheDHCPserver
function.Onceenabled,therouterprovidesIPaddress
informationtotheconnectedclients,justlikeany
ordinaryrouterwoulddo.Withthatinformation,clients
canaccesstheInternetviatherouter.
ForinformationabouttheIPaddresses,lease,gatewayandDNS,refertotheonscreenhelp.

CustomStaticRoutes:Staticroutingisaformofroutingthatoccurswhenarouterusesamanuallyconfiguredrouting
entry,ratherthaninformationfromadynamicroutingprotocoltoforwardtraffic.Unlikedynamicrouting,staticroutes
arefixedanddonotchangeifthenetworkischangedorreconfigured.Staticroutinganddynamicroutingarenot
mutuallyexclusive.
Example:TorouteIPtrafficdestinedforthenetwork10.10.42.0/24viathenexthoprouterwiththeIPv4addressof
192.168.42.1,enterthefollowinginformation:

AddStaticIP/MACBindingRules:Inordertoensurethat
anetworkclientalwaysreceivesthesameIPaddress
fromtherouter,youcanhavetherouterassignastaticIP
addresstothatclient.Thiscanbehelpfulifyouhavea
localserverforwhichyouwanttoassignastaticIP
withoutactuallyhavingtoconfigureastaticIPaddresson
thelocalserver.Toassignastaticallocation,typeintheMACaddressoftheclientforwhichyouwanttocreateastatic
DHCPlease,andalsotypeintheIPaddressandleasetimeyouwishtouse.ClickAddtocreatethestaticIP/Mac
bindingrule.

Ifyouwanttomakecertainlocalnetworkclients,called
serversinthiscircumstance,accessiblefromtheInternet,
youneedtocreatesocalledportforwardingrules.
Withoutthoserulesinplace,therouterwouldsimply
rejectanyconnectionattemptmadetotheserviceportin
question.Forexample,ifyouhavealocalFTPServerthat
isinstalledwithastaticIPaddressof192.168.2.100,then
youneedtocreateaportforwardingruleforport21TCP(StandardFTP)forthatIPaddress.Nowifauserfromoutside
yourLANsendsarequesttotherouteronport21,therouterwillthenpromptlyforwardtherequesttoIPaddress
192.168.2.100.Refertotheonscreenhelpforadditionalinformation.

DMZstandsfordemilitarizedzone.Youcanactivatethis
optionforasingleIPaddressonyourlocalnetwork.Once
activated,anytrafficsenttoyourpublicIPaddressforanyserviceportwillberedirectedtothelocalIPaddress
specifiedastheDMZhost.IfweapplythistoourexampleofFTPserveratIP192.168.2.100,itwouldmeanthatnot
onlypacketsforport21arebeingforwardedtoitsIPaddress,butanyrequestonanyport.Asthiscompletelyexposes
thelocalserveronIP192.168.2.100totrafficontheInternet,thatserverisatgreaterriskofbeingattackedbyhackers,
- 24 -
worms,virusesorscriptkiddies.

Staticroutingisaformofroutingthatoccurswhena
routerusesamanuallyconfiguredroutingentry,rather
thaninformationfromadynamicroutingprotocolto
forwardtraffic.Settingupstaticroutesrequires
fundamentalunderstandingofTCP/IPandshouldonlybe
donebyqualifiedpersonal.Refertotheonscreenhelpfor
additionalinformation.

DDNS(DynamicDNS)isanIPtohostnamemapping
serviceforInternetuserswhodonthaveastatic(fixed)IP
address.Itwillbeaproblemwhenauserwantstoprovide
servicestootherusersontheInternetbecausetheirIP
addresseswillvaryeverytimetheyconnect,andtheywillnotbeabletoknowtheIPaddresstheyreusingatany
certaintime.ThisroutersupportstheDDNSserviceofaplethoraofserviceproviders.Refertotheonscreenhelpfor
additionalinformation.

Thisfunctionenablesnetworkautoconfigurationforpeer
topeercommunications.Withthisfunction,network
deviceswillbeabletocommunicatewithotherUPnPenableddevicesdirectlyandlearnaboutotherdevices.Many
networkdevicesandapplicationsrelyonUPnPfunctionnowadays.

- 25 -
NETWORKSETTINGSINWISPMODE
WhentheIntellinetCPEAccessPointoperatesinWISPmode,itconnectswirelesslytoa2.4GHzWiFisignalfroma
WirelessInternetServiceProvider.

AlloptionsexceptforWISPareidenticaltotheRoutermodeasdiscussedintheprevioussection.

ClickonScan/Rescantosearchforavailable
wirelesssignalsinthearea.Selectthewireless
network(wlan_ISPintheexample),andthe
channel,securitymodeandWLANEncryptwillbe
filledoutautomatically.Typeinthepasswordfor
thewirelessnetworkinthefieldWPAKey.Note
thatthisisonlyrequirediftheWISPsignaluses
WPAencryption.ShouldtheWISPsignaluseWEP
encryption,theinterfacepresentsyouwithslightly
differentfieldsthatneedtobefilledout,namely
theWEPkeytype,keyidentifierandtheactual
WEPkeyfields.

LockBSSIDmakessurethattheIntellinetCPEAccessPointwillalwaysconnecttothisWISPsignal,evenifthenameof
theWISPsignalweretoeverchange.

WISPAccessSettingsareusedtodefinewhattypeofInternetconnectiontheWISPsignaluses.Availablechoicesare
PPPoE(forDSL),DHCP(forcable)andStatic(IP).

- 26 -
NETWORKSETTINGSINACCESSPOINT(AP)MODE
WhenusingtheIntellinetCPEasastandardaccesspoint(AP),therearenot
nearlyasmanysettingstoconfigure.LANandDHCPareevenidenticaltothe
routermode.

VLAN:TheIntellinetCPEAccessPointsupportstaggedVLAN.AVLAN(VirtualLocalAreaNetwork)isamethodof
creatinganindependentlogicalnetworkwithinaphysicalnetwork.VLANTaggingisthepracticeofinsertingaVLANID
intoapacketheader,whichservesasanidentifierforwhichVLANthepacketbelongsto.Morespecifically,switches
usetheVLANIDtodeterminewhichportorportstosendthepacketto.

ManageVLANID:DefinewhichVLANIDisusedto
managetheaccesspoint.Notethatifyouchangethis
valueandclickApply,theaccesspointwillrebootand
afterthatyouwillneedtohaveastationthatisin
thatVLANinordertoaccesstheWebadmin
interface.Ifyouaccidentallychangedthe
ManagementVLANIDandhavelostaccesstothe
webadmininterface,youwillneedtoperforma
hardwareresettorestorethefactorydefaultsettings.

SwitchPort:TheIntellinetCPEAccessPointis
equippedwithtwoRJ45FastEthernetports.TheLAN
connectorislistedasPortID1andtheWAN
connectorislistedasPortID0seesection
Connectors.ForeachportyoucandefinethePVID(PortVLANIDforportbasedVLANs)andthetaggingstatus
untaggedortagged.

SSIDTable:EachoftheSSIDsofyourIntellinetCPEAccessPointcanbeassignedtoaVLANID(VID).LeavetheVID
emptyifyouwanttrafficonthatSSIDnottobetagged.

VLANMember:DefinetowhichVLANsthephysicalports0and1belongto.

- 27 -
NETWORKSETTINGSINREPEATERMODE
Repeatermodehasthepurposeofstrengtheninganexistingwirelesssignaland
extendingitsrange.Soitcomesasnosurprisethattherepeatermodeisalso
referredtoasrangeextendermode.

ClickScantoshowwirelessnetworksinrange,then
selectthewirelessnetworkthatyouwithtorepeat
(extenditsrange),andprovidetherequiredsecurity
forthenetwork.Youdonotneedtomanuallyspecify
thechannelorsecuritymode.Thesevalueswillbe
automaticallyfilledoutbaseduponwhichSSIDyou
select.

SimilartotheAccessPointmode,youcanalsodefine
theLocalIPSettings.SelectDHCP,andtheIntellinet
accesspointwillreceiveitsIPsettingsfromaDHCP
serverinyournetwork,mostlikelythatwillbeyour
router.SelectStaticifyouwanttocontroltheIPaddressandrelatedsettingsyourself.Ifyouwanttomaintaincontrol
overtheLANIPaddressoftheIntellinetCPEAccessPointsothatyoucanalwaysquicklyaccessitswebconfiguration
interface,usingastaticIPaddressmightbebeneficialunlessyoucanhaveyourDHCPserverassignastaticIPaddress
totheIntellinetCPAAccessPoint.

- 28 -
QOS(INROUTERANDWISPMODE)

Qualityofservice(QoS)istheoverallperformanceofcomputernetwork,
particularlytheperformanceseenbytheusersofthenetwork.Qualityof
serviceisparticularlyimportantforthetransportoftrafficwithspecial
requirements.Inparticular,videoorvoiceoverIPapplications.QoS,whichis
alsoknownastrafficshaping,assignsaprioritytoeachdevice(orservice)
operatingonthenetworkandcontrolstheamountofbandwidtheachis
allowedtoconsumebasedonitsrole.Withoutthiskindofcontrol,eachdevicewoulduseupasmuchbandwidthas
possible.ProperQualityofServiceisadvisableifyouuseyournetworktoplayonlinegames,makeVoIPsuchasSkype
calls,watchYouTubeorstreamvideoforexampletoTwitch.

ConfiguringQoScanbequitecomplex,andtheIntellinetCPEAccessPointallowsaverydetailedcontroloverthedata
andhowitisprioritizedindeed.Settingthisupincorrectlycancausemoreharmthangood,andbecauseofthatitis
highlyrecommendedthatyouarefamiliarwithQoSanditsrelatedtermssuchasDSCP,etc.

Thisiswherethingsgettrickier.Upstreamdescribesalldatatrafficthatyousendfromyourlocalnetworktothe
Internet,forinstance,trafficfromyourPCtoyourTwitchorYouTubelivebroadcast.Downstreamistheopposite.If
youwatchavideoonYouTube,dataissentfromtheInternettoyourlocalnetwork,andthatisconsidereddownload
ordownstream.

ModeEquity:Theaccesspointwilltryitsbestto
distributetheavailablebandwidthevenlyand
fairlybetweentheavailablenetworkclients.No
oneclientwillbeespeciallylimitedorgivenany
specialtreatmentovertheother.ThismodeisnotaseffectiveasPriority,LimitorAssure.

ModePriority:Whenselected,youcanassign
networkclientsoneofthreepossiblepriorities.
Thisallowsyoutoquicklycategorizenetwork
clients,forexampleguests,normalusersand
powerusers.Theexampleontherightshowsan
exampleonhowtocreatearulefor10computers
(IP192.168.2.50192.168.2.59)whichhavehigh
priorityLevelwithDSCPsettoAF11.
YoucanidentifycomputersbasedontheirIP
addresses(asshown),orbasedontheirMACaddress.Furthermore,youcanlimittheruletoonlyaffecttrafficfora
certainProtocol(TCPorUDP)andPort.

- 29 -
ModeLimit:Withthismodeyouhavetheability
tolimitthebandwidthavailableacertainnetwork
clientoragroupofnetworkclients.Theidea
behindthisistoprovideacapfortheavailable
uploadordownloadbandwidth.

Theexampleshowshowwecreatearulethat
limitstheavailablebandwidthforaPC
(presumablyDaves)withtheMACaddress
5C:26:0A:02:8B:14to2048Kbpsor2Mbps.TheDSPvalueiskeptatdefault(=besteffort),whichmakessenseinthis
typeofscenario.

ModeAssure:Withthismodeyouhavethe
abilitytoguaranteebandwidthtoanindividual
client,oragroupofclients.Theexampleonthe
rightshowshowtoaddaNetflixvideostreaming
deviceandmakesureithassufficientbandwidth
availabletostreamin1080presolution.Netflix
usestheTCPProtocolonPort80.Asforthe
bandwidth,5Mbpsaretypicallysufficient,butto
beonthesafeside,wereservealittlebitmore
andsettheRate(kbps)to8192(=8Mbps).The
Ceil(kbps)canbeusedtolimitthemaximumbandwidthavailabletothedevice,butwedontwanttodothatinthis
case.WealsosettheDSCPtoAF11toboostthetrafficpriority.

DefaultDSCP:DSCPstandsfordifferentiatedservicescodepoint.Itisafieldin
anIPpacketthatenablesdifferentlevelsofservicetobeassignedtonetwork
traffic.TheDSCPvaluecantellyourISPhowtohandleyourtraffic,butmost
ISPswillignoreDSCPmarkingsastheyleaveyournetworkandentertheirs,
andforgoodreasons:NetNeutrality.IfISPSwouldrespectandactuponthese
headers,theywouldquicklybecomemeaninglesssinceeverybodywouldcode
theirtrafficforthehighestpriority(ExpeditedForwardingEF).Inreality
DSCPcanreallyonlyaffectthedatatrafficinsideyournetwork,andhowthe
routerprioritizesit.CombineaDSCPvalueofEFwithPrioritymodefor
example,andtherouterwillgivethehighestprioritytothattrafficuptothe
pointwhereitleavesyournetwork.SeeAppendixCforinformationaboutthe
DSCPvalues.

Totalrate(kbps):Definehowmuchtotalbandwidth(upstreamplusdownstream)inkbpsisavailable.Thisparameter
needstobeprovidedinAssuremode.

- 30 -

OnefeatureofQoSdoesnotrequireanyconfiguration.
ItscalledWMM,whichstandardsforWiFiMultimedia.
WMMprioritizesnetworktrafficinfourcategories:
1.Voice
2.Video
3.Besteffort(thisisthemajorityoftrafficfromapplicationsotherthanvideoandvoice)
4.Backgroundjobssuchasprinting,filedownloadsandothernonlatencysensitiveapplications.
SimplybyactivatingWMMfortheSSIDsoftheIntellinetCPEAccessPointyoucanalreadyachieveanoticeable
improvementofthequalityofservice.

- 31 -
SECURITY(INROUTERANDWISPMODE)

TheIntellinetCPEAccessPointisequippedwithaFirewallthatprotectslocal
networkusersfromhackerattacksfromtheInternetwheneverrouterorWISP
modeisused.INthesemodestherearetwolayersofsecurity.First,NATitself.
ANATrouterbydesignprovidesprotectionforlocalnetworkusersinthatitwill
notforwardarequestmadefromtheInternettoaspecificserviceport,unless
thatrequestisaresponsetoaninquirymadefromalocalclient.Second,the
IntellinetCPEAccessPointprovidesadditionalfeaturessuchasIP,PortorMAC
addressfiltering,whichallowamoredirectcontrolofwhocanaccessthedevice
andservices,andwhocannot.

DefaultRules:Specifythedefaultbehavior.
Everythingthatisntcoveredbyanyofthesecurity
rulesiseitherbeingdroppedoraccepted(default)
dependingonhowyousetthisvalueup.Acceptis
thecorrectchoiceinthevastmajorityofthecases.

IP/PortFiltering:YoucancreatespecificrulesforIP
addressesandports.

MACFiltering:Youcancreatespecificrulesfor
individualMACaddreses.

URLFiltering:Blockorallowaccesstowebpages.

DoSProtection:ProvidesadditionalsecurityagainstDoS(DialofService)attacks.

Thereareseveralparametersthatcanbeactivatedordeactivated.Notethatthedefaultvaluesaresuch,thatremote
accesstolocalservicesisprohibitedthatincludesPing,WEB,Telnet,SNMP,FTPandSambaaccess.Unlessyouhave
goodreasons,itsbesttoleavetheseoptionssettoDisable.

- 32 -
IP/PORTFILTER:
WiththisscreenyoucancreaterulesforspecificIPaddresses,
protocolsandTCP/UDPports.Youcaneithergrantordeny
access.
Status:Enableordisablethisfilter.
DefaultRules:Defaultbehaviorforanypacketnotmatchingany
ofthedefinedrules(default=accept).

RulesName:Provideaneasilyreconizeablenamefortherule.
SrcStartIPAddress:LocalIPaddressaffectedbytherule.
SrcEndIPAddress:IftheruleisforarangeofIPaddresses,you
needtospecifyastartandendaddress.
DestStartIPAddress:DestinationIPaddressaffectedbythe
rule.
DestEndIPAddress:IftheruleisforarangeofIPaddresses,youneedtospecifyastartandendaddress.
Protocol:DefinewhethertheruleappliestoTCP,UDPorbothtypesofconnections.
SourceandDestPort:Iftheruleistoonlyapplytocertainports,definethemhere.
Action:Definewhethertoallow(Accept)ordisallow(Drop)anypacketthatmatchesthisrule.

URLFILTERING:
WiththisfunctionyoucanlimitaccesstoindividualWebpages.
Status:Enableordisablethisfilter.
DefaultRules:Defaultbehaviorforanypacketnotmatchingany
ofthedefinedrules(default=accept).

URLAddress:TypeintheURLofthesiteyouwishtoblockor
grantaccessto.
Action:DefinewhetheraccesstothisURLshouldbeallowedor
disallowed.

MACFILTERING:
Amediaaccesscontroladdress(MACaddress)isaunique
identifierassignedtonetworkinterfacessuchaswiredor
wirelessadapters.MACaddressesareusedasanetwork
addressformostIEEE802networktechnologies,including
EthernetandWiFi.Thisscreenletsyoucreaterulesforspecific
MACaddresses.Youcaneithergrantordenyaccessbasedon
theMACaddress.
MACAddress:ManuallytypeintheMACaddress,orusetheScanbuttontodisplayalistofallconnectednetwork
clientsandthenselecttheoneyouwishtocreatetherule.
Action:Definewhethertoallow(Accept)ordisallow(Drop)anypacketthatmatchesthisrule.

- 33 -
DOSPROTECTION:
Incomputing,adenialofservice(DoS)ordistributeddenial
ofservice(DDoS)attackisanattempttomakeamachineor
networkresourceunavailabletoitsintendedusers.ADoS
attackgenerallyconsistsofeffortstotemporarilyor
indefinitelyinterruptorsuspendservicesofahostconnected
totheInternet.TheIntellinetCPEAccessPointallowsyouto
enableadditionalbarriersagainstthesekindsofattacks.As
thisfunctionrequiresamoredetailedinspectionofthedata
packets,itcanhaveanegativeimpactontheoverall
performanceofthewirelessnetwork.

Formaximumsecurityyoumayenablealloftheseoptions.

- 34 -
SYSTEM

TheIntellinetCPEAccessoffersseveralsystemrelatedfunctions,whicharediscussedinthissection.Hereyoucan
rebootthedevice,upgradethefirmware,backupandrestoretheconfiguration,andmore.

PASSWORDSETTINGS
Thedefaultpasswordforaccessingtheweb
administratorinterfaceis1234.Inthismenuyoucan
changethatpassword.Changingthispasswordafter
theinitialinstallationisrecommendedtoprevent
unauthorizedaccesstotheconfigurationpagesofthe
IntellinetCPEAccessPoint.

TIMESETTINGS
Withthisscreenyoucansetuptheinternaltimeof
theIntellinetCPEAccessPoint.DefinetheLocalTime
Zone,theSynchronizeMode,theNTPServerandthe
SynchronizeInterval.
IftheAccessPointisconnectedtotheInternet,you
canusethemodeNTP.ThedefaultNTPserveris
pool.ntp.org,andittypicallyworksjustfine.Youcan,
however,changetheNTPserveraddresstosomethingelse.Ifyouselectstatic,youmustprovidethetimemanually.If
youdo,beawarethatthetimewillslowlybutsurelybecomeoutofsyncwiththeactualtime.

BACKUP&RESTORE
TheBackup&Restoreoptionallowsyoutosaveafile
containingallyouraccesspoint'sconfiguration
settings,likeIPaddress,SSIDandsecuritysettings,etc.
toafileonyourcomputer'sHDD.Thisfilecanthenbe
usedtorestorethesettingsiftheaccesspointisreset
tothefactorydefaultsettings.

Backup:ClickthisbuttontosavethecurrentconfigurationtoyourcomputersHDDandUSBstick.
Restore:ClickBrowse,selecttheconfigurationfilethatyoupreviouslysaved,andthenclickRestoretoreloadthe
configuration.

- 35 -
FACTORYDEFAULTS
WiththisfunctionyoucanrestorethefactorydefaultconfigurationoftheIntellinetCPEAccessPoint.Allofyour
customconfigurationsettingswillbelostwhentheresetisperformed.ClickontheLoadDefaultsbuttontobeginthe
processandconfirmyourdecisionbyclickingonOK.

REBOOT
Restarttheaccesspointfromtimetotimetofreeupsystemresources,orincasethedevicedoesnotperformproperly
anymore.ClickonReboottobegintheprocessandconfirmyourdecisionbyclickingonOK.

SMARTREBOOT
Inadditiontothemanualrebootoption(see
above),thereisanothermethod:TheSmart
Reboot.Whatisitfor,andhowcanitbeused?
ThiswirelessAccessPoint,likeanyothercomputer,hasafiniteamountofsystemresources.Overtime,freeresources
willbecomelessandless,andeventually,thesystemstabilitycanbecompromised.Arebootfreesupthesesystem
resourcesandallowscontinueduseofthedevice.

ScheduledReboot:Whenthesystemreachesaspecifiedrunningtime,thesystemwillrebootautomatically.The
devicewilldothisreboot,regardlessofwhetherornotanydevicesareconnected.Sodokeepinmindthatyou
potentiallydisconnectyourwirelessusers.

Rebootattime:Inthismodethedevicewillrebootonceevery24hours.Youcanspecifyatwhattimethisshould
happen.Ideally,youwillwanttochooseatimethathaslittletonoactiveconnectionsgoingon,e.g.,inthemiddleof
thenight,becauseexistingwirelessconnectionswillbeignoredandexistingsessionswillbeinterrupted.

- 36 -
SmartReboot:ThismodeworkssimilartoReboot
attime,withtheexceptionthattheIntellinetCPE
AccessPointwilltrytokeeptheinterruptiontothe
networkatanabsoluteminimum.Thewaythis
worksisasfollows:Youspecifyatimeintervalin
whichtheaccesspointwilltrytoperformthe
restart.YoualsospecifytheWiFiidletime,whichspecifieshowmanyminutesofnoWLANtraffichavetopassbefore
thesmartrebootcanoccur.FinallyyoucanspecifyhowlongtheIntellinetCPEAccessPointwillwait,beforeforcefully
restartingwithoutanyregardforactiveconnections,byprovidingaMaximumuptime(mins.).Forexample,ifyou
wanttoforcearebootatleastonceperweek,youtypein10080asthemaximumuptime(10080minutes=7days).

WEBSERVER
Thewebadministratorconfigurationinterfaceis
accessiblelikeanyotherwebpage.Bydefaultyou
canaccessitbygoingtohttp://192.168.2.1with
yourWebbrowser.EachstandardHTTPrequestismadetoport80,unlessyouspecifyotherwise.Thismeansthat
http://192.168.2.1isthesameashttp://192.168.2.1:80.Ifyouwanttochangetheport,forexamplebecauseyouwant
tobeabletoremotelyaccessthewebadministratorconfigurationinterfacebutport80isalreadyinuse,thenyoucan
changetheWEBPorttosomethingelse.Inourexampletheportischangedtothevalue1024andthenewURLto
accessthewebadministratorconfigurationinterfaceishttp://192.168.2.:1024.

RemoteWEBAccess:EnableordisableremoteWEBserveraccess.Ifyouneedtoconfigurethedevicefromoutside
yourLAN,thisoptionshouldbeenabled.Inaddition,youwillneedtoaddtheWEBPorttoyourrouter'sport
forwardingtableandsetuptheIntellinetCPEAccessPointasaninternalserver.

FIRMWAREUPGRADE
Fromtimetotimetheremightbeanewfirmware
versionavailablefortheIntellinetCPEAccessPoint.
Anewfirmwareversioncanbereleasedtoaddnew
featuresortofixbugsthathavebeendiscovered.A
newfirmwarewouldbepostedontheIntellinetweb
site(intellinetnetwork.com).Inordertoupgradethefirmware,thefollowingstepshavetobeperformed:

1. DownloadthenewfirmwarefromIntellinetnetwork.com.Searchfor525794togettotheproductdetailpage
wherethedownloadwouldbelocated.UncompresstheZIPfileoncethedownloadiscompleted.
2. ConnecttotheIntellinetCPEAccessPointwebadministratorconfigurationinterfaceandopentheFirmware
Upgrademenu.Note:BesuretoconnecttotheAccessPointviathewirednetwork.
3. ClickonBrowsetoselectthefirmwareyouhavepreviouslydownloaded.
4. ClickonUpgradetobegintheprocessandconfirmyourdecisionbyclickingonOK.

- 37 -
DEBUGTOOLS

InthissectionyoucanfindinformationabouttwoadditionalfeaturesoftheIntellinetCPEAccessPoint.

LOGSETTINGS
Theaccesspointgeneratesruntimemessages
(warnings,errors,etc.)andcanprovidethemfor
laterreviewinalog.ThiscaneitherbeaLocalLog,
oraRemotelogutilizingthesyslogprotocol.Syslog
isawidelyusedstandardformessagelogging.Itpermitsseparationofthesoftwarethatgeneratesmessages,suchas
theIntellinetCPEAccessPoint,andthesystemthatstoresthem,forexampletheremotesyslogserver.Ifyouwantto
utilizearemoteserver,thenyouneedtoactivatetheRemoteLogoptionandprovidetheLogServerIP.Thedefault
syslogLogServerPortis514.Youcanmakechangestotheportasneeded.

PINGTEST
TheIntellinetCPEAccessPointhastheabilitytopingothernetworkdevices.Thiscanbeausefulfunctionifyou
connecttotheaccesspointremotely,butwanttoverifythatacertainclientisavailableonthelocalnetwork,inwhich
theaccesspointitinstalled.SimplytypeintheIPAddressoftheclientandclickonTest.

- 38 -
APPENDIXA:CHANGINGTHEIPADDRESSOFANETWORKADAPTER

TheIntellinetCPEAccessPointoperatesontheIPaddress192.168.2.1.Foryourcomputertoaccesstheadministrator
configurationinterface,theIPaddressofthenetworkadapterinyourcomputerhastobeinthesamerange;e.g.,
192.168.2.50.RefertotheinstructionsthatcamewithyourcomputerforinformationonhowtochangetheIPaddress
onthenetworkadapterinyourcomputerforanyoperatingsystemthatisnotexplainedinthisusermanual.

WINDOWS8

1.IfyouareusingaPC,movethemousecursortothebottomortoprightcornerofthescreenandselectthecogicon
forSettings.Ifyouareusingatablet,swipeleftfromtherightsideofthescreenandselectSettings.

2.ClickControlPanel.

3.SelectSmallicons.

4.OpenNetworkandSharingCenter.

- 39 -


5.ClickChangeadaptersettings.

6.RightclickyournetworkadapterandselectProperties.

7.SelectInternetProtocolVersion4fromthelistandclickProperties.

8.Entertheinformationasshownbelow,thenclickOKtosavethesettings.

- 40 -
WINDOWS7:

1.OpentheNetworkandSharingCenter.

2.ClickonChangeadaptersettings.

3.RightclickyournetworkadapterandselectProperties.

4.SelectInternetProtocolVersion4fromthelistandclickProperties.

5.Entertheinformationasshownbelow,thenclickOKtosavethesettings.

- 41 -
WINDOWSXP:

1.DoubleclicktheNetworkConnectionsiconinthecontrolpanel.

2.Rightclicktheconnection(e.g.,LocalAreaConnection)andselectProperties.

3.SelectInternetProtocol(TCP/IP)fromthelistandclickProperties.

4.Entertheinformationasshownbelow,thenclickOKtosavethesettings.

- 42 -
MACOSX

1.OpentheSystemPreferencespage.

2.IntheInternet&Networksection,clicktheNetworkicon.

3.SelecteitherBuiltinEthernetorAirPort,dependingonhowyouconnecttothewirelessrangeextender,thenclick
Configure.

4.SetthevalueforConfigureIPv4toManuallyandenter192.168.2.50intheIPAddressfield.ClickApplyNow(not
showninscreenshot)tosavethesettings.

- 43 -
APPENDIXB:TROUBLESHOOTING

Symptom Howtoaddress
ThePowerLEDisnotlit. Makesurethatthepoweradapteriseitherproperlyinsertedintothe
powerconnectoronthePoEinjectorortheaccesspointitself.Ifyouuse
thePoEinjector,besurethatyouusean8pinnetworkcablebetweenthe
PoEinjectorandtheaccesspointsLANport.A4pincablewontwork.
Also,ifyouusethePoEinjector,besurethatthePowerLEDontheinjector
islit,andthatyouhaveconnectedtheportlabeledasPOEwithanetwork
cabletotheLANportontheaccesspoint.
Inaddition,checkandmakesurethatthepoweroutletprovidespower.
TheLANLEDdoesnotlightup. CheckthenetworkconnectionbetweentheaccesspointsLANportandthe
Ethernetportofthedeviceyoureconnecting.Thenetworkcablemustbe
insertedproperlyandtheEthernetdevicemustbeturnedon.Tryusinga
differentnetworkcable,ifavailable.
TheWANLEDdoesnotlightup. CheckthenetworkconnectionbetweentheaccesspointsWANport and
theEthernetportofthemodemyoureconnectingto.Thenetworkcable
mustbeinsertedproperlyandtheEthernetdevicemustbeturnedon.Try
usingadifferentnetworkcable,ifavailable.
TheWLANLEDisnotlit. TheWLANLEDshouldalwaysbelight,whetherawirelessconnectionhas
beenestablishedornot.Itessentiallyindicatesthatthewirelessmodule
hasstartedsuccessfully.IftheLEDisoff,itmeansthatthewirelessfunction
hasbeendisabledinthebasicwirelesssettings.
Ifthewirelessfunctionisenabledinthewirelesssetting,buttheLEDisoff
andyoucannotconnecttoanywirelessnetwork,theaccesspointneedsto
bereplacedthroughyourdealer(placeofpurchase).
IftheLEDisoffyetyouhaveaworkingwirelessconnection,theLEDmay
simplyhavefailed.
Thehardwareresetisnot Theresetbuttonneedstobepressedfirmlyfor10 secondswhilethe
working. wirelessrangeextenderispoweredon.Ifitstilldoesnotwork,thereset
buttoncouldbemalfunctioning.

- 44 -
APPENDIXC:DSCPVALUETABLE

DSCPName DSFieldValue IPPrecedence

Binary Decimal
AF11 001 10 001Priority
010
AF12 001 12 001Priority
100
AF13 001 14 001Priority
110
AF21 010 18 001Immediate
010
AF22 010 20 001Immediate
100
AF23 010 22 001Immediate
110
AF31 011 26 011Flash
010
AF32 011 28 011Flash
100
AF33 011 30 011Flash
110
AF41 100 34 100FlashOverride
010
AF42 100 36 100FlashOverride
100
AF43 100 38 100FlashOverride
110
None/BestEffort 000 0 0000Routine
000
CS1 001 8 1
000
CS2 010 16 2
000
CS3 011 24 3
000
CS4 100 32 4
000
CS5 101 40 5
000
CS6 110 48 6
000
CS7 111 56 7
000
EF(HighPriority) 101 46 101Critical
110

- 45 -
APPENDIXD:WARRANTYINFORMATION

DeutschGarantieinformationenfindenSiehierunterintellinetnetwork.com/warranty.

English Forwarrantyinformation,gotointellinetnetwork.com/warranty.

Espaol Sideseaobtenerinformacinsobrelagaranta,visiteintellinetnetwork.com/warranty.

FranaisPourconsulterlesinformationssurlagarantie,rendezvousladresseintellinetnetwork.com/warranty.

Italiano Perinformazionisullagaranzia,accedereaintellinetnetwork.com/warranty.

Polski Informacjedotyczcegwarancjiznajdujsinastronieintellinetnetwork.com/warranty.

Mxico PlizadeGarantaIntellinetDatosdelimportadoryresponsableanteelconsumidorICIntracomMxico,
S.A.P.I.deC.V.Av.InterceptorPoniente#73,Col.ParqueIndustrialLaJoya,CuautitlanIzcalli,Estadode
Mxico,C.P.54730,Mxico.Tel.(55)15004500

Lapresentegarantacubrelossiguientesproductoscontracualquierdefectodefabricacinensusmaterialesymano
deobra.
A.GarantizamoscmarasIPyproductosconpartesmvilespor3aos.
B.Garantizamoslosdemsproductospor5aos(productossinpartesmviles),bajolassiguientescondiciones:
1.Todoslosproductosaqueserefiereestagaranta,amparasucambiofsico,sinningncargoparaelconsumidor.
2.Elcomercializadornotienetalleresdeservicio,debidoaquelosproductosquesegarantizannocuentancon
reparaciones,nirefacciones,yaquesugarantaesdecambiofsico.
3.Lagarantacubreexclusivamenteaquellaspartes,equipososubensamblesquehayansidoinstaladasdefbricayno
incluyeenningncasoelequipoadicionalocualesquieraquehayansidoadicionadosalmismoporelusuarioo
distribuidor.

Parahacerefectivaestagarantabastarconpresentarelproductoaldistribuidoreneldomiciliodondeueadquiridoo
eneldomiciliodeICIntracomMxico,S.A.P.I.deC.V.,juntoconlosaccesorioscontenidosnsuempaque,acompaado
desuplizadebidamentellenadayselladaporlacasavendedoraindispensableelselloyfechadecompra)dondelo
adquiri,obien,lafacturaoticketdecompraoriginaldondesemencioneclaramenteelmodelo,numerodeserie
(cuandoaplique)yfechadeadquisicin.Estagarantanoesvlidaenlossiguientescasos:Sielproductosehubiese
tilizadoencondicionesdistintasalasnormales;sielproductonohasidooperadoconformealosinstructivosdeuso;o
sielproductohasidoalteradootratadodeserreparadoporelconsumidoroterceraspersonas.

- 46 -


intellinetnetwork.com

ICIntracom.Allrightsreserved.
IntellinetisatrademarkofICIntracom,registeredintheU.S.andothercountries.

- 47 -