Ubiquiti AirOS Router Manual PDF (Setup & Configuration Guide)

Home

Manuals

Ubiquiti

AirOS

Page 16 / 33 Scroll up to view Page 11 - 15

Auto

option should be enabled in order to establish WDS connection between Access

Points if

WDS Peers

are not specified (applicable for AP WDS mode only). If

Auto

option is enabled AirOS powered Access Point will choose WDS Peers according to the

SSID setting.

Note: Access Point operating in WDS mode and all the WDS Peers must operate on the

same frequency

channel

and use the same

channel spectrum width

SSID

: Service Set Identifier used to identify your 802.11 wireless LAN should be

specified while operating in

Access Point

mode. All the client devices within range will

receive broadcast messages from the access point advertising this SSID.

ESSID

: –

specify the ESSID of the Access Point which the the AirOS should associate to while

operating in

Station

Station WDS

mode. There can be several Access Points with the

same ESSID. If the ESSID is set to "Any" the

station

will connect to any available AP.

Site Survey tool for the Access Point selection

The list of the available Access Points can be retrieved using the

Select

button, which

activates

Site Survey

tool with the AP selection functionality. Site Survey will search for

the available wireless networks in range on all the supported channels and will allow

you to select one for association. In case the selected network uses encryption, you’ll

need to set security parameters in wireless security section. Select the Access Point

from the list and click

Select

button for association.

Click

Scan

button to refresh the list of available wireless networks.

Close this window

button closes Site Survey tool window.

Site Survey channel scan list can be modified using the

Channel Scan List

control.

Channel Scan list selection on Nanostation5

Channel Scan List

: This will confine scanning only to frequencies selected (applicable

for Station and Station WDS modes only). The benefits of this are faster scanning as

well as filtering out unwanted AP's in the results. Site Survey tool will look for the

Access Points in selected channels only.

Channel list management for the selected IEEE 802.11 mode and specified Channel

Spectrum Width can be enabled by selecting the

Enabled

option. There are two ways

to set the Channel Scan List - enumerating the required channels (separated by

comma) in the input field or using the selection window which is activated using the

Edit

button.

Hide SSID

control will disable advertising the SSID of the access point in broadcast

messages to wireless stations. Unselected control will make SSID visible during

Page 17 / 33

network scans on the wireless stations. Control is available while operating in

Access

Point

mode only.

Lock to AP MAC

: This allows the station to always maintain connection to a specific

AP with a specific MAC (applicable for Station and Station WDS modes only). This is

useful as sometimes there can be few identically named SSID's (AP's) with different

MAC addresses. With AP lock on, the station will lock to MAC address and not roam

between several Access Points with the same ESSID.

Country Code

: Different countries will have different power levels and possible

frequency selections. To ensure device operation follows regulatory compliance rules,

please make sure to select your correct country where device will be used. The

channel list, output power limits, IEEE 802.11 and Channel Spectrum Width modes will

be tuned according to the regulations of the selected country. Additionally, please

consult

compliance guide

for further explanation of international compliance

requirements.

IEEE 802.11 Mode

: This is the radio standard used for operation of your AirOS

powered device. 802.11b is an older 2.4GHz mode while the 802.11g (2.4GHz) and

802.11a (5GHz) are newer standards based on faster Othogonal Frequency Division

Multiplexing (OFDM) modulation. For more information, please consult 802.11

compliance guide

•

PowerStation2/LiteStation2/Nano Station2 supported IEEE 802.11 modes:

B only

– connect to a 802.11b only network.

B/G Mixed

– connect to a 802.11b or 802.11g network (selected by default).

G only

– connect to a 802.11g only network.

•

PowerStation5/LiteStation5/Nano Station5 supported IEEE 802.11 modes:

– connect to a 802.11a network (selected by default).

Channel Spectrum Width

: This is spectral width of the radio channel. Supported

wireless channel spectrum widths:

5MHz

– is the channel spectrum with the width of 5 MHz (known as Quarter-

Rate mode).

10MHz

– is the channel spectrum with the width of 10 MHz (known as Half-

Rate mode).

20MHz

– is the standard channel spectrum width (selected by default).

40MHz

– the widest channel spectrum width required to connect to a 802.11a

network which supports Static Turbo feature (applicable for

PowerStation5/LiteStation5/Nano Station5 only).

Reducing spectral width provides 2 benefits and 1 drawback.

Benefit 1: It will increase the amount of non-overlapping channels. This can

allow networks to scale better

Benefit 2: It will increase the PSD (power spectral Density) of the channel and

enable the link distance to be increased

Page 18 / 33

Drawback: It will reduce throughput proportional to the channel size reduction.

So just as turbo mode (40MHz) increases possible speeds by 2x, half specrtrum

channel (10MHz), will decrease possible speeds by 2x.

Channel Shifting

: option enables the special channels which have the frequency

offset from the standard 802.11b/g and 802.11a channels. This is a proprietary Ubiquiti

developed feature. While 802.11 networks have standard channels such as Channel 1

(2412MHz), Channel 2 (2417MHz), etc. spaced every 5MHz apart; channel shifting will

allow operation of new non-802.11 channels offset from the standard channels. The

benefits of this are private networking and inherent security. Using channel-shifting,

networks can instantly become invisible to the millions of wifi devices in the world.

Channel

: select the wireless channel while operating in

Access Point

mode. Multiple

frequency channels are available to avoid interference between nearby access points.

The channel list varies depending on the selected country code, IEEE 802.11 mode,

Channel Spectrum Width and Channel Shifting option.

Output Power

: This will configure the maximum average transmit output power (in

dBm) of the wireless device. The output power at which wireless module transmits

data can be specified using the slider. When entering output power value manually,

the slider position will change according to the entered value. The transmit power level

that is actually used is limited to the maximum value allowed by your country's

regulatory agency. Note: In case of NanoStation, this is the output power delivered to

the internal Antennas.

Obey regulatory power

box must be always checked. While checked transmit output

power will be tuned according to the regulations of the selected country.

Data Rate

: This defines the data rate (in Mbps) at which the device should transmit

wireless packets. If the

Auto

check box is enabled, then the

rate algorithm

will select

the best data rate depending on the link quality conditions. If a data rate below

54Mbps is selected while the

Auto

rate selection is enabled, then the selected data rate

will become the maximum data rate that can be used. Use

Auto

option if you are

having trouble getting connected or losing data at a higher rate. In this case the lower

data rates will be used by device automatically.

Refer to the section

Advanced Wireless Settings

for the detailed information about

rate

algorithms

Wireless Security

This section enables you to set parameters that control how the subscriber station

associates to a wireless device and encrypts/decrypts data.

Station Wireless Security Settings

Page 19 / 33

Choose the security method according to the Access Point security policy. Subscriber

station should be authorized by Access Point in order to get access to the network and

all the user data transferred between subscriber station and Access Point will be

encrypted if the wireless security methods are used.

Security

: AirOS supports all the popular 802.11 security options such as WEP, WPA,

and WPA2. Select the security mode of your wireless network:

WEP

– enable WEP encryption. WEP (Wired Equivalent Privacy) is based on the

IEEE 802.11 standard and uses the RC4 encryption algorithm. Enabling WEP

allows you to increase security by encrypting data being transferred over your

wireless network. WEP is the oldest security algorithm.

WPA

– enable WPA™ security mode. Wi-Fi Protected Access - WPA™ (IEEE

802.11i/D3.0) and WPA2™ (IEEE 802.11i) with pre-shared key management

protocol offers improved security methods as they are new protocols that were

created under the 802.11i standard to address weaknesses in the WEP

approach.

WPA

™ and

WPA2

™ support the following ciphers for data encryption:

TKIP

- Temporal Key Integrity Protocol which uses RC4 encryption algorithm.

CCMP

- Counter Mode with Cipher Block Chaining Message Authentication Code

Protocol which uses the Advanced Encryption Standard (AES) algorithm.

The device will use the strongest cipher (CCMP) in Station and Access Point wireless

mode by default. If CCMP is not supported on the other side of the link the TKIP

encryption will be used - like in situation when the device acts as Access Point with

WPA security enabled and at least one wireless station (without CCMP support) is

connected to it.

WPA-TKIP

– enable WPA™ security mode with TKIP support only.

WPA-AES

– enable WPA™ security mode with AES support only.

WPA2

– enable WPA2™ security mode.

WPA2-TKIP

– enable WPA2™ security mode with TKIP support only.

WPA2-AES

– enable WPA2™ security mode with AES support only.

Authentication Type

: field relates only to the WEP security option. One of the

following authentication modes should be selected if WEP security method is used:

Open Authentication

– station is authenticated automatically by AP (selected by

default).

Shared Authentication

– station is authenticated after the challenge, generated

by AP.

WEP Key Length

: 64-bit (selected by default) or 128-bit WEP Key length should be

selected if WEP security method is used. The

128-bit

option will provide more security.

Key Type

HEX

(selected by default) or

ASCII

option specifies the character format for

the WEP key if WEP security method is used.

WEP Key

: WEP encryption key for the wireless traffic encryption and decryption

should be specified if WEP security method is used:

Page 20 / 33

For

64-bit

– specify WEP key as 5 HEX (0-9, A-F or a-f) pairs (e.g. 00112233AA)

or 5 ASCII characters.

For

128-bit

– specify WEP key as 13 HEX (0-9, A-F or a-f) pairs (e.g.

00112233445566778899AABBCC) or 13 ASCII characters.

Key Index

: specify the Index of the WEP Key used.

WPA Authentication

: one of the following WPA™ key selection methods should be

specified if WPA™ or WPA2™ security method is used (applicable for

Station

and

Station WDS

modes only). :

PSK

– WPA™ or WPA2™ with Pre-shared Key method (selected by default).

EAP

– WPA™ or WPA2™ with EAP (Extensible Authentication Protocol) IEEE

802.1x authentication method. This method is commonly used in Enterprise

networks.

WPA Pre-shared Key

: the pass phrase for WPA™ or WPA2™ security method should

be specified if the

Pre-shared Key

method is selected. The pre-shared key is an alpha-

numeric password between 8 and 63 characters long.

Access Point Wireless Security Settings

MAC ACL

: MAC Access Control List (ACL) provides ability to allow or deny certain

clients to connect to the AP (applicable for AP and AP WDS modes only).

MAC ACL can be enabled by selecting the

Enabled

option.

There are two ways to set the Access Control List:

define certain wireless clients in the list which will have granted access to the

Access Point while the access will be denied for all the remaining clients - MAC

ACL

Policy

is set to

Deny

define certain wireless clients in the list which will have denied access to the

Access Point while the access will be granted for all the remaining clients - MAC

ACL

Policy

is set to

Allow'.

The MAC addresses of the wireless clients can be added and removed to the list using

the

Add

and

Remove

buttons.

Note: MAC Access Control is the weakest security approach. WPA™ or WPA2™ security

methods shoud be used when possible.

Click

Change

button to save the changes.

Network

Rate

Popular Ubiquiti Models

Famous Router IPs

Famous Router Companies

Bookmark Our Site

Share