AirOS

From Ubiquiti Wiki

Jump to: navigation<= /A>, search=

1 AirOS v3.3=20 Introduction=20
2 AirOS v3.3 = Configuration=20 Guide=20
- 2.1 Navigation=20
- 2.2 Main = Page=20
  
  2.2.1 Status=20 Reporting=20
  <= SPAN=20 class=3Dtocnumber>2.2.2 Statistics=20 Reporting=20
  2.2.3 Extra=20 info=20
  2.2.4 Tools=20
- 2.3 Link Setup=20 Page=20
  
  2.3.1 Basic = Wireless=20 Settings=20
  2.3.2 Wireless=20 Security
- 2.4 Network=20
  
  2.4.1 Bridge=20 Mode=20
  2.4.2 Router=20 Mode
- 2.5 Advanced=20
  
  2.5.1 Advanced Wireless=20 Setting=20
  2.5.2 Acknowledgement=20 Timeout=20
  2.5.3 Antenna = Settings=20
  2.5.4 LED=20 Thresholds=20
  2.5.5 Wireless Traffic=20 Shaping=20
  2.5.6 QoS=20
- 2.6 Services=20
  
  2.6.1 Ping=20 WatchDog=20
  2.6.2 SNMP=20 Agent=20
  2.6.3 NTP = Client, Web,=20 Telnet, SSH Server=20
  2.6.4 System=20 Log
- 2.7 System=20
  
  2.7.1 Firmware=20
  2.7.2 Host=20 Name=20
  2.7.3 Administrative and=20 Read-only Account=20
  2.7.4 Interface=20 Language=20
  2.7.5 Logo=20 Customization=20
  2.7.6 Configuration=20 Management=20
  2.7.7 Device=20 Maintenance =

AirOS v3.3 Introduction

The design goal of AirOS was simplicity and power. Unlike previous = and=20 current market-leading wireless or router operating systems that are = complex and=20 require a training investment, Ubiquiti set out to make an advanced = operating=20 system capable of powerful wireless and routing features, but was built = upon a=20 simple, clean, intuitive user interface foundation.

Our goal is to make AirOS simple enough for the operator, customer, = or new=20 technician to easily understand, configure, and deploy. At the same = time, it is=20 rapidly evolving towards a path of new powerful networking and wireless = features=20 strongly derived from customer interaction and feedback. Our goal is to = make=20 AirOs both the most advanced operating system on the market and the most = intuitive, easy to deploy.

AirOS v3.3 Configuration Guide

This guide presents the detailed description of the AirOS operating = system=20 which is integrated into long-range embedded systems and wireless ISP = solutions=20 provided by Ubiquiti Networks, Inc.

2.4 GHz (IEEE=20 802.11b/g) products:

Bullet2/2HP;=20
LiteStation2;=20
MiniStation;=20
NanoStation2/loco2;=20
PowerStation2;=20
PicoStation2/2HP.

5 GHz (IEEE=20 802.11a) products:

Bullet5/HP;=20
LiteStation5;=20
NanoStation5/loco5;=20
PowerStation5;=20
PicoStation5;=20
WispStation5.

11n (IEEE=20 802.11n) products:

LiteStation-SR71.

All the AirOS based devices support the following infrastructure = operating=20 modes:

Station (Client);=20
Station WDS;=20
Access=20 Point;=20
Access Point WDS (Repeater).

All the AirOS based devices support the following network modes:

Transparent bridge;=20
Router.

AirOS Quick Setup Guide describes the configuration = steps for=20 the subscriber station (wireless client - bridge) use case.

All the configuration settings accessible via web management = interface are=20 described in this document (device specific elements are described=20 individually).

Note: the examples and pictures in this document represent=20 PowerStation2/NanoStation5 graphical user interface which is consistent = between=20 all the AirOS based devices.

[Content] =

Navigation

=20

Configuration Management Menu

Each of the web management pages (listed below) contain parameters = that=20 affect a specific aspect of the device:

Main page displays current status of the device and the = statistical=20 information. There are useful network administration and monitoring = tools=20 available in Main page also (i.e. antenna alignment tool, speed test = utility,=20 site survey tool while operating in AP = mode).

Link Setup page contains the controls for a wireless network=20 configuration, while covering basic wireless settings which define = operating=20 mode, associating details and data security options.

Network page covers the configuration of network operating = mode, IP=20 settings, packet filtering routines and network services (i.e. = DHCP = Server).

Advanced page settings are dedicated for more precise wireless = interface control. It also includes antenna polarity, traffic shaping = and QoS = settings.

Services page covers the configuration of system management = services=20 (i.e. SNMP, NTP,=20 System Log, Ping Watchdog).

System page contains controls for system maintenance routines, = administrator account management, device customization and configuration = backup.=20

[Content] =

Main Page

=20

Current Status of the AirOS powered = device

The Main Page displays a summary of link status information, = current=20 values of basic configuration settings (depending on operating mode), = network=20 settings and traffic statistics of all the interfaces.

Network administration and monitoring utilities such as antenna = alignment=20 tool, ping and traceroute utilities, speed test tools are accessible via = Main page also.

Status Reporting

Base Station SSID: The Name of the 802.11 = Service Set=20 (established by the Host Access=20 Point) the device is connected to:

While operating in Station mode, displays the BSSID of the Access=20 Point where the device has associated.=20

While operating in in Access=20 Point mode, displays the BSSID of the wireless device=20 itself.

AP MAC: displays the MAC = address of=20 the Access=20 Point where the device has associated while operating in Station = mode. MAC=20 (Media Access Control) is unique HW = identifier on=20 each 802.11 = radio. It=20 consists of two parts:

An Organizationally Unique Identifier (OUI)=20

Network Interface Controller (NIC) sequence.

The manufacturer list of a given MAC = address is=20 provided here: http://standards.ieee.org/regauth/oui/index.shtml =

Signal=20 Strength: displays the received wireless signal=20 level (client-side) while operating in Station mode. The represented = value=20 coincides with the graphical bar. Use antenna alignment tool to adjust = the=20 device antenna to get better link with the wireless device. The antenna = of the=20 wireless client has to be adjusted to get the maximum signal strength. = Signal=20 Strength is measured in dBm (the Decibels referenced to 1 miliwatt). = The=20 conversion is defined as dBm=3D10log10(P/1mW). So, 0dBm would be 1mW and = =E2=80=9372dBm=20 would be .0000006mW. A signal strength of =E2=80=9385dBm or better is = recommended for=20 stable links.

TX Rate and RX Rate: displays the current 802.11 = data=20 transmission (TX) and data reception (RX) rate while operating in = Station=20 mode. Data rates at 1,2,5.5,11Mbps (802.11b) and=20 6,9,12,18,24,36,48,54Mbps (802.11g,=20 802.11a) are=20 possible. Typically, the higher the signal, the higher the data rate and = consequently the higher the data throughput. For the maximum data = throughput=20 (54Mbps) a =E2=80=9370dBm or better signal is required typically.

Frequency:=20 This is the operating frequency of the 802.11 = Service Set=20 (hosted by AP) the client is connected to. Device uses this frequency to=20 transmit and receive data. For 802.11a = operation,=20 the range of available frequencies are 5.1-5.9Ghz and for 802.11b/g operation,=20 2412-2472Mhz. However, the valid frequency range will vary depending on = local=20 country regulations. For more information regarding frequency support = please=20 visit the compliance=20 section of Ubiquiti Wiki.

Channel: This is the 802.11 = channel=20 number that corresponds to the operating frequency. Device=20 uses the selected channel to transmit and receive data. More = information is=20 provided in the Link Setup section.

Antenna: This shows which antenna option the = AirOS=20 device is using currently. Most of Ubiquiti devices have 3 antenna = options:=20 vertical, horizontal, and Adaptive Antenna Polarity (AAP) options. = External=20 antenna option is available on several models as well. More information = is=20 provided in the Advanced settings section.

Noise Floor: displays the current value of the noise level in = dBm.=20 Noise Floor is taken into account while evaluating the signal quality=20 (Signal-to-Noise Ratio SNR, RSSI) while value mean depends on signal = strength=20 above the noise floor.

Security: This is the current security setting. "None" value = is=20 displayed if wireless security is disabled, WEP, WPA or WPA2 value is = displayed=20 if the corresponding wireless security method is used. More information = is=20 provided in the Link Setup section.

ACK=20 Timeout: displays the current timeout value for ACK frames. ACK = Timeout=20 can be set manually or self-adjusted automatically. The ACK=20 Timeout (Acknowledgement frame Timeout) specifies how long the = AirOS=20 device should wait for an acknowledgement from partner device confirming = packet=20 reception before concluding the packet must have been in error and = requires=20 resending. ACK Timeout is very important outdoor wireless performance = parameter.=20 More information is provided in the Advanced settings section. =

Transmit CCQ: This is an index of which evaluates the wireless = Client=20 Connection Quality. It takes into account transmit errors, latency, and=20 throughput while evaluating the ratio of successfully transmitted packets against the re-transmitted ones and taking = into account=20 current rate ratio against the highest specified rate. The level is = based on a=20 percentage value where 100% corresponds to a perfect link state.

QoS = Status:=20 displays the current QoS setting. Quality of Service (QoS) can be = enabled to=20 direct link speeds to better service particular customers and/or = particular=20 applications like VoIP and video which require greater consistency, = stability,=20 and lower latency performance.

Uptime: This is the running total of time the device has been = running=20 since last power up (hard-reboot) or software upgrade. The time is = expressed in=20 days, hours, minutes and seconds.

Date: indicates the current system date and time, expressed in = the=20 form =E2=80=9Cyear-month-day hours:minutes:seconds=E2=80=9D. Accurate = system date and time is=20 retrieved from the internet services using NTP=20 (Network Time Protocol). System date and time will be set to inaccurate = default=20 values after each reboot cycle if NTP is not enabled as most of the = AirOS based=20 devices have no autonomous power system for the internal clock.

LAN cable: displays the current status of the Ethernet port=20 connection. This can alert system operator-technician that LAN cable = is not=20 plugged into device and there is no active Ethernet=20 connection.

Host = Name:=20 displays the customizable name (ID) of the AirOS based device. Host Name = will be=20 represented in popular Router = Operating=20 Systems registration screens and discovery tools.

LAN MAC: displays the MAC = address of=20 the AirOS device LAN (Ethernet)=20 interface.

LAN IP Address: displays the current IP = address of=20 the LAN (Ethernet)=20 interface.

WLAN MAC: displays the MAC = address of=20 the AirOS device WLAN=20 (Wireless) interface.

WLAN IP Address: displays the current IP = address of=20 the WLAN=20 (Wireless) interface.

Note: LAN IP Address and WLAN IP Address displays the = same=20 value - current IP = address of=20 the virtual bridge interface, while the device is operating in=20 Bridge mode.

[Content] =

Statistics Reporting

=20

LAN interface Statistics

LAN Statistics: section displays the detailed receive and = transmit=20 statistics (Bytes, Packets, Errors) of LAN (Ethernet) interface. This statistics = represents the=20 total amount of data and packets transfered between devices through the = ethernet=20 interface either way.

Both unicast IP traffic (conversations between two hosts using HTTP, SMTP, SSH and other=20 protocols) and broadcast=20 traffic (while addressing all hosts in a given network range with a = single=20 destination IP = address) is=20 accounted.

As long as there is some network traffic being generated or passed = through=20 the LAN = interface,=20 Received and Transmitted Bytes and Packets value will go on increasing. = Errors value=20 represents the total number of transmitted and received packets for = which an=20 error occurred in the link layer. High value of the Errors may indicate = network=20 hardware faults or misconfiguration.

=20

WLAN interface Statistics

WLAN Statistics: section displays the detailed receive and = transmit=20 statistics (Bytes, Packets, Errors) of the wireless interface.

This statistics represents the total amount of unicast and broadcast = IP data=20 transfered between devices through the wireless interface either way.

As long as there is some network traffic being generated or passed = through=20 the wirelessinterface, Received and Transmitted Bytes, Packets and Errors (if any) value will go on = increasing.

=20

PPP interface Statistics

PPP Statistics: section displays the IP = address of=20 the PPP interface and the detailed receive and = transmit=20 statistics (Bytes, Packets, Errors) of the PPP interface while AirOS based device = operates in=20 Router mode with the PPPoE option=20 enabled.

IP address of the PPP interface will be displayed if it is = obtained=20 through the established PPPoE connection, otherwise "Not Connected" = message will=20 be displayed.

Activating the Reconnect button will initialize the PPPoE = reconnection=20 routine which should require system reboot sequence otherwise. This = control=20 should be used for troubleshooting purposes only when PPPoE tunnel is=20 established but the IP connection is idle.

This statistics represents the total amount of unicast and broadcast = IP data=20 transfered between AirOS powered device and PPPoE = server through=20 the PPP tunnel either way.

As long as there is some network traffic being passed through the PPP tunnel, Received and Transmitted Bytes, = Packets and=20 Errors (if any) value will go on increasing.

Refer to the Network section for more information aboutPPPoE = setup.

=20

WLAN Errors Statistics

WLAN Errors: section displays the counters of 802.11 = specific=20 errors which were registered on wireless interface:

Rx invalid NWID value represents the number of packets = received=20 with a different NWID or ESSID - = packets=20 which were destined for another access point. It can help to detect=20 configuration problems or identify the adjacent wireless network = existence on=20 the same frequency.=20

Rx Invalid Crypt value represents the number of transmitted = and=20 received packets which were encrypted with the wrong encryption key = and failed=20 the decryption routines. It can be used to detect invalid wireless=20 security settings and encryption break attempts.=20

Rx Invalid Frag value represents the number of packets = missed=20 during transmission and reception. These packets were dropped due to=20 re-assembling failure as some link layer fragments of the packet were = lost.=20

Tx Excessive Retries value represents the number of packets = which=20 failed to be delivered to the destination. Undelivered packet are=20 retransmitted a number of times before an error occurs.=20

Missed beacons value represents the number beacons = (management=20 packets sent at regular intervals by the Access Point) which were = missed by=20 the client. This can indicate that the wireless client is out of = range.=20

Other errors value represents the total number of = transmitted and=20 received packets that were lost or discarded for other reasons. =

The content of the Main page can be updated by using the=20 Refresh button.

[Content] =

Extra info

Extra Info: displays the current device usage statistics and = status of=20 the system components in pop-up window:

=20

Status of the Associated Stations

Show Stations: selection lists the stations which are = connected to the=20 device while operating in Access Point mode.

The following statistics for every station associated is = represented in=20 the station statistics window:=20

MAC of the station which is is associated;=20

Signal (dBm) value represents the last received wireless = signal=20 level;=20

Noise(dBm) value displays the value of the noise level = wireless=20 signal was received;=20

Tx/Rx Rate value represents the data rates of the last = transmitted=20 and received packets;=20

Idle (sec) value represents the time (in seconds) since = last packet=20 was received from the particular station.

The information in the station statistics window can be updated = using the=20 Reload button. Window can be closed with the Close this = window=20 button.

=20

Statistics of the Associated = Station

Detailed information can be retrieved while selecting the = particular=20 MAC of the associated station:=20

MAC of the station which is is associated;=20

Uptime value represents the running total of time the = station is=20 associated. The time is expressed in days, hours, minutes and seconds; =

Signal Strength value represents the last received wireless = signal=20 level;=20

CCQ value represents the quality of the connection to the = Station;=20

Tx/Rx Rate represents the data rates of the last = transmitted and=20 received packets;=20

Tx/Rx Packets value represents the total amount of packets=20 transmitted to and received from the Station during the connection = uptime;=20

Tx/Rx Packet Rate (packets per second) represents the mean = value of=20 the transmitted and received packet rate;=20

Bytes transmitted/received value represents the total = amount of=20 data (in bytes) transmitted and received during the connection;=20

Negotiated Rate/Last Signal (dBm) table values represent = the=20 received wireless signal level along with the all data rates of = recently=20 received packets. "N/A" value is represented as the Last Signal = if no=20 packets were received on that particular data rate.

The information in the statistic window is updated automatically. = Window=20 can be closed with the Close this window button.

More statistics (Station Uptime, Negotiated Rates,=20 Static WDS Flag, Tx/Rx Frames, Tx/Rx Bytes) can = be=20 retrieved while clicking on the =E2=80=9C+=E2=80=9D button near = MAC address of the each=20 Station entry.

= =20

Details of the connection with the associated = Access=20 Point

Show AP Info: selection opens the connection statistics window = while=20 operating in Station mode.

The following link statistics is provided:=20

MAC of the Access Point station is associated to;=20

Uptime value represents the running total of time the = stations is=20 associated to the AP. The time is expressed in days, hours, minutes = and=20 seconds;=20

Signal Strength value represents the last received wireless = signal=20 level;=20

CCQ value represents the quality of the connection to the = AP;=20

Tx/Rx Rate represents the data rates of the last = transmitted and=20 received packets;=20

Tx/Rx Packets value represents the total amount of packets=20 transmitted and received during the connection;=20

Tx/Rx Packet Rate (packets per second) represents the mean = value of=20 the transmitted and received packet rate;=20

Bytes transmitted/received value represents the total = amount of=20 data (in bytes) transmitted and received during the connection;=20

The information in the statistic window is updated automatically. = Window=20 can be closed with the Close this window button.

=20

Current Status of the system ARP = table

Show ARP Table: selection lists all the entries of the ARP = (Address=20 Resolution Protocol) table currently recorded on the device.

The list can be updated using the Reload button.

ARP is used to associate each IP address to the unique hardware = address=20 (MAC) the devices. It is important to have unique IP addresses for = each MAC or=20 else there will be ambiguous routes in the network.

=20

Status of the throughput on LAN = interface

Show Throughput selection opens statistics window which = continuously=20 represents the current data traffic on the LAN, WLAN and PPP interfaces = in both=20 graphical and numerical form. The chart scale and throughput dimension = (Bps,=20 Kbps, Mbps) changes dynamically according to the mean throughput value. =

The statistics is updated automatically. Throughput statistics can = be=20 updated manually using the Reload button.

=20

System Log

Show Log selection opens system log window which lists all the = registered system events.

All the entries in the system log will be deleted if the = Clear=20 button is activated. The System Log content is updated if = Reload=20 button is activated. Window can be closed with the Close this = window=20 button.

Message "Syslog is disabled, unable to show system messages" is = displayed=20 if the System Log is not enabled. System Log = configuration=20 description is provided in the Services section.

=20

Current Status of the system routing = tables

Show Routes: selection lists all the entries in the system = routing=20 table, while the device is operating in Router mode.

The list can be updated using the Reload button.=20

AirOS examines the destination IP address of each data = packet=20 traveling through the system and chooses the appropriate interface to = forward=20 the packet to. The system choice depends on static routing rules = =E2=80=93 entries,=20 which are registered in system routing table. Static routes to = specific hosts,=20 networks or default gateway are set up automatically according to the = IP=20 configuration of all the AirOS interfaces.

AirOS IP configuration description is provided in the Link = Setup=20 section.

=20

Current Status of the system bridge = table

Show Bridge Table: selection lists all the entries in the = system=20 bridge table, while the device is operating in Bridge mode.

The list can be updated using the Reload button.

Bridge table shows to which bridge port the particular = station is=20 associated to - in other words from which interface (ethernet = or=20 wireless ) the network device (defined by MAC address) is = reachable to=20 AirOS system while forwarding the packets to that port only (thus = saving a lot=20 of redundant copies and transmits).

Ageing timer shows ageing time for each address entry (in = seconds)=20 - after particular time out, not having seen a packet coming from a = certain=20 address, the bridge will delete that address from the Bridge Table. =

=20

Current Status of the DHCP leases

Show DHCP Leases selection shows the current status of the = leased IP=20 addresses by the device=E2=80=99s DHCP server. This option is available = if DHCP=20 Server is enabled while the device is operating in Router = mode.

Interface name shows from which device interface DHCP = client which=20 has specified MAC Address is connected.=20

Remaining Lease time shows for how long the leased IP=20 address will be valid and reserved for particular DHCP client. =

The list can be updated using the Reload button.

<= IMG=20 class=3Dthumbimage height=3D31 alt=3D"Active Firewall entries in Bridge = mode"=20 src=3D"http://wiki.ubnt.com/wiki/images/thumb/4/46/10-Ebtables-List.png/1= 80px-10-Ebtables-List.png"=20 width=3D180 border=3D0>=20

<= IMG=20 height=3D11 alt=3D""=20 src=3D"http://wiki.ubnt.com/wiki/skins/common/images/magnify-clip.png"=20 width=3D15>

Active Firewall entries in Bridge = mode

Show Firewall selection lists active firewall entries in the=20 FIREWALL chain of the standard ebtables filter table, while the device is = operating in=20 Bridge mode.

The list can be updated using the Reload button.

<= IMG=20 class=3Dthumbimage height=3D38 alt=3D"Active Firewall entries in Router = mode"=20 src=3D"http://wiki.ubnt.com/wiki/images/thumb/0/03/11-Iptables-List.png/1= 80px-11-Iptables-List.png"=20 width=3D180 border=3D0>=20

<= IMG=20 height=3D11 alt=3D""=20 src=3D"http://wiki.ubnt.com/wiki/skins/common/images/magnify-clip.png"=20 width=3D15>

Active Firewall entries in Router = mode

Active firewall entries in the FIREWALL chain of the = standard iptables filter table are listed if the = device is=20 operating in Router mode.

The list can be updated using the Reload button.

IP and MAC level access control and packet filtering in AirOS is=20 implemented using iptables (routing) and ebtables (bridging) firewall which protects the = resources of=20 a private network from outside threats by preventing unauthorized = access and=20 filtering specified types of network communication.

More information is provided in the Link Setup section. =

=20

Active Port Forward entries in Router = mode

Show Port Forward selection lists active port forward entries = in the=20 PORTFORWARD chain of the standard iptables=20 nat table, while the device is operating in Router mode. =

The list can be updated using the Reload button.

Port Forwarding creates a transparent tunnel through a = firewall/NAT,=20 granting an access from the WAN side to the particular network service = running=20 on the LAN side.

More information is provided in the Link Setup section. =

[Content] =

Tools

Tools: provides network utilities in pop-up window:

=20

Antenna alignment Tool

Align Antenna utility allows the installer to point and = optimize the=20 antenna in the direction of maximum link signal.

Selection of the Align Antenna tool will open new window = with=20 signal strength indicator. Window reloads every second displaying the = signal=20 strength of the last received packet.

The "RSSI Range" slider bar allows the range of the meter to be = either=20 increased or reduced. If the range is reduced, the color change will = be more=20 sensitive to signal fluctuations as RSSI Range slider actually = changes=20 an offset of the maximum indicator value thus the scale itself. =

Align Antenna window can be closed with the Close this = window=20 button.

=20

Wireless link throughput estimation with Network = Speed Test=20 utility

Speed Test: This utility allows for testing the connection = speed to=20 and from any reachable IP address on the AirOS device network. It should = be used=20 for the preliminary throughput estimation between two network devices. = If both=20 devices are powered by AirOS, the estimation is more precise, otherwise = only=20 rough estimation is provided while using ICMP packet exchange routines. =

Remote system IP can be selected from the list which is generated=20 automatically (Select destination IP) or can be specified=20 manually.

Access credentials (administrator username - User and=20 Password) of the remote system should be provided for the = communication=20 between two AirOS powered devices. This is required in order to = establish=20 TCP/IP based throughput test. ICMP throughput measurement routine will = be=20 initiated if the access credentials are incorrect or not supplied. =

Remote WEB port of the AirOS powered devices should be = specified in=20 order to establish TCP/IP based throughput test (i.e. 443 port should = be=20 specified if HTTPS is enabled in the remote system). ICMP throughput=20 measurement routine will be initiated if the WEB port of the remote = system is=20 incorrect.

Show advanced options control will enable additional = Speed=20 Test utility options. 4 options available for the traffic = direction=20 while estimating the throughput maximum:=20

* Estimate the incoming (Rx) throughput while selecting = receive=20 option;=20

* Estimate the outgoing (Tx) throughput while selecting = transmit=20 option;=20

* First estimate the incoming (Rx) and afterwards the outgoing = (Tx)=20 throughput while selecting option both;=20

* Estimate the incoming (Rx) and the outgoing (Tx) throughput at = the same=20 time while selecting option duplex.=20

Test Duration and Data amount settings specify the = test=20 execution time:=20

* throughput test will stop after the specified time frame (in = seconds) if=20 the Duration value is set;=20

* throughput test will stop after the specified volume of data (in = bytes)=20 if sent/received if the Data amount value is set;=20

* the test will stop after any of the criteria is met if both=20 (Duration and Data amount) values are specified. =

The test is started using the Run Test button.

=20

Wireless link quality estimation with Network Ping=20 utility

Ping: This utility will ping other devices on the network = directly=20 from the AirOS device.

Ping utility should be used for the preliminary link quality and = packet=20 latency estimation between two network devices using the ICMP packets. =

Remote system IP can be selected from the list which is generated=20 automatically (Select destination IP) or can be specified=20 manually.

The size of the ICMP packets can be specified in the Packet = size=20 field. Estimation is done after the number of ICMP packets (specified = in=20 Packet count field) is transmitted/received.

Packet loss statistics and latency time evaluation is provided = after the=20 test is completed.

The test is started using the Start button.

=20

Finding the route across the network with = Traceroute=20 utility

TraceRoute: Allows tracing the hops from the AirOS device to a = selected outgoing IP address. It should be used for the finding the = route taken=20 by ICMP packets across the network to the Destination host.

Resolution of the IP addresses (symbolically rather than = numerically) can=20 be enabled by selecting the Resolve IP address option. =

The test is started using the Start button.

=20

Wireless Site Survey utility

Site Survey: utility will search for wireless networks in = range on all=20 the supported channels while device is operating in Access Point = or=20 Station mode. In Station mode channel list can be = modified. Refer=20 to the section Link Setup for the details on channel list = customization.=20

Site Survey reports MAC Address, ESSID, = Encryption=20 type (if any), Signal Strength (dBm), Frequency (GHz) = and=20 wireless channel of all the surrounding Access Points which can = be=20 found by the AirOs based device.

The Site Survey can be updated using the Scan = button.=20 Site Survey window can be closed with the Close this window=20 button.

[Content] =

Link Setup Page

The Link Setup Page contains everything needed by the operator to = setup the=20 wireless part of the link. This includes regulatory requirements, = channel and=20 frequency settings, device mode, data rates, and wireless security. =

Basic Wireless Settings

=20

Station Basic Wireless Settings

The general wireless settings, such as wireless device BSSID, country = code,=20 output power, 802.11 mode and data rates can be configured in this = section.

Wireless Mode: specify the operating mode of the device. The = mode=20 depends on the network topology requirements. There are 4 operating = modes=20 supported in AirOS v3.0 software:

1. Station: This is a client mode, which can connect to an = AP.=20

It is common for a bridging application to an AP. In = Station mode=20 device acts as the Subscriber Station while connecting to the Access = Point=20 which is primary defined by the SSID and forwarding all the traffic = to/from=20 the network devices connected to the ethernet interface.=20

The specifics of this mode is that Subscriber Station is using=20 arpnat technique which may result lack of transparency while=20 passing-through broadcast packets in bridge mode. =

2. Station WDS: WDS stands for Wireless Distribution = System.=20 Station WDS should be used while connecting to the Access Point which = is=20 operating in WDS mode.=20

Station WDS mode enables packet forwarding at layer 2 level.=20

The benefit of Station WDS is improved performance and = faster=20 throughput. Station WDS - Bridge mode is fully transparent for = all the=20 Layer2 protocols.=20

Refer to the section Network Settings for detailed Bridge network = mode=20 configuration information.

3. Access Point: This is an 802.11 Access Point mode. =

=20

AP WDS Basic Wireless Settings

4. Access Point WDS: This is an 802.11 Access Point which = allows=20 for layer 2 bridging with Station WDS devices using the WDS protocol.=20

WDS allows you to bridge wireless traffic between devices which = are=20 operating in Access Point mode. Access Point is usually = connected to a=20 wired network (Ethernet LAN) allowing wireless connection to the wired = network. By connecting Access Points to one another in an Extended = Service Set=20 using the WDS, distant Ethernets can be bridged into a single LAN. =

It is very important that network loops should not be created with = either=20 WDS bridges or combinations of wired (Ethernet) connections and WDS = bridges.=20 Tree or Star shape network topology should be used in all WDS = use-cases (i.e.=20 if AP2 and AP3 are specified as the WDS peers of AP1, AP2 should not = be=20 specified as the WDS peer of AP3 and AP3 should not be specified as = the WDS=20 peer of AP2 in any case). Mesh and Ring network topologies are not = supported=20 by WDS and should be avoided in all the use cases.

Note: Station WDS and AP WDS mode uses the WDS protocol = which=20 is not defined as the standard thus compatibility issues between = equipment from=20 different vendors may arise.

WDS Peers: WDS Stations and/or WDS Access Points connected to = the=20 AirOS powered Access Point should be specified in this list in order to = create a=20 wireless network infrastructure - Wireless Distribution System = (applicable for=20 AP WDS mode only).

Enter the MAC address of the paired WDS device in the WDS Peer entry = field.=20 One MAC address should be specified for Point-to-Point connection use = case, up=20 to six WDS Peers can be specified for Point-to-Multi-Point connection = use case.=20

Auto option should be enabled in order to establish WDS = connection=20 between Access Points if WDS Peers are not specified (applicable = for AP=20 WDS mode only). If Auto option is enabled AirOS powered Access = Point will=20 choose WDS Peers (Access Points) according to the SSID setting. Access = Point=20 operating in WDS mode should have the same SSID as the WDS Peer in order = to=20 establish the connection automatically while Auto option is = enabled. This=20 configuration is also known as the repeater mode.

Note: Access Point operating in WDS mode and all the WDS Peers must = operate=20 on the same frequency channel and use the same channel = spectrum=20 width.

MAC Clone option makes the Station fully transparent while = acting as=20 the laptop or PC which is connected to the AirOS device LAN port = (Ethernet=20 interface). MAC of the client computer is cloned and copied on top of = the AirOS=20 device, so it can be made to connect to the same device and maintain any = MAC ID=20 security based privileges from the server.

MAC Cloning option (applicable for STA mode only) is effective for = one and=20 the only PC connected to the subscriber station=E2=80=99s LAN port as = the station will=20 authenticate and associate to the chosen Access Point using the MAC = address of=20 the PC.

SSID: Service Set Identifier used to identify your 802.11 = wireless LAN=20 should be specified while operating in Access Point mode. All the = client=20 devices within range will receive broadcast messages from the access = point=20 advertising this SSID.

ESSID: =E2=80=93 specify the ESSID of the Access Point which = the the AirOS=20 should associate to while operating in Station or Station = WDS=20 mode. There can be several Access Points with the same ESSID. If the = ESSID is=20 set to "Any" the station will connect to any available AP.

Hide SSID control will disable advertising the SSID of the = access=20 point in broadcast messages to wireless stations. Unselected control = will make=20 SSID visible during network scans on the wireless stations. Control is = available=20 while operating in Access Point mode only.

=20

Site Survey tool for the Access Point=20 selection

The list of the available Access Points can be retrieved using the=20 Select button. This control activates Site Survey tool = which is=20 used for the AP selection. Site Survey will search for the available = wireless=20 networks in range on all the supported channels and will allow you to = select one=20 for association. In case the selected network uses encryption, = you=E2=80=99ll need to=20 set security parameters in wireless security section. Select the = Access=20 Point from the list and click Select button for association.

Click Scan button to refresh the list of available wireless = networks.=20

Close this window button closes Site Survey tool window.

Site Survey channel scan list can be modified using the Channel = Scan=20 List control.

=20

Channel Scan list selection on = Nanostation5

Channel Scan List: This will confine scanning only to the = selected=20 channels (applicable for Station and Station WDS mode only). The = benefits of=20 this are faster scanning as well as filtering out unwanted AP's in the = results.=20 Site Survey tool will look for the Access Points in selected channels = only.

Channel list management for the selected IEEE 802.11 mode and = specified=20 Channel Spectrum Width can be enabled by selecting the Enabled = option.=20 There are two ways to set the Channel Scan List - enumerating the = required=20 channels (separated by comma) in the input field or using the selection = options=20 in Channel Scan List window which is activated using the Edit = button.=20 Site Survey tool will look for the Access Points in selected = channels=20 only if the scan or site survey operation is performed in Station = mode.=20

Lock to AP MAC: This allows the station to always maintain = connection=20 to a particular AP with a specific MAC (applicable for Station and = Station WDS=20 mode only). This is useful as sometimes there can be few identically = named=20 SSID's (AP's) with different MAC addresses. With AP lock on, the station = will=20 lock to MAC address and not roam between several Access Points with the = same=20 ESSID.

Country Code: Different countries will have different power = levels and=20 possible frequency selections. To ensure device operation follows = regulatory=20 compliance rules, please make sure to select your correct country where = device=20 will be used. The channel list, output power limits, IEEE 802.11 and = Channel=20 Spectrum Width modes will be tuned according to the regulations of the = selected=20 country. Additionally, please consult compliance=20 guide for further explanation of international compliance = requirements.

IEEE 802.11 Mode: This is the radio standard used for = operation of=20 your AirOS powered device. 802.11b is an older 2.4GHz mode while the = 802.11g=20 (2.4GHz) and 802.11a (5GHz) are newer standards based on faster = Othogonal=20 Frequency Division Multiplexing (OFDM) modulation. For more information, = please=20 consult 802.11 compliance=20 guide.

Bullet2/2HP, LiteStation2, MiniStation, NanoStation2/loco2, = PowerStation2,=20 PicoStation2/2HP supported IEEE 802.11 modes:

B only =E2=80=93 connect to a 802.11b only network.=20

B/G Mixed =E2=80=93 connect to a 802.11b or 802.11g network = (selected by=20 default).=20

G only =E2=80=93 connect to a 802.11g only network. =

Bullet5/HP, LiteStation5, NanoStation5/loco5, PowerStation5, = PicoStation5,=20 WispStation5 supported IEEE 802.11 modes:

A =E2=80=93 connect to a 802.11a network (selected by = default).

LiteStation-SR71 supported IEEE 802.11 modes:

11n =E2=80=93 connect to a 802.11n network (selected by = default). 802.11n=20 is compatible with 802.11b or 802.11g modes.

Channel Spectrum Width: This is spectral width of the radio = channel.=20 Supported wireless channel spectrum widths:

5MHz =E2=80=93 is the channel spectrum with the width of 5 = MHz (known as=20 Quarter-Rate mode).=20

10MHz =E2=80=93 is the channel spectrum with the width of = 10 MHz (known as=20 Half-Rate mode).=20

20MHz =E2=80=93 is the standard channel spectrum width = (selected by=20 default).=20

40MHz =E2=80=93 the widest channel spectrum width required = to connect to a=20 802.11a network which supports Static Turbo feature (applicable for=20 Bullet5/HP, LiteStation5, NanoStation5/loco5, PowerStation5, = PicoStation5,=20 WispStation5 only).

Reducing spectral width provides 2 benefits and 1 drawback.

Benefit 1: It will increase the amount of non-overlapping = channels. This=20 can allow networks to scale better=20

Benefit 2: It will increase the PSD (power spectral Density) of = the=20 channel and enable the link distance to be increased=20

Drawback: It will reduce throughput proportional to the channel = size=20 reduction. So just as turbo mode (40MHz) increases possible speeds by = 2x, half=20 spectrum channel (10MHz), will decrease possible speeds by 2x. =

Channel Shifting: option enables the special channels which = have the=20 frequency offset from the standard 802.11b/g and 802.11a channels. This = is a=20 proprietary Ubiquiti developed feature. While 802.11 networks have = standard=20 channels such as Channel 1 (2412MHz), Channel 2 (2417MHz), etc. spaced = every=20 5MHz apart, channel shifting will allow operation of new non-802.11 = channels=20 offset from the standard channels. All the channels can be shifted by 5 = MHz (in=20 802.11a mode) or 2 MHz (in 802.11b/bg/g mode) from the default central = channel=20 frequency.

The benefits of this are private networking and inherent security. = Using=20 channel-shifting, networks can instantly become invisible to the = millions of=20 wifi devices in the world.

Channel: select the wireless channel while operating in = Access=20 Point mode. Multiple frequency channels are available to avoid = interference=20 between nearby access points. The channel list varies depending on the = selected=20 country code, IEEE 802.11 mode, Channel Spectrum Width and Channel = Shifting=20 option.

Output Power: This will configure the maximum average transmit = output=20 power (in dBm) of the wireless device. The output power at which = wireless module=20 transmits data can be specified using the slider. When entering output = power=20 value manually, the slider position will change according to the entered = value.=20 The transmit power level maximum is limited according to the country=20 regulations. If the AirOS based device has an internal antenna (i.e.=20 NanoStation), Output Power is the output power delivered to the internal = antenna.

Obey regulatory power option must remain enabled while it will = force=20 the transmit output power to be compliant with the regulations of the = selected=20 country. In this case it will not be possible to set equivalent = isotropic=20 radiated power (EIRP) above the amount allowed per regulatory domain = (different=20 maximum output power levels and antenna gains are allowed for each IEEE=20 802.11a/b/g regulatory domain thus country). For more regulatory = information=20 please consult 802.11 compliance=20 guide.

Data Rate: This defines the data rate (in Mbps) at which the = device=20 should transmit wireless packets. If the Auto check box is = enabled, then=20 the rate algorithm will select the best data rate depending on = the link=20 quality conditions. If a data rate below 54Mbps is selected while the=20 Auto rate selection is enabled, then the selected data rate will = become=20 the maximum data rate that can be used. Use Auto option if you = are having=20 trouble getting connected or losing data at a higher rate. In this case = the=20 lower data rates will be used by device automatically.

Refer to the section Advanced Wireless Settings for the = detailed=20 information about rate algorithms.

[Content] =

Wireless Security

This section enables you to set parameters that control how the = subscriber=20 station associates to a wireless device and encrypts/decrypts data.

=20

Station Wireless Security = Settings

Choose the security method according to the Access Point security = policy.=20 Subscriber station should be authorized by Access Point in order to get = access=20 to the network and all the user data transferred between subscriber = station and=20 Access Point will be encrypted if the wireless security methods are = used.

Security: AirOS supports WEP, WPA, and WPA2 security options. = Select=20 the security mode of your wireless network:

WEP =E2=80=93 enable WEP encryption. WEP (Wired Equivalent = Privacy) is=20 based on the IEEE 802.11 standard and uses the RC4 encryption = algorithm.=20 Enabling WEP allows you to increase security by encrypting data being=20 transferred over your wireless network. WEP is the oldest security = algorithm.=20

WPA =E2=80=93 enable WPA=E2=84=A2 security mode. Wi-Fi = Protected Access - WPA=E2=84=A2=20 (IEEE 802.11i/D3.0) and WPA2=E2=84=A2 (IEEE 802.11i) with pre-shared = key management=20 protocol offers improved security methods as they are new protocols = that were=20 created under the 802.11i standard to address weaknesses in the WEP = approach.=20

WPA=E2=84=A2 and WPA2=E2=84=A2 support the following = ciphers for data=20 encryption:

TKIP - Temporal Key Integrity Protocol which uses RC4 = encryption=20 algorithm.=20

CCMP - Counter Mode with Cipher Block Chaining Message=20 Authentication Code Protocol which uses the Advanced Encryption = Standard (AES)=20 algorithm.

The device will use the strongest cipher (CCMP) in Station and Access = Point=20 wireless mode by default. If CCMP is not supported on the other side of = the link=20 the TKIP encryption will be used - like in situation when the device = acts as=20 Access Point with WPA security enabled and at least one wireless station = (without CCMP support) is connected to it.

WPA-TKIP =E2=80=93 enable WPA=E2=84=A2 security mode with = TKIP support only.=20

WPA-AES =E2=80=93 enable WPA=E2=84=A2 security mode with = AES support only.=20

WPA2 =E2=80=93 enable WPA2=E2=84=A2 security mode.=20

WPA2-TKIP =E2=80=93 enable WPA2=E2=84=A2 security mode with = TKIP support only.=20

WPA2-AES =E2=80=93 enable WPA2=E2=84=A2 security mode with = AES support only.=20

Authentication Type: field relates only to the WEP security = option.=20 One of the following authentication modes should be selected if WEP = security=20 method is used:

Open Authentication =E2=80=93 station is authenticated = automatically by AP=20 (selected by default).=20

Shared Authentication =E2=80=93 station is authenticated = after the=20 challenge, generated by AP.

WEP Key Length: 64-bit (selected by default) or 128-bit WEP = Key length=20 should be selected if WEP security method is used. The 128-bit = option=20 will provide higher level of wireless security.

Key Type: HEX (selected by default) or ASCII = option=20 specifies the character format for the WEP key if WEP security method is = used.=20

WEP Key: WEP encryption key for the wireless traffic = encryption and=20 decryption should be specified if WEP security method is used:

For 64-bit =E2=80=93 specify WEP key as 5 HEX (0-9, A-F or = a-f) pairs (e.g.=20 00112233AA) or 5 ASCII characters.=20

For 128-bit =E2=80=93 specify WEP key as 13 HEX (0-9, A-F = or a-f) pairs=20 (e.g. 00112233445566778899AABBCC) or 13 ASCII characters.

Key Index: allows to specify the Index of the WEP Key used. 4=20 different WEP keys can be configured at the same time, but only one is = used.=20 Effective key is set with a choice of 1, 2, 3 or 4.

WPA Authentication: one of the following WPA=E2=84=A2 key = selection methods=20 should be specified if WPA=E2=84=A2 or WPA2=E2=84=A2 security method is = used (applicable for=20 Station and Station WDS modes only). :

PSK =E2=80=93 WPA=E2=84=A2 or WPA2=E2=84=A2 with Pre-shared = Key method (selected by=20 default).=20

EAP =E2=80=93 WPA=E2=84=A2 or WPA2=E2=84=A2 with EAP = (Extensible Authentication Protocol)=20 IEEE 802.1x authentication method. This method is commonly used in = Enterprise=20 networks. Note: AirOS Web Management GUI supports only EAP-TTLS = authentication=20 method.

WPA Pre-shared Key: the pass phrase for WPA=E2=84=A2 or = WPA2=E2=84=A2 security method=20 should be specified if the Pre-shared Key method is selected. The = pre-shared key is an alpha-numeric password between 8 and 63 characters = long.=20

WPA Identity: identification credential (also known as=20 identity) used by the supplicant for EAP authentication = (applicable for=20 STA and STA WDS modes only).

WPA User Name: identification credential (also known as = anonymous=20 identity) used by the supplicant for EAP tunneled authentication = (EAP-TTLS)=20 in unencrypted form (applicable for STA and STA WDS modes only).

WPA User Password: password credential used by the supplicant = for EAP=20 authentication (applicable for STA and STA WDS modes only).

=20

Access Point Wireless Security = Settings

MAC ACL: MAC Access Control List (ACL) provides ability to = allow or=20 deny certain clients to connect to the AP (applicable for AP and AP WDS = modes=20 only).

MAC ACL can be enabled by selecting the Enabled option.

There are two ways to set the Access Control List:

define certain wireless clients in the list which will have = granted access=20 to the Access Point while the access will be denied for all the = remaining=20 clients - MAC ACL Policy is set to Allow'.=20

define certain wireless clients in the list which will have denied = access=20 to the Access Point while the access will be granted for all the = remaining=20 clients - MAC ACL Policy is set to Deny.

The MAC addresses of the wireless clients can be added and removed to = the=20 list using the Add and Remove buttons.

Note: MAC Access Control is the weakest security approach. = WPA=E2=84=A2 or WPA2=E2=84=A2=20 security methods shoud be used when possible.

Click Change button to save the changes.

[Content] =

Network

The Network Page allows the administrator to setup bridge or routing=20 functionality.

AirOS powered devices can operate in bridge or router mode. The IP=20 configuration as described below is required for device management = purposes. IP=20 addresses can either be retrieved from a DHCP server or configured = manually. Use=20 the Network menu to configure the IP settings.

=20

AirOS Network Mode selection

Network Mode: specify the operating network mode for the = device.

The mode depends on the network topology requirements:

Bridge operating mode is selected by default as it is = widely used=20 by the subscriber stations, while connecting to Access Point or using = WDS. In=20 this mode the device will act as a transparent bridge and will operate = in=20 Layer 2. There will be no network segmentation while broadcast domain = will be=20 the same. Bridge mode will not block any broadcast or multicast = traffic.=20 Additional Firewall settings can be configured for Layer 2 = packet=20 filtering and access control in Bridge mode.

Router operating mode can be configured in order to operate = in=20 Layer 3 to perform routing and enable network segmentation =E2=80=93 = wireless clients=20 will be on different IP subnet. Router mode will block = broadcasts while=20 it is not transparent.

AirOS supports Multicast packet pass-through in Router = mode.=20

AirOS powered Router can act as DHCP server and use Network = Address=20 Translation (Masquerading) feature which is widely used by the Access = Points.=20 NAT will act as the firewall between LAN and WLAN networks. Additional = Firewall settings can be configured for Layer 3 packet = filtering and=20 access control in Router mode.

Disable Network: options can be used for disabling WLAN or LAN = interface. This setting should be used with the exclusive care as no L2 = or L3=20 connection can be established through the disabled interface. It will be = impossible to access the AirOS based device from the wireless/wired = network=20 which is connected to the disabled interface.

Bridge Mode

=20

Bridge mode Network Settings

In bridge mode the AirOS based device forwards all the network = management and=20 data packets from one network interface to the other without any = intelligent=20 routing. For simple applications this provides efficient and fully = transparent=20 network solution. WLAN (wireless) and LAN (Ethernet) interfaces belong = to the=20 same network segment which has the same IP address space. WLAN and LAN=20 interfaces form the virtual bridge interface while acting as the=20 bridge ports. The bridge has assigned IP settings for = management=20 purposes:

Bridge IP Address: The device can be set for static IP or can = be set=20 to obtain an IP address from the DHCP server it is connected to.

One of the IP assignment modes must be selected:

DHCP =E2=80=93 choose this option to assign the dynamic IP = address, Gateway=20 and DNS address by the local DHCP server.=20

Static =E2=80=93 choose this option to assign the static IP = settings for=20 the bridge interface.

IP Address: enter the IP address of the device while Static = Bridge=20 IP Address mode is selected. This IP will be used for the AirOS = device=20 management purposes.

IP Address and Netmask settings should consist with the = address=20 space of the network segment where AirOS device resides. If the device = IP=20 settings and administrator PC (which is connected to the device in wired = or=20 wireless way) IP settings will use different address space, the AirOS = device=20 will become unreachable.

Netmask: This is a value which when expanded into binary = provides a=20 mapping to define which portions of IP address groups can be classified = as host=20 devices and network devices. Netmask defines the address space of the = network=20 segment where AirOS device resides. 255.255.255.0 (or /24) = Netmask is=20 commonly used among many C Class IP networks.

Gateway IP: Typically, this is the IP address of the host = router which=20 provides the point of connection to the internet. This can be a DSL = modem, Cable=20 modem, or a WISP gateway router. AirOS device will direct the packets of = data to=20 the gateway if the destination host is not within the local network. =

Gateway IP address should be from the same address space (on = the same=20 network segment) as the AirOS device.

Primary/Secondary DNS IP: The Domain Name System (DNS) is an = internet=20 "phone book" which translates domain names to IP addresses. These fields = identify the server IP addresses of where the AirOS device looks for the = translation source.

Primary DNS server IP address should be specified for the = device=20 management purposes.

Secondary DNS server IP address is optional. It is used as the = fail-over in case the primary DNS server will become unresponsive.

DHCP Fallback IP: In case the Bridge is placed in = Dynamic IP=20 Address mode (DHCP) and is unable to obtain an IP address from a valid = DHCP=20 server, it will fall back to the static IP address listed here.

In case the IP settings of the AirOS powered device are unknown, they = can be=20 retrieved with the help of the [UBNT_Discovery_Utility Ubiquiti = Discovery=20 Utility]. Multi-platform Utility should be started on the = administrator=20 PC which resides on the same network segment as the AirOS device.

AirOS system will return to the default IP configuration=20 (192.168.1.20/255.255.255.0) If the Reset to defaults routine is=20 initiated.

Spanning Tree Protocol: Multiple interconnected bridges create = larger=20 networks using the IEEE 802.1d Spanning Tree Protocol = (STP), which=20 is used for finding the shortest path within network and to eliminate = loops from=20 the topology.

If the STP is turned on, the AirOS Bridge will = communicate with=20 other network devices by sending and receiving Bridge Protocol Data = Units=20 (BPDU). STP should be turned off (selected by default) when the = AirOS=20 device is the only bridge on the LAN or when there are no loops in the = topology=20 as there is no sense for the bridge to participate in the = Spanning=20 Tree Protocol in this case.

=20

Bridge mode Firewall Configuration = Settings

Firewall functionality on bridge interface can be enabled = using the=20 "Enable Firewall" option. Bridge Firewall rules can be configured, = enabled or=20 disabled while using Firewall configuration window which is opened with = the=20 "Configure" button.

Firewall entries can be specified by using the following = criteria:=20

Interface the interface (WLAN or LAN) where filtering of = the=20 incoming/passing-through packets is processed;=20

IP Type sets which particular L3 protocol type (IP, ICMP, = TCP, UDP)=20 should be filtered;=20

Source IP/mask is the source IP of the packet (specified = within the=20 packet header), usually it is the IP of the host system which sends = the=20 packets;=20

Source Port is the source port of the TCP/UDP packet = (specified=20 within the packet header), usually it is the port of the host system=20 application which sends the packets;=20

Destination IP/mask is the destination IP of the packet = (specified=20 within the packet header), usually it is the IP of the system which = the packet=20 is addressed to;=20

Destination Port is the destination port of the TCP/UDP = packet=20 (specified within the packet header), usually it is the port of the = host=20 system application which the packet is addressed to.=20

Comments is the informal field for the comment of the = particular=20 firewall entry. Few words about the particular firewall entry purpose = are=20 saved there usually.

On flag enables or disables the effect of the particular = firewall=20 entry. All the added firewall entries are saved in system configuration = file,=20 however only the enabled firewall entries will be active during the = AirOS system=20 operation.

Not operators can be used for inverting the Source = IP/mask,=20 Source Port, Destination IP/mask and Destination = Port=20 filtering criteria (i.e. if not is enabled for the specified=20 Destination Port value 443, the filtering criteria will be = applied to all=20 the the packets sent to any Destination Port except the 443 which = is=20 commonly used by HTTPS).

Newly added Firewall entries can be saved by activating = Save=20 button or discarded by activating Cancel button in the Firewall=20 configuration window.

All the active firewall entries are stored in the FIREWALL chain of = the=20 ebtables filter table, while the device is operating in Bridge mode. = Please=20 refer to the ebtables=20 manual for detailed description of the firewall functionality in=20 Bridge mode.

The list can be updated using the Reload button.

Click Change button to save the changes made in the = Network=20 page.

Router Mode

The role of the LAN and WLAN interface will change accordingly to the = Wireless Mode while the AirOS powered device is operating in=20 Router mode:

Wireless interface and all the wireless clients connected are = considered=20 as the internal LAN and the Ethernet interface is dedicated for the = connection=20 to the external network while the AirOS powered device is operating in = AP/AP WDS wireless mode;=20
Wireless interface and all the wireless clients connected is = considered as=20 the external network and the all the network devices on LAN side as = well as=20 the Ethernet interface itself is considered as the internal network = while the=20 AirOS powered device is operating in Station/Station WDS mode. =

Wireless/wired clients are routed from the internal network to the = external=20 one by default. Network Address Translation (NAT) functionality works = the same=20 way.

=20

AP-Router mode Network Settings

IP Address: This is the IP addresses to be represented by the = LAN or=20 WLAN interface which is connected to the internal network according to = the=20 wireless operation mode described above. This IP will be used for the = routing of=20 the internal network (it will be the Gateway IP for all the = devices=20 connected on the internal network). This is the IP address can be used = for the=20 management purpose of the AirOS powered device.

LAN/WLAN IP Address: This is the IP addresses to be = represented by the=20 LAN or WLAN interface which is connected to the external network = according to=20 the wireless operation mode described above. This is the IP address can = be used=20 for the routing and the device management purposes.

The external network interface can be set for static IP or can be set = to=20 obtain an IP address from the DHCP server which should reside in the = external=20 network. One of the IP assignment modes must be selected for the = external=20 network interface:

DHCP =E2=80=93 choose this option to obtain the IP address, = Gateway and DNS=20 address dynamically from the external DHCP server.=20

PPPoE =E2=80=93 choose this option to obtain the IP = address, Gateway and=20 DNS address dynamically from the external PPPoE server.=20

Static =E2=80=93 choose this option to assign the static IP = settings for=20 the external interface.

Netmask: This is used to define the device IP classification = for the=20 chosen IP address range. 255.255.255.0 is a typical netmask value for = Class C=20 networks, which support IP address range 192.0.0.x to 223.255.255.x. = Class C=20 network Netmask uses 24 bits to identify the network (alternative = notation "/24") and 8 bits to identity the host.

Auto IP Aliasing configures automatically generated IP = Address=20 for the corresponding WLAN/LAN interface if enabled. Generated IP = address is the=20 unique Class B IP address from the 169.254.X.Y range (Netmask 255.255.0.0) which are = intended for=20 use within the same network segment only. Auto IP always starts with = 169.254.X.Y=20 while X and Y are last 2 digits from device MAC address (i.e. if the MAC = is=20 00:15:6D:A3:04:FB, Generated unique Auto IP will be = 169.254.4.251).

IP Aliases for internal and external network interface can be=20 configured. IP Aliases can be specified using the IP Aliases=20 configuration window which is opened while activating the "Configure" = button.=20

IP Address is the alternative IP address for the LAN or = WLAN=20 interface, which can be used for the routing or device management = purposes;=20

Netmask is the network address space identifier for the = particular=20 IP Alias;=20

Comments is the informal field for the comment of the = particular IP=20 Alias. Few words about the alias purpose are saved there usually;=20

Enabled flag enables or disables the particular IP Alias. = All the=20 added IP Aliases are saved in system configuration file, however only = the=20 enabled IP Aliases will be active during the AirOS system operation. =

Newly added IP Aliases can be saved by activating Save = button=20 or discarded by activating Cancel button in the Aliases = configuration=20 window.

Gateway IP: is the IP address of the host router which resides = on the=20 external network and provides the point of connection to the next hop = towards=20 the internet. This can be a DSL modem, Cable modem, or a WISP gateway = router.=20 AirOS device will direct all the packets to the gateway if the = destination host=20 is not within the local network.

Gateway IP address should be from the same address space (on = the same=20 network segment) as the AirOS device's external network interface = (Wireless=20 interface in the Station case and the LAN interface in the = AP=20 case).

Primary/Secondary DNS IP: The Domain Name System (DNS) is an = internet=20 "phone book" which translates domain names to IP addresses. These fields = identify the server IP addresses where the DNS requests are forwarded by = the=20 AirOS powered device.

Primary DNS server IP is mandatory. It is used by the DNS = Proxy=20 and for the device management purpose.

Secondary DNS server IP address is optional. It is used as the = fail-over in case the primary DNS server will become unresponsive.

Enable NAT: Network Address Translation (NAT) enables packets = to be=20 sent from the wired network (LAN) to the wireless interface IP address = and then=20 sub-routed to other client devices residing on it's local network while = the=20 AirOS powered device is operating in AP/AP WDS wireless mode and = in the=20 contrariwise direction in "Station/Station WDS" mode.

NAT is implemented using the masquerade type firewall rules. = NAT=20 firewall entries are stored in the iptables nat table, while the = device=20 is operating in Router mode. Please refer to the iptables tutorial for detailed description of the NAT = functionality in Router mode.

Static routes should be specified in order the packets should = pass-through=20 the AirOs based device if the NAT is disabled in while operating = in=20 Router network mode.

Enable DHCP Server: Dynamic Host Configuration Protocol (DHCP) = Server=20 assigns IP addresses to clients which will associate to the wireless = interface=20 while the AirOS powered device is operating in AP/AP WDS wireless = mode=20 and assigns IP addresses to clients which will connect to the LAN = interface=20 while the AirOS powered device is operating in Station/Station = WDS mode.=20

Range Start/End: This range determines the IP addresses given = out by=20 the DHCP server to client devices on the internal network which use = dynamic IP=20 configuration.

Lease Time: The IP addresses given out by the DHCP server will = only be=20 valid for the duration specified by the lease time. Increasing the time = ensure=20 client operation without interrupt, but could introduce potential = conflicts.=20 Lowering the lease time will avoid potential address conflicts, but = might cause=20 more slight interruptions to the client while it will acquire new IP = addresses=20 from the DHCP server.

DHCP Fallback IP: In case the external network interface of = the=20 Router is placed in Dynamic IP Address mode (DHCP) and is unable = to=20 obtain an IP address from a valid DHCP server, it will fall back to the = static=20 IP address listed here.

AirOS system will return to the default IP configuration=20 (192.168.1.20/255.255.255.0) If the Reset to defaults routine is=20 initiated.

=20

Port Forwarding Settings

Port Forwarding: Port forwarding allows specific ports of the = hosts=20 residing in the internal network to be forwarded to the external = network. This=20 is useful for number of applications such as FTP servers, gaming, etc. = where=20 different host systems need to be seen using a single common IP = address/port.=20

Port Forwarding rules can be set in Port Forwarding window, = which is=20 opened by enabling the Port Forwarding option and activating the=20 Configure button.

Port Forwarding entries can be specified by using the = following=20 criteria:

Private IP is the IP of the host which is connected to the = internal=20 network and needs to be accessible from the external network;=20

Private Port is the TCP/UDP port of the application running = on the=20 host which is connected to the internal network. The specified port = will be=20 accessible from the external network;=20

Type is the L3 protocol (IP) type which need to be = forwarded from=20 the internal network.=20

Public Port is the TCP/UDP port of the AirOS based device = which=20 will accept and forward the connections from the external network to = the host=20 connected to the internal network.=20

Comments is the informal field for the comment of the = particular=20 port forwarding entry. Few words about the particular port forwarding = entry=20 purpose are saved there usually.

Enabled flag enables or disables the effect of the = particular port=20 forwarding entry. All the added firewall entries are saved in system=20 configuration file, however only the enabled port forwarding entries = will be=20 active during the AirOS system operation.

Newly added port forwarding entries can be saved by activating = Save=20 button or discarded by activating Cancel button in the Port=20 Forwarding configuration window.

DNS Proxy: The DNS Proxy forwards the Domain Name System = requests from=20 the hosts which reside in the internal network to the DNS server while = AirOS=20 powered device is in operating in Router mode. Valid Primary = DNS=20 Server IP needs to be specified for DNS Proxy functionality. = Internal=20 network interface IP of the AirOS powered device should be specified as = the DNS=20 server in the host configuration in order DNS Proxy should be = able to get=20 the DNS requests and translate domain names to IP addresses afterwards. =

=20

Bridge mode Firewall Configuration = Settings

Firewall functionality on any router interface can be enabled = using=20 the "Enable Firewall" option. Router Firewall rules can be configured, = enabled=20 or disabled while using Firewall configuration window which is opened = with the=20 "Configure" button.

Firewall entries can be specified by using the following = criteria:=20

Interface the interface (WLAN, LAN or PPP) where filtering = of the=20 incoming/passing-through packets is processed;=20

IP Type sets which particular L3 protocol type (IP, ICMP, = TCP, UDP,=20 P2P) should be filtered;=20

Source IP/mask is the source IP of the packet (specified = within the=20 packet header), usually it is the IP of the host system which sends = the=20 packets;=20

Source Port is the source port of the TCP/UDP packet = (specified=20 within the packet header), usually it is the port of the host system=20 application which sends the packets;=20

Destination IP/mask is the destination IP of the packet = (specified=20 within the packet header), usually it is the IP of the system which = the packet=20 is addressed to;=20

Comments is the informal field for the comment of the = particular=20 firewall entry. Few words about the particular firewall entry purpose = are=20 saved there usually.=20

On flag enables or disables the effect of the particular = firewall=20 entry. All the added firewall entries are saved in system = configuration file,=20 however only the enabled firewall entries will be active during the = AirOS=20 system operation.=20

Not operators can be used for inverting the Source = IP/mask,=20 Source Port, Destination IP/mask and Destination = Port=20 filtering criteria (i.e. if not is enabled for the specified=20 Destination Port value 443, the filtering criteria will be = applied to=20 all the the packets sent to any Destination Port except the 443 = which=20 is commonly used by HTTPS).

Newly added Firewall entries can be saved by activating = Save=20 button or discarded by activating Cancel button in the Firewall=20 configuration window.

All the active firewall entries are stored in the FIREWALL chain of = the=20 iptables filter table, while the device is operating in Router = mode.=20 Please refer to the iptables tutorial for detailed description of the = firewall=20 functionality in Router mode.

PPPoE: Point-to-Point Protocol over Ethernet (PPPoE) is a = virtual=20 private and secure connection between two systems which enables = encapsulated=20 data transport. It is commonly used as the medium for subscribers to = connect to=20 Internet Service Providers.

Select the IP Address option PPPoE to configure a PPPoE tunnel = in=20 order to connect to an ISP. Only the external network interface can be=20 configured as PPPoE client as all the traffic will be sent via this = tunnel. The=20 IP address, Default gateway IP and DNS server IP address will be = obtained from=20 the PPPoE server after PPPoE connection is established. Broadcast = address is=20 used for the PPPoE server discovery and tunnel establishment.

Valid authorization credentials are required for the PPPoE = connection:

PPPoE Username =E2=80=93 username to connect to the server = (must match the=20 configured on the PPPoE server);=20

Password =E2=80=93 password to connect to the server (must = match the=20 configured on the PPPoE server);=20

PPPoE MTU/MRU =E2=80=93 the size (in bytes) of the Maximum = Transmission=20 Unit (MTU) and Maximum Receive Unit (MRU) used for the = data=20 encapsulation while tranfering it through the PPP = tunnel;=20

PPPoE Encryption =E2=80=93 enables the use of MPPE = encryption.

IP address of the PPP interface will be displayed in the Main = page=20 next to the PPP interface statistics if it is obtained through the = established=20 PPPoE connection, otherwise "Not Connected" message will be displayed. =

PPPoE tunnel reconnection routine can be initiated using the = Reconnect=20 button which is located in the Main page next to the PPP = interface=20 statistics.

Enable DMZ: The Demilitarized zone (DMZ) can be enabled and = used as a=20 place where services can be placed such as Web Servers, Proxy Servers, = and=20 E-mail Servers such that these services can still serve the local = network and=20 are at the same time isolated from it for additional security. = DMZ is=20 commonly used with the NAT functionality as an alternative for = the=20 Port Forwarding while makes all the ports of the host network = device be=20 visible from the external network side.

DMZ Management Port: Web Management Port for the AirOS based = device=20 (TCP/IP port 80 by default) will be used for the host device if DMZ=20 Management Port option is enabled. In this case AirOS device will = respond to=20 the requests from the external network as if it was the host which is = specified=20 with DMZ IP. It is recommended to leave Management Port = disabled=20 while the AirOS based device will become inaccessible from the external = network=20 if enabled.

DMZ IP: connected to the internal network host, specified with = the=20 DMZ IP address will be accessible from the external network.

With a multicast design, applications can send one copy of each = packet and=20 address it to the group of computers that want to receive it. This = technique=20 addresses packets to a group of receivers rather than to a single = receiver. It=20 depends on the network to forward the packets to the hosts which need to = receive=20 them. Common Routers isolate all the broadcast (thus multicast) traffic = between=20 the internal and external networks, however AirOS provides the multicast = traffic=20 pass-through functionality.

Enable Mcast Routing option enables the multicast packets = pass-through=20 between internal and external networks while device is operating in=20 Router mode. Multicast intercommunication is based on Internet = Group=20 Management Protocol (IGMP).

Click Change button to save the changes made in the Network page. =

[Content] =

Advanced

This page handles advanced routing and wireless settings. The = Advanced=20 options page allows you to manage advanced settings that influence on = the device=20 performance and behavior. The advanced wireless settings are dedicated = for more=20 technically advanced users who have a sufficient knowledge about = wireless LAN=20 technology. These settings should not be changed unless you know what = effect the=20 changes will have on your device.

Advanced Wireless Setting

=20

Advanced Wireless Settings

The 802.11 data rates include 1, 2, 5.5, 11 Mbps for IEEE 802.11b = mode and 6,=20 9, 12, 18, 24, 36, 48, 54Mbps for IEEE 802.11a/g mode. The Rate = Algorithm has a=20 critical impact on performance in outdoor links as generally lower data = rates=20 are more immune to noise while higher rates are less immune, but are = capable of=20 higher throughput.

Rate Algorithm: defines data rate algorithm convergence:

Optimistic Algorithm is aggressive enough to move to a = higher rate=20 but yet tries to conservatively capture the fluctuations of the RSSI. = It=20 starts with the highest possible rate and then decreases till the rate = can be=20 supported while periodically transmitting packets at higher rates and=20 computing the transmission time. The optimistic rate algorithm = always=20 looks to achieve highest throughput while sacrificing noise immunity = and=20 robustness.

Conservative Algorithm is less sensitive to individual = packet=20 failure as it is based on a function of number of successful and = erroneous=20 transmission/retransmission over a sampling period. It steps down to a = lower=20 rate after continuous packet failure and steps up after number of = successful=20 packets. The conservative rate algorithm provides the best case = stability / robustness, but may compromise maximum throughput. It is=20 recommended to select conservative rate algorithm when the = signal=20 strength is low due to noisy environment or link distance.

EWMA Algorithm is trying to move to a higher rate but is=20 continuously monitoring the packet failure counters. The Exponential = Weighted=20 Moving Average (EWMA) Algorithm (also known as minstrel) is a hybrid = of the=20 Conservative and Optimistic Algorithm. It is the compromise for most = of the=20 wireless network use cases.

Noise Immunity option increases the robustness of the device = to=20 operate in the presence of noise disturbance which is usually generated = by=20 external 802.11 traffic sources, channel hopping signals and other = interferers.=20

RTS Threshold: determines the packet size of a transmission = and,=20 through the use of an access point, helps control traffic flow. The = range is=20 0-2347bytes, or word =E2=80=9Coff=E2=80=9D. The default value is 2347 = which means that RTS is=20 disabled.

RTS/CTS (Request to Send / Clear to Send) is the mechanism used by = the 802.11=20 wireless networking protocol to reduce frame collisions introduced by = the hidden=20 terminal problem. RTS/CTS packet size threshold is 0-2347 bytes. If the = packet=20 size the node wants to transmit is larger than the threshold, the = RTS/CTS=20 handshake gets triggered. If the packet size is equal to or less than = threshold=20 the data frame gets sent immediately.

System uses Request to Send/Clear to Send frames for the handshake = which=20 provide collision reduction for access point with hidden stations. The = stations=20 are sending a RTS frame first while data is send only after handshake = with an AP=20 is completed. Stations respond with the CTS frame to the RTS which = provides=20 clear media for the requesting station to send the data. CTS collision = control=20 management has time interval defined during which all the other stations = hold=20 off the transmission and wait until the requesting station will finish=20 transmission.

Fragmentation Threshold: specifies the maximum size for a = packet=20 before data is fragmented into multiple packets. The range is 256-2346 = bytes, or=20 word =E2=80=9Coff=E2=80=9D. Setting the Fragmentation Threshold = too low may result in=20 poor network performance.

The use of fragmentation can increase the reliability of frame = transmissions.=20 Because of sending smaller frames, collisions are much less likely to = occur.=20 However lower values of the Fragmentation Threshold will result = lower=20 throughput as well. Minor or no modifications of the Fragmentation=20 Threshold value is recommended while default setting of 2346 is = optimum in=20 most of the wireless network use cases.

SuperG=C2=AE /SuperAG=C2=AE Features: select the options to = enable the chosen=20 SuperG=C2=AE (applicable for PowerStation2, LiteStation2, = NanoStation2/loco2)=20 or SuperAG=C2=AE (PowerStation5, LiteStation5, = NanoStation5/loco5) features=20 which increase the network performance:

Fast Frame =E2=80=93 utilizes 802.11 frame aggregation and = timing=20 modifications which increases the data throughput.

Bursting =E2=80=93 more data frames per given time period = are transmitted=20 thus the data throughput is increased.

Compression =E2=80=93 real-time hardware data compression = is enabled which=20 allows more data sent per frame.

Multicast Data: This option allows the Multicast packet = pass-through=20 functionality.

Multicast Rate: This option allows Multicast packets to be = sent in=20 higher rates (up to the 54 Mbps) than commonly used (1 Mbps at IEEE = 802.11b=20 mode, 6 Mbps at IEEE 802.11g/a mode). This is Ubiquiti's AirOS = proprietary=20 feature thus it may be incompatible with the devices from other vendors. = Both=20 AirOS based devices the sender (Station) and the receiver (Access Point) = must=20 have the same Multicast Rate configured in order to achieve = better=20 multicast packet throughput performance.

Enable Extra Reporting: feature will report additional = information=20 (i.e. Host Name) in the 802.11 management frames. This information is = commonly=20 used for system identification and status reporting in discovery = utilities and=20 Router operating systems.

Enable DFS: DFS is the part of the IEEE 802.11h = wireless=20 standard. Enable DFS option allows to enable/disable DFS support=20 (applicable for Bullet5/HP, LiteStation5, NanoStation5/loco5, = PowerStation5,=20 PicoStation5, WispStation5 only). DFS may be mandatory in some = regulatory=20 domains and should be tuned according to the regulations of the selected = country. Please consult compliance=20 guide and official regulations authorities for further explanation = of=20 compliance requirements for the country where AirOS based device is = installed.=20

Enable Client Isolation: This option allows packets only to be = sent=20 from the external network to the CPE and vice verse (applicable for = AP/AP=20 WDS mode only). If the Client Isolation is enabled wireless = stations=20 connected to the same AP will not be able to interconnect on both layer = 2 (MAC)=20 and layer 3 (IP) level. This is effective for the associated stations = and WDS=20 peers also.

Acknowledgement Timeout

AirOS has an auto-acknowledgement timeout algorithm which dynamically = optimizes the frame acknowledgement timeout value without user = intervention.=20 This is a critical feature required for stabilizing long-distance = outdoor links.=20 The user also has the ability to enter the value manually.

Distance: specify the distance value in miles (or kilometers) = using=20 slider or enter the value manually. The signal strength and throughput = falls off=20 with range. Changing the distance value will change the ACK Timeout to = the=20 appropriate value of the distance.

ACK Timeout: specify the ACK Timeout. Every time the = station=20 receives the data frame it sends an ACK frame to the AP (if transmission = errors=20 are absent). If the station receives no ACK frame from the AP within set = timeout it re-sends the frame. The performance drops because of = the too=20 many data frames are re-send, thus if the timeout is set too = short or too=20 long, it will result poor connection and throughput performance.

Changing the ACK Timeout''=3D=3D value will change the = Distance to=20 the appropriate distance value for the ACK Timeout.

Auto Adjust control will enable the ACK Timeout = Self-Configuration=20 feature. If enabled, ACK Timeout value will be derived dynamically using = an=20 algorithm similar to the Conservative Rate Algorithm described above. It = is not=20 recommended to use Auto Adjust option for long range links if the = signal=20 level is low or the high level of interference is present.

If two or more stations are located at the considerably different = distance=20 from the Access Point the are associated to, the highest ACK = Timeout for=20 the farthest station should be set at the AP side. It is not recommended = to use=20 Auto Adjust option for Point-to-Multipoint connections as it will = not=20 warrant highest network performance in all the use cases.

Antenna Settings

=20

Antenna Polarity Configuration

AirOS based devices have a possibility to switch the antenna = polarities with=20 a single web management control. This is achieved by using Ubiquiti's=20 patent-pending Adaptive Antenna Polarity (AAP) technology.

AirOS devices often have multiple antenna options which can be = configured=20 using the Antenna Settings:

Vertical and Horizontal antenna polarity which is = the most=20 common configuration;=20

Adaptive antenna mode chooses the best polarity = dynamically.=20 Adaptive antenna polarity mode which allows for the beam polarities to = be=20 switched dynamically on the fly for improved performance in heavy = noise=20 environments;=20

External antenna option allows a connection of the higher = gain=20 antenna to an external antenna port.

NanoStation2, NanoStation5 has 4 antenna modes:

1. Vertical Polarity;=20

2. Horizontal Polarity;=20

3. Adaptive;=20

4. External.

PowerStation5-Ext has 3 antenna modes:

1. Antenna 1;=20

2. Antenna 2;=20

3. Diversity.

PowerStation2-16D has 3 antenna modes:

1. Vertical Polarity;=20

2. Horizontal Polarity;=20

3. Adaptive;

NanoStation2-Loco, NanoStation5-Loco has 2 antenna modes: =

1. Vertical Polarity;=20

2. Horizontal Polarity;

MiniStation has 2 antenna modes:

1. Internal;=20

2. External.

Some AirOS devices (i.e. Bullet2/2HP, Bullet5/HP, PowerStation2,=20 PowerStation2) has only 1 antenna mode: Vertical, Horizontal or = External. In=20 this case Antenna Settings are not displayed in the = Advanced page=20 in this case.

LED Thresholds

=20

LED Thresholds Configuration

The LED's on the back of the AirOS Device can be made to light on = when=20 received signal levels reach the values defined in the following fields. = This=20 allows a technician to easily deploy an AirOS CPE without logging into = the unit=20 (i.e. for antenna alignment operation).

Signal LED Thresholds specify the marginal value of Signal = Strength=20 (dBm) which will switch on LEDs indicating signal strength:

LED 1 (Red) will switch on if the Signal Strength reaches = the value=20 set in an entry field next to it.=20

LED 2 (Yellow) will switch on if the Signal Strength = reaches the=20 value set in an entry field next to it.=20

LED 3 (Green) will switch on if the Signal Strength reaches = the=20 value set in an entry field next to it.=20

LED 4 (Green) will switch on if the Signal Strength reachse = the=20 value set in an entry field next to it.

Configuration example: if the Signal Strength (displayed in the = Main=20 page) fluctuates around -63 dBm, the LED Thresholds can be set to the = values=20 -70, -65, -62, -60. Note: sign "-" character should not be used for the = Signal=20 Strength value specification.

Wireless Traffic Shaping

Wireless Traffic shaping feature is dedicated for upstream and = downstream=20 bandwidth control while looking from the client (connected on Ethernet=20 interface) perspective.

The traffic can be limited at the AirOS based device in the upload = and=20 download direction based on a user defined rate limit. This is layer 3 = QoS.

Enable Traffic Shaping: control will enable bandwidth control = on the=20 device.

Incoming Traffic Limit: specify the maximum bandwidth value = (in=20 kilobits per second) for traffic passing from wireless interface to = Ethernet=20 interface.

Incoming Traffic Burst: specify the data volume (in kilobytes) = to=20 which Incoming Traffic Limit will not be effective afterwards = data=20 connection is initiated.

Outgoing Traffic Limit: specify the maximum bandwidth value = (in=20 kilobits per second) for traffic passing from Ethernet interface to = wireless=20 interface.

'Outgoing Traffic Burst: specify the data volume (in kilobytes) = to=20 which Outgoing Traffic Limit will not be effective afterwards = data=20 connection is initiated.

QoS

Wi-Fi Multimedia (WMM) is a component of the IEEE 802.11e wireless = LAN=20 standard for quality of service (QoS). The QoS assigns priority to the = selected=20 network traffic, prevents packet collisions and delays thus improving = VoIP calls=20 and watching video over WLANs. 802.11e / WMM allows for improved latency = performance for Voice and Video applications. This is layer 2 QoS and = happens at=20 802.11 frame level.

QoS (WMM) Level: choose the type of the network traffic to = which the=20 priority will be set or disable the QoS feature.

No QoS =E2=80=93 disable QoS.

Auto Priority =E2=80=93 priority of traffic is assigned = automatically=20 according to the type of the passing through data.

Video Priority =E2=80=93 enable priority of the video = traffic for all the=20 passing through data.

Voice Priority =E2=80=93 enable priority of the voice = traffic for all the=20 passing through data.

[Content] =

Services

This page covers the configuration of system management services SNMP = and=20 Ping Watchdog.

Ping WatchDog

The ping watchdog sets the AirOS Device to continuously ping a user = defined=20 IP address (it can be the internet gateway for example). If it is unable = to ping=20 under the user defined constraints, the AirOS device will automatically = reboot.=20 This option creates a kind of "fail-proof" mechanism.

Ping Watchdog is dedicated for continuous monitoring of the = particular=20 connection to remote host using the Ping tool. The Ping works by sending = ICMP=20 =E2=80=9Cecho request=E2=80=9D packets to the target host and listening = for ICMP =E2=80=9Cecho response=E2=80=9D=20 replies. If the defined number of replies is not received, the tool = reboots the=20 device.

Enable Ping Watchdog: control will enable Ping Watchdog Tool.

IP Address To Ping: specify an IP address of the target host which = will be=20 monitored by Ping Watchdog Tool.

Ping Interval: specify time interval (in seconds) between the ICMP = =E2=80=9Cecho=20 requests=E2=80=9D are sent by the Ping Watchdog Tool.

Startup Delay: specify initial time delay (in seconds) until first = ICMP =E2=80=9Cecho=20 requests=E2=80=9D are sent by the Ping Watchdog Tool. The value of = Startup Delay should=20 be at least 60 seconds as the network interface and wireless connection=20 initialization takes considerable amount of time if the device is = rebooted.

Failure Count To Reboot: specify the number of ICMP =E2=80=9Cecho = response=E2=80=9D replies.=20 If the specified number of ICMP =E2=80=9Cecho response=E2=80=9D packets = is not received=20 continuously, the Ping Watchdog Tool will reboot the device.

SNMP Agent

Simple Network Monitor Protocol (SNMP) is used in network management = systems=20 to monitor network-attached devices for conditions that warrant = administrative=20 attention. AirOS contains an SNMP agent which allows it to communicate = to SNMP=20 manage applications for network provisioning.

SNMP Agent provides an interface for device monitoring using the = Simple=20 Network Management Protocol (an application layer protocol that = facilitates the=20 exchange of management information between network devices). SNMP Agent = allows=20 network administrators to monitor network performance, find and solve = network=20 problems. For the purpose of equipment identification, it is always a = good idea=20 to configure SNMP agents with contact and location information:

Enable SNMP Agent: control will enable SNMP Agent.

SNMP Community: specify SNMP community string. It is required = to=20 authenticate access to MIB objects and functions as embedded password. = The=20 device supports a Read-only community string that gives read access to=20 authorized management stations to all the objects in the MIB except the=20 community strings, but does not allow write access. AirOS supports SNMP = v1.

Contact: specify the identity or the contact who should be = contacted=20 in case a emergency situation arise.

Location: specify the physical location of the device.

NTP Client, Web, Telnet, SSH = Server

NTP Client: The Network Time Protocol (NTP) is a protocol for=20 synchronizing the clocks of computer systems over packet-switched,=20 variable-latency data networks. It can be used to set the AirOS system = time.=20 System Time is reported next to the every System Log entry = while=20 registering system events if Log option is enabled.

Web Server: the following AirOS Device Web Server parameters = can be=20 set there:

Use Secure Connection (HTTPS): If checked Web server will = use=20 secure HTTPS mode. HTTP mode is selected by default.

Secure Server Port: Web Server TCP/IP port setting while = using=20 HTTPS mode.

Server Port: Web Server TCP/IP port setting while using = HTTP mode..=20

Telnet Server: the following AirOS Device Telnet Server = parameters=20 can be set there:

Enable Telnet Server: Enables Telnet access to the AirOS = Device.=20

Server Port: Telnet service TCP/IP port setting.

SSH Server: the following AirOS Device SSH Server = parameters can=20 be set there:

Enable SSH Server: Enables SSH access to the AirOS Device. =

Server Port: SSH service TCP/IP port setting.

System Log

Enable Log : option enables the registration routine of the = system=20 log messages.

Enable Remote Log enables the syslog remote sending function = while=20 System log messages are sent to a remote server specified by the=20 Remote Log IP Address and Remote Log Port.

Remote Log IP Address is the host IP address where syslog = messages=20 should be sent. Remote host sould be configured properly to receive = syslog=20 protocol messages.

Remote Log Portis the TCP/IP port of the host syslog messages = should=20 be sent. "514" is the default port for the commonly used system message = logging=20 utilities.

Every logged message contains at least a System Time and a = Host Name.=20 Usually a particular service name which generates the system event is = specifies=20 also within the message. Messages from different services have different = context=20 and different level of the details. Usually error, warning = or=20 informational system services messages are reported, however more = detailed Debug level messages can be reported also. The more = detailed=20 system messages are reported, the greater volume of log messages will be = generated.

[Content] =

System

The System Page contains Administrative options. This page enables=20 administrator to customize, reboot the device, set it to factory = defaults,=20 upload a new firmware, backup or update the configuration and configure=20 administrator=E2=80=99s credentials.

Firmware

Use this section to find out current software version and update the = device=20 with the new firmware. The device firmware update is compatible with all = configuration settings. System configuration are preserved while the = device is=20 updated with a new firmware version.

Firmware version: displays the version of the current firmware = of the=20 AirOS system.

Upgrade: button opens the Firmware Upload window if activated. =

Current Firmware: displays the version of the AirOS firmware = which is=20 currently operating.

Firmware File: activate Browse button to navigate to = and select=20 the new firmware file. The full path to the new firmware file location = can be=20 specified there. New firmware file is transfered to the system after=20 Upload button is activated.

Close this window =E2=80=93 button cancels the new firmware = upload process if=20 activated.

Upgrade button should be activated in order to proceed with = firmware=20 upgrade routine (new firmware image should be uploaded into the system = first).=20 Please be patient, as the firmware upgrade routine can take 3-7 minutes. = AirOS=20 based device will be unaccessible until the firmware upgrade routine is=20 completed.

Do not switch off, do not reboot and do not disconnect the device = from the=20 power supply during the firmware upgrade process as these actions will = damage=20 the device!

It is highly recommended to backup the system configuration and the=20 Support Info file before uploading the new configuration.

Close this window =E2=80=93 button closes the firmware upgrade = window if=20 activated. This action will not cancel the firmware upgrade process. =

Host Name

Host Name is the system wide device identifier. It is reported by = SNMP Agent=20 to authorized management stations. Host Name will be represented in = popular=20 Router Operating Systems registration screens and discovery tools.

Host Name: specifies the system identity.

Change button saves the Host Name if activated.

Administrative and Read-only Account =

In this section you can modify the administrator password to protect = your=20 device from unauthorized configuration. The default = administrator=E2=80=99s password=20 should be changed on the very first system setup:

Administrator Username: specifies the name of the system user. =

Current Password: administrator is required to enter a current = password. It is required for Password or Administrator = Username=20 change routine.

Default administrator login credentials:

User Name: ubnt=20
Password: ubnt

New Password: new password used for administrator = authentication=20 should be specified.

Verify Password: new password should be re-entered to verify = its=20 accuracy.

Click Change button to save the changes.

Enable Read-Only Account

Read-Only Username

Password: new password used for read-only administrator = authentication=20 should be specified.

Interface Language

AirOs supports multiple languages in the Web Management Interface. =

Language options change the look and feel of the Web = Management=20 Interface while renaming the labels of all the configuration settings = and=20 controls according to the translation in particular language. The colors = and the=20 layout of all the web elements is not changed after the change of the = language.=20

Language selection is saved by activating the Set as = default=20 button.

Logo Customization

Use the controls in this section to configure custom logo on the = device web=20 management interface. The logo must conform to these limitations:

The volume size of the logo is 50 Kilobytes or less;=20
The maximum height of logo should be 70 pixels;=20
Only .gif format images are accepted.

To upload new logo, enable logo customization and specify the = location of=20 logo file:

Enable Custom Logo: control will enable logo customization. If = the=20 Enable Custom Logo option is not selected the default Ubiquiti = logo will=20 be set/restored and the custom logo will be removed.

Logo Target URL: the target URL of custom logo can be = specified in=20 this field. Target URL is opened when clicking on custom logo.

'Logo File: activate Browse button to navigate to and = select=20 the logo file. The full path to the logo file stored locally can be = specified=20 there. Logo file is transfered to the system after Upload button = is=20 activated.

If the logo file maximum volume size (50 kilobytes) is exceeded the = system=20 performance issues may occur. Default logo dimension (in pixels) is 114 = (width)=20 X 53(height).

Configuration Management

AirOS configuration is stored in plain text file. Use the = Configuration=20 Management section controls to backup, restore or update the system=20 configuration file:

Backup Configuration: click Download button to download = the=20 current system configuration file.

Upload Configuration: click Browse button to navigate = to and=20 select the new configuration file or specify the full path to the = configuration=20 file location.

Activating the Upload button will transfer new configuration = file to=20 the system. The settings of the new configuration will be visible in the = Link=20 Setup, Network, Advanced, Services and = System=20 pages of the Web Management Interface.

New configuration will be effective after the Apply button is=20 activated and system reboot cycle is completed. Previous system = configuration is=20 deleted after Apply button is activated. It is highly recommended = to=20 backup the system configuration before uploading the new configuration. =

Use only configuration backups of the same type device - = configuration backed=20 up from PowerStation2 suits only PowerStation2, but not LiteStation2 or=20 LiteStation5! Behavior may be unpredictable when mixing configurations = from=20 different type devices.

Device Maintenance

The controls in this section are dedicated for the device maintenance = routines: rebooting, reseting, generating of the support information = report.=20

Reboot: activate Reboot control in order to initiate = full=20 reboot cycle of the the device. Reboot effect is the same as the = hardware reboot=20 which is similar to the power off - power on cycle. The system = configuration is=20 not modified after the reboot cycle completes. Any non-applied changes = will be=20 lost.

Reset to Defaults: activate Reset to Defaults control = in order=20 to initiate reset the device to factory defaults routine. Reset routine=20 initiates system Reboot process (similar to the power off - power = on=20 cycle). The running system configuration will be deleted and the the = default=20 system configuration (all the system settings with no exception) will be = set.=20

After the Reset to Defaults routine is completed, AirOS system = will=20 return to the default IP configuration (192.168.1.20/255.255.255.0) and = will=20 start operating in Station-Bridge mode. It is highly recommended = to=20 backup the system configuration before the Reset to Defaults is=20 initiated.

Support Info: activate Support Info button in order to = get=20 system information file. This file should be provided to Ubiquiti = support=20 engineers (upon the request) while investigating all the technical = support or=20 configuration issues if any.

[Content] =

Retrieved from "http://wiki.ubnt.com/w= iki/index.php/AirOS"

Navigation

AirOS

From Ubiquiti Wiki

Contents

AirOS v3.3 Introduction

AirOS v3.3 Configuration Guide

Navigation

Main Page

Status Reporting

Statistics Reporting

Extra info

Tools

Link Setup Page

Basic Wireless Settings

Wireless Security

Network

Bridge Mode

Router Mode

Advanced

Advanced Wireless Setting

Acknowledgement Timeout

Antenna Settings

LED Thresholds

Wireless Traffic Shaping

QoS

Services

Ping WatchDog

SNMP Agent

NTP Client, Web, Telnet, SSH = Server

System Log

System

Firmware

Host Name

Administrative and Read-only Account =

Interface Language

Logo Customization

Configuration Management

Device Maintenance