Enter an SSID name contains up to 32 characters.

Set a VLAN ID for the wireless network. Wireless networks with the same VLAN ID are grouped to a VLAN.

The value ranges from 0 to 4094. 0 means VLAN function is disabled.

With the option enabled, EAPs will broadcast the SSID to the nearby hosts, so that those hosts can find the wireless network identified by this SSID. If this option is disabled, users must enter the SSID manually to connect to the EAP.

Enabled by default.

Select the security mode of the wireless network.

None: The hosts can access the wireless network without authentication.

WEP/WPA-Enterprise/WPA-PSK: The hosts need to get authenticated before accessing the wireless network. For the network security, you are suggested to encrypt your wireless network. Settings vary in different security modes and the details are in the following introduction.

With the option enabled, the configurations in Portal Authentication will be applied. Portal provides authentication service for the clients who just need temporary access to the wireless network, such as the customers in shopping mall and restaurant.

Disabled by default.

With the option enabled, the devices connected in the same SSID of the same AP cannot communicate with each other.

Disabled by default.

Select an Access Control rule for this SSID. For more information, refer to Access Control.

Select the authentication type for WEP.

Auto: The Omada Controller can select Open System or Shared Key automatically based on the wireless station's capability and request.

Open System: Clients can pass the authentication and associate with the wireless network without password. However, correct password is necessary for data transmission.

Shared Key: Clients have to input password to pass the authentication, otherwise it cannot associate with the wireless network or transmit data.

Select one key to specify. You can configure four keys at most.

Select ASCII or Hexadecima as the WEP key format.

ASCII: ASCII format stands for any combination of keyboard characters of the specified length.

Hexadecimal: Hexadecimal format stands for any combination of hexadecimal digits (0-9, a-f, A-F) with the specified length.

Select the WEP key length for encryption.

64Bit: Enter 10 hexadecimal digits or 5 ASCII characters.

128Bit: Enter 26 hexadecimal digits or 13 ASCII characters.

152Bit: Enter 32 hexadecimal digits or 16 ASCII characters.

Enter the WEP keys. The length and valid characters are affected by key type.

Select the version of WPA-Enterprise.

Auto: The EAP will automatically choose the version used by each client device.

WPA/WPA2: Two versions of Wi-Fi Protected Access.

Select the Encryption type.

Auto: The default setting is Auto and the EAP will select TKIP or AES automatically based on the client device's request.

TKIP: Temporal Key Integrity Protocol. TKIP is not supported in 802.11n mode, 802.11ac mode or 802.11n/ac mixed mode. If TKIP is applied in 802.11n, 802.11 ac or 802.11n/ac mixed mode, the clients may not be able to access the wireless network of the EAP. If TKIP is applied in 11b/g/n mode (2.4GHz) or 11a/n mode(5GHz), the device may work at a low transmission rate.

AES: Advanced Encryption Standard. We recommend you select AES as the encryption type because it is more secure than TKIP.

Enter the IP address of the RADIUS Server.

Enter the port number of the RADIUS Server.

Enter the shared secret key of the RADIUS server.

Specify a group key update period, which instructs the EAP how often it should change the encryption keys. The value can be either 0 or 30~8640000 seconds. 0 means no change of the encryption key anytime.

Select the version of WPA-PSK.

Auto: The EAP will automatically choose the version for each client device.

WPA-PSK: Pre-shared key of WPA.

WAP2-PSK: Pre-shared key of WPA2.

Select the Encryption type.

Auto: The default setting is Auto and the EAP will select TKIP or AES automatically based on the client request.

TKIP: Temporal Key Integrity Protocol. TKIP is not supported in 802.11n mode, 802.11ac mode or 802.11n/ac mixed mode. If TKIP is applied in 802.11n, 802.11 ac or 802.11n/ac mixed mode, the clients may not be able to access the wireless network of the EAP. If TKIP is applied in 11b/g/n mode (2.4GHz) or 11a/n mode(5GHz), the device may work at a low transmission rate.

AES: Advanced Encryption Standard. We recommend you select AES as the encryption type for it is more secure than TKIP.

Configure the wireless password with ASCII or Hexadecimal characters.

For ASCII, the length should be between 8 and 63 characters with combination of numbers, letters (case-sensitive) and common punctuations. For Hexadecimal, the length should be 64 characters (case-insensitive, 0-9, a-f, A-F).

Specify a group key update period, which instructs the EAP how often it should change the encryption keys. The value can be either 0 or 30~8640000 seconds. 0 means the encryption keys will not be changed all the time.

Beacons are transmitted periodically by the EAP device to announce the presence of a wireless network for the clients. Beacon Interval value determines the time interval of the beacons sent by the device.

You can specify a value between 40 and 100ms. The default is 100ms.

The DTIM (Delivery Traffic Indication Message) is contained in some Beacon frames. It indicates whether the EAP device has buffered data for client devices. The DTIM Period indicates how often the clients served by this EAP device should check for buffered data still on the EAP device awaiting pickup.

You can specify the value between 1-255 Beacon Intervals. The default value is 1, indicating clients check for buffered data on the EAP device at every beacon. An excessive DTIM interval may reduce the performance of multicast applications, so we recommend you keep it by default.

RTS (Request to Send) can ensure efficient data transmission. When RTS is activated, the client will send a RTS packet to EAP to inform that it will send data before it send packets. After receiving the RTS packet, the EAP notices other clients in the same wireless network to delay their transmitting of data and informs the requesting client to send data, thus avoiding the conflict of packet. If the size of packet is larger than the RTS Threshold, the RTS mechanism will be activated.

If you specify a low threshold value, RTS packets are sent more frequently and help the network recover from interference or collisions that might occur on a busy network. However, it also consumes more bandwidth and reduces the throughput of the packet. We recommend you keep it by default. The recommended and default value is 2347.

The fragmentation function can limit the size of packets transmitted over the network. If a packet exceeds the Fragmentation Threshold, the fragmentation function is activated and the packet will be fragmented into several packets.

Fragmentation helps improve network performance if properly configured. However, too low fragmentation threshold may result in poor wireless performance caused by the extra work of dividing up and reassembling of frames and increased message traffic. The recommended and default value is 2346 bytes.

With this option enabled, each client connecting to the EAP can get the same amount of time to transmit data, avoiding low-data-rate clients to occupy too much network bandwidth and improving the network throughput. We recommend you enable this function under multi-rate wireless networks.

When the number of clients on the 5GHz band reaches the value of Connection Threshold and the difference value between the number of clients on the 2.4GHz band and the 5GHz band reaches the value of Difference Threshold, EAPs will refuse the requests of communication on the 5GHz band from other clients and no longer steer other clients to the 5GHz band.

The value of Connection Threshold is from 2 to 40, and the default is 20.

The value of Difference Threshold is from 1 to 8, and the default is 4.

If a client repeatedly attempts to associate with the EAP on the 5GHz band and the number of rejections reaches the value of Max Failures, the EAP will accept the request.

The value is from 0 to 100, and the default is 10.

Specify a name for this rule.

Select the mode for this rule.

Block: Select this mode to block clients to access the specific subnets.

Allow: Select this mode to allow clients to access the specific subnets.

Specify the member subnets for this rule.

Subnets: Enter the subnet that will follow the rule mode in the format X.X.X.X/X and click . Up to 16 subnets can be added.

Except Subnets: Enter the excepted subnet in the format X.X.X.X/X and click . Up to 16 subnets can be added. The rule mode will not apply to the subnet that is in both of the Subnets list and Except Subnets list.

Specify a name for the Portal.

Select an SSID for the Portal.

Select No Authentication.

With Daily Limit disabled, the client's authentication will expire after the time period you set and the client needs to log in on the web authentication page again to access the network.

Options include 1 Hour, 8 Hours, 24 Hours, 7 Days and Custom. Custom allows you to define the time in days, hours and minutes. The default value is one hour.

With Daily Limit enabled, the client’s authentication will expire after the time period you set and the client cannot log in again in the same day.

Options include 30 Minutes, 1 Hour, 2 Hours, 4 Hours and 8 Hours, Custom. Custom allows you to define the time in hours and minutes. The default value is 30 minutes.

With Daily Limit enabled, after authentication times out, the user cannot get authenticated again in the same day.

With this function enabled, the unauthorized clients will be redirected to the Portal page when they are trying to browse HTTPS websites.

With this function disabled, the unauthorized clients cannot browse HTTPS websites or be redirected to the Portal page.

If you enable this function, the portal will redirect the newly authenticated clients to the configured URL.

If the Redirect function above is enabled, enter the URL that a newly authenticated client will be redirected to.

Specify whether to enable the Advertisement feature. With this feature enabled, you can add advertisement pictures on the authentication page. These advertisement pictures will be displayed before the login page appears. You can also allow users to skip the advertisement by enabling Allow to Skip Advertisement.

Upload advertisement pictures. When several pictures are added, they will be played in a loop.

Specify how long the advertisement will be displayed for. For this duration, the pictures will be played in a loop. If the duration time is not enough for all the pictures, the rest will not be displayed.

Specify the picture carousel interval. For example, if this value is set as 5 seconds, the first picture will be displayed for 5 seconds, followed by the second picture for 5 seconds, and so on.

Specify whether to enable this feature. With this feature enabled, the user can click the Skip button to skip the advertisement.

Specify a name for the Portal.

Select an SSID for the Portal.

Select Simple Password.

Set the password for authentication.

The client's authentication will expire after the time period you set and the client needs to log in the web authentication page again to access the network.

Options include 1 Hour, 8 Hours, 24 Hours, 7 Days and Custom. Custom allows you to define the time in days, hours and minutes. The default value is one hour.

With this function enabled, the unauthorized clients will be redirected to the Portal page when they are trying to browse HTTPS websites.

With this function disabled, the unauthorized clients cannot browse HTTPS websites or be redirected to the Portal page.

If you enable this function, the portal will redirect the newly authenticated clients to the configured URL.

If the Redirect function above is enabled, enter the URL that a newly authenticated client will be redirected to.

Specify whether to enable the Advertisement feature. With this feature enabled, you can add advertisement pictures on the authentication page. These advertisement pictures will be displayed before the login page appears. You can also allow users to skip the advertisement by enabling Allow to Skip Advertisement.

Upload advertisement pictures. When several pictures are added, they will be played in a loop.

Specify how long the advertisement will be displayed for. For this duration, the pictures will be played in a loop. If the duration time is not enough for all the pictures, the rest will not be displayed.

Specify the picture carousel interval. For example, if this value is set as 5 seconds, the first picture will be displayed for 5 seconds, followed by the second picture for 5 seconds, and so on.

Specify whether to enable this feature. With this feature enabled, the user can click the Skip button to skip the advertisement.

Specify a name for the Portal.

Select an SSID for the Portal.

Select Local User.

You can click this button to configure user accounts for authentication later. Please refer to Create Local User Accounts.

With this function enabled, the unauthorized clients will be redirected to the Portal page when they are trying to browse HTTPS websites.

With this function disabled, the unauthorized clients cannot browse HTTPS websites or be redirected to the Portal page.

If you enable this function, the portal will redirect the newly authenticated clients to the configured URL.

If the Redirect function above is enabled, enter the URL that a newly authenticated client will be redirected to.

Specify whether to enable the Advertisement feature. With this feature enabled, you can add advertisement pictures on the authentication page. These advertisement pictures will be displayed before the login page appears. You can also allow users to skip the advertisement by enabling Allow to Skip Advertisement.

Upload advertisement pictures. When several pictures are added, they will be played in a loop.

Specify how long the advertisement will be displayed for. For this duration, the pictures will be played in a loop. If the duration time is not enough for all the pictures, the rest will not be displayed.

Specify the picture carousel interval. For example, if this value is set as 5 seconds, the first picture will be displayed for 5 seconds, followed by the second picture for 5 seconds, and so on.

Specify whether to enable this feature. With this feature enabled, the user can click the Skip button to skip the advertisement.

Specify a name for the Portal.

Select an SSID for the Portal.

Select Voucher.

You can click this button to configure vouchers for authentication later. Please refer to Create Vouchers.

With this function enabled, the unauthorized clients will be redirected to the Portal page when they are trying to browse HTTPS websites.

With this function disabled, the unauthorized clients cannot browse HTTPS websites or be redirected to the Portal page.

If you enable this function, the portal will redirect the newly authenticated clients to the configured URL.

If the Redirect function above is enabled, enter the URL that a newly authenticated client will be redirected to.

Specify whether to enable the Advertisement feature. With this feature enabled, you can add advertisement pictures on the authentication page. These advertisement pictures will be displayed before the login page appears. You can also allow users to skip the advertisement by enabling Allow to Skip Advertisement.

Upload advertisement pictures. When several pictures are added, they will be played in a loop.

Specify how long the advertisement will be displayed for. For this duration, the pictures will be played in a loop. If the duration time is not enough for all the pictures, the rest will not be displayed.

Specify the picture carousel interval. For example, if this value is set as 5 seconds, the first picture will be displayed for 5 seconds, followed by the second picture for 5 seconds, and so on.

Specify whether to enable this feature. With this feature enabled, the user can click the Skip button to skip the advertisement.

Specify the length of the voucher codes to be created.

Enter the voucher amount to be generated.

Select Single Use or Multi Use.

Single Use means one voucher can only be distributed to one client. Multi Use means one voucher can be distributed to several clients, who can use the same voucher to access the network at the same time.

If you select Multi Use, enter the value of Max Users. When the number of clients who are connected to the network with the same voucher reaches the value, no more clients can use this voucher to access the network.

Select the period of validity of the Voucher.

The options include 8 hours, 2 days and User-defined. The period of valid of the voucher is reckoned from the time when it is used for the first time.

Select whether to enable download rate limit. With this option enabled, you can specify the limit of download rate.

Select whether to enable upload rate limit. With this option enabled, you can specify the limit of upload rate.

Specify the total traffic limit for one voucher. Once the limit is reached, the client can no longer access the network using the voucher.

Enter a description for the Voucher (optional).

Specify a name for the Portal.

Select an SSID for the Portal.

Select SMS.

Enter the Account SID for Twilio API Credentials.

Enter the Authentication Token for Twilio API Credentials.

Enter the phone number that is used to send verification messages to the clients.

A telephone can get several codes via messages one by one, and different clients can use different codes to pass the authentication. However, the number of clients that are allowed to be authenticated using the same telephone at the same time has a upper limit.

Specify the upper limit in this field.

The client's authentication will expire after the time period you set and the client needs to log in the web authentication page again to access the network.

Options include 1 Hour, 8 Hours, 24 Hours, 7 Days and Custom. Custom allows you to define the time in days, hours and minutes. The default value is one hour.

Set the default country code that will be filled automatically on the authentication page.

With this function enabled, the unauthorized clients will be redirected to the Portal page when they are trying to browse HTTPS websites.

With this function disabled, the unauthorized clients cannot browse HTTPS websites or be redirected to the Portal page.

If you enable this function, the portal will redirect the newly authenticated clients to the configured URL.

If the Redirect function above is enabled, enter the URL that a newly authenticated client will be redirected to.

Specify whether to enable the Advertisement feature. With this feature enabled, you can add advertisement pictures on the authentication page. These advertisement pictures will be displayed before the login page appears. You can also allow users to skip the advertisement by enabling Allow to Skip Advertisement.

Upload advertisement pictures. When several pictures are added, they will be played in a loop.

Specify how long the advertisement will be displayed for. For this duration, the pictures will be played in a loop. If the duration time is not enough for all the pictures, the rest will not be displayed.

Specify the picture carousel interval. For example, if this value is set as 5 seconds, the first picture will be displayed for 5 seconds, followed by the second picture for 5 seconds, and so on.

Specify whether to enable this feature. With this feature enabled, the user can click the Skip button to skip the advertisement.

Specify a name for the Portal.

Select an SSID for the Portal.

Select Facebook.

Click this button to specify the Facebook Page.

If the Facebook page is successfully got by the Omada Controller, the name of the Facebook page will be displayed here.

With this function enabled, the unauthorized clients will be redirected to the Portal page when they are trying to browse HTTPS websites.

With this function disabled, the unauthorized clients cannot browse HTTPS websites or be redirected to the Portal page.

Specify a name for the Portal.

Select an SSID for the Portal.

Select Simple Password.

Enter the IP address of the RADIUS server.

Enter the port number you have set on the RADIUS server.

Enter the password you have set on the RADIUS Server.

The client's authentication will expire after the time period you set and the client needs to log in the web authentication page again to access the network.

Options include 1 Hour, 8 Hours, 24 Hours, 7 Days, Custom. Custom allows you to define the time in days, hours, and minutes. The default value is one hour.

With this function enabled, the unauthorized clients will be redirected to the Portal page when they are trying to browse HTTPS websites.

With this function disabled, the unauthorized clients cannot browse HTTPS websites or be redirected to the Portal page.

If you enable this function, the portal will redirect the newly authenticated clients to the configured URL.

Disabled by default.

If the Redirect function above is enabled, enter the URL that a newly authenticated client will be redirected to.

Select Local Web Portal or External Web Portal.

Local Web Portal: If this option is selected, refer to step 4 to configure the login page and step 5 to configure the advertisement.

External Web Portal: If this option is selected, follow the steps below.

1. Configure the external RADIUS server.

2. Enter the authentication login page's URL provided by the external portal server in the External Web Portal URL field.

3. Put the external web portal server to a whitelist of Free Authentication Policy, otherwise clients cannot access it before authenticated.

Specify whether to enable the Advertisement feature. With this feature enabled, you can add advertisement pictures on the authentication page. These advertisement pictures will be displayed before the login page appears. You can also allow users to skip the advertisement by enabling Allow to Skip Advertisement.

Upload advertisement pictures. When several pictures are added, they will be played in a loop.

Specify how long the advertisement will be displayed for. For this duration, the pictures will be played in a loop. If the duration time is not enough for all the pictures, the rest will not be displayed.

Specify the picture carousel interval. For example, if this value is set as 5 seconds, the first picture will be displayed for 5 seconds, followed by the second picture for 5 seconds, and so on.

Specify whether to enable this feature. With this feature enabled, the user can click the Skip button to skip the advertisement.

Specify a name for the Portal.

Select an SSID for the Portal.

Select External Portal Server.

Enter the complete authentication URL that redirect to an external portal server, for example:

http://192.168.0.147:8880/portal/index.php or http://192.168.0.147/portal/index.html

With this function enabled, the unauthorized clients will be redirected to the Portal page when they are trying to browse HTTPS websites.

With this function disabled, the unauthorized clients cannot browse HTTPS websites or be redirected to the Portal page.

Specify a name for the policy.

Select the match mode for the policy. Two options are provided:

URL: With this option selected, configure an URL that is allowed to be visited by the clients without authentication.

IP-MAC Based: With this option selected, configure Source IP Range, Destination IP Range, Source MAC and Destination MAC to specify the specific clients and service that will follow the Free Authentication feature.

Set the URL.

Set the Source IP Range with the subnet and mask length of the clients.

Set the Destination IP Range with the subnet and mask length of the server.

Set the MAC address of client.

Enter the port the service uses.

Check the box to enable the policy.

By default enabled. With WMM enabled, the EAP devices have the QoS function to guarantee the high priority of the transmission of audio and video packets.

If 802.11n only mode is selected in 2.4GHz (or 802.11n only, 802.11ac only, or 802.11 n/ac mixed mode in 5GHz), the WMM should be enabled. If WMM is disabled, the 802.11n only mode cannot be selected in 2.4GHz (or 802.11n only, 802.11ac only, or 802.11 n/ac mixed mode in 5GHz).

By default disabled. You can enable this function to specify that the EAP devices should not acknowledge frames with QosNoAck. NoAcknowledgement is recommended if VoIP phones access the network through the EAP device.

By default enabled. As a power management method, it can greatly improve the energy-saving capacity of clients.

Queue displays the transmission queue. By default, the priority from high to low is Data 0, Data 1, Data 2, and Data 3. The priority may be changed if you reset the EDCA parameters.

Data 0 (Voice)—Highest priority queue, minimum delay. Time-sensitive data such as VoIP and streaming media are automatically sent to this queue.

Data 1 (Video)—High priority queue, minimum delay. Time-sensitive video data is automatically sent to this queue.

Data 2 (Best Effort)—Medium priority queue, medium throughput and delay. Most traditional IP data is sent to this queue.

Data 3 (Background)—Lowest priority queue, high throughput. Bulk data that requires maximum throughput and is not time-sensitive is sent to this queue (FTP data, for example).

A wait time for data frames. The wait time is measured in slots. Valid values for Arbitration Inter-Frame Space are from 0 to 15.

A list to the algorithm that determines the initial random backoff wait time (window) for retry of a transmission.

This value can not be higher than the value for the Maximum Contention Window.

The upper limit (in milliseconds) for the doubling of the random backoff value. This doubling continues until either the data frame is sent or the Maximum Contention Window size is reached.

This value must be higher than the value for the Minimum Contention Window.

Maximum Burst specifies the maximum burst length allowed for packet bursts on the wireless network. A packet burst is a collection of multiple frames transmitted without header information. The decreased overhead results in higher throughput and better performance.

Queue displays the transmission queue. By default, the priority from high to low is Data 0, Data 1, Data 2, and Data 3. The priority may be changed if you reset the EDCA parameters.

Data 0 (Voice)—Highest priority queue, minimum delay. Time-sensitive data such as VoIP and streaming media are automatically sent to this queue.

Data 1 (Video)—High priority queue, minimum delay. Time-sensitive video data is automatically sent to this queue.

Data 2 (Best Effort)—Medium priority queue, medium throughput and delay. Most traditional IP data is sent to this queue.

Data 3 (Background)—Lowest priority queue, high throughput. Bulk data that requires maximum throughput and is not time-sensitive is sent to this queue (FTP data, for example).

A wait time for data frames. The wait time is measured in slots. Valid values for Arbitration Inter-Frame Space are from 0 to 15.

A list to the algorithm that determines the initial random backoff wait time (window) for retry of a transmission. This value can not be higher than the value for the Maximum Contention Window.

The upper limit (in milliseconds) for the doubling of the random backoff value. This doubling continues until either the data frame is sent or the Maximum Contention Window size is reached.

This value must be higher than the value for the Minimum Contention Window.

The TXOP Limit is a station EDCA parameter and only applies to traffic flowing from the client station to the EAP device. The Transmission Opportunity (TXOP) is an interval of time, in milliseconds, when a WME client station has the right to initiate transmissions onto the wireless medium (WM) towards the EAP device. The valid values are multiples of 32 between 0 and 8192.

Enter the sender's E-mail address.

Enter the receiver's E-mail address.

Enter the IP address of the SMTP server.

You can check the box to enable mail server authentication. Enter the sender's mail account name and password.

Select Time Mode. System logs can be sent at specific time or time interval.

If you select Fixation Time, specify a fixed time to send the system log mails. For example, 08:30 indicates that the mail will be sent at 8:30 am everyday.

If you select Period Time, specify a period time to regularly send the system log mail. For example, 6 indicates that the mail will be sent every six hours.