Document Version: V3.

User Guide
Outdoor CPE
Copyright statement
© 2021-2024 Shenzhen Tenda Technology Co., Ltd. All rights reserved.

is a registered trademark legally held by Shenzhen Tenda Technology Co., Ltd. Other brand
and product names mentioned herein are trademarks or registered trademarks of their respective
holders. Copyright of the whole product as integration, including its accessories and software,
belongs to Shenzhen Tenda Technology Co., Ltd. No part of this publication can be reproduced,
transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or
by any means without the prior written permission of Shenzhen Tenda Technology Co., Ltd.

Disclaimer
Pictures, images and product specifications herein are for references only. To improve internal
design, operational function, and/or reliability, Tenda reserves the right to make changes to the
products without obligation to notify any person or organization of such revisions or changes. Tenda
does not assume any liability that may occur due to the use or application of the product described
herein. Every effort has been made in the preparation of this document to ensure accuracy of the
contents, but all statements, information and recommendations in this document do not constitute
a warranty of any kind, express or implied.

i
Preface
Thank you for choosing Tenda! Please read this user guide before you start managing the CPE.

This user guide applies to Tenda CPEs. O4V1.0 working in AP mode is used for illustration here
unless otherwise specified.
This user guide is for configuration reference only and does not indicate that the product supports
all functions described here. Functions available may vary with the product model. Please refer to
the actual product.
The UI screenshots, IP addresses and other data are for illustrative purposes only and do not affect
your configuration. Functions or parameters grayed out on the UI indicate that they are unavailable
or cannot be modified on the product.

Conventions
The typographical elements that may be found in this document are defined as follows.

Item Presentation Example

Cascading menus > System > Live Users

Parameter and value Bold Set User Name to Tom.

Variable Italic Format: XX:XX:XX:XX:XX:XX

UI control Bold On the Policy page, click the OK button.

Message “” The “Success” message appears.

The symbols that may be found in this document are defined as follows.

Symbol Meaning

This format is used to highlight information of importance or special interest.

Ignoring this type of note may result in ineffective configurations, loss of data or
damage to device.

This format is used to highlight a procedure that will save time or resources.

ii
For more documents
If you want to get more documents about the device, visit www.tendacn.com and search for the
corresponding product model.

Technical support
Contact us if you need more help. We will be glad to assist you as soon as possible.

Email address: [email protected]

Website: www.tendacn.com

Revision history
Tenda is constantly searching for ways to improve its products and documentation. The following
table indicates any changes that might have been made since this guide was first published.

Version Description Date

1. Optimized the description of the VLAN settings, Wireless

V2.2 settings, MAC filter and Spectrum analysis functions. 2024-05-30
2. Optimized sentence expression.

1. Added the description of the Packet filter and Management

RF function.

V2.1 2. Optimized the description of the CCTV surveillance, Login, 2023-11-30

Wireless status and Spectrum analysis functions.

3. Optimized sentence expression.

1. Added the description of Transparent WDS function.

V2.0 2021-11-25
2. Fixed some known issues.

V1.0 Original publication. 2020-07-04

iii
Contents
1 Typical application scenario .................... 1 4.3.1 Overview.................................... 30

1.1 CCTV surveillance................................. 1 4.3.2 Set Universal Repeater mode .... 30

1.1.1 Solution ....................................... 1 4.4 WISP mode ......................................... 33

1.1.2 Set up the CPE (Example: O4V1.0) 4.4.1 Overview.................................... 33

.............................................................. 2
4.4.2 Set WISP mode .......................... 33
1.1.3 Install the CPE (Example: O4V1.0)
4.5 Repeater mode................................... 38
............................................................ 10
4.5.1 Overview.................................... 38
1.2 ISP hotspot connection-WISP mode .. 12
4.5.2 Set Repeater mode .................... 38
1.2.1 Solution ..................................... 12
4.6 P2MP mode ........................................ 49
1.2.2 Set up the CPE ........................... 12
4.6.1 Overview.................................... 49
2 Login and logout................................... 16
4.6.2 Set P2MP mode ......................... 49
2.1 Login................................................... 16
4.7 Router mode ...................................... 56
2.1.1 Login with computer ................. 16
4.7.1 Overview.................................... 56
2.1.2 Login with smartphone or tablet
............................................................ 18 4.7.2 Set Router mode........................ 56

2.2 Logout ................................................ 21 5 Status ................................................... 60

3 Web UI ................................................. 22 5.1 System status ..................................... 60

3.1 Web UI layout .................................... 22 5.2 Wireless status ................................... 63

3.2 Common buttons ............................... 23 5.2.1 View operating RF status ........... 63

4 Quick setup .......................................... 24 5.2.2 View management RF status ..... 65

4.1 AP mode............................................. 25 5.3 Statistics ............................................. 66

4.1.1 Overview ................................... 25 5.3.1 Throughput ................................ 66

4.1.2 Set AP mode .............................. 25 5.3.2 Wireless client ........................... 67

4.2 Client mode........................................ 27 5.3.3 Upstream AP .............................. 68

4.2.1 Overview ................................... 27 5.3.4 Interface .................................... 69

4.2.2 Set Client mode ......................... 27 5.3.5 ARP table ................................... 70

4.3 Universal Repeater mode .................. 30 5.3.6 Routing table ............................. 71

iv
6 Network ............................................... 72 7.3.2 Example of configuring access
control .............................................. 124
6.1 LAN setup ........................................... 72
7.4 Management RF ............................... 126
6.1.1 Overview ................................... 72
7.4.1 Overview.................................. 126
6.1.2 Modify LAN IP address .............. 75
7.4.2 Delay duration of management
6.2 Packet filter ........................................ 77
RF's wireless network ....................... 127
6.3 MAC clone .......................................... 79
8 Advanced............................................ 129
6.3.1 Overview ................................... 79
8.1 LAN rate............................................ 129
6.3.2 Clone a MAC address ................ 79
8.2 Diagnose........................................... 131
6.4 DHCP server ....................................... 81
8.2.1 Site survey ............................... 131
6.4.1 Overview ................................... 81
8.2.2 Ping .......................................... 132
6.4.2 Configure the DHCP server ....... 81
8.2.3 Traceroute................................ 133
6.5 DHCP client ........................................ 83
8.2.4 Speed test ................................ 134
6.6 VLAN settings ..................................... 84
8.2.5 Spectrum analysis .................... 137
6.6.1 Overview ................................... 84
8.3 Bandwidth control............................ 141
6.6.2 Configure VLAN (Example:
8.3.1 Overview.................................. 141
OS3V1.0)............................................. 84
8.3.2 Example of configuring bandwidth
6.6.3 Example of configuring VLAN on
control .............................................. 142
O4V1.0 ................................................ 85
8.4 Port forwarding ................................ 144
7 Wireless settings .................................. 88
8.4.1 Overview.................................. 144
7.1 Basic configuration............................. 88
8.4.2 Example of configuring port
7.1.1 Overview ................................... 88
forwarding ........................................ 145
7.1.2 Basic wireless settings ............... 90
8.5 MAC filter ......................................... 148
7.1.3 Set up a non-encrypted wireless
8.5.1 Overview.................................. 148
network .............................................. 98
8.5.2 Example of configuring MAC filter
7.1.4 Set up a wireless network
.......................................................... 149
encrypted using WPA2-PSK .............. 100
8.6 Network service ............................... 151
7.1.5 Set up a wireless network
encrypted using WPA or WPA2 ........ 102 8.6.1 DDNS........................................ 151

7.2 Advanced settings ............................ 119 8.6.2 Remote web management ...... 155

7.3 Access control .................................. 123 8.6.3 Reboot schedule ...................... 157
7.3.1 Overview ................................. 123 8.6.4 Login timeout interval ............. 157

v
 8.6.5 SNMP agent ............................. 158

8.6.6 Ping watch dog ........................ 162

8.6.7 DMZ host ................................. 163

8.6.8 Telnet service .......................... 166

8.6.9 UPnP ........................................ 166

8.6.10 Hardware watch dog ............. 166

8.6.11 STP ......................................... 167

9 Tools .................................................. 168

9.1 Date & time ...................................... 168

9.1.1 Synchronized with the internet

.......................................................... 168
9.1.2 Manual .................................... 169

9.2 Maintenance .................................... 170

9.2.1 Reboot device.......................... 170

9.2.2 Restore to factory settings ...... 171

9.2.3 Upgrade firmware ................... 172

9.2.4 Backup/restore ........................ 173

9.3 Account ............................................ 175

9.3.1 Administrator .......................... 175

9.3.2 Guest ....................................... 176

9.4 System log ........................................ 177

Appendix .................................................. 178

A.1 Default parameters .......................... 178

A.2 Acronyms and Abbreviations........... 180

A.3 How to assign a fixed IP address to

your computer ....................................... 183
A.4 How to check the gateway IP address
of a computer ........................................ 185

vi
 Document Version: V2.2

1 Typical application
scenario

− At least two CPEs are required for bridging. Different application scenarios require different CPE
models. For more information, visit www.tendacn.com.
− A CPE can be used with multiple cameras. The specific number of cameras can be calculated by
the formula (Number of Cameras = CPE Sending/Receiving Rate * 70% ÷ Camera Stream).

1.1 CCTV surveillance

To ensure the personal and property safety of residents, a community needs to install surveillance
cameras for real-time monitoring.

1.1.1 Solution
− Method 1: Use the CPE kit to set up a monitoring network, such as the CPE kit O1-
5GV1.0. You only need to install the CPEs to easily manage the CCTV surveillance for
the community.
− Method 2: Use two CPEs to set up a monitoring network, such as the CPE O4V1.0. You
only need to Set up the CPEs > Install the CPEs to easily manage the CCTV surveillance
for the community.

To facilitate you to quickly set up a monitoring network, it is recommended to set up the CPEs first and
then install the CPEs.

1
 Document Version: V2.2

1.1.2 Set up the CPE (Example: O4V1.0)

Option 1: Peer-to-peer automatic bridging (recommended)

− Automatic bridging is only applicable when the CPEs are in factory settings.
− When performing peer-to-peer bridging, ensure that only two CPEs are powered on and near
each other. Otherwise, the bridging may fail.
− After the bridging succeeds, the DHCP service of the CPE is automatically disabled. The IP address
of the CPE working in AP mode remains unchanged (192.168.2.1), and the IP address of the CPE
working in Client mode is changed to 192.168.2.2.

Step 1 Place the two CPEs next to each other.

CPE1 CPE2

Step 2 Power on the CPEs (powered by PoE injector in this example).

1. Remove the cover of the CPE.
2. Use an Ethernet cable (CAT5e or above is recommended) to connect the PoE/LAN port of
the CPE to the PoE port of the PoE injector.
3. Use the included power cord to connect the PoE injector to a power socket. The PoE/LAN
indicator of the CPE lights up.

2
 Document Version: V2.2

− If the CPE supports DC power supply, you can use the correct power adapter to power on the
CPE. The power parameters can be checked on the label of the CPE. If the power adapter (5.5×2.1
mm) is not included in the product package, you can purchase it by yourself.
− Some CPEs can use PoE power supply device with IEEE 802.3af standard. For details, visit
www.tendacn.com to search for the specific product model, and check the relevant information
on the details page.
− The maximum PoE power supply distance supported by each CPE varies. For details, visit
www.tendacn.com to search for the specific product model, enter the Download page, and
download the datasheet to check the maximum PoE power supply distance of the product.

CPE1 Power socket CPE2 Power socket

PoE injector PoE injector

PoE PoE

----End

After the two CPEs are powered on, they start bridging each other with their LED1, LED2 and LED3
indicators blinking fast. When the LED1, LED2 and LED3 indicators of one CPE are lit solid and the
same indicators of the other CPE blink slowly, the peer-to-peer bridging succeeds.

For O2 and O3, the peer-to-peer bridging procedure is as follows:

After the two CPEs are powered on, they will bridge each other automatically. When the LED1, LED2 and
LED3 indicators of one CPE are lit solid and the same indicators of the other CPE keep blinking, the peer-
to-peer bridging succeeds.

CPE1 CPE2
AP mode Client mode

LED 1, 2 and 3 indicators LED 1, 2 and 3 indicators

lit solid blink

3
 Document Version: V2.2

If the peer-to-peer bridging fails, reset the two CPEs to factory settings, and try again.

Option 2: Manual bridging

Step 1 Place the two CPEs next to each other.

CPE1 CPE2

Step 2 Log in to the web UI of CPE1.

1. Power on the CPE1 (powered by PoE injector in this example).
- Remove the cover of the CPE.
- Use an Ethernet cable (CAT5e or above is recommended) to connect the PoE/LAN port
of the CPE to the PoE port of the PoE injector.
- Use the included power cord to connect the PoE injector to a power socket. The
PoE/LAN indicator of the CPE lights up.

− If the CPE supports DC power supply, you can use the correct power adapter to power on the
CPE. The power parameters can be checked on the label of the CPE. If the power adapter (5.5×2.1
mm) is not included in the product package, you can purchase it by yourself.
− Some CPEs can use PoE power supply device with IEEE 802.3af standard. For details, visit
www.tendacn.com to search for the specific product model, and check the relevant information
on the details page.
− The maximum PoE power supply distance supported by each CPE varies. For details, visit
www.tendacn.com to search for the specific product model, enter the Download page, and
download the datasheet to check the maximum PoE power supply distance of the product.

4
 Document Version: V2.2
Power socket

PoE injector

PoE

CPE1

2. Connect the computer to the LAN port of the PoE power supply using an Ethernet cable.

Power socket

PoE injector

PoE LAN

CPE1

Computer

3. Start a web browser on your computer, visit the IP address of the CPE (192.168.2.1 by
default) in the address bar, and press the Enter (or Return) key on your keyboard.

4. Enter your user name and password, and click Login.

5
 Document Version: V2.2

If the above page does not appear, try the following methods:
− Ensure that the CPE is powered on properly.
− Ensure that the computer is connected to the LAN port of the CPE properly.
− Ensure that the IP address of the computer belongs to the same subnet the CPE. For example, if
the IP address of the CPE is 192.168.2.1, you can set the IP address of the computer to
192.168.2.X (X ranges from 3 to 254 and is not occupied).
− If more than one CPE is connected, modify the IP address of each one to avoid the login failure
due to IP address conflict.
− Reset the CPE to factory settings. Reset method: After CPE completes startup, hold down the reset
button (such as RST, RESET or Reset) for about 8 seconds, and then release it when all indicators
light up.

Step 3 Set CPE1 to AP Mode.

1. Navigate to Quick Setup. Select AP mode, and click Next.

2. Set wireless network parameters and click Next.

- Set an SSID, which is Tenda_123456 in this example.
- Set Security Mode, which is WPA2-PSK in this example.
- Set Encryption Algorithm, which is AES in this example.
- Set Key.

6
 Document Version: V2.2

3. Click Save, and wait until the CPE reboots to make the settings take effect.

Step 4 Log in to the web UI of CPE2 and set to the Client mode.
1. Refer to Step 2 to log in to the web UI of CPE2.
2. Navigate to Quick Setup. Select Client mode, and click Next.

3. Select the wireless network to bridge from the list, which is Tenda_123456 in this example,
and click Next.

7
 Document Version: V2.2

If you cannot find any wireless network from the list, navigate to Wireless > Basic and enable the
wireless function. Then try again.

4. Enter the Wi-Fi password of the upstream wireless network in the Key, and click Next.

5. Set the IP address of CPE2 to an unused IP address belonging to the same subnet as CPE1.
Set the Subnet Mask to the one same as CPE1, and click Next.
In this example, IP Address is set to 192.168.2.100 and Subnet Mask is set to
255.255.255.0.

6. Click Save, and wait until CPE2 reboots to make the settings take effect.

8
 Document Version: V2.2

----End

When the two CPEs start bridging each other, all the LED1, LED2 and LED3 indicators blink fast.
When the LED1, LED2 and LED3 indicators of one CPE are lit solid and the same indicators of the
other CPE blink slowly, the bridging succeeds. To check the SSID and key of the CPE, you can log in
to the web UI of the CPE and navigate to Wireless > Basic.

For O2 and O3, the bridging procedure is as follows:

When the two CPEs start bridging each other, their LED1, LED2 and LED3 indicators blink. When the
LED1, LED2 and LED3 indicators of one CPE are lit solid and the same indicators of the other CPE keep
blinking, the bridging succeeds.

9
 Document Version: V2.2

1.1.3 Install the CPE (Example: O4V1.0)

Select any of the following scenarios based on the location of the monitoring room and install the
CPE to the corresponding location.
− When the monitoring room is located closer to the bottom of the elevator shaft, refer
to Scenario 1 for installation.
− When the monitoring room is located closer to the top of the elevator shaft, refer to
Scenario 2 for installation.

10
 Document Version: V2.2

Check the LED1, LED2 and LED3 indicators of the CPEs to confirm whether the positions are proper.
The more LED indicators light up, the better the connection quality is.
The LED indicator descriptions of the CPEs below are for reference.

LED Indicator Status Description

The CPE is connected to a device.

− IP camera
Solid on: The CPE may work in AP, Repeater, P2MP or
Router mode.
− Blinking: The CPE may work in Client, Universal
Repeater or WISP mode.

Computer Each LED indicator is set with a received signal strength value,
which is the threshold for the corresponding LED indicator to
LED1, LED2, LED3 Solid on/Blinking light up. You can judge the connection quality through the
status of these indicators.
(Received signal strength
LED indicators)

‒ You can change them on the Wireless > Advanced page of

the web UI of the CPE.
‒ Different models of CPEs have different LED indicators and
working modes. The actual product prevails.

No device is connected to the CPE, or the received signal

Off
strength is less than the RSSI threshold.

11
 Document Version: V2.2

1.2 ISP hotspot connection-WISP mode

The internet access in an apartment needs to be achieved by connecting an Internet Server Provider
(ISP) hotspot.

1.2.1 Solution
O4V1.0 is used for illustration. Procedures for other CPE models are similar.

To quickly set up a monitoring network, it is recommended to configure the CPEs before installation.

1.2.2 Set up the CPE

Step 1 Power on the CPE (powered by PoE injector in this example).
1. Remove the cover of the CPE.
2. Use an Ethernet cable (CAT5e or above is recommended) to connect the PoE/LAN port of
the CPE to the PoE port of the PoE injector.
3. Use the included power cord to connect the PoE injector to a power socket. The PoE/LAN
indicator of the CPE lights up.

CPE Power socket

Power cord

PoE injector
PoE

Step 2 Set the CPE to WISP mode.

1. Use an Ethernet cable to connect your computer to the LAN port of the PoE injector.

12
 Document Version: V2.2

CPE Power socket

Power cord

PoE injector

PoE LAN

Computer

2. Log in to the web UI of CPE, and navigate to Quick Setup.

3. Select WISP mode, and click Next.

4. Select the wireless network of your ISP hotspot, which is Tenda_123456 in this example,
and click Next.

13
 Document Version: V2.2

5. Enter the Wi-Fi password of your ISP hotspot in the Key field, and click Next.

6. Select the Internet Connection Type of your ISP hotspot, which is PPPoE in this example.
Enter the PPPoE user name and password provided by your ISP, and click Next.

7. Customize the SSID and key, and click Next.

14
 Document Version: V2.2

8. Set an IP address that belongs to a subnet different from your ISP hotspot. For example, if
the IP address of your ISP hotspot is 192.168.2.1, you can set this CPE’s IP address to
192.168.X.1 (X ranges from 0 to 254 excluding 2). Then click Next.

9. Click Save, and wait until the CPE reboots to make the settings take effect.

----End

When LED1, LED2, and LED3 indicators of the CPE are blinking, the CPE is connected to your ISP
hotspot successfully.

15
 Document Version: V2.2

2 Login and logout

This user guide is for configuration reference only and does not indicate that the product supports all
functions described here. Functions available may vary with the product model. Please refer to the
actual product.

2.1 Login
2.1.1 Login with computer
Step 1 Connect the computer to the CPE or the switch connected to the CPE.
Step 2 Set the IP address of the computer to an unused one within the same subnet as the CPE. (If
the DHCP of the CPE is enabled, skip this step)
For example, if the IP address of the CPE is 192.168.2.1, you can set the IP address of the
computer to 192.168.2.X (X ranges from 3 to 254 and is not occupied), and subnet mask to
255.255.255.0. The following figure is for reference only.

16
 Document Version: V2.2

Step 3 Start a web browser on your computer, enter the default IP address of the CPE
(192.168.2.1 in AP mode or 192.168.2.2 in Client mode), and press the Enter (or Return)
key on your keyboard.

Step 4 Enter your user name and password, and click Login. The following figure is for reference
only.

− If the above page does not appear, try the following methods:
 Ensure that the CPE is powered on properly.
 Ensure that the computer is connected to the LAN port of the CPE properly.
 Ensure that the IP address of the computer belongs to the same subnet as the CPE. For example,
if the IP address of the CPE is 192.168.2.1, you can set the IP address of the computer to
192.168.2.X (X ranges from 3 to 254 and is not occupied).
 If more than one CPE is connected, modify the IP address of each one to avoid login failure due
to IP address conflict.
 Reset the CPE to factory settings. Reset method: After CPE completes startup, hold down the
reset button (such as RST, RESET or Reset) for about 8 seconds, and then release it when all
indicators light up.
− The default login user name and password of the CPE are admin. For the network security, refer
to the Account to change the login user name and password.

----End

17
 Document Version: V2.2

After the successful login, you can configure the CPE.

2.1.2 Login with smartphone or tablet

Take iPhone as an example.
Step 1 Connect the smartphone to the wireless network of the CPE, which is Tenda_123456 in this
example.

Step 2 Set the IP address of the smartphone to an unused one within the same subnet as the CPE.
(If the DHCP of the CPE is enabled, skip this step.)

18
 Document Version: V2.2

For example, if the IP address of the CPE is 192.168.2.1, you can set the IP address of the
computer to 192.168.2.X (X ranges from 3 to 254 and is not occupied), and subnet mask to
255.255.255.0.

Step 3 Connect to the CPE's wireless network successfully.

Step 4 Start a browser on your smartphone, and enter the default IP address of the CPE
(192.168.2.1 in AP mode or 192.168.2.2 in Client mode).

19
 Document Version: V2.2

Step 5 Enter your user name and password, and click Login. The following figure is for reference
only.

----End

After the successful login, you can configure the CPE.

20
 Document Version: V2.2

2.2 Logout
After you log in to the web UI of the router, the system will automatically log you out if there is no
operation within the login timeout interval (default: 5 minutes). Alternatively, you can directly click
Logout on the upper right corner to exit the web UI.

21
 Document Version: V2.2

3 Web UI
3.1 Web UI layout
The web UI of the CPE is composed of 4 parts, including the level-1 navigation tree, level-2
navigation tree, tab, and configuration area. See the following figure.

3
1

Functions or parameters in grey fields indicate that are not available or cannot be modified under the
current configurations.

No. Name Description

❶ Level-1 navigation tree

Used to display menu items of the CPE in the form of a navigation tree
❷ Level-2 navigation tree
that allows you to quickly access functions.

❸ Tab

❹ Configuration area Used to view and modify configuration.

22
 Document Version: V2.2

3.2 Common buttons

The following table describes the common buttons available on the web UI.

Button Description

Used to update the contents on the current page.

Used to save the configuration on the current page and enable the configuration to
take effect.

Used to go back to the original configuration without saving the configuration on the
current page.

Used to view help information corresponding to the settings on the current page.

23
 Document Version: V2.2

4 Quick setup

− This user guide is for configuration reference only and does not indicate that the product supports
all functions described here. Functions available may vary with the product model. Please refer to
the actual product.
− If it is a CPE kit, the two CPEs are pre-configured and can be installed directly.

This module enables you to quickly change the working mode of the CPE and deploy your wireless
network.

Different working modes are described below. Select one to fit your needs:
− AP: In this mode, the CPE converts a wired network into a wireless one.

− Client: In this mode, the CPE works as a wireless adapter that can connect to other
wireless networks. The CPE does not provide wireless connections, so client devices
need to be connected with an Ethernet cable.

− Universal Repeater: In this mode, the CPE extends an existing wireless network for
broader network coverage. The wireless information (such as SSID and password) of
the new network is the same as the upstream wireless network.
− WISP: In this mode, the CPE connects to a hotspot provided by ISP in a wireless
manner, and provides the wireless network. The CPE can also be connected to the LAN
port of an upstream wireless router to obtain the IP address by DHCP (Dynamic IP),
static IP address or PPPoE for internet access.
− Repeater: In this mode, the CPE connects multiple wired networks through wireless
bridging, and provides wireless access point.
− P2MP: In this mode, the CPE connects multiple wired networks through wireless
bridging, but does not provide wireless access point.
− Router: In this mode, the CPE connects to a modem in a wired manner to obtain the IP
address by DHCP (Dynamic IP), static IP address or PPPoE for internet access.

24
 Document Version: V2.2

4.1 AP mode
4.1.1 Overview
In AP mode, the CPE converts a wired network into a wireless one by connecting to the internet
through an Ethernet cable.

The CPE in AP mode usually works with another CPE in Client mode or Universal Repeater mode to
establish a video surveillance network. The following figure shows how the CPE in AP mode works
with the one in Client mode.

4.1.2 Set AP mode

Step 1 Log in to the web UI of the CPE, and navigate to Quick Setup.
Step 2 Select AP mode and click Next.

25
 Document Version: V2.2

Step 3 Specify wireless network parameters and click Next.

1. Set SSID, which is Tenda_123456 in this example.
2. Set Security Mode, which is WPA2-PSK in this example.
3. Set Encryption Algorithm, which is AES in this example.
4. Set Key, which is UmXmL9UK in this example.

*
*
*

Parameters description

Name Description

SSID Specifies the Wi-Fi name of this CPE.

Specifies the operating channel of this CPE. Select a less used channel in the ambient
environment to reduce interference.
Channel
Auto indicates that the CPE automatically adjusts its operating channel based on the
ambient environment.

Specifies the security mode of the wireless network, including None, WPA-PSK, WPA2-
Security Mode
PSK, and Mixed WPA/WPA2-PSK.

Step 4 Click Save, and wait until the CPE reboots to make the settings take effect.

----End

26
 Document Version: V2.2

4.2 Client mode

4.2.1 Overview
In Client mode, the CPE serves as a wireless adapter that connects to the wireless network of an
upstream AP. The CPE does not provide wireless access, so a client device needs to be connected
with an Ethernet cable.

The CPE in Client mode usually works with the CPE in AP mode to create a video surveillance
network, and use the CPE in Client mode to connect to IP cameras. The network topology is shown
as below.

4.2.2 Set Client mode

Step 1 Log in to the web UI of the CPE, and navigate to Quick Setup.
Step 2 Select Client mode, and click Next.

27
 Document Version: V2.2

Step 3 Select the wireless network to bridge from the list, which is Tenda_123456 in this example,
and click Next.

If you cannot find any wireless network from the list, navigate to Wireless > Basic and enable the
wireless function. Then try again.

Step 4 Enter the Wi-Fi password for the selected wireless network Tenda_123456 in the Key field,
and click Next.

Parameters description

Name Description

Upstream AP Specifies the Wi-Fi name (SSID) of the wireless network to be bridged.

Specifies the operating channel of the wireless network to be bridged. It will be

Channel
automatically populated when you select an SSID to bridge.

Specifies the security mode of the wireless network to be bridged. It will be

Security Mode automatically populated when you select an SSID to bridge. If the wireless network to
be bridged has a Wi-Fi password, you need to enter the password manually.

28
 Document Version: V2.2

Step 5 Specify IP address parameters and click Next.

1. Enter an unused IP address within the same subnet as the peer CPE, which is
192.168.2.100 in this example.
2. Enter the subnet mask of the peer CPE, which is 255.255.255.0 in this example.

Step 6 Click Save, and wait until the CPE reboots to make the settings take effect.

----End

After the CPE is rebooted, verify your settings as follows.

Log in to the web UI of the CPE and navigate to Status. On the Wireless Status module, ensure that
Working Mode is set to Client mode and AP's MAC Address changes to the one same as the peer
CPE's WLAN MAC address.

29
 Document Version: V2.2

4.3 Universal Repeater mode

4.3.1 Overview
In Universal Repeater mode, the CPE expands your wireless network for broader network coverage.
The wireless information (such as SSID and Wi-Fi password) of the new wireless network is the
same as those of the upstream wireless network.

The CPE in Universal Repeater mode usually works with the CPE in AP mode to establish a video
surveillance network. The network topology is shown as below.

AP mode Universal repeater mode

Internet
Router
Switch Switch
WAN LAN

IP camera
NVR
Computer
4.3.2 Set Universal Repeater mode
Step 1 Log in to the web UI of the CPE, and navigate to Quick Setup.
Step 2 Select Universal Repeater, and click Next.

30
 Document Version: V2.2

Step 3 Select the wireless network to bridge from the list, which is Tenda_123456 in this example,
and click Next.

If you cannot find any wireless network from the list, navigate to Wireless > Basic and enable the
wireless function. Then try again.

Step 4 Enter the Wi-Fi password of the upstream wireless network in the Key field, and click Next.

Parameters description

Name Description

Upstream AP Specifies the Wi-Fi name (SSID) of the wireless network to be bridged.

Specifies the operating channel of the wireless network to be bridged. It will be

Channel
automatically populated when you select an SSID to bridge.

Specifies the security mode of the wireless network to be bridged. It will be automatically
Security Mode populated when you select an SSID to bridge. If the wireless network to be bridged has a
Wi-Fi password, you need to enter the password manually.

31
 Document Version: V2.2

Step 5 Specify IP address parameters and click Next.

1. Enter an unused IP address within the same subnet as the peer CPE, which is
192.168.2.100 in this example.
2. Enter the subnet mask of the peer CPE, which is 255.255.255.0 in this example.

Step 6 Click Save, and wait until the CPE reboots to make the settings take effect.

----End

After the CPE is rebooted, verify your settings as follows.

Log in to the web UI of the CPE and navigate to Status. On the Wireless Status module, with the
Working Mode is set to Universal Repeater mode, SSID becomes the same as the peer CPE's SSID
and the AP’s MAC Address changes to the one same as the peer CPE's WLAN MAC address.

After the CPE is bridged, it uses the same key for the peer CPE.

32
 Document Version: V2.2

4.4 WISP mode

4.4.1 Overview
In WISP mode, the CPE connects to a hotspot provided by ISP in a wireless manner, and allows the
wired and Wi-Fi-enabled devices to connect the CPE for internet access.

The CPE is used to extend the ISP hotspot. The network topology is shown as below.

4.4.2 Set WISP mode

Step 1 Log in to the web UI of the CPE, and navigate to Quick Setup.
Step 2 Select WISP mode, and click Next.

33
 Document Version: V2.2

Step 3 Select the wireless network to bridge from the list, which is Tenda_123456 in this example,
and click Next.

If you cannot find any wireless network from the list, navigate to Wireless > Basic and enable the
wireless function. Then try again.

Step 4 Enter the Wi-Fi password of the upstream wireless network in the Key field, and click Next.

Parameters description

Name Description

Upstream AP Specifies the Wi-Fi name (SSID) of the wireless network to be bridged.

Specifies the operating channel of the wireless network to be bridged. It will be

Channel
automatically populated when you select an SSID to bridge.

Specifies the security mode of the wireless network to be bridged. It will be

Security Mode automatically populated when you select an SSID to bridge. If the wireless network
to be bridged has a Wi-Fi password, you need to enter the password manually.

34
 Document Version: V2.2

Step 5 Select the Internet Connection Type of your ISP hotspot, which is PPPoE in this example.
Enter the PPPoE user name and password provided by your ISP, and click Next.

Parameter description

Name Description

Specifies the internet connection type.

− DHCP (Dynamic IP): The CPE obtains an IP address and other parameters
form the upstream DHCP server for internet access.
− Static IP Address: The CPE accesses the internet by setting the IP
address, subnet mask, default gateway and DNS server IP addresses
Internet Connection Type
manually.
− PPPoE: The CPE accesses the internet using the PPPoE user name and
password provided by the ISP.
The above required internet access parameters are provided by your ISP. If you are
not sure, consult your ISP for help.

Step 6 Specify wireless network parameters and click Next.

1. Set SSID (Wi-Fi name).
2. Set Security Mode, which is WPA2-PSK in this example.
3. Set Encryption Algorithm, which is AES in this example.
4. Set Key (Wi-Fi password).

35
 Document Version: V2.2

Step 7 Set an IP address belonging to a subnet different from your ISP hotspot. For example, if the
IP address of your ISP hotspot is 192.168.2.1, you can set the CPE’s IP address to
192.168.X.1 (X ranges from 0 to 254 excluding 2) which is also the login IP address of this
CPE. Then click Next.

Step 8 Click Save, and wait until the CPE reboots to make the settings take effect.

----End

After the CPE is rebooted, log in to the web UI of the CPE and navigate to Status.
− Ensure that the WAN IP address, default gateway and DNS server information obtained
by the WAN port are displayed on the System Status module.
− On the Wireless Status module, with the Working Mode is the WISP mode, if the SSID
is the Wi-Fi name you set in Step 6 and the AP’s MAC Address is the WLAN MAC
address of the peer device, the configuration is successful.

36
 Document Version: V2.2

After the successful configuration, devices connected to the CPE can access to the internet in a
wired or wireless manner. In practical environments, it is recommended to connect a wireless
router to the CPE for omnidirectional wireless network coverage.

Wi-Fi name and Wi-Fi password are SSID and Key set in Step 6 above.

ISP hotspot WISP mode Wireless router

WAN LAN
Smartphone, Tablet

Computer

To access the internet, you need to configure the router as follows.

For detailed configuration of the router, refer to the corresponding user guide.

Step 1 Log in to the web UI of the router.

Step 2 Select Dynamic IP as the Internet Connection Type, and save the settings.
----End

To access the internet with:

- Wi-Fi-enabled devices: Connect the Wi-Fi-enabled devices, such as a smartphone, to the
wireless network of the wireless router which is connected to the CPE.
- Wired devices: Connect the wired devices, such as a computer, to the LAN ports of the wireless
router which is connected to the CPE. Ensure that the IP address of the computer is
automatically obtained.

37
 Document Version: V2.2

4.5 Repeater mode

4.5.1 Overview
In Repeater mode, the CPE connects up to four wired networks through wireless bridging, and
provides wireless access.

Repeater mode can be used to achieve communication between multiple office sites of an
enterprise in a city.

The CPE in Repeater mode can work with the CPE in Repeater or P2MP mode.

4.5.2 Set Repeater mode

When configuring the Repeater mode, ensure that the Channel and Channel Bandwidth of all CPEs are
the same.

Peer to peer bridging

CPE1 in Repeater mode CPE2 in Repeater mode

Internet
Router

WAN LAN
Switch Switch

Office network Office network

Computer NVR Computer IP camera

Configuration procedure

To check the SSID and key of the CPE, you can log in to the web UI of the CPE and navigate to Wireless >
Basic.

Step 1 Set the CPE1 to the Repeater mode.

1. Log in to the web UI of CPE1, and navigate to Wireless > Basic.
2. Modify the Channel and Channel Bandwidth as required, and click Save.

38
 Document Version: V2.2

3. Navigate to Quick Setup. Select Repeater and then click Next.

39
 Document Version: V2.2

4. Select the wireless network to bridge from the list, which is Tenda_123456 in this example,
and click Next.

− If wireless networks cannot be scanned, navigate to Wireless > Basic and enable the wireless
function. Then try again.
− Only the wireless networks whose security modes are set to None or WEP can be displayed on
the list.

5. Set Authentication Type and Default Key, enter the Key 1, and click Next.

40
 Document Version: V2.2

Parameters description

Name Description

Peer AP1 Specifies the Wi-Fi name (SSID) of the wireless network to be bridged.

MAC Address of Peer

Specifies the MAC address of the wireless network to be bridged.
AP1

Specifies the operating channel of the wireless network to be bridged. It will be

Channel
automatically populated when you select an SSID to bridge.

Specifies the security mode of the wireless network to be bridged. It will be

automatically populated when you select an SSID to bridge. If the wireless network to
be bridged has a Wi-Fi password, you need to enter the password manually.
Security Mode

The Repeater mode only supports WEP and None security modes.

6. Set the IP address to an unused IP address within the same subnet as the peer CPE, which
is 192.168.2.100 in this example. Then set the Subnet Mask to the one same as the peer
CPE, and click Next.

7. Click Save, and wait until the CPE reboots to make the settings take effect.

Step 2 Refer to Step 1 to set the CPE2 to bridge CPE1 in Repeater mode.
----End

To check whether the bridging is successful:

Step 1 Log in to the web UI of CPE2.

Step 2 Navigate to Advanced > Diagnose.
Step 3 Select Ping from the Diagnose drop-down list.

41
 Document Version: V2.2

Step 4 Select Manual from the IP Address drop-down list.

Step 5 Enter the IP address of CPE1, which is 192.168.2.10 in this example. And click Start.

----End

The bridging is successful when the ping succeeds.

42
 Document Version: V2.2

Peer to four peers bridging

Assuming that all CPEs uses the Repeater mode. The network topology is shown as below.

CPE1 in Repeater mode

Switch

Office network

Primary CPE in Repeater mode CPE2 in Repeater mode

Switch

Internet Office network

Router
Switch
WAN LAN

CPE3 in Repeater mode

Office network

Switch

Office network

CPE4 in Repeater mode

Switch

Office network

Assume that the parameters of the primary CPE are as follows:

− IP Address: 192.168.2.1
− Subnet Mask: 255.255.255.0
− SSID: Tenda_1
− Channel Bandwidth: 20 MHz
− Security Mode: None

43
 Document Version: V2.2

Assume that the SSIDs and MAC addresses of CPE1, CPE2, CPE3, and CPE4 are as follows:

CPE SSID MAC Address

CPE1 Tenda_2 C8:3A:35:FE:F6:69

CPE2 Tenda_3 C8:3A:35:35:BA:01

CPE3 Tenda_4 C8:3A:35:FD:8D:A1

CPE4 Tenda_5 C8:3A:35:09:93:51

Configuration procedure
Step 1 Set the CPE1 to the Repeater mode.
1. Log in to the web UI of CPE1, and navigate to Wireless > Basic.
2. Modify the Channel and Channel Bandwidth as required, and click Save.

3. Navigate to Quick Setup. Select Repeater and then click Next.

44
 Document Version: V2.2

4. Select the wireless network to bridge from the list, which is Tenda_1 in this example, and
click Next.

− If wireless networks cannot be scanned, navigate to Wireless > Basic and enable the wireless
function. Then try again.
− Only the wireless networks whose security modes set to None or WEP can be displayed on the
list.

5. Click Next.

45
 Document Version: V2.2

6. Set the IP address to an unused IP address within the same subnet as the peer CPE, which
is 192.168.2.100 in this example. Then set the Subnet Mask to the one same as the peer
CPE, and click Next.

7. Click Save, and wait until the CPE reboots to make the settings take effect.

Step 2 Refer to Step 1 to set CPE2, CPE3 and CPE4 to bridge the primary CPE in Repeater mode.
Step 3 Set the primary CPE to Repeater mode and bridge to CPE1, CPE2, CPE3 and CPE4.
1. Log in to the web UI of the primary CPE, and navigate to Quick Setup.
2. Select Repeater mode, and click Next.
3. Select SSIDs of CPE1, CPE2, CPE3 and CPE4, and click Next.

− If wireless networks cannot be scanned, navigate to Wireless > Basic and enable the wireless
function. Then try again.
− Only the wireless networks whose security modes set to None or WEP can be displayed on the
list.

46
 Document Version: V2.2

4. Click Next.

5. Click Next.

47
 Document Version: V2.2

6. Click Save, and wait until the CPE reboots to make the settings take effect.

----End

To check whether the bridging is successful:

You can ping these four CPEs' IP addresses on the primary CPE to check connectivity. Below takes
CPE1 as an example.

Step 1 Log in to the web UI of the primary CPE.

Step 2 Navigate to Advanced > Diagnose.
Step 3 Select Ping from the Diagnose drop-down list.
Step 4 Select Manual from the IP Address drop-down list.
Step 5 Enter the IP address of CPE1, which is 192.168.2.10 in this example. And click Start.

----End

The bridging is successful when the ping succeeds.

To check the SSID and key of the CPE, you can log in to the web UI of the CPE and navigate to Wireless >
Basic.

48
 Document Version: V2.2

4.6 P2MP mode

4.6.1 Overview
In P2MP mode, the CPE connects up to four wired networks through bridging, but does not provide
wireless access. Using P2MP mode, you can enable communication between offices in different
parts of a city.

The CPE in P2MP mode can work with the CPE in Repeater mode.

4.6.2 Set P2MP mode

The configuration procedure of P2MP mode is similar with Repeater mode. In the following
example, the CPE works in P2MP mode, and bridges to four CPEs work in Repeater mode.

The network topology is shown as below.

CPE1 in Repeater mode

Switch

Primary CPE in P2MP mode Office network

CPE2 in Repeater mode

Switch
Router
Switch
WAN LAN
Office network

Office network CPE3 in Repeater mode

Switch

Office network

CPE4 in Repeater mode

Switch

Office network

49
 Document Version: V2.2

When configuring the P2MP mode, ensure that the Channel and Channel Bandwidth of all CPEs are the
same.

Assume that parameters of the primary CPE are as follows:

− IP Address: 192.168.2.1
− Subnet Mask: 255.255.255.0
− SSID: Tenda_1
− Channel Bandwidth: 20 MHz
− Security Mode: None

Assume that the SSIDs and MAC addresses of CPE1, CPE2, CPE3, and CPE4 are as follows:

CPE SSID MAC Address

CPE1 Tenda_2 C8:3A:35:FE:F6:69

CPE2 Tenda_3 C8:3A:35:35:BA:01

CPE3 Tenda_4 C8:3A:35:FD:8D:A1

CPE4 Tenda_5 C8:3A:35:09:93:51

Configuration procedure

When setting the CPE to P2MP and Repeater mode, ensure that all CPEs operate in the same channel.

Step 1 Set CPE1 to Repeater mode and bridge to the primary CPE.
1. Log in to the web UI of CPE1, and navigate to Wireless > Basic.
2. Modify the Channel and Channel Bandwidth as required, and click Save.

50
 Document Version: V2.2

3. Navigate to Quick Setup. Select Repeater mode, and click Next.

51
 Document Version: V2.2

4. Select the wireless network to bridge from the list, which is Tenda_1 in this example, and
click Next.

− If wireless networks cannot be scanned, navigate to Wireless > Basic and enable the wireless
function. Then try again.
− Only the wireless networks whose security modes are set to None or WEP can be displayed on
the list.

5. Click Next.

52
 Document Version: V2.2

6. Set the IP address to an unused IP address within the same subnet as the peer CPE, which
is 192.168.2.100 in this example. Then set the Subnet Mask to the one same as the peer
CPE, and click Next.

7. Click Save, and wait until the CPE reboots to make the settings take effect.

Step 2 Refer to Step 1 to set the CPE2, CPE3 and CPE4 to bridge to the primary CPE in Repeater
mode.
Step 3 Set the primary CPE to P2MP mode and bridge to CPE1, CPE2, CPE3 and CPE4.
1. Log in to the web UI of the primary CPE, and navigate to Quick Setup.
2. Select P2MP mode, and click Next.
3. Select the SSIDs of CPE1, CPE2, CPE3 and CPE4, which are Tenda_2, Tenda_3, Tenda_4 and
Tenda_5 in this example, and click Next.

4. Click Next.

53
 Document Version: V2.2

Parameters description

Name Description

Peer AP1 Specifies the Wi-Fi name (SSID) of the wireless network to be bridged.

MAC Address of Peer

Specifies the MAC address of the wireless network to be bridged.
AP1

Specifies the operating channel of the wireless network to be bridged. It will be

Channel
automatically populated when you select an SSID to bridge.

Specifies the security mode of the wireless network to be bridged. It will be

automatically populated when you select an SSID to bridge. If the wireless network to
be bridged has a Wi-Fi password, you need to enter the password manually.
Security Mode

The P2MP mode only supports WEP and None security modes.

5. Click Next.

54
 Document Version: V2.2

6. Click Save, and wait until the CPE reboots to make the settings take effect.

----End

To check whether the bridging is successful:

You can ping these four CPEs' IP addresses on the primary CPE to check connectivity. Below takes
CPE1 as an example.

Step 1 Log in to the web UI of the primary CPE.

Step 2 Navigate to Advanced > Diagnose.
Step 3 Select Ping from the Diagnose drop-down list.
Step 4 Select Manual from the IP Address drop-down list.
Step 5 Enter the IP address of CPE1, which is 192.168.2.10 in this example. And click Start.

----End

The bridging is successful when the ping succeeds.

55
 Document Version: V2.2

4.7 Router mode

4.7.1 Overview
In Router mode, the CPE serves as a router to provide a wireless network.

The CPE is used to provide a wireless network and assign IP addresses to your Wi-Fi-enabled
devices. The network topology is shown as below.

Internet
Router mode
Modem

LAN
Smartphone, Tablet

4.7.2 Set Router mode

If there is only one Ethernet port on the CPE, you can connect a wireless device (such as a laptop) to the
wireless network of the CPE and log in to the web UI of the CPE to perform following configurations.

Step 1 Log in to the web UI of the CPE, and navigate to Quick Setup.
Step 2 Select Router mode, and click Next.

Step 3 Select your internet connection type of your ISP hotspot, and set the related parameters.
Take PPPoE as an example here.

56
 Document Version: V2.2

1. Select PPPoE.
2. Enter the PPPoE User Name and Password provided by your ISP.
3. Click Next.

Parameters description

Name Description

Select the appropriate internet connection type.

− DHCP (Dynamic IP): The CPE obtains the IP address and other parameters
from the upstream DHCP server for internet access.
Internet Connection
− Static IP Address: The CPE accesses the internet using the IP address, subnet
Type
mask, default gateway and DNS server IP addresses provided by the ISP.
− PPPoE: The CPE accesses the internet using the PPPoE user name and
password provided by the ISP.

Step 4 Set wireless parameters of the CPE, and click Next.

1. Customize an SSID (Wi-Fi name), which is Tenda_123456 in this example.
2. Set Channel.
3. Set Security Mode, which is WPA2-PSK in this example.
4. Set Encryption Algorithm, which is AES in this example.
5. Set Key (Wi-Fi password) for the wireless network.

57
 Document Version: V2.2

Parameters description

Name Description

SSID Specifies the Wi-Fi name of the CPE.

Specifies the channel that the wireless network operates.

Channel Auto indicates that the CPE automatically adjusts its operating channel based on the
ambient environment.

Security Mode Specifies the security mode of the wireless network of the CPE, including None, WPA-
PSK, WPA2-PSK, and Mixed WPA/WPA2-PSK.

Step 5 Click Save, and wait until the CPE reboots to make the settings take effect.

----End
After the CPE is rebooted, verify the settings as follows.
Log in to the web UI of the CPE and navigate to Status. Ensure that the WAN IP address, default
gateway and DNS server information obtained by the WAN port are displayed on the System Status
module.

After the successful configuration, devices connected to the CPE can access to the internet in a
wired or wireless manner.

58
 Document Version: V2.2

− If there is only one LAN port on the CPE, you can connect your Wi-Fi-enabled devices to the
wireless network of the CPE to access the internet.
− The name and password of the wireless network are SSID and Key set in Step 4.

If the CPE has more than one LAN port, you can connect a wireless router to the CPE for
omnidirectional wireless network coverage. The network topology is shown as below.

Router mode

Internet
Wireless router
Modem

PoE/LAN LAN

WAN LAN Smartphone, Tablet

Computer

To access the internet, you need to configure the router as follows.

For detailed configuration of the router, refer to the corresponding user guide.

Step 1 Log in to the web UI of the router.

Step 2 Select Dynamic IP as the Connection Type, and save the settings.
----End

To access the internet with:

‒ Wi-Fi-enabled devices: Connect the Wi-Fi-enabled devices, such as a smartphone, to the

wireless network of the wireless router which is connected to the CPE.

‒ Wired devices: Connect the wired devices, such as a computer, to the LAN ports of the wireless
router which is connected to the CPE. Ensure that the IP address of the computer is
automatically obtained.

59
 Document Version: V2.2

5 Status

This user guide is for configuration reference only and does not indicate that the product supports all
functions described here. Functions available may vary with the product model. Please refer to the
actual product.

This module allows you to view the information of system and wireless network, including system
status, wireless status, and statistics.

5.1 System status

To access the configuration page, log in to the web UI of the CPE and navigate to Status.

You can view the system status here. O8V1.0 is used for illustration.

If the CPE is set to AP mode, Client mode, Universal Repeater mode, Repeater mode or P2MP mode,
the system status is shown as follows. If the CPE has multiple Ethernet ports, this page displays the
current connection rate of each LAN port.

If the CPE is set to WISP or Router mode, the system status is shown as follows:

When the CPE works in Router mode, the PoE port serves as a WAN port.

60
 Document Version: V2.2

Parameters description

Name Description

Specifies the name of this CPE. Different device names help you identify CPEs in
LAN easily.

Device Name You can change the name of this CPE on the LAN Setup page when the device
works in AP, Client, Universal Repeater, Repeater, and P2MP modes. When the
device works in WISP or Router mode, it displays the model of the device, and
cannot be changed.

Uptime Specifies the time that has elapsed since the CPE was started last time.

System Time Specifies the current system time of this CPE.

Firmware Version Specifies the system firmware version number of this CPE.

Hardware Version Specifies the hardware version number of this CPE.

CPU Specifies the Central Processing Unit (CPU) usage of this CPE.

RAM Specifies the memory usage of this CPE.

LAN MAC Address Specifies the MAC address of LAN port of this CPE.

WLAN MAC Address Specifies the MAC address of the wireless interface of this CPE.

61
 Document Version: V2.2

Name Description

Transparent Bridge Specifies the status of transparent bridge.

LAN Speed Specifies the Ethernet port negotiation speed and duplex mode of this CPE.

Specifies the IP address of this CPE, which is also the management IP address of
this CPE.
LAN IP Address
A LAN user can access the web UI of this CPE using this IP address. You can
modify this IP address on the LAN Setup page.

Specifies the internet connection type of this CPE in WISP or Router mode.
− DHCP (Dynamic IP): The CPE obtains IP address from the upstream
DHCP server for internet access.
Connection Type
− Static IP Address: The CPE uses a fixed IP address, subnet mask, default
gateway, and DNS server info for internet access.
− PPPoE: The CPE uses a user name and password for internet access.

Connection Status Specifies the connection status of WAN port of this CPE in WISP or Router mode.

WAN IP Address Specifies the IP address of WAN port of this CPE in WISP or Router mode.

Default Gateway Specifies the default gateway address of this CPE in WISP or Router mode.

Specifies the IP address of primary DNS server of this CPE in WISP or Router
Primary DNS Server
mode.

Specifies the IP address of secondary DNS server of this CPE in WISP or Router
Secondary DNS Server
mode.

62
 Document Version: V2.2

5.2 Wireless status

To access the configuration page, log in to the web UI of the CPE and navigate to Status.

You can view wireless status here, including working mode, SSID, security mode and so on. O6V3.0
is used for illustration here.

5.2.1 View operating RF status

The operating RF (such as 5 GHz) is mainly used to bridge the wireless network of another CPE.
On the Operating RF Status module, you can view the wireless status information of the CPE’s
operating RF, including working mode, SSID, security mode, and so on.

Parameters description

Name Description

Working Mode Specifies the working mode in which the CPE operates.

SSID Specifies the Wi-Fi name of the CPE’s operating RF.

Security Mode Specifies the security mode of the wireless network of the CPE’s operating RF.

Channel/Radio Band Specifies the channel and radio band used by this CPE to transmit radio signals.

Channel Bandwidth Specifies the channel bandwidth of the CPE’s operating RF.

TX Power Specifies the transmitted power of the CPE’s operating RF.

Specifies the number of wireless clients connected to the wireless network of the
Wireless Client
CPE’s operating RF.

63
 Document Version: V2.2

Name Description

Specifies the MAC address of the device to be bridged.

− In AP, Router, Repeater, or P2MP mode, it displays the WLAN MAC address
of this CPE.
AP’s MAC Address
− In Client, Universal Repeater or WISP mode, when the bridging succeeds, it
displays the WLAN MAC address of the upstream AP. When the bridging
fails, it displays N/A.

Specifies the wireless signal strength of the peer device.

− In AP or Router mode, it displays the signal strength of the first client
Signal Strength connected to the wireless network of this CPE.
− In Client, Universal Repeater, WISP, Repeater or P2MP mode, it displays
the received signal strength of the peer CPE.

Specifies the strength of radio interference signals in the ambient environment that
Background Noise interferes with the wireless signal of this CPE in the same channel. Larger absolute
value indicates less interference.

Specifies the number of spatial streams of wireless data the CPE is transmitting or
TX/RX Link
receiving. The more links indicate the more traffic.

Specifies the wireless transmitting/receiving rate.

− In AP or Router mode, it displays the transmitting/receiving rate of the first
Transmit/Receive Speed client connected to the wireless network of this CPE.
− In Client, Universal Repeater, WISP, Repeater, or P2MP mode, it displays
the transmitting/receiving rate of this CPE.

TD-MAX Specifies the status of the TD-MAX function. For details, refer to TD-MAX.

Specifies the distance between the two CPEs after the bridging succeeds.
Distance If there are more than two CPEs, it specifies the bridging distance between this CPE
and the farthest CPE.

64
 Document Version: V2.2

5.2.2 View management RF status

The management RF (2.4 GHz) is mainly used to facilitate users to connect to the wireless network
of the CPE to manage the CPE under special circumstances. For example: When the CPE is working
in Client mode, you can log in to the web UI of the CPE by connecting to the wireless network of the
CPE’s management RF.
On the Management RF Status module, you can view the wireless status information of the CPE’s
management RF, including working status, SSID, status of management RF enabled upon power on,
and so on. Relevant configurations can be set on the Management RF page.

Parameters description

Name Description

Status Specifies the working status of the CPE’s management RF.

SSID Specifies the Wi-Fi name sent by the CPE’s management RF.

Channel/Frequency
Specifies the channel and frequency band of the CPE’s management RF.
Band

Specifies the status of the CPE’s management RF auto-start function. With this
Enabled upon Power on function enabled, the management RF will be automatically enabled after the CPE is
powered off and then powered on again.

Specifies the duration of the CPE’s management RF enabled. If you do not delay
Duration duration of management RF's wireless network, the management RF will be
automatically disabled after the auto-start duration is exceeded.

65
 Document Version: V2.2

5.3 Statistics
To access the configuration page, log in to the web UI of the CPE and navigate to Status.

You can learn statistics information about throughput, wireless client, interface, ARP table and
routing table here.

5.3.1 Throughput
On the Statistics module, click Throughput to access the page. The line charts visually show the
real-time transmitting and receiving traffic of WLAN and LAN port of the CPE.

66
 Document Version: V2.2

5.3.2 Wireless client

On the Statistics module, click Wireless Client to access the page.

This module differs depending on the working mode of the CPE.

In AP, Router, P2MP or Repeater mode, it displays information of connected wireless clients.

Parameters description

Name Description

IP Address Specifies the IP address of the wireless client.

MAC Address Specifies the MAC address of the wireless client.

Signal: Specifies the Wi-Fi signal strength of the client.

Signal/Noise Noise: Specifies the ambient interference signal strength and electromagnet
interference signal strength of the client.

Transmit/Receive Specifies the transmitting and receiving rate of the wireless client.

Specifies the connection quality of the wireless client. A higher percentage indicates
CCQ
better connection quality.

Specifies the time that has elapsed since the wireless client is connected to the
Connection Duration
wireless network of the CPE.

67
 Document Version: V2.2

5.3.3 Upstream AP
On the Statistics module, click Upstream AP to access the page.

This module differs depending on the working mode of the CPE.

In Client, Universal Repeater or WISP mode, it displays information of the upstream AP.

Parameters description

Name Description

IP Address Specifies the IP address of the upstream device.

MAC Address Specifies the MAC address of the upstream device.

Signal: Specifies the Wi-Fi signal strength of the upstream device.

Signal/Noise Noise: Specifies the ambient interference signal strength and electromagnet
interference signal strength of the upstream device.

Transmit/Receive Specifies the transmitting and receiving rate of the upstream device.

Specifies the connection quality between this CPE and the upstream device. A higher
CCQ
percentage indicates better connection quality.

Connection Duration Specifies the time that has elapsed since this CPE bridges the upstream device.

68
 Document Version: V2.2

5.3.4 Interface
On the Statistics module, click Interface to access the page.

It displays the IP address, MAC address and traffic information of the interfaces of the CPE.

Parameters description

Name Description

Interface Specifies the wired interface, bridge interface, and WLAN interface of the CPE.

Specifies the IP addresses of the wired interface, bridge interface, and WLAN
IP Address
interface.

Specifies the MAC addresses of the wired interface, bridge interface, and WLAN
MAC Address
interface.

Received Packets
Specify the number of received or transmitted packets of the interface.
Transmitted Packets

Receive Error
Specify the number of received or transmitted error packets of the interface.
Transmit Error

69
 Document Version: V2.2

5.3.5 ARP table

On the Statistics module, click ARP Table to access the page.

Address Resolution Protocol (ARP) is a network layer protocol used to convert the IP address of the
destination device into a physical address. The ARP table displays the IP address and its MAC
address the device visits.

Parameters description

Name Description

IP Address Specifies the IP address of the host in the APR table.

MAC Address Specifies the MAC address corresponding to the IP address of the host.

Interface Specifies the interface used to communicate with the host.

70
 Document Version: V2.2

5.3.6 Routing table

On the Statistics module, click Routing Table to access the page.

It specifies the destination networks that the CPE can access.

Parameters description

Name Description

Destination Network Specifies the destination network address of the IP packet.

Subnet Mask Specifies the subnet mask of the destination network.

Specifies the IP address of the entrance of the next hop route when the packets
Next Hop
egress from the interface of the CPE.

Interface Specifies the interface that the packets egress.

71
 Document Version: V2.2

6 Network

This user guide is for configuration reference only and does not indicate that the product supports all
functions described here. Functions available may vary with the product model. Please refer to the actual
product.

6.1 LAN setup

6.1.1 Overview
On the LAN Setup page, you can view the MAC address of the LAN port, configure the device name
and type of obtaining an IP address and related parameters for the CPE.

To access the configuration page, log in to the web UI of the CPE and navigate to Network > LAN
Setup.
In AP, Client, Universal Repeater, Repeater and P2MP modes, the page is displayed as below.

72
 Document Version: V2.2

Parameters description

Name Description

Specifies the MAC address of LAN port.

MAC Address By default, the SSID of the CPE is Tenda_XXXXXX, and XXXXXX is the last six
characters of the MAC address.

Specifies the type of obtaining an IP address. The default is Static IP Address.

− Static IP Address: Specify the IP address, subnet mask, default gateway, and
DNS server IP addresses manually.
− DHCP (Dynamic IP Address): The device obtains an IP address, subnet
mask, default gateway and DNS server IP address from the DHCP server in
IP Address Type the network.

If the IP Address Type is set to DHCP (Dynamic IP Address), you need to check the
CPE’s IP address on the clients list of the upstream DHCP server, and use this IP
address to log in to the web UI of the CPE.

Specifies the IP address of the CPE. A LAN user can use this IP address to log in to the
web UI of the CPE.
IP Address
To connect the CPE to the internet, change this IP address to the same subnet of the
LAN IP address of the egress router.

Subnet Mask Specifies the subnet mask of the CPE. The default is 255.255.255.0.

Specifies the default gateway of the CPE.

Default Gateway You can set it to the LAN IP address of the egress router to enable the CPE to access
the internet.

Specifies the primary DNS server IP address of the CPE.

If the egress router has the DNS agency function, it can be set to the LAN IP address
Primary DNS Server
of the egress router. Otherwise, specify a DNS server IP address manually.
If there is only one DNS server IP address, enter it in this box.

Specifies the secondary DNS server IP address of the CPE.

Secondary DNS Server
If there are two DNS server IP addresses, enter one in this box.

Specifies the name of the CPE. The default name is the product model and version.
Device Name You are recommended to change the name to indicate the location of the CPE, so
that you can easily identify the target CPE in the network.

73
 Document Version: V2.2

When the CPE works in WISP or Router mode, the page is displayed as below.

Parameters description

Name Description

Specifies the MAC address of LAN port.

MAC Address By default, the SSID of the CPE is Tenda_XXXXXX, and XXXXXX is the last six
characters of the MAC address.

Specifies the type of obtaining an IP address. The default is Static IP Address.

− Static IP Address: Specify the IP address and subnet mask manually.
− DHCP (Dynamic IP Address): The device obtains an IP address and subnet
mask from the upstream DHCP server in the network.
IP Address Type

If the IP Address Type is set to DHCP (Dynamic IP Address), you need to check the
CPE’s IP address on the clients list of the upstream DHCP server, and use this IP
address to log in to the web UI of the CPE.

Specifies the LAN IP address of the CPE. A LAN user can visit this address to log in to
IP Address
the web UI of the CPE.

Specifies the subnet mask corresponding to the LAN IP address of the CPE. The
Subnet Mask default is 255.255.255.0.

74
 Document Version: V2.2

6.1.2 Modify LAN IP address

Set the LAN IP address manually
If you need to deploy only a few CEPs as a network administrator, you can manually set the IP
address, subnet mask, gateway IP address and DNS server IP addresses of the CPEs.

Configuration procedure

Step 1 Log in to the web UI of the CPE.

Step 2 Navigate to Network > LAN Setup.
Step 3 Set IP Address Type to Static IP Address.
Step 4 Set IP Address and Subnet Mask. If you want to connect the CPE to the internet, you need
to configure Default Gateway and Primary/Secondary DNS Server.
Step 5 Click Save.

Step 6 Confirm the prompt information, and click OK.

----End

75
 Document Version: V2.2

After changing the LAN IP address of the CPE, if the new and original IP addresses belong to the
same subnet, you can log in to the web UI of the CPE by accessing the new IP address.

Otherwise, assign your computer an IP address that belongs to the same subnet as the new IP
address of the CPE before login with the new IP address. Refer to How to assign a fixed IP address to
your computer in Appendix for details.

Obtain a LAN IP address automatically

Dynamic IP address enables the CPE to automatically obtain an IP address, a subnet mask, a gateway
IP address, DNS server IP addresses assigned by the upstream DHCP server. If a large number of CPEs
are deployed, you can adopt this mode to prevent IP address conflicts and effectively reduce your
workload.

Configuration procedure

Step 1 Log in to the web UI of the CPE.

Step 2 Navigate to Network > LAN Setup.
Step 3 Set IP Address Type to DHCP (Dynamic IP Address).
Step 4 Click Save.

----End

After completing the configuration, if you want to re-log in to the web UI of the CPE, check the new
IP address on the web UI of the upstream device which assigns the IP address to this CPE. Ensure
that the IP address of the management computer and the IP address of the CPE belong to the same
subnet, and access the IP address of the CPE.

Refer to steps in the How to assign a fixed IP address to your computer part to assign an IP address
to the computer manually.

76
 Document Version: V2.2

6.2 Packet filter

If there are a large number of broadcast packets in the LAN, processing these broadcast packets by
the CPE will occupy a large amount of CPU resources, thus affecting the data transmission of the
CPE. After the packet filtering function is configured, when the packets received by the CPE's wired
Ethernet port meet the preset features, these packets will be filtered out, reducing the number of
broadcast packets that the CPE needs to process and ensuring the CPE's data transmission.
To access the configuration page, log in to the web UI of the CPE and navigate to Network > Packet
Filter.

On this page, you can set parameters related to the packet filtering function of the wired Ethernet
port. The CPE kit O1V1.1 is used for illustration.

Parameters description

Name Description

Wired port network packet

Specifies whether to enable the wired port network packet filtering function.
filtering

Filter Rule Indicates the Specifies whether to allow packets without filtering rules configured to pass
packet filtering mode through.

Adding a filtering policy Used to add a rule for filtering packets.

77
 Document Version: V2.2

Name Description

Specifies the filtering rule of packets that need to be filtered.

− MAC address: Used to configure the packets corresponding to the
MAC address to be filtered.
− IP: Packets whose protocol type is IP protocol will be filtered.
− VLAN: Packets whose protocol type is IEEE 802.1q protocol will be
Filter rule filtered.
− ARP: Packets whose protocol type is ARP protocol will be filtered.
− Port No.: Used to configure the packets corresponding to the port
number to be filtered.
− Custom: Customize the protocol type field of the packets to be
filtered.

Rule details Specifies the parameter settings required for filtering rules to filter the packets.

Regular switch state Specifies the status of the filtering rule. Values: Enable and Disable.

Filter mode Specifies whether to filter the packets. Values: Permit and Prohibit.

Used to edit or delete the packet filter policy.

Operation − Edit: Used to edit the packet filter policy.
− Delete: Used to delete the packet filter policy.

Source MAC Specifies the data frames from this MAC address will be filtered.

Specifies the data frames with this MAC address as the destination address will
Destination MAC
be filtered.

Source IP Specifies the packets from this IP address will be filtered.

Specifies the packets with this IP address as the destination address will be
Destination IP
filtered.

Specifies the type of transport layer protocol used by the data segments that
IP protocol type
need to be filtered. All means filtering both TCP and UDP protocols.

VLAN ID Specifies the VLAN ID of the packets to be filtered.

Source port Specifies the packets corresponding to the source port number will be filtered.

Specifies the packets corresponding to the destination port number will be

Destination port
filtered.

Used to customize the protocol type field of the packets that need to be filtered
Custom
(2 bytes, hexadecimal, such as 0x8010).

78
 Document Version: V2.2

6.3 MAC clone

This function is available only when the CPE works in WISP or Router mode.

6.3.1 Overview
If the CPE cannot access the internet after you configure the internet settings, your ISP may have
associated your internet service account with a device's MAC address.

In this case, MAC cloning can generally fix this problem.

Before you clone the MAC address of the computer or the router's WAN port, ensure that the device you
used previously can access the internet.

6.3.2 Clone a MAC address

If you can access the internet through your previous computer, perform the steps in Method 1. If you
can access the internet through your previous router, see Method 2.

Method 1
Step 1 Connect the computer to the CPE.
Step 2 Log in to the web UI of the CPE, and navigate to Network > MAC Clone.
Step 3 Click Clone Local MAC Address.
Step 4 Click Save.

----End

79
 Document Version: V2.2

Method 2
Step 1 Log in to the web UI of the router, and record the MAC address.
Step 2 Log in to the web UI of the CPE, and navigate to Network > MAC Clone.
Step 3 Enter the MAC address of the computer in the MAC Address field.
Step 4 Click Save.

----End

If you want to restore the MAC address to factory settings, navigate to Network > MAC Clone, click
Restore to Default MAC Address, and click Save.

80
 Document Version: V2.2

6.4 DHCP server

6.4.1 Overview
The CPE provides the DHCP server function to automatically assign IP addresses to clients in LAN. By
default, the DHCP server function is enabled.

If you change the LAN IP address of the CPE and the new and original IP addresses belong to different
subnets, the system automatically changes the IP address pool of the DHCP server to be in the same
subnet as the new IP address of the LAN port.

6.4.2 Configure the DHCP server

Step 1 Log in to the web UI of the CPE.
Step 2 Navigate to Network > DHCP Server.
Step 3 Enable the DHCP Server function.
Step 4 Set the parameters. Generally, you need to set only Gateway Address and Primary DNS
Server.
Step 5 Click Save.

*
*

----End

If another DHCP server is available in your LAN, ensure that the IP address pool of the CPE does not
overlap with the IP address pool of that DHCP server. Otherwise, IP address conflicts may occur.

81
 Document Version: V2.2

Parameters description

Name Description

DHCP Server Specifies whether to enable the DHCP server function of the CPE.

Specifies the start IP address of the IP address pool of the DHCP server. The default
Start IP Address
value is 192.168.2.100.

Specifies the end IP address of the IP address pool of the DHCP server. The default
value is 192.168.2.200.

End IP Address

The start and end IP addresses must belong to the same subnet as the LAN port of
the CPE.

Specifies the subnet mask assigned by the DHCP server to clients. The default value is
Subnet Mask
255.255.255.0.

Specifies the IP address of default gateway assigned by the DHCP server to clients.
Generally, it is the IP address of the LAN port of the router in LAN. The default value
is 192.168.2.254.
Gateway Address

A client can access a server or host not in the local network segment only through a
gateway.

Specifies the primary DNS server IP address assigned by the DHCP server to clients.
The default value is 8.8.8.8.

Primary DNS Server

To enable clients to access the internet, set this parameter to a correct DNS server IP
address or DNS proxy IP address.

Specifies the secondary DNS server IP address assigned by the DHCP server to clients.
Secondary DNS Server
This parameter is optional.

Specifies the validity period that a client holds an IP address assigned by the DHCP
server.
When the IP address expires:
− If the client is still connected to the CPE, the client will automatically renew
Lease Time and continue to occupy the IP address.
− If the client is not connected (due to shut-down or wireless disconnection),
the CPE will release the IP address. If other clients send a request for an IP
address, the CPE can assign this IP address to other clients.
You are recommended to keep the default value.

82
 Document Version: V2.2

6.5 DHCP client

With the DHCP server enabled, you can view details about the clients that obtain IP addresses from
the DHCP server, including host names, IP addresses, MAC addresses and lease time.

To access the configuration page, log in to the web UI of the CPE and navigate to Network > DHCP
Client.

Parameters description

Name Description

Host Name Specifies the name of the DHCP client.

IP Address Specifies the IP address assigned by the DHCP server to clients.

MAC Address Specifies the MAC address assigned by the DHCP server to clients.

Specifies the validity period that a client holds an IP address assigned by the DHCP
Lease Time
server.

83
 Document Version: V2.2

6.6 VLAN settings

6.6.1 Overview
When 802.1Q VLAN is enabled on the CPE, it can be used in networks with QVLAN. By default, the
function is disabled.

Once the 802.1Q VLAN settings take effect, tagged packets will be forwarded to the ports with VLANs
assigned based on the packet's VLAN ID, and untagged packets will be forwarded to the ports with
VLAN assigned based on the port's PVID.

The following form shows how different link type ports process received packets:

Received Packets
Port Type Transmitted Packets
Tagged Packets Untagged Packets

Strip the tag in the packet and then

Access
forward it

Forward data to the ports of Forward data to the ports

the corresponding VLAN of the corresponding VID = Port PVID, strip the tag in the
based on the tag's VID VLAN based on the PVID packet and then forward it
Trunk
VID ≠ port PVID, retain the tag in
the packet and then forward it

6.6.2 Configure VLAN (Example: OS3V1.0)

To access the configuration page, log in to the web UI of the CPE and navigate to Network > VLAN
Settings. Enable the VLAN Settings function. Set the parameters as required and click Save.

84
 Document Version: V2.2

Parameters description

Name Description

VLAN Settings Specifies whether to enable 802.1Q VLAN on this CPE. By default, it is disabled.

PVID Specifies the default native VLAN ID of the trunk port. The default is 1.

Specifies the management VLAN ID of this CPE. The default ID is 1.

Management VLAN After changing the management VLAN, you can manage this CPE only after connecting
your computer to the new management VLAN.

Specifies the wired LAN port as this CPE's trunk port. A trunk port allows all VLANs to
pass through.

Trunk Port
After 802.1Q VLAN is enabled on the CPE that does not support custom trunk ports,
the LAN port that can be used for PoE power supply (such as: PoE/LAN) works as the
CPE's trunk port.

Used to set a VLAN ID for the wireless network of this CPE. By default, it is set to 1000.
WLAN VLAN ID After the VLAN function is enabled, the WLAN interface functions is equivalent to an
access port, whose PVID is the same as VLAN ID.

LAN2
Used to set a VLAN ID of the Ethernet port of this CPE. By default, it is set to 1.
LAN3 After the VLAN function is enabled, the Ethernet port is equivalent to an access port,
whose PVID is the same as VLAN ID.
LAN4

6.6.3 Example of configuring VLAN on O4V1.0

Networking requirements

Two communities want to create a separate network with two CPEs and connect to the internet
through the same router.

Solution

You can perform as follows:

− Assign CPE1 to VLAN10, and CPE2 to VLAN20.

− Configure two separate DHCP servers for VLAN10 and VLAN20 on the router that
supports IEEE 802.1q VLAN.

85
 Document Version: V2.2

Network topology

CPE1: VLAN10 Switch Router Internet

Power socket

PoE LAN WAN

injector
PoE LAN

CPE2: VLAN20
Power socket
Computer
PoE injector

PoE LAN

The connections of the switch:

− The router is connected to the uplink port

− CPE1 is connected to port 1
− CPE2 is connected to port 3

Configuration procedure

Step 1 Set up the CPE1.

1. Log in to the web UI of CPE1, and navigate to Network > VLAN Settings.
2. Enable the VLAN Settings function.
3. Configure WLAN VLAN ID, which is 10 in this example.
4. Click Save.

5. Click OK, and wait until CPE1 completes reboot.

86
 Document Version: V2.2

Step 2 Set the WLAN VLAN ID of CPE2 to 20 by Step 1.

Step 3 Set up the switch as shown in the following table.

Port Type VLAN ID (Allow Packets) PVID

Uplink port
Trunk 1, 10, 20 1
(Connected to the router)

Port 1
Trunk 1, 10 1
(Connected to CPE1)

Port 3
Trunk 1, 20 1
(Connected to CPE2)

Keep the default settings for other ports not mentioned here. For details, see the user guide
for the switch.
Step 4 Set up the router.
1. Enable two DHCP servers on the router, and assign them to VLAN10 and VLAN20
respectively.
2. Configure the QVLAN on the router as shown in the following table.

Port Connected To Type VLAN ID (Allow Packets) PVID

Switch Trunk 10, 20 1

For details, see the user guide for the router.

----End

Verification
If the router enables two DHCP servers for VLAN10 and VLAN20 respectively, the client connected to
the CPE1 obtains an IP address and related parameters from the DHCP server belonging to VLAN10,
and the client connected to CPE2 obtains these parameters from the DHCP sever belonging to
VLAN20.

87
 Document Version: V2.2

7 Wireless settings

This user guide is for configuration reference only and does not indicate that the product supports all
functions described here. Functions available may vary with the product model. Please refer to the
actual product.

7.1 Basic configuration

7.1.1 Overview
This module enables you to set basic wireless settings of the CPE, including SSID parameters,
network mode, channel, and transmitted power.

Broadcast SSID
If broadcast SSID is enabled, nearby wireless clients can detect the SSID. If the function is disabled,
the CPE does not broadcast the SSID and nearby wireless clients cannot detect the SSID. In this case,
you need to enter the SSID manually on your wireless client if you want to connect to the wireless
network of the SSID. This to some extent enhances the security of the wireless network.

However, hackers may still find ways to obtain SSIDs and gain access to target networks.

Isolate client
Similar to a VLAN on a wired network, the isolate client function completely isolates all wireless
clients connected to the same SSID. Only the wired network connected by the CPE can be accessed.
It is suitable for the establishment of public hotspots such as hotels and airports, so that the
wireless clients connected can be kept isolated and the wireless network security can be improved.

Max. number of clients

You can set the maximum number of clients that can connect to the wireless network
corresponding to an SSID. When the number of wireless clients connected to the SSID reaches this
value, the wireless network rejects new connection requests from clients. This limit helps balance
load among devices.

Security mode
A wireless network uses radio, which is open to the public, as its data transmission medium. If a
wireless network is not protected by necessary measures, any client can connect to the network to
use the resources of the network or access unprotected data over the network.

88
 Document Version: V2.2

To ensure communication security, transmission links of wireless networks must be encrypted for
protection.

There are various security modes for network encryption, including None, WEP, WPA-PSK, WPA2-
PSK, Mixed WPA/WPA2-PSK, WPA, and WPA2.
◼ None
In this mode, any wireless client can connect to the CPE's wireless network. This is not a secure
option.
◼ WEP
Wired Equivalent Privacy (WEP) uses a static key to encrypt all exchanged data, and ensures that a
wireless LAN has the same level of security as a wired LAN. Data encrypted based on WEP can be
easily cracked. In addition, WEP supports a maximum wireless network throughput of only 54
Mbps. Therefore, this security mode is not recommended.
◼ WPA-PSK, WPA2-PSK and Mixed WPA/WPA2-PSK

WPA-PSK, WPA2-PSK and Mixed WPA/WPA2-PSK (compatible with WPA-PSK and WPA2-PSK) use a
pre-shared key or personal key for authentication only. Data encryption keys are generated by the
CPE. This prevents the vulnerability caused by static WEP keys, and makes the three security modes
suitable for ensuring security of home wireless networks.

Nevertheless, because the initial pre-shared key for authentication is manually set and all clients
use the same key to connect to the same CPE, the key may be disclosed unexpectedly. This makes
the security modes not suitable for scenarios where high security is required.
◼ WPA and WPA2

To address the key management weakness of WPA-PSK and WPA2-PSK, the Wi-Fi Alliance puts
forward WPA and WPA2, which use 802.1x to authenticate clients and generate root keys to encrypt
data, instead of using pre-shared keys that set manually. The encryption process is same as WPA-
PSK and WPA2-PSK.

WPA and WPA2 use 802.1x to authenticate clients and the login information of a client is managed
by the client. This effectively reduces the probability of information leakage.

In addition, each time a client connects to an AP that adopts the WPA or WPA2 security mode, the
RADIUS server generates a data encryption key and assigns it to the client. This makes it difficult for
attackers to obtain the key.

These features of WPA and WPA2 help significantly increase network security, making WPA and
WPA2 the preferred security modes of wireless networks that require high security.

89
 Document Version: V2.2

7.1.2 Basic wireless settings

To access the configuration page, log in to the web UI of the CPE and navigate to Wireless > Basic.
On this page, you can modify the basic wireless settings of the CPE.
O8V1.0 is used for illustration here. When the CPE works in AP, WISP, Repeater, P2MP or Router
mode, the basic wireless settings page is displayed as below.

90
 Document Version: V2.2

Parameters description

Name Description

Enable Wireless Specifies whether to enable the wireless function.

Specifies the country or region where this CPE is located.

Country/Region You can select the country or region to ensure that this CPE complies with the
channel regulations of the country or region. By default, it is set to China.

Specifies the name of the wireless network (SSID). By default, it is set to

SSID Tenda_XXXXXX (XXXXXX indicates the last six digits of the LAN MAC address).
You can modify it as required.

It is available when the CPE works in AP mode or Client mode.

With this function enabled, the CPE can bridge to CPEs from other manufacturers.
Devices connected to the CPE working in Client mode will be displayed on the ARP
Transparent WDS table of the CPE working in AP mode.

Transparent WDS and Transparent Bridge cannot be enabled at the same time.

Specifies whether to broadcast the SSID.

− Enable: When an SSID is broadcast, wireless clients can detect the SSID.
Broadcast SSID
− Disable: When an SSID is not broadcast, you need to manually enter the
SSID to connect to the wireless network of the CPE.
Specifies the wireless network mode of the CPE. Only wireless clients supporting the
Network Mode listed network mode can connect to the CPE.

Specifies the bandwidth of the operating channel of the CPE's wireless network.

Channel Bandwidth The channel bandwidth varies with different network modes. Select it based on your
actual operating environment. Auto indicates that the CPE can switch its channel
bandwidth based on the ambient environment.

Specifies the channel in which the CPE operates.

Channel Auto indicates that the CPE automatically changes to the least used channel in the
ambient environment to prevent interference.

91
 Document Version: V2.2

Name Description

Specifies whether to enable or disable Channel Shift.

With this function enabled, the channel center frequency will shift based on the
frequency defined by the IEEE 802.11 standard, so that the CPE can exchange data
on less interference channels.
Channel Shift

When the Channel Shift function is enabled, other CPEs that bridge with it should
also enable this function, and the offset value must be consistent. Otherwise, the
bridging will fail.

Specifies the offset value of the channel center frequency. This parameter is
Offset Value
available only when the Channel Shift function is enabled.

Specifies whether to enable or disable Dynamic Frequency Selection (DFS).

With this function enabled, the CPE automatically detects the frequency of the radar
DFS Function system. When the CPE detects radar signals in the same frequency as the CPE itself,
the CPE will automatically switch to another frequency to avoid interference with
the radar system.

Specifies the transmit power of the CPE.

Transmit Power A higher number indicates wider Wi-Fi coverage. Setting a proper transmit power
helps improve the performance and security of the wireless network.

Specifies wireless transmission rate of the CPE. Auto is recommended.

The maximum negotiation rate varies with different channel bandwidths and
Transmit Rate network modes. Refer to the web UI of the CPE for details. When Auto is selected,
the CPE will be adjusted to the maximum transmit rate under the corresponding
network mode.

There are various security modes for network encryption, including None, WEP,
Security Mode
WPA-PSK, WPA2-PSK, Mixed WPA/WPA2-PSK, WPA, and WPA2.

Enable: Clients connected to this wireless network cannot communicate with each
other, which improves the wireless network security.
Isolate Client
Disable: Clients connected to this wireless network can communicate with each
other. It is Disable by default.

Specifies the maximum number of clients that can connect to the wireless network
corresponding to an SSID.
Max. Number of Clients
If the number is reached, the wireless network rejects new connection requests from
clients.

92
 Document Version: V2.2

◼ None
In this mode, the wireless network is not protected by password. This is not a secure option.
◼ WEP

Parameters description

Name Description

Specifies the encryption type for the WEP security mode. Values:
− Open: A wireless client can connect to the wireless network of the selected
SSID without being authenticated, and data exchanged between the client
Encryption Type and the network is encrypted using WEP.
− Shared: A shared key is used for authentication and data is encrypted using
WEP. In this case, a wireless client must use a preset WEP key to connect
to the wireless network of the selected SSID. The wireless client can be
connected to the wireless network only if they use the same WEP key.

Specifies the WEP key for the Open or Shared encryption type.
Default Key For example, if Default Key is set to Key 2, a wireless client can connect to the
wireless network of the selected SSID only with the password specified by Key 2.

Specifies the WEP key. You can enter four keys, but only the one specified as Default
Key takes effect.
Key 1/2/3/4 Supported formats:
− ASCII: Enter 5 or 13 ASCII characters for the key.
− Hex: Enter 10 or 26 hexadecimal characters (0-9, a-f, and A-F) for the key.

93
 Document Version: V2.2

◼ WPA-PSK, WPA2-PSK, and Mixed WPA/WPA2-PSK

Parameters description

Name Description

Specifies the security mechanism that protects the wireless network. Values:
− WPA-PSK: The wireless network of the selected SSID is encrypted using
WPA-PSK.
Security Mode − WPA2-PSK: The wireless network of the selected SSID is encrypted using
WPA2-PSK.
− Mixed WPA/WPA2-PSK: Wireless clients can connect to the wireless
network of the selected SSID using either WPA-PSK or WPA2-PSK.

Specifies the encryption algorithm corresponding to the selected security mode.

Values:
− AES: Advanced Encryption Standard.
− TKIP: Temporal Key Integrity Protocol. If TKIP is used, the maximum
wireless speed of the CPE is limited to 54 Mbps.
− TKIP&AES: Both TKIP and AES encryption algorithms are supported.
Encryption Algorithm Wireless clients can connect to the wireless network of the selected SSID
using TKIP or AES.

If Security Mode is set to WPA-PSK, this parameter can be set to AES or TKIP. If it is
set to WPA2-PSK or Mixed WPA/WPA2-PSK, this parameter can be set to AES, TKIP,
or TKIP&AES.

Specifies a pre-shared WPA key. A WPA key can contain 8 to 63 ASCII characters or 8
Key
to 64 hexadecimal characters.

Specifies the automatic update interval of a WPA key for data encryption. A shorter
Key Update Interval interval results in higher data security.
The value 0 indicates that a WAP key is not updated.

94
 Document Version: V2.2

◼ WPA, WPA2

Parameters description

Name Description

Specifies the security mechanism that protects the wireless network. Values:
− WPA: The wireless network of the selected SSID is encrypted using WPA-
Security Mode PSK.
− WPA2: The wireless network of the selected SSID is encrypted using WPA2-
PSK.

RADIUS Server Specifies the IP address of the RADIUS server for client authentication.

RADIUS Port Specifies the port number of the RADIUS server for client authentication.

RADIUS Password Specifies the shared key of the RADIUS server for client authentication.

Specifies the encryption algorithm corresponding to the selected security mode.

Values:
− AES: Advanced Encryption Standard.
− TKIP: Temporal Key Integrity Protocol. If TKIP is used, the maximum
Encryption Algorithm
wireless speed of the CPE is limited to 54 Mbps.
− TKIP&AES: Both TKIP and AES encryption algorithms are supported.
Wireless clients can connect to the wireless network of the selected SSID
using TKIP or AES.
Specifies the automatic update interval of a WPA key for data encryption. A shorter
Key Update Interval interval results in higher data security.
The value 0 indicates that a WAP key is not updated.

95
 Document Version: V2.2

When the CPE works in Client or Universal Repeater mode, the basic wireless settings page is
displayed as below. O8V1.0 in Client mode is used for illustration.

Parameters on the Basic page vary with different modes. The actual web UI shall prevail.
The following table describes parameters for the CPE in Client mode. For other parameters, see
Parameter description of AP mode.

96
 Document Version: V2.2

Parameters and buttons description

Name Description

Specifies the SSID of the primary upstream wireless network that the CPE connects to.
Primary Upstream
SSID After bridging succeeds, the SSID of the primary upstream wireless network will
automatically populate.

Specifies the MAC address of the primary upstream wireless network.

Primary AP BSSID After bridging succeeds, the MAC address of the primary upstream wireless network
will automatically populate.

Used to lock the upstream wireless network.

Lock With this function enabled, the CPE can only connect to the wireless network with the
current MAC address, and cannot connect to other upstream APs with the same Wi-Fi
name.

Specifies the SSID of the secondary upstream wireless network that the CPE connects
Secondary Upstream to.
SSID With this function enabled, if the CPE fails to connect to the primary upstream SSID, it
will automatically connect to the secondary upstream SSID.

Secondary Upstream
Specifies the wireless MAC address of the secondary upstream wireless network.
BSSID

Used to reconnect to the primary upstream wireless network.

Reconnect Primary With this function enabled, after connecting the secondary upstream SSID, the CPE
Upstream SSID tries to reconnect to the primary upstream SSID at intervals of the reconnection
interval that you configure.

Specifies the interval at which the CPE tries to reconnect to the primary upstream SSID
Reconnection Interval
when it is connected to the secondary upstream SSID.

Site Survey Used to refresh the available wireless networks and select the one for connection.

97
 Document Version: V2.2

7.1.3 Set up a non-encrypted wireless network

Networking requirements

A community uses the CPE to deploy its network for CCTV surveillance. It requires that the SSID is
FREE and there is no Wi-Fi password.

Network topology

SSID: FREE

Internet
Router

LAN
Switch
WAN

Computer
Configuration procedure
Step 1 Log in to the web UI of the CPE.
Step 2 Navigate to Wireless > Basic.
Step 3 Set SSID to FREE.
Step 4 Set Security Mode to None.
Step 5 Click Save.

98
 Document Version: V2.2

----End

Verification

Wi-Fi-enabled devices can connect to the wireless network whose SSID is FREE without a password.

99
 Document Version: V2.2

7.1.4 Set up a wireless network encrypted using WPA2-PSK

Networking requirements

A factory uses CPEs to set up a wireless network. It requires that the wireless network has a certain
level of security. In this case, WPA2-PSK mode is recommended.

Network topology

SSID: Factory

Key: UmXmL9UK

Internet
Router
Router
Switch
WAN LAN

Compute
r

Computer
Configuration procedure
Step 1 Log in to the web UI of the CPE.
Step 2 Navigate to Wireless > Basic.
Step 3 Set SSID to Factory.
Step 4 Set Security Mode to WPA2-PSK and Encryption Algorithm to AES.
Step 5 Set Key to UmXmL9UK.
Step 6 Click Save.

100
 Document Version: V2.2

*
*

----End

Verification

Wi-Fi-enabled devices can connect to the Wi-Fi named Factory with the password UmXmL9UK.

101
 Document Version: V2.2

7.1.5 Set up a wireless network encrypted using WPA or WPA2

Networking requirements

A highly secure wireless network is required and a RADIUS server is available. In this case, WPA or
WPA2 mode is recommended.

Network topology

RADIUS Server
IP: 192.168.2.200 Switch Router Internet

CPE LAN WAN

IP Address:192.168.2.1
SSID: hot_spot
Power socket

PoE injector Computer

PoE LAN

Configuration procedure
I. Configure the CPE

Assume that:
− IP address of the RADIUS server: 192.168.2.200
− RADIUS Password: UmXmL9UK
− Authentication port: 1812
− SSID of the CPE: hot_spot
− Security mode: WPA2
− Encryption algorithm: AES
Step 1 Log in to the web UI of the CPE, and navigate to Wireless > Basic.
Step 2 Set SSID to hot_spot.
Step 3 Set Security Mode to WPA2.
Step 4 Set RADIUS Server, RADIUS Port, and RADIUS Password to 192.168.0.200, 1812, and
UmXmL9UK respectively.
Step 5 Set Encryption Algorithm to AES.
Step 6 Click Save.

102
 Document Version: V2.2

*
*
*

*
*

----End
II. Configure the RADIUS server

Windows 2016 is used as an example to describe how to configure the RADIUS server.
Step 1 Install Active Directory Certificate Services and Network Policy and Access Services, and
deploy the certificate.
1. On the Start > Server Manager > Dashboard page, navigate to Add roles and features >
Server Selection > Server Roles, and tick the Active Directory Certificate Services.
2. According to the operation wizard, install the Certification Authority of Active Directory
Certificate Services and Network Policy and Access Services.

103
 Document Version: V2.2

3. After the service installation is completed, click in the upper right corner and follow
the prompts to deploy the certificate.
Step 2 Configure 802.1X.
1. Navigate to Start > Server Manager > Dashboard, click Tools in the upper right corner, and
click Network Policy Server.

2. Select RADIUS server for 802.1X Wireless or Wired Connection from Standard
Configuration and click Configure 802.1X.

104
 Document Version: V2.2

3. Select Secure Wireless Connections for Type of 802.1X connections. Modify the name as
required, which is Secure Wireless Connections in this example, and click Next.

4. On the Specify 802.1X Switches page, click Add.

5. Set a RADIUS client name (which can be the name of the CPE) and the IP address of the
CPE. Enter UmXmL9UK in the Shared secret and Confirm shared secret text boxes, and
click OK.

IP address of the CPE

Same as that specified by

RADIUS key on the CPE

105
 Document Version: V2.2

6. Select Microsoft: Protected EAP (PEAP) from Type, and click Configure. Select the
certificate deployed in the certificate authority in the previous step, click OK, and click
Next after the configuration is completed.

106
 Document Version: V2.2

7. Click Next on the Specify User Groups page.

8. On the Configure Traffic Controls page, configure the parameters as required, click Next,
and click Finish.

107
 Document Version: V2.2

Step 3 Configure the user and user group.

1. Create a user.
Navigate to Start > Server Manager > Dashboard, click Tools in the upper right corner,
click Computer Management, and double-click Local Users and Groups.
Right-click Users, and select New User. Enter the user name and password, which are
Admin (user name) and JohnDoe123 (password) in this example. And click Create.

108
 Document Version: V2.2

2. Create a user group.

Right-click Groups, and select New Group. Set Group name, which is Admin1 in this
example, and click Add. In the Enter the object names to select column, enter the created
user name, click Check Names, and click OK. In the New Group window, click Create.

Step 4 Configure the policies.

1. Navigate to Start > Server Manager > Dashboard, click Tools in the upper right corner,
click Network Policy Server, and double-click Policies.
2. Click Connection Request Policies and double-click Secure Wireless Connections. On the
Secure Wireless Connections Properties window, click Settings and tick Override network
policy authentication settings. Click Add, add Microsoft: Protected EAP (PEAP) as EAP
Types, and click Apply.

109
 Document Version: V2.2

3. Click Network Policies and double-click Secure Wireless Connections. On the Secure
Wireless Connections Properties window, click Conditions, and click Add.
Add the Windows Groups, enter the created user group, click Check Names, click OK, then
click OK, and click Apply.

110
 Document Version: V2.2

----End

111
 Document Version: V2.2

III. Configure your wireless device

Windows 7 is taken as an example to describe the procedures.

Step 1 Navigate to Start > Control Panel > Network and Internet > Network and Sharing Center,
then click Manage wireless networks.

Step 2 Click Add, and Click Manually create a network profile.

112
 Document Version: V2.2

Step 3 Enter wireless network information, select Connect even if the network is not
broadcasting, and click Next.

Same as that specified on

the CPE

113
 Document Version: V2.2

Step 4 Click Change connection settings. Click the Security tab, select Microsoft: Protected EAP
(PEAP), and click Settings.

114
 Document Version: V2.2

Step 5 Deselect Validate server certificate and click Configure. Deselect Automatically use my
Windows logon name and password (and domain if any) and click OK.

115
 Document Version: V2.2

Step 6 Click Advanced settings. Select User or computer authentication and click OK.

116
 Document Version: V2.2

Step 7 Click Close.

117
 Document Version: V2.2

Step 8 Click the network icon in the lower-right corner of the desktop and choose the wireless
network of the CPE such as hot_spot in this example. Click Connect.

Step 9 In the Windows Security dialog box that appears, enter the user name and password set
on the RADIUS server and click OK.

----End

Verification
Wi-Fi-enabled devices can connect to the wireless network hot_spot.

118
 Document Version: V2.2

7.2 Advanced settings

This module enables you to adjust the wireless performance of the CPE. You are recommended to
configure it under the guide of a professional.

To access the configuration page, log in to the web UI of the CPE and navigate to Wireless >
Advanced.

Parameters description

Name Description

Wi-Fi Multi-media (WMM) is a wireless Quality of Service (QoS) protocol making

WMM packets with higher priorities to be transmitted earlier. This ensures better QoS of
voice and video applications over wireless networks.

119
 Document Version: V2.2

Name Description

Automatic Power Save Delivery (APSD) is a WMM power saving protocol created by
Wi-Fi Alliance.
APSD
Enabling APSD helps reduce power consumption. By default, this mode is disabled.

Specifies the minimum strength of received signals acceptable to this CPE.

If the strength of the signals transmitted by a wireless device is weaker than this
Minimum RSSI Threshold threshold, the wireless device cannot connect to this CPE.
If there are multiple CPEs in a network, setting a proper value helps Wi-Fi-enabled
devices connect to a wireless network with a better wireless signal.

Specifies a group of bits located at the beginning of a packet to enable a receiver of

the packet to perform synchronization and prepare for receiving data.
By default, the Long Preamble option is selected for compatibility with old network
Preamble adapters installed on wireless clients.
To achieve better synchronization performance of networks, you can select the
Short Preamble option.

The Transparent Bridge function enables the WLAN interface of this CPE to forward
all packets. It is used to solve the problem that some NVRs cannot detect IP
cameras, or cannot change the IP addresses of cameras in different networks.

Transparent Bridge
‒ This function is applicable only when the CPE works in AP, Client or Universal
Repeater mode.
‒ Transparent WDS and Transparent Bridge cannot be enabled at the same time.

TD-MAX is Tenda's proprietary Time Division Multiple Access (TDMA) polling

technology. It allows multiple clients to share the same channel for accessing to a
network. With the TD-MAX enabled, the CPE assigns time slots to each client, and
transmits data according to the assigned time slots, achieving Point‑to‑MultiPoint
(P2MP) connections.
After the TD-MAX is enabled, the CPE:
− Avoids the “hidden node” problem, which occurs when a node is visible
from a wireless AP, but not from other nodes communicating with the
originating AP.
TD-MAX − Reduces latency.
− Improves throughput and anti-interference performance.
− Improves overall performance in Point‑to‑MultiPoint (PtMP) installations,
and increases the maximum possible number of users that can associate
with an AP that uses TD-MAX.

If TD-MAX is enabled, the device operates in TD-MAX mode and only accepts
connections from TD-MAX devices. And you cannot connect standard Wi-Fi devices,
such as laptops, tablets, or smartphones, to the CPE.

120
 Document Version: V2.2

Name Description

Specifies the CPE's signal travel through wall capability.

− Coverage-oriented: With less interference nearby, this mode enables the
Signal Transmission CPE to cover wider area.
− Capacity-oriented: With strong interference nearby, this mode improves
the CPE's anti-interference capability.

The Transmit Power Control (TPC) function decreases the TX power of this CPE
automatically to improve the negotiation rate when the two devices are too close.
TPC
By default, when the received signal strength is greater than -25 dBm, the CPE
decreases its TX power.

Used to adjust the signal reception level of this CPE. A higher level leads to better
Signal Reception Level signal reception capability and more wireless networks can be searched, but lower
throughput. Adjust the level based on your actual situation.

Specifies the wireless transmission distance of this CPE. You can set it based on the
actual installation distance.

Transmission Distance
Modifying this distance will affect wireless transmission performance, and it is
recommended to keep the default setting. If you want to set it manually, you should
enter a value that is greater than the actual distance between the two CPEs.

Specifies the interval at which this CPE sends Beacon frames.

Beacon frames are sent at the interval to announce the existence of a wireless
Beacon Interval
network. Generally, a smaller interval allows wireless clients to connect to this CPE
sooner, while a larger interval allows the wireless network to transmit data quicker.

Specifies the threshold of a fragment. The unit is byte.

Fragmenting is a process that divides a frame into several fragments, which are
transmitted and acknowledged separately. If the size of a frame exceeds this
threshold, the frame is fragmented.
Fragment Threshold In case of a high error rate, you can reduce the threshold. If the transmission fails,
this device resends only the fragments that have not been sent successfully, so as to
increase the frame throughput.
In an environment with little interference, you can increase the threshold to reduce
the number of fragments, so as to increase the frame throughput.

121
 Document Version: V2.2

Name Description

Specifies the frame length threshold for triggering the RTS/CTS mechanism. If a
frame exceeds this threshold, the RTS/CTS mechanism is triggered to reduce
conflicts. The unit is byte.
Set the RTS threshold based on the actual situation. An excessively small value
increases the RTS frame transmission frequency and bandwidth requirement. A
RTS Threshold higher RTS frame transmission frequency enables a wireless network to recover
from conflicts quicker. For a wireless network with high user density, you can
reduce this threshold for reducing conflicts.
The RTS mechanism requires some network bandwidth. Therefore, it is triggered
only when frames exceed this threshold.

Specifies the countdown before this device transmits broadcast and multicast
frames in its cache. The unit is Beacon interval.
DTIM Interval
For example, if Delivery Traffic Indication Map (DTIM) Interval is set to 1, this CPE
transmits all cached frames at one Beacon interval.

Signal LED1 Threshold

Specifies the received signal strength of this CPE's LED indicators. You can customize
Signal LED2 Threshold the threshold for triggering each signal LED indicator to light up.
The default threshold for LED1, LED2, and LED3 are -90, -80, and -70 respectively.
Signal LED3 Threshold

122
 Document Version: V2.2

7.3 Access control

7.3.1 Overview
The Access Control function enables you to allow or disallow the Wi-Fi-enabled devices to access
the wireless network based on their MAC addresses.

To access the configuration page, log in to the web UI of the CPE and navigate to Wireless > Access
Control. This function is disabled by default. After it is enabled, the page is shown as follows.

Access Control List

Parameters description

Name Description

Specifies the SSID of this device. With the rule enabled, clients connected to the
SSID
network with this SSID will be controlled by the rule.

Access Control Specifies whether to enable or disable the Access Control function.

Specifies the mode for filtering MAC addresses.

− Allow: Indicates that only the wireless clients on the access control list can
Mode connect to the wireless network of the CPE.
− Disallow: Indicates that only the wireless clients on the access control list
cannot connect to the wireless network of the CPE.

123
 Document Version: V2.2

7.3.2 Example of configuring access control

Networking requirements

A community uses the CPE for wireless networking. Now, only specific members in this community
are allowed to connect to the wireless network.

Solution

The Access Control function of the CPE is recommended. Assume that the users have three Wi-Fi-
enabled devices whose MAC addresses are C8:3A:35:00:00:01, C8:3A:35:00:00:02, and
C8:3A:35:00:00:03.

Configuration procedure

Step 1 Log in to the web UI of the CPE.

Step 2 Navigate to Wireless > Access Control.
Step 3 Enable the Access Control function.
Step 4 Set Mode to Allow.
Step 5 Enter the MAC address, which is C8:3A:35:00:00:01 in this example, and click Add.

If the Wi-Fi-enabled devices to be controlled are connected to the CPE, click Add online devices to add
them to the access control list quickly.

Step 6 Refer to Step 5 to add the other two MAC addresses.

Step 7 Click Save.

124
 Document Version: V2.2

*
*

----End

Verification

Only Wi-Fi-enabled devices mentioned above can connect to the wireless network of the CPE.

125
 Document Version: V2.2

7.4 Management RF
7.4.1 Overview
Management RF (2.4 GHz) is mainly used to facilitate users to connect to the wireless network of
the CPE to manage the CPE under special circumstances. For example, when the CPE is working in
Client mode, you can log in to the web UI of the CPE by connecting to the wireless network of the
CPE's Management RF.

To access the configuration page, log in to the web UI of the CPE and navigate to Wireless >
Management RF.

On this page, you can set the basic information of the CPE's management RF wireless network. It is
recommended to only set the SSID and Encryption, and keep the other default settings.

Parameters description

Name Description

Specifies whether to enable or disable the Management RF function of the CPE.

Management RF When you manually enable Management RF's wireless network, it will not disable
automatically. Since the Management RF's Wi-Fi is not protected by password by
default, it is recommended to disable the function when not in use so as to ensure
network security.

Enabled upon Power Specifies whether to enable or disable the Enabled upon Power on function.
on

126
 Document Version: V2.2

Name Description

With this function enabled, Management RF's wireless network will be automatically
enabled when the CPE is powered off and on again.

Specifies the duration of the Management RF's wireless network enabled.

With Management RF enabled, if the Duration is exceeded and the available time of
the Management RF is not delayed, the Management RF's Wi-Fi will be automatically
disabled.
Duration

You can use a wireless client to connect the wireless network of the Management RF.
Log in to the web UI of the CPE, you can delay the available time for the wireless
network of the Management RF as required.

Specifies the name of the CPE Management RF's wireless network. You can modify it
SSID
as required.

Specifies the network mode of the CPE Management RF's wireless network. Only
Network Mode
wireless clients supporting the listed network mode can connect to the CPE.

Specifies the operating channel of the CPE management RF's wireless network. When
Channel Auto is selected, the CPE will automatically adjust its operating channel based on the
surrounding environment.

Specifies the security mode of the wireless network of the CPE Management RF. Refer
Encryption
to the Security Mode for details.

7.4.2 Delay duration of management RF's wireless network

With Management RF enabled, if the Duration is exceeded and the available time of the
Management RF is not delayed, the Management RF will be automatically disabled. To delay the
available time for the wireless network of the Management RF, you can refer to the following
procedures.

Configuration procedure

Step 1 Connect the wireless client to the wireless network of Management RF.
Step 2 Start a browser on your wireless client, visit the CPE's management IP address (By default,
AP mode: 192.168.2.1, Client mode: 192.168.2.2), and log in to the web UI of the CPE.
Step 3 Click Delay in the upper right corner of the page. The following figure is for reference only.

127
 Document Version: V2.2

----End

− To delay the available time of the Management RF's wireless network, you must enable the
Management RF function. As long as you delay the available time of wireless network before the
wireless network of the Management RF is automatically disabled, that is, you can normally use
the wireless network of the Management RF.
− Each time you click Delay, the maximum delay time is 5 minutes.
− The total delay time cannot exceed the Duration. For example, if the Duration is 10 minutes, it
means you can only delay to a maximum of 10 minutes.

128
 Document Version: V2.2

8 Advanced

This user guide is for configuration reference only and does not indicate that the product supports all
functions described here. Functions available may vary with the product model. Please refer to the
actual product.

8.1 LAN rate

To access the configuration page, log in to the web UI of the CPE and navigate to Advanced > LAN
Rate.
This module enables you to change the LAN speed and duplex mode settings. If the transmission
distance between the ports of the CPE and peer device is too long, you can reduce the port speed
of the CPE and peer CPE to increase the transmission distance.

When you change the settings, ensure that the LAN speed and duplex mode of the port of the CPE
is the same as that of peer CPE. By default, the LAN speed settings of the LAN port is Auto
Negotiation. OS3V1.0 is used for illustration.

After the LAN speed and duplex mode settings are changed, you can check on the System Status
page.
Parameters description

Name Description

Specifies the speed and duplex mode of the port are determined by the negotiation
Auto Negotiation
between the CPE and peer CPE.

Specifies the port working at 1000 Mbps, and can transmit and receive packets at the
1000Mbps Full Duplex
same time.

129
 Document Version: V2.2

Name Description

Specifies the port working at 100 Mbps, and can transmit or receive packets at the
100Mbps Full Duplex
same time.

100Mbps Half Duplex Specifies the port working at 100 Mbps, and can only transmit or receive packets.

Specifies the port working at 10 Mbps, and can transmit and receive packets at the
10Mbps Full Duplex
same time.

10Mbps Half Duplex Specifies the port working at 10 Mbps, and can only transmit or receive packets.

− If you set the speed and duplex mode of the port manually, ensure that the speed and duplex
mode of the peer port are set to Auto Negotiation or the same as this port.
− Lower speed mode can improve the transmission distance of the port. If you want to extend the
PoE power supply distance, you can change the speed to a low speed mode, such as 10 Mbps full-
duplex. And ensure that the speed mode for the peer port is also 10 Mbps Full Duplex or Auto
Negotiation.

130
 Document Version: V2.2

8.2 Diagnose
To access the configuration page, log in to the web UI of the CPE and navigate to Advanced >
Diagnose.
You can use the diagnosis tools for troubleshooting.
− Site Survey: Used to check nearby wireless signals.
− Ping: Used to check the network connectivity and connection quality.
− Traceroute: Used to check the network routes.
− Speed Test: Used to check the connection speed between two devices in a same
network.
− Spectrum Analysis: Used to check the nearby wireless noise of each channel, then you
can select a frequency band with less wireless noise for the CPE.

8.2.1 Site survey

Site survey gives you an insight into the information of nearby wireless signals. Based on the
diagnosis result, you can select a channel that is least used for the CPE to improve the transmission
efficiency.

Configuration procedure

Step 1 Log in to the web UI of the CPE.

Step 2 Navigate to Advanced > Diagnose.
Step 3 Select Site Survey in the Diagnose drop-down list.
----End

The diagnosis result will be displayed in a few seconds in the list below. See the following figure.

131
 Document Version: V2.2

8.2.2 Ping
You can use ping to detect the connectivity and quality of network connection.

Assume that you want to know whether the CPE can access Bing.

Configuration procedure

Step 1 Log in to the web UI of the CPE.

Step 2 Navigate to Advanced > Diagnose.
Step 3 Select Ping in the Diagnose drop-down list.
Step 4 Set IP Address to Manual.
Step 5 Enter the target IP address or a domain name, which is cn.bing.com in this example.
Step 6 Set Ping Packet. The default setting is recommended.
Step 7 Set Ping Size. The default setting is recommended.
Step 8 Click Start.

----End

The diagnosis result will be displayed in a few seconds in the list below. See the following figure.

132
 Document Version: V2.2

8.2.3 Traceroute
You can use the Traceroute tool to detect the routes that the packets pass by from the CPE to
destination host.

Assume that you want to detect the routes that the packets pass by from the CPE to cn.bing.com.

Configuration procedure

Step 1 Log in to the web UI of the CPE.

Step 2 Navigate to Advanced > Diagnose.
Step 3 Select Traceroute in the Diagnose drop-down list.
Step 4 Enter the target IP address or a domain name, which is cn.bing.com in this example.
Step 5 Click Start.

----End

The diagnosis result will be displayed in a few seconds in the list below. See the following figure.

133
 Document Version: V2.2

8.2.4 Speed test

Overview
You can use the Speed Test to test the connection speed between two bridging CPEs, which helps
estimate the throughput between the two CPEs. The test requires that both sides can use the Speed
Test function.

Log in to the web UI of the CPE, navigate to Advanced > Diagnose, and select Speed Test from the
Diagnose drop-down list.

Parameters description

Name Description

AVG RX Specifies the average receive rate.

AVG TX Specifies the average transmit rate.

AVG Total Specifies the average total rate.

134
 Document Version: V2.2

Name Description

Client
This version is not supported yet.
Server

Specifies the LAN IP address of the peer CPE. You can enter it manually or select the
IP Address of Peer AP IP address of the peer AP from the drop-down list if there are peer CPEs connected
to the CPE.

If the IP Address of Peer AP is set to Manual, you need to enter the LAN IP address
IP Address
of peer CPE here.

Specifies the HTTP service port number of peer CPE, which is used to establish speed
HTTP Port test connections based on TCP/IP. The default value is 80. You are recommended to
keep the default value.

User Name
Specify the login user name and password of the peer CPE.
Password

Test Group Specifies the number of test connections established.

Specifies the test direction.

− RX (Receive): Only test the speed that this CPE receives data from the peer
Direction CPE.
− TX (Transmit): Only test the speed that this CPE transmits data to peer CPE.
− Bidirectional: Test both transmit and receive speed between the two CPEs.

Time Specifies the duration of the speed test, which is 30s by default.

Example of configuring the speed test

Assume that CPE1 working in AP mode and CPE2 working in Client mode have bridged successfully.
Below shows basic information about two CPEs:

− IP address of CPE1: 192.168.2.100

− IP address of CPE2: 192.168.2.1

− Login user names/passwords of the two CPEs: admin

To test the wireless speed between them, perform the following procedure either on CPE1 or CPE2.

Configuration procedure

Step 1 Log in to the web UI of the CPE2.

Step 2 Navigate to Advanced > Diagnose.

135
 Document Version: V2.2

Step 3 Select Speed Test in the Diagnose drop-down list.

Step 4 Set IP Address of Peer AP to Manual.
Step 5 Enter the IP address of CPE1 in the IP Address field, which is 192.168.2.100 in this
example.
Step 6 Enter the login user name and password of the web UI of CPE1 in the User Name and
Password fields, which are both admin in this example.
Step 7 Set Direction to Bidirectional.
Step 8 Click Start.

*
*

*
*

----End

The test result will be displayed in a few seconds in the list below. See the following figure.

136
 Document Version: V2.2

8.2.5 Spectrum analysis

The Spectrum Analysis function allows you to check the channel utilization and wireless noise of
each channel, so that you can select a channel with minimum channel availability and wireless noise
for the CPE based on the diagnose result.

− CPEs to be bridged must operate in the same channel.

− Some CPE models only can check the wireless noise of each channel. And you can select a
frequency band with less wireless noise for the CPE based on the diagnose result. Please refer to
the product you purchased.

Example of configuring spectrum analysis on O4V1.0

Configuration procedure

Step 1 Log in to the web UI of the CPE.

Step 2 Navigate to Advanced > Diagnose.
Step 3 Select Spectrum Analysis from the Diagnose drop-down list.
Step 4 Select the frequency band range you want to test, which is 36(5180 MHz) to 48(5240MHz)
in this example.
Step 5 Click Start.

Step 6 Confirm the prompt information, and click OK.

----End

The diagnosis result will be displayed in a few seconds in the list below. See the following figure.

Based on the diagnosis result, the CPE can be set to channel 48 for optimal transmission.

137
 Document Version: V2.2

Example of configuring spectrum analysis on O6V3.0

Test channel utilization

Step 1 Log in to the web UI of the CPE.

Step 2 Navigate to Advanced > Diagnose.
Step 3 Select Spectrum Analysis from the Diagnose drop-down list.
Step 4 Select Channel Utilization.
Step 5 Select the frequency band range you want to test, which is 36(5180 MHz) to 48(5240MHz)
in this example.
Step 6 Click Start.

Step 7 Confirm the prompt information, and click OK.

138
 Document Version: V2.2

----End

The diagnosis result will be displayed in a few seconds in the list below. See the following figure.

Based on the diagnosis result, the CPE can be set to channel 44 for optimal transmission.

Test noise intensity

Step 1 Log in to the web UI of the CPE.

Step 2 Navigate to Advanced > Diagnose.
Step 3 Select Spectrum Analysis from the Diagnose drop-down list.
Step 4 Select Noise Intensity.
Step 5 Select the value to be tested, which is Average Value in this example.
Step 6 Select the frequency band range you want to test, which is 36(5180 MHz) to 48(5240MHz)
in this example.
Step 7 Click Start.

139
 Document Version: V2.2

Step 8 Confirm the prompt information, and click OK.

----End

The diagnosis result will be displayed in a few seconds in the list below. See the following figure.

Based on the diagnosis result, the CPE can be set to channel 40, 44 or 48 for optimal transmission.

140
 Document Version: V2.2

8.3 Bandwidth control

8.3.1 Overview
The Bandwidth Control function is available only when the CPE works in WISP or Router mode.

If multiple clients access the internet through the CPE, bandwidth control is recommended, so that
high-speed file downloaded by a client does not reduce the internet access speed of the other
clients.

To access the configuration page, log in to the web UI of the CPE and navigate to Advanced >
Bandwidth Control.

Parameters description

Name Description

Specifies the description of the bandwidth control rule.

Remark This field is optional. For convenient management, you’d better specify different
remarks for different rules.

Specifies the IP address or IP address range of clients that this rule applies to.
If you want to control only one client, enter the same IP address in the two boxes.
IP Address Range
If you want to control multiple clients, enter an IP address range including start IP
address and end IP address. The end IP address should be greater than the start IP
address.

Max. Upload Rate

Specify the maximum upload or download rate of a client whose IP address is within
the specified IP address range.
Max. Download Rate

Status Specifies the current status of the rule. You can enable or disable it as required.

Action Click to delete the rule.

141
 Document Version: V2.2

8.3.2 Example of configuring bandwidth control

Networking requirements
An enterprise uses the CPE to set up a network. The CPE is in WISP mode and has connected to the
internet. To ensure that every device can access the internet smoothly, you want to specify the
maximum upload and download rates for each device.

Assume that: The maximum upload rate of each device connected to the wireless network of the
device is 5 Mbps, and download rate is 10 Mbps. And the IP address range of the devices connected
to the wireless network is 192.168.2.100 to 192.168.2.200.

Configuration procedure
Step 1 Log in to the web UI of the CPE.
Step 2 Navigate to Advanced > Bandwidth Control.
Step 3 (Optional) Enter a remark, which is Devices of Office1 in this example.
Step 4 Set IP Address Range, which is 192.168.2.100 ~ 192.168.2.200 in this example.
Step 5 Set the maximum upload and download rates, which are 5 and 10 in this example.
Step 6 Click Add.

----End

142
 Document Version: V2.2

If the rule is added successfully, it is displayed as shown below.

Verification
For a client whose IP address is within the range of 192.168.2.100 to 192.168.2.200, its maximum
upload rate is 5 Mbps and its maximum download rate is 10 Mbps.

143
 Document Version: V2.2

8.4 Port forwarding

This function is available only when the CPE works in WISP or Router mode.

8.4.1 Overview
If computers are connected to the CPE to form a LAN and access the internet through the CPE,
internet users cannot access the hosts on the LAN. Therefore, the servers, such as web servers,
email servers, and FTP servers, on the LAN are inaccessible to internet users.

To enable internet users to access a LAN server, enable the port forwarding function of the CPE, and
map one service port to the IP address of the LAN server. This enables the CPE to forward the
requests arriving at the port from the internet to the LAN server, and avoid the attacks from the
WAN.

To access the configuration page, log in to the web UI of the CPE and navigate to Advanced > Port
Forwarding.

Parameters description

Name Description

Internal IP Address Specifies the IP address of the host that establishes a server in LAN.

Specifies the service port of the server in LAN.

Internal Port After you select an Application, this option will be auto populated. You can also
customize it.

144
 Document Version: V2.2

Name Description

Specifies the ports which are enabled for WAN users to visit the corresponding
servers in LAN.
External Port
After you select an Application, this option will be auto populated. You can also
customize it.

Specifies the protocol type of the selected applications. Select TCP&UDP when you
Protocol
are not sure.

Specifies the application services established in LAN. After you select an application,
Application
the internal and external ports will be populated.

Status Specifies the status of the rule. You can enable or disable it according to your need.

Action Click to delete the rule.

8.4.2 Example of configuring port forwarding

Networking requirements
An enterprise uses the CPE to set up a network. The CPE is in WISP mode and has connected to the
internet. Now the intranet web server is required to be open to internet users to enable staff to
access the intranet even when they are outside the enterprise.

Solution
You can use the port forwarding function to enable internet users to access the intranet web server.

Assume that:
− WAN IP Address of theCPE: 202.105.11.22
− IP Address of the web server: 192.168.2.100
− Service port: 9999

− Before configuration, ensure that the WAN port of the CPE obtains a public IP address. If the
WAN port obtains a private IP address or an intranet IP address assigned by the ISP, the function
may not take effect. Common IPv4 addresses can be class A, class B and class C. The private IP
addresses ranges: Class A: 10.0.0.0-10.255.255.255, Class B: 172.16.0.0-172.31.255.255, Class C:
192.168.0.0-192.168.255.255.
− ISPs may not support unreported web service accessed using the default port number 80. When
setting port mapping, you are recommended to set the external port as an uncommon port (1024
to 65535), such as 9999, to ensure normal access.
− Internal and external ports can be different.

145
 Document Version: V2.2

CPE (WISP mode)

Switch

ISP hotspot

Office network

Computer1 Computer2 Web server

Configuration procedure

Step 1 Log in to the web UI of the CPE.

Step 2 Navigate to Advanced > Port Forwarding.
Step 3 Set Internal IP Address, which is 192.168.2.100 in this example.
Step 4 Set Internal Port and External Port, which are 9999 in this example.
Step 5 Set Protocol, which is TCP&UDP in this example
Step 6 Set Application, which is HTTP in this example.
Step 7 Click Add.

----End

146
 Document Version: V2.2

If the rule is added successfully, it is displayed as shown below.

Verification
Internet users can successfully access the intranet server by using the Intranet service application
layer protocol name://WAN port IP address. If the intranet service port is not the default port
number, the access address is Intranet service application layer protocol name://WAN port IP
address:External port.
In this example, the access address is http://202.105.11.22:9999.

You can find the current WAN port IP address in System Status.

If DDNS is enabled on the WAN port, internet users can also access the intranet server by using
Intranet service application layer protocol name://WAN port domain name:External port.

If internet users cannot visit the server in LAN after the configuration, try the following solutions:
− Ensure that the WAN IP address of the CPE is a public IP address, and the internal port you
entered is correct.
− Security software, antivirus software, and the built-in OS firewall of the server may cause port
forwarding function failures. Disable them and try again.
− Manually set an IP address and related parameters for the server to avoid the service
disconnection caused by the dynamic IP address.

147
 Document Version: V2.2

8.5 MAC filter

This function is available only when the CPE works in WISP or Router mode.

8.5.1 Overview
The MAC Filter function enables you to restrict access to devices by their MAC addresses at specific
times.

To access the configuration page, log in to the web UI of the CPE and navigate to Advanced > MAC
Filter.
The function is disabled by default. Set the mode to Allow, and the page is shown as below.

Parameters description

Name Description

Specifies the mode of MAC filter rule.

− Disable: Disable the MAC Filter function.
− Allow: Only allow devices with the MAC addresses in the list to access the
Mode
internet with the CPE.
− Disallow: Only disallow devices with the MAC addresses in the list to access
the internet with the CPE.

Remark Specifies the description of the rule.

MAC Address Specifies the MAC address of the client to which the rule applies.

148
 Document Version: V2.2

Name Description

Time Specifies the period at which the rule takes effect.

Date Specifies the dates on which the rule takes effect.

Specifies the status of the rule. You can enable or disable the rule according to your
Status
needs.

Action Click to delete the rule.

8.5.2 Example of configuring MAC filter

Networking requirements
An enterprise uses the CPE to set up a network. The CPE is in WISP mode and has connected to the
internet.

Requirements: Allow internet access to a purchasing employee from 8:00 to 18:00, Monday to
Friday.

Solution
You are recommended to use the MAC Filter function to solve the problem.

Assume that the MAC addresses of the purchasing employee's computer is CC:3A:61:71:1B:6E.

Configuration procedure
Step 1 Log in to the web UI of the CPE.
Step 2 Navigate to Advanced > MAC Filter.
Step 3 Select a mode, which is Allow in this example.
Step 4 (Optional) Set Remark, which is Purchasing in this example.
Step 5 Set the MAC Address of the device, which is CC:3A:61:71:1B:6E in this example.
Step 6 Specify a period, which is 8:00 to 18:00 in this example.
Step 7 Tick the dates, which are Mon. to Fri. in this example.
Step 8 Click Add.

149
 Document Version: V2.2

----End

If the rule is added successfully, it is displayed as shown below.

Verification
Only the computer with the MAC addresses CC:3A:61:71:1B:6E and CC:3A:61:75:1F:3E can access
the internet at 9:00 to 17:00 from Monday to Friday. Other computers are blocked during this
period.

150
 Document Version: V2.2

8.6 Network service

8.6.1 DDNS
Overview
The DDNS function is available only when the CPE works in WISP or Router mode.

DDNS, dynamic domain name server, enables the dynamic DNS client on the CPE to deliver the
current WAN IP address to the DNS server. Then the server maps the WAN IP address to a domain
name for dynamic domain name resolution.

On this page, you can map the dynamic WAN IP address of the CPE (public IP address) to a fixed
domain name. The DDNS function is generally used with such functions as port forwarding and DMZ
host to enable internet users to access the LAN server or the web UI of the CPE through a domain
name without caring about the change of the WAN IP address.

To access the configuration page, log in to the web UI of the CPE and navigate to Advanced >
Network Service.

Parameters description

Name Description

DDNS Specifies whether to enable the DDNS function.

Service Provider Specifies Dynamic Domain Name Service (DDNS) provider.

User Name Specify the user name or password used to log in to the dynamic DNS service, which
are the login user name and password you registered on the website of the service
Password provider.

Specifies the domain name information obtained from the dynamic DNS server. You
Domain Name
need to enter the domain name which you registered on the website manually.

151
 Document Version: V2.2

Example of configuring DDNS

Networking requirements

An enterprise uses the CPE to set up a network. The CPE is in WISP mode and has connected to the
internet.

Requirement: The intranet web server is open to internet users to enable staff to access the
intranet even when they are outside the enterprise.

Solution
− You can use the Port Forwarding function to enable internet users to access the
intranet web server.
− You can use the DDNS function to enable internet users to access the intranet web
server through a fixed domain name, avoiding access failures caused by WAN IP
address change.

Assume that:

The information of the web server in LAN is shown as below:

− IP Address: 192.168.2.100
− Service Port of the Web Server: 9999

The registered domain name information is shown as below:

− Service Provider: Dyndns

− User Name: JohnDoe

− Password: JohnDoe

− Domain Name: JohnDoe.dyndns.com

− Before configuration, ensure that the WAN port of the CPE obtains a public IP address. If the
WAN port obtains a private IP address or an intranet IP address assigned by the ISP, the function
may not take effect. Common IPv4 addresses can be class A, class B and class C. The private IP
addresses ranges: Class A: 10.0.0.0-10.255.255.255, Class B: 172.16.0.0-172.31.255.255, Class C:
192.168.0.0-192.168.255.255.
− ISPs may not support unreported web service accessed using the default port number 80.
Therefore, when setting port mapping, you are recommended to set the external port as an
uncommon port (1024 to 65535), such as 9999, to ensure normal access.
− Internal and external ports can be different.

152
 Document Version: V2.2

CPE (WISP mode)

Switch

ISP
ISPhotspot
Hotspot

Office network

Computer1 Computer2 Web server

Configuration procedure

Step 1 Log in to the web UI of the CPE.

Step 2 Set up the DDNS function.
1. Navigate to Advanced > Network Service.
2. Enable the DDNS function.
3. Set Server Provider (the DDNS service provider where you applied the domain name),
which is Dyndns in this example.
4. Set User Name and Password (registered with DDNS service provider), which both are
JohnDoe in this example.
5. Set Domain Name, which is JohnDoe.dyndns.com in this example.
6. Click Save on the bottom of this page.

Step 3 Set up the port forwarding function.

1. Navigate to Advanced > Port Forwarding.
2. Set Internal IP Address, which is 192.168.2.100 in this example.

153
 Document Version: V2.2

3. Set Internal Port and External Port, which are 9999 in this example.
4. Set Protocol, which is TCP&UDP in this example
5. Set Application, which is HTTP in this example.
6. Click Add.

----End

If the rule is added successfully, it is displayed as below.

Verification

Internet users can successfully access the intranet server by using the Intranet service application
layer protocol name://WAN port IP address. If the intranet service port is not the default port
number, the access address is Intranet service application layer protocol name://WAN port IP
address:External port.

In this example, the access address is http://202.105.11.22:9999.

If internet users cannot visit the server in LAN after the configuration, try the following solutions:
− Ensure that the WAN IP address of the CPE is a public IP address, and the internal port you
entered is correct.
− Security software, antivirus software, and the built-in OS firewall of the server may cause port
forwarding function failures. Disable them and try again.
− Manually set an IP address and related parameters for the server to avoid the service
disconnection caused by the dynamic IP address.

154
 Document Version: V2.2

8.6.2 Remote web management

Overview
The Remote Web Management function is available only when the CPE works in WISP or Router
mode.

Generally, you can log in to the web UI of the CPE only when you connect to the LAN port or the
wireless network of the CPE. However, this function enables access to the web UI remotely through
the WAN port in special cases (like when you need remote technical support).
You can access the CPE remotely by visiting an address in the form of http://WAN port IP
address:Port number. If the DDNS function is enabled on the CPE, you can access the CPE by
visiting an address in the form of http://Domain name of WAN port:Port number.
To access the configuration page, log in to the web UI of the CPE and navigate to Advanced >
Network Service.
This function is disabled by default. After it is enabled, the page is shown as follows.

Parameters description

Name Description

Remote Web Specifies whether to enable or disable the remote web management function.
Management

Specifies the IP address of the computer which is allowed to access the web UI of the
CPE.
− All: Indicates that any computer in WAN can manage the CPE remotely. For
IP Address security, this option is not recommended.
− Manual: Indicates that only the specified computer can manage the CPE
remotely. If the CPE belongs to a LAN, the gateway address (a public IP
address) of the computer should be entered.

Specifies the port number used for remote management of CPE. Default: 8080. You
can modify it as required.
Port
Ports 1 to 1024 have been used by known services. To avoid port conflicts, you can
set the port number to one between 1025 and 65535.

155
 Document Version: V2.2

Example of configuring remote web management

Networking requirements

An enterprise uses the CPE to set up a network. The CPE is in WISP mode and has connected to the
internet. The network administrator encountered a problem during network setup and needs the
Tenda technical support to remotely log in to the web UI of the CPE to perform analysis and
troubleshooting.
Solution

You can use the remote web management function to solve the problem.

Assume that:
− WAN IP address of the CPE: 202.105.106.55
− IP address of the computer allowed to access the CPE: 202.105.88.77
− Port number: 8080

Configuration procedure

Step 1 Log in to the web UI of the CPE.

Step 2 Navigate to Advanced > Network Service.
Step 3 Enable the Remote Web Management function.
Step 4 Set IP Address to Manual, and enter the IP address of the computer supported by Tenda
technology, which is 202.105.88.77 in this example.
Step 5 Set Port, which is 8080 in this example.
Step 6 Click Save.

----End

Verification

The host can log in to the web UI of the CPE by visiting http://202.105.106.55:8080 on the
computer (the IP address of the computer is 202.105.88.77). If the DDNS function is enabled on the
CPE, you can access the CPE by visiting an address in the form of http://Domain name of WAN
port:8080.

156
 Document Version: V2.2

8.6.3 Reboot schedule

Overview
To access the configuration page, log in to the web UI of the CPE and navigate to Advanced >
Network Service.

This function enables the CPE to automatically reboot as scheduled. You can use this function to
prevent wireless performance degradation or network instability due to long-time running.

Configuration procedure
Step 1 Log in to the web UI of the CPE.
Step 2 Navigate to Advanced > Network Service.
Step 3 Enable the Reboot Schedule function.
Step 4 Set Time at which the CPE reboots, which is 3:00 in this example.
Step 5 Set Date on which the CPE reboots, which is Every Day in this example.
Step 6 Click Save.

----End

After the CPE is successfully configured, it will automatically reboot at 3 a.m. every day.

8.6.4 Login timeout interval

If you log in to the web UI of the CPE and perform no operation within the login timeout interval,
the CPE logs you out for network security. The default login timeout interval is 5 minutes. You can
modify it as required.

To access the configuration page, log in to the web UI of the CPE and navigate to Advanced >
Network Service.

157
 Document Version: V2.2

8.6.5 SNMP agent

Overview
The Simple Network Management Protocol (SNMP) is the most widely used network management
protocol in TCP/IP networks. SNMP enables you to remotely manage all your network devices
compliant with this protocol, such as monitoring the network status, changing network device
settings, and receiving network event alarms.

SNMP allows automatic management of devices from various vendors regardless of physical
differences among the devices.
SNMP management framework

The SNMP management framework consists of SNMP manager, SNMP agent, and Management
Information Base (MIB).

− SNMP manager: It is a system that controls and monitors network nodes using the SNMP
protocol. The SNMP manager most widely used in network environments is Network
Management System (NMS). An NMS can be a dedicated network management server, or
an application that implements management functions in a network device.

− SNMP agent: It is a software module in a managed device. The module is used to manage
data about the device and report the management data to an SNMP manager.

− MIB: It is a collection of managed objects. It defines a series of attributes of managed

objects, including names, access permissions, and data types of objects. Each SNMP agent
has its MIB. An SNMP manager can read and/or write objects in the MIB based on the
permissions assigned to the SNMP manager.

An SNMP manager manages SNMP agents in an SNMP network. The SNMP manager exchanges
management information with the SNMP agents using the SNMP protocol.
Basic SNMP operations

The CPE allows the following basic SNMP operations:

− Get: An SNMP manager performs this operation to query the SNMP agent of the device for
values of one or more objects.

− Set: An SNMP manager performs this operation to set values of one or more objects in the
MIB of the SNMP agent of the device.
SNMP protocol version

The CPE is compatible with SNMP V1 and SNMP V2C and adopts the community authentication
mechanism. Community name is used to define the relationship between an SNMP agent and an
SNMP manager. If the community name contained in an SNMP packet is rejected by a device, the
packet is discarded. A community name functions as a password to control SNMP agent access
attempts of SNMP managers.

158
 Document Version: V2.2

SNMP V2C is compatible with SNMP V1 and provides more functions than SNMP V1. Compared
with SNMP V1, SNMP V2C supports more operations (GetBulk and InformRequest) and data types
(such as Counter64), and provides more error codes for better distinguishing errors.
MIB introduction

An MIB adopts a tree structure. The nodes of the tree indicate managed objects. A path consisting
of digits and starting from the root can be used to uniquely identify a node. This path is calling an
object identifier (OID). The following figure shows the structure of an MIB. In the figure, the OID of
A is 1.3.6.1.2.1.1, whereas the OID of B is 1.3.6.1.2.1.2.

SNMP agent basic configuration

To access the configuration page, log in to the web UI of the CPE and navigate to Advanced >
Network Service.

159
 Document Version: V2.2

Parameter description

Name Description

Specifies whether to enable or disable the SNMP agent function of the CPE. By
default, it is disabled.
SNMP Agent An SNMP manager and the SNMP agent can communicate with each other only if
their SNMP versions are the same. Currently, the SNMP agent function of the CPE
supports SNMP V1 and SNMP V2C.

Specifies the device name of the CPE. The default device name is assigned based
on the model and version number of the CPE.

Device Name
It is recommended that you change the device name so that you can easily
identify the target CPE when managing it using SNMP.

Specifies the read password shared between SNMP managers and this SNMP
agent. The default password is public.
Read Community
The SNMP agent function allows an SNMP manager to use the Read Community
to read variables in the MIB of the CPE.

Specifies the read/write password shared between SNMP managers and this
SNMP agent. The default password is private.
Read/Write Community
The SNMP agent function allows an SNMP manager to use the Read/Write
Community to read/write variables in the MIB of the CPE.

Specifies the location where the CPE is used. You can change the location as
Location required.

160
 Document Version: V2.2

Example of configuring the SNMP function

Networking requirements
− The CPE connects to an NMS over a LAN. The IP address of the CPE is 192.168.2.1/24 and
the IP address of the NMS is 192.168.2.212/24.
− The NMS uses SNMP V1 or SNMP V2C to monitor and manage the CPE.
− Assume that Read Community is Jack, and Read/Write Community is Jack123.

Power socket Switch

PoE injector
PoE

NMS: 192.168.2.212/24
CPE: 192.168.2.1/24

Configuration procedure

Step 1 Set up the CPE.

1. Log in to the web UI of the CPE.
2. Navigate to Advanced > Network Service.
3. Enable the SNMP Agent function.
4. Set Read Community, which is Jack in this example.
5. Set Read/Write Community, which is Jack123 in this example.
6. Click Save.

*
*

*
*
*
*

Step 2 Set up the NMS.

161
 Document Version: V2.2

On an NMS that uses SNMP V1 or SNMP V2C, set the read community to Jack and
read/write community to Jack123. For details about how to configure the NMS, refer to the
user guide for the NMS.
----End
Verification

After the configuration is successful, the NMS can connect to the SNMP agent of the CPE and can
query and set some parameters on the SNMP agent through the MIB.

8.6.6 Ping watch dog

The Ping watch dog is a fail-proof for the CPE, which is dedicated to continuously monitoring the
specific connection mechanism between the CPE and the remote host using the Ping tool.

With this function enabled, the CPE periodically pings a target IP address to check the network
connectivity and identify whether the device malfunctions. If it malfunctions, the CPE will reboot
automatically to ensure the network performance.

Configuration procedure

Step 1 Log in to the web UI of the CPE.

Step 2 Navigate to Advanced > Network Service.
Step 3 Enable the Ping Watch Dog function.
Step 4 Set the related parameters as required.
Step 5 Click Save.

----End

Parameters description

Name Description

Ping Watch Dog Specifies whether to enable or disable the Ping Watch Dog function.

IP Address Specifies the target IP address that the CPE pings.

162
 Document Version: V2.2

Name Description

Specifies the interval at which the CPE transmits packets to ping the target IP
Ping Interval
address. The default value is 300s.

Specifies the delay time for the CPE to enable the Ping Watch Dog function after the
CPE startup completes. The default value is 300s.

Ping Startup Delay Setting a proper Ping startup delay time can stop the Ping Watch Dog function from
being triggered during the startup of the CPE. Such triggering leads to failure of
accessing the web UI to modify the settings, causing the CPE to start up
continuously.

Specifies the threshold of lost packet that triggers reboot. The value range is 1 to
Threshold of Lost 65535. The default value is 3.
Packets For example, if 5 is set, the CPE will reboot automatically when it does not receive
response after sending 5 Ping packets to the target IP address or domain name.

8.6.7 DMZ host

Overview

The DMZ function is available only when the CPE works in WISP or Router mode.

After a device in the LAN is set as the DMZ host, the device enjoys no limitations when
communicating with the internet. For example, if video meeting or online games are underway on a
computer, you can set that computer as the DMZ host to make the video meeting and online games
go smoother.

− After you set a LAN device as a DMZ host, the device will be completely exposed to the internet
and the firewall of the controller does not take effect on the CPE.
− Hackers may attack on the local network by using the DMZ host. Exercise caution to use the DMZ
function.
− The security guard, anti-virus software and system firewall on the DMZ host may affect the DMZ
function. Disable them when using this function. When you are not using the DMZ function, you
are recommended to disable the function and enable the firewall, security guard and anti-virus
software on the DMZ host.

To access the configuration page, log in to the web UI of the CPE and navigate to Advanced >
Network Service.

163
 Document Version: V2.2

Parameters description

Name Description

Specifies whether to enable the DMZ host function of the CPE. By default, it is
DMZ Host
disabled.

DMZ Host IP Address Specifies the IP address of the LAN device to be set to DMZ host.

Example of configuring DMZ host

Networking requirements

An enterprise uses the CPE to set up a network. The CPE is in WISP mode and has connected to the
internet.

The intranet web server is open to internet users to enable staff to access the intranet even when
they are outside the enterprise.

Solution

You can use DMZ Host function to solve the problem.

Assume that:
− WAN IP address of the CPE: 202.105.106.55

− Internal web server IP Address: 192.168.2.100

− Port number: 9999

− Before the configuration, ensure that the WAN port of the CPE obtains a public IP address. If the
WAN port obtains a private IP address or an intranet IP address assigned by the ISP, the function
may not take effect. Common IPv4 addresses can be class A, class B and class C. The private IP
addresses ranges: Class A: 10.0.0.0-10.255.255.255, Class B: 172.16.0.0-172.31.255.255, Class C:
192.168.0.0-192.168.255.255.
− ISPs may not support unreported web service accessed using the default port number 80.
Therefore, when setting the DMZ host, you are recommended to set the internal port as an
uncommon port (1024 to 65535), such as 9999, to ensure normal access.

164
 Document Version: V2.2

CPE: WISP mode

Switch

ISP hotspot

Computer1 Computer2 Web Server

Configuration procedure

Step 1 Log in to the web UI of the CPE.

Step 2 Navigate to Advanced > Network Service.
Step 3 Enable the DMZ Host function.
Step 4 Set DMZ Host IP Address, which is 192.168.2.100 in this example.
Step 5 Click Save.

----End
Verification

Internet users can successfully access the intranet server by using the Intranet service application
layer protocol name://WAN port IP address. If the intranet service port is not the default port
number, the access address is Intranet service application layer protocol name://WAN port IP
address:Intranet service port.

In this example, the access address is http://202.105.11.22:9999.

You can find the current WAN port IP address in System status.
If DDNS is enabled on the WAN port, internet users can also access the intranet server by using
Intranet service application layer protocol name://WAN port domain name: Intranet service port.

165
 Document Version: V2.2

If internet users cannot visit the server in LAN after the configuration, try the following solutions:
− Ensure that the WAN IP address of the CPE is a public IP address.
− Security software, antivirus software, and the built-in OS firewall of the server may cause the
function failures. Disable them and try again.
− Manually set an IP address and related parameters for the server to avoid the service
disconnection caused by the dynamic IP address.

8.6.8 Telnet service

With this function enabled, the CPE can be managed through the Telnet. Generally, this function is
used to maintain the CPE by technical professional.

To access the configuration page, log in to the web UI of the CPE and navigate to Advanced >
Network Service.

8.6.9 UPnP
Universal Plug and Play (UPnP) is a set of networking protocols that makes automatic port
forwarding possible. It can identify devices and enable ports for certain applications, such as
BitComet. To use this function, it requires that the operating system support UPnP, or application
software supporting UPnP is installed.

To access the configuration page, log in to the web UI of the CPE and navigate to Advanced >
Network Service.

By default, the function is disabled. You can enable it as required.

8.6.10 Hardware watch dog

This function uses an embedded watchdog timer to detect the operation condition of the CPE’s
main program regularly. During normal operation, the CPE regularly resets the watchdog timer to
prevent it from elapsing, or "timing out". If the CPE fails to reset the watchdog timer, due to a
hardware fault or program error, the timer will elapse and generate a timeout signal. The timeout
signal is used to reboot the CPE to make it recover from malfunctions.

To access the configuration page, log in to the web UI of the CPE and navigate to Advanced >
Network Service.

By default, the function is enabled.

166
 Document Version: V2.2

8.6.11 STP
Spanning Tree Protocol (STP) is a network protocol standardized by IEEE 802.1d. It helps establish a
loop-free logical topology for Ethernet network, and allows a network design to include backup
links to provide fault tolerance if an active link fails. The STP-enabled device creates a spanning tree
within a network of connected layer-2 bridges, and disables those links that are not part of the
spanning tree, leaving a single active path between any two network nodes. So that it prevents
packets from continued proliferation and endless loop in a loop network to avoid reducing the
capability of processing packets caused by receiving duplicate packets.

To access the configuration page, log in to the web UI of the CPE and navigate to Advanced >
Network Service.

By default, the function is disabled.

167
 Document Version: V2.2

9 Tools

This user guide is for configuration reference only and does not indicate that the product supports all
functions described here. Functions available may vary with the product model. Please refer to the
actual product.

9.1 Date & time

To access the configuration page, log in to the web UI of the CPE and navigate to Tools > Date &
Time.

This module enables you to set the system time of the CPE. The system time of the CPE can be
synchronized with the internet or manually configured. By default, it is configured to synchronize
the system time with the internet.

− When you log in to the web UI of the CPE, the system time will be synchronized with the
management host automatically no matter which time setting method you choose.
− Ensure that the system time of the CPE is correct, so that logs can be recorded correctly and the
reboot schedule can be executed correctly.

9.1.1 Synchronized with the internet

The CPE automatically synchronizes its system time with a time server on the internet. This enables
the CPE to automatically correct its system time after being connected to the internet. For details
about how to connect the CPE to the internet, refer to LAN setup.

After the configuration is successful, you can navigate to Status page to check whether the system
time of the CPE is correct. The following figure is for reference only.

168
 Document Version: V2.2

Parameters description

Name Description

Time Settings Specifies the method to set the system time of the CPE.

Specifies the interval to synchronize the system time of the CPE with the time
Time Interval
server on the internet.

Time Zone Specifies the standard time zone where the CPE is located.

9.1.2 Manual
You can manually set the system time of the CPE. If you choose this option, you need to set the
system time each time after the CPE reboots.

After the configuration is successful, you can navigate to Status page to check whether the system
time of the CPE is correct. The following figure is for reference only.

Parameters description

Name Description

Time Settings Specifies the method to set the system time of the CPE.

You can either enter the accurate time in this field, or click Synchronize with PC
Date & Time
Time to synchronize the system time of the CPE with the management computer.

169
 Document Version: V2.2

9.2 Maintenance
9.2.1 Reboot device

When the CPE reboots, the current connections will be disconnected. Perform this operation when the
CPE is idle.

Configuration procedure

Step 1 Log in to the web UI of the CPE.

Step 2 Navigate to Tools > Maintenance.
Step 3 Click Reboot.

Step 4 Confirm the prompt information, and click OK.

----End

A progress bar is displayed on the page. Wait for it to complete.

170
 Document Version: V2.2

9.2.2 Restore to factory settings

If you cannot locate a fault of the CPE or forget the login password of the web UI, you can reset the
CPE to restore its factory settings and then configure it again.

− When the factory settings are restored, all settings on the CPE are removed. Operate only when
necessary.
− To prevent damage to the CPE, do not power off the CPE during the factory reset.

Option 1: Reset the CPE through the web UI

Step 1 Log in to the web UI of the CPE.
Step 2 Navigate to Tools > Maintenance.
Step 3 Click Reset.

Step 4 Confirm the prompt information, and click OK.

----End

A progress bar is displayed on the page. Wait for it to complete.

171
 Document Version: V2.2

Option 2: Reset the CPE through the Reset button

After CPE completes startup, hold down the reset button (RST, RESET or Reset) for about 8 seconds,
then release it when all the LED indicators light up. The CPE will be reset.

9.2.3 Upgrade firmware

This function upgrades the firmware of the CPE for more functions and higher stability.

To prevent damage to the CPE, ensure that:

− The firmware version is applicable to the CPE. Generally, the suffix of the firmware file is .bin.
− Keep the CPE powered on during the upgrade.

Configuration procedure

Step 1 Download the firmware file for the CPE from www.tendacn.com to your local computer,
and unzip it.
Step 2 Log in to the web UI of CPE, and navigate to Tools > Maintenance.
Step 3 Click Upgrade.

Step 4 Select the correct upgrade file (extension: bin) from your local computer and the system
will upgrade automatically.

----End

Wait for the progress bar to complete. Then log in to the web UI of the CPE. On the Status page,
check if the current Firmware Version is consistent with the firmware version you selected for
upgrade.

To better experience the stability and value-added functions of the higher firmware version, you are
recommended to restore the CPE to factory settings and configure it again after the upgrade.

172
 Document Version: V2.2

9.2.4 Backup/restore
The Backup function can save the current configuration of the CPE to your computer. The Restore
function can restore the CPE configuration from the previous backup.

When you have made a lot of configurations to the CPE for better operation performance or to
better meet the environment requirements, it is recommended to back up the configuration. When
you have upgraded and factory reset the CPE, you can restore the previous configuration.

To apply the same configuration to multiple CPEs with minimal effort, configure one CPE, back up its
configuration, and import the backup file to the rest.

Backup
Step 1 Log in to the web UI of CPE.
Step 2 Navigate to Tools > Maintenance.
Step 3 Click Backup/Restore.

Step 4 Click Backup on the pop-up window.

Step 5 Confirm the prompt information, and click Save.

----End

A file named APCfm.cfg is downloaded to your computer.

173
 Document Version: V2.2

Restore
Step 1 Log in to the web UI of CPE.
Step 2 Navigate to Tools > Maintenance.
Step 3 Click Backup/Restore.

Step 4 Click Restore on the pop-up window.

Step 5 Select and upload the file you back up before (extension: .cfg).
----End

After the file is uploaded, the CPE reboots automatically.

Wait for the progress bar to complete. The CPE is restored to the previous settings successfully.

174
 Document Version: V2.2

9.3 Account
To access the configuration page, log in to the web UI of the CPE and navigate to Tools > Account.

On this page, you can change the login account information of the CPE to prevent unauthorized
login. By default, the CPE has one administrator account and one guest account. With the
administrator account, you can modify and view the settings of the CPE while with the guest
account, you can only view the settings.
Click to change the account information.

9.3.1 Administrator
You can modify and view the settings with the administrator account. Both the default user name
and password of the administrator account are admin.

For network security, it is recommended to modify your login password regularly. A password of high
security is preferred, such as a combination of lower-case letters, capital letters and numbers.

175
 Document Version: V2.2

Parameters description

Name Description

Old User Name Specifies the user name and password of the current login account.

By default, the CPE has one administrator account and one guest account.

Old Password Administrator user name/password: admin

Guest user name/password: user

New User Name Specifies a new login user name.

New Password Specifies a new login password.

Confirm Password Enter the new login password again.

9.3.2 Guest
Guest account only allows you to view the settings. By default, this account is disabled. Both the
default user name and password are user.

176
 Document Version: V2.2

9.4 System log

To access the configuration page, log in to the web UI of the CPE and navigate to Tools > System
Log.

The logs of the CPE record various events that occur and the operations that users perform after the
CPE starts. In case of a system fault, you can refer to the logs during troubleshooting.

To view the latest logs of the CPE, click Refresh. To clear the existing logs, click Clear.

To ensure that the logs are recorded correctly, verify the system time of the CPE. You can correct the
system time of the CPE on the Date & Time page.

− The CPE only records events since the latest startup.

− The CPE reboots in case of the following situations: the CPE is powered on after a power failure,
the VLAN function is configured, the firmware is upgraded, the configuration of the CPE is
restored to the factory settings.

177
 Document Version: V2.2

Appendix
A.1 Default parameters
The main default parameters are shown in the following table.

Parameters Default settings

Single 192.168.2.1
Login IP
Address AP mode: 192.168.2.1
Kit
Client mode: 192.168.2.2
Login
User name admin
Administrator
Password admin

Guest Disable

Single AP mode
Quick Setup Working Mode
Kit AP mode or Client mode

IP Address Type Static IP address

Single 192.168.2.1

LAN Setup IP Address AP mode: 192.168.2.1

Kit
Client mode: 192.168.2.2

Subnet Mask 255.255.255.0

Single Enable
DHCP Server
Kit Disable

Start IP Address 192.168.2.100

DHCP Server
End IP Address 192.168.2.200

Subnet Mask 255.255.255.0

Gateway Address 192.168.2.254

178
 Document Version: V2.2

Parameters Default settings

Primary DNS Server 8.8.8.8

Lease Time 1 day

VLAN Settings Disable

PVID 1
VLAN Settings
Management VLAN 1

WLAN 1000

Wireless Network Enable

Operating RF: Tenda_XXXXXX, and XXXXXX is the last

six characters of the LAN MAC address of the device.
Management RF: Tenda_XXXXXX_MG, and XXXXXX is
the last six characters of the LAN MAC address of the
SSID
device.

Wireless
The management RF is not available for some CPEs.

Security Mode None

Transparent Bridge Enable

TD-MAX Disable

TPC Enable

Login Timeout Interval 5 min

Ping Watch Dog Disable

Telnet Service Enable

Network Service
UPnP Disable

Hardware Watch Dog Enable

STP Disable

Tools Date & Time Synchronized with the internet

179
 Document Version: V2.2

A.2 Acronyms and Abbreviations

Acronym or Abbreviation Full Spelling

AES Advanced Encryption Standard

AP Access Point

ARP Address Resolution Protocol

BSSID Basic Service Set Identifier

CAT5e Category 5 Enhanced

CCQ Client Connection Quality

CPE Customer Premises Equipment

CPU Central Processing Unit

DFS Dynamic Frequency Selection

DHCP Dynamic Host Configuration Protocol

DNS Domain Name System

DDNS Dynamic Domain Name Server

DTIM Delivery Traffic Indication Map

DMZ Demilitarized Zone

GMT Greenwich Mean Time

HTTP Hypertext Transfer Protocol

IP Internet Protocol

ISP Internet Service Provider

ICMP Internet Control Message Protocol

LAN Local Area Network

MAC Media Access Control

MIB Management Information Base

180
 Document Version: V2.2

Acronym or Abbreviation Full Spelling

NMS Network Management System

NVR Network Video Recorder

OID Object Identifier

PoE Power over Ethernet

PPPoE Point-to-Point Protocol over Ethernet

PSK Preshared Key

P2MP Point-to-Multi-Point

PVID Port-based VLAN ID

RADIUS Remote Authentication Dial In User Service

RAM Random Access Memory

RF Radio Frequency

RSSI Received Signal Strength Indicator

RTS Request to Send

RX Receive

SSID Service Set Identifier

STP Spanning Tree Protocol

SNMP Simple Network Management Protocol

TCP Transmission Control Protocol

TDMA Time Division Multiple Access

TPC Transmit Power Control

TKIP Temporal Key Integrity Protocol

TX Transmit

UDP User Datagram Protocol

UI User Interface

181
 Document Version: V2.2

Acronym or Abbreviation Full Spelling

UPnP Universal Plug and Play

VID VLAN Identifier

VLAN Virtual Local Area Network

WAN Wide Area Network

WDS Wireless Distribution System

WEP Wired Equivalent Privacy

WISP Wireless Internet Service Provider

WLAN Wireless Local Area Networks

WMM Wi-Fi Multi-Media

WPA Wi-Fi Protected Access

WPA-PSK WPA-Preshared Key

182
 Document Version: V2.2

A.3 How to assign a fixed IP address to your

computer
OS example: Windows 7
Step 1 Right-click the icon on the bottom-right corner of the desktop.

Step 2 Click Open Network and Sharing Center.

Step 3 Click Local Area Connection, then click Properties.

183
 Document Version: V2.2

Step 4 Double-click Internet Protocol Version 4 (TCP/IPv4).

Step 5 Select Use the following IP address, set the IP address to 192.168.2.X (X ranges from 2 to
253), the Subnet mask to 255.255.255.0, and click OK.

Step 6 Click OK on the Local Area Connection Properties window, and close the other windows.
----End

184
 Document Version: V2.2

A.4 How to check the gateway IP address of a

computer
OS example: Windows 7
Step 1 Right-click the icon on the bottom-right corner of the desktop.

Step 2 Click Open Network and Sharing Center.

Step 3 Click Local Area Connection, then click Details…

1
2

----End

185
 Document Version: V2.2

Then you can check the default gateway address on the following page.

186