devolo dlan pro WiFi ac

Transcription

1 dlan pro WiFi ac

2 devolo dlan pro WiFi ac

3 2015 devolo AG Aachen (Germany) While the information in this manual has been compiled with great care, it may not be deemed an assurance of product characteristics. devolo shall be liable only to the degree specified in the terms of sale and delivery. The reproduction and distribution of the documentation and software supplied with this product and the use of its contents is subject to written authorization from devolo. We reserve the right to make any alterations that arise as the result of technical development. Trademarks HomePlug is a registered trademark of HomePlug Powerline Alliance. Linux is a registered trademark of Linus Torvalds. Ubuntu is a registered trademark of Canonical Ltd. Windows and Microsoft are registered trademarks of Microsoft, Corp. Wi-Fi, Wi-Fi Protected Access TM, WPA TM, WPA2 TM and Wi-Fi Protected Setup TM are registered trademarks of the Wi-Fi Alliance. devolo, dlan, Vianect and the devolo logo are registered trademarks of devolo AG. The firmware package from devolo contains files which are covered by different licenses, in particular under devolo proprietary license and under open source license (GNU General Public License, GNU Lesser General Public License or FreeBSD License). The source code which is available for Open Source distribution can be requested in writing from gpl@devolo.de. All other names mentioned may be trademarks or registered trademarks of their respective owners. Subject to change without notice. No liability for technical errors or omissions. devolo AG Charlottenburger Allee Aachen Germany Aachen, September 2015 Version 1.1_9/15

4 Contents Contents 1 Preface About this manual Intended use CE conformity Safety notes devolo on the Internet Introduction What exactly is dlan? What is WLAN? Wi-Fi or WLAN? What is VLAN? The dlan pro WiFi ac Sample applications dlan pro WiFi ac as a Wi-Fi access point dlan pro WiFi ac as a Wi-Fi client dlan pro WiFi ac and VLAN Initial use Package contents System requirements The dlan pro WiFi ac Encryption button Wi-Fi button Ethernet ports Reset Wi-Fi antennas Integrated electrical socket Connecting the dlan pro WiFi ac Single Kit Expanding an existing dlan pro network

5 Contents Starter Kit and Single Kit Setting up a new dlan pro network dlan AVpro manager Software for Windows and Linux Remove dlan pro WiFi ac from the dlan pro network Network configuration Calling up the built-in configuration interface Menu description Status overview dlan status Wi-Fi status Ethernet status Device configuration Device security Network settings dlan settings Time server LED settings Wi-Fi configuration Access point with shared settings for 2.4 GHz and 5 GHz Wi-Fi basic settings Access point with separate settings for 2.4 GHz and 5 GHz Wi-Fi time control Wi-Fi Protected Setup (WPS) Wi-Fi client VLAN configuration Create VLAN Overview of configured VLANs VLAN port settings VLAN and multi-ssid

6 Contents 4.7 Management Resetting the configuration Saving a configuration file Restoring a configuration Update firmware Restart device Licence information Appendix Bandwidth optimization Disposal of old devices Warranty conditions

7 Contents

8 1Preface Thank you for placing your trust in this product. devolo dlan business solutions are a favourably priced option to establish a broadband IP network in a building using the power grid or according to the dlan pro product also coax lines or two-wire lines Positioning anywhere in a building is possible due to the flexibility of dlan pro networking over an existing power line: even areas without a network connection are perfectly integrated this way. dlan can be used as an easily scalable, primary network as well as to supplement an existing infrastructure. The advantage this brings is obvious: no new cables have to be laid expenditure and costs remain low. 1.1 About this manual Preface 7 Carefully read all instructions before setting up the device and store the manual and/or installation guide for later reference. After a brief introduction to "dlan", "Wi-Fi" and "VLAN" basics, a presentation of the dlan pro WiFi ac with sample applications in Chapter 2, Chapter 3 will cover successfully setting up your dlan pro WiFi ac. Chapter 4 describes in detail the setting options of the built-in configuration interface and thereby also access to the dlan, VLAN and Wi-Fi. Tips for bandwidth optimization, information of environmental compatibility of the device and our warranty conditions can be found in Chapter 5 and conclude the manual. You can find the technical data for the dlan pro WiFi ac on the Internet under Description of the symbols Here we briefly describe the meaning of the symbols used in this manual. Very important note. Failure to observe this note may result in damage. Important note that should be observed. Additional information, background material and configuration tips for your device.

9 8 Preface Intended use Use the adapter as described in these instructions to prevent damage and injuries. The device is designed for indoor use only CE conformity This product complies with the technical requirements of the directive 1999/5/EC (R&TTE), the EMC directive 2004/108/EC and the other relevant provisions of the FTEG. This product is designed for use in the EU, Switzerland and Norway. The product is class A equipment. Class A devices may cause interference when used in residential environments. "99/05/CE" (R&TTE directive) is a directive similar to the EMC directive. It applies to radio equipment and telecommunication terminal equipment.observance of these directives is verified by the use of harmonized European norms. You can find the CE declaration of this product on the enclosed product CD or under Safety notes It is essential to have read and understood all safety and operating instructions before the devolo device is used for the first time; keep them safe for future reference. DANGER due to electricity Users should never open devolo devices. Opening the device poses a risk of electric shock! Users do not need to carry out any maintenance on devolo devices. In the event of damage, disconnect the devolo device from the mains supply by pulling it or its plug out of the power outlet. Then contact qualified specialist personnel (after-sales service) exclusively. Damage is deemed to have occurred, for example, if the power plug is damaged if the devolo device has been showered with liquid (e.g. rain or water). if the devolo device is inoperable. if the housing of the devolo device is damaged. devolo devices may only be operated using a mains power supply, as described on the nameplate. To disconnect devolo devices from the mains supply, pull the device itself or its mains plug from the power

10 outlet. The power outlet and all connected network devices should be easily accessible so that you can pull the mains plug quickly if needed. Only use devolo devices at a dry location. Disconnect devolo devices from the mains supply to clean! Avoid solvent cleaning agents since they can cause damage to the housing. Only use a dry towel for cleaning. DANGER due to overheating Multiple devolo devices must not be interlocked. devolo devices should only be installed at locations that guarantee adequate ventilation. Slots and openings on the housing are used for ventilation: Do not cover devolo devices when operating. Do not place any objects on devolo devices. Do not insert any objects into the openings of devolo devices. devolo devices must not be placed directly next to an open flame (such as fire or candles). devolo devices must not be exposed to direct heat radiation (e.g. radiator, direct sunlight). 1.2 devolo on the Internet Preface 9 For detailed information on our products, visit The devolo business area not only contains product descriptions and documentation, but also updates of devolo software and your device's firmware. We especially recommend the descriptions of the "dlan pro network," which are arranged according to Application, Sectors and Integration, where you can find lots of interesting background information. If you have any further ideas or suggestions related to our products, please don't hesitate to contact us at support@devolo.com!

11 10 Preface

12 2Introduction dlan is an intelligent, secure technology that lets you set up a home network easily, quickly and economically via your household electrical wiring, without the need for complex and expensive dedicated cabling. The available performance and effort required for the installation also compares favourably to traditional methods. 2.1 What exactly is dlan? dlan (direct Local Area Network) uses the household power grid to transfer data between computers equipped with suitable adapters and other network components. As a result, any power outlet can be used as a network access point. The data is modulated prior to transfer and sent as a signal via household power lines. State-of-the-art technology ensures that the power and data networks do not interfere with one another. Networking via dlan is fast and secure. The data is encrypted using a key (128-bit-AES encryption) to prevent interception by third parties. 2.2 What is WLAN? WLAN (Wireless Local Area Network) refers to the use of radio technology to network computers and other Introduction 11 devices. While it is possible to wirelessly connect computers in pairs (peer-to-peer, p2p), a central access point is required to set up a network of multiple devices. Such access points are frequently combined in a single device with modems for Internet access and routers to manage network traffic. The wireless network established by an access point using a specific channel and name (SSID) has a limited range. The range of the access point, which is also known as a "radio cell", is impeded by building walls. In some cases, stable connections are often only possible between WLAN devices within a single room. As it is not possible to rely on hardware such as network cables (in a LAN) or household wiring (in a dlan) to control access to a WLAN, wireless networking naturally presents special security challenges. WLANs therefore use a number of security measures, such as a concealed network name (SSID), data encryption and access control via the MAC addresses of the network clients Wi-Fi or WLAN? Wi-Fi is an brand name of the Wi-Fi Alliance, a consortium that certifies devices with wireless interfaces. In many countries, Wi-Fi is also used synonymously with WLAN, which if taken strictly, is incorrect, because Wi-

13 12 Introduction Fi designates the wireless standard and WLAN the wireless network. 2.3 What is VLAN? A VLAN (Virtual Local Area Network, IEEE 802.1Q) is a logical, self-enclosed, local network unlike a physical (switched) network. VLANs divide physical networks into multiple logical, independent networks. They optimise data distribution and make it easier to set up network architecture that is more secure and arranged more clearly. Using VLANs prevents the need for complicated physical wiring. This gives you greater spatial flexibility and saves you having to purchase multiple costly individual devices (e.g. routers, switches). Different criteria can be used for mapping to VLANs, such as port assignments or addresses. The dlan pro WiFi ac allows VLANs to be mapped by port and/or access point. Other mapping methods by third-party devices using "VLAN tags" are also supported. In addition, it is possible to prioritise data traffic in the VLAN configuration. 2.4 The dlan pro WiFi ac Innovative access point for network-compatible terminal devices; whether dlan, Wi-Fi or classic network cable: every device can be connected! Developed for use in businesses; already tried and tested in a multitude of sectors such as offices and production. Fig. 1 is country-specific Remote management via the devolo dlan AVpro manager software. Optimal modification of the device for any usage scenario through network ports that can be disabled and the deactivation of the function buttons on the device. The dlan powerline technology uses the internal power line and thus enables flexible posi-

14 Introduction 13 tioning of the dlan pro WiFi ac everywhere in the building Mbps (gross) connection for fast data transmission via dlan MIMO technology for the best transmission and reception performance. Optimal dlan security with a 128-bit AES encryption. Easy set-up of Wi-Fi zones (Wi-Fi access points and wireless hotspots) via four internal Wi-Fi antennas: support of the high-speed standards IEEE a/b/g/n/ac, Mbps (gross) in Wi-Fi operation, professional Wi-Fi security management with support for WPA/WPA2 and Enterprise Mode (IEEE 802.1X). 2 Gigabit Ethernet ports Supporting parallel operation of 2.4 GHz and 5GHz. Lowering the transmitting power e. g. if you do not require a large range. For example, if the client is in the same room as the dlan pro WiFi ac. Separation of user groups and granular access control through access points (Multi SSID) and VLAN.

15 14 Introduction 2.5 Sample applications dlan pro WiFi ac as a Wi-Fi access point By default, the dlan pro WiFi ac is configured as a Wi-Fi access point and makes the dlan pro network connected via the mains outlet available wirelessly or by Ethernet to other client devices, such as laptops, IP radios or IP telephones. This is particularly practical if not all client stations are within range of a Wi-Fi access point, for example because concrete walls disrupt the signal. With dlan various rooms can be easily connected via the mains supply. And using the dlan pro WiFi ac, every mains outlet can be turned quickly and easily into a Wi- Fi connection with excellent reception quality. The following illustration shows how the Internet connection is set up using the dlan pro WiFi ac and a router, and how the connection within the network is set up using additional dlan pro devices.

16 Introduction 15 Fig. 2

17 16 Introduction dlan pro WiFi ac as a Wi-Fi client Alternatively, the dlan pro WiFi ac can also be configured as a Wi-Fi client. In this case, the device connects an existing Wi-Fi network with the other devices in the dlan pro network. The following illustration shows how you can establish a connection wirelessly (Wi-Fi) between two buildings using two dlan pro WiFi ac. Fig. 3: Building connection via Wi-Fi To ensure that the dlan pro WiFi ac functions optimally and reliably as a Wi-Fi client, the device must be operated in Wi-Fi networks consisting of devolo dlan pro Wireless or WiFi devices.

18 Introduction dlan pro WiFi ac and VLAN Using the VLAN function, the dlan pro WiFi ac can establish more complex network architecture. The following illustration shows a building with a single physical network architecture that in turn has to be used by two different companies separately and isolated. separate VLAN. Here, each data packet sent over the dlan pro network is given a VLAN tag specific to each dlan pro WiFi ac. Each VLAN tag contains a unique VLAN ID: The VLAN of the Bergmann company, for example, uses a VLAN CO. Schmitz VLAN CO. Bergmann VLAN CO. Schmitz Fig. 3: Rented offices All network-compatible devices are connected on a single dlan pro network and share a broadband connection and a VLAN-capable router. All data traffic from each company in this building is contained in a

19 18 Introduction VLAN ID of "100" while the VLAN of the Schmitz company uses a VLAN ID of "200". The dlan pro WiFi ac of the Bergmann company only receives data packets with the VLAN ID of "100", and respectively, the dlan pro WiFi ac of the Schmitz company Configuration of CO. Bergmann

20 Introduction 19 only receives data packets with the VLAN ID of "200". This configuration ensures that each company has access only to its own assigned data traffic even though all data runs through the same, commonly used physical network. The advantages are obvious: The cost and burden of installing and operating multiple broadband access points are eliminated. The network infrastructure is quickly and easily reconfigured to match changes in room assignments. Complicated installation/uninstallation of network devices and the need to patch connections are eliminated. You can find a detailed description for the VLAN configuration under 4.6 VLAN configuration. Configuration of CO. Schmitz

21 20 Introduction

22 3Initial use This chapter covers everything you need to know to set up your dlan pro WiFi ac. We provide a description of how the device is connected, its functions and briefly introduce the included devolo software. 3.1 Package contents Please ensure that the delivery is complete before beginning with the installation of your dlan pro WiFi ac. Single Kit: dlan pro WiFi ac Hard copy of installation guide CD containing documentation, configuration software and CE declaration or Starter Kit: dlan pro WiFi ac dlan pro network cable Hard copy of installation guide CD containing documentation, configuration software and CE declaration Initial use 21 devolo AG reserves the right to change the package contents without prior notice. 3.2 System requirements All operating systems with network support dlan AVpro manager: Windows 7 Professional SP1 (x86/x64), Windows 8.1 Pro (x86/x64), Windows 10 (x86/x64), Ubuntu LTS "Precise Pangolin" (x86/x64), Ubuntu "Raring Ringtail" (x86/x64), Ubuntu 14.04, OpenSuse 12.3 (x86/x64) Network connection To set up a dlan pro network, you need at least two dlan pro devices (200 Mbps, 500 Mbps, or 1200 Mbps). 3.3 The dlan pro WiFi ac The dlan pro WiFi ac is equipped with An encryption button (home icon) with LED status display A Wi-Fi button with LED status display The LED status display can be deactivated on the configuration interface of the device (see LED settings).

23 22 Initial use Two Ethernet ports One reset button Four internal Wi-Fi antennas and One integrated electrical socket Fig. 5 is country-specific Encryption button This button controls the following functions: Encrypting the dlan pro network To encrypt your dlan pro network individually, press each encryption button on the connected devices for approximately 1 second within 2 minutes. To remove a dlan pro device from your network, press the encryption button on the corresponding device for at least 10 seconds. For more information about this, refer to Chapters 3.4 Connecting the dlan pro WiFi ac or 3.6 Remove dlan pro WiFi ac from the dlan pro network. Indicator lights The integrated indicator lights (LEDs) show the dlan status for the dlan pro WiFi ac by illuminating and/or flashing: The LED flashes red quickly at regular intervals if the dlan pro WiFi ac is connected to the mains supply but there is no dlan connection. Check whether the device is connected to the mains supply correctly and whether the encryption process has been carried out successfully. For more information about this, refer to 3.4 Connecting the dlan pro WiFi ac. The LED lights up white if the dlan pro WiFi ac is ready to operate and a dlan connection exists.

24 Initial use 23 The LED flashes white quickly at regular intervals if the encryption process (pairing) is being performed in the dlan pro network. The LED flashes white at irregular intervals if the dlan pro WiFi ac is in PowerSave mode. The LED flashes red at regular intervals if the transmission rate of the dlan pro WiFi ac is not in the optimum range. For information on improving the transmission rate, refer to Chapter 5.1 Bandwidth optimization Wi-Fi button The Wi-Fi button controls the following Wi-Fi functions: Wi-Fi On/Off: In the factory default settings, the Wi-Fi setting is already enabled and the Wi-Fi encryption is set to WPA2. The default WiFi key for the initial installation of the dlan pro WiFi ac is the device's WiFi key. You will find the unique key on the label on the back of the housing. Fig. 6 Note the WiFi key of the dlan pro WiFi ac before the networking procedure. You will find the device's unique key (WiFi key) on the label on the back of the housing. In order to connect the dlan pro WiFi ac with your laptop later via Wi-Fi, tablet or smartphone, enter the noted WiFi key as the network security key. In order to switch Wi-Fi off, press and hold the Wi-Fi button longer than 3 seconds.

25 24 Initial use In order to switch Wi-Fi back on, tap the Wi-Fi button. Connecting Wi-Fi devices via WPS If the device is still on factory defaults, tap the Wi-Fi button in order to activate WPS. If the Wi-Fi connection was switched off and you would like to activate WPS, press the Wi- Fi button twice; once to switch Wi-Fi on, and again to activate WPS. WPS is one of the encryption standards developed by the Wi-Fi Alliance. The objective of WPS is to make it easier to add devices to an existing network. For more detailed information, refer to Chapter Wi-Fi Protected Setup (WPS). Indicator light The integrated indicator light (LED) shows the Wi-Fi status for the dlan pro WiFi ac by illuminating and/or flashing: When the Wi-Fi connection is switched off, the LED is also off. When a Wi-Fi connection is switched on, the LED lights up white. White flashing and illumination behaviour The LED lights up when there is a connection to the Wi-Fi network. The LED flashes until the WPS pairing is completed Ethernet ports The two network jacks can be used to connect computers or other network devices to the dlan pro WiFi ac via commercially available network cables Reset The Reset button (on the side of the housing) has two different functions: The device restarts if you press the Reset button for less than 10 seconds. To change the configuration of the dlan pro WiFi ac back to the factory defaults, press the Reset button for more than 10 seconds. Keep in mind that all settings that have already been configured will be lost! You can use a pointed object (such as a paper clip) to press the reset button.

26 Initial use Wi-Fi antennas The internal Wi-Fi antennas are for connecting to other network devices wirelessly Integrated electrical socket If you connect additional devices using a power strip, plug this power strip into the electrical socket of the dlan pro WiFi ac. The integrated mains filter eliminates any noise of connected devices and significantly improves data transmission in the network. 3.4 Connecting the dlan pro WiFi ac The device may be used only indoors. Note the WiFi key of the dlan pro WiFi ac before the networking procedure. You will find the device's unique key (WiFi key) on the label on the back of the housing. In order to connect the dlan pro WiFi ac with your laptop later via Wi-Fi, tablet or smartphone, enter the noted WiFi key as the network security key. In the following sections we describe how to connect the dlan pro WiFi ac and integrate it into the network. We clarify the exact procedures based on potential network scenarios: Single Kit Expanding an existing dlan pro network Plug the dlan pro WiFi ac into a wall socket. The device is ready to operate once the indicator light of the encryption button with the home icon turns white (after approximately 45 seconds). To disconnect the dlan pro WiFi ac from the mains supply, unplug the device from the electrical socket. The power outlet and all connected network devices should be easily accessible so that you can pull the mains plug quickly if needed. Integrating the dlan pro WiFi ac into an existing dlan pro network Before you can use the dlan pro WiFi ac in your dlan pro network, first you have to connect it to your existing dlan pro devices as a network. This is accomplished by using the shared dlan password. This

27 26 Initial use forms a delimited dlan pro network. Shared use of the dlan password serves as access control to the dlan pro network as well as the encryption, and thereby the interception protection, of the transmitted data. The dlan password can be set in different ways: dlan pro network encryption at the touch of a button (home icon) First press the encryption button (for about 1 second) on a device in your existing network and then, within 2 minutes, press the encryption button with the home icon (for about 1 second) on the new dlan pro WiFi ac. The new dlan pro WiFi ac is now integrated into your existing dlan pro network. or dlan pro network encryption using dlan AVpro manager computer software. More information can be found in Chapter 3.5 dlan AVpro manager. or dlan pro network encryption by entering the dlan password in the configuration interface. More information can be found in Chapter 4.4 Device configuration. Integrating the dlan pro WiFi ac into an existing Wi-Fi network Establish the Wi-Fi connection with your laptop, tablet or smartphone and enter the noted Wi- Fi key as the network security key. By default, the SSID (e.g. devolo-d7e-3) consists of "devolo", "the last three digits of the Wi-Fi MAC-address" and the "numbering of the respective access point". For more information on the SSID, refer to Chapter 4.5 Wi- Fi configuration Access point Settings. Fig. 7 For the dlan pro WiFi ac to show the same Wi-Fi configuration as your Wi-Fi router, you can apply the router's Wi-Fi access data for the

28 Initial use 27 dlan pro WiFi ac either manually or using the WiFi Clone function on the configuration interface. More information on the function and activation of WiFi Clone can be found in Chapter Network settings Access point Settings. To integrate the dlan pro WiFi ac into an existing Wi-Fi network with dlan pro wireless devices of the 500 series (e.g. dlan pro 500 Wireless+), you have to transfer the settings of your existing Wi-Fi configuration manually to the configuration interface of the dlan pro WiFi ac. For more information on the configuration interface, refer to Chapter 4 Network configuration Starter Kit and Single Kit Setting up a new dlan pro network Connect the dlan pro to your Internet access device's network jack. Plug the dlan pro WiFi ac into a wall socket. The device is ready to operate once the indicator light of the encryption button with the home icon turns white (after approximately 45 seconds). To disconnect the device from the mains supply, unplug the device from the electrical socket. The power outlet and all connected network devices should be easily accessible so that you can pull the mains plug quickly if needed. Connecting the dlan pro and a dlan pro WiFi ac as a dlan pro network Before you can use the device in a dlan pro network, first you have to connect it as a network. This is accomplished by using a shared dlan password. This forms a delimited dlan pro network. Shared use of the dlan password serves as access control to the dlan pro network as well as the encryption, and thereby the interception protection, of the transmitted data. The dlan password can be set in different ways: dlan pro network encryption at the touch of a button

29 28 Initial use First press the encryption button (for about 1 second) of dlan pro and then, within 2 minutes, press the encryption button with the home icon (for about 1 second) of dlan pro WiFi ac. Your dlan pro network is now set up and protected against unauthorised access. or dlan pro network encryption using dlan AVpro manager computer software. More information can be found in Chapter 3.5 dlan AVpro manager. or dlan pro network encryption by entering the dlan password in the configuration interface. More information can be found in Chapter 4 Network configuration. Fig. 8 Integrating additional dlan pro WiFi ac devices into a Wi-Fi network Establish the Wi-Fi connection with your laptop, tablet or smartphone by entering the previously noted WiFi key as the network security key. For the dlan pro WiFi ac to show the same Wi-Fi configuration as your Wi-Fi router, you can apply the router's Wi-Fi access data for the

30 Initial use 29 dlan pro WiFi ac either manually or using the WiFi Clone function on the configuration interface. More information on the function and activation of WiFi Clone can be found in Chapter 4 Network configuration Access point Settings. To individually secure your Wi-Fi network, configure the appropriate settings on the configuration interface of the dlan pro WiFi ac. To do so, read Chapters 3.5 dlan AVpro manager and 4 Network configuration. For detailed information about connecting other devolo dlan pro devices, visit: dlan AVpro manager The dlan AVpro manager provides advanced dlan functions, such as: Management software to support the user during configuration and monitoring Central administration interface with beginner and expert mode Real time monitoring of all the dlan pro devices in the network Global or individual assignment of security settings for databases and devices MDU mode for master/slave networks and peerto-peer networks VLAN configuration for subnet management For detailed descriptions and information on configuration of your dlan pro network please consult the dlan AVpro manager manual Software for Windows and Linux To install the dlan AVpro manager configuration software, insert the provided CD-ROM into your computer's CD drive and follow the instructions of the installation wizard. Then you will find the link to the configuration interface as well as the installed dlan AVpro manager in the program group Start All Programs devolo.

31 30 Initial use 3.6 Remove dlan pro WiFi ac from the dlan pro network To remove a dlan pro WiFi ac device from an existing network, press this device's encryption button with the home icon for at least 10 seconds. The device will be assigned a new randomly generated password and will thus no longer be able to access the network. To integrate the device into a different network, follow the steps described above, depending on whether you are setting up a new network or adding the device to an existing one.

32 4 Network configuration The dlan pro WiFi ac has a built-in configuration interface that can be called up using a standard web browser. All settings for operating the device can be modified here. 4.1 Calling up the built-in configuration interface You will arrive at the built-in configuration interface of the dlan pro WiFi ac by using the dlan AVpro manager program under Start All Programs devolo dlan AVpro manager. Under Expert mode Unused devices or in the Network view, call up the context menu (right-click on the device) of the dlan pro WiFi ac and click the Open configuration website entry to select it. Then the program determines the current IP address and starts the configuration in the web browser. By default, the configuration interface will open directly. However, if a login password was set via the option Device configuration Device security, you have to enter this first. Read more about this under Device security. 4.2 Menu description Network configuration 31 All menu functions are described in the corresponding interface as well as in the associated chapter in the manual. The sequence of the description in the manual follows the structure of the menu. Click Save to save the settings of the respective area of the configuration interface. Click Back or use the Menu path above the buttons to exit the actual configuration interface area. Select the desired language in the language selection list.

33 32 Network configuration The five central areas of the configuration interface are displayed on the left edge. Click the button of an area to move directly into it.

34 Network configuration 33 In the Status overview area, you get general information about all connected dlan, Wi-Fi and LAN devices. You can make the various device settings for security, network, dlan and time under Device configuration. You can modify Wi-Fi settings in the Wi-Fi configuration area. You can make VLAN settings in the VLAN configuration area. The Management section is for resetting, securing and restoring your individual configurations. In addition, you can update the firmware of your dlan pro WiFi ac here, restart the device and view the license information. 4.3 Status overview In the Status overview area you can track the status of your connected dlan, Wi-Fi and LAN devices.

35 34 Network configuration

36 Network configuration dlan status To display all connected dlan devices, click either the house icon or the dlan devices arrow. Each connected dlan device, regardless of whether it is connected locally or remote in the network, is displayed with its MAC address. Clicking the lock icon brings you directly to the dlan settings (see dlan settings) Wi-Fi status Clicking the Wi-Fi icon brings you directly to the Wi-Fi configuration area (see 4.5 Wi-Fi configuration), where you can configure settings for Wi-Fi network security. Using Mode, Number of access points and Connected stations for each frequency band, you can also see the current Wi-Fi status of the device.

37 36 Network configuration Click on the Wi-Fi devices arrow to have all of the connected Wi-Fi devices displayed. Each connected Wi-Fi client is displayed with its MAC address Ethernet status The status and connection speed for the two network jacks are shown in this area.

38 4.4 Device configuration In the configuration area of the device you can modify settings for security, network, dlan, date and time, as well as for the LEDs. Network configuration 37

39 38 Network configuration Device security In this area you can control the access to the configuration interface as well as enable and disable the functions of the interfaces and buttons on the dlan pro WiFi ac. Password You can set a login password for access to the configuration interface. By default, the built-in configuration interface of the dlan pro WiFi ac is not protected with a password. However, we recommend assigning a password when the installation of the dlan pro WiFi ac is complete to protect it against tampering by third parties. To do so, first enter (if present) the current password and then enter the desired new password twice. Now the configuration interface is protected against unauthorised access with your custom password!

40 Network configuration 39 Call up the configuration interface again later; the following window appears first: Enter admin in the User name field and your custom password in the Password field. The admin user name cannot be changed.

41 40 Network configuration Interfaces You can enable or disable the interface on the dlan pro WiFi ac by enabling or disabling the corresponding options. Note that the dlan pro WiFi ac is only available via Wi-Fi as soon as the interfaces listed here are switched off. Buttons You can enable and disable the Wi-Fi and dlan button functions on the dlan pro WiFi ac by enabling or disabling the option The Wi-Fi and dlan housing buttons are disabled Network settings As a component of your network, the dlan pro WiFi ac also communicates via the TCP/IP protocol. The IP address required for this can either be entered manually as a static address or obtained automatically from a DHCP server. The option Use network settings provided by a DHCP server is enabled in the factory defaults. The currently assigned network data is visible (greyed out). If a DHCP server is already present in the network for giving out IP addresses, have the option Use network settings provided by a DHCP server enabled so that the dlan pro WiFi ac automatically receives an address from it. You can also assign a static IP address by specifying an IP address, Netmask, Default gateway and Name server.

42 Network configuration dlan settings In a dlan pro network, all connected components must use the same password. The dlan password can be defined using dlan AVpro manager, via the dlan encryption button (see chapter 3.3 The dlan pro WiFi ac) or on the configuration interface (see chapter dlan settings). If the dlan password is set using dlan AVpro manager or via the dlan encryption button, you can disregard the dlan settings on the configuration interface, since the password is automatically forwarded.

43 42 Network configuration The dlan pro WiFi ac automatically changes to save energy status when no Ethernet connection is active and Wi-Fi is switched off. Activate the Allow power saving mode option, and enter a desired wait time in minutes, after which the dlan pro WiFi ac should change into save energy status.

44 Network configuration Time server A time server is a server on the Internet whose task consists of providing the exact time. Enable the option Retrieve date and time automatically, so that the dlan pro WiFi ac can automatically synchronise the date and time. Select your Time zone and the Time server. If you have enabled the option Adjust to daylight savings time automatically, the dlan pro WiFi ac automatically adjust to daylight savings time.

45 44 Network configuration LED settings Activate the Switch off LEDs option if they are intended to be switched off. 4.5 Wi-Fi configuration You can make all necessary Wi-Fi settings in the Wi-Fi configuration area. The device features the modes Wi-Fi off, Access point and Wi-Fi client. It supports the Standard frequency band of 2.4 GHz as well as the increased frequency band of 5 GHz. Access point In Access point mode, you can select whether you would like to use both frequency bands together, and thus configure them identically, or whether you would like to use and configure both frequency bands separately. To use both frequency bands together, activate the Use shared settings for 2.4 GHz and 5 GHz option. Disable the Use shared settings for 2.4 GHz and 5 GHz and confirm with Save to use and configure the frequency bands separately. If you change the settings later from separate to shared use, the 2.4 GHz frequency band Wi-Fi settings are automatically applied. For security reasons, you can also view and edit all access point settings of the device when the Wi-Fi function is deactivated (see Wi-Fi off). This lets you configure all of your Wi-Fi settings at your own pace before re-activating the Wi-Fi function.

46 Network configuration 45 Wi-Fi client The Wi-Fi client mode can only be selected if the frequency bands are to be configured separately. To ensure that the dlan pro WiFi ac functions optimally and reliably as a Wi-Fi client, the device must be operated in Wi-Fi networks consisting of devolo dlan pro Wireless or Wi-Fi devices. Wi-Fi off If you would like, you can completely shut off the Wi-Fi part of your dlan pro WiFi ac, e.g. if you want to operate it exclusively as a simple dlan device via the built-in Ethernet connections. To do so, under Wi-Fi configuration, deactivate the Activated option and confirm your entry with Save or simply press the Wi-Fi ON/OFF button on the housing. The 2.4 GHz or 5 GHz frequency bands can also be turned on or off separately. Keep in mind that after saving this setting, you will be disconnected from any existing wireless connection to the dlan pro WiFi ac. In this case, configure the device via Ethernet or dlan. The operating state of the device is displayed under 4.3 Status overview. With the factory defaults, the device is configured as an access point and the Use shared settings for 2.4 GHz and 5 GHz option is activated.

47 46 Network configuration

48 Network configuration Access point with shared settings for 2.4 GHz and 5 GHz If you would like the dlan pro WiFi ac to act as an access point, select Access point mode under Wi- Fi configuration and confirm your entry with Save. The operating state of the device is displayed under 4.3 Status overview.

49 48 Network configuration

50 Network configuration Wi-Fi basic settings Set the channel selection, the transmitting power and the RADIUS server in the Wi-Fi basic settings.

51 50 Network configuration Channel selection In this setting (Shared use of the frequency bands), the default setting Auto is selected in the channel selection and cannot be changed. The dlan pro WiFi ac regularly and automatically executes the channel selection in this setting. In other words, if the last connected station logs out, a search for a suitable channel is carried out immediately. If no stations are connected, the device automatically selects a channel every 15 minutes. Pay attention to the various LED behaviours of the Wi-Fi LED. For more information, refer to chapter Wi-Fi button. Lowering the transmitting power In this section, you can adjust the Wi-Fi transmission level to your needs. I.e. if you do not require a large range. For example, if you are in the same room as the dlan pro WiFi ac, select low power. RADIUS server In addition to the WPA/WPA2 encryption key, the dlan pro WiFi ac supports the WPA/WPA2 Enterprise Mode (see Security (encryption). In addition to the access point, there is also the RADIUS server in Enterprise mode. As a central authentication server, it assumes the user administration for multiple access points. If you would like to use a RADIUS server, designate it by assigning a name or IP, RADIUS port and RADI- US key. Access point Settings The dlan pro WiFi ac supports up to 7 access points (Multi-SSID), each with two frequency bands of 2.4 GHz and 5 GHz, i.e. you can use the dlan pro WiFi ac to operate 14 Wi-Fi networks. Click Edit on the respective access points to arrive at the security settings. For security reasons, you can also view and edit all access point settings of the device when the Wi-Fi function is deactivated (see Wi-Fi off). This lets you configure all of your Wi-Fi settings at your own pace before re-activating the Wi-Fi function.

52 Network configuration 51

53 52 Network configuration To enable a Wi-Fi network, select Enable this access point. The SSID specifies the name of your wireless network. You can see this name when logging onto the Wi-Fi, allowing you to identify the correct subnet. By default, the SSID (e.g. devolo-d7e-8) consists of devolo, the last three digits of the Wi-Fi MAC-address and the numbering of the respective access point. If you enable the Hide SSID option, your wireless network name remains hidden. In this case, potential network users must know the exact SSID and enter it manually to be able to set up a connection. A change to the SSID can interfere with all existing connections for a short time. Some Wi-Fi clients have difficulty connecting to such hidden wireless networks. If the connection to a hidden SSID poses problems, first try to set up the connection with a visible SSID and only then try to hide it. Depending upon the application scenario, security considerations may mean that it is to be forbidden for all devices to exchange data freely with each other. For this purpose, the option No data forwarding between Wi-Fi stations can be activated, which implements a genuine "peer-to-peer isolation"; all Wi-Fi devices configured as client are not able to exchange any data with each other, but only with the dlan pro WiFi ac. Fig. 9 The factory defaults have this option disabled, i.e. all Wi-Fi devices present in the network can freely exchange data with each other ("peer-to-peer" mode). Wi-Fi filters In addition to encryption, you can secure your wireless network even more by using a Wi-Fi filter to limit access via Wi-Fi to the dlan pro WiFi ac for selected devices. Even if the encryption is switched off, the device will not establish a connection.

54 Network configuration 53 The Wi-Fi filter should be used only as an additional option. By using it you could limit access to your wireless network, but without encryption it would be relatively easy for third parties to eavesdrop on all of your data transmissions. To use the Wi-Fi filter, enable the option Enable filters. Now you can enter various network devices individually or copy multiple network devices by means of what is known as your MAC address for access to your dlan pro WiFi ac. Confirm your action with Add. Network devices or stations connected to your dlan pro WiFi ac are automatically listed, that is, to enable an already connected station for the dlan pro WiFi ac, simply select the MAC address of the respective device and confirm it with Add. This then appears under Approved Wi-Fi stations. To remove an enabled station, select its MAC address and confirm it with Delete. The MAC address designates the hardware interface of each individual network device uniquely (e.g. the Wi-Fi card of a computer or the Ethernet port of a printer). It consists of six double-digit hexadecimal numbers, each separated by a colon (e.g. 00:0B:3B:37:9D:C4). In general, the MAC address is on the housing of the device. You can easily determine the MAC address of a Windows computer by opening the window with the command prompt under Start All Programs Accessories Command Prompt. Enter the command IPCONFIG /ALL here. The MAC address is displayed under the designation Physical address. After entering the MAC addresses, do not forget to click the Save button. If the entered values are incorrect, a corresponding error message is displayed. Keep in mind that you also have to enter the MAC address of your own computer if you are connected to the dlan pro WiFi ac not via the Ethernet port, but via Wi-Fi. Otherwise you will block your own access to the device via Wi-Fi by activating the Wi-Fi filter!

55 54 Network configuration If you enabled WPS, the access restriction is disabled by a MAC filter (see Wi-Fi Protected Setup (WPS)). Security (encryption) You should always encrypt the connections in your Wi- Fi network. Without encryption, not only are all data transmitted from client computers to the dlan pro WiFi ac in your wireless network without protection, but there is also no password prompt to establish the connection. If no other security measures were set up, such as a Wi-Fi filter (see Wi-Fi filters), third parties can gain access to your network at any time and, for example, share your Internet connection. Usually this happens without you noticing it. When activating the encryption, make sure that the Wi-Fi settings (SSID, encryption mode and encryption key) of the access point always correspond to the settings of the clients, as otherwise you will be (unintentionally) excluding devices from your network. To secure the data transmission in your wireless network there are two security standards available for the Access Point mode. The WPA and WPA2 (Wi-Fi Protected Access) methods allow individualised keys consisting of letters and numbers with a length of up to 63 characters. You can simply enter them via the keyboard. Under Mode, you can limit access of clients to the dlan pro WiFi ac to the method you have selected. In addition, the dlan pro WiFi ac also supports the WPA/WPA2 Enterprise Mode encryption key. As a central authentication server, (for multiple access points) the RADIUS server handles user administration (see RADIUS server). Enterprise Mode does not support any WPS. Save all modified settings before leaving this configuration area again. In the Factory defaults, the WPA/ WPA2 Wi-Fi encryption is configured with the WiFi Key as the Default WiFi key. You will find the 16-character security ID on the label on the back of the housing. WiFi Clone WiFi Clone lets you apply the Wi-Fi access data of an existing Wi-Fi access point (such as your Wi-Fi router) at the touch of a button. Start the procedure with the

56 Network configuration 55 Start setup option and then press the WPS button of the device with the Wi-Fi access data (SSID and Wi-Fi password) to be applied Access point with separate settings for 2.4 GHz and 5 GHz Disable the Use shared settings for 2.4 GHz and 5 GHz and confirm with Save to use and configure the frequency bands separately. If you change the settings later from separate to shared use, the 2.4 GHzfrequency band Wi-Fi settings are automatically applied. It is important to note that all of your connected devices also have to support the increased 5 GHz frequency band. From channel 52 onward you go into the radar range. When accessing the device for the first time, a radar detection phase starts automatically, during which the dlan pro WiFi ac cannot be accessed via Wi-Fi. For a description of the Wi-Fi basic settings and the safety settings of the access points, refer to chapters Wi-Fi basic settings and Security (encryption) Wi-Fi time control To be able to use the Wi-Fi time control, the option Retrieve date and time automatically must be enabled under Device configuration Date and time (see Time server). A time server must be accessible in the network. To be able to use the Wi-Fi time control, enable the option Enable time control. The time control automatically switches your wireless network on and off at certain times of the day. You can define two time periods during which your wireless network is to be enabled for each weekday. Then the time control automatically switches the wireless network on or off. If you activate the Automatic disconnection option, the wireless network remains switched on until the last client has logged off. The Wi-Fi time control settings apply to both frequency bands.

57 56 Network configuration

58 Network configuration Wi-Fi Protected Setup (WPS) Wi-Fi Protected Setup (WPS) is one of the international encryption standards developed by the Wi-Fi Alliance for easily and quickly setting up a secure wireless network. The encryption keys of the respective Wi-Fi client are transmitted automatically and continuously to the other Wi-Fi client(s) of the wireless network. The dlan pro WiFi ac offers two different variants for transmitting these encryption keys:

59 58 Network configuration Activate the WPS active option to switch on WPS and select the desired access point. WPS via PBC (Push Button Configuration) Start the encryption process on the dlan pro WiFi ac either by pressing the WPS button on the front panel of the device or by pressing the Start setup button on the user interface under Wi-Fi configuration Wi-Fi Protected Setup (WPS). Then press either the WPS key of the Wi-Fi client you are adding or the WPS button on the configuration interface. Now the devices exchange their encryption keys and establish a secure Wi-Fi connection. The Wi-Fi LED on the front panel indicates the synchronisation process by flashing. WPS via PIN: To interconnect Wi-Fi clients securely in your wireless network via PIN variants, enter an individualised key in the configuration interface under Wi- Fi configuration Wi-Fi Protected Setup (WPS) PIN and start the encryption process by pressing the Start setup button. Open the configuration interface of the Wi-Fi client to be added and transmit the PIN selected on the dlan pro WiFi ac. Confirm the encryption process as described there. Now the devices exchange their encryption keys and establish a secure Wi-Fi connection. The Wi-Fi LED on the front panel indicates the synchronisation process by flashing. The client can also create the PIN; this must then be entered onto the configuration interface of the dlan pro WiFi ac. Use of the WPS process implies WPA/WPA2. For that reason, keep in mind the following automatic settings depending on the encryption standard (also refer to Device security), i.e. if under Wi-Fi configuration Access Point, No encryption is selected in advance, WPA/ WPA2 is set automatically. The newly generated password is displayed under Wi-Fi configuration Access Point in the Key field. if under Wi-Fi configuration Access Point, WPA/WPA2 is selected in advance, this setting remains with the previously assigned password.

60 Network configuration Wi-Fi client If you would like the dlan pro WiFi ac to act as client, select Wi-Fi client mode under Wi-Fi configuration in the respective frequency band. As a Wi-Fi client, you can only use and configure the two frequency bands separately from each other. Confirm your entry with Save. The operating state of the device is displayed under 4.3 Status overview. If the Wi-Fi client mode is activated on both frequency bands, the display of Wi-Fi access points is removed from the status overview. You can find the description of the Wi-Fi time control setting in Chapter Wi-Fi time control.

61 60 Network configuration Settings In the SSID field, enter the SSID of the access point you would like to use for pairing. In addition, you can select the suitable encryption and enter the WPA/WPA2 key or the RADIUS authentication access data.

62 Network configuration 61 Security (encryption) The WPA/WPA2 (Wi-Fi Protected Access) security standard is available for the Wi-Fi client mode for securing data transmission in your wireless network. This method allows for individualised keys consisting of letters and numbers and the depicted special characters with a length of up to 63 characters. You can simply enter them via the keyboard. Under Mode, you can limit access of clients to the dlan pro WiFi ac to the method you have selected. In addition, the dlan pro WiFi ac also supports the WPA/WPA2 Enterprise Mode encryption key. As a central authentication server, (for multiple access points) the RADIUS server handles user administration. Enterprise Mode does not support any WPS. When activating the encryption, make sure that the Wi-Fi settings (SSID, encryption mode and encryption key) of the access point always correspond to the settings of the client, as otherwise you will be (unintentionally) excluding devices from your network. 4.6 VLAN configuration You can select whether you would like to disable the VLAN configuration completely or use it. To do so, press the Enable VLAN or Disable VLAN button. If VLAN is disabled, all Ethernet ports, the dlan port and the Wi-Fi access points are interconnected, i.e. in this operating mode the VLAN settings have no influence on the behaviour of the dlan pro WiFi ac. Save all modified settings before leaving this configuration area again. The factory defaults have the dlan pro WiFi ac configured as an access point and WPA/WPA2 Wi- Fi encryption is set with the security ID as the default WiFi key. You will find the 16-character security ID on the label on the back of the housing.

63 62 Network configuration

64 Network configuration Create VLAN The factory defaults have VLAN 1 configured with VLAN ID 1. You can configure additional VLANs under Create VLAN. In doing so, a VLAN (VLAN 1 to VLAN 16) has to be selected and a VLAN ID (1 to 4094) assigned. When creating VLANs, already assigned VLAN IDs cannot be assigned a second time. When configuring the VLANs and the VLAN port settings, the configuration interface of the dlan pro WiFi ac should remain accessible, i.e. configurable. If you ever "lock" yourself out in spite of this, the device has to be returned to the factory defaults by being reset (see the Reset section) Overview of configured VLANs You can see all configured VLANs here To delete a VLAN, first enable it and then confirm with Delete. It is not possible to delete all VLANs; one Management VLAN must remain configured.

65 64 Network configuration VLAN port settings The VLAN port settings are configured here. Multiple VLANs can be assigned to all ports. For detailed information about this, refer to the online FAQs on our website The behaviour of the port is configured via the columns Tx Force Untag, Rx Tagged only, the Port VLAN ID (PVID) and the Default Priority. Depending on the setting, the logical following dependencies are provided: The existing ports of the dlan pro WiFi ac are listed in the left column. The configured VLANs are listed in the row header with their respective VLAN ID. The ports can be assigned to the VLANs via the matrix. Ethernet and dlan Tx Force Untag not activated = outgoing frames from this port are, in relation to tagging, sent unchanged. Rx Tagged Only activated = only incoming tagged frames are received; PVID and Default Priority cannot be defined. Rx Tagged Only not activated = all incoming frames are received. PVID and Default Priority can be defined. Tx Force Untag and Rx Tagged Only activated = PVID and Default Priority cannot be defined.

66 Network configuration 65 Wi-Fi In the example of building networking (see dlan pro WiFi ac as a Wi-Fi client), you can also implement a VLAN trunk using Client mode. Tx Force Untag disabled = Rx Tagged Only automatically active If multiple VLANs are selected, Rx Tagged Only is activated automatically. The PVID is adjusted automatically. If only one VLAN is selected, PVID takes the value of the corresponding VLANs; if both are active, there is no more PVID. Under PVID, the Port VLAN ID is specified, which is assigned to received "untagged" frames. In the Rx setting, Tagged only is the configured PVID without meaning. Under Default Priority, the VLAN priority is specified, which is assigned to the received untagged frames. dlan. VLAN 1 remains the Management VLAN. To eliminate unwanted access on the intranet and the back-end, Ethernet ports in VLAN 2 are configured. When a client connects to dlan pro WiFi ac via Ethernet, it only has access to the Internet. Thus, the configuration of the dlan pro WiFi ac is also excluded via Ethernet. VLAN 2 (Internet), VLAN 3 (intranet) and VLAN 4 (back-end) are made accessible to clients via Wi-Fi VLAN and multi-ssid Using the functions VLAN and multi-ssid, the dlan pro WiFi ac can establish more complex network architectures. The following illustration shows a network of four devices, three access points (SSIDs) and four VLANs. The VLAN trunk is implemented via

67 66 Network configuration VLAN 1-4 public (VLAN 2) private (VLAN 3) services (VLAN 4) VLAN 1-4 public (VLAN 2) private (VLAN 3) services (VLAN 4) VLAN 4 VLAN 2 VLAN trunk VLAN 3 VLAN 1-4 VLAN 1-4 public (VLAN 2) private (VLAN 3) services (VLAN 4) public (VLAN 2) private (VLAN 3) services (VLAN 4) Fig. 10

68 Network configuration 67

69 68 Network configuration 4.7 Management In the Management area you can reset the current configuration to the factory defaults, save it to your computer as a file or restore it from there and update the firmware of the dlan pro WiFi ac. The device can also be restarted and the license information can be viewed.

70 Network configuration Resetting the configuration With the Management Reset configuration command, the dlan pro WiFi ac is reset to the original factory defaults. In doing so, you lose your personal settings. The last-assigned dlan password for the dlan pro WiFi ac is also reset. To re-secure your dlan pro network individually, read further at dlan settings. For backup purposes, all active configuration settings can be transmitted to your computer, stored there as a file and reloaded into the dlan pro WiFi ac. This function can be useful for creating a variety of configurations that will let you quickly and easily set up the device for use in different network environments.

71 70 Network configuration Saving a configuration file To save the enabled configuration to your computer as a file, select the corresponding button in the area Management Save configuration file. Then enter a storage location and name for the settings file.

72 Network configuration Restoring a configuration An existing configuration file can be sent to the dlan pro WiFi ac in the area Management Restore device configuration and enabled there. Select a suitable file via the Browse button and start the operation by clicking the Restore device configuration button.

73 72 Network configuration Update firmware The firmware of the dlan pro WiFi ac includes the software for operating the device. If necessary, devolo offers new versions on the Internet as a file download, for example to modify existing functions. To update the firmware to the latest version, first go to the devolo website, and download the appropriate file for the dlan pro WiFi ac to your computer. Then in the configuration dialogue, go to the area Management Update Firmware. Click Browse and select the downloaded file. Then start the update procedure with the Update Firmware button. After a successful update, the dlan pro WiFi ac restarts automatically. Ensure that the update procedure is not interrupted. To do so, it is best to connect your computer to the dlan pro WiFi ac via dlan or LAN rather than Wi-Fi.

74 Network configuration Restart device You can restart your dlan pro WiFi ac here by clicking Restart Licence information You can find information on licensing restrictions for this product here.