ARCFlex ARC OS Configuration Guide

From ARC Wireless Wiki

Jump to: navigation, search

Contents

Introduction

Info-icon.png Please Note: If using the FlexUSB™ on its own, simply install drivers located on the Software Downloads wiki page.

Warning-icon.png Important: You must have a javascript and Adobe Flash-enabled web browser in order to configure your ARCFlex™ device.

This configuration guide applies to all products running ARC-OS in the ARCFlex™ product line.

Select country of operation pop-up
Default Settings
The initial settings for your device can be found on the Default Settings page. Please review this page before continuing.
Web Access
To access the ARC OS web configuration UI, open your browser and browse to http://10.100.100.49 if connected to your installer network, or http://192.168.10.1 if you're connected to the private wireless network or by ethernet.

Selecting your Country of Operation

The first time you login to your device, a popup will be shown requiring you to select your country of operation. Selecting your country ensures the correct channel lists and power settings are chosen for your region.

This change will be permanent unless you reset to defaults.


General Navigation

Navigation Bar

ARCFlex™ Navigation Bar
This applies to the FreeStation™, iFlex™, SplitStation™, Flex mARC™

Toolbox
Utilities include ping, traceroute, w-wan site survey, traffic generator (iperf), and antenna alignment.
Status Tab
View connected clients, throughput graphs, network, and wireless status
WLAN Tab
Configuration settings for the 2.4 GHz AP radio on your device, as well as network extender.
WWAN Tab
Configuration settings for the 2.4 or 5 GHz CPE radio on your device. Only accessible on the Split mARC™, FreeStation™, and SplitStation™.
Network Tab
Network configuration settings for your device - change between bridge and router mode, set static routes, firewall rules, etc...
Services Tab
Configure services such as Ping Watchdog, SNMP, SSH, NTP, etc...
System Tab
Set device information, perform device maintenance, and change user account information.
Advanced Tab
Setup hotspot, limit traffic on the W-WAN, configure your InstallerNet network, and change ethernet port settings.:

FlexAP Navigation Bar

Toolbox
Utilities include ping, traceroute, w-wan site survey, traffic generator (iperf), and antenna alignment.
Status Tab
View connected clients, throughput graphs, network, and wireless status
WLAN Tab
Configuration settings for the 2X2 5 GHz AP radio on your device
WWAN Tab
Configuration settings for the optional 2.4 or 5 GHz FlexUSB radio (only visible if the FlexUSB is present)
Network Tab
Network configuration settings for your device - change between bridge and router mode, set static routes, firewall rules, etc...
Services Tab
Configure services such as Ping Watchdog, SNMP, SSH, NTP, Telnet, etc...
System Tab
Set device information, perform device maintenance, and change user account information.
Advanced Tab
Setup hotspot, limit traffic on the W-WAN, configure your InstallerNet network, and change ethernet port settings.

Info-icon.png Note: Pressing the "Refresh" button at the top of the page will only refresh the information on the currently selected tab.


Configuration Process

Save button

Saving Settings

Each tab has a save button at the bottom. Pressing the save button does not change the running state of the device - you must apply settings in order for them to take affect.

Applying Settings

Apply/Discard/Test Bar

Once you save any changes, you'll see a blue bar appear at the top of the page. Here you can apply the configuration changes by pressing the "Apply" button, or discard by pressing the "Discard" button. If you reboot your device before applying settings all changes will be lost.

Once settings have been applied or discarded this bar will disappear.

Testing Settings

If you're unsure of your device configuration you can test your settings by pressing the "Test" button.

You will then have 5 minutes to either apply or discard the current configuration before the device reboots (resetting your device to the state it was in before testing). This is useful if you aren't connected to the device via InstallerNet and are at risk of losing your connection with the device after making changes to the network.

Error Bar

Errors

Errors encountered during data retrieval in the UI will be shown in a red bar at the top of the web page. These should only occur if you have a flaky connection with your device.


Status Tab

The information in this section reflects the information displayed in firmware v1.2+.

iFlex™ Device Status
WWAN Status for a FreeStation™
WAN Status for a FreeStation™
LAN Status for a FreeStation™
General status
  • Date
  • Product name and location (which is editable on the System tab)
  • Firmware version
  • Network mode
  • Uptime and date
WLAN status

This section displays information about the local 2.4 GHz wireless access point.

  • MAC address
  • Status (up or down).
  • Connected client information
  • SSID
  • Security
  • Channel
WWAN status

This section displays information about the second 2.4 or 5 GHZ radio on your ARCFlex device. Not all devices will have a second WWAN radio. For those that don't the radio status will show up as "Not Detected".

  • MAC address
  • Status (up or down). RSSI information is also shown if the device is operating in Client mode
  • Connected client information*
  • SSID
  • Security
  • Channel

* = Only shown when WWAN radio is operating in AP or PtP Master mode

Network Status for Bridge Mode
  • IP Address
  • Netmask
  • Gateway
  • DNS
Network Status for Router Mode
  • WAN Interface
  • WAN IP Address
  • WAN Netmask
  • WAN Gateway
  • WAN DNS
  • LAN IP Address
  • LAN Netmask
  • LAN DHCP Server Status
  • LAN NAT Status
Network extender status
When the WLAN Network Extender is enabled you'll be able to see the status and SSID near the other wireless sections
Throughput graphs
Throughput graphs are available for the WLAN, eth0, eth1, and WWAN (if available) interfaces. Data updates every few seconds.
System Error Messages
  • Hotspot: If the hotspot service is having trouble running a message will be displayed at the top of the status tab explaining the situation.
  • Misconfigurations: ARCFlex devices with a WWAN radio operating in client mode require the WWAN to be designated as the WAN interface when running your device in router mode. If your device does not have the WWAN set as the WAN interface, you'll see a warning message at the top of the status page. To fix this, go to the Network Tab and select the WWAN wireless radio as the WAN interface, and click "Save Changes".


W-LAN Configuration Tab

This tab's configuration options will differ based on your product.

For the original ARCFlex™ devices (FreeStation, iFlex, Flex mARC, SplitStation), the wireless configuration for the 2.4 GHz AP radio happens on the W-LAN tab. This affects wireless settings for the the private (customer) wireless interface, Hotspot wireless interface, and InstallerNet™ wireless interface.

For the FlexAP™ variable sector product, the wireless configuration for the 5 GHz AP radio happens on the W-LAN tab. This affects wireless settings for the the main wireless interface, Hotspot wireless interface, and InstallerNet™ wireless interface.

Basic Wireless Settings


Basic WLAN wireless options
Country code
The country code you selected at the first login.
Operating mode
On most ARCFlex™ radios, the operating mode of the WLAN radio is always set to Access Point mode. The FlexAP's (main) WLAN radio can be changed to "Access Point" or "Access Point w/WDS" mode to allow transparent bridging with its clients.
Enabled
Whether or not the this wireless network is enabled. This setting does not affect Hotspot or InstallerNet.
SSID
Network SSID for the private wireless interface. Valid characters include: letters, numbers, spaces, and limited punctuation. Max length is 32 characters. (Required)
  • SSID Broadcast: Uncheck this box to hide the SSID of this wireless network. Does not affect Hotspot or InstallerNet.
802.11 mode
On the main ARCFlex™ devices, the WLAN radio operates in the 2.4GHz frequency only, so operating mode options include b only, g only, b/g mixed, b/g/n mixed. The recommended value is b/g/n mixed. Because the FlexAP™'s main radio operates in the 5GHz band, its operating modes include a only, a/n mixed, and n only. a/n mixed is recommended for the FlexAP™. (Required)
Channel
Select transmit channel. Make sure there are no other radios operating on the same or nearby channels in your area. (Required)
Channel size
  • 20 MHz (default)
  • 20/40 MHz auto above center: Use 40 MHz (20 MHz above center) channel size if supported by the client. Otherwise 20 MHz.
  • 20/40 MHz auto below center: Use 40 MHz (20 MHz below center) channel size if supported by the client. Otherwise 20 MHz.
Max data rate
Set the legacy max data rate
WMM
(Wi-Fi Multimedia). WMM is a standards-based QoS mechanism that prioritizes wireless traffic based on category. The default settings should be sufficient; it is not recommended you change them.
Tx Power
Adjust transmit power
RTS
This field sets the 802.11 Request to send packet size threshold. This is an advanced setting. Please see other sources on RTS for more information. To reset RTS, set it to the max value on the slider.
Fragmentation
Sets the max frame size the radio can transmit without fragmenting the frame. This is an advanced setting.


802.11n Advanced Settings


Wireless 802.11n-related options
Max data rate
Set the maximum 802.11n MCS data rate with this dropdown. The FlexAP™ allows MCS 0 - 15 (6.5Mbps - 130 Mbps). The WLAN radio on the ARCFlex products support MCS values up to MCS 7.
Short guard interval
Enable short guard interval. This is an advanced setting. Here is a good article explaining Short Guard Interval. Please seek out other outside resources to help you better understand what is best for your network.
MPDU Density
Minimum separation of MPDUs in an A-MPDU. This is an advanced setting. A value of 0 indicates no restriction. Values 1 - 7 = (2(value – 1))*1/8 μsec.
TX Streams
For 2X2 radios you can choose to limit the number of TX streams with this setting.
RX Streams
For 2X2 radios you can choose to limit the number of RX streams with this setting.
STBC
(Space-Time Block Code) Enabling STBC will instruct the radio to send the same stream of data over 2 chains in cases where the link has low quality. This will lower the overall data rate but increase link stability. Note: This setting will only be visible for radios having 2 streams.


Wireless Security


Wireless security options
Security + Encryption

There are three security modes available. It is highly recommended you choose WPA2 with AES for maximum security.

The security settings here only apply to the private network SSID. Hotspot and InstallerNet can be set separately if you so desire.

  1. None: Not recommended!!
  2. WEP: Specify ASCII key (length of 5 or 13 characters) or Hex key (length of 10 or 26 characters). WEP is not recommended.
  3. WPA: AES or TKIP encryption. PSK key must be >= 8 characters long. AES is recommended.
  4. WPA2: AES or TKIP encryption. PSK key must be >= 8 characters long. AES is recommended.

Important considerations when choosing your security method:

  1. Choosing TKIP or WEP as your encryption method will cause your radio to operate in a non-802.11n legacy mode. (TKIP and WEP are not supported in the 802.11n standard). This will decrease the performance of your radio.
  2. TKIP and WEP are not allowed encryption options when using FlexTDMA™.



Access Control List


Add up to 64 MAC addresses to a whitelist or blacklist. You can only have one ACL policy on the WLAN at a time. This only applies to the private network SSID. MAC addresses must be entered in a comma-separated list, and the mac addresses must be formatted with colons, like 12:AB:CC:40:08:22.

Network Extension


Network extension

You can easily turn your ARCFlex™ device into a wireless repeater.

Extend Network
Enable or disable network extension
Network SSID
The SSID of the wireless network you wish to extend (required). Press the "Scan" button to scan for available networks.
WEP or WPA Key
The WEP, WPA, or WPA2 security key of the network you wish to extend. (required if the SSID has security set on it). The network extension daemon will automatically determine the security and encryption method - you just provide the key.

Once you apply settings, the network extension daemon will attempt to connect to the SSID. You can see the status of the connection on the Status tab.

Why is my Network Extender section disabled?

The network extender feature is only available under the following conditions:

  • The W-WAN radio must be disabled or running in Access Point or Point-to-Point Master modes
  • Your product must be running in bridge mode (visit the Network Tab to view your network mode)
  • Your product must support the network extension feature. Currently all ARCFlex™ products excluding the FlexAP™ support this feature.


W-WAN Configuration Tab

Configuration for your device's 2.4 or 5GHz second radio happens on the W-WAN tab.

  • This second radio is built in to all FreeStation™s.
  • In a FlexAP™, Split mARC™ , or SplitStation™ setup, the second radio is a separate FlexUSB™ device plugged into the USB port.
  • As of firmware version 1.2+, your W-WAN radio can operate as a high-gain Access Point or Point-to-Point endpoint in addition to the original Client mode.
  • As of firmware version 2.0+, your W-WAN radio can operate in AP WDS mode
Info-icon.png
Note: This tab is only accessible if your device has detected a second radio.
If you have a lone iFlex™ or Flex mARC™ you will not have the option to configure W-WAN settings.


Basic Wireless Settings


Basic WWAN wireless options
Country code
The country code you selected at the first login.
Operating mode
The radio operating mode. Options include:
  • Client (this is the default mode)
  • Client WDS: WDS must be enabled on the AP, and your device must be running in Bridge mode
  • Access Point
  • Access Point WDS
  • Point-to-Point Master: See note below about Point-to-Point connections
  • Point-to-Point Slave: See note below about Point-to-Point connections. Device must be running in Bridge mode to use PtP Slave.
Enabled
This checkbox determines if the WWAN wireless interface is enabled.
AutoTDMA
Check this box to enable your client to connect to a FlexTDMA™-enabled access point. The "Auto" part of this setting means that the client will still connect successfully to an AP that does not support FlexTDMA™ or has FlexTDMA™ disabled. This option enables you to set FlexTDMA™ on clients before switching your FlexAP access point over to full TDMA mode.
AutoTDMA + Hidden SSID support
Check this box if your AP has a hidden SSID and you're operating in AutoTDMA mode. (AutoTDMA-enabled clients by default use passive scans only to keep traffic to a minimum).
WDS Mode
If you selected Client WDS mode, you'll see an option to set Ruckus compatibility mode. If your access point is a Ruckus brand AP, please check this box to ensure correct AP/Client communication.
Wavion Mode
If you selected Client mode, you'll see a checkbox allowing you to enable "Wavion hidden SSID capability mode". You should check this box if your access point is a Wavion brand radio operating in "Single Broadcast SSID with multiple hidden SSID" mode, and the AP is one of the hidden SSIDs.
SSID
Network SSID. Valid characters include: letters, numbers, spaces, and limited punctuation. Max length is 32 characters. (Required)
  • SSSID Scan: Click this button to scan for APs in the area. When you select an AP from the list, the security type will automatically be selected for you. This button will only be visible if the device is operating in Client or PtP Slave mode.
Change band
If you connect a FlexUSB™ to an iFlex™ or Flex mARC™ you'll see the option to change the band of the CPE. By default the band will be set to 2.4 GHz, so if you have a FlexUSB™ 5 you'll need to change the band from 2.4 to 5GHz. A SplitStation™ and Split mARC™ will have the CPE band configured correctly already.
802.11 mode
If your radio is 2.4GHz, options include b only, g only, b/g mixed, and b/g/n. If your radio is 5GHz, you can choose between a/n mixed and a only. Recommended value is b/g/n mixed for 2.4GHz or a/n mixed for 5GHz. (Required)
Allow Non-Standard Channels
(Only applicable to 5GHz WWAN radios) Checking this box will show non-standard channels in the channel list. For example, instead of showing the following channel list subset of 149, 153, 157, etc you'll see all of the intermediate channels as well: 149, 150, 151, 152, etc... If you're operating your radio in AP mode, make sure your clients also have this option selected or they won't see the AP if it chooses a non-standard channel.
Channel
Select transmit channel. Auto channel is recommended for Client or Point-to-Point Slave mode.
Channel size
Choose 20MHz or 40MHz auto. 40MHz auto will fallback to 20MHz if 40MHz is not supported by the other client or AP.
Max data rate
Set the legacy max data rate. Recommended value is auto. This field is only enabled if you choose a legacy-only IEEE mode. For example, 802.11a for 5GHz FlexUSB, or 802.11 b only, g only, or b/g mixed for the 2.4 GHz version.
Ack Timeout
Set this to a higher value if there is a long distance between the Client and AP.
WMM
(Wi-Fi Multimedia). WMM is a standards-based QoS mechanism that prioritizes wireless traffic based on category. The default settings should be sufficient; it is not recommended you change them.
Tx Power
Set transmit power
RTS
Enable 802.11 Request to send packet size threshold. This is an advanced setting. Please see other sources on RTS for more information.
Fragmentation
The maximum frame size wireless device can transmit without fragmenting the frame. This is an advanced setting. The default and recommended value is 2346. Please see other sources on fragmentation for more information.


Point-to-Point Connections


ARCFlex devices (as of v2.0+) use a proprietary protocol to setup Point-to-Point links. Here are the simple steps to setup a PtP link:

  1. Choose which radio you want to run as your Point-to-Point master.
  2. Open the UI and set the WWAN wireless mode to Point-to-Point master
  3. Set any other applicable wireless settings, such as encryption, and save/apply changes
  4. Choose which radio you want to run as your Point to Point slave
  5. Open the UI and set the WWAN wireless mode of this radio to Point to Point slave.
  6. Set any other applicable wireless settings, such as encryption, and save/apply changes

The slave will associate to the master to create the link. No other Point-to-Point clients (or any other client) will be allowed to connect to the master until after this slave has disconnected. The installer SSID and WLAN network will still be accessible like normal.

802.11n Advanced Settings


Wireless 802.11n-related options
Max data rate
Max 802.11n MCS data rate.
Short guard interval
Enable short guard interval. This is an advanced setting. Here is a good article explaining Short Guard Interval. Please seek out other outside resources to help you better understand what is best for your network.
MPDU Density
Minimum separation of MPDUs in an A-MPDU. This is an advanced setting. A value of 0 indicates no restriction. Values 1 - 7 = (2(value – 1))*1/8 μsec.
TX Streams
For 2X2 radios you can choose to limit the number of TX streams with this setting.
RX Streams
For 2X2 radios you can choose to limit the number of RX streams with this setting.
STBC
(Space-Time Block Code) Enabling STBC will instruct the radio to send the same stream of data over 2 chains in cases where the link has low quality. This will lower the overall data rate but increase link stability.


Wireless Security


Wireless security options

There are four security modes available. It is highly recommended you choose WPA2 with AES for maximum security.

  1. None: Not recommended!!
  2. WEP: Specify ASCII key (length of 5 or 13 characters) or Hex key (length of 10 or 26 characters). WEP is not recommended.
  3. WPA: AES or TKIP encryption. PSK key must be >= 8 characters long. AES is recommended.
  4. WPA2: AES or TKIP encryption. PSK key must be >= 8 characters long. AES is recommended.

Important considerations when choosing your security method:

  1. Choosing TKIP or WEP as your encryption method will cause your radio to operate in a non-802.11n legacy mode. (TKIP and WEP are not supported in the 802.11n standard). This will decrease the performance of your radio.
  2. TKIP and WEP are not allowed encryption options when using FlexTDMA™.



Access Control List


Add up to 64 MAC addresses to a whitelist or blacklist. You can only have one ACL policy on the WWAN at a time. MAC addresses must be entered in a comma-separated list, and the mac addresses must be formatted with colons, such as 12:AB:CC:40:08:22. This feature is only available if your WWAN radio is running in Access Point mode.



Network Tab

Your ARCFlex™ device can either run in router mode or as a transparent layer-two bridge.

Router Mode: WAN Settings


WAN Settings in Router Mode
WAN Interface
Select the interface/port you wish to act as your WAN. If your device does not have a CPE radio (such as an iFlex™ or Flex mARC™), you will have the option to choose eth0 or eth1. If your device does have a client radio, you must choose the wireless client as your WAN port. (Required)
Note: If your hotspot is running on either eth0 or eth1, the respective option will not be availble as a WAN port.
IP Address Mode
(Required) There are three IP Address Mode options available:
  1. DHCP: Use a DHCP assigned IP address
    • DHCP Fallback: If you choose DHCP as your IP address mode you can provide an optional fallback IP address. This IP will be setup as an alias on the WAN port.
  2. PPPoE: Point-to-Point Protocol over Ethernet.
    • You will need to provide your PPPoE username and password. (Required)
  3. Static IP
MTU
Maximum transmission unit. Recommended value is 1500. (Required)
IP Aliases
You can configure up to 5 additional IP addresses for the WAN.
Change MAC
If you want the WAN to advertise a different MAC address then select this checkbox and enter the new value.
Port Forwarding
Create up to 10 port forwarding rules on the WAN interface.
Allow Web Access
Check this box to allow web access on port 80 from outside the WAN.
Allow Ping
Check this box to allow ICMP traffic from outside the WAN.
Allow SSH
Check this box to allow SSH access from outside the WAN.


Router Mode: LAN Settings


LAN Settings in Router Mode
DHCP Static Leases

You are required to set static IP address information on the LAN.

IP Address
IPv4 Address (Required)
Netmask
IP netmask. (Required) Example: 255.255.255.0
MTU
Maximum transmission unit. Recommended value is 1500. (Required)
IP Aliases
You can configure up to 5 additional IP addresses on the LAN.
NAT
Enable or disable NAT on your LAN (Recommended)
DHCP Server
Select this option if you want to run a DHCP server on your LAN. The parameter DHCP Start indicates the beginning of the DHCP range, and DHCP Limit is the max number of addresses the server will hand out. For example, if using the values in the image to the left, the server will hand out DHCP address in the range of 192.168.10.100 to 192.168.10.250.
DHCP Static Leases
You can bind MAC addresses to DHCP IP addresses by providing a list of MAC address/IP address pairs in this section. An entry is made up of MAC Address + space (or tab) + IP address. Place each entry on a new line. An example is shown to the right. You can look in the log after applying your changes to see if there were any issues parsing the static leases file. (This feature is available in firmware versions 2.0+)
UPnP
Enable Universal Plug n Play. May be required for certain gaming setups.



Bridge Mode


Device in Bridge mode

Any interface not included in the Hotspot network will be added to the main bridge, excluding the Hotspot wireless network.

IP Address Mode
(Required) Available modes include:
  1. DHCP: Use a DHCP assigned IP address
    • DHCP Fallback: If you choose DHCP as your IP address mode you can provide an optional fallback IP address. This IP will be setup as an alias on the WAN port.
  2. Static IP
STP
Enable/disable spanning tree protocol
MTU
Maximum transmission unit. Recommended value is 1500. (Required)
IP Aliases
You can configure up to 5 additional IP addresses for the LAN.



Static Routes


Up to 10 static routes can be added to the device at a time.

Warning-icon.png Warning: Static routes is for advanced users only.


Firewall Rules


Firewall Rule Example

You can create up to 10 firewall rules on your device. If you require more advanced IP tables rules, you can ssh into the device and add custom rules to the /etc/filrewall.user script file. These will be run whenever the firewall restarts.

The image to the right shows an example of how to add a firewall rule that allows IPerf TCP traffic destined for the radio from outside the WAN. This is useful if you're running the Iperf server on your radio. (Click on the thumbnail for a larger picture).

Warning-icon.png Warning: Creating firewall rules is for advanced users only.


Services Configuration Tab

NTP (Network Time Protocol)


NTP

You have two ways of setting the device time on your device:

Network Time
Fill in the NTP server you want to use and your time zone. Once you save and apply, an NTP client will fetch the current time. You must be connected to the internet for the NTP update to work.
Manually
Fill in the date, time, and select time zone. When you save the changes will take affect immediately. Only timezone will persist after a reboot.

SSH


SSH

The SSH server will run on your device when you check the "Enabled" checkbox.

Note: Changes to the SSH service will kill any open SSH sessions with the device.

SSH is enabled by default, and only the admin account has SSH access.


Telnet


Disable the telnet server by unchecking the "Enabled" checkbox.

Note: Changes to the Telnet service will kill any open Telnet sessions with the device.

Telnet is enabled by default only on the FlexAP, and only the admin account has Telnet access.


SNMP


SNMP

ARCFlex™ devices have support for basic SNMP v1 and v2.

Enabled
Enable or disable the SNMP service
Contact Information
Contact information for your device (like an email address)
SNMP Community
The community string is used for authentication
Allow Access from WAN
(This option will only be visible in Router mode) Allow SNMP traffic through the firewall from the WAN. This is a firewall rule shortcut.



Ping Watchdog


Ping Watchdog

The Ping Watchdog service is used to reboot the device in the event that it loses internet connectivity. Connectivity is determined by pinging a given IP.

Enabled
Enable or disable the Ping Watchdog service. the Ping Watchdog is disabled by default on ARCFlex™ devices.
IP Address
The IP address or host that will be pinged to determine if the device has internet connectivity. (Required)
Ping Interval
(in seconds) How often to perform a connectivity test. Recommended value: 300 seconds. (Required)
Startup delay
(in seconds) How long to wait before starting the Ping Watchdog service at bootup. Recommended value: 300 seconds. (Required)
Total ping attempts
Number of times to ping the device during a single test. Recommended value: 10. (Required)
Max failures allowed
Number of ping failures allowed during the test. Any number of failures greater than this will cause a reboot. Must be <= Total Ping Attempts. (Required)

Warning-icon.png Warning: Make sure to give a large enough startup delay for the Ping Watchdog service so the device has ample time to boot and get an IP.


System Configuration Tab

User Accounts


Permissions Editing Mode

There are two accounts that have access to the ARC OS Web UI.

Admin Account
The administrator account has full privileges. They can also login to the device via SSH and have access to configure the device with the ARCMobile mobile application.
Limited Account
This account has limited/customer access to the configuration UI. Access by default is limited to "View only" privileges in the Web UI, but the administrator can give the user increased rights by editing changing permissions (See the next section, User Permissions). The limited user does not have access via SSH, nor can they access the device with the mobile app.


User Permissions


Permissions Editing Mode
Permissions Control Bar
Permission Options

To change the limited user's permissions in the ARC OS Web UI, click the "Enter Permissions Mode" button on the System Tab.

Two things will change in the UI:

  • A green control bar will appear at the top of the page
  • Options to edit permissions for major areas of the UI will show up. There are three available permission levels:
    • Invisible: User does not see this section when they login.
    • View Only: User can see the section, but cannot change it.
    • Edit: User can see and edit this section.

You can edit the permissions for the whole UI before having to save, then save all changes in one action by clicking the Save button on the green control bar at the top.

Info-icon.png Note: Do not click the save button at the bottom of the configuration tabs - this will only save the data on that tab and not permissions.

Device Settings


Device Info
Device Name
A free-form field that is also available on the ARCMobile mobile application.
Device Location
A free-form field that is also available on the ARCMobile mobile application.
Latitude
Latitude of the device. Please use Decimal Degrees.
Longitude
Longitude of the device. Please use Decimal Degrees.
Language
Select your language. If you wish to participate in translating the UI to your language please contact us at info@antennas.com.




Reset to Defaults


Device Maintenance

Resetting your device to defaults will undo any changes you've made to it. It will also allow you to re-select your country code.

Firmware File Formats


As of firmware v2.0.x, firmware images will be available in two file formats:

  1. The old style format has the extension .img for the ARCFlex radio firmware (FreeStation, iFlex, Flex mARC, SplitStation,etc...). FlexAP images end in .apf.
  2. The new style format has the extension .imd5 for the ARCFlex radio firmware, and .amd5 for the FlexAP firmware. This new file format causes the radio to perform file verification on the image to ensure it was not corrupted when being uploaded to the device (or downloaded from the internet).

Both formats are allowed in the firmware upgrade process assuming your firmware is later than v2.0.x.

Upgrading Firmware


Once firmware flashing has begun, do not power down the device. Flashing should take no more than 5 minutes.

If you're using a firmware version prior to 1.2 (not recommended), make sure to refresh your browser when flashing is complete the next time you access the configuration UI. You can also open an "incognito" window in FireFox or Chrome to assure the client is not being cached locally.


Warning-icon.png Warning: Do NOT power down the device during the flashing process. Doing so will most likely brick your unit.

Info-icon.png Note: After you upgrade the firmware on your device, it's very important to refresh your browser the next time you access the Web UI if using a firmware below 1.2.


System Log


System Log

You can view syslog and dmesg output by pressing the "View" button.

Download the same data by pressing the "Download" button.



Config Backup and Restore


Config Backup and Restore

It's highly recommended you back up your configuration from time to time.

To restore the config to a device, simply provide the zip file you backed up previously. A config restore is permanent, meaning there is no "Apply" changes option, they will be applied immediately.




Advanced Settings

Ethernet Settings


Ethernet port settings
Power Passthrough
Enable PoE passthrough on eth1 (the second ethernet port) up to 24V max, 1.5A (any voltage). Polarity independent. (Note: This option will not be visible on products that have a single ethernet port, such as the FlexAP™).
eth0
Set options for the first ethernet port. This port accepts PoE input to power the device. Even if the port is disabled, PoE will still power the device.
eth1 
Set options for the second ethernet port. This port allows PoE passthrough. Even if the port is disabled, PoE passthrough will still function if enabled. (Note: This option will not be visible on products that have a single ethernet port, such as the FlexAP™).
Link Status
Shows the current status of the link. You may need to refresh the tab a few times for the status to update.
Enabled
All ports enabled by default.
Auto-Negotiation
On or off. Default value is On. Recommended value is On.
Link Speed
10Mbps or 100 Mbps
Full Duplex
Uncheck to set link as half duplex.


Installer SSID (aka InstallerNet™)


InstallerNet™ settings

The InstallerNet wireless interface operates on a separate network on your device and is used for device configuration and installation. Clients connected to the installer SSID cannot access the WAN - only the configuration UI on the device can be accessed from this network.

Status
Enable or disable this SSID. [NOTE: This checkbox is only available on the FlexAP™. You may want to disable your InstallerNet SSID if you enable FlexTDMA.]
SSID
By default, the initial SSID is Installer + last three octets of the ethernet MAC Address. For example, Installer0323B0.
Broadcast
Uncheck this checkbox if you wish to hide the Installer SSID.
Security
Enable WPA, WPA2, or WEP Security on this wireless interface. Not recommended.


WAN Traffic Limiting


WAN QoS settings

The WAN Traffic Limiting section will only be enabled if your device is running in Router mode.

Enabled
Enable QoS on the WAN to throttle WAN traffic.
Incoming rate
Set max incoming rate.
Outgoing rate
Set max outgoing rate.


Hotspot Settings


Hotspot settings

All ARCFlex™ devices ship with built-in standard (RADIUS authenticated) hotspot functionality. This means you can set up a hotspot management backend, such as WirelessOrbit or WorldSpot, and easily create hotzones from your ARCFlex™ devices.

Enabled
Whether or not hotspot functionality is enabled on your device.
Interfaces
Select which interfaces you want to include in the Hotspot network. You have three choices:
  • The main wireless hotspot interface (this runs as an additional SSID on the 2.4GHz WLAN radio)
  • The W-WAN wireless interface (this is only available if you have the second W-WAN radio and it's operating in either AP or Point-to-Point master mode)
  • eth0
  • eth1 (Note: This option will not be visible on products that have a single ethernet port, such as the FlexAP™).

If operating in router mode, the selected WAN port will not be included in the list of hotspot interface options.

Hotspot SSID
The wireless hotspot SSID. Only available if the wireless interface is selected in the interface list.
Client Isolation
Enable/disable client isolation. This keeps your wireless clients from communicating with each other. Only available if the wireless interface is selected.
Hotspot Network
Network address that the Hotspot will run on. Example, 192.168.182.0. (required)
Hotspot Netmask
Hotspot network netmask. (required)
RADIUS Server 1
IP address of your RADIUS server. (required)
RADIUS Server 2
Fallback IP address of your RADIUS server. (optional)
RADIUS NAS Id
Your NAS Id. (optional - depends on your hotspot backend)
Admin Username
RADIUS administrative user login username. (optional)
Admin Password
RADIUS administrative user login password. (optional)
RADIUS Auth Port
If none is supplied default of 1812 is used. (optional)
RADIUS Acct Port
If none is supplied default of 1813 is used. (optional)
RADIUS Shared Secret
RADIUS secret (required)
Auth Portal URL
URL to your UAM web server. (required)
Auth Portal Homepage
(optional) Unauthenticated users will be redirected to the URL you specify in this field when trying to connect to the internet for the first time. This setting will override the default redirect URL you have set in your UAM portal. This enables you to create custom splash pages with content applicable to your customers. You can easily embed the link to the UAM login page in your custom splash page - it will look like http://Hotspot_Network_IP:3990/prelogin, where Hotspot_Network_IP is what you specified in the "Hotspot Network" field. For example, if 192.168.182.0 is your hotspot network, you'll use http://192.168.182.1:3990/prelogin as your login page link. If you use an external page as your UAM home page, do NOT forget to add it to the list of allowed domains! Forgetting to do so will create a redirect loop.
Auth Server Secret
Secret between hotspot service and UAM server. If unsure, set the same as the RADIUS Shared Secret. (required)
Allowed domains
Comma-separated list of domains accessible to unauthenticated users. Example: antennas.com,xkcd.com,wirelessorbit.com (optional)
MAC Whitelist
Comma-separated list of MAC addresses that undergo MAC authentication. (The MAC address sent as the username to the RADIUS server).
Security
Optional wireless security for the wireless interface. Not recommended.

Hotspot Notes


Hotspot Issues

If you see an error about Hotspot at the top of the Status tab or Advanced tab, the hotspot service may have had trouble starting. Then main reason for this is that the device can't resolve the UAM URL or RADIUS server.

After you apply changes, the hotspot service will attempt to run up to 10 times. If it still fails after this time period, you can force it to restart by pressing the "Restart Service" button that will show up next to the "Enable" checkbox.

Warning-icon.pngImportant: Make sure you have internet access and the hotspot service can resolve the UAM URL and RADIUS server.

Personal tools