gwn76xx Usermanual
gwn76xx Usermanual
All rights reserved. Information in this document is subject to change without notice. Reproduction or
transmittal of the entire or any part, in any form or by any means, electronic or print, for any purpose
without the express written permission of Grandstream Networks, Inc. is not permitted.
The latest electronic version of this guide is available for download here:
http://www.grandstream.com/support
Grandstream is a registered trademark and Grandstream logo is trademark of Grandstream Networks, Inc.
CAUTION
Changes or modifications to this product not expressly approved by Grandstream, or operation of this
product in any way other than as detailed by this guide, could void your manufacturer warranty.
WARNING
Please do not use a different power adaptor with devices as it may cause damage to the products and
void the manufacturer warranty.
Page | 2
GWN76XX User Manual
Version 1.0.19.29
FCC Caution
Any changes or modifications to this unit not expressly approved by the party responsible for compliance
could void the user’s authority to operate the equipment.
This device complies with 15 of the FCC Rules. Operation is subject to the following two conditions: (1)
This device may not cause harmful interference, and (2) this device must accept any interference
received, including interference that may cause undesired operation.
Note:
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant
to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful
interference in a residential installation. This equipment generates, uses, and can radiate radio
frequency energy and, if not installed and used in accordance with the instructions, may cause harmful
interference to radio communications. However, there is no guarantee that interference will not occur in
a particular installation. If this equipment does cause harmful interference to radio or television reception,
which can be determined by turning the equipment off and on, the user is encouraged to try to correct
the interference by one or more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment.
This equipment should be installed and operated with minimum distance 20cm between the radiator&
your body.
This transmitter must not be co-located or operating in conjunction with any other antenna transmitter.
ISEDC Warning
This device complies with Innovation, Science, and Economic Development Canada licence-exempt RSS
standard(s). Operation is subject to the following two conditions:
(2) this device must accept any interference, including interference that may cause undesired operation
of the device.
Le présent appareil est conforme aux CNR d’Innovation, Sciences et Développement économique Canada
applicables aux appareils radio exempts de licence. L’exploitation est autorisée aux deux conditions
suivantes:
Page | 3
GWN76XX User Manual
Version 1.0.19.29
(1) l’appareil ne doit pas produire de brouillage, et
(2) l’utilisateur de l’appareil doit accepter tout brouillage radio électrique subi, même si le brouillage est
susceptible d’en compromettre le fonctionnement.
ISEDC Warning
This equipment complies with ISEDC radiation exposure limits set forth for an uncontrolled environment.
This equipment should be installed and operated with minimum distance 20cm between the radiator&
your body.
This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.
Cet équipement est conforme aux ISEDC RF limites d’exposition aux radiations dans un environment
non contrôlé. Cet émetteur ne doit pas être situé ou opérant en conjunction avec une autre antenne ou
émetteur.
CE Authentication
EU Regulatory Information
GWN7630 GWN7630LR
TX/RX Frequency TX/RX Frequency
Modulation Modulation
Page | 4
GWN76XX User Manual
Version 1.0.19.29
GWN7610 GWN7600
TX/RX Frequency TX/RX Frequency
Modulation Modulation
GWN7615 GWN7600LR
TX/RX Frequency TX/RX Frequency
Modulation Modulation
GWN7605 GWN7605LR
TX/RX Frequency TX/RX Frequency
Page | 5
GWN76XX User Manual
Version 1.0.19.29
WLAN 5150-5250MHz< 23dBm WLAN 5150-5250MHz< 23dBm
Modulation Modulation
GWN7660
TX/RX Frequency
Output power
Modulation
DSSS, OFDM
The simplified EU declaration of conformity referred to in Article 10(9) shall be provided as follows:
Hereby, [Grandstream Networks, Inc.] declares that the radio equipment type
[GWN/7660/GWN7630/GWN7630LR/GWN7610/GWN7600/GWN7600LR/GWN7605/GWN7605LR/GW
N7615] are in compliance with Directive 2014/53/EU.
The full text of the EU declaration of conformity is available at the following internet address:
www.grandstream.com
Page | 6
GWN76XX User Manual
Version 1.0.19.29
GNU GPL INFORMATION
GWN76XX firmware contains third-party software licensed under the GNU General Public License (GPL).
Grandstream uses software under the specific terms of the GPL. Please see the GNU General Public
License (GPL) for the exact terms and conditions of the license.
Grandstream GNU GPL related source code can be downloaded from Grandstream web site:
http://www.grandstream.com/support/faq/gnu-general-public-license
Page | 7
GWN76XX User Manual
Version 1.0.19.29
Table of Contents
Page | 8
GWN76XX User Manual
Version 1.0.19.29
Firmware Version 1.0.1.27 ............................................................................................................. 22
WELCOME .................................................................................................................. 23
INSTALLATION ........................................................................................................... 40
Equipment Packaging .................................................................................................................... 40
Warranty........................................................................................................................................ 44
GETTING STARTED.................................................................................................... 49
LED Patterns ................................................................................................................................. 49
GWN.Manager .............................................................................................................................. 55
Page | 9
GWN76XX User Manual
Version 1.0.19.29
USING GWN76XX AS STANDALONE ACCESS POINT ............................................ 56
Connect to GWN76XX Default Wi-Fi Network ................................................................................ 56
AP Location ................................................................................................................................... 62
Failover Mode......................................................................................................................... 63
Takeover Feature........................................................................................................................... 64
Configuration ................................................................................................................................. 71
SSIDs ........................................................................................................................... 76
CLIENTS ...................................................................................................................... 83
Clients ........................................................................................................................................... 83
ACCESS CONTROL.................................................................................................... 85
Access List .................................................................................................................................... 85
Bandwidth Rules............................................................................................................................ 88
P a g e | 10
GWN76XX User Manual
Version 1.0.19.29
CAPTIVE PORTAL ...................................................................................................... 90
Guest ............................................................................................................................................ 90
Vouchers ....................................................................................................................................... 97
Firewall........................................................................................................................................ 108
SNMP.......................................................................................................................................... 113
P a g e | 11
GWN76XX User Manual
Version 1.0.19.29
Syslog .................................................................................................................................. 124
P a g e | 12
GWN76XX User Manual
Version 1.0.19.29
Table of Tables
P a g e | 13
GWN76XX User Manual
Version 1.0.19.29
Table 40: Email configuration ............................................................................................................. 124
Table 41: Email Events ...................................................................................................................... 125
Table 42: Network Upgrade Configuration .......................................................................................... 126
Table of Figures
P a g e | 14
GWN76XX User Manual
Version 1.0.19.29
Figure 34: Discover and Pair GWN76XX .............................................................................................. 59
Figure 35: Discovered Devices ............................................................................................................ 59
Figure 36: GWN76XX Online ............................................................................................................... 60
Figure 37: Failover Master ................................................................................................................... 63
Figure 38: Failover Mode GUI .............................................................................................................. 64
Figure 39: Takeover - Step 1 ................................................................................................................ 65
Figure 40: Takeover - Step 2 ................................................................................................................ 65
Figure 41: Takeover - Step 3 ................................................................................................................ 66
Figure 42: Switch to Master ................................................................................................................. 66
Figure 43: Transfer Master Role to another device confirmation message ............................................ 67
Figure 44: Then new assigned Master AP web interface ...................................................................... 67
Figure 45: Client Bridge ....................................................................................................................... 68
Figure 46: Client Bridge ....................................................................................................................... 68
Figure 47: Client Bridge Mode ............................................................................................................. 68
Figure 48: Access Points - Status ........................................................................................................ 69
Figure 49: AP Info ................................................................................................................................ 70
Figure 50: Current Clients - Stats per AP ............................................................................................. 70
Figure 51: Debug Tool Tab ................................................................................................................... 71
Figure 52: Access Points Configuration Page....................................................................................... 71
Figure 53: Moving Access Points between Networks ............................................................................ 72
Figure 54: Delete Access Point ............................................................................................................ 72
Figure 55: Reboot Access Point ........................................................................................................... 72
Figure 56: Access Point Configuration Page ........................................................................................ 73
Figure 57: Reset Access Point ............................................................................................................. 75
Figure 58: SSIDs ................................................................................................................................. 76
Figure 59: Add a new SSID.................................................................................................................. 76
Figure 60: Device Membership ............................................................................................................ 82
Figure 61: Clients ................................................................................................................................ 83
Figure 62: Clients - Select Items .......................................................................................................... 84
Figure 63: Global Blacklist ................................................................................................................... 85
Figure 64: Managing the Global Blacklist ............................................................................................. 85
Figure 65: Adding Client Access List .................................................................................................... 85
Figure 66: Adding New Access List ...................................................................................................... 86
Figure 67: Blacklist Access List ............................................................................................................ 86
Figure 68: Ban/Unban Client ................................................................................................................ 87
Figure 69: MAC Address Bandwidth Rule ............................................................................................ 89
Figure 70: Bandwidth Rules ................................................................................................................. 89
Figure 71: Captive Portal – Guest Page ............................................................................................... 90
Figure 72: Captive Portal - Guest Page - Select Items.......................................................................... 90
Figure 73: Captive Portal - Policy List .................................................................................................. 91
Figure 74: Add a New Policy ................................................................................................................ 92
Figure 75: Authentication rules............................................................................................................. 96
P a g e | 15
GWN76XX User Manual
Version 1.0.19.29
Figure 76: Captive Portal – Splash Page.............................................................................................. 97
Figure 77: Add Voucher Sample........................................................................................................... 99
Figure 78: Vouchers List ...................................................................................................................... 99
Figure 79: Captive Portal with Voucher authentication ........................................................................ 101
Figure 80: Radio-General .................................................................................................................. 102
Figure 81: Rogue AP-Configuration.................................................................................................... 106
Figure 82: Rogue AP-Detection ......................................................................................................... 106
Figure 83: Firewall-Outbound............................................................................................................. 108
Figure 84: Firewall-inbound ............................................................................................................... 108
Figure 85: Hotspot 2.0 ........................................................................................................................ 110
Figure 86: SNMP ................................................................................................................................ 113
Figure 87: DHCP Binding.................................................................................................................... 115
Figure 88: LED Scheduling Sample .................................................................................................... 116
Figure 89: Access Points Status.......................................................................................................... 119
Figure 90: Mesh settings for GWN76XX............................................................................................. 120
Figure 91: Create New Schedule ....................................................................................................... 121
Figure 92: Schedules List .................................................................................................................. 122
Figure 93: Alert Configure .................................................................................................................. 124
Figure 94: Access Points ................................................................................................................... 128
Figure 95: Choosing multiple devices................................................................................................. 128
Figure 96: All-at-Once and Sequential Upgrade ................................................................................. 129
P a g e | 16
GWN76XX User Manual
Version 1.0.19.29
DOCUMENT PURPOSE
This document describes how to configure the GWN76XX via Web GUI in standalone mode, with other
GWN76XX Access Points as Master/Slave architecture and more. The intended audiences of this
document are network administrators. Please visit http://www.grandstream.com/support to download the
latest “GWN76XX User Manual”.
Product Overview
Installation
Getting Started
GWN Management Platforms
Using GWN76XX as Standalone Access Point
Using GWN76XX as Master Access Point Controller
Failover Master
Client Bridge
SSIDs
Clients Configuration
System Settings
LED Schedule
Captive Portal
Vouchers
Mesh Network
Bandwidth Rules
DHCP Server
Schedule
LED Schedule
Maintenance
Upgrading and Provisioning
Experiencing the GWN76XX Wireless Access Point
P a g e | 17
GWN76XX User Manual
Version 1.0.19.29
CHANGE LOG
This section documents significant changes from previous versions of the GWN76XX user manuals.
Only major new features or major document updates are listed here. Minor updates for corrections or
editing are not documented here.
No major changes
No major changes
Added support for WPA3 (GWN7602 does NOT support). [Security Mode]
Added support for Secondary RADIUS Server. [Secondary RADIUS Server]
Added support for Rogue AP Alert. [Alert Configure]
Added support of NET port VLAN settings. [Net Port Type]
No major changes
P a g e | 18
GWN76XX User Manual
Version 1.0.19.29
Added support of 802.11w. [802.11w]
Added support of AutoTX Power. [RADIO]
Added Captive Portal Enhancement. [CAPTIVE PORTAL]
Added support of SNMP. [SNMP]
Added support of more DFS Channels. [Scene]
Added support of NAT. [NAT]
Added support of Firewall. [Firewall]
Added support of Hotspot 2.0 Beta. [Hotspot 2.0]
Added support of Multicast/Broadcast Suppression. [Multicast/Broadcast Suppression]
Extended support of RRM to GWN Cloud and remaining AP models. [Transmit Power
Control][Coverage Hole Detection][Dynamic Channel Assignment]
Added support of Active IGMP for feature Convert IP multicast to unicast enhancement. [Convert
IP multicast to unicast]
Allow DHCP Option43 to override GWN Manager Address. [Allow DHCP Option 43 to override
GWN Manager Address]
P a g e | 19
GWN76XX User Manual
Version 1.0.19.29
Firmware Version 1.0.15.6
No major changes
Added support of Radio Resource Management (RRM). [Dynamic Channel Assignment] [Transmit
Power Control] [Coverage Hole Detection]
P a g e | 20
GWN76XX User Manual
Version 1.0.19.29
Firmware Version 1.0.4.22
Added support for Timed Client Disconnect and Enhanced Client Blocking [CLIENTS]
Added support for Client Bridge [Client Bridge]
Added support for Syslog server [Syslog]
Added support for Configurable Web UI access port [Web HTTP Access]
Added support for E-mail notifications [Email]
Added support for Timed Client Disconnect and Enhanced Client Blocking [CLIENTS]
Added support for Client Bridge [Client Bridge]
Added support for Syslog server [Syslog]
Added support for Configurable Web UI access port [Web HTTP Access]
Included patch for WPA2 4-way handshake vulnerability [VU#228519]
No major changes.
No major changes.
P a g e | 21
GWN76XX User Manual
Version 1.0.19.29
Added support for Select SSID Band [SSID Band]
Added support for Exact Radio Power Configuration in dBm [Custom Wireless Power]
Added support for AP Location [AP Location]
Added support for Per-Client/Per-SSID bandwidth rules [Bandwidth R]
Added support for Wi-Fi Schedule [S]
Added support for LED control [L]
Added option to enable/disable DHCP option 66 & 43 override [Allow DHCP options 66 and 43
override]
P a g e | 22
GWN76XX User Manual
Version 1.0.19.29
WELCOME
Thank you for purchasing Grandstream GWN76XX Enterprise Wireless Access Point.
The GWN7630/ GWN7610/GWN7610 are high-performance 802.11ac Wi-Fi access points for small to
medium sized businesses, multiple floor offices, commercial locations and branch offices. GWN7630 and
GWN7615/GWN7610 offers respectively a dual-band 4x4:4 MIMO and a 3x3:3 MIMO technology and a
sophisticated antenna design for maximum network throughput and expanded Wi-Fi coverage range. To
ensure easy installation and management, the GWN7630/GWN7615/GWN7610 uses a controller-less
distributed network management design in which the controller is embedded within the product’s Web user
interface. This allows each access point to manage a network of up to 50 GWN76XX independently without
needing separate controller hardware/software and without a single point-of-failure.
The GWN7600 is a mid-tier Wave-2 802.11ac Wi-Fi access point for small to medium sized businesses,
multiple floor offices, commercial locations and branch offices. The GWN7600LR Outdoor Long-range
802.11ac Wave-2 Wi-Fi Access Point is designed to provide extended coverage support. Ideal for outdoor
Wi-Fi solutions thanks to its waterproof casing and heat resistant technology. The GWN7600/GWN7600LR
come equipped with dual-band, 2x2:2 MU-MIMO with beam-forming technology and a sophisticated
antenna design for maximum network throughput and expanded Wi-Fi coverage range for both Indoor
(GWN7600) and Outdoor deployment (GWN7600LR).
The GWN7630LR is an outdoor long-range Wi-Fi access point for medium to large businesses and
enterprises who need to provide long-range coverage in both indoor and outdoor spaces. It offers
weatherproof casing and heat resistant technology, dual-band 4×4:4 MU-MIMO technology, and a
sophisticated antenna design for maximum network throughput that supports 200+ clients and an
expanded 300-meter coverage range. the GWN7630LR is an ideal outdoor Wi-Fi access point for
enterprises, multiple floor offices, warehouses, hospitals, schools and more.
P a g e | 23
GWN76XX User Manual
Version 1.0.19.29
The GWN7605/GWN7605LR is a high-performance-to-price 802.11ac Wave-2 Wi-Fi access point for small
to medium sized businesses, multiple floor offices, commercial locations and branch offices. It offers dual-
band 2x2:2 MU-MIMO with beam-forming technology and a sophisticated antenna design for maximum
network throughput and expanded Wi-Fi coverage range. To ensure easy installation and management,
the GWN7605/GWN7605LR uses a controller-less distributed network management design in which the
controller is embedded within the product's web user interface. With a slight difference in the GWN7605LR
which is an outdoor Wi-Fi access point that offers extended coverage range support for both indoor and
outdoor deployments. Both products are supported by GWN.Cloud and GWN Manager, Grandstream’s
cloud and on-premise Wi-Fi management platforms. Excellent Wi-Fi APs for voice-over-Wi-Fi deployments
and offer a seamless connection with Grandstream’s Wi-Fi-capable IP phones. With support for advanced
QoS, low-latency real-time applications, mesh networks, captive portals, 100+ concurrent clients per AP
and dual Gigabit network ports with PoE/PoE+, they are ideal Wi-Fi access points for medium wireless
network deployments with medium user density.
The GWN7660 is a high-efficiency, enterprise-grade 802.11ax Wi-Fi 6 access point, ideal for small-to-
medium sized businesses, multiple floor buildings, residential settings and commercial locations. It offers
dual-band 2×2:2 MU-MIMO with DL/UL OFDMA technology and a sophisticated antenna design for
maximum network throughput and expanded Wi-Fi coverage range. To ensure easy installation and
management, the GWN7660 uses a controller-less distributed network management design in which the
controller is embedded within the product’s Web user interface. The GWN7660 is also supported by
GWN.Cloud and GWN Manager, Grandstream’s cloud and on-premise Wi-Fi management platform. It is
the ideal Wi-Fi AP for voice-over-Wi-Fi deployments and offers a seamless connection with Grandstream’s
Wi-Fi capable IP phones. With support for advanced QoS, low-latency real-time applications, mesh
networks, captive portals, 256 concurrent clients per AP and dual Gigabit network ports with PoE/PoE+,
GWN7660 is an ideal Wi-Fi access point for medium wireless network deployments with medium-to-high
user density.
Caution:
Changes or modifications to this product not expressly approved by Grandstream, or operation of this
product in any way other than as detailed by this User Manual, could void your manufacturer warranty.
Note (VU#228519): “Out of the box” Grandstream Access Points are not affected by this issue. APs with
old firmware are only affected after changing into client-bridge mode. Please refer to our white paper of
“WPA Security Vulnerability” here.
P a g e | 24
GWN76XX User Manual
Version 1.0.19.29
PRODUCT OVERVIEW
Technical Specifications
5G:
IEEE 802.11ax: 7.3 Mbps to 1201 Mbps
IEEE 802.11ac: 6.5 Mbps to 867 Mbps
IEEE 802.11n: .5Mbps to 300Mbps
IEEE 802.11a: 6, 9, 12, 18, 24, 36, 48, 54 Mbps
2.4G:
Wi-Fi Data Rates
IEEE 802.11ax: 7.3 Mbps to 573.5 Mbps
IEEE 802.11n: 6.5Mbps to 300Mbps
IEEE 802.11b: 1, 2, 5.5, 11 Mbps
*Actual throughput may vary depending on many factors including environmental conditions, distance
between devices, radio interference in the operating environment and mix of devices in the network.
P a g e | 25
GWN76XX User Manual
Version 1.0.19.29
802.11n 20MHz: -73dBm @MCS7; 802.11n 40MHz:-70dBm @MCS7; 802.11ax 20MHz: -
60dBm @
MCS11; 802.11ax 40MHz: -58dBm @MCS11
5G
802.11a: -92dBm @6Mbps, -74dBm @54Mbps; 802.11ac 20MHz: -67dBm@MCS8;
802.11ac: HT40:- 63dBm @MCS9; 802.11ac 80MHz: -59dBm @MCS9; 802.11ax
20MHz: -60dBm @
MCS11; 802.11ax 40MHz: -58dBm @MCS11;802.11ax 80MHz: -56dBm @MCS11
Receiver sensitivity varies by frequency band, channel width and MCS rate
Auto Power Saving Self-power adaptation upon auto detection of PoE or PoE+
P a g e | 26
GWN76XX User Manual
Version 1.0.19.29
IEEE 802.11ac: 6.5 Mbps to 1733Mbps
IEEE 802.11a: 6, 9, 12, 18, 24, 36, 48, 54 Mbps
IEEE 802.11n: 6.5Mbps to 600Mbps
Wi-Fi Data Rates IEEE 802.11b: 1, 2, 5.5, 11Mbps
IEEE 802.11g: 6, 9, 12, 18, 24, 36, 48, 54 Mbps
*Actual throughput may vary depending on many factors including environmental conditions, distance
between devices, radio interference in the operating environment and mix of devices in the network.
P a g e | 27
GWN76XX User Manual
Version 1.0.19.29
Network Protocols IPv4, 802.1Q, 802.1p, 802.1x, 802.11e/WMM
QoS 802.11e/WMM, VLAN, TOS
Auto Power Saving Self-power adaptation upon auto detection of PoE or PoE+
Power and Green Power over Ethernet 802.3af/802.3at compliant
Energy Efficiency Maximum Power Consumption: 16.5W; Supports 802.3 az.
Operation: 0°C to 40°C
Environmental Storage: -10°C to 60°C
Humidity: 10% to 90% Non-condensing
Unit Dimension: 205.3 x 205.3 x 45.9mm; Unit Weight: 590g
Unit + Mounting Kits Dimension: 205.3 x 205.3 x 50.9mm; Unit + Mounting Kits
Physical
Weight: 710g
Entire Package Dimension: 258 x 247 x 86mm; Entire Package Weight:930g
Package Content GWN7630 802.11ac Wireless AP, Mounting Kits, Quick Start Guide
*Actual throughput may vary depending on many factors including environmental conditions, distance
between devices, radio interference in the operating environment and mix of devices in the network
P a g e | 28
GWN76XX User Manual
Version 1.0.19.29
WEP, WPA3, WPA/WPA2-PSK, WPA/WPA2 Enterprise, anti-hacking secure boot
Wi-Fi and System
and critical data/control lockdown via digital signatures, unique security certificate
Security
and random default password per device
3×3:3 2.4G(MIMO)
MIMO
3×3:3 5G(MU-MIMO)
Up to175 meters
Coverage Range
*coverage range can vary based on environment
2.4G: 26 dBm
Maximum TX Power
5G: 24 dBm
2.4G
802.11b: -96dBm@1Mbps, -88dBm@11Mbps; 802.11g: -93dBm @6Mbps, -
75dBm@54Mbps; 802.11n 20MHz: -73dBm @MCS7; 802.11n 40MHz:-70dBm
@MCS7
Receiver Sensitivity
5G
802.11a: -92dBm @6Mbps, -74dBm @54Mbps; 802.11ac 20MHz: -
67dBm@MCS8; 802.11ac: HT40:- 63dBm @MCS9; 802.11ac 80MHz: -59dBm
@MCS9
SSIDs 32 SSIDs total, 16 per radio (2.4GHz and 5GHz)
P a g e | 29
GWN76XX User Manual
Version 1.0.19.29
Compliance FCC, CE, RCM, IC
Antennas 3x 2.4 GHz, gain 3 dBi, internal antenna, 3x 5 GHz, gain 3 dBi, internal antenna
*Actual throughput may vary depending on many factors including environmental conditions,
distance between devices, radio interference in the operating environment and mix of
devices in the network
3x3:3 2.4GHz,
MIMO
3x3:3 5GHz
2.4G
802.11b:-92dBm@11Mbps; 802.11g:-76dBm@54Mbps; 802.11n 20MHz:
-73dBm@MCS7; 802.11n 40MHz:-70dBm@MCS7
Receiver Sensitivity 5G
802.11a:-94dBm@6Mbps; 801.11a:-77dBm@54Mbps; 802.11ac 20MHz:
-69dBm@MCS8; 802.11ac HT40:-65dBm@MCS9; 802.11ac 80MHz:
1dBm@MCS9
P a g e | 30
GWN76XX User Manual
Version 1.0.19.29
* Receiver sensitivity varies by frequency band, channel width and MCS rate
Auto Power Saving Self-power adaptation upon auto detection of PoE or PoE+
DC Input: 24VDC/1A
Power and Green
Power over Ethernet 802.3af/802.3at compliant
Energy Efficiency
Maximum Power Consumption: 13.8W
Package Content GWN7610 802.11ac Wireless AP, Mounting Kits, Quick Start Guide
P a g e | 31
GWN76XX User Manual
Version 1.0.19.29
IEEE 802.11ac: 6.5 Mbps to 867 Mbps
IEEE 802.11a: 6, 9, 12, 18, 24, 36, 48, 54 Mbps
IEEE 802.11n: 6.5Mbps to 300Mbps.
IEEE 802.11b: 1, 2, 5.5, 11 Mbps
Wi-Fi Data Rates
IEEE 802.11g: 6, 9, 12, 18, 24, 36, 48, 54 Mbps
*Actual throughput may vary depending on many factors including environmental conditions,
distance between devices, radio interference in the operating environment and mix of
devices in the network
5G: 24dBm
Maximum TX Power 2.4G: 22dBm
*Maximum power varies by country, frequency band and MCS rate
2.4G
802.11b: -96dBm@1Mbps, -88dBm@11Mbps; 802.11g: -93dBm @6Mbps, -
75dBm@54Mbps; 802.11n 20MHz: -73dBm @MCS7; 802.11n 40MHz:-70dBm
@MCS7
Receiver Sensitivity 5G
802.11a: -92dBm @6Mbps, -74dBm @54Mbps; 802.11ac 20MHz: -
67dBm@MCS8; 802.11ac: HT40:- 63dBm @MCS9; 802.11ac 80MHz: -59dBm
@MCS9
* Receiver sensitivity varies by frequency band, channel width and MCS rate
P a g e | 32
GWN76XX User Manual
Version 1.0.19.29
Mounting Indoor wall mount or ceiling mount, kits included
LEDs 3 multi-color LEDs for device tracking and status indication
DC Input: 24VDC/1A
Power and Green
Power over Ethernet 802.3af/802.3at compliant
Energy Efficiency
Maximum Power Consumption: 13.8W
Operation: 0°C to 40°C
Environmental Storage: -10°C to 60°C
Humidity: 10% to 90% Non-condensing
Unit Dimension: 180.4mmx180.4mmx40.8mm; Unit Weight: 388.2g
Physical
Entire Package Dimension: 228.5x220x79mm; Entire Package Weight: 719.3g
Package Content GWN7610 802.11ac Wireless AP, Mounting Kits, Quick Start Guide
*Actual throughput may vary depending on many factors including environmental conditions,
distance between devices, radio interference in the operating environment and mix of
devices in the network
Frequency Bands 2.4GHz Radio: 2412 – 2484 MHz, 5 GHz Radio: 5180-5825 MHz
Channel Bandwidth 2.4G: 20 and 40MHz, 5G: 20, 40 and 80 MHz
WEP, WPA3, WPA/WPA2-PSK, WPA/WPA2 Enterprise, anti-hacking secure boot
Wi-Fi and System
and critical data/control lockdown via digital signatures, unique security certificate
Security
and random default password per device
P a g e | 33
GWN76XX User Manual
Version 1.0.19.29
2×2:2 2.4GHz (MIMO)
MIMO
2×2:2 5GHz (MU-MIMO))
Up to 250 meters
Coverage Range
*coverage range can vary based on environment
2.4G: 24 dBm
Maximum TX Power
5G: 22dBm
2.4G
802.11b: -96dBm@1Mbps, -88dBm@11Mbps; 802.11g: -93dBm @6Mbps, -
75dBm@54Mbps; 802.11n 20MHz: -73dBm @MCS7; 802.11n 40MHz:-70dBm
@MCS7
Receiver Sensitivity 5G
802.11a: -92dBm @6Mbps, -74dBm @54Mbps; 802.11ac 20MHz: -
67dBm@MCS8; 802.11ac: HT40:- 63dBm @MCS9; 802.11ac 80MHz: -59dBm
@MCS9
16 SSIDs total, 8 per radio (2.4GHz and 5GHz)
SSIDs
*GWN7605LR when deployed as Master can only be added to 8 SSIDs.
P a g e | 34
GWN76XX User Manual
Version 1.0.19.29
Compliance FCC, CE, RCM, IC
Antennas 2x 2.4 GHz, gain 3 dBi, internal antenna, 2x 5 GHz, gain 3 dBi, internal antenna
5G: 22dBm
Maximum TX Power 2.4G: 22dBm
*Maximum power varies by country, frequency band and MCS rate.
2.4G
802.11b:-99dBm @1Mbps,-91dBm @11Mbps;802.11g:-93dBm @6Mbps,-
75dBm @54Mbps; 80.11n 20MHz:-72dBm @MCS7;802.11n 40MHz:-69dBm
Receiver Sensitivity @MCS7
5G
802.11a:-91dBm @6Mbps,-74dBm @54Mbps;802.11ac 20MHz:-67dBm
@MCS8;802.11ac HT40:-63dBm @MCS9;802.11ac 80MHz:-60dBm @MCS9
P a g e | 35
GWN76XX User Manual
Version 1.0.19.29
BSSID 32 SSIDs total, 16 per radio (2.4GHz and 5GHz)
Concurrent Clients 450+
DC Input: 24VDC/1A
Power and Green
Power over Ethernet (802.3af) compliant
Energy Efficiency
Maximum Power Consumption: 13.8W
Operation: 0°C to 40°C
Temperature
Storage: -10°C to 60°C
& Humidity
Humidity: 10% to 90% Non-condensing
Unit Dimension: 205.3 x 205.3 x 45.9mm; Unit Weight: 526g
Unit + Mounting Kits Dimension: 205.3 x 205.3 x 53.9mm; Unit + Mounting Kits
Physical
Weight : 610g
Entire Package Dimension: 228.5*220*79mm; Entire Package Weight: 854g
Package Content GWN7600 Wave-2 802.11ac Wireless AP, Mounting Kits, Quick Installation Guide
*Actual throughput may vary depending on many factors including environmental conditions, distance
between devices, radio interference in the operating environment and mix of devices in the network
P a g e | 36
GWN76XX User Manual
Version 1.0.19.29
2.4GHz radio: 2.400 - 2.4835 GHz
Frequency Bands
5GHz radio: 5.150 - 5.250 GHz, 5.725 - 5.850 GHz
2.4G
802.11b: -99dBm@1Mbps, -91dBm@11Mbps; 802.11g:-93dBm@6Mbps,
-75dBm@54Mbps; 802.11n 20MHz: -72dBm@MCS7; 802.11n 40MHz:
Receiver
-69dBm @MCS7
Sensitivity
5G
802.11a: -91dBm@6Mbps, -74dBm@54Mbps; 802.11ac 20MHz: -67dBm@MCS8;
802.11ac; HT40: -63dBm@MCS9; 802.11ac 80MHz: -60dBm@MCS9
SSIDs 32 SSIDs total, 16 per radio (2.4GHz and 5GHz)
P a g e | 37
GWN76XX User Manual
Version 1.0.19.29
Unit Dimension: 290×150×35mm; Unit Weight: 708g
Unit + Mounting Kits Dimension: 290×150×56mm;
Physical Unit + Mounting Kits Weight: 1528.2g
Entire Package Dimension: 423×187×97mm;
Entire Package Weight: 1844g
Enterprise 802.11ac Wave-2 Outdoor Long Range Wi-Fi Access Point, Mounting
Package Content
Kits, Quick Installation Guide
Waterproof Grade IP66-level weatherproof capability when installed vertically
*Actual throughput may vary depending on many factors including environmental conditions, distance
between devices, radio interference in the operating environment and mix of devices in the network
2.4G: 27 dBm
Maximum TX
5G: 25 dBm
Power
*Maximum power varies by country, frequency band and MCS rate
Receiver 2.4G
P a g e | 38
GWN76XX User Manual
Version 1.0.19.29
Sensitivity 802.11b: -96dBm@1Mbps, -88dBm@11Mbps; 802.11g: -93dBm @6Mbps, -
75dBm@54Mbps; 802.11n 20MHz: -73dBm @MCS7; 802.11n 40MHz:-70dBm
@MCS7
5G
802.11a: -92dBm @6Mbps, -74dBm @54Mbps; 802.11ac 20MHz: -67dBm@MCS8;
802.11ac: HT40:- 63dBm @MCS9; 802.11ac 80MHz: -59dBm @MCS9
SSIDs 32 SSIDs total, 16 per radio (2.4GHz and 5GHz)
P a g e | 39
GWN76XX User Manual
Version 1.0.19.29
INSTALLATION
Before deploying and configuring the GWN76XX, the device needs to be properly powered up and
connected to the network. This section describes detailed information on installation, connection and
warranty policy of the GWN76XX.
Equipment Packaging
GWN7660/GWN7630/GWN7610/GWN7605/GWN7600
P a g e | 40
GWN76XX User Manual
Version 1.0.19.29
Table 11: GWN7600LR Equipment Packaging
P a g e | 41
GWN76XX User Manual
Version 1.0.19.29
Below is the equipment packaging for GWN7630LR/ GWN7605LR model.
Figure 4: GWN7660/GWN7630/GWN7615 Figure 5: GWN7610/GWN7600 Ports Figure 6: GWN7600LR Ports Figure 7: GWN7630LR
/GWN7605 Ports /GWN7605LR Ports
P a g e | 42
GWN76XX User Manual
Version 1.0.19.29
Table 13: GWN76XX AP Ports Description
Port Description
Power adapter connector (24V, 1A)
Power
* Available on GWN7610 and GWN7600 only
Step 1:
Connect one end of a RJ-45 Ethernet cable into the NET or PoE/NET port of the GWN76XX unit.
Step 2:
Connect the other end of the Ethernet cable(s) into a LAN port to your Network. (Use PoE/PoE+ switch
for GWN7615/GWN7605/ GWN7605LR/GWN7600LR).
Step 3:
For GWN7610/GWN7600 only, connect the 24V DC power adapter into the power jack on the back of the
access point. Insert the main plug of the power adapter into a surge-protected power outlet. Otherwise,
PoE can be used if the switch port does provide PoE power.
Notes:
GWN7660/GWN7630/GWN7615/GWN7610/GWN7605/GWN7605LR/GWN7600LR/GWN7630LR
can be powered using PoE(802.3af)/PoE+(802.3at) switch via PoE/NET port while GWN7600 can
be powered using PoE (802.3af) switch via PoE/NET port. In this case, both power and network
connectivity will be provided over the PoE/NET port.
GWN7630/GWN7610 has a PoE detection daemon that will monitor the status and update maximum
allowable power for USB ports in real time.
P a g e | 43
GWN76XX User Manual
Version 1.0.19.29
Step 4:
Wait for the GWN76XX to boot up and acquire an IP address from the DHCP Server.
Warranty
If the GWN76XX Wireless Access Point was purchased from a reseller, please contact the company where
the device was purchased for replacement, repair or refund.
If the device was purchased directly from Grandstream, contact our Technical Support Team for an RMA
(Return Materials Authorization) number before the product is returned. Grandstream reserves the right to
remedy warranty policy without prior notification.
Wall Mount
Step1:
Use a pencil to mark the four mounting holes (screw holes DIA
5.5mm, reticle hole DIA 25mm).
Step 3:
PA3.5 x 20 screw
Insert screw anchors into the 5.5 mm holes. Attach the mounting
bracket to the wall by inserting the screws into the anchors.
Plastic Expansion Bolt
P a g e | 44
GWN76XX User Manual
Version 1.0.19.29
Step 4:
Connect the power cable and the Ethernet cable (RJ45) to the
correct ports of your GWN7660/GWN7630/GWN7610/GWN7615/
GWN7605 /GWN7600.
Step 5:
Align the arrow on the GWN AP with the arrow on the locking tab
of the mounting bracket and ensure that your GWN is firmly seated
on the mounting bracket.
Step 6:
Turn the GWN clockwise until it locks into place and fits the locking tab.
Figure 11: Wall Mount – Steps 5 & 6
Ceiling Mount
Step 1:
Step 2:
Place the ceiling backing plate in the center of the ceiling tile and Figure 12: Ceiling Mount – Steps 1 & 2
mark the mounting screw holes (screw holes DIA 5.5mm, reticle
Ceiling Mounting Bracket M3 nut
hole DIA 25mm).
Step 3:
Step 4:
M3.0x50 screw
Connect the power cable and the Ethernet cable (RJ45) to the Figure 13: Ceiling Mount – Step 3
Step 5:
Align the arrow on the GWN AP with the arrow on the locking tab
of the mounting bracket and ensure that your GWN is firmly
seated on the mounting bracket and connect the network and
power cables.
P a g e | 45
GWN76XX User Manual
Version 1.0.19.29
Step 6:
Turn the GWN clockwise until it locks into place and fits the locking
tab.
Note:
Ceiling mounting is recommended for optimal coverage performance.
Figure 15: Ceiling Mount – Steps 5 & 6
Please refer to the following steps for the mounting your GWN7600LR correctly.
1. Prepare the Cover Bracket by inserting the 4 screws (PM8) into corresponding holes.
2. Attach the Cover Bracket with screws on the vertical/horizontal Mounting Bolt were GWN7600LR
will be installed.
3. Assemble the Base Bracket with the Cover Bracket using provided locknuts and screws (PM8).
4. Connect the Ethernet cable (RJ45) to the correct ports of your GWN7600LR.
5. Align the GWN7600LR with the Base Bracket and pull it down to the right position.
P a g e | 46
GWN76XX User Manual
Version 1.0.19.29
Figure 17: GWN7600LR Horizontal Mounting
GWN7630LR can be mounted on the wall or on a metal bar. Please refer to the following steps for the
appropriate installation.
Wall Mount
P a g e | 47
GWN76XX User Manual
Version 1.0.19.29
Pole Mount
4. Open the metal straps by turning the
locking mechanism counter-clockwise.
You can loosen it by hand or use a
flathead screwdriver.
P a g e | 48
GWN76XX User Manual
Version 1.0.19.29
GETTING STARTED
The GWN76XX Wireless Access Point provides an intuitive web GUI configuration interface for easy
management to give users access to all the configurations and options for the GWN76XX’s setup.
This section provides step-by-step instructions on how to read LED patterns, discover the GWN76XX and
use its Web GUI interface.
LED Patterns
The panel of the GWN76XX has different LED patterns for different activities, to help users read the status
of the GWN76XX whether it’s powered up correctly, provisioned, in upgrading process and more, for more
details please refer to the below table.
P a g e | 49
GWN76XX User Manual
Version 1.0.19.29
Discover the GWN76XX
Once the GWN76XX is powered up and connected to the Network correctly, users can discover the
GWN76XX using one of the below methods:
1. Locate the MAC address on the MAC tag of the unit, which is on the underside of the device, or
on the package.
2. From a computer connected to same Network as the GWN76XX , type in the following address
using the GWN76XX’s MAC address on your browser https://gwn_<mac>.local
For example, if a GWN76XX has the MAC address 00:0B:82:8B:58:30, this unit can be accessed
by typing https://gwn_000b828b5830.local/ on the browser.
P a g e | 50
GWN76XX User Manual
Version 1.0.19.29
Method 2: Discover the GWN76XX using GWN Discovery Tool
1. Download and install GWN Discovery Tool from the following link:
http://www.grandstream.com/support/tools
2. Open the GWNDiscoveryTool, click on Select to define the network interface, then click on
Scan.
3. The tool will discover all GWN76XX Access Points connected on the network showing their
MAC, IP addresses and firmware version.
Users can access then the GWN76XX using its WebGUI, the following sections will explain how to access
and use the Web Interface.
P a g e | 51
GWN76XX User Manual
Version 1.0.19.29
Access Web GUI
The GWN76XX embedded Web server responds to HTTPS GET/POST requests. Embedded HTML pages
allow users to configure the device through a Web browser such as Microsoft IE, Mozilla Firefox, Google
Chrome and etc.
1. Make sure to use a computer connected to the same local Network as the GWN76XX.
3. Open a Web browser on the computer and type in the URL using the MAC address as shown in
[Discover the GWN76XX ] or the IP address using the following format: https://IP_Address
4. Enter the administrator’s login and password to access the Web Configuration Menu. The default
administrator's username is always "admin" and password is the unique default Wi-Fi Password
available on the sticker on the back of the unit.
Currently the GWN76XX series web GUI supports English and Simplified Chinese.
Users can select the displayed language at the upper right of the web GUI either before or after login.
P a g e | 52
GWN76XX User Manual
Version 1.0.19.29
Figure 25: GWN76XX Web GUI Language (Web Interface)
Overview Page
Overview is the first page shown after successful login to the GWN76XX’s Web Interface. Overview
page provides an overall view of the GWN76XX information presented in a Dashboard style for easy
monitoring along with firmware version and date-time information at the top.
Users can quickly see the status of the GWN76XX for different items, please refer to the following table:
Shows the number of Access Point that are Discovered, Paired (Online)
P a g e | 53
GWN76XX User Manual
Version 1.0.19.29
Shows the total number of connected clients, and a count for clients
AP Channel Distribution Shows the Channel used for all APs that are paired with this Access Point.
Shows the Top APs list, users may assort the list by number of clients
connected to each AP or data usage combining upload and download.
Top AP
Users may click on to go to Access Points page for basic and
Shows the Top Clients list, users may assort the list of clients by their
Top Clients upload or download. Users may click on to go to Clients page for
more options.
Note that Overview page in addition to other tabs can be updated each 15s, 1min ,2min and 5min or Never
New Firmware Notification: Starting from firmware version 1.0.5.13/1.0.5.14, and once a different
OFFICIAL firmware is released on Grandstream Networks website, the master AP will popup reminder
notification to the administrator in order to upgrade the device. You can click on New button in order to be
redirected to the release note of the new firmware version, for upgrading steps please refer to section
[UPGRADING AND PROVISIONING].
When clicking on "Save" button after configuring or changing any option on the web GUI pages. A message
mentioning the number of changes will appear on the upper menu. Click button to apply changes.
P a g e | 54
GWN76XX User Manual
Version 1.0.19.29
GWN MANAGEMENT PLATFORMS
GWN.Cloud
Starting from firmware 1.0.6.41/1.0.6.43, the GWN76XX can be managed by your GWN.Cloud account,
GWN.Cloud web interface now can be accessed at https://www.gwn.cloud.
GWN.Manager
Starting from firmware 1.0.13.1, the GWN76XX can be managed and monitored by your GWN Manager
account, GWN Manager On-premise Access Points Controller platform can be installed using the link
below: https://www.grandstream.com/support/firmware
Note: GWN Manager installation is supported on virtual machines (Tested on VMware only).
Please refer to GWN Management Platform User Guide for more detailed information.
P a g e | 55
GWN76XX User Manual
Version 1.0.19.29
USING GWN76XX AS STANDALONE ACCESS POINT
The GWN76XX can be used in Standalone mode, where it can act as Master Access Point Controller or
in Slave mode and managed by another GWN76XX Master.
This section will describe how to use and configure the GWN76XX in standalone mode.
GWN76XX can be used as standalone access point out of box, or after factory reset with Wi-Fi enabled
by default.
After powering the GWN76XX and connecting it to the network, GWN76XX will broadcast a default SSID
based on its MAC address GWN [MAC’s last 6 digits] and a random password.
Note that GWN76XX’s default SSID and password information are printed on the MAC tag of the unit as
shown on the below figure.
P a g e | 56
GWN76XX User Manual
Version 1.0.19.29
USING GWN76XX AS MASTER ACCESS POINT CONTROLLER
Master Mode allows a GWN76XX to act as an Access Point Controller managing other GWN76XX access
points. This will allow users adding other access points under one controller and managing them in an
easy and a centralized way.
Master/Slave mode is helpful with large installations that needs more coverage area zones with the same
controller.
Warning:
“Set unit as Master” option will forbid the GWN76XX Access Point from being paired by other Master
GWN76XX and can only act as a Master Access point controller.
Users will need to perform a factory reset to the GWN76XX , or unpair it from the initial GWN76XX to make
it open to Master Access Point mode again.
P a g e | 57
GWN76XX User Manual
Version 1.0.19.29
Login Page
After login, users can use the Setup Wizard tool to go through the configuration setup or exit and configure
it manually. Setup Wizard can be accessed anytime by clicking on while on the web interface.
First, note that by default the GWN controller access point will automatically discover all APs connected
to the same LAN (broadcast domain), but starting from firmware 1.0.5.13/1.0.514 a new possibility has
been added in order to pair and provision remote APs using DHCP option 43 with master direction
explained below.
Master Direction
To pair and manage access points located on remote networks, the admin needs to configure the IP
address of master AP on DHCP option 43 which will be send to the slave access point during booting
stage and allow the save/master connection to be established remotely. GWN76XX accepts option 224
encapsulated in option 43, and the syntax is in TLV format. A simple example of DHCP 43 configuration
would be:
Scenario example: a company has two offices connected via VPN (master AP located on network
192.168.1.0/24 and slave AP located on remote network 192.168.2.0/2). On remote network the admin
can set DHCP option 43 using GWN7000 router as following value:
encap:43,224,”192.168.1.100”.
P a g e | 58
GWN76XX User Manual
Version 1.0.19.29
Note:
The slave AP has the option ”Allow DHCP Option 43 to override GWN Manager Address” enabled
by default.
After that, the slave AP will be listed on the master AP discovered devices and ready for paring and
provisioning process which is described on the next steps.
To Pair a GWN76XX access point connected to the same Network as the GWN76XX follows the below
steps:
2. Click on to discover access points within GWN76XX Network, the following page
will appear.
P a g e | 59
GWN76XX User Manual
Version 1.0.19.29
3. Click on Pair under Actions, to pair the discovered access point as slave with the GWN76XX
acting as Master.
4. The paired GWN76XX will appear Online, users can click on to unpair it.
5. Users can click on next to Master or paired access point to check device configuration for
its status, users connected to it and configuration. Refer to below table for Device Configuration
tabs.
6. Now an easier way to transfer your master authority from one unit to another available unit is
available on Access Point management page. By clicking the then “Transfer
to Master” button the designated slave unit will be upgraded to master and current master will
be downgraded to slave accordingly.
Field Description
Shows the device’s status information such as MAC, Product Model, Part
Status Number, Boot Version, Firmware version, IP Address, Link Speed, Uptime,
and Users count via different Radio channels.
Configuration will help redirecting clients to 5G band accordingly for efficient use
and to benefit from the maximum throughput supported by the client.
NET Port Type: You can configure Trunk port or Access port. If you
chose Access, you also need to specify its VLAN ID. This feature is
not supported in GWN7600/7600LR/GWN7610.
Client Steering: This feature will help Wi-Fi client to roam to other
APs within same Network. parameters of RSSI Threshold and Client
Access Threshold parameters will show up only when Client
Steering is enabled. Supported only by GWN7600/7600LR.
P a g e | 60
GWN76XX User Manual
Version 1.0.19.29
Channel Width: Choose the Channel Width, note that wide
channel will give better speed/throughput, and narrow channel will
have less interference. 20Mhz is suggested in very high-density
environment.
Radio Power: Set the Radio Power, it can be Low, Medium or High.
Note
If a GWN76XX is not being discovered or the pair icon is grey color, make sure that it is not being paired
with another GWN76XX Access Point acting as Master Controller.
P a g e | 61
GWN76XX User Manual
Version 1.0.19.29
If yes users will need to unpair it first, or reset it to factory default settings in order to make it available for
pairing by other GWN76XX Access Point Controller
AP Location
GWN supports a handy feature which allows users to locate other Access points by blinking LED. To use
the feature, navigate on the master web GUI under “Access Points” page and click on the icon near
the desired AP, and it corresponding unit will start blinking the LEDs.
Users can easily transfer the AP from local master to the GWN account by clicking on .
When you already have Network/WIFI configurations on your cloud account, using this feature will let
you choose existing Network/SSID to adopt your local AP.
feature will allow you to transfer your local configurations to your cloud account.
Failover Master
In a Master-Slave architecture, having a backup Master is critical for redundancy and failover function,
thus, and in order to avoid a single point of failure in your wireless network, you can specify a slave AP as
failover master. Whenever it detects the master is down, it will promote itself as failover master within a
time frame of around 20~30 minutes by entering failover mode. After then, if the master AP comes back,
failover master will automatically go back to slave mode, or if the master doesn’t come back to alive,
Administrator can login using “failover” account to turn the failover master as true master and take over all
controls.
P a g e | 62
GWN76XX User Manual
Version 1.0.19.29
Figure 37: Failover Master
Failover Mode
Once failover slave has been selected, the primary master will send the configuration of the network to the
failover slave and the slave will start monitoring the status of the primary master to detect any failure for
any reason (network connection loss, power outage).
In case of failure, the failover slave will promote itself to a temporary backup master while waiting for the
primary master to come back.
During the failover mode users could access the web GUI of the failover slave using a special failover
account with same admin password.
Username = failover
Password = admin password
P a g e | 63
GWN76XX User Manual
Version 1.0.19.29
Figure 38: Failover Mode GUI
The failover mode has only read permission on the configuration and very limited options, users still can
reboot other slave Access points in case it is needed.
Users also can press on « Switch to Master » button in order to set the failover slave as the new primary
master of the wireless network, once this is done they have full write permission control over the web GUI
option as usual. Use that button to switch to master and takeover the rest of the APs.
Important notes:
If you click « Switch to Master », this would be become a non-revertible behavior. Failover Slave
will become actual master and the prior master can't take back the control anymore.
When Failover Slave is switched to Master, you will use the Prior Master AP credentials: username:
admin, and the admin password.
Otherwise, when original master comes back online, then Failover Slave will become slave again
to prior original Master.
Takeover Feature
This feature is used to re-pair the slave APs whose master has gone offline with another master AP in the
same subnet. Please follow the steps to takeover slave APs from other master:
Step 1. Login to the Web GUI of Master and click on “Discover APs” in the Access Points Page.
P a g e | 64
GWN76XX User Manual
Version 1.0.19.29
Figure 39: Takeover - Step 1
Step 2. Select the one or multiple APs to be taken over then click on “takeover” button of the target AP.
Step 3. Enter the Takeover key which is the admin password of the previous master AP.
P a g e | 65
GWN76XX User Manual
Version 1.0.19.29
Figure 41: Takeover - Step 3
Transfer to Master
From the Master Access Point, the Administrator do have the capability to assign any Slave Access point
to become the new Master to manage all the already paired Access points.
After you click on then press the “Switch to Master” button, the following warning message will
prompt in order to confirm the procedure:
P a g e | 66
GWN76XX User Manual
Version 1.0.19.29
Figure 43: Transfer Master Role to another device confirmation message
When the process is finished, the original Master will turn to be a slave for the new Assigned Master, and
to login to the new Master AP web interface, you will need to use the previous Master Admin password.
Note:
All the previously existed paired APs will be provisioned with the new Master AP.
The Switch to Master option is unlimited action and doesn’t require any reset for the already paired
Aps.
Client Bridge
The Client Bridge feature allows an access point to be configured as a client for bridging wired only clients
wirelessly to the network. When an access point is configured in this way, it will share the Wi-Fi connection
to the LAN ports transparently. This is not to be confused with a mesh setup. The client will not accept
wireless clients in this mode.
Once a SSID has the Client Bridge Support enabled, the AP adopted in this SSID can be turned in to
Bridge Client mode by click the then the Bridge button .
Please be noted that once an AP it turned into Client Bridge mode, it cannot be controlled by a Master
anymore, and a factory reset is required to turn it back into normal AP mode.
P a g e | 67
GWN76XX User Manual
Version 1.0.19.29
Figure 45: Client Bridge
In order to verify, you may access the bridged AP configuration, then under Status, the option “Client
Bridge Mode” would be set to Isolated like shown on the figure down below:
Important Notes :
The access point that will be operating on bridge mode, must be set with a fixed IP address before
activating the bridge mode on the access point.
Users must enable client bridge support option under SSID or SSID Wi-Fi settings in order to have
it fully functional.
The Client Bridge requires the SSID to not have any VLAN ID enabled.
P a g e | 68
GWN76XX User Manual
Version 1.0.19.29
ACCESS POINTS
From the access points page, the administrator can monitor different information regarding the access
points of the selected network, this section is separated into 3 sub-sections:
1. Status
2. Configuration
Status
The Status page lists all the access points assigned to the selected network, along with the possibility to
perform some basic operations such locating the device (LEDs start blinking in White) or clear the usage
data, also users can check more detailed information about each access point and benefit from useful
debugging tools which can help diagnose issue when they appear.
Model GWN Access Point Model: GWN7610, GWN7600, GWN7600LR or GWN7630 (Beta)
Channel Channels used by this Access points for both 2G and 5G.
P a g e | 69
GWN76XX User Manual
Version 1.0.19.29
To get more detailed information about the status of a specific access point, users can click on the desired
AP then a page similar to the following will show up:
The next tab “Info” shows detailed information about the select AP, such as the model, name, firmware
version, memory used and which SSID is being broadcasted by this AP and more.
The first tab will display the data usage for the specified access point and allows the user to filter the traffic
graph for the last 2hours, 1day, 1week or 1 month. Also, the user has the ability to visualize the data usage
(Upload/Download) for all SSIDs broadcasted by the AP or select a specific SSID from the drop-down list.
Click on Current clients to see the currently connected clients to the select AP as shown on the figure
below.
P a g e | 70
GWN76XX User Manual
Version 1.0.19.29
The last Tab is used by administrator for debugging purposes and provides the following tools:
One Key Debugging, to capture Wireless, Portal or Mesh traffic and logs will be found in Core
Files.
Core Files, when a crash event happens on the unit, it will automatically generate a coredump
file that can used by engineering team for debugging purposes.
Configuration
The configuration page allows the administrator to add, move, delete, reboot, configure or reset access
points.
There are two methods to add new access points, either manually or using GWN Cloud App.
P a g e | 71
GWN76XX User Manual
Version 1.0.19.29
Move Access Points
The administrator can move GWN Access points from one network to another. Click on Move button and
the following window will popup, select the network where to move the access point and click on move.
To delete an access point, select it, then click on reboot button, the following confirmation message will be
displayed:
To reboot an Access point, select it then click on Reboot button, the below confirmation message will be
displayed:
To configure an access point, select and click on button. A new config page will popup:
P a g e | 72
GWN76XX User Manual
Version 1.0.19.29
Figure 56: Access Point Configuration Page
Device Name Set GWN76xx’s name to identify it along with its MAC address.
Check this option to configure the device with a static IP configuration; it must be in
the same subnet with the default Network Group; Once enabled, these fields will
Fixed IP
show up: IPv4 Address/IPv4 Subnet Mask/IPv4 Gateway/Preferred IPv4
DNS/Alternate IPv4 DNS.
Band Steering will help redirecting clients to a radio band 2.4G or 5G, depend on
what’s supported by the device, for efficient use and to benefit from the maximum
throughput. Four options are allowed by GWN.Cloud:
Band Steering
Disable Band steering: This will disable the band steering feature and the
access point will accept the band chosen by the client.
P a g e | 73
GWN76XX User Manual
Version 1.0.19.29
2G in Priority: 2G Band will be prioritized over 5G Band
Balance: GWN will balance between the clients connected to 2G and those
connected to 5G.
Use Radio Settings: GWN will use the value configured under Radio page.
You can configure Trunk port or Access port. When it’s set to Access, you also need
to specify the VLAN ID.
Net Port Type For example, if you have multiple SSIDs on different VLANs, then the port need to
be set to Trunk in order to negotiate trunk with the switch port where the AP is
plugged. Otherwise if there is only one SSID/VLAN the port type is set to Access.
Some old devices do not support Wi-Fi6 well, and may not be able to scan the signal
or connect poorly. After turning on this switch, it will switch to Wi-Fi5 mode to solve
Wi-Fi5
the compatibility problem. At the same time, it will turn off Wi-Fi6 related functions.
Compatible
Default is "Use Radio Settings", the AP then will use the value configured under
Mode
Radio page.
2.4G & 5G Used for configuring the advanced settings for 2.4G & 5G.
• Choose the Channel Width, note that wide channel will give better
speed/throughput, and narrow channel will have less interference. 20Mhz is
Channel Width
suggested in very high-density environment. Default is "Use Radio Settings", the AP
then will use the value configured under Radio page.
Select Use Radio Settings, or a specified channel, default is Auto. Note that the
proposed channels depend on Country Settings under System
Channel
SettingsMaintenance. Default is "Use Radio Settings", the AP then will use the
value configured under Radio page.
Set the Radio Power depending on desired cell size to be broadcasted, five options
Radio Power are available: “Low”, “Medium”, “High”, “custom” and “Use Radio Settings”. Default
is "Use Radio Settings", the AP then will use the value configured under Radio page.
Custom
When Radio Power is set to “Custom”, allow users to set a custom wireless power
2.4GHz/5GHz Tx
for both 5GHz/2.4GHz band, the value of this field must be between 1 and 31.
Power (dBm)
P a g e | 74
GWN76XX User Manual
Version 1.0.19.29
Enable Minimum Configures whether to enable/disable Minimum RSSI function. This option can be
RSSI either Disabled, or Enabled and set manually or set to Use Radio Settings.
Minimum Specify whether to limit the minimum access rate for clients. This function may
Access Rate guarantee the connection quality between clients and AP. This option can be either
Limit Disabled, or Enabled and set manually or set to Use Radio Settings.
Notes:
The administrator can filter access points by Model or search by name/MAC of the device.
Click on Button to save the changes and apply them to the AP.
To reset an access point, select and click on button, a confirmation message will be
P a g e | 75
GWN76XX User Manual
Version 1.0.19.29
SSIDs
When using GWN76XX as Master Access Point, users can create different SSIDs and assign GWN76XX
Slave Access Points to them.
When editing or adding a new SSID, users will have two tabs to configure:
Wi-Fi: Please refer to the below table for Wi-Fi tab options
Table 19: Wi-Fi
Field Description
Set to NAT mode, clients will get the IP addresses from the specified NAT
Client IP Assignment
pool. And clients connecting to different APs are isolated from each other.
P a g e | 76
GWN76XX User Manual
Version 1.0.19.29
This feature is not supported in GWN7610.
Select the Wi-Fi band the GWN will use, three options are available:
Dual-Band
SSID Band
2.4GHz
5Ghz
WEP 64-bit: Using a static WEP key. The characters can only be
0-9 or A-F with a length of 10, or printable ASCII characters with a
length of 5.
WEP 128-bit: Using a static WEP key. The characters can only be
0-9 or A-F with a length of 26, or printable ASCII characters with a
length of 13.
WEP Key This field is available only when “Security Mode” is set to “WEP 64-bit” or
“WEP 128-bit”.
P a g e | 77
GWN76XX User Manual
Version 1.0.19.29
Two modes are available:
PSK: Use a pre-shared key to authenticate to the Wi-Fi.
WPA Key Mode 802.1X: Use a RADIUS server to authenticate to the Wi-Fi.
This field is available only when “Security Mode” is set to “WPA/WPA2” ,
“WPA2”, “WPA2/WPA3”, “WPA3” or “WPA3-192”.
Two modes are available:
AES: This method changes dynamically the encryption keys
making them nearly impossible to circumvent.
AES/TKIP: use both Temporal Key Integrity Protocol and
WPA Encryption Type
Advanced Encryption Standard for encryption, this provides the
most reliable security.
This field is available only when “Security Mode” is set to “WPA/WPA2” ,
“WPA2”, “WPA2&WPA3”, “WPA3” or “WPA3-128”.
Set the access key for the clients, and the input range should be: 8-63
ASCII characters or 8-64 hex characters.
WPA Pre-Shared Key
This field is available only when “Security Mode” is set to “WPA/WPA2”,
“WPA2”, “WPA2/WPA3” or “WPA3”.
The 802.11w standard is used to prevent certain types of WLAN DoS
attacks. 802.11w extends strong cryptographic protection and provides
data integrity and replay protection for broadcast/multicast Robust
802.11w management frames. Set this option to either to Disabled : disable
802.11w; Optional: both of the client supported and unsupported 802.11w
may have the network access authority; Required: only the client
supported 802.11w have the network access authority.
P a g e | 78
GWN76XX User Manual
Version 1.0.19.29
Configures the address for the RADIUS accounting server.
RADIUS Accounting Server
This field is available only when “WPA Key Mode” is set to “802.1x”.
Enable Captive Portal Click on the checkbox to enable the captive portal feature.
P a g e | 79
GWN76XX User Manual
Version 1.0.19.29
Advanced
Select to hide SSID. SSID will not be visible when scanning for Wi-Fi, to
SSID Hidden connect a device to hidden SSID, users need to specify SSID name and
authentication password manually.
Configures the frequency of DTIM (Delivery Traffic Indication Message)
transmission per each beacon broadcast. Clients will check the AP for
buffered data at every configured DTIM Period. You may set a high value
for power saving consideration.
DTIM Period
Default value is 1, meaning that AP will have DTIM broadcast
every beacon.
If set to 10, AP will have DTIM broadcast every 10 beacons.
Valid range: 1 – 10.
Configure the limit for wireless client. If there's an SSID per-radio on a
LAN, each SSID will have the same limit. So setting a limit of 50 will limit
Wireless Client Limit
EACH ssid to 50 users independently. Note: If set to 0, it equals disable
the limit.
AP will remove the client's entry if the client generates no traffic at all for
Client Inactivity Timeout(s) the specified time period. The client inactivity timeout is set to 300 seconds
by default. Range from 60-3600 seconds.
Configures the client bridge support to allow the access point to be
configured as a client for ridging wired only clients wirelessly to the
network. When an access point is configured in this way, it will share the
Client Bridge Support Wi-Fi connection to the LAN ports transparently.
Once an SSID has Client Bridge Support enabled, the AP adopted in this
SSID can be turned in to Bridge Client mode by click the Bridge button.
Note: This feature isn't supported on GWN7602.
Client Time Policy Select a time policy to be applied to all clients connected to this SSID.
When set to “Disable”: all of the broadcast and multicast packages will be
forwarded to the wireless interface.
Multicast/Broadcast When set as “Enabled”: all of the broadcast and multicast packages will
Suppression be discarded except DHCP/ARP/IGMP/ND;
When set to “Enable with Proxy ARP enabled”: AP will enable the
optimization with Proxy ARP enabled in the meantime.
When set to “Disabled”: none of the multicast package will be converted;
Convert IP multicast to Passive mode: AP will never initiatively broadcast IGMP queries, and the
unicast IGMP snooping item will be aged out 300 seconds after it is registered,
which may result in the failure of forwarding multicast data.
P a g e | 80
GWN76XX User Manual
Version 1.0.19.29
Active mode: AP will initiatively broadcast IGMP queries to keep updating
of the IGMP snooping items.
Enable Schedule Enable this option to assign a schedule for the bandwidth rule.
This option will enable GWN AP to answer the ARP requests from its
ARP Proxy LAN for its connected Wi-Fi clients. This is mainly to reduce the airtime
consumed by ARP Packets
P a g e | 81
GWN76XX User Manual
Version 1.0.19.29
Device Membership: Used to add or remove paired access points to the SSID.
P a g e | 82
GWN76XX User Manual
Version 1.0.19.29
CLIENTS
Users can configure clients’ parameters, time policy and also check the list of the clients that has been
banned after time disconnect policy has been enabled. Below we discuss each section of this menu:
Clients
Users can access clients list connected to GWN76XX from Web GUI Clients Clients to perform
different actions to wireless clients.
Click on under Actions to check client’s status and modify basic settings such Device’s Name.
Click on to block a client’s MAC address from connecting to the zone’s SSID.
Users can press button to customize items to display on the page. Following items are supported:
P a g e | 83
GWN76XX User Manual
Version 1.0.19.29
Figure 62: Clients - Select Items
P a g e | 84
GWN76XX User Manual
Version 1.0.19.29
ACCESS CONTROL
Access List
From this menu, users can manage in global way the blacklist of clients that will be blocked from accessing
the Wi-Fi network, click on to add or remove MAC addresses of client from global
blacklist.
A second option is to add custom access lists that will be used as matching mechanism for MAC address
filtering option under SSIDs to allow (whitelist) or disallow (blacklist) clients access to the Wi-Fi network.
Click on in order to create new access list, then fill it with all MAC addresses to be matched.
P a g e | 85
GWN76XX User Manual
Version 1.0.19.29
Users can check « Enable Schedule » to assign a schedule for the list when it will take effect.
Once this is done, this access list can be used under SSID Wi-Fi settings to filter clients either using
whitelist or blacklist mode.
Time Policy
The timed client disconnect feature allows the system administrator to set a fixed time for which clients
should be allowed to connect to the access point, after which the client will no longer be allowed to connect
for a user configurable cool-down period.
The configuration is based on a policy where the administrator can set the amount of time for which clients
are allowed to connect to the Wi-Fi and reconnect type and value after which they will be allowed to
connect back after they have been disconnected.
To create a new policy, go under ClientsTime Policy and add new one. Then set the following
parameters:
P a g e | 86
GWN76XX User Manual
Version 1.0.19.29
Table 20: Time Policy Parameters
Option Description
Limit Client Connection Time Sets amount of time a client may be connected.
Select the method with which we will reset a client’s connection timer
so they may reconnect again. Options are:
Reset Daily.
Client Reconnect Timeout Type
Reset Weekly.
Reset Hourly.
Timed Reset.
If “Timed Reset” is selected, this is the period for which the client will
Client Reconnect Timeout
have to wait before reconnecting.
If “Reset Weekly” is selected, this is the day when the reset will be
Day of the Week
applied.
If “Reset Weekly” or “Reset Daily” is selected, this is the hour and day
Hour of the Day
when the reset will be applied.
Note: Time tracking shall be accounted for on a per-policy basis, such that a client connected to any SSID
assigned the time tracking policy will accrue a common counter, regardless of which SSID they are
connected to (as long as those SSIDs all share the same time tracking policy).
Banned Clients
Click on menu to view the list of the clients that have been banned after time
disconnect feature has taken effect, these clients will not be allowed to connect back until timeout reset or
P a g e | 87
GWN76XX User Manual
Version 1.0.19.29
Bandwidth Rules
The bandwidth rule is a GWN76XX feature that allows users to limit bandwidth utilization per SSID or client
(MAC address or IP address).
This option can be configured from the GWN76XX WebGUI under “Bandwidth Rules”.
Click to add a new rule, the following table provides an explanation about different options
Field Description
SSID Select which SSID will be affected by the bandwidth rule limitation.
Enter the MAC address of the device to which the limitation will be
MAC
applied, this option appears only when MAC type is selected.
Enter the IP address of the device to which the limitation will be applied,
IP address
this option appears only when IP Address type is selected.
Enable Schedule Enable this option to assign a schedule for the bandwidth rule.
Upload Limit Specify the limit for the upload bandwidth using Kbps or Mbps.
Download Limit Specify the limit for the download bandwidth using Kbps or Mbps.
P a g e | 88
GWN76XX User Manual
Version 1.0.19.29
Figure 69: MAC Address Bandwidth Rule
Note:
The same settings for bandwidth management are available from the following menus:
Per-Client
Navigate on the web GUI under “ClientsEditBandwidth Rules” where you can set the Upstream and
Downstream rate in Mbps.
P a g e | 89
GWN76XX User Manual
Version 1.0.19.29
CAPTIVE PORTAL
Captive Portal feature on GWN76XX AP helps to define a Landing Page (Web page) that will be displayed
on Wi-Fi clients’ browsers when attempting to access Internet. Once connected to a GWN76XX AP, Wi-Fi
clients will be forced to view and interact with that landing page before Internet access is granted.
The Captive Portal feature can be configured from the GWN76XX Web page under “Captive Portal”.
The page contains following sub-menus: Guest, Policy List, Splash Page and Vouchers.
Guest
This section lists the clients connected or trying to connect to Wi-Fi via Captive Portal.
Users can press button to customize items to display on the page. Following items are supported:
P a g e | 90
GWN76XX User Manual
Version 1.0.19.29
Policy List
The policy configuration page allows adding multiple captive portal policies which will be applied to SSIDs
and contains options for different authentication types a splash page that can be easily configured as
shown on the next section.
P a g e | 91
GWN76XX User Manual
Version 1.0.19.29
Figure 74: Add a New Policy
Field Description
Name Enter the name of the Captive Portal policy
P a g e | 92
GWN76XX User Manual
Version 1.0.19.29
Login for free: when choosing this option, the landing page feature will not
provide any type of authentication, instead it will prompt users to accept the
license agreement to gain access to internet.
RADIUS Server: Choosing this option will allow users to set a RADIUS
server to authenticate connecting clients.
Login with Password: Choose this page when using authentication via a
password.
Configures the period of validity, after the valid period, the client will be re-
Client Expiration
authenticated again.
Configure the time when the client will automatically deauthenticate when it is
Client Idle Timeout
idle. This does not apply to Voucher Captive portal mode.
RADIUS Authentication Select the RADIUS authentication method, 3 methods are available: PAP, CHAP
Method and MS-CHAP.
If Authentication Type is set to “Social Login Authentication”
Set the key for the portal, once clients want to connect to the Wi-Fi, they should
Facebook APP Secert
enter this key.
Twitter Check this box to enable Twitter Authentication.
Force to Follow If checked, users need to Follow owner before been authenticated.
Consumer Secret Enter the app secret to use Twitter Login API.
P a g e | 93
GWN76XX User Manual
Version 1.0.19.29
If checked, the users will be redirected to the default portal page once connected
Use Default Portal to the GWN.
Page If unchecked, users can manually select which Portal Page to use from Portal
Page Customization drop-down list.
Select the customized portal page (if “Use Default Portal Page” is unchecked).
/facebook.html
/password_auth.html
/portal_default.html
/portal_pass.html
Portal Page
/portal_tip.html
Customization
/social_auth.html
/status.html
/twitter.html
/twitter_website.html
/vouchers_auth.html
Choose the landing page, 2 options are available:
Landing Page Redirect to the Original URL.
Redirect to External Page.
Once the landing page is set to redirect to external page, user should set the
Redirect External Page URL address for redirecting.
URL Address This field appears only when Landing Page is set to “Redirect to an External
Page”.
Enable Daily Limit If enabled, captive portal will limit user connection by times of one day.
P a g e | 94
GWN76XX User Manual
Version 1.0.19.29
Notes:
1. If Facebook authentication is configured, you will need to log in your Facebook account of
https://developers.facebook.com/apps , and set the OAuth redirect to :
https://cwp.gwn.cloud:8443/GsUserAuth.cgi?GsUserAuthMethod=3
2. If Twitter authentication is configured, you will need to log in your Twitter account of
https://apps.twitter.com/app, and set the callback URLs to:
http://cwp.gwn.cloud:8080/GsUserAuth.cgi
Field Description
Enter the External Splash Page URL, and make sure to enter the pre-
External Splash Page
authentication rules request by the external portal platform in the pre-
URL
authentication configuration option.
RADIUS Server
Fill in the IP address of the RADIUS server.
Address
RADIUS Server Port Set the RADIUS server port, the default value is 1812.
RADIUS Server Secret Fill in the key of the RADIUS server.
RADIUS Accounting Configures the address for the RADIUS accounting server address.
Server
RADIUS Accounting Configures RADIUS accounting server listening port (default is 1813).
Server Port
RADIUS Accounting Enter the secret password for client authentication with RADIUS accounting
Server Secret server.
Accounting Update Enter Update Interval for RADIUS Accounting Server. The interval unit can be
Interval set by seconds, minutes, hours or days.
P a g e | 95
GWN76XX User Manual
Version 1.0.19.29
Figure 75: Authentication rules
Pre-Authentication Rules
Using this option, users can set rules to match traffic that will be allowed for connected Wi-Fi users before
authentication process. This can be needed for example to setup Facebook authentication where some
traffic should be allowed to Facebook server(s) to process the user’s authentication. Or simply to be used
to allow some type of traffic for unauthenticated users.
Post-Authentication Rules
On the other hand, post authentication rules are used to match traffic that will be banned for Wi-Fi clients
after authentication. As an example, if you want to disallow connected Wi-Fi clients to issue Telnet or SSH
traffic after authentication then you can set post authentication rules to match that traffic and once a
connected client passes the authentication process they will be banned from issuing telnet and SSH
connections.
Splash Page
Files configuration page allows users to view and upload HTML pages and related files (images…).
P a g e | 96
GWN76XX User Manual
Version 1.0.19.29
Figure 76: Captive Portal – Splash Page
User can add folder in corresponding folder by selecting the folder and click on .
Click on to edit the corresponding file, in another word, to replace the file with a new one.
Vouchers
Voucher feature will allow clients to have internet access for a limited duration using a code that is randomly
generated from GWN controller.
As an example, a coffee shop could offer internet access to customers via Wi-Fi using voucher codes that
can be delivered on each command. Once the voucher expires the client can no longer connect to the
internet.
P a g e | 97
GWN76XX User Manual
Version 1.0.19.29
Note that multiple users can use a single voucher for connection with expiration duration of the voucher
that starts counting after first successful connection from one of the users that are allowed.
Another interesting feature is that the admin can set data bandwidth limitation on each created voucher
depending on the current load on the network, users’ profile (VIP customers get more speed than regular
ones...etc.) and the internet connection available (fiber, DSL or cable…etc.) to avoid connection
congestion and slowness of the service.
Each created voucher can be printed and served to the customers for usage, and the limit is 1000 vouchers.
The usage of voucher feature needs to be combined with captive portal that is explained after this section,
in order to have the portal page requesting clients to enter voucher code for authentication.
Voucher Configuration
To configure/create vouchers for clients to use, follow below steps:
Users can specify how many vouchers to generate which have the same profile, this way the GWN
will generate as many vouchers as needed which do have the same settings avoiding creating
them one by one.
The admin can verify the status of each vocoder on the list (In use, not used, expired …etc.).
P a g e | 98
GWN76XX User Manual
Version 1.0.19.29
Figure 77: Add Voucher Sample
The below figure shows the status of the vouchers after GWN randomly generates the code for each one.
Users can click on buttons and to delete and print multiple vouchers or
Also, users can use the drop-down list filter to filter the vouchers that where
created at specific date-time.
Field Description
P a g e | 99
GWN76XX User Manual
Version 1.0.19.29
Specify how many vouchers to generate which will have same
Create Quantity profile/settings (duration, bandwidth and number of users).
Valid range: 1 – 1000.
Specify download byte limit for the voucher. The unit can be either M
(Megabyte) or G (Gigabyte).
Byte Limit
Valid range: 10 – 1048576 (M)
1 – 1024 (G)
Specify the duration after which the voucher will expire, and clients
will be disconnected from internet.
Duration
Note: in case or multiple users, the duration will start counting after
first user starts using the voucher.
Set the validity period of credentials, limited to 1-365 integer. The unit
Validity Time
is day.
Download Limit Set the downstream bandwidth speed limit (in Kbps or Mbps).
Upload Limit Set the upstream bandwidth speed limit (in Kbps or Mbps).
Notes Notes for the admin when checking the list of vouchers.
In order to successfully use the voucher feature, users will need to create a captive portal in order to
request voucher authentication codes from users before allowing them access to internet. More details
about captive portal will be covered on next section but for voucher configuration please follow below steps.
3. Set the following parameters as shown on the screenshot for basic setup then save and apply.
P a g e | 100
GWN76XX User Manual
Version 1.0.19.29
Figure 79: Captive Portal with Voucher authentication
Then go under your SSID configuration page and enable the generated captive portal under Wi-Fi settings
tab.
P a g e | 101
GWN76XX User Manual
Version 1.0.19.29
RADIO
When using GWN76XX as Master Access Point, users can edit the frequency band used by the AP and
channel used along with the Transmission power for each band.
P a g e | 102
GWN76XX User Manual
Version 1.0.19.29
Table 25: Radio Settings
General
Field Description
Notes:
Beacon Interval
1. When AP enables several SSIDs with different interval values,
the max value will take effect.
P a g e | 103
GWN76XX User Manual
Version 1.0.19.29
Some old devices do not support Wi-Fi6 well, and may not be able to scan
the signal or connect poorly. After turning on this switch, it will switch to
Wi-Fi5 Compatible Mode Wi-Fi5 mode to solve the compatibility problem. At the same time, it will
turn off Wi-Fi6 related functions.
Note: This only takes effect for GWN7660.
P a g e | 104
GWN76XX User Manual
Version 1.0.19.29
Coverage Hole Detection: CHD enables AP to decide whether
to increase the AP power by the current SNR and SNR threshold
of the connected clients.
P a g e | 105
GWN76XX User Manual
Version 1.0.19.29
SECURITY
Rogue AP
The GWN Access Points offer the ability to prevent malicious intrusion to the network and increases the
wireless security access of clients when introducing Rogue AP detection. The detected APs will be listed
with all the details under Detected section for further intervention. This feature is not supported in
GWN7610/GWN7602.
In the figure below is the configuration page in order to enable the Rogue AP detection and we can set the
trusted Aps on the network.
In the figure below we would have a list showing all the detected rogue AP on the network scanned by the
GWN access point.
P a g e | 106
GWN76XX User Manual
Version 1.0.19.29
Table 26: Rogue AP
Field Description
P a g e | 107
GWN76XX User Manual
Version 1.0.19.29
Firewall
This section allows user to control the outgoing and incoming traffic from clients by manually setting up.
policies to either deny or permit the traffic based on protocol type and by specifying SSIDs and destinations.
Field Description
Select type of traffic to be affected by the outbound rule like ICMP, HTTP,
HTTPS… or you may add another type of traffic when selecting Custom.
Service Protocol When set to Custom, user could enter the following:
Protocol: TCP or UDP
Port: define the port used by this protocol.
Policy Either select to Permit or Deny Outbound traffic.
Select either:
Particular Domain: enter FQDN of a destination or string: for
instance, entering test will block service to any domain name
Destination containing string test.
Particular IP: IP address of destination.
Particular Network: Network IP address.
All: the rule will apply on all destinations.
SSID Select one or multiple SSIDs to apply the rule on.
User can define outbound and inbound rules on the traffic from the options in figure below:
P a g e | 108
GWN76XX User Manual
Version 1.0.19.29
Table 28: Firewall-Inbound
Field Description
Select type of traffic to be affected by the inbound rule like ICMP, HTTP,
HTTPS… or you may add another type of traffic when selecting Custom.
Service Protocol When set to Custom, user could enter the following:
Protocol: TCP or UDP
Port: define the port used by this protocol.
Policy Either select to Permit or Deny inbound traffic.
Select either:
Particular IP: IP address of source.
Source
Particular Network: Network IP address.
All: the rule will apply on all destinations.
Configure the destination address.
All
Destination Particular IP
Particular Domain
Particular Network
P a g e | 109
GWN76XX User Manual
Version 1.0.19.29
SERVICE
Hotspot 2.0
This section lists the configuration page to Hotspot 2.0. This is a technology that allows mobile devices to
automatically connect to available Passpoint-certified WiFi hotspots. This gives the device liberty to hop
from one hotspot on a network to another without the need log in to each hotspot. This feature is currently
a beta. This is not supported in GWN7610/GWN7602/GWN7660.
To enable this feature, proceed from Access Point’s web page Service Hotspot 2.0:
General
Field Description
P a g e | 110
GWN76XX User Manual
Version 1.0.19.29
This value must be consistent with the BSSID of an AP to identify the AP
set that provides the same network access service. The format is
H:H:H:H:H:H, where H is a 2-digit hexadecimal number.
Network Access Enabled or disable internet access.
Select network type:
Private network
Private network with guest access
Chargeable public network
Network Type Free public network
Personal device network
Emergency services only network
Test or experimental
Wildcard
Select IPv4 Type:
Address type not available
Public IPv4 address available
Port-restricted IPv4 address available
Single NATed private IPv4 address available
IPv4 Type Double NATed private IPv4 address available
Port-restricted IPv4 address and single NATed IPv4 address
available
Port-restricted IPv4 address and double NATed IPv4 address
available
Availability of the address type not known
Select IPv4 Type:
Address type not available
IPv6 Type
Address type available
Availability of the address type not known
Configure the Network authentication type to help users find and select
the right network. Select either:
Acceptance of terms and conditions
Network Auth Type On-line enrollment supported
http/https redirection
DNS redirection
Not configured
Venue
Select the Venue Group type:
Unspecified
Venue Group Assembly
Business
Educational
P a g e | 111
GWN76XX User Manual
Version 1.0.19.29
Factory
Institutional
Mercantile
Residential
Storage
Utility
Vehicular
Outdoor
Venue Type Select the Venue type, which will depend on the Venue Group.
Operator Name
Language Code Select the language.
Roaming Consortium
Configure the Roaming Consortium Name to identify network operators.
Roaming Consortium Name The format is H-H-H or H-H-H-H-H, where H is a 2-digit hexadecimal
number.
Domain
Domain Enter the domain name.
Realm
Select the EAP Method: EAP-TLS, EAP-SIM, EAP-TTLS, EAP-AKA and
Realm
EAP-AKA’.
Cellular Network Information
Cellular Network Information Enter the Name, Country Code and Network Code.
Port Configuration
IP Protocol Configure the protocol type: ICMP, TCP, UDP or ESP.
Port Status Set the port status to either: Open, Close or Unknown.
Advanced
Set the WAN Link Status to either: Not configured, Link-up, Link-down or
WAN Link Status
Link-test.
WAN Downlink Speed Set Download speed.
P a g e | 112
GWN76XX User Manual
Version 1.0.19.29
When this option is disabled, it means the DGAF is enabled, the AP will
forward all downlink broadcast ARP messages and wireless group
broadcasts.
When this option is anabled, the DGAF function is disabled, the AP will
Disable Downstream Group-
discard all downlink broadcast ARP messages and wireless group
Addressed Forwarding
broadcasts.
Disable DGAF function to prevent attackers from using the vulnerability of
all clients in the same BSS using the same Group Temporal Key (GTK) to
forge Group address frames and then attack the clients.
SNMP
This section lists the SNMP options available to integrate the GWN76xx with monitoring systems
Field Description
Authentication Mode Set the authentication mode to: either MD5 or SHA.
Privacy Mode Set the authentication mode to: either AES128 or DES.
P a g e | 113
GWN76XX User Manual
Version 1.0.19.29
DHCP Server
By default, GWN has DHCP relay, but users could create and manage multiple DHCP server pools which
will be mapped to the SSID using VLAN tag, for example when creating a DHCP pool under “System
Settings DHCP Server” users need to set a VLAN ID and same one should be set under SSID to map
the configured DHCP pool with the SSID. This way users could configure multiple SSIDs mapped to
multiple VLANs on the network in which case they are isolated by layer 2 switching.
The table below summarizes the configuration parameters for DHCP server.
Field Description
Configure the static address of the DHCP server (through which GWN
DHCP Server Static Address
Master AP will be accessible).
DHCP Server Subnet Mask Sets the subnet mask for the DHCP Pool.
DHCP Lease Time Set the DHCP lease time for the clients (default 12h).
Add the Option items for DHCP, detailed option contents can be found via:
DHCP Options
https://wiki.openwrt.org/doc/howto/dhcp.dnsmasq
Set the gateway for DHCP, and it is better to set the gateway, should be
DHCP Gateway
different that the static IP of the access point and on the same subnet.
NAT Pool
GWN76xx NAT feature defines an address pool from which the Wi-Fi clients will acquire their IP address
so that the access point acts as a lightweight home router.
Notes:
P a g e | 114
GWN76XX User Manual
Version 1.0.19.29
This option cannot be enabled when Client IP Assignment is set to Bridge mode
This option is not supported in GWN7610
Table 32: NAT Pool Parameters
Field Description
Static DHCP
Users can use the feature in order to set static DHCP binding to certain clients, to whom you do not want
the IP address to change.
P a g e | 115
GWN76XX User Manual
Version 1.0.19.29
SYSTEM
Settings
LEDs
GWN76XX Access Points series support also the LED schedule feature. This feature is used to set the
timing when the LEDs are ON and when they will go OFF at customer’s convenience.
This can be useful for example when the LEDs become disturbing during some periods of the day, this
way with the LED scheduler, you can set the timing so that the LEDs are off at night after specific hours
and maintain the Wi-Fi service for other clients without shutting down the AP.
Field Description
Following example on the next page sets the LEDs to be turned on from 8am till 8pm every day.
Basic
Basic page allows Country and Time configuration.
Field Description
P a g e | 116
GWN76XX User Manual
Version 1.0.19.29
Anti-domain name hijacking protection. If enabled, when the address
returned by the superior DNS is a private LAN address, it will be regarded as
Rebind Protection
a domain name hijacking, thus discarding the analytical result. If disabled,
the analytical results will not be discarded.
Due to the security enhancement, unless Legacy TLS Compatibility (only
available on 1.0.15.4 or higher version) is enabled, master AP on 1.0.15.4 or
higher firmware will not compatible with slave AP on firmware lower than
Legacy TLS Compatibility
1.0.15.4. Master AP on firmware lower than 1.0.15.4 will also not be
compatible with slave AP on firmware 1.0.15.4 or higher. Cloud and GWN
Manager will still support both firmwares. Default is enabled.
Web HTTP Access Enables Web HTTP Access. By default, it’s disabled.
Configure the IP address or URL of the NTP server. The device will obtain
NTP Server
the date and time from the configured server.
Change the Date Display Format, three options are possible YYYY/MM/DD,
Date Display Format
MM/DD/YYYY and DD/MM/YYYY.
Select the time schedule when AP will be rebooted. Refer to [S] to define
Reboot Schedule
time.
Once disabled, the hardware reset button on AP will be ineffective. Factory
Hardware Reset
reset may only be triggered from software layer.
P a g e | 117
GWN76XX User Manual
Version 1.0.19.29
GWN7630 Yes Yes Yes Yes Yes
Account
The Access Web page provide configuration for admin and user password.
Field Description
Current Administrator
Enter the current administrator password
Password
New Administrator Change the current password. This field is case sensitive with a maximum
Password length of 32 characters.
Confirm New
Enter the new administrator password one more time to confirm.
Administrator Password
Configure the password for user-level Web GUI access. This field is case
New User Password
sensitive with a maximum length of 32 characters.
Note: User passwords registered for authentication through the web portal are stored in an encrypted form.
Mesh
In Mesh Network, wireless connection is established between multiple Aps, which is used to pass-through
data traffic rather than client association. Each AP will evaluate the performance of wireless channel based
on several factors and choose one or multiple appropriate APs to setup connection.
CAP (Central Access Point): this is an access point that has an uplink connection to the wired
network.
P a g e | 118
GWN76XX User Manual
Version 1.0.19.29
RE (Range Extender): This is an access point that participate on the mesh network topology and
has a wireless uplink connection to the central network.
In order to deploy mesh access points (RE), users/installers can follow below steps:
1. Make sure to have the master and CAP access points already deployed (sometimes the CAP
access points can be the master controller of the network).
2. Next, we need to pair the RE access points to the master. This can be done in two ways:
A. Connect all REs to the same wired LAN as the master then perform the normal process of
discovery/pairing process, and after successfully pairing the APs they can be deployed on the
field.
B. REs can also be discovered wirelessly when powered via PSU or PoE Injector, and admin
can configure them after discovery. This requires that the REs must be within the range of the
Master or CAP Slave’s signals coverage.
Note: If there are other GWN APs broadcasting in the same field with different subnet, RE may be
wirelessly connected to those networks and cannot be discovered and paired by your Master.
Therefore, it is recommended to use the first method of wired pairing and then deploy those REs.
3. After that all slave access points have been deployed and paired to the master, you can directly
manage them to operate the mesh network. Mesh service configuration is the same as transitional
GWN WLAN.
4. Log into the master page, and under Access Points page you can see the information, for example
the AP in the “Online Wireless” state is the RE (Range Extender) with a wireless uplink to the
CAP. The APs showing “Online” state are either a wired master or CAP.
For Global mesh network settings, on GWN76XX, navigate to the menu “System Settings Mesh”
for setting up the following parameters described below:
P a g e | 119
GWN76XX User Manual
Version 1.0.19.29
Figure 90: Mesh settings for GWN76XX
The following table down below describes the Mesh configuration settings for the GWN76XX:
Table 37: Mesh configuration on GWN76XX
Filed Description
Enable Mesh When checked the Mesh feature will be activated. Default is disabled.
Interval in seconds to scan for available Mesh neighbors. Must be less than
Scan Interval
or equal to 300 seconds.
Interface Select either 2.4GHz or 5GHz band.
Define how many AP can be cascaded wirelessly with the AP. The minimum
Wireless Cascades
value is 1 and maximum value is 3.
For more detailed information about GWN Mesh network feature, you may refer to the following technical
document: Mesh Network Guide.
Important Notes:
The RE should be set with DHCP Mode for a Client device connected to NET PORT to acquire an
IP Address.
If RE is set with static IP, then using a PoE injector is recommended as any Network activity
detected by the AP will cause the Mesh to fail. Otherwise user will only need to make sure that
there is no DHCP Server in the network connected to the AP's Ethernet port.
P a g e | 120
GWN76XX User Manual
Version 1.0.19.29
Schedule
Users can use the schedule configuration menu to set specific schedule for GWN features while giving the
flexibility to specify the date and time to turn ON/OFF the selected feature.
The Schedule can be used for settings up specific time for Wi-Fi where the service will be active or for
LED schedule or bandwidth rules …etc.
2. Select the periods on each day that will be included on the schedule and enter a name for the
schedule (ex: office hours).
3. Users can choose to set weekly schedule or absolute schedule (for specific days for example),
and if both weekly schedule and absolute schedules are configured on the same day then the
absolute schedule will take effect and the weekly program will be cancelled for that specific date.
4. Once the schedule periods are selected, click on Save to save the schedule.
P a g e | 121
GWN76XX User Manual
Version 1.0.19.29
The list of created schedules will be displayed as shown on the figure below. With the possibility to edit or
delete each schedule:
Maintenance
Upgrade
The Upgrade Web page allows upgrade related configuration.
Field Description
Allow users to choose the method to load the firmware and config:
Upgrade Protocol
TFTP, HTTP or HTTPS.
Allow DHCP options 66 and 43 Enable/Disable DHCP options 66 and 43 to override the upgrade
override and provisioning settings
Reboot
Click on button to reboot device.
P a g e | 122
GWN76XX User Manual
Version 1.0.19.29
Factory Reset Click on to restore the device and all online APs to
factory default settings.
Upgrade Now Click on button to begin the upgrade. Note that the
device will reboot after downloading the firmware.
Defines the hour of the day (0-23) to check the HTTP/TFTP server
for firmware upgrade or configuration file changes.
Hour of Day (0-23)
This field is available when select “Check at Hour of Day” and
“Check at Day of Week” in “Automatic Upgrade”
Defines the day of the week to check the HTTP/TFTP server for
firmware upgrade or configuration file changes.
Day of Week
This field is available when select “Check at Day of Week” in
“Automatic Upgrade”
P a g e | 123
GWN76XX User Manual
Version 1.0.19.29
Syslog
The syslog Web page provides configuration settings for syslog.
Field Description
Syslog Server Enter the IP address or URL of Syslog server.
Select the level of Syslog, 5 levels are available: None, Debug, Info,
Syslog Level
Warning and Error.
Log DNS Queries Check to log DNS Queries.
Alert
The Alert page allows the administrator to select a predefined set of system events and to send
notifications upon the change of the set events via email.
Email
Table 40: Email configuration
Field Description
Enable Email Notification Set whether to enable Email notification
Alert Configure
P a g e | 124
GWN76XX User Manual
Version 1.0.19.29
Table 41: Email Events
Filed Description
Configures whether to send notification if memory usage is greater than the
Memory Usage
configured threshold.
Once enabled, master will generate an Alert when AP throughput reaches the
AP Throughput
configured threshold.
Once enabled, master will generate an Alert when SSID throughput reaches the
SSID Throughput
configured threshold.
Admin Password
Configures whether to send notification on admin password change.
Change
Rogue AP Once enabled, system will generate an Alert when there is a Rogue AP detected.
AP Offline Configures whether to send notification when AP going offline.
P a g e | 125
GWN76XX User Manual
Version 1.0.19.29
UPGRADING AND PROVISIONING
Upgrading Firmware
The GWN76XX can be upgraded to a new firmware version remotely or locally. This section describes
how to upgrade your GWN76XX.
The GWN76XX can be upgraded via TFTP/HTTP/HTTPS by configuring the URL/IP Address for the
TFTP/HTTP/HTTPS server and selecting a download method. Configure a valid URL for TFTP, HTTP or
HTTPS; the server name can be FQDN or IP address.
Field Description
Authenticate Config File Authenticates configuration file before acceptance. The default
setting is No.
XML Config File Password The password for encrypting the XML configuration file using
OpenSSL. The password is to decrypt the XML configuration file is
it is encrypted via OpenSSL
Upgrade Via Allow users to choose the method to load the firmware and config:
TFTP, HTTP or HTTPS.
Firmware Server Define the IP address or URL for the firmware upgrade server.
Make sure all files relevant to the firmware are updated completely
Config Server Configure the IP address of URL for the file server.
Allow DHCP options 66 and 43 Enable/Disable DHCP options 66 and 43 to override the upgrade
override and provisioning settings.
P a g e | 126
GWN76XX User Manual
Version 1.0.19.29
Automatic Upgrade Set automatic upgrade every intervals/day/week. The device will
request to upgrade automatically according to the setup time. The
default setting is Disabled
Hour of Day (0-23) Defines the hour of the day (0-23) to check the HTTP/TFTP server
for firmware upgrade or configuration file changes.
This field is available when select “Check at Hour of Day” and
“Check at Day of Week” in “Automatic Upgrade”
Day of Week Defines the day of the week to check the HTTP/TFTP server for
firmware upgrade or configuration file changes.
This field is available when select “Check at Day of Week” in
“Automatic Upgrade”
Upgrade Now
Click on button to begin the upgrade. Note that the
device will reboot after downloading the firmware.
Note: Please save and apply your configuration first if there are any
configuration modification.
Download Configuration
Click on button to download the device
configuration file to PC.
Upload Configuration
Click on to select a compressed config file to restore
the config; after succeeding, the device will reboot automatically.
Reboot
Click on button to reboot device.
Factory Reset
Click on to restore the device and all online APs to
factory default settings.
When the GWN76XX is being paired as slave using another GWN76XX Access Point acting as Controller,
users can upgrade their paired access points from the GWN76XX Master Controller.
To upgrade a slave access point, log in to the GWN76XX acting as Master Controller and go to Access
Points.
P a g e | 127
GWN76XX User Manual
Version 1.0.19.29
Figure 94: Access Points
Make sure that firmware server path is set correctly under Maintenance, check the desired APs to upgrade,
Sequential Upgrade
If you choose multiple slave devices to upgrade their firmware, two options are available: “All-at-Once”
and “Sequential”. “All-at-Once” will use the default method, all checked slaves will upgrade their firmware
at the same time, while using “Sequential” upgrade method, the slaves will upgrade their firmware one by
one in order to:
P a g e | 128
GWN76XX User Manual
Version 1.0.19.29
Figure 96: All-at-Once and Sequential Upgrade
Once you choose sequential upgrade, the following icon will update you about
the number of upgraded slaves out of the selected slaves.
The GWN76XX configuration can be backed up locally or via network. The backup file will be used to
restore the configuration on GWN76XX when necessary.
Download Configuration
Users can download the GWN76XX configuration for restore purpose under Web GUISystem
SettingsMaintenanceUpgrade.
Upload Configuration
Users can upload configuration file to the GWN76XX under Web GUISystem
SettingsMaintenanceUpgrade.
Please note that the GWN76XX will reboot after the configuration file is restored successfully.
P a g e | 129
GWN76XX User Manual
Version 1.0.19.29
Configuration Server
Users can download and provision the GWN76XX by putting the config file on a TFTP/HTTP or HTTPS
server and set Config Server to the TFTP/HTTP or HTTPS server used in order for the GWN76XX to be
provisioned with that config server file.
Users could perform a reboot and reset the device to factory functions under Web GUISystem
Syslog
On the GWN76XX, users could dump the syslog information to a remote server under Web GUISystem
SettingsMaintenance. Enter the syslog server hostname or IP address and select the level for the
syslog information. Five levels of syslog are available: None, Debug, Info, Warning, and Error.
P a g e | 130
GWN76XX User Manual
Version 1.0.19.29
EXPERIENCING THE GWN76XX Wi-Fi ACCESS POINTS
Please visit our website: http://www.grandstream.com to receive the most up- to-date updates on firmware
releases, additional features, FAQs, documentation and news on new products.
We encourage you to browse our product related documentation, FAQs and User and Developer Forum
for answers to your general questions. If you have purchased our products through a Grandstream
Certified Partner or Reseller, please contact them directly for immediate support.
Our technical support staff is trained and ready to answer all your questions. Contact a technical support
member or submit a trouble ticket online to receive in-depth support.
Thank you again for purchasing Grandstream GWN76XX Wi-Fi Access Point, it will be sure to bring
convenience and color to both your business and personal life
P a g e | 131
GWN76XX User Manual
Version 1.0.19.29