0% found this document useful (0 votes)
25 views

moxa-awk-1151c-awk-3252a-awk-4252a-series-user-manual-v1.0

Uploaded by

skv.0450
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
25 views

moxa-awk-1151c-awk-3252a-awk-4252a-series-user-manual-v1.0

Uploaded by

skv.0450
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 142

AWK Series User Manual

Version 1.0, February 2023

www.moxa.com/products

Models covered by this user manual:


AWK-1151C Series
AWK-3252A Series
AWK-4252A Series

© 2023 Moxa Inc. All rights reserved.


AWK Series User Manual
The software described in this manual is furnished under a license agreement and may be used only in accordance
with the terms of that agreement.

Copyright Notice
© 2023 Moxa Inc. All rights reserved.

Trademarks
The MOXA logo is a registered trademark of Moxa Inc.
All other trademarks or registered marks in this manual belong to their respective manufacturers.

Disclaimer
• Information in this document is subject to change without notice and does not represent a commitment
on the part of Moxa.
• Moxa provides this document as is, without warranty of any kind, either expressed or implied, including,
but not limited to, its particular purpose. Moxa reserves the right to make improvements and/or
changes to this manual, or to the products and/or the programs described in this manual, at any time.
• Information provided in this manual is intended to be accurate and reliable. However, Moxa assumes no
responsibility for its use, or for any infringements on the rights of third parties that may result from its
use.
• This product might include unintentional technical or typographical errors. Changes are periodically
made to the information herein to correct such errors, and these changes are incorporated into new
editions of the publication.

Technical Support Contact Information

www.moxa.com/support
Table of Contents
1. About This Manual ................................................................................................................................ 5
Symbol Definition for Web Interface Configurations.................................................................................... 5
About Note, Attention, and Warning ......................................................................................................... 6
Configuration Reminders ........................................................................................................................ 7
A: About Mandatory Parameters ....................................................................................................... 7
B: Preconfiguring Settings ............................................................................................................... 7
2. Getting Started ..................................................................................................................................... 9
Functional Design .................................................................................................................................. 9
LED Indicators ............................................................................................................................... 9
Event Indicators ........................................................................................................................... 13
Beeper ........................................................................................................................................ 13
Reset Button................................................................................................................................ 14
Relay (AWK-3252A and AWK-4252A Only) ...................................................................................... 14
First-time Installation and Configuration ................................................................................................. 15
Communication Testing ........................................................................................................................ 18
3. Web Interface Configuration .............................................................................................................. 20
Function Introduction ........................................................................................................................... 20
Device Summary ................................................................................................................................. 21
Device Information ....................................................................................................................... 21
System Information ...................................................................................................................... 21
System Status ............................................................................................................................. 22
SSID........................................................................................................................................... 22
System............................................................................................................................................... 23
System Management .................................................................................................................... 23
Account Management.................................................................................................................... 37
Management Interface .................................................................................................................. 42
Time ........................................................................................................................................... 49
Wi-Fi .................................................................................................................................................. 53
Wireless Settings.......................................................................................................................... 53
Connection Check and Recovery ..................................................................................................... 70
Roaming ..................................................................................................................................... 74
Ports .................................................................................................................................................. 75
Port Settings................................................................................................................................ 75
Layer 2 Switching ................................................................................................................................ 77
VLAN .......................................................................................................................................... 77
IP Configuration .................................................................................................................................. 83
General Settings .......................................................................................................................... 83
IP Configuration Status ................................................................................................................. 84
Routing and NAT.................................................................................................................................. 84
Routing ....................................................................................................................................... 84
NAT ............................................................................................................................................ 87
Firewall .............................................................................................................................................. 92
Layer 2 Policy .............................................................................................................................. 92
Layer 3 Policy .............................................................................................................................. 94
Security.............................................................................................................................................. 96
Device Security ............................................................................................................................ 97
Diagnostics ......................................................................................................................................... 98
System Status ............................................................................................................................. 98
Network Status .......................................................................................................................... 101
Event Logs and Notifications ........................................................................................................ 104
Tools ........................................................................................................................................ 116
Setup Wizard .................................................................................................................................... 122
Wi-Fi Basic ................................................................................................................................ 123
Wi-Fi Security ............................................................................................................................ 125
System ..................................................................................................................................... 127
Maintenance and Tools ....................................................................................................................... 129
Disable Auto Save ...................................................................................................................... 129
Locator ..................................................................................................................................... 130
Reboot ...................................................................................................................................... 132
Reset Device.............................................................................................................................. 134
Change Password ....................................................................................................................... 135
Log Out ..................................................................................................................................... 136
A. Supporting Information .................................................................................................................... 137
Device Recovery ................................................................................................................................ 137
B. Accessing the Serial Consoles ........................................................................................................... 139
RS-232 Console Configuration (115200, None, 8, 1, VT100) ................................................................... 139
Configuration by Telnet and SSH Consoles ............................................................................................ 141
1. About This Manual

Thank you for purchasing a Moxa’s AWK-3252A Series/AWK-4252A Series/AWK-1151C Series product,
referred to as 'AWK Series" in this manual. Read this user’s manual to learn how to connect your Moxa
product with various interfaces and how to configure all settings and parameters via the user-friendly web
interface. Note that the web interface screenshots shown in this manual use the AWK-3252A Series for
reference. Since all AWK Series use the same firmware image, the screenshots will be identical for all
models, with the exception of the model name.

Three methods can be used to connect to the Moxa’s device, which all will be described in the next two
chapters. See the following descriptions for each chapter’s main functions.

Chapter 2: Getting Started

In this chapter, we explain the instruction on how to initialize the configuration on Moxa’s product. We
provide three interfaces to access the configuration settings: RS-232 console interface, SSH/Telnet CLI
(Command Line Interface), and web interface.

Chapter 3: Web Interface Configuration

In this chapter, we explain how to access the Moxa AWK-3252A’s various configuration, monitoring, and
management functions. These functions can be accessed through a web browser, or through the command
line console (CLI). In this manual, we describe how to configure the AWK Series functions via the web
interface, which provides the most user-friendly way to configure a Moxa device. For more information on
how to configure the AWK Series using the command line interface, refer to the AWK Series Command Line
Interface User Manual.

Symbol Definition for Web Interface


Configurations
The Web Interface Configuration includes various symbols. For your convenience, refer to the following table
for the meanings of the symbols.

Symbols Meanings

Add

Read detailed information

Clear all

Column selection

Refresh

Enable/Disable Auto Save


When Auto Save is disabled, users need to click this icon to save the configuration.

Export

Edit

Perform a Wi-Fi site survey (Client mode only)

Re-authentication

Delete

AWK Series User Manual 5


Symbols Meanings

Panel View

Expand

Collapse

Hint or additional information

Settings

Data comparison

Menu icon

Change mode

Locator

Reboot

Reset to defaults

Logout

Increase

Decrease

Equal

Menu

Search

Hide text that is typed into a text box (usually used when typing a password)

Show text typed into a text box (usually used when checking a password)

About Note, Attention, and Warning


Throughout the whole manual, you may see notes, attentions, and warnings. The definition of each type is
explained below.

Note: This is used to provide additional information for a function, feature, or scenario. Here is an example:

NOTE
Reset to Default button is disabled by default; users need to enable it in the web console if they want to
use it.

Attention: This is used to notify readers of matters or situations that require extra attention to avoid
possible issues. Here is an example:

ATTENTION
When a different type of module has been inserted into the AWK Series, we suggest you configure the
settings, or use reset-to-default.

AWK Series User Manual 6


Warning: This is used to notify readers of matters or situations that require extra attention to avoid serious
harm to the user or the device. Here is an example:

WARNING
There is a risk of explosion if the battery is replaced by an incorrect type.

Configuration Reminders
In this section, several examples will be used to remind users when configuring the settings for Moxa’s AWK
Series.

A: About Mandatory Parameters

• The items with asterisks mean they are mandatory parameters that must be provided. In the figure
above, the parameters for Entry Status, Destination, and Interface are required to be able to save or
apply the configuration.
• If an item is marked in red means this item has been skipped. You need to fill in the parameters or you
cannot apply or create the function.

In addition, some parameter values will be limited to a specific range. If the values exceed the range, it
cannot be applied or created.

B: Preconfiguring Settings
Some function settings can be configured while the function is disabled. These changes will take effect when
the function is enabled, without having to reconfigure the settings again. For example, on the SNMP
configuration page, users can configure the SNMP Account List settings while SNMP is disabled. When SNMP
is enabled, the previously configured Account List settings will take effect.

AWK Series User Manual 7


AWK Series User Manual 8
2. Getting Started

In this chapter, we provide an overview of the AWK Series, and explain how to log into the Moxa’s AWK
Series for the first time through the web-based interface.

Functional Design
LED Indicators
The LEDs on the front and right panels of the AWK Series provide a quick and easy means of determining
the current operational status and wireless settings.

AWK-4252A Series

The following table summarizes how to read the device’s wireless settings from the LED displays.

LED Color State Description


Front Panel LED Indicators (System)
Power is being supplied from DC to the PWR socket (power input 1
On
or 2) or PoE.
PWR Green
Power is not being supplied from DC to the PWR socket (power input
Off
1 or 2) or PoE.
On Link established on the LAN port at 1000 Mbps.
Green Blinking Data is being transmitted at 1000 Mbps.
Off The LAN port’s 1000 Mbps link is inactive.
LAN 2
On Link established on the LAN port at 10/100 Mbps.
Amber Blinking Data is being transmitted at 10/100 Mbps.
Off The LAN port’s 10/100 Mbps link is inactive.
On Link established on the LAN port at 1000 Mbps.
Green Blinking Data is being transmitted at 1000 Mbps.
Off LAN port’s 1000 Mbps link is inactive.
LAN 1
On Link established on the LAN port at 10/100 Mbps.
Amber Blinking Data is being transmitted at 10/100 Mbps.
Off The LAN port’s 10/100 Mbps link is inactive.

AWK Series User Manual 9


LED Color State Description
Client/Client-Router/Slave has established a Wi-Fi connection to an
On
Green AP/Master with a SNR value of 35 or higher.
Blinking Data is being transmitted over the 2.4 GHz band.
2.4GHz
Client/Client-Router/Slave has established a Wi-Fi connection to an
On
Amber AP/Master with a SNR value of less than 35.
Blinking Data is being transmitted over the 2.4 GHz band.
Client/Client-Router/Slave established a Wi-Fi connection to an
On
Green AP/Master with a SNR value of 35 or higher.
Blinking Data is being transmitted over the 5 GHz band.
5GHz
Client/Client-Router/Slave has established a Wi-Fi connection to an
On
Amber AP/Master with a SNR value of less than 35.
Blinking Data is being transmitted over the 5 GHz band.
Red On System initialization failure, configuration error, or system error.
SYS
Green On System startup completed and is operating normally.

AWK-3252A Series

AWK Series User Manual 10


The following table summarizes how to read the device’s wireless settings from the LED displays.

LED Color State Description


Front Panel LED Indicators (System)
On Power is being supplied from power input 1.
PWR1 Green
Off Power is not being supplied from power input 1.
On Power is being supplied from power input 2.
PWR2 Green
Off Power is not being supplied from power input 2.
On Power is being supplied via PoE.
PoE Amber
Off Power is not being supplied via PoE.
Red On System initialization failure, configuration error, or system error.
SYS
Green On System startup completed and is operating normally.
Client/Client-Router/Slave has established a Wi-Fi connection to an
On
Green AP/Master with a SNR value of 35 or higher.
Blinking Data is being transmitted over the 2.4 GHz band.
2.4GHz
Client/Client-Router/Slave has established a Wi-Fi connection to an
On
Amber AP/Master with a SNR value of less than 35.
Blinking Data is being transmitted over the 2.4 GHz band.
Client/Client-Router/Slave established a Wi-Fi connection to an
On
Green AP/Master with a SNR value of 35 or higher.
Blinking Data is being transmitted over the 5 GHz band.
5GHz
Client/Client-Router/Slave has established a Wi-Fi connection to an
On
Amber AP/Master with a SNR value of less than 35.
Blinking Data is being transmitted over the 5 GHz band.
LAN LED Indicators (RJ45 Port)
On Link established on the LAN port at 1000 Mbps.
Green Blinking Data is being transmitted at 1000 Mbps.
Off The LAN port’s 1000 Mbps link is inactive.
LAN 1
On Link established on the LAN port at 10/100 Mbps.
Amber Blinking Data is being transmitted at 10/100 Mbps.
Off The LAN port’s 10/100 Mbps link is inactive.
On Link established on the LAN port at 1000 Mbps.
Green Blinking Data is being transmitted at 1000 Mbps.
Off LAN port’s 1000 Mbps link is inactive.
LAN 2
On Link established on the LAN port at 10/100 Mbps.
Amber Blinking Data is being transmitted at 10/100 Mbps.
Off The LAN port’s 10/100 Mbps link is inactive.

AWK Series User Manual 11


AWK-1151C Series

The following table summarizes how to read the device’s wireless settings from the LED displays.

LED Color State Description


Front Panel LED Indicators (System)
On Power is being supplied from DC to the PWR socket.
PWR Green
Off Power is not being supplied from DC to the PWR socket.
Client/Client-Router/Slave has established a Wi-Fi connection to an
On
AP/Master with a SNR value of 35 or higher.
Green
Data is being transmitted over the wireless interface (2.4 GHz or 5
Blinking
GHz).
WLAN
Client/Client-Router/Slave has established a Wi-Fi connection to an
On
AP/Master with a SNR value of less than 35.
Amber
Data is being transmitted over the wireless interface (2.4 GHz or 5
Blinking
GHz).
Red On System initialization failure, configuration error, or system error.
SYSTEM
Green On System startup completed and is operating normally.
LAN LED Indicators (RJ45 Port)
On Link established on the LAN port at 1000 Mbps.
Green Blinking Data is being transmitted at 1000 Mbps.
Off LAN port’s 1000 Mbps link is inactive.
LAN
On Link established on the LAN port at 10/100 Mbps.
Amber Blinking Data is being transmitted at 10/100 Mbps.
Off The LAN port’s 10/100 Mbps link is inactive.

AWK Series User Manual 12


Event Indicators
The device LEDs are also used to indicate specific device events or issues. Refer to the following table for
more details.

AWK-3252A
Applicable AWK-3252A AWK-1151C
AWK-4252A
Models AWK-4252A
AWK-1151C
SYS 2.4 GHz 5 GHz WLAN
LED
Red Green Amber Green Amber Green Amber Green
Blinks at
IP address conflict Off – – – – – –
4 Hz
Failed to get an IP – –
Blinks at
from the DHCP Off – – – –
4 Hz
server
ABC-02 is Blinks at – –
Off – – – –
connected 4 Hz
Uploading/retrievi
ng file(s) to/from
ABC-02
Blinks at Blinks at Blinks at Blinks at
(e.g., upgrading Off Off Off Off
4 Hz 4 Hz 4 Hz 4 Hz
firmware,
backup/restore
configuration)
Failed to
upload/retrieve
file(s) to/from
ABC-02.
Possible reasons
are: Blinks at
Off – – – – – –
The file does not 4 Hz
exist,
failed to copy the
file, or the ABC-
02 has insufficient
space
The device is Blinks at Blinks at Blinks at Blinks at
Off Off Off Off
being located. 4 Hz 4 Hz 4 Hz 4 Hz
The Reset button
is being pressed
Blinks at
for less than 5 Off – – – –
1 Hz
seconds (system
reboot)
The Reset button
is being pressed
for 5 to 10 Blinks at
Off – – – – – –
seconds 4 Hz
(System factory
reset)
The Reset button
is being pressed
for longer than 10
Off Solid on – – – – – –
seconds
(Abort reboot or
reset)

Beeper
The beeper emits two short beeps when the system is ready.

AWK Series User Manual 13


Reset Button
Depending on the AWK Series model, the Reset is located on the side panel (AWK-4252A), top panel (AWK-
3252A), or bottom panel (AWK-1151C). You can reboot the AWK series or reset it to factory default settings
by pressing the RESET button with a pointed object such as an unfolded paper clip.

• System reboot: Hold down the Reset button for under 5 seconds and then release. The SYS LED will
blink at 1 Hz.
• Reset to factory default: Hold down the Reset button for over 5 seconds until the SYS LED starts
blinking green. Release the button to reset the AWK Series to its factory default settings. The SYS LED
will blink at 4 Hz.
• Abort the action: Hold the Reset button down for longer than 10 seconds and then release to abort
the reset action. The SYS LED will stop blinking and turn solid.

NOTE
The reset to default factory settings function of the reset button is disabled by default and must be
enabled in the web console. Refer to the Reset Button Active Duration section for more detailed
information.

Relay (AWK-3252A and AWK-4252A Only)


The AWK-3252A and AWK-4252A Series have one relay output which is used to forward system failures and
user-configured events.

The two wires attached to the relay contacts form an open circuit when a user-configured event is triggered.

If a user-configured event does not occur, the relay circuit will remain closed. For safety reasons, the relay

circuit is kept open when the device is not powered up.

Summary of the AWK-3252A’s Relay Status

Power Status Event Relay


Off - Open
Yes Open
On
No Closed

The AWK-3252A relay is marked on the 2 terminal block contacts, as shown in the image below:

The AWK-4252A relay is integrated into the DI/DO connector (pins 1 and 2), as shown in the image below:

AWK Series User Manual 14


First-time Installation and Configuration
Before installing the AWK Series, make sure that all items in the Package Checklist listed in the Quick
Installation Guide are in the box. You will need access to a notebook computer or PC equipped with an
Ethernet port.

NOTE
The images in the instructions below use the AWK-3252A Series interface for reference. The instructions are identical
for all supported AWK models.

Step 1: Select the power source.


The AWK Series can be powered by a DC power input or PoE (Power over Ethernet) if applicable.

NOTE
For PoE-capable models, when both a DC and PoE power source is connected, the DC input will be the
default primary power source while PoE will be secondary. Using both DC and PoE power sources at the
same time does not provide seamless power redundancy. In the event the DC power source goes down,
the AWK will perform a reboot to negotiate the PoE protocol before switching to the PoE source.

Step 2: Connect the AWK Series to a notebook or PC.


Since the AWK Series supports MDI/MDI-X auto-sensing, you can use either a straight-through or
crossover cable to connect the AWK Series to the computer. The LED indicator on the AWK Series'
LAN port will light up when a connection is established.
Step 3: Set up the computer’s IP address.
Choose an IP address on the same subnet as the AWK Series. Since the AWK Series' default IP
address is 192.168.127.253, and the subnet mask is 255.255.255.0, you should set the IP
address of the computer to 192.168.127.xxx.
Step 4: Access the homepage of the AWK.
Open your computer’s web browser and type https://192.168.127.253 in the address field to
access the AWK’s homepage. If successfully connected, the AWK’s interface homepage will
appear. Click NEXT.

AWK Series User Manual 15


Step 5: Choose your country or region. (Not applicable to -US models)
Select your country or region from the drop-down list and click NEXT.

Step 6: Create a user account and password.


There is no default user account and password. Enter the username, password, and email address
for your user account and click CREATE.

AWK Series User Manual 16


NOTE
The username and password are case-sensitive.

After creating your account, you will be automatically redirected to the login screen.

Step 7: Log in to the device.


Once the initialization message disappears (in red), enter your username and password and click
LOG IN.

AWK Series User Manual 17


Communication Testing
After installing the AWK Series you can run a sample test to make sure the AWK Series and the wireless
connection are functioning normally. Two testing methods are described below. Use the first method if you
are using only one AWK Series device as an AP and use the second method if you are using AWK Series
devices as Client and AP.

How to Test the AWK Series as an AP


AWK-3252A/AWK-4252A

If you are testing the AWK Series device as an AP, you will need a second notebook computer equipped with
a WLAN card. Configure the WLAN card to connect to the AWK Series and change the IP address of the
second notebook (Notebook B) so that it is on the same subnet as the first notebook (Notebook A), which is
connected to the AWK Series.

After configuring the WLAN card, establish a wireless connection with the AWK Series and open a DOS
window on Notebook B. At the prompt, type

ping <IP address of notebook A>

and then press Enter (see the figure below). A “Reply from IP address …” response means the
communication was successful. A “Request timed out.” response means the communication failed. In this
case, recheck the configuration to make sure the connections are correct.

AWK Series User Manual 18


How to Test the AWK Series as a Client
AWK-3252A/AWK-4252A/AWK-1151C

If you are testing the AWK Series as a Client, you will need a second notebook computer (Notebook B)
equipped with an Ethernet port as well as an AP connected to notebook A. Configure the AWK Series
connected to notebook B for Client mode with the correct SSID and credentials matching the target AP.

After setting up the testing environment, open a DOS window on notebook B. At the prompt, type:

ping <IP address of notebook A>

and then press Enter. A “Reply from IP address …” response means the communication was successful. A
“Request timed out” response means the communication failed. In this case, recheck the configuration to
make sure the connections are correct.

AWK Series User Manual 19


3. Web Interface Configuration

Moxa’s AWK Series offers a user-friendly web interface for easy configuration. All functions of the Moxa’s
AWK Series can be configured via this web interface.

Function Introduction
This section describes the web interface design, providing a basic visual concept for users to understand the
main information or configuration menu for the web interface pages.

1. Login Name: This shows the name of the user that is currently logged in.
2. Search Bar: Type the name of the function you want to search for in the function menu tree.
3. Function Menu: All functions of the AWK Series are shown here. Click the function you want to view or
configure.
4. Device Summary: All important device information and statistics are shown here.
5. Maintenance: Functions for device maintenance are located here.

AWK Series User Manual 20


Device Summary
After successfully connecting to the AWK Series, the Device Summary will automatically appear. To view
the device summary from anywhere in the interface, click Device Summary on the Function Menu.

See the following sections for a detailed description of each widget.

Device Information
This shows the model information, including product model name, the country or region where the device is
located, and firmware version.

System Information
This shows system information including the device name, location, description, and current operation
mode.

AWK Series User Manual 21


System Status
This shows the system status, including system time, system uptime, and IP address.

SSID
This shows information for the SSIDs configured on the AWK Series. This widget includes both the 2.4 GHz
and 5 GHz bands.

AWK Series User Manual 22


System
The System section houses all device and system configuration functions. From here, you can configure the
System Management, Account Management, Management Interface, and Time settings.

System Management
The System Management section houses three subsections: System Information, Firmware Upgrade,
and Configure Backup and Restore.

System Information
On the System Information screen, you can enter a device name, description, and location for the device.
This makes it easier to identify different AWKs that are connected to your network.

AWK Series User Manual 23


Device Name
Setting Description Factory Default
Enter a name for the device. This is useful for differentiating
between the roles or applications of different units. Note that
the device name cannot be empty and must comply with the
following naming rules:
• Only supports letters (a-z), numbers (0-9), and special
1 to 255 characters character dash (-) moxa-awk-3252a
• Cannot contain spaces
• Cannot start with dash (-)
• Cannot end with dash (-)
• When used in a PROFINET environment, cannot start with
the prefix "port-x" where "x" equals 0 to 9. There is no
validity to identify incorrect name formats.

Location
Setting Description Factory Default
Enter a location for the device. This is useful for identifying
Max. 255 characters None
where the device is deployed. Example: production line 1.

Description
Setting Description Factory Default
Max. 255 characters Enter a description for the device. AWK-3252A

Contact Information
Setting Description Factory Default
Enter the contact information of the person responsible for the
Max. 255 characters None
device in case there is a problem with the device.

When finished, click APPLY to save your changes.

AWK Series User Manual 24


Firmware Upgrade
There are four ways to update your AWK’s device firmware: from a local *.rom file, by remote TFTP server,
remote SFTP server, or the ABC-02 tool.

Local
Select Local from the Source drop-down list. Before performing the firmware upgrade, download the target
firmware (*.rom) file first from Moxa’s website (www.moxa.com) to the local host.

Running Firmware Version


Setting Description Factory Default
Current firmware Current running
This shows the current running firmware version.
version number version

AWK Series User Manual 25


Uploaded Firmware Version
Setting Description Factory Default
New firmware version
This shows the new firmware version. None
number

Select File
Setting Description Factory Default
Click the browse icon and navigate to the firmware file on the
Select the firmware file None
local host.

When finished, click UPLOAD to upload the file, then click UPGRADE to perform the firmware upgrade.

TFTP Server
Select TFTP from the Source drop-down list.

Running Firmware Version


Setting Description Factory Default
Current firmware Current running
This shows the current running firmware version.
version number version

Uploaded Firmware Version


Setting Description Factory Default
New firmware version
This shows the new firmware version. None
number

Server IP Address
Setting Description Factory Default
Enter the IP address of the TFTP server where the new
TFTP server address None
firmware file (*.rom) is located.

File Name
Setting Description Factory Default
Firmware file name Enter the file name of the new firmware. None

When finished, click UPLOAD to upload the file, then click UPGRADE to perform the firmware upgrade.

AWK Series User Manual 26


SFTP
Select SFTP from the Source drop-down list.

Running Firmware Version


Setting Description Factory Default
Current firmware Current running
This shows the current running firmware version.
version number version

Uploaded Firmware Version


Setting Description Factory Default
New firmware version
This shows the new firmware version. None
number

Server IP Address
Setting Description Factory Default
Enter the IP address of the SFTP server where the new
SFTP server address None
firmware file (*.rom) is located.

File Name
Setting Description Factory Default
Firmware file name Enter the file name of the new firmware. None

Account
Setting Description Factory Default
Enter the SFTP user account name. This account must be
SFTP server account None
authorized to ensure a secure connection to the SFTP server.

Password
Setting Description Factory Default
Enter the SFTP user account password. This account must be
SFTP server password None
authorized to ensure a secure connection to the SFTP server.

When finished, click UPLOAD to upload the file, then click UPGRADE to perform the firmware upgrade.

AWK Series User Manual 27


ABC-02
Select ABC-02 from the Source drop-down. This method requires the Moxa ABC-02 USB configuration
backup and restoration tool with the target firmware file is connected to the device. You can download the
target firmware (*.rom) file from Moxa’s website (www.moxa.com). For more information about the Moxa
ABC-02 Series USB tool, visit the product page.

Running Firmware Version


Setting Description Factory Default
Current firmware Current running
This shows the current running firmware version.
version number version

Uploaded Firmware Version


Setting Description Factory Default
New firmware version
This shows the new firmware version. None
number

Select File
Setting Description Factory Default
Click the browse icon and navigate to the firmware file on the
Select the firmware file None
attached ABC-02 device.

When finished, click UPLOAD to upload the file, then click UPGRADE to perform the firmware upgrade.

AWK Series User Manual 28


Configuration Backup and Restore
There are four ways to back up and restore your Moxa AWK’s configuration: from a local configuration file,
by remote TFTP server, remote SFTP server, or an ABC-02 USB backup and restoration tool.

Backup
The Backup tab is used to export a backup of the current configuration. This backup file can then be used
to restore the device’s configuration settings, or to import it to other AWK Series devices.

Local
Select Local first from the Storage Location drop-down list.

Configuration Source
Setting Description Factory Default
Running Configuration Back up the running configuration. Running
Startup Configuration Back up the start-up configuration. Configuration

AWK Series User Manual 29


Storage Location
Setting Description Factory Default
Local Back up the configuration files for the local computer.
TFTP Back up the configuration files via TFTP.
Local
SFTP Back up the configuration files via SFTP.
ABC-02 Back up the configuration files via ABC-02 USB tool.

Configuration Password
Setting Description Factory Default
Enter the configuration password. You will need to enter this
Configuration password None
password when importing the backup file.

When finished, click BACK UP.

TFTP Server
Select TFTP first from the Storage Location drop-down list.

Configuration Source
Setting Description Factory Default
Running Configuration Back up the running configuration. Running
Startup Configuration Back up the start-up configuration. Configuration

Storage Location
Setting Description Factory Default
Local Back up the configuration files for the local computer.
TFTP Back up the configuration files via TFTP.
Local
SFTP Back up the configuration files via SFTP.
ABC-02 Back up the configuration files via ABC-02 USB tool

Server IP Address
Setting Description Factory Default
TFTP server address Enter the IP address of the TFTP server. None

File Name
Setting Description Factory Default
Max. 256 characters
(including the .ini file Enter the configuration backup file name. None
extension).

AWK Series User Manual 30


Configuration Password
Setting Description Factory Default
Enter the configuration password. You will need to enter this
Configuration password None
password when importing the backup file.

When finished, click BACK UP.

SFTP Server
Select SFTP first from the Storage Location drop-down list.

Configuration Source
Setting Description Factory Default
Running Configuration Back up the running configuration. Running
Startup Configuration Back up the start-up configuration. Configuration

Storage Location
Setting Description Factory Default
Local Back up the configuration files for the local computer.
TFTP Back up the configuration files via TFTP.
Local
SFTP Back up the configuration files via SFTP.
ABC-02 Back up the configuration files via ABC-02 USB tool

Server IP Address
Setting Description Factory Default
Enter the IP address of the SFTP server where the new
SFTP server address None
firmware file (*.rom) is located.

File Name
Setting Description Factory Default
Max. 256 characters
(including the .ini file Enter the configuration backup file name. None
extension).

AWK Series User Manual 31


Account
Setting Description Factory Default
Enter the SFTP user account name. This account must be
SFTP server account None
authorized to ensure a secure connection to the SFTP server.

Password
Setting Description Factory Default
Enter the SFTP user account password. This account must be
SFTP server password None
authorized to ensure a secure connection to the SFTP server.

Configuration Password
Setting Description Factory Default
Enter the configuration password. You will need to enter this
Configuration password None
password when importing the backup file.

When finished, click BACK UP.

ABC-02
Select ABC-02 from the Storage Location drop-down list. This method requires a Moxa ABC-02
configuration backup and restore USB tool to be connected to the AWK Series.

Configuration Source
Setting Description Factory Default
Running Configuration Back up the running configuration. Running
Startup Configuration Back up the start-up configuration. Configuration

Storage Location
Setting Description Factory Default
Local Back up the configuration files for the local computer.
TFTP Back up the configuration files via TFTP.
Local
SFTP Back up the configuration files via SFTP.
ABC-02 Back up the configuration files via ABC-02 USB tool.

AWK Series User Manual 32


Backup for System Initialization
Setting Description Factory Default
Yes Back up the system initialization files.
No
No Do not back up the system initialization files.

Select Folder
Setting Description Factory Default
Folder path Navigate to the folder path of the ABC-02 tool. None

Configuration Password
Setting Description Factory Default
Enter the configuration password. You will need to enter this
Configuration password None
password when importing the backup file.

When finished, click BACK UP.

Automatic Backup to ABC-02


The AWK-Series also supports automatic configuration backups when using a Moxa ABC-02 backup and
restore tool.

Auto Backup Status


Setting Description Factory Default
Enable or disable automatically backing up the device’s
Enabled/Disabled Disabled
configuration to the ABC-02.

When finished, click APPLY.

Restore
From the Restore tab you restore the device’s configuration using a previously created backup file.

AWK Series User Manual 33


Local
Source
Setting Description Factory Default
Local Restore the configuration from a local backup file.
TFTP Restore the configuration from a backup file via TFTP.
SFTP Restore the configuration from a backup file via SFTP. Local
Restore the configuration from a backup file on an ABC-02
ABC-02
USB tool.

Select File
Setting Description Factory Default
Click the browse icon and navigate to the backup file on the
Backup file None
local host.

Configuration Password
Setting Description Factory Default
Enter the configuration password. You will need to enter this
Configuration password None
password when importing the backup file.

When finished, click RESTORE.

TFTP Server

Source
Setting Description Factory Default
Local Restore the configuration from a local backup file.
TFTP Restore the configuration from a backup file via TFTP.
SFTP Restore the configuration from a backup file via SFTP. Local
Restore the configuration from a backup file on an ABC-02
ABC-02
USB tool.

Server IP Address
Setting Description Factory Default
TFTP server address Enter the IP address of the TFTP server. None

File Name
Setting Description Factory Default
Max. 256 characters
(including the .ini file Enter the file name of the configuration backup file. None
extension)

AWK Series User Manual 34


Configuration Password
Setting Description Factory Default
Enter the configuration password. You will need to enter this
Configuration password None
password when importing the backup file.

When finished, click RESTORE.

SFTP Server

Source
Setting Description Factory Default
Local Restore the configuration from a local backup file.
TFTP Restore the configuration from a backup file via TFTP.
SFTP Restore the configuration from a backup file via SFTP. Local
Restore the configuration from a backup file on an ABC-02
ABC-02
USB tool.

Server IP Address
Setting Description Factory Default
Enter the IP address of the SFTP server where the new
SFTP server address None
firmware file (*.rom) is located.

File Name
Setting Description Factory Default
Max. 256 characters
(including the .ini file Enter the filename of the configuration restoration file. None
extension).

Account
Setting Description Factory Default
Enter the SFTP user account name. This account must be
SFTP server account None
authorized to ensure a secure connection to the SFTP server.

Password
Setting Description Factory Default
Enter the SFTP user account password. This account must be
SFTP server password None
authorized to ensure a secure connection to the SFTP server.

AWK Series User Manual 35


Configuration Password
Setting Description Factory Default
Enter the configuration password. You will need to enter this
Configuration password None
password when importing the backup file.

When finished, click RESTORE.

ABC-02

Source
Setting Description Factory Default
Local Restore the configuration from a local backup file.
TFTP Restore the configuration from a backup file via TFTP.
SFTP Restore the configuration from a backup file via SFTP. Local
Restore the configuration from a backup file on an ABC-
ABC-02
02 USB tool.

Select File
Setting Description Factory Default
Click the browse icon and navigate to the backup file on the
Backup file None
local host.

Configuration Password
Setting Description Factory Default
Enter the configuration password. You will need to enter this
Configuration password None
password when importing the backup file.

When finished, click RESTORE.

AWK Series User Manual 36


Automatic Restoration to ABC-02
The AWK Series supports automatic configuration restoration when using a Moxa ABC-02 backup and

restore tool.

Auto Restore Status


Setting Description Factory Default
Enable or disable automatically restoring the device’s
Enabled/Disabled Disabled
configuration from an ABC-02.

When finished, click APPLY to change your setting.

Account Management
From this section, you can manage User Account settings and the Password Policy.

User Account
The User Account section lets you manage user accounts on the device, including setting user roles and
privileges. Click User Account under Account Management to access this configuration screen.

Create a New Account

To create a new user account, click the Settings tab, then click the Add icon.

AWK Series User Manual 37


Edit the following settings:

Status
Setting Description Factory Default
Enabled/Disabled Enable or disable the user account. Disabled

Username
Setting Description Factory Default
Min. 4 characters Enter a username for this account. None

New Password
Setting Description Factory Default
Min. 4 characters Enter the password for this account. None

Confirm Password
Setting Description Factory Default
Password Enter the account password again for confirmation. None

AWK Series User Manual 38


Email
Setting Description Factory Default
Email Enter the email address for this account. None

Role
Setting Description Factory Default
Set the user’s role to Administrator. This role provides full
Administrator access to all configurations on the device. (pre-defined
authority)
Engineer Set the user’s role to Engineer. (pre-defined authority)
User
User Set the user’s role to User. (pre-defined authority)
If a mix of authorities is necessary, create an account via the
Custom Custom option and manually select the necessary authorities
for this account.

Authority
Setting Description Factory Default
Checking authorities gives the user the ability to access
configurations pages in the corresponding category. These
Checkbox None
authority privileges extend to all access interfaces, including
CLI.

Refer to the table below for an overview of each role and corresponding authorities.

Authority Admin Engineer User


Account System Yes No No
Advanced Diagnostic Yes Yes No
Auditor System Yes Yes No
Diagnostic Yes Yes Yes
Network Yes Yes No
Status Monitoring Yes Yes Yes
System Backup Yes No No
System Management Yes Yes No

NOTE
The Administrator, Engineer, and User roles have pre-defined authority options and cannot be changed.
The Administrator has all authorities enabled by default. The Custom role allows you to select specific
authorities for the user account.

When finished, click APPLY to create a new account.

Edit an Existing Account

Click the Edit icon of the account you want to edit.

AWK Series User Manual 39


Edit the account settings. Refer to Create a New Account for a description of each setting.

When finished, click APPLY.

AWK Series User Manual 40


Delete an Existing User

To delete one or more existing users, check the user(s) you want to delete and click the Delete icon on
the top of the page.

Click DELETE to delete the user.

Terminate the Active Session of a User


If necessary, you can manually terminate a specific user’s active session for a specific interface. This will
also record an event log.

Click Session Management tab and click the Terminate Session icon next to the user.

AWK Series User Manual 41


When prompted, select which active sessions you want to terminate.

Click TERMINATE to end the selected sessions. The user will be logged out of the corresponding interfaces
immediately.

Edit the Password Policy


To edit the password policy, click Password Policy under Account Management in the function menu
tree.

Password Lifetime
Setting Description Factory Default
Specify the maximum password lifetime. At the end of this
duration, the password will expire, and users will be requested
0 to 365 day(s) to create a new password. Every time this value is changed, 90
users will be required to create a new password when logging
in the next time.

When finished, click APPLY.

Management Interface
The Management Interface section houses the User Interface, Hardware Interface, and SNMP
configuration screens.

AWK Series User Manual 42


User Interface
The User Interface configuration screen lets you manage the interfaces available to users to access the
device. Click User Interface under Management Interface to access this screen.

HTTP Status
Setting Description Factory Default
Enabled/Disabled Enable or disable HTTP connections. Disabled

NOTE
If HTTP and HTTPS are both enabled, any HTTP session will automatically redirect to HTTPS.

HTTP – TCP Port


Setting Description Factory Default
1 to 65535 Specify the HTTP interface TCP port number. 80

HTTPS Status
Setting Description Factory Default
Enabled/Disabled Enable or disable HTTPS connections. Enabled

HTTPS – TCP Port


Setting Description Factory Default
1 to 65535 Specify the HTTPS interface TCP port number. 443

AWK Series User Manual 43


Telnet Status
Setting Description Factory Default
Enabled/Disabled Enable or disable Telnet connections. Disabled

Telnet – TCP Port


Setting Description Factory Default
1 to 65535 Specify the Telnet interface TCP port number. 23

SSH Status
Setting Description Factory Default
Enabled/Disabled Enable or disable SSH connections. Enabled

SSH – TCP Port


Setting Description Factory Default
1 to 65535 Specify the SSH interface TCP port number. 22

SNMP Status
Setting Description Factory Default
Enabled/Disabled Enable or disable SNMP. Disabled

SNMP – Port
Setting Description Factory Default
1 to 65535 Specify the SNMP UDP port number. 161

Moxa Service Status


Setting Description Factory Default
Enabled/Disabled Enable or disable Moxa Service. Enabled

NOTE
Moxa Service is only for Moxa network management software such as MXconfig.

Moxa Service (Encrypted)


Setting Description Factory Default
40404 (read only) Specify the Moxa Service UDP port. 40404

Maximum number of Login Sessions for HTTP + HTTPS


Setting Description Factory Default
Specify the maximum number of concurrent HTTP+HTTPS
1 to 10 5
login sessions allowed on the device.

Maximum number of Login Sessions for Telnet + SSH + Serial Console


Setting Description Factory Default
Specify the maximum number of concurrent Telnet, SSH, and
1 to 10 5
Serial login sessions allowed on the device.

When finished, click APPLY.

AWK Series User Manual 44


Hardware Interface
From the Hardware Interface screen, you can manage the physical interfaces on the device. Click
Hardware Interface under Management Interface to access this screen.

Configure the following settings:

Reset Button Status


Setting Description Factory Default
Enabled/Disabled Enable or disable the reset button. Disabled

Reset Button Active Duration

Setting Description Factory Default

If the reset button is disabled, the “Active Duration” defines


the grace period (in seconds) where the reset button will be
active for after a system cold boot up. After the grace period,
the reset button will be disabled.
Note:
0 to 180 (sec.) 120
• If set to 0, the reset button will always be disabled.
• The Active Duration countdown begins as soon as the RF
LED indicator turns from amber to off after the boot up
process. Specifically, the 2.4 GHz and 5 GHz LED on the
AWK-3252A and AWK-4252A Series; the WLAN LED on
the AWK-1151C Series.

Serial Status
Setting Description Factory Default
Enabled/Disabled Enable or disable the serial port. Enabled

USB Status
Setting Description Factory Default
Enabled/Disabled Enable or disable the USB port. Enabled

When finished, click APPLY.

AWK Series User Manual 45


SNMP
The Moxa AWK Series supports SNMP V1, V2c, and V3. SNMP V1 and SNMP V2c use a community string
match for authentication, which means that SNMP servers access all objects with read-only or read/write
permissions using the default “public” and “private” community strings. SNMP V3 requires MD5 or SHA
authentication. You can also enable data encryption to enhance data security.

The supported SNMP security modes and levels are shown in the table below. Select the security mode and
level that will be used to communicate between the SNMP agent and manager.

Protocol
UI Setting Authentication Encryption Method
Version
V1, V2c Read Uses a community string match for
Community string None
Community authentication.
SNMP V1,
V1, V2c
V2c Uses a community string match for
Write/Read Community string None
authentication.
Community
Uses an account with admin or user role to
None None None
access objects.
Uses authentication based on HMAC-MD5, or
Authentication
HMAC-SHA algorithms. 8-character passwords
MD5 or SHA based on MD5 or Disabled
are the minimum requirement for
SHA
SNMP V3 authentication.
Uses authentication based on HMAC-MD5 or
Data
Authentication HMAC-SHA algorithms, and a data encryption
encryption
MD5 or SHA based on MD5 or key. 8-character passwords and a data
key: DES,
SHA encryption key are the minimum requirements
AES
for authentication .and encryption.

Configure SNMP Settings


From the SNMP screen you can configure the SNMP status and manage the SNMP account. Click SNMP
from the function tree to access this screen.

SNMP Status
Setting Description Factory Default
Read/Write Set SNMP to read-write.
Read Only Set SNMP as read-only. Disabled
Disabled Disable the SNMP.

SNMP Version
Setting Description Factory Default
V1, V2c, V3 Enable SNMP V1, V2c, and V3.
V1, V2c Enable SNMP V1 and V2c. V3 only
V3 only Enable SNMP V3 only.

AWK Series User Manual 46


Read Community (for V1/V2c Versions)

Setting Description Factory Default

Public/Private Specify the read community security authority level. public

Read/Write Community (for V1/V2c Versions)


Setting Description Factory Default

Public/Private Specify the read/write community security authority level. private

NOTE
SNMP V1 and V2c are not secure. We highly recommend using SNMP V3.

NOTE
While the AWK-3252A, AWK-4252A, and AWK-1151C Series use the same firmware and MIB structure,
since the AWK-1151C Series only contains client feature sets and lacks DI/DO and Relay hardware
interfaces, please be aware that SNMP read or write to non-applicable OIDs for the AWK-1151C Series will
return “0 disabled” and “not support” messages.

When finished, click APPLY.

Edit an SNMP Account

On the SNMP Account List tab, click the Edit icon of the account you want to edit.

Configure the following settings:

AWK Series User Manual 47


Username
Setting Description Factory Default
Username for the
admin (read only) Show the username. This cannot be changed.
current user

SNMP Status
Setting Description Factory Default
Enabled/Disabled Enable or disable SNMP. Disabled

Authority
Setting Description Factory Default
Read/Write Give the SNMP account as Read/Write authority.
Read/Write
Read Only Give the SNMP account Read Only authority.

Authentication Type
Setting Description Factory Default
None No authority type selected.
MD5 Specify MD5 as the authority type. None
SHA Specify SHA as the authority type.

Authentication Password
Setting Description Factory Default
Depending on the selected Authentication Type, specify the
8 to 63 characters Authentication Password. The password must be at least 8 None
characters long.

Encryption Method
Setting Description Factory Default
None No encryption method selected.
DES Specify DES as the Encryption Method. None
AES Specify AES as the Encryption Method.

Encryption Key
Setting Description Factory Default
Depending on the selected Encryption Method, specify the
8 to 63 characters Encryption Key. The password must be at least 8 characters None
long.

When finished, click APPLY.

AWK Series User Manual 48


Time
From the Time section, you can configure the System Time.

System Time
The System Time screen lets you configure the device time settings and specify the time zone. Click
System Time under Time in the function tree to access this screen.

Edit the Clock


The system clock, time, and date can be set manually, or be synced to an external time server.

Configure the following settings:

ATTENTION
You must select the time zone first before configuring "System Clock" settings, as any changes made to
the time zone after the system clock has been configured will shift the clock offset based on the deviation
of the selected time zone.

Current Time
Setting Description Factory Default
Current Time (read
Shows the current time. Current Time
only)

Clock Source
Setting Description Factory Default
Set the clock source to internal. This requires the date and
Internal Clock
time to be specified manually.
Internal Clock
Set the clock source to NTP. This will sync the system clock
NTP
with an external NTP server.

AWK Series User Manual 49


Configure the Time and Date (Internal Clock)
Date
Setting Description Factory Default
Day of the month Select the current date. Local

Time
Setting Description Factory Default
Specify the current time using the 12-hour AM/PM format. You
hh, mm, ss can manually input the time, or you can click Sync From Sync From Browser
Browser to sync the time with your web browser.

Configure Time Servers (NTP)

Time Server 1
Setting Description Factory Default
Specify the IP or domain address of the primary NTP server to
NTP time server use (e.g., 192.168.1.1, time.stdtime.gov.tw, or None
time.nist.gov).

AWK Series User Manual 50


Time Server 2
Setting Description Factory Default
Specify the IP or domain address of the secondary NTP server.
NTP time server The secondary NTP server acts as a backup in case the device None
fails to connect to the first NTP server.

Sync Interval
Setting Description Factory Default
Specify the interval (in seconds) at which the system will sync
10 to 1440 (sec.) 10
the clock with the time server.

When finished, click APPLY.

Edit the Time Zone


You can specify the system clock time zone and apply daylight saving time.

Click the Time Zone tab.

Configure the following settings:

Time Zone
Setting Description Factory Default
GMT (Greenwich
Time zone Select a time zone.
Mean Time)

Daylight Saving Time


The Daylight Saving Time settings are used to automatically adjust the time according to regional
standards.

AWK Series User Manual 51


Daylight Saving Status
Setting Description Factory Default
Enabled/Disabled Enable or disable Daylight Saving Time. Disabled

Offset
Setting Description Factory Default
User-specified value Specify the offset value for Daylight Saving Time. None

Start
Setting Description Factory Default
User-specified date Specify the date that Daylight Saving Time begins. Jan, 1st, Sun, 00.

End
Setting Description Factory Default
User-specified date Specify the date that Daylight Saving Time ends. Jan, 1st, Sun, 00

When finished, click APPLY.

AWK Series User Manual 52


Wi-Fi
From the Wi-Fi section, you can configure the Wireless Settings, Connection Check and Recovery, and
Roaming.

Wireless Settings
On the Wireless Settings page, you can configure the device’s operating mode, SSID, MAC Cloning
settings, as well as check the Wi-Fi connection status. Click Wireless Settings under Wi-Fi in the function
tree to access this screen.

General Settings
The General section is used for setting the AWK’s operation mode, creating SSIDs, and configuring RF
settings. Click the General tab to access this screen.

AWK Series User Manual 53


Configure the following settings

Operation Mode

NOTE
The AWK-1151C is a client device and does not support AP and Master mode.

Setting Description Factory Default


Disabled Disable the operation mode.
Specify the operation mode as AP. Refer to AP Mode
AP
Settings. (AWK-3252A, AWK-4252A only)
Specify the operation mode as Master. Refer to Master Mode
Master
Settings. (AWK-3252A, AWK-4252A only)
Specify the operation mode as Sniffer. Refer to Sniffer Mode
Sniffer
Settings. Disabled
Specify the operation mode as Client. Refer to Client Mode
Client
Settings.
Specify the operation mode as Client-Router. Refer to Client-
Client-Router
Router Mode Settings.
Specify the operation mode as Slave. Refer to Slave Mode
Slave
Settings.

AP Mode Settings
Select AP from the drop-down list of Operation Mode. AP Mode requires at least one active SSID.

NOTE
AP mode is only supported by the AWK-3252A and AWK-4252A Series.

Environment
Setting Description Factory Default
Set the application environment to indoor. Available channels
Indoor
vary depending on the selection.
Indoor
Set the application environment to outdoor. Available channels
Outdoor
vary depending on the selection.

For SSID and security settings, refer to Create a New SSID.

For configuring RF settings, refer to RF Settings.

When finished, click APPLY to change the operation mode.

Master Mode Settings


Select Master from the drop-down list of Operation Mode. Master Mode requires at least one active SSID.

AWK Series User Manual 54


NOTE
Master mode is only supported by the AWK-3252A and AWK-4252A Series.

Environment
Setting Description Factory Default
Set the application environment to indoor. Available channels
Indoor
vary depending on the selection.
Indoor
Set the application environment to outdoor. Available channels
Outdoor
vary depending on the selection.

For SSID and security settings, refer to Create a New SSID.

For configuring RF settings, refer to RF Settings.

When finished, click APPLY to change the operation mode.

Sniffer Mode Settings


Select Sniffer from the drop-down list of Operation Mode.

Configure the following settings:

AWK Series User Manual 55


Environment
Setting Description Factory Default
Set the application environment to indoor. Available channels
Indoor
vary depending on the selection.
Indoor
Set the application environment to outdoor. Available channels
Outdoor
vary depending on the selection.

RF Band
Setting Description Factory Default
5 GHz Select 5 GHz as the RF band.
2.4 GHz Select 2.4 GHz as the RF band. 5 GHz
5 GHz & 2.4 GHz Select both 5 GHz and 2.4 GHz as the RF bands.

For configuring RF settings, refer to RF Settings.

When finished, click APPLY to change the operation mode.

NOTE
Once Sniffer and RF settings have been configured, you can add the device's IP as an interface in your
network capturing software (e.g. Wireshark) and start capturing packets using Sniffer mode.

Client Mode Settings


Select Client from the drop-down list of Operation Mode. Client Mode requires at least one active SSID.

Configure the following settings:

Environment
Setting Description Factory Default
Set the application environment to indoor. Available channels
Indoor
vary depending on the selection.
Indoor
Set the application environment to outdoor. Available channels
Outdoor
vary depending on the selection.

For SSID and security settings, refer to Create a New SSID.

For configuring RF settings, refer to RF Settings.

For configuring advanced settings, refer to Advanced RF Settings.

When finished, click APPLY to change the operation mode.

Client-Router Mode Settings


Client-Router mode allows you to enable Network Address Translation (NAT) functionality to forward data to
LAN ports of connected devices.

Select Client-Router from the drop-down list of Operation Mode. Client-Router Mode requires at least one
active SSID.

AWK Series User Manual 56


Configure the following settings:

Environment
Setting Description Factory Default
Set the application environment to indoor. Available channels
Indoor
vary depending on the selection.
Indoor
Set the application environment to outdoor. Available channels
Outdoor
vary depending on the selection.

For SSID and security settings, refer to Create a New SSID.

For configuring RF settings, refer to RF Settings.

For configuring advanced settings, refer to Advanced RF Settings.

When finished, click APPLY to change the operation mode.

Slave Mode Settings


Select Slave from the drop-down list of Operation Mode. Slave Mode requires at least one active SSID.

Configure the following settings:

Environment
Setting Description Factory Default
Set the application environment to indoor. Available channels
Indoor
vary depending on the selection.
Indoor
Set the application environment to outdoor. Available channels
Outdoor
vary depending on the selection.

For SSID and security settings, refer to Create a New SSID.

For configuring RF settings, refer to RF Settings.

For configuring advanced settings, refer to Advanced RF Settings.

When finished, click APPLY to change the operation mode.

Add a New SSID (AP, Master Mode only)


For AP and Master operation modes, configure and enable the SSID profile. There are no SSIDs on the

device by default. To add a new SSID, click the Add icon.

AWK Series User Manual 57


NOTE
For more information about Client, Client-Router, and Slave Mode SSID settings, refer to the Wi-Fi Basic
section.

Configure the following settings:

SSID Status
Setting Description Factory Default
Enabled/Disabled Enable or disable the SSID. Disabled

SSID
Setting Description Factory Default

1 to 32 characters Enter a name for the SSID. None

RF Band
Setting Description Factory Default
2.4 GHz Use the 2.4 GHz RF band on this SSID.
5 GHz
5 GHz Use the 5 GHz RF band on this SSID.

AWK Series User Manual 58


RTS/CTS Threshold
Setting Description Factory Default

32 to 2346 bytes Specify the RTS/CTS threshold for the SSID. 2346

Transmission Rate: 5 GHz/2.4 GHz


Data Transmission Rate
Setting Description Factory Default
The AWK Series will automatically sense the speed of the
Auto Auto
connected device(s) and adjust the data rate accordingly.

Minimum Data Transmission Rate


Setting Description Factory Default
Specify a minimum transmission rate. By setting a minimum
0 to 65 Mbps transmission rate, the AWK Series will avoid communicating
0 (Disabled)
(0 to disable) over weak signal wireless links to maintain better wireless
performance and optimize the wireless frequency usage.

Broadcast/Multicast Data Transmission Rate


Setting Description Factory Default
Set the broadcast/multicast data transmission rate for the
HT-MCS0 to HT-MCS15 HT-MCS15
AWK.

Management Transmission Rate


Setting Description Factory Default
HT-MCS0 to HT-MCS15 Set the management transmission rate for the AWK. HT-MCS5

When finished, click NEXT.

AWK Series User Manual 59


SSID Broadcast Status
Setting Description Factory Default
Enabled (depending
Enable or disable broadcasting the SSID. If enabled, wireless
Enabled/Disabled on the settings on
clients will be able to see and connect to this SSID.
the previous page)

Security
Setting Description Factory Default
Open Disable security on the SSID. This is not recommended.
WPA Use WPA authentication.
Use WPA2 authentication. This mode supports IEEE 802.11i
WPA2
with TKIP/AES + 802.1X encryption.
Use WPA3 authentication. This mode supports SAE
WPA3 (Simultaneous Authentication of Equals) to avoid network Open
attacks, such as KRACK.
Use WPA/WPA2 Mixed authentication. This allows both WPA
WPA/WPA2 Mixed
and WPA2 clients to connect to the AWK.
Use WPA/WPA3 Mixed authentication. This allows both WPA2
WPA2/WPA3 Mixed
and WPA3 clients to connect to the AWK.

The AWK Series provides various standardized wireless security modes: Open, WPA (Wi-Fi Protected
Access), WPA2, and WPA3.

• Open: No authentication, no data encryption.


• WPA/WPA2-Personal: Also known as WPA/WPA2-PSK. You will need to specify the Pre-Shared Key in
the Passphrase field, which will be used by the TKIP or AES engine as a master key to generate keys
that encrypt outgoing packets and decrypt incoming packets.
• WPA3-Peronal: Provide a more secured data connection than WPA2 by using SAE (Simultaneous
Authentication of Equals).
• WPA/WPA2-Enterprise: Also called WPA/WPA2-EAP (Extensible Authentication Protocol). In addition
to device-based authentication, WPA/WPA2-Enterprise enables user-based authentication via IEEE
802.1X. When the Enterprise is selected as the WPA Mode, an additional EAP protocol drop-down field
will appear, allowing you to select TLS, TTLS, or PEAP. The EAP-TLS option supports TLS certificates and
password upload interface.
• WPA/WPA2 Mixed: The AWK supports WPA/WPA2 at the same time. The AWK is able to authenticate
with both Wi-Fi clients that use WPA and WPA2.
• WPA2/WPA3 Mixed: The AWK supports WPA2/WPA3 at the same time. The AWK is able to
authenticate with both Wi-Fi clients that use WPA2 and WPA3.

When using any security mode except Open, configure the following settings.

Protected Management Frame


Setting Description Factory Default
Disable the protected management frame. This option is not
Disabled
available when using WAP3. Disabled
802.11w Use 802.11w protocol as the protected management frame.

WPA Mode
Setting Description Factory Default
Authenticate WPA, WPA2, and WPA3 with a Pre-shared Key
Personal
(PSK).
Personal
Authenticate WPA, WPA2, and WPA3 with EAP security
Enterprise
protocol.

Encryption
Setting Description Factory Default
AES Use Advance Encryption System (AES) encryption.
Use TKIP/AES Mixed encryption. This option provides a TKIP
broadcast key and TKIP+AES unicast key to support legacy AP TKIP/AES Mixed
TKIP/AES Mixed*
clients. This option is rarely used and is not available when
using WAP3.

*This option is available for legacy mode in AP/Master only and does not support AES-enabled clients.

AWK Series User Manual 60


EAPOL Version

If you selected AES encryption in AP mode, select the EAPOL version.

Setting Description Factory Default


1 Use EAPOL Version 1 as the security authentication method.
1
2 Use EAPOL Version 2 as the security authentication method.

Primary/Secondary RADIUS Server IP (for Enterprise mode only)


Setting Description Factory Default
IP address Specify the RADIUS authentication server for EAP. None

Primary/Secondary RADIUS Port (for Enterprise mode only)


Setting Description Factory Default
0 to 65535 Specify RADIUS server port number. 1812

Primary/Secondary RADIUS Shared Key (for Enterprise mode only)


Setting Description Factory Default
Enter the secret key shared for communication between AP
0 to 128 characters and the RADIUS server. The key cannot contain the following None
special characters: ` ' " | ; & $

Passphrase (for Personal mode only)


Setting Description Factory Default
Enter the passphrase. This is the master key to generate keys
for encryption and decryption. The passphrase cannot contain
8 to 63 characters None
the following special characters: ` ' " | ; & $
Check Show Password to display the password in clear text.

Key Renew
Setting Description Factory Default
60 to 86400 seconds (1
Specify the interval at which the group key is renewed. 3600 (seconds)
minute to 1 day)

Copy Configurations to SSIDs


Setting Description Factory Default
Select a target SSID from the drop-down menu to copy the
SSID None
current configuration to.

WARNING
The Open mode does not feature any form of authentication and data encryption. For security reasons, we
highly recommend NOT to use Open as the security mode.

When finished, click CREATE to add a new SSID.

Edit an Existing SSID

To edit an existing SSID, click the Edit icon next to the SSID you want to edit. Refer to Create a New
SSID for more information about setting.

AWK Series User Manual 61


Delete an Existing SSID

To delete an existing SSID, check the SSID, then click the Delete icon above the table.

When prompted, click DELETE.

AWK Series User Manual 62


RF Settings
When selecting any operation mode, configure the following RF settings.

NOTE
Available RF settings depend on which Operation mode is active: AP, Master, Client, Client-Router, Sniffer,
or Slave mode.

AWK Series User Manual 63


For 2.4 GHz
Configure the following settings:

RF Type
Setting Description Factory Default
Enable IEEE 802.11g/n. 802.11n may operate at a slower
G/N Mixed
speed if 802.11g clients are connected to the network.
Enable IEEE 802.11b/g/n. 802.11g/n may operate at a slower B/G/N Mixed
B/G/N Mixed
speed if 802.11b clients are on the network
N Only (2.4 GHz) Only enable IEEE 802.11n.

Channel Width (for 802.11n RF types only)


Setting Description Factory Default
Set the channel width to 20 MHz. If you are not sure which
20 MHz
option to use, select 20/40 MHz. 20/40 MHz
20/40 MHz Set the channel width to 20/40 MHz. This is recommended.

Channel

Setting Description Factory Default

Select the channel from the drop-down list. Each channel


1 (2412 MHz) to 11
supports different frequencies. 6 (2437 MHz)
(2462 MHz)
Note: Available channels depend on the selected country.

Bonded Channel
Setting Description Factory Default
The bonded channel used by the AP will be shown here if
10 (read only) 10
channel width is set to 20/40 MHz.

Antenna
Setting Description Factory Default
1 Specify antenna 1 as the output antenna port.
2 Specify antenna 2 as the output antenna port. All
ALL Specify both antennas as the output antenna port.

Maximum Transmission power


Setting Description Factory Default
Specify the maximum transmission power which acts as a
dBm 28 dBm
hard ceiling for different transmission rates.

Antenna Gain
Setting Description Factory Default
0 to 18 (dBi) Specify the antenna gain. 2

Beacon Interval
Setting Description Factory Default
40 to 1000 (ms.) Specify the interval at which a beacon is sent. 100 (ms)

For 5 GHz
Configure the following settings:

RF Type: 5 GHz
Setting Description Factory Default
AC Only (5 GHz) Only enable IEEE 802.11ac.
N/AC Mixed Enable IEEE 802.11n/ac. A/N/AC Mixed
A/N/AC Mixed Enable IEEE 802.11a/n/ac.

Channel Width (for any 11N RF type only)


Setting Description Factory Default
Set the channel width to 20 MHz. If you are not sure which
20 MHz
option to use, select 20/40 MHz. 20/40/80 MHz
20/40 MHz Set the channel width to 20/40 MHz. This is recommended.

AWK Series User Manual 64


Setting Description Factory Default
Set the channel width to 20/40/80 MHz. If you are not sure
20/40/80 MHz
which option to use, select 20/40 MHz.

Channel
Setting Description Factory Default
36 (5180 MHz) to 165 Select the channel from the drop-down list. Each channel
36 (5180 MHz)
(5825 MHz) supports different frequencies.

Bonded Channel
Setting Description Factory Default
The bonded channel used by the AP will be shown here if
40/44/48 (read only) 40/44/48
channel width is set to 20/40/80 MHz.

Antenna
Setting Description Factory Default
ALL Specify both antennas as the output antenna port.
1 Specify antenna 1 as the output antenna port. All
2 Specify antenna 2 as the output antenna port.

Maximum Transmission power


Setting Description Factory Default
Specify the maximum transmission power which acts as a
hard ceiling for different transmission rates.
dBm 26 dBm
Note: The supported Maximum Transmission Power depends
on the selected country code.

Antenna Gain (for AP/Master mode only)


Setting Description Factory Default
0 to 18 (dBi) Specify the antenna gain. 2

Beacon Interval (for AP/Master mode only)


Setting Description Factory Default
40 to 1000 (ms) Specify the interval at which a beacon is sent. 100 (ms)

When finished, click APPLY.

Advanced RF Settings (Client, Client-Router, Slave Mode Only)


Some operation modes require additional advanced RF settings.

NOTE
Available RF settings depend on which Operation mode is active.

Configure the following settings:

AWK Series User Manual 65


RTS/CTS Threshold
Setting Description Factory Default
32 to 2346 bytes Specify the RTS/CTS threshold for the SSID. 2346

Transmission Rate: 5 GHz/2.4 GHz


Data Transmission Rate
Setting Description Factory Default
The AWK Series will automatically sense the speed of the
Auto Auto
connected device(s) and adjust the data rate accordingly.

Minimum Data Transmission Rate


Setting Description Factory Default
Specify a minimum transmission rate. By setting a minimum
0 to 64 Mbps transmission rate, the AWK Series will avoid communicating
0 (Disabled)
(0 to disable) over weak signal wireless links to maintain better wireless
performance and optimize the wireless frequency usage.

Management Transmission Rate


Setting Description Factory Default
HT-MCS0 to HT-MCS15 Set the management transmission rate for the AWK. HT-MCS5

When finished, click APPLY.

MAC Cloning Settings


Enabling this feature allows the AWK client to copy the MAC address of the equipment connected to the
LAN. This overcomes the limitation of the IP-Bridged behavior in a MAC-sensitive network (MAC-based
communication or MAC-authenticated network).

Configure the following settings:

MAC Cloning Status


Setting Description Factory Default
Enabled/Disabled Enable or disable the MAC Cloning function. Disabled

MAC Cloning Method


Setting Description Factory Default
The AWK client copies the MAC address of the device
Auto
connected to the LAN if only one device is connected to AWK.
The AWK client shares the assigned MAC address with multiple
Auto
devices connected to the LAN. This allows for multiple devices
Static
to connect to the AWK via the LAN and only one of them
needs to be assigned a MAC address.

AWK Series User Manual 66


MAC Cloning Interface
Setting Description Factory Default
Specify the static MAC address of LAN 1 that the connected
LAN 1
AWK devices should copy.
LAN 1
Specify the static MAC address of LAN 2 that the connected
LAN 2
AWK devices should copy.

When finished, click APPLY.

AWK Series User Manual 67


Wi-Fi Connection Status
To view the Wi-Fi connection status, click Status tab. The information on this screen depends on the active
operation mode. The following view is from AP Mode.

Select the SSID from the drop-down list to view its current status. In Client Mode, you can also view the
client list to see all the connected client devices.

Click the Filter icon to select the information items that you want to show.

AWK Series User Manual 68


For the Client, Client-Router, and Slave operation modes, this view displays the SSID the device is
associated with, and the properties of the connection.

AWK Series User Manual 69


Connection Check and Recovery
The Connection Check and Recovery tab contains Wi-Fi troubleshooting tools. Click Connection Check
and Recovery under Wi-Fi in the function tree to access this screen.

Client-to-AP Link Check


When enabled, this recovery mechanism is triggered when the connection to the AP is lost. When
disconnected, the device will reset the Wi-Fi interface in an attempt to recover the connection to the AP. If
the connection can still not be recovered after the specified number of retries, the client will reboot and
check the connectivity status again.

Configure the following settings:

Client-to-AP Link Check Status


Setting Description Factory Default
Enabled/Disabled Enable or disable the Client-to-AP Link Check function. Disabled

AWK Series User Manual 70


Check Timeout
Setting Description Factory Default
10 to 60 (sec.) Specify the check timeout interval. 30

Reset Connection Recovery


Setting Description Factory Default
Enabled/Disabled Enable or disable the Reset Connection Recovery function. Enabled

Reset Connection Retry Count


Setting Description Factory Default
Specify the maximum number of times the device will reset
1 to 5 5
the Wi-Fi interface to attempt to recover the connection.

Reboot Recovery
Setting Description Factory Default
Enabled/Disabled Enable or disable Reboot Recovery function. Disabled

Reboot Retry Count


Setting Description Factory Default
Specify the maximum number of times the device will reboot
1 to 5 5
to attempt to recover the connection.

When finished, click APPLY to save your settings.

AP Alive Check
This is a recovery mechanism which checks whether it is still possible to receive data frame from the
connected AP. When the timeout is triggered, the client will send a null data packet to probe the AP it is
connected to. If the AP does not respond after the specified number of retries, the client will begin scan for
other AP candidates in order to recover network communications as quickly as possible.

Configure the following settings:

AP Alive Check Status


Setting Description Factory Default
Enabled/Disabled Enable or disable the AP Alive Check function. Disabled

AWK Series User Manual 71


Check Interval
Setting Description Factory Default

20 to 1000 (ms) Specify the interval at which the device will probe the AP. 50

Retry Count
Setting Description Factory Default
Specify the maximum number of times the device will probe
3 to 10 3
the AP.

Expiry
Setting Description Factory Default
Specify the connection expiration interval (in ms). If
100 to 10000 (ms.) exceeded, the client will consider the AP unreachable or 1000
unresponsive, and will trigger the recovery mechanism.

Threshold Indicate
Setting Description Factory Default
SNR Use SNR as the threshold indicator.
SNR
Signal Strength Use signal strength as the threshold indicator.

5 GHz: SNR Candidate Threshold (for SNR)


Setting Description Factory Default
5 to 60 (dB) Specify the SNR roaming threshold. 40

2.4 GHz: SNR Candidate Threshold (for SNR)


Setting Description Factory Default
5 to 60 (dB) Specify the SNR roaming threshold. 40

5 GHz: Signal Strength Candidate Threshold (for Signal Strength)


Setting Description Factory Default
-100 to -35 (dBm) Specify the signal strength roaming threshold. -65

2.4 GHz: Signal Strength Candidate Threshold (for Signal Strength)


Setting Description Factory Default
-100 to -35 (dBm) Specify the signal strength roaming threshold. -65

NOTE
The SNR and signal strength thresholds are used to determine when the AWK will start looking for a better
AP to associate with. If the current connection quality to the AP (based on SNR or signal strength) is lower
than the specified threshold value, the client will start looking for other suitable wireless devices.

When finished, click APPLY.

Remote Host Check


When enabled, this recovery mechanism is triggered when IP traffic fails to reach the configured remote
host. The mechanism works by checking if the remote host is reachable at the defined check interval. If the
host is still unreachable after the specified number of retries, the client will disconnect from the current AP
and will attempt to associate with another AP.

AWK Series User Manual 72


Configure the following settings.

Remote Host Check Status


Setting Description Factory Default
Enabled/Disabled Enable or disable the Remote Host Check function. Disabled

Host Type
Setting Description Factory Default
Static Use Static as the host type.
Static
Dynamic Use Dynamic as the host type.

Host (for Static Host Type only)


Setting Description Factory Default
Host name Specify the host name. None

Check Interval
Setting Description Factory Default
Specify the interval at which the client will check the
1 to 60 (sec.) 30
connection to the host.

Check Timeout
Setting Description Factory Default
Specify the connection expiration interval (in ms). If
100 to 10000 (ms) exceeded, the client will consider the remote host unreachable 1000
or unresponsive, and will trigger the recovery mechanism.

Retry Interval
Setting Description Factory Default
Specify the interval at which the device will check the host
1 to 30 (sec.) 1
again after a failed attempt.

Retry Count
Setting Description Factory Default
Specify the maximum number of times the device will check
1 to 5 5
the host.

When finished, click APPLY.

AWK Series User Manual 73


Roaming
The Roaming page lets you enable or disable roaming functionality and configure roaming threshold
settings. Click Roaming under Wi-Fi in the function tree to access this screen.

Configure the following settings:

Client-Based Turbo Roaming


Setting Description Factory Default
Enabled/Disabled Enable or disable the Client-based Turbo Roaming function. Disabled

Indicator of Roaming Threshold


Setting Description Factory Default
SNR Use SNR as the roaming threshold indicator.
SNR
Signal Strength Use signal strength as the roaming threshold indicator.

5 GHz: Roaming Threshold (for SNR)


Setting Description Factory Default
Specify the SNR roaming threshold. If the current connection
5 to 60 (dB) quality is below this threshold, the client will start looking 40
better signal AP to associate with.

2.4 GHz: Roaming Threshold (for SNR)


Setting Description Factory Default
Specify the SNR roaming threshold. If the current connection
5 to 60 (dB) quality is below this threshold, the client will start looking 40
better signal AP to associate with.

5 GHz: Roaming Threshold (for Signal Strength)


Setting Description Factory Default
Specify the signal strength roaming threshold. If the current
-100 to -35 (dBm) connection quality is below this threshold, the client will start -65
looking better signal AP to associate with.

2.4 GHz: Roaming Threshold (for Signal Strength)


Setting Description Factory Default
Specify the signal strength roaming threshold. If the current
-100 to -35 (dBm) connection quality is below this threshold, the client will start -65
looking better signal AP to associate with.

AWK Series User Manual 74


Roaming Difference
Setting Description Factory Default
5 to 30 Specify the roaming difference value. 7

NOTE
The Roaming Threshold determines when clients will start background scanning for other candidate APs
with a stronger signal. Once the AWK starts background scanning, the client will compare the connection
quality of the current and candidate AP. If the difference is larger than the specified Roaming Difference,
the client will roam to the new AP.

NOTE
While the AWK is scanning the background, it will allocate 1/3 of its RF resources to search for candidate
APs based on the channel plan configured on the Wi-Fi > Wireless Settings page. The maximum
background scanning time required is proportional to the number of channels checked in channel plan.

NOTE
Once the background scan successfully identifies a candidate AP, the device will roam, The typical Turbo
Roaming handover time of < 150 ms is an average of all documented test results, in optimized conditions,
across APs configured with interference-free RF channels, and default Turbo Roaming parameters. The
clients were configured with 3-channel roaming at 100 Kbps traffic load. Other conditions and factors may
affect actual roaming performance.

When finished, click APPLY.

Ports
From the Ports section, you can configure Port Settings.

Port Settings
The Ports Settings page is used to configure the physical LAN 1 and LAN 2 network ports on the device.
Click Port Settings under Ports in the function tree to access this screen.

General Settings

Click General tab first, then click the Edit icon on the port you want to configure.

AWK Series User Manual 75


Configure the following settings:

Status
Setting Description Factory Default
Enabled/Disabled Enable or disable the port. Enabled

ATTENTION
The AWK-1151C Series only has one LAN port (LAN1). If this port is disabled, the device will become
inaccessible. The port can only be re-enabled via the console port or by resetting the device to factory
default settings using the reset button.

Description
Setting Description Factory Default
0 to 127 characters Enter a description for the port. None

When finished, click APPLY.

ATTENTION
When both LAN1 and LAN2 are enabled, only one LAN port should be used as an uplink. The other LAN
port may be used to connect other Ethernet based devices such as IP cameras. Be careful NOT to connect
both LAN ports as uplinks to a switch simultaneously to prevent switching loops.

Status Check
Click the Port Status tab to check the current port and port link status.

AWK Series User Manual 76


Layer 2 Switching
This section describes how to configure the VLAN settings for the AWK.

VLAN

The Virtual LAN (VLAN) Concept


What is a VLAN?
A virtual LAN, commonly known as a VLAN, is a group of hosts with a common set of requirements that
communicate as if they were connected to the same broadcast domain, regardless of their physical location.
A VLAN has the same attributes as a physical LAN, but it allows for end stations to be grouped together
even if they are not located on the same network switch. Network reconfiguration can be done through
software instead of physically relocating devices.

VLANs now extend as far as the reach of the access point signal. Clients can be segmented into wireless
sub-networks via SSID and VLAN assignment. A Client can access the network by connecting to an AP
configured to support its assigned SSID/VLAN.

Benefits of VLANs
VLANs are used to conveniently, efficiently, and easily manage your network in the following ways:

• Manage additions, relocations, and changes from a single point of contact


• Define and monitor groups
• Reduce broadcast and multicast traffic to unnecessary destinations
• Improve network performance and reduce latency
• Increase security
• Secure network restricts members to resources on their own VLAN
• Clients roam without compromising security

VLAN Workgroups and Traffic Management


The AP assigns clients to a VLAN based on a Network Name (SSID). The AP can support up to 9 SSIDs per
radio interface, with a unique VLAN configurable per SSID.

AWK Series User Manual 77


The AP matches packets transmitted or received to a network name with the associated VLAN. Traffic
received by a VLAN is only sent on the wireless interface associated with that same VLAN. This eliminates
unnecessary traffic on the wireless LAN, conserving bandwidth and maximizing throughput.

In addition to enhancing wireless traffic management, the VLAN-capable AP supports easy assignment of
wireless users to workgroups. In a typical scenario, each user VLAN represents a department workgroup; for
example, one VLAN could be used for a marketing department and the other for a human resource
department.

In this scenario, the AP would assign every packet it accepted to a VLAN. Each packet would then be
identified as marketing or human resource, depending on which wireless client received it. The AP would
insert VLAN headers or “tags” with identifiers into the packets transmitted on the wired backbone to a
network switch.

Finally, the switch would be configured to route packets from the marketing department to the appropriate
corporate resources such as printers and servers. Packets from the human resource department could be
restricted to a gateway that allowed access to only the Internet. A member of the human resource
department could send and receive e-mail and access the Internet but would be prevented from accessing
servers or hosts on the local corporate network.

AWK Series User Manual 78


Global Settings
The Global Settings paged is used to configure the management VLAN and interface. Click the Global tab
to access this screen.

Configure the following settings:

Management VLAN ID
Setting Description Factory Default
Specify the management VLAN of this AWK.
1 to 4094 By default, there is only VLAN ID 1. Additional VLAN IDs will 1
need to be created first before they can be selected.

Management Interface Quick Settings


Management Interface
Setting Description Factory Default
Interface Select the management VLAN interface. None

Mode
Setting Description Factory Default
Access mode is used if the port is connected to a single
Access
device, without tags.
Hybrid mode is used if the port is connected to another Access Access
Hybrid 802.1Q VLAN-aware switch or another LAN that combines
tagged and untagged devices.

PVID
Setting Description Factory Default
Set the default VLAN ID for untagged devices connected to the
1 to 4094 1
port.

Tagged VLAN
Setting Description Factory Default
If the port type is set to Trunk or Hybrid, specify the VLAN ID
1 to 4094 None
for tagged devices that connect to this port.

Untagged VLAN
Setting Description Factory Default
If the port type is set to Hybrid, specify the VLAN ID for
Dependent on the
1 to 4094 tagged devices that connect to this port and the tags that
selected PVID
need to be removed in egress packets.

When finished, click APPLY.

AWK Series User Manual 79


VLAN Settings
From the Settings tab, you can create, edit, and delete VLANs. Click the Settings tab to access this
screen.

Create a New VLAN ID

To add a new VLAN ID, click the Add icon.

AWK Series User Manual 80


Configure the following settings:

VLAN ID
Setting Description Factory Default
1 to 4094 Enter the VLAN ID. None

Name
Setting Description Factory Default
0 to 32 characters Enter a name for the VLAN. None

When finished, click CREATE.

Edit an Existing VLAN ID


To edit an existing VLAN ID, click the Edit icon next to the VLAN you want to edit.

Configure the following settings:

NOTE
Once created, the VLAN ID cannot be changed. Only the VLAN name can be edited.
To modify a VLAN ID and VLAN name combination, delete the entry and create a new entry with the
desired VLAN ID and name.

Name
Setting Description Factory Default
0 to 32 characters Enter a name for the VLAN ID. None

When finished, click APPLY.

Edit VLAN Interface Settings

To edit the VLAN interface settings, click the Edit icon next to the interface you want to edit.

AWK Series User Manual 81


Configure the following settings.

Mode
Setting Description Factory Default
Access mode is used if the port is connected to a single
Access
device, without tags.
Hybrid mode is used if the port is connected to another Access Access
Hybrid 802.1Q VLAN-aware switch or another LAN that combines
tagged and untagged devices.

PVID
Setting Description Factory Default
Set the default VLAN ID for untagged devices connected to the
1 to 4094 1
port.

Tagged VLAN
Setting Description Factory Default
If the port type is set to Hybrid, specify the VLAN ID for
1 to 4094 None
tagged devices that connect to this port.

Untagged VLAN
Setting Description Factory Default
If the port type is set to Hybrid, specify the VLAN ID for
VID range from 1 to
tagged devices that connect to this port and the tags that 1
4094
need to be removed in egress packets.

Copy Configurations to Interfaces


Setting Description Factory Default
Select the interface to copy the configuration of this interface
Interface None
to.

When finished, click APPLY.

AWK Series User Manual 82


IP Configuration
The IP Configuration section is used to configure the device’s basic IP configuration. Click IP
Configuration in the function tree.

General Settings
The General tab lets you configure the device’s basic network information. Click the General tab to access
this screen.

Configure the following settings.

IP Mode
Setting Description Factory Default
The AWK is assigned an IP address automatically by the
DHCP
network’s DHCP server. Static
Static Manually configure up the AWK’s IP address.

IP Address
Setting Description Factory Default
IP address Enter the AWK’s IP address. 192.168.127.253

Subnet mask
Setting Description Factory Default
Select the subnet mask. This is used to identify the type of
Subnet mask network the AWK is connected to (e.g., 255.255.0.0 for a 24 (255.255.255.0)
Class B network, or 255.255.255.0 for a Class C network).

Default Gateway
Setting Description Factory Default
Enter the IP address of the router that connects the LAN to an
IP address None
outside network.

DNS Server 1 and DNS Server 2


Setting Description Factory Default
Enter the primary and secondary DNS server address. After
entering the DNS server’s IP address, you can input the AWK’s
IP address URL (e.g., http://ap11.abc.com) in your browser’s address None
field instead of entering the IP address. The Secondary DNS
server will be used if the Primary DNS server fails to connect.

When finished, click APPLY.

AWK Series User Manual 83


IP Configuration Status
To view the status of the current IP configuration, click the Status tab.

Routing and NAT


From the Routing and NAT section you can configure Routing and NAT settings.

Routing
The Routing section is used for managing static routes and checking the routing table.

AWK Series User Manual 84


Unicast Route

Static Route Settings


You can create, edit, and delete static route entries from the Static Route page. Click Static Route under
Routing > Unicast Route in the function tree.

Create a New Static Route

Click the Add icon to create a new entry.

Configure the following settings:

Entry Status
Setting Description Factory Default
Enabled/Disabled Enable or disable the static route entry. Disabled

AWK Series User Manual 85


Name
Setting Description Factory Default
0 to 31 characters Enter a name for the static route entry. None

Destination
Setting Description Factory Default
IP address Specify the destination IP address. None

Netmask
Setting Description Factory Default
IP address Specify the subnet mask for this IP address. 24 (255.255.255.0)

Next Hop
Setting Description Factory Default
Specify the next gateway IP address. This IP address should
IP address None
be in the same subnet as the specified interface.

Interface
Setting Description Factory Default
Interface Select the network interface for this route. WAN

Metric
Setting Description Factory Default
Specify the cost metric this route. Routes with a lower metric
1 to 32766 None
value take priority over routes with a higher cost.

When finished, click CREATE.

Routing Table
To view the current routing table, click Routing Table under Routing > Unicast Route in the function
tree.

AWK Series User Manual 86


NAT
The AWK Series supports Network Address Translation (NAT) and Port Forwarding in Client-Router operation
mode. This feature translates the outgoing communication from private IPs to external IPs (WAN IP).

Network Address Translate


The NAT page lets you enable NAT functionality and manage NAT rules. Click NAT in the function tree.

Configure the following setting:

NAT Global Status


Setting Description Factory Default
Enabled/Disabled Enable or disable the NAT function. Enabled

AWK Series User Manual 87


Add a New NAT Rule
To add a new NAT rule, click the Add icon.

Configure the following settings:

Rule Status
Setting Description Factory Default
Enabled/Disabled Enable or disable the NAT rule. Disabled

Name
Setting Description Factory Default
0 to 31 characters Enter a name for this rule. None

Description
Setting Description Factory Default
0 to 127 characters Enter a description for this rule. None

Priority
Setting Description Factory Default
1 to 31 Specify the priority for this rule. 1

NAT Mode
Setting Description Factory Default
1 to 1 Set the NAT mode to 1-to-1.
None
PAT Set the NAT mode to PAT (Port Address Translation).

Mapping Type (1 to 1 Mode only)


Setting Description Factory Default
Single to Single Set the mapping type to Single to Single.
Range to Range Set the mapping type to Range to Range. Single to Single
Subnet to Subnet Set the mapping type to Subnet to Subnet.

Mapping Type (PAT Mode only)


Setting Description Factory Default
Single Port Set the mapping type to Single Port.
Single Port
Multiple Ports Set the mapping type to Multiple Ports.

AWK Series User Manual 88


Protocol (PAT Mode only)
Setting Description Factory Default
TCP/UDP Specify the protocol. TCP, UDP

WAN
Setting Description Factory Default
IP address For 1-to-1 mode only. Specify the IP address for the WAN. None
For PAT mode only. Specify the TCP or UDP port number for
0 to 65535 None
the WAN.

LAN
Setting Description Factory Default
IP address Specify the LAN IP address. None
0 to 65535 For PAT mode only. Specify the LAN TCP or UDP port number. None

Click APPLY to create the new NAT rule.

For 1 to 1 NAT Mode and PAT Mode, refer to the following figure illustrations.

AWK Series User Manual 89


Edit an Existing NAT Rule

To edit an existing NAT rule, click the Edit icon next to the rule you want to edit.
Refer to Create a New NAT Rule for more information about each setting.

When finished, click APPLY.

AWK Series User Manual 90


View the NAT Rule Status
You can view the status of all NAT rules from the NAT rule list page.

You select what information you want to view by clicking Select Visible Columns icon and checking
the corresponding check boxes.

Only information for the selected items will be shown.

AWK Series User Manual 91


Firewall
The Firewall section contains the Layer 2 Policy and Layer 3 Policy configuration pages.

Layer 2 Policy
From the Layer 2 Policy screen, you can manage the L2 firewall policy and create, edit, and delete policy
rules. Click Layer 2 Policy under Firewall in the function tree to access this screen.

Configure the following settings:

Layer 2 Firewall Status


Setting Description Factory Default
Enabled/Disabled Enable or disable the Layer 2 firewall function. Disabled

Default Action
Setting Description Factory Default
Accept Accept all packets that do not match any policy rule.
Drop
Drop Drop all packets that do not match any policy rule.

ATTENTION
Be careful when configuring the packet filtering function:
If the default action is set to Drop and all rules are disabled, all packets will be allowed.
If the default action is set to Accept and all rules are disabled, all packets will be denied.

When finished, click APPLY to save your changes.

AWK Series User Manual 92


Add a New Layer 2 Firewall Rule

To add a new Layer 2 firewall rule, click the Add icon.

Configure the following settings:

Rule Status
Setting Description Factory Default
Enabled/Disabled Enable or disable the Layer 2 firewall rule. Disabled

Priority
Setting Description Factory Default
Specify the priority for this rule. A lower number represents a
1 to 64 higher priority. Rules with a higher priority will be checked and 1
enforced first.

Default Action
Setting Description Factory Default
Accept Packets that match the policy rule will be allowed.
Accept
Drop Packets that match the policy rule will be denied.

ATTENTION
Be careful when configuring the packet filtering function:
If the default action is set to Drop and all rules are disabled, all packets will be allowed.

AWK Series User Manual 93


If the default action is set to Accept and all rules are disabled, all packets will be denied.

Source MAC Address


Setting Description Factory Default
MAC address Enter the source MAC address. Any

Destination MAC Address


Setting Description Factory Default
MAC address Enter the destination MAC address. Any

When finished, click APPLY.

Layer 3 Policy
From the Layer 3 Policy screen, you can manage the L3 firewall policy and create, edit, and delete policy
rules. Click Layer 3 Policy under Firewall in the function tree to access this screen.

Configure the following settings.

Layer 3 Firewall Status


Setting Description Factory Default
Enabled/Disabled Enable or disable the Layer 3 firewall function. Disabled

Default Action
Setting Description Factory Default
Accept Packets that match the policy rule will be allowed.
Drop
Drop Packets that match the policy rule will be denied.

ATTENTION
Be careful when configuring the packet filtering function:
If the default action is set to Drop and all rules are disabled, all packets will be allowed.
If the default action is set to Accept and all rules are disabled, all packets will be denied.

When finished, click APPLY.

AWK Series User Manual 94


Add a New Layer 3 Firewall Rule

To add a new Layer 3 firewall rule, click the Add icon.

Configure the following settings:

Rule Status
Setting Description Factory Default
Enabled/Disabled Enable or disable the Layer 3 firewall rule. Disabled

Priority
Setting Description Factory Default
1 to 64 Specify the priority for this rule. 1

Default Action
Setting Description Factory Default
Accept Packets that match the policy rule will be allowed.
Accept
Drop Packets that match the policy rule will be denied.

AWK Series User Manual 95


Protocol
Setting Description Factory Default
All Filter all protocol traffic.
ICMP Only filter for ICMP protocol traffic.
All
TCP Only filter for TCP protocol traffic.
UDP Only filter for UDP protocol traffic.

The AWK’s IP protocol filter is a policy-based filter that can allow or filter out IP-based packets with specified
IP protocol and source/destination IP addresses.

The AWK provides 64 entities for setting IP protocol and source/destination IP addresses in your filtering
policy. Four IP protocols are available: All, ICMP, TCP, and UDP. You must specify either the Source IP or
the Destination IP. By combining IP addresses and netmasks, you can specify a single IP address or a range
of IP addresses to accept or drop. For example, “IP address 192.168.1.1 and netmask 255.255.255.255”
refers to the sole IP address 192.168.1.1. “IP address 192.168.1.1 and netmask 255.255.255.0” refers to
the range of IP addresses from 192.168.1.1 to 192.168.255.

Source
IP Address
Setting Description Factory Default
IP address Specify the source IP address. Any

Netmask
Setting Description Factory Default
32
Netmask Select the subnet mask
(255.255.255.255)

Port Range
Setting Description Factory Default
0 to 65535 If the Protocol is set to TCP or UDP, specify the port range. None

Destination
IP Address
Setting Description Factory Default
IP address Specify the destination IP address. Any

Netmask
Setting Description Factory Default
32
Netmask Specify the subnet mask.
(255.255.255.255)

Port Range
Setting Description Factory Default
0 to 65535 If the Protocol is set to TCP or UDP, specify the port range. None

When finished, click APPLY.

Security
The Security section lets you configure Device Security settings.

AWK Series User Manual 96


Device Security
This section describes how to configure the settings for Login Policy.

Login Policy
On the Login Policy page, you can configure login messages and login security functions. Click Login
Policy under Security > Device Security in the function tree to access this screen.

Configure the following settings:

Login Message
Setting Description Factory Default
Enter the message that will be displayed on the login screen
0 to 500 characters None
when accessing the device.

Login Failure Message


Setting Description Factory Default
Enter the message that will be displayed when users fail to log
0 to 500 characters Failed to login
in.

User Lockout Status


Setting Description Factory Default
Enable or disable the lockout function when a user fails to log
Enabled/Disabled Enabled
in.

AWK Series User Manual 97


Login Failure Retry Threshold
Setting Description Factory Default
Specify the maximum number of times a user can attempt to
1 to 10 5
log in again after a failed attempt.

Lockout Period
Setting Description Factory Default
Specify the duration (in minutes) the user will be unable to log
1 to 10 (min.) 5
in for after exceeding the number of allowed retries.

Session Lifetime
Setting Description Factory Default
Specify how long a user can be inactive for before being
5 to 1440 (min.) 10
automatically logged out and be required to log in again.

When finished, click APPLY.

Diagnostics
The Diagnostics section is used for monitoring and troubleshooting and includes the System Status,
Network Status, Event Logs and Notifications, and Tools pages.

System Status

Utilization
The Utilization screens features widgets and charts showing the real-time resource usage of the AWK.
Click Utilization under Diagnostics > System Status in the function tree to access this screen.

CPU Usage
This widget shows the current CPU usage.

AWK Series User Manual 98


CPU Usage History
The graph shows the CPU usage history.

AWK Series User Manual 99


Memory Usage
This widget shows the current memory usage.

Memory Usage History


This graph shows the memory usage history.

AWK Series User Manual 100


Network Status
The Network Status section contains the Network Statistics, LLDP, Bridge Table, and ARP Table
pages.

Network Statistics
The Network Statistics page shows real-time data for all interfaces. Click Network Statistics under
Diagnostics > Network Status in the function tree to access this page.

LLDP
LLDP is an OSI Layer 2 protocol defined by IEEE 802.11AB. LLDP standardizes the self-identification
advertisement method, and allows each networking device, such as a Moxa managed switch or access point,
to periodically send its system and configuration information to its neighbors. Because of this, all LLDP
devices are kept informed of each other’s status and configurations. With SNMP, this information can be
used to generate network visualization.

From the web interface, you can enable or disable LLDP, and set the LLDP transmit interval. In addition, you
can view the neighbor-list, which is reported by its network neighbors.

AWK Series User Manual 101


LLDP Settings
Click the Settings tab to enable or disable LLDP and set the transmission interval.

Configure the following settings:

LLDP Status
Setting Description Factory Default
Enabled/Disabled Enable or disable LLDP. Enabled

Transmission Interval
Setting Description Factory Default
Specify the transmission interval at which LLDP messages are
5 to 4095 (sec.) 30
sent.

NOTE
The LLDP protocol transmits data in clear text and discloses the device model name.

When finished, click APPLY.

LLDP Status
Click the Status tab to view the LLDP status.

AWK Series User Manual 102


Bridge Table
The Bridge Table page provides more detailed bridging information. Click Bridge Table under
Diagnostics > Network Status in the function tree to access this screen.

AWK Series User Manual 103


ARP Table
The ARP Table page shows all ARP entries. Click ARP Table under Diagnostics > Network Status in the
function tree to access this screen.

Event Logs and Notifications


The Event Logs and Notifications section is used to configure event and notification settings and includes
the Event Log, Notifications, Syslog, SNMP Trap/Inform, Email Settings, and Relay Alarm Cut-off
pages.

Event Log
From the Event Log page, you can view the current log list, configure the log oversize action, and back up
the event log. Click Event Log under Diagnostics > Event Logs and Notifications in the function menu to
access this page.

AWK Series User Manual 104


Log List
Click the Log List tab to view a list of all logged events.

Registered Logs
Click the Registered Logs tab to view and edit event log groups.

To edit an event log group, click the Edit icon next to the group you want to edit.

AWK Series User Manual 105


Configure the following settings:

Log Registration Status


Setting Description Factory Default
Enable or disable the log group. If disabled, events associated
Enabled/Disabled Enabled
with this group will not be logged.

Action
Setting Description Factory Default
Local Save the event logs locally.
Local, Syslog
Syslog Send the event logs to a Syslog server.

When finished, click APPLY.

Oversize Action
From the Oversize Action page, you can configure what happens when the log capacity has been reached.
Click the Oversize Action tab to access this screen.

AWK Series User Manual 106


Configure the following settings:

Oversize-Action
Setting Description Factory Default
Overwrite the oldest
Overwrite the oldest event log.
event log Overwrite the oldest
Stop recording event event log
Stop recording new event logs.
log

Capacity Warning
Setting Description Factory Default
Enabled/Disabled Enable or disable event log capacity warnings. Disabled

When finished, click APPLY.

Auto Backup Status


Setting Description Factory Default
Enabled/Disabled Enable or disable automatic event log backups to an ABC-02. Disabled

When finished, click APPLY.

Backup
Click Backup tab to select the storage location.

Storage Location
Setting Description Factory Default
Local Back up the event log to the local storage on the AWK device.
TFTP Back up the event log via TFTP.
None
SFTP Back up the event log via SFTP.
ABC-02 Back up the event log to an ABC-02 USB tool.

Server IP Address (for TFTP only)


Setting Description Factory Default
IP address Enter the IP address of the TFTP server. None

File Name (for TFTP only)


Setting Description Factory Default
Input the backup file
Enter the file name of the event log backup. None
name

Server IP Address (for SFTP only)


Setting Description Factory Default
IP address Enter the IP address of the SFTP server. None

Pathname (for SFTP only)


Setting Description Factory Default
Specify the file path on the SFTP server for storing the event
Pathname None
log backup.

AWK Series User Manual 107


Account (for SFTP only)
Setting Description Factory Default
Account name Enter the SFTP server account name. None

Password (for SFTP only)


Setting Description Factory Default
Password Enter the SFTP server account password. None

Select Folder (for ABC-02 only)


Setting Description Factory Default
Select the folder on the ABC-02 to store the event log backup
Folder None
in.

When finished, click BACKUP.

Notifications
You can configure the notification settings for individual event types. Click Notifications under
Diagnostics > Event Logs and Notifications in the function tree to access this screen.

To edit the notification settings, click the Edit icon next to the event you want to edit.

AWK Series User Manual 108


Configure the following settings:

Event Notification Status


Setting Description Factory Default
Enabled/Disabled Enable or disable notifications for this event. Enabled

Notification Method
Setting Description Factory Default
Trap Send notifications through SNMP Trap.
Email Send notifications through email.
Trap/Email
Use a relay for sending notifications. This option is only
Relay
available for specific event groups.

When finished, click APPLY.

Syslog
You can set up one or more Syslog servers to store event logs. Click Syslog under Diagnostics > Event
Logs and Notifications in the function tree to access this screen.

Configure the following settings:

Syslog Status
Setting Description Factory Default
Enabled/Disabled Enable or disable logging events to a syslog server. Disabled

Event Reporting Severity


Setting Description Factory Default
Emerg. Specify the syslog severity as Emergency.
Alert Specify the syslog severity as Alert.
Crit. Specify the syslog severity as Critical.
Error Specify the syslog severity as Error. Info.
Warning Specify the syslog severity as Warning
Notice Specify the syslog severity as Notice.
Info. Specify the syslog severity as Information.

Syslog Server 1 Status


Setting Description Factory Default
Enabled/Disabled Enable or disable the first syslog server. Disabled

AWK Series User Manual 109


Syslog Server 2 Status
Setting Description Factory Default
Enabled/Disabled Enable or disable the second syslog server. Disabled

Syslog Server 3 Status


Setting Description Factory Default
Enabled/Disabled Enable or disable the third syslog server. Disabled

When finished, click APPLY.

SNMP Trap/Inform
The SNMP Trap/Inform section is used for setting up SNMP Traps and Inform triggers for events. Click
SNM Trap/Inform under Diagnostics > Event Logs and Notifications in the function tree to access this
page.

AWK Series User Manual 110


General Settings
From the General tab, you can manage SNMP Trap/Inform recipients. Click the General tab to access this

screen. Click the Add icon to create a new entry.

Configure the following settings:

Recipient IP/Name
Setting Description Factory Default
0 to 60 characters or IP
Enter the name or IP of the recipient. None
address

Mode
Setting Description Factory Default
Disabled Disable the SNMP Trap/Inform function.
Trap V1 Set the trap version to Trap V1.
Trap V2c Set the trap version to Trap v2c.
Disabled
Inform V2c Set the inform version to Inform V2c.
Trap V3 Set the trap version to Trap V3.
Inform V3 Set the inform version to Inform V3.

When finished, click APPLY.

SNMP Inform Settings


From the SNMP Inform Settings screen, users can make sure SNMP Inform notice packets are sent and
received reliably. Users can specify the number of times the system will try to send an inform notice until
receiving confirmation from the SNMP Server. Configure the following settings.

Inform Retry
Setting Description Factory Default
1 to 99 Specify the maximum number of Inform retries. 3

Timeout
Setting Description Factory Default
1 to 300 Specify the Inform timeout value. 10

When finished, click APPLY.

AWK Series User Manual 111


SNMP Trap/Inform Account Settings
From the SNMP Trap/Inform Account tab, you can manage SNMP Trap/Inform accounts. Click the SNMP

Trap/Inform Account tab to access this screen. Click the Add icon to create a new entry.

Configure the following settings:

Username
Setting Description Factory Default
At least 4 characters,
Enter a username for the account. None
(max. 32 characters)

Authentication type
Setting Description Factory Default
None Do not use any authentication mechanism.
MD5 Use MD5 as the authentication type. None
SHA Use SHA as the authentication type.

Authentication Password (when the Authentication type is set to MD5 or SHA)


Setting Description Factory Default
8 to 64 characters Enter the authentication password. None

Encryption Method (when the Authentication type is set to MD5 or SHA)


Setting Description Factory Default
None Do not use any encryption.
DES DES is the encryption method. None
AES AES is the encryption method.

Encryption Key (when DES and AES is selected)


Setting Description Factory Default
8 to 64 characters Enter the encryption key. None

When finished, click APPLY.

AWK Series User Manual 112


Email Settings
The Email Settings page is used to configure email settings for notifications, including the email server,
sender, and recipients. Click Email Settings under Diagnostics > Event Logs and Notifications in the
function tree to access this screen.

Configure the following settings.

Email Server
Setting Description Factory Default
IP address or URL The IP address or URL of the email server. None

SMTP: TCP Port


Setting Description Factory Default
0 to 65535 The TCP port number of the email server. 25

Authentication Status
Setting Description Factory Default
Enabled/Disabled Enable or disable authentication for the email server. Disabled

Username
Setting Description Factory Default
Max. 60 characters Enter the email user account. None

Password
Setting Description Factory Default
Max. of 60 characters Enter the email user password None

AWK Series User Manual 113


Security
Setting Description Factory Default
None Do not use any security method.
STARTTLS Use STARTTLS as the security method. None
SSL/TLS Use SSL/TLS as the security method.

Sender Email Address


Setting Description Factory Default
Max. 60 characters Enter the sender’s email address. None

1st to 5th Email Addresses


Setting Description Factory Default
Enter the recipient’s email address. You can set up to five
Max. 60 characters recipient email addresses to receive alert emails from the AWK None
device.

When finished, click APPLY.

Relay Alarm Cut-off


Some events can be triggered by relay. If Relay is set as the notification method in the Notifications
section, you will see the state for that event is Triggered when the corresponding event occurs. Once
triggered, you can cut off the relay to deactivate the event. Click Relay Alarm Cut-off under Diagnostics
> Event Logs and Notifications in the function menu to access this screen.

NOTE
Relay Alarm Cut-off is only supported by the AWK-3252A and AWK-4252A Series.

AWK Series User Manual 114


Click CUT-OFF to deactivate the event.

AWK Series User Manual 115


Tools
The Tools sections contains several diagnostics and troubleshooting tools for the AWK, including Wi-Fi
Tools, System Data Collection, Diagnostic Support, and Ping.

Wi-Fi Tools
Under Wi-Fi Tools are the Channel Scan, and Wi-Fi Mirroring functions.

Channel Scan
The Channel Scan function is used to analyze the selected RF band for available channels. Click Channel
Scan under Diagnostics > Tools > Wi-Fi Tools in the function tree to access this screen.

Configure the following setting:

RF Band
Setting Description Factory Default
5 GHz Scan the 5 GHz RF band.
2.4 GHz Scan the 2.4 GHz RF band. None
5 GHz & 2.4 GHz Scan both 5 GHz and 2.4 GHz RF bands.

When finished, click ANALYZE.

AWK Series User Manual 116


When prompted, click ANALYZE again.

The result of the scan will be shown in the table at the bottom of the page.

AWK Series User Manual 117


Wi-Fi Mirroring
Wi-Fi Mirroring lets you copy the traffic of wireless traffic for analysis and troubleshooting purposes. Click
Wi-Fi Mirroring under Diagnostics > Tools > Wi-Fi Tools in the function tree to access this screen.

Configure the following settings.

Mirroring Type
Setting Description Factory Default
Local Select Local to mirror traffic to the local storage on the device.
Select Remote to have the AWK act as a server to be used
None
Remote with capturing tool such as Wireshark to capture the mirror
traffic.

Mirroring Period (Local Type only)


Setting Description Factory Default
1 to 60 (min.) Specify how long the device will mirror wireless traffic. None

When finished, click START to start mirroring, and STOP to stop mirroring.

The result of the mirroring will be shown below. If you selected Local as the mirroring type, click
DOWNLOAD to download the result to your local machine.

System Data Collection


The System Data Collection section contains the One Key Information and Data Collection functions.

Download One Key Information


Using the One Key Info function, all running configuration files, event logs, and CLI status will be saved as
a compressed ZIP file and stored on the selected medium. Click the One Key Info. Tab to access this
screen.

AWK Series User Manual 118


Configure the following settings:

File Password
Setting Description Factory Default
Enter the password for the file. This password will be required
1 to 64 characters None
to open the compressed file.

Storage Location
Setting Description Factory Default
Local The file will be downloaded to the local storage on the AWK.
TFTP The file will be downloaded to a TFTP server.
None
SFTP The file will be downloaded to an SFTP server.
ABC-02 The file will be downloaded to the connected ABC-02 USB.

Server IP Address (for TFTP only)


Setting Description Factory Default
IP address Enter the IP address of the TFTP server. None

Server IP Address (for SFTP only)


Setting Description Factory Default
IP address Enter the IP address of the SFTP server. None

Server Account (for SFTP only)


Setting Description Factory Default
Account name Enter the account name of the SFTP server. None

Server Password (for SFTP only)


Setting Description Factory Default
Account password Enter the account password of the SFTP server. None

When finished, click DOWNLOAD to download the file.

AWK Series User Manual 119


Data Collection
The Data Collection function is used to gather selected system information at specific intervals. Click the
Data Collection tab to access this screen.

Configure the following settings:

Interval
Setting Description Factory Default
1 to 30 (sec.) Specify the interval at which the AWK will collect information. None

Stop Date
Setting Description Factory Default
Date Specify the date the device will stop collecting information. None

Stop Time
Setting Description Factory Default
Time Specify the time the device will stop collecting information. 01:00 AM

Storage Location
Setting Description Factory Default
Local The file will be downloaded to the local storage on the AWK.
TFTP The file will be downloaded to a TFTP server.
None
SFTP The file will be downloaded to an SFTP server.
ABC-02 The file will be downloaded to the connected ABC-02 USB.

Server IP Address (for TFTP only)


Setting Description Factory Default
IP address Enter the IP address of the TFTP server. None

AWK Series User Manual 120


Server IP Address (for SFTP only)
Setting Description Factory Default
IP address Enter the IP address of the SFTP server. None

Server Account (for SFTP only)


Setting Description Factory Default
Account name Enter the account name of the SFTP server. None

Server Password (for SFTP only)


Setting Description Factory Default
Account password Enter the account password of the SFTP server. None

Select the information to collect


Setting Description Factory Default
Wi-Fi Statistic
Wi-Fi Connection
Wi-Fi Tx/Rx
Select the types of information you want to collect. None
Network
Service
System

When finished, click START to begin collecting information, and STOP to end.

Diagnostic Support
This feature allows an authorized user to generate an engineering account for Moxa support staff to access
and troubleshoot the AWK Series. Click Diagnostic Support under Diagnostics > Tools in the function
tree to access this screen.

Duration
Setting Description Factory Default
1 to 180 (days) Specify how long the diagnostics account will be active for. None

You can check the account status at any time in the bottom section of the screen. Click DEACTIVATE to
immediately terminate a generated diagnostics account.

NOTE
Only provide generated diagnostics account credentials to authorized Moxa support personnel.

AWK Series User Manual 121


Ping
The Ping function is used to check the connection to a remote host. Click Ping under Diagnostics > Tools
in the function tree to access this screen.

Configure the following settings:

Target
Setting Description Factory Default
IP address/hostname Enter the IP address or hostname you want to ping. None

Ping Interval
Setting Description Factory Default
1 to 30 (sec.) Specify the interval at which the AWK will ping the host. 1

Stop Method
Setting Description Factory Default
Rounds Specify Rounds as the stop method.
Rounds
Timestamps Specify Timestamps as the stop method.

Rounds (for Rounds Method only)


Setting Description Factory Default
3 to 86400 Specify the round value. 3

End Date (for Timestamps Method only)


Setting Description Factory Default
Specify the date when to stop pinging the IP address or
Date None
hostname.

End Time (for Timestamps Method only)


Setting Description Factory Default
Time Specify the time to stop pinging the IP address or hostname. 01:00 AM

When finished, click PING to begin pinging, or STOP to send.

Setup Wizard
The Setup Wizard allows users to perform basic device configurations to get the AWK running quickly.

Click Setup Wizard in the function tree to start the Wizard, then follow the on-screen instructions. There
are three configuration tabs: Wi-Fi Basic, Wi-Fi Security, and System. While the Wizard will start from
the Wi-Fi Basic section by default, you can go to any other tab at any time.

AWK Series User Manual 122


Wi-Fi Basic
Configure the following settings:

Operation Mode
Setting Description Factory Default
Disabled Disable the operation mode.
Specify the operation mode as AP. Refer to AP Mode
AP
Settings.
Specify the operation mode as Master. Refer to Master Mode
Master
Settings.
Specify the operation mode as Client. Refer to Client Mode Disabled
Client
Settings.
Specify the operation mode as Client-Router. Refer to Client-
Client-Router
Router Mode Settings.
Specify the operation mode as Slave. Refer to Slave Mode
Slave
Settings.

Environment
Setting Description Factory Default
Set the application environment to indoor. Available channels
Indoor
vary depending on the selection.
Indoor
Set the application environment to outdoor. Available channels
Outdoor
vary depending on the selection.

SSID: 2.4 GHZ


SSID Status
Setting Description Factory Default
Enabled/Disable Enable or disable the SSID. Disabled

AWK Series User Manual 123


SSID

Setting Description Factory Default

1 to 32 characters Enter a name for the SSID. None

Channel (available in AP and Master modes only)

Setting Description Factory Default

1 (2412 MHz) to 11 Select the channel from the drop-down list. Each channel
6 (2437 MHz)
(2462 MHz) supports different frequencies.

Bonded Channel (available in AP and Master modes only)


Setting Description Factory Default
The bonded channel used by the AP will be shown here if
10 (read only) None
channel width is set to 20/40 MHz.

SSID: 5 GHZ
SSID Status
Setting Description Factory Default
Enabled/Disable Enable or disable the SSID. Disabled

SSID

Setting Description Factory Default

1 to 32 characters Enter a name for the SSID. None

RF Band (for Client, Client-Router, and Slave modes only)


Setting Description Factory Default
5 GHz Select 5 GHz as the RF band.
2.4 GHz Select 2.4 GHz as the RF band. 5 GHz
5 GHz & 2.4 GHz Select both 5 GHz and 2.4 GHz as the RF bands.

5 GHz Channel Plan (for Client, Client-Router, and Slave modes only)

Setting Description Factory Default

Channel Select the channel for the 5 GHz band. Any

Channel (for AP and Master modes only)

Setting Description Factory Default

36 (5180 MHz) to 165 Select the channel from the drop-down list. Each channel
36 (5180 MHz)
(5825 MHz) supports different frequencies.

Bonded Channel (for AP and Master modes only)


Setting Description Factory Default
The bonded channel used by the AP will be shown here if
40/44/48 (read only) None
channel width is set to 36 (5180 GHz).

When finished, click NEXT.

AWK Series User Manual 124


Wi-Fi Security
AP/Master Mode

Client/Client-Router/Slave Mode

SSID

Setting Description Factory Default

SSID (read only) Shows the name for the SSID. None

AWK Series User Manual 125


Security
Setting Description Factory Default
Open Disable security on the SSID. This is not recommended.
WPA Use WPA authentication.
Use WPA2 authentication. This mode supports IEEE 802.11i
WPA2
with TKIP/AES + 802.1X encryption.
Use WPA3 authentication. This mode supports SAE
WPA3 (Simultaneous Authentication of Equals) to avoid network Open
attacks, such as KRACK.
Use WPA/WPA2 Mixed authentication. This allows both WPA
WPA/WPA2 Mixed
and WPA2 clients to connect to the AWK.
Use WPA/WPA3 Mixed authentication. This allows both WPA2
WPA2/WPA3 Mixed
and WPA3 clients to connect to the AWK.

When using any security mode except Open, configure the following settings:

Protected Management Frame


Setting Description Factory Default
Disable the protected management frame. This option is not
Disabled
available when using WAP3. Disabled
802.11w Use 802.11w protocol as the protected management frame.

WPA type
Setting Description Factory Default
Personal Use WPA, WPA2, and WPA3 with a Pre-shared Key (PSK).
Personal
Enterprise Use WPA, WPA2, and WPA3 with EAP security.

Primary/Secondary RADIUS Server IP (for Enterprise mode only)


Setting Description Factory Default
IP address Specify the RADIUS authentication server for EAP. None

Primary/Secondary RADIUS Port (for Enterprise mode only)


Setting Description Factory Default
0 to 65535 Specify RADIUS server port number. 1812

Primary/ Secondary RADIUS Shared Key (for Enterprise mode only)


Setting Description Factory Default
Enter the secret key shared for communication between AP
0 to 128 characters and the RADIUS server. The key cannot contain the following None
special characters: ` ' " | ; & $

Encryption
Setting Description Factory Default
AES Use Advance Encryption System (AES) encryption.
Use TKIP/AES Mixed encryption. This option provides a TKIP
broadcast key and TKIP+AES unicast key to support legacy AP TKIP/AES Mixed
TKIP/AES Mixed*
clients. This option is rarely used and is not available when
using WAP3.

*This option is available for legacy mode in AP/Master only and does not support AES-enabled clients.

EAPOL Version
Setting Description Factory Default
1 Use EAPOL Version 1 as the security authentication method.
1
2 Use EAPOL Version 2 as the security authentication method.

Passphrase (for Personal mode only)


Setting Description Factory Default
Enter the passphrase. This is the master key to generate keys
for encryption and decryption. The passphrase cannot contain
8 to 63 characters None
the following special characters: ` ' " | ; & $
Check Show Password to display the password in clear text.

AWK Series User Manual 126


EAP Protocol (for Enterprise mode only)
Setting Description Factory Default
TLS Use EAP-TLS to validate the connection. This option allows the
user to upload a TLS certificate to perform the identity check.
TTLS Use TTLS to validate the connection. This option requires
users to also specify the Anonymous Name, Username, and
TLS
Password.
PEAP Use PEAP to validate the connection. This option requires
users to also specify the Anonymous Name, Username, and
Password.

When finished, click NEXT.

System

AWK Series User Manual 127


Device Name
Setting Description Factory Default
Enter a name for the device. This is useful for differentiating
between the roles or applications of different units. Note that
the device name cannot be empty and must comply with the
following naming rules:
• Only supports letters (a-z), numbers (0-9), and special
1 to 255 characters character dash (-) Moxa-awk-3252a
• Cannot contain any spaces
• Cannot start with dash (-)
• Cannot end with dash (-)
• When used in a PROFINET environment, cannot start with
the prefix "port-x" where "x" equals 0 to 9. There is no
validity check to identify incorrect name formats.

Time
Clock Source
Setting Description Factory Default
Sync From Browser Synchronize the system clock with the browser’s clock.
Set the clock source to NTP. This will sync the system clock Sync From Browser
NTP
with an external NTP server.

Time Server 1 (for Clock Source is NTP)


Setting Description Factory Default
Specify the IP or domain address of the primary NTP server to
NTP time server use (e.g., 192.168.1.1, time.stdtime.gov.tw, or None
time.nist.gov).

Time Server 2 (for Clock Source is NTP)


Setting Description Factory Default
Specify the IP or domain address of the secondary NTP server.
NTP time server The secondary NTP server acts as a backup in case the device None
fails to connect to the first NTP server.

Time Zone
Setting Description Factory Default
Time zone Select a time zone. UTC+00:00

Daylight Saving Time Status


Setting Description Factory Default
Enabled/Disabled Enable or disable Daylight Saving Time. Disabled

Offset
Setting Description Factory Default
User-specified value Specify the offset value for Daylight Saving Time. 00:00

Start
Setting Description Factory Default
User-specified date Specify the date that Daylight Saving Time begins. None

End
Setting Description Factory Default
User-specified date Specify the date that Daylight Saving Time ends. None

IP Configuration
IP Mode
Setting Description Factory Default
The AWK is assigned an IP address automatically by the
DHCP
network’s DHCP server. Static
Static Manually configure up the AWK’s IP address.

AWK Series User Manual 128


IP Address (for Static mode only)
Setting Description Factory Default
IP address Enter the AWK’s IP address. 192.168.127.253

Subnet Mask (for Static mode only)


Setting Description Factory Default
Select the subnet mask. This is used to identify the type of
Subnet mask network the AWK is connected to (e.g., 255.255.0.0 for a 24 (255.255.255.0)
Class B network, or 255.255.255.0 for a Class C network).

Default Gateway (for Static mode only)


Setting Description Factory Default
Enter the IP address of the router that connects the LAN to an
IP address None
outside network.

DNS Server 1 and DNS Server 2 (for Static mode only)


Setting Description Factory Default
Enter the primary and secondary DNS server address. After
entering the DNS server’s IP address, you can input the AWK’s
IP address URL (e.g., http://ap11.abc.com) in your browser’s address None
field instead of entering the IP address. The Secondary DNS
server will be used if the Primary DNS server fails to connect.

When finished, click APPLY.

Maintenance and Tools


The user tools and functions are located at the top-right of the interface. Click the three-dot icon in the
upper right corner of the page to open the user menu.

Disable Auto Save


Auto Save will automatically save the configuration changes to the startup configuration. All parameters
will be effective immediately when applied, even if the AWK is restarted. If Auto Save is disabled, all
parameters will be temporarily stored in the running configuration (memory). To make any changes take
effect, you will need to save the running-configuration to the startup configuration after applying the
changes.

AWK Series User Manual 129


When Disable Auto Save is active, only the running configuration is saved. Disconnecting the power or
performing a warm start will undo any running changes. When Auto Save is enabled, the startup
configurations will be saved on the AWK.

To disable the Auto Save function, click Disable Auto Save in the menu. When prompted, click DISABLE
to disable the function.

Locator
Clicking Locator will trigger the wireless and SYSTEM LEDs to start flashing green at a 4 Hz interval for one
minute (default) alongside an audible beeper. This feature is useful for locating the physical device in a field
site.

AWK Series User Manual 130


Stop Mechanism
Setting Description Factory Default
Timer Use a timer to stop the locator LEDs from blinking.
Timer
Manually Stop the locator LEDs manually.

Duration
Setting Description Factory Default
1 to 300 (sec.) Specify the duration the LEDs will be blinking for. 60

When finished, click START to activate the LEDs.

LEDs triggered:

AWK-3252A/AWK-4252A: 2.4GHz, 5GHz, SYSTEM (SYS)

AWK Series User Manual 131


AWK-1151C: WLAN, SYSTEM

Reboot
To reboot the AWK, click Reboot.

AWK Series User Manual 132


When prompted, click REBOOT to reboot the AWK.

AWK Series User Manual 133


Reset Device
To reset the AWK to the factory default settings, click Reset Device.

When prompted, check Keep all event logs if you want to keep the event history, then click CONFIRM.

WARNING
Resetting the AWK to the factory default settings will permanently delete all your configuration settings.
This is permanent and cannot be undone.

AWK Series User Manual 134


Change Password
Click Change Password to change the password of the AWK.

Configure the following settings:

Current Password
Setting Description Factory Default
4 to 63 characters Enter the current password. None

New Password
Setting Description Factory Default
4 to 63 characters Enter the new password. None

Confirm Password
Setting Description Factory Default
4 to 63 characters Enter the new password again. None

When finished, click APPLY to change the password.

AWK Series User Manual 135


Log Out
To log out of the AWK, click Log out.

When prompted, click LOG OUT to log out of the AWK.

AWK Series User Manual 136


A. Supporting Information

This chapter presents additional information about this product. You can also learn how to contact Moxa for
technical support.

Device Recovery
In event the device is not working properly, including configuration changes not applying, the first
troubleshooting action is to perform a power cycle. This is done by removing and reconnecting the power
and verifying if the situation is resolved.

If power cycle does not solve the issue, the next step is to perform a reset to factory default setting. Refer
to Reset Device.

If you cannot access the web interface, and/or the Reset button is disabled, you can attempt to reset the
device via the serial console’s CLI FailSafe mode.

NOTE
The admin password is required to authorize the FailSafe function.

Follow the instructions in the Accessing the Serial Consoles section to access the serial console CLI
interface and enter the “reload” command to reboot the device.

When the terminal is showing “Restarting device … [device]# Booting …”, enter the “failsafe” command.

AWK Series User Manual 137


FailSafe mode will be triggered, and you will be prompted to confirm if you want to reset the device back to
factory default settings.

Enter Y to make the device initiate a reset to factory default settings.

When the command line prompt displays the login prompt, it means the device was successfully reset to
factory default settings.

AWK Series User Manual 138


B. Accessing the Serial Consoles

This chapter explains how to access the AWK Series. In addition to HTTP/HTTPS access, the AWK Series can
also be accessed through the serial console and Telnet/SSH console. The serial console connection method,
which requires a serial cable to connect the AWK Series to a PC’s COM port, can be used if you do not know
the AWK Series' IP address. The other consoles can be used to access the AWK Series over an Ethernet
LAN, or over the Internet.

RS-232 Console Configuration (115200, None,


8, 1, VT100)
The serial console connection method, which requires a serial cable to connect the AWK Series to a PC’s
COM port, can be used if you do not know the AWK Series' IP address. It is also convenient to use serial
console configurations when you cannot access the AWK Series over Ethernet LAN.

ATTENTION
Do not use the RS-232 console manager when the AWK Series is powered at reversed voltage (ex. -48
VDC), even though reverse voltage protection is supported.
If you need to connect the RS-232 console at reversed voltage, we highly recommend using an isolator,
such as the Moxa TCC-82 isolator.

NOTE
We recommend using Moxa PComm (Lite) Terminal Emulator, which can be downloaded free of charge
from Moxa’s website.

Before running PComm Terminal Emulator, use an RJ45-to-DB9-F (or RJ45-to-DB25-F) cable to connect the
AWK Series' RS-232 console port to your PC’s COM port (generally COM1 or COM2, depending on how your
system is set up). After installing PComm Terminal Emulator, perform the following steps to access the RS-
232 console utility.

1. From Windows desktop, open the Start menu and run PComm Terminal Emulator in the PComm
(Lite) group.
2. Select Open under Port Manager to open a new connection.

AWK Series User Manual 139


The Communication Parameter page of the Property window opens. Select the appropriate COM port
for the Console Connection, 115200 for Baud Rate, 8 for Data Bits, None for Parity, and 1 for Stop
Bits. Click on the Terminal tab and select VT100 (or ANSI) for Terminal Type. Click OK to continue.

3. The Console login screen will appear. Log into the RS-232 console with the device’s account and
password.

AWK Series User Manual 140


4. The AWK Series device's CLI interface will be displayed. Refer to the device's CLI User’s Manual for
more information and instructions on how to use the command line interface.

NOTE
To modify the appearance of the PComm Terminal Emulator window, select Edit > Font and then choose
the desired formatting options.

ATTENTION
If you unplug the RS-232 cable or trigger DTR, you will be disconnected and logged out for network
security reasons. You will need to log in again to resume operations.

Configuration by Telnet and SSH Consoles


You can use a Telnet or SSH client to access the AWK Series and manage the console over a network. To
access the AWK Series' functions over the network from a PC host that is connected to the same LAN as the
AWK Series, you need to make sure that the PC host and the AWK Series are on the same logical subnet. To
do this, check your PC host’s IP address and subnet mask.

NOTE
The AWK Series' default IP address is 192.168.127.253 and the default subnet mask is 255.255.255.0
(for a Class C network). To configure the AWK Series remotely over a LAN network, set the PC host’s IP
address to 192.168.127.xxx and subnet mask to 255.255.255.0.

AWK Series User Manual 141


Follow the steps below to access the console utility via Telnet or SSH client:

1. From Windows Desktop, run Start > Run, and type telnet (AWK IP address) in the Run window and
click OK. The AWK’s default IP address is 192.168.127.253.

2. When using an SSH client (e.g. PuTTY), run the software and enter the AWK devce's IP address as the
Host Name along with port 22, and select SSH as the connection type.

3. The Console login screen will appear. Please refer to the previous paragraph “RS-232 Console
Configuration” and for login and administration.

AWK Series User Manual 142

You might also like