moxa-awk-1151c-awk-3252a-awk-4252a-series-user-manual-v1.0
moxa-awk-1151c-awk-3252a-awk-4252a-series-user-manual-v1.0
www.moxa.com/products
Copyright Notice
© 2023 Moxa Inc. All rights reserved.
Trademarks
The MOXA logo is a registered trademark of Moxa Inc.
All other trademarks or registered marks in this manual belong to their respective manufacturers.
Disclaimer
• Information in this document is subject to change without notice and does not represent a commitment
on the part of Moxa.
• Moxa provides this document as is, without warranty of any kind, either expressed or implied, including,
but not limited to, its particular purpose. Moxa reserves the right to make improvements and/or
changes to this manual, or to the products and/or the programs described in this manual, at any time.
• Information provided in this manual is intended to be accurate and reliable. However, Moxa assumes no
responsibility for its use, or for any infringements on the rights of third parties that may result from its
use.
• This product might include unintentional technical or typographical errors. Changes are periodically
made to the information herein to correct such errors, and these changes are incorporated into new
editions of the publication.
www.moxa.com/support
Table of Contents
1. About This Manual ................................................................................................................................ 5
Symbol Definition for Web Interface Configurations.................................................................................... 5
About Note, Attention, and Warning ......................................................................................................... 6
Configuration Reminders ........................................................................................................................ 7
A: About Mandatory Parameters ....................................................................................................... 7
B: Preconfiguring Settings ............................................................................................................... 7
2. Getting Started ..................................................................................................................................... 9
Functional Design .................................................................................................................................. 9
LED Indicators ............................................................................................................................... 9
Event Indicators ........................................................................................................................... 13
Beeper ........................................................................................................................................ 13
Reset Button................................................................................................................................ 14
Relay (AWK-3252A and AWK-4252A Only) ...................................................................................... 14
First-time Installation and Configuration ................................................................................................. 15
Communication Testing ........................................................................................................................ 18
3. Web Interface Configuration .............................................................................................................. 20
Function Introduction ........................................................................................................................... 20
Device Summary ................................................................................................................................. 21
Device Information ....................................................................................................................... 21
System Information ...................................................................................................................... 21
System Status ............................................................................................................................. 22
SSID........................................................................................................................................... 22
System............................................................................................................................................... 23
System Management .................................................................................................................... 23
Account Management.................................................................................................................... 37
Management Interface .................................................................................................................. 42
Time ........................................................................................................................................... 49
Wi-Fi .................................................................................................................................................. 53
Wireless Settings.......................................................................................................................... 53
Connection Check and Recovery ..................................................................................................... 70
Roaming ..................................................................................................................................... 74
Ports .................................................................................................................................................. 75
Port Settings................................................................................................................................ 75
Layer 2 Switching ................................................................................................................................ 77
VLAN .......................................................................................................................................... 77
IP Configuration .................................................................................................................................. 83
General Settings .......................................................................................................................... 83
IP Configuration Status ................................................................................................................. 84
Routing and NAT.................................................................................................................................. 84
Routing ....................................................................................................................................... 84
NAT ............................................................................................................................................ 87
Firewall .............................................................................................................................................. 92
Layer 2 Policy .............................................................................................................................. 92
Layer 3 Policy .............................................................................................................................. 94
Security.............................................................................................................................................. 96
Device Security ............................................................................................................................ 97
Diagnostics ......................................................................................................................................... 98
System Status ............................................................................................................................. 98
Network Status .......................................................................................................................... 101
Event Logs and Notifications ........................................................................................................ 104
Tools ........................................................................................................................................ 116
Setup Wizard .................................................................................................................................... 122
Wi-Fi Basic ................................................................................................................................ 123
Wi-Fi Security ............................................................................................................................ 125
System ..................................................................................................................................... 127
Maintenance and Tools ....................................................................................................................... 129
Disable Auto Save ...................................................................................................................... 129
Locator ..................................................................................................................................... 130
Reboot ...................................................................................................................................... 132
Reset Device.............................................................................................................................. 134
Change Password ....................................................................................................................... 135
Log Out ..................................................................................................................................... 136
A. Supporting Information .................................................................................................................... 137
Device Recovery ................................................................................................................................ 137
B. Accessing the Serial Consoles ........................................................................................................... 139
RS-232 Console Configuration (115200, None, 8, 1, VT100) ................................................................... 139
Configuration by Telnet and SSH Consoles ............................................................................................ 141
1. About This Manual
Thank you for purchasing a Moxa’s AWK-3252A Series/AWK-4252A Series/AWK-1151C Series product,
referred to as 'AWK Series" in this manual. Read this user’s manual to learn how to connect your Moxa
product with various interfaces and how to configure all settings and parameters via the user-friendly web
interface. Note that the web interface screenshots shown in this manual use the AWK-3252A Series for
reference. Since all AWK Series use the same firmware image, the screenshots will be identical for all
models, with the exception of the model name.
Three methods can be used to connect to the Moxa’s device, which all will be described in the next two
chapters. See the following descriptions for each chapter’s main functions.
In this chapter, we explain the instruction on how to initialize the configuration on Moxa’s product. We
provide three interfaces to access the configuration settings: RS-232 console interface, SSH/Telnet CLI
(Command Line Interface), and web interface.
In this chapter, we explain how to access the Moxa AWK-3252A’s various configuration, monitoring, and
management functions. These functions can be accessed through a web browser, or through the command
line console (CLI). In this manual, we describe how to configure the AWK Series functions via the web
interface, which provides the most user-friendly way to configure a Moxa device. For more information on
how to configure the AWK Series using the command line interface, refer to the AWK Series Command Line
Interface User Manual.
Symbols Meanings
Add
Clear all
Column selection
Refresh
Export
Edit
Re-authentication
Delete
Panel View
Expand
Collapse
Settings
Data comparison
Menu icon
Change mode
Locator
Reboot
Reset to defaults
Logout
Increase
Decrease
Equal
Menu
Search
Hide text that is typed into a text box (usually used when typing a password)
Show text typed into a text box (usually used when checking a password)
Note: This is used to provide additional information for a function, feature, or scenario. Here is an example:
NOTE
Reset to Default button is disabled by default; users need to enable it in the web console if they want to
use it.
Attention: This is used to notify readers of matters or situations that require extra attention to avoid
possible issues. Here is an example:
ATTENTION
When a different type of module has been inserted into the AWK Series, we suggest you configure the
settings, or use reset-to-default.
WARNING
There is a risk of explosion if the battery is replaced by an incorrect type.
Configuration Reminders
In this section, several examples will be used to remind users when configuring the settings for Moxa’s AWK
Series.
• The items with asterisks mean they are mandatory parameters that must be provided. In the figure
above, the parameters for Entry Status, Destination, and Interface are required to be able to save or
apply the configuration.
• If an item is marked in red means this item has been skipped. You need to fill in the parameters or you
cannot apply or create the function.
In addition, some parameter values will be limited to a specific range. If the values exceed the range, it
cannot be applied or created.
B: Preconfiguring Settings
Some function settings can be configured while the function is disabled. These changes will take effect when
the function is enabled, without having to reconfigure the settings again. For example, on the SNMP
configuration page, users can configure the SNMP Account List settings while SNMP is disabled. When SNMP
is enabled, the previously configured Account List settings will take effect.
In this chapter, we provide an overview of the AWK Series, and explain how to log into the Moxa’s AWK
Series for the first time through the web-based interface.
Functional Design
LED Indicators
The LEDs on the front and right panels of the AWK Series provide a quick and easy means of determining
the current operational status and wireless settings.
AWK-4252A Series
The following table summarizes how to read the device’s wireless settings from the LED displays.
AWK-3252A Series
The following table summarizes how to read the device’s wireless settings from the LED displays.
AWK-3252A
Applicable AWK-3252A AWK-1151C
AWK-4252A
Models AWK-4252A
AWK-1151C
SYS 2.4 GHz 5 GHz WLAN
LED
Red Green Amber Green Amber Green Amber Green
Blinks at
IP address conflict Off – – – – – –
4 Hz
Failed to get an IP – –
Blinks at
from the DHCP Off – – – –
4 Hz
server
ABC-02 is Blinks at – –
Off – – – –
connected 4 Hz
Uploading/retrievi
ng file(s) to/from
ABC-02
Blinks at Blinks at Blinks at Blinks at
(e.g., upgrading Off Off Off Off
4 Hz 4 Hz 4 Hz 4 Hz
firmware,
backup/restore
configuration)
Failed to
upload/retrieve
file(s) to/from
ABC-02.
Possible reasons
are: Blinks at
Off – – – – – –
The file does not 4 Hz
exist,
failed to copy the
file, or the ABC-
02 has insufficient
space
The device is Blinks at Blinks at Blinks at Blinks at
Off Off Off Off
being located. 4 Hz 4 Hz 4 Hz 4 Hz
The Reset button
is being pressed
Blinks at
for less than 5 Off – – – –
1 Hz
seconds (system
reboot)
The Reset button
is being pressed
for 5 to 10 Blinks at
Off – – – – – –
seconds 4 Hz
(System factory
reset)
The Reset button
is being pressed
for longer than 10
Off Solid on – – – – – –
seconds
(Abort reboot or
reset)
Beeper
The beeper emits two short beeps when the system is ready.
• System reboot: Hold down the Reset button for under 5 seconds and then release. The SYS LED will
blink at 1 Hz.
• Reset to factory default: Hold down the Reset button for over 5 seconds until the SYS LED starts
blinking green. Release the button to reset the AWK Series to its factory default settings. The SYS LED
will blink at 4 Hz.
• Abort the action: Hold the Reset button down for longer than 10 seconds and then release to abort
the reset action. The SYS LED will stop blinking and turn solid.
NOTE
The reset to default factory settings function of the reset button is disabled by default and must be
enabled in the web console. Refer to the Reset Button Active Duration section for more detailed
information.
The two wires attached to the relay contacts form an open circuit when a user-configured event is triggered.
If a user-configured event does not occur, the relay circuit will remain closed. For safety reasons, the relay
The AWK-3252A relay is marked on the 2 terminal block contacts, as shown in the image below:
The AWK-4252A relay is integrated into the DI/DO connector (pins 1 and 2), as shown in the image below:
NOTE
The images in the instructions below use the AWK-3252A Series interface for reference. The instructions are identical
for all supported AWK models.
NOTE
For PoE-capable models, when both a DC and PoE power source is connected, the DC input will be the
default primary power source while PoE will be secondary. Using both DC and PoE power sources at the
same time does not provide seamless power redundancy. In the event the DC power source goes down,
the AWK will perform a reboot to negotiate the PoE protocol before switching to the PoE source.
After creating your account, you will be automatically redirected to the login screen.
If you are testing the AWK Series device as an AP, you will need a second notebook computer equipped with
a WLAN card. Configure the WLAN card to connect to the AWK Series and change the IP address of the
second notebook (Notebook B) so that it is on the same subnet as the first notebook (Notebook A), which is
connected to the AWK Series.
After configuring the WLAN card, establish a wireless connection with the AWK Series and open a DOS
window on Notebook B. At the prompt, type
and then press Enter (see the figure below). A “Reply from IP address …” response means the
communication was successful. A “Request timed out.” response means the communication failed. In this
case, recheck the configuration to make sure the connections are correct.
If you are testing the AWK Series as a Client, you will need a second notebook computer (Notebook B)
equipped with an Ethernet port as well as an AP connected to notebook A. Configure the AWK Series
connected to notebook B for Client mode with the correct SSID and credentials matching the target AP.
After setting up the testing environment, open a DOS window on notebook B. At the prompt, type:
and then press Enter. A “Reply from IP address …” response means the communication was successful. A
“Request timed out” response means the communication failed. In this case, recheck the configuration to
make sure the connections are correct.
Moxa’s AWK Series offers a user-friendly web interface for easy configuration. All functions of the Moxa’s
AWK Series can be configured via this web interface.
Function Introduction
This section describes the web interface design, providing a basic visual concept for users to understand the
main information or configuration menu for the web interface pages.
1. Login Name: This shows the name of the user that is currently logged in.
2. Search Bar: Type the name of the function you want to search for in the function menu tree.
3. Function Menu: All functions of the AWK Series are shown here. Click the function you want to view or
configure.
4. Device Summary: All important device information and statistics are shown here.
5. Maintenance: Functions for device maintenance are located here.
Device Information
This shows the model information, including product model name, the country or region where the device is
located, and firmware version.
System Information
This shows system information including the device name, location, description, and current operation
mode.
SSID
This shows information for the SSIDs configured on the AWK Series. This widget includes both the 2.4 GHz
and 5 GHz bands.
System Management
The System Management section houses three subsections: System Information, Firmware Upgrade,
and Configure Backup and Restore.
System Information
On the System Information screen, you can enter a device name, description, and location for the device.
This makes it easier to identify different AWKs that are connected to your network.
Location
Setting Description Factory Default
Enter a location for the device. This is useful for identifying
Max. 255 characters None
where the device is deployed. Example: production line 1.
Description
Setting Description Factory Default
Max. 255 characters Enter a description for the device. AWK-3252A
Contact Information
Setting Description Factory Default
Enter the contact information of the person responsible for the
Max. 255 characters None
device in case there is a problem with the device.
Local
Select Local from the Source drop-down list. Before performing the firmware upgrade, download the target
firmware (*.rom) file first from Moxa’s website (www.moxa.com) to the local host.
Select File
Setting Description Factory Default
Click the browse icon and navigate to the firmware file on the
Select the firmware file None
local host.
When finished, click UPLOAD to upload the file, then click UPGRADE to perform the firmware upgrade.
TFTP Server
Select TFTP from the Source drop-down list.
Server IP Address
Setting Description Factory Default
Enter the IP address of the TFTP server where the new
TFTP server address None
firmware file (*.rom) is located.
File Name
Setting Description Factory Default
Firmware file name Enter the file name of the new firmware. None
When finished, click UPLOAD to upload the file, then click UPGRADE to perform the firmware upgrade.
Server IP Address
Setting Description Factory Default
Enter the IP address of the SFTP server where the new
SFTP server address None
firmware file (*.rom) is located.
File Name
Setting Description Factory Default
Firmware file name Enter the file name of the new firmware. None
Account
Setting Description Factory Default
Enter the SFTP user account name. This account must be
SFTP server account None
authorized to ensure a secure connection to the SFTP server.
Password
Setting Description Factory Default
Enter the SFTP user account password. This account must be
SFTP server password None
authorized to ensure a secure connection to the SFTP server.
When finished, click UPLOAD to upload the file, then click UPGRADE to perform the firmware upgrade.
Select File
Setting Description Factory Default
Click the browse icon and navigate to the firmware file on the
Select the firmware file None
attached ABC-02 device.
When finished, click UPLOAD to upload the file, then click UPGRADE to perform the firmware upgrade.
Backup
The Backup tab is used to export a backup of the current configuration. This backup file can then be used
to restore the device’s configuration settings, or to import it to other AWK Series devices.
Local
Select Local first from the Storage Location drop-down list.
Configuration Source
Setting Description Factory Default
Running Configuration Back up the running configuration. Running
Startup Configuration Back up the start-up configuration. Configuration
Configuration Password
Setting Description Factory Default
Enter the configuration password. You will need to enter this
Configuration password None
password when importing the backup file.
TFTP Server
Select TFTP first from the Storage Location drop-down list.
Configuration Source
Setting Description Factory Default
Running Configuration Back up the running configuration. Running
Startup Configuration Back up the start-up configuration. Configuration
Storage Location
Setting Description Factory Default
Local Back up the configuration files for the local computer.
TFTP Back up the configuration files via TFTP.
Local
SFTP Back up the configuration files via SFTP.
ABC-02 Back up the configuration files via ABC-02 USB tool
Server IP Address
Setting Description Factory Default
TFTP server address Enter the IP address of the TFTP server. None
File Name
Setting Description Factory Default
Max. 256 characters
(including the .ini file Enter the configuration backup file name. None
extension).
SFTP Server
Select SFTP first from the Storage Location drop-down list.
Configuration Source
Setting Description Factory Default
Running Configuration Back up the running configuration. Running
Startup Configuration Back up the start-up configuration. Configuration
Storage Location
Setting Description Factory Default
Local Back up the configuration files for the local computer.
TFTP Back up the configuration files via TFTP.
Local
SFTP Back up the configuration files via SFTP.
ABC-02 Back up the configuration files via ABC-02 USB tool
Server IP Address
Setting Description Factory Default
Enter the IP address of the SFTP server where the new
SFTP server address None
firmware file (*.rom) is located.
File Name
Setting Description Factory Default
Max. 256 characters
(including the .ini file Enter the configuration backup file name. None
extension).
Password
Setting Description Factory Default
Enter the SFTP user account password. This account must be
SFTP server password None
authorized to ensure a secure connection to the SFTP server.
Configuration Password
Setting Description Factory Default
Enter the configuration password. You will need to enter this
Configuration password None
password when importing the backup file.
ABC-02
Select ABC-02 from the Storage Location drop-down list. This method requires a Moxa ABC-02
configuration backup and restore USB tool to be connected to the AWK Series.
Configuration Source
Setting Description Factory Default
Running Configuration Back up the running configuration. Running
Startup Configuration Back up the start-up configuration. Configuration
Storage Location
Setting Description Factory Default
Local Back up the configuration files for the local computer.
TFTP Back up the configuration files via TFTP.
Local
SFTP Back up the configuration files via SFTP.
ABC-02 Back up the configuration files via ABC-02 USB tool.
Select Folder
Setting Description Factory Default
Folder path Navigate to the folder path of the ABC-02 tool. None
Configuration Password
Setting Description Factory Default
Enter the configuration password. You will need to enter this
Configuration password None
password when importing the backup file.
Restore
From the Restore tab you restore the device’s configuration using a previously created backup file.
Select File
Setting Description Factory Default
Click the browse icon and navigate to the backup file on the
Backup file None
local host.
Configuration Password
Setting Description Factory Default
Enter the configuration password. You will need to enter this
Configuration password None
password when importing the backup file.
TFTP Server
Source
Setting Description Factory Default
Local Restore the configuration from a local backup file.
TFTP Restore the configuration from a backup file via TFTP.
SFTP Restore the configuration from a backup file via SFTP. Local
Restore the configuration from a backup file on an ABC-02
ABC-02
USB tool.
Server IP Address
Setting Description Factory Default
TFTP server address Enter the IP address of the TFTP server. None
File Name
Setting Description Factory Default
Max. 256 characters
(including the .ini file Enter the file name of the configuration backup file. None
extension)
SFTP Server
Source
Setting Description Factory Default
Local Restore the configuration from a local backup file.
TFTP Restore the configuration from a backup file via TFTP.
SFTP Restore the configuration from a backup file via SFTP. Local
Restore the configuration from a backup file on an ABC-02
ABC-02
USB tool.
Server IP Address
Setting Description Factory Default
Enter the IP address of the SFTP server where the new
SFTP server address None
firmware file (*.rom) is located.
File Name
Setting Description Factory Default
Max. 256 characters
(including the .ini file Enter the filename of the configuration restoration file. None
extension).
Account
Setting Description Factory Default
Enter the SFTP user account name. This account must be
SFTP server account None
authorized to ensure a secure connection to the SFTP server.
Password
Setting Description Factory Default
Enter the SFTP user account password. This account must be
SFTP server password None
authorized to ensure a secure connection to the SFTP server.
ABC-02
Source
Setting Description Factory Default
Local Restore the configuration from a local backup file.
TFTP Restore the configuration from a backup file via TFTP.
SFTP Restore the configuration from a backup file via SFTP. Local
Restore the configuration from a backup file on an ABC-
ABC-02
02 USB tool.
Select File
Setting Description Factory Default
Click the browse icon and navigate to the backup file on the
Backup file None
local host.
Configuration Password
Setting Description Factory Default
Enter the configuration password. You will need to enter this
Configuration password None
password when importing the backup file.
restore tool.
Account Management
From this section, you can manage User Account settings and the Password Policy.
User Account
The User Account section lets you manage user accounts on the device, including setting user roles and
privileges. Click User Account under Account Management to access this configuration screen.
To create a new user account, click the Settings tab, then click the Add icon.
Status
Setting Description Factory Default
Enabled/Disabled Enable or disable the user account. Disabled
Username
Setting Description Factory Default
Min. 4 characters Enter a username for this account. None
New Password
Setting Description Factory Default
Min. 4 characters Enter the password for this account. None
Confirm Password
Setting Description Factory Default
Password Enter the account password again for confirmation. None
Role
Setting Description Factory Default
Set the user’s role to Administrator. This role provides full
Administrator access to all configurations on the device. (pre-defined
authority)
Engineer Set the user’s role to Engineer. (pre-defined authority)
User
User Set the user’s role to User. (pre-defined authority)
If a mix of authorities is necessary, create an account via the
Custom Custom option and manually select the necessary authorities
for this account.
Authority
Setting Description Factory Default
Checking authorities gives the user the ability to access
configurations pages in the corresponding category. These
Checkbox None
authority privileges extend to all access interfaces, including
CLI.
Refer to the table below for an overview of each role and corresponding authorities.
NOTE
The Administrator, Engineer, and User roles have pre-defined authority options and cannot be changed.
The Administrator has all authorities enabled by default. The Custom role allows you to select specific
authorities for the user account.
To delete one or more existing users, check the user(s) you want to delete and click the Delete icon on
the top of the page.
Click Session Management tab and click the Terminate Session icon next to the user.
Click TERMINATE to end the selected sessions. The user will be logged out of the corresponding interfaces
immediately.
Password Lifetime
Setting Description Factory Default
Specify the maximum password lifetime. At the end of this
duration, the password will expire, and users will be requested
0 to 365 day(s) to create a new password. Every time this value is changed, 90
users will be required to create a new password when logging
in the next time.
Management Interface
The Management Interface section houses the User Interface, Hardware Interface, and SNMP
configuration screens.
HTTP Status
Setting Description Factory Default
Enabled/Disabled Enable or disable HTTP connections. Disabled
NOTE
If HTTP and HTTPS are both enabled, any HTTP session will automatically redirect to HTTPS.
HTTPS Status
Setting Description Factory Default
Enabled/Disabled Enable or disable HTTPS connections. Enabled
SSH Status
Setting Description Factory Default
Enabled/Disabled Enable or disable SSH connections. Enabled
SNMP Status
Setting Description Factory Default
Enabled/Disabled Enable or disable SNMP. Disabled
SNMP – Port
Setting Description Factory Default
1 to 65535 Specify the SNMP UDP port number. 161
NOTE
Moxa Service is only for Moxa network management software such as MXconfig.
Serial Status
Setting Description Factory Default
Enabled/Disabled Enable or disable the serial port. Enabled
USB Status
Setting Description Factory Default
Enabled/Disabled Enable or disable the USB port. Enabled
The supported SNMP security modes and levels are shown in the table below. Select the security mode and
level that will be used to communicate between the SNMP agent and manager.
Protocol
UI Setting Authentication Encryption Method
Version
V1, V2c Read Uses a community string match for
Community string None
Community authentication.
SNMP V1,
V1, V2c
V2c Uses a community string match for
Write/Read Community string None
authentication.
Community
Uses an account with admin or user role to
None None None
access objects.
Uses authentication based on HMAC-MD5, or
Authentication
HMAC-SHA algorithms. 8-character passwords
MD5 or SHA based on MD5 or Disabled
are the minimum requirement for
SHA
SNMP V3 authentication.
Uses authentication based on HMAC-MD5 or
Data
Authentication HMAC-SHA algorithms, and a data encryption
encryption
MD5 or SHA based on MD5 or key. 8-character passwords and a data
key: DES,
SHA encryption key are the minimum requirements
AES
for authentication .and encryption.
SNMP Status
Setting Description Factory Default
Read/Write Set SNMP to read-write.
Read Only Set SNMP as read-only. Disabled
Disabled Disable the SNMP.
SNMP Version
Setting Description Factory Default
V1, V2c, V3 Enable SNMP V1, V2c, and V3.
V1, V2c Enable SNMP V1 and V2c. V3 only
V3 only Enable SNMP V3 only.
NOTE
SNMP V1 and V2c are not secure. We highly recommend using SNMP V3.
NOTE
While the AWK-3252A, AWK-4252A, and AWK-1151C Series use the same firmware and MIB structure,
since the AWK-1151C Series only contains client feature sets and lacks DI/DO and Relay hardware
interfaces, please be aware that SNMP read or write to non-applicable OIDs for the AWK-1151C Series will
return “0 disabled” and “not support” messages.
On the SNMP Account List tab, click the Edit icon of the account you want to edit.
SNMP Status
Setting Description Factory Default
Enabled/Disabled Enable or disable SNMP. Disabled
Authority
Setting Description Factory Default
Read/Write Give the SNMP account as Read/Write authority.
Read/Write
Read Only Give the SNMP account Read Only authority.
Authentication Type
Setting Description Factory Default
None No authority type selected.
MD5 Specify MD5 as the authority type. None
SHA Specify SHA as the authority type.
Authentication Password
Setting Description Factory Default
Depending on the selected Authentication Type, specify the
8 to 63 characters Authentication Password. The password must be at least 8 None
characters long.
Encryption Method
Setting Description Factory Default
None No encryption method selected.
DES Specify DES as the Encryption Method. None
AES Specify AES as the Encryption Method.
Encryption Key
Setting Description Factory Default
Depending on the selected Encryption Method, specify the
8 to 63 characters Encryption Key. The password must be at least 8 characters None
long.
System Time
The System Time screen lets you configure the device time settings and specify the time zone. Click
System Time under Time in the function tree to access this screen.
ATTENTION
You must select the time zone first before configuring "System Clock" settings, as any changes made to
the time zone after the system clock has been configured will shift the clock offset based on the deviation
of the selected time zone.
Current Time
Setting Description Factory Default
Current Time (read
Shows the current time. Current Time
only)
Clock Source
Setting Description Factory Default
Set the clock source to internal. This requires the date and
Internal Clock
time to be specified manually.
Internal Clock
Set the clock source to NTP. This will sync the system clock
NTP
with an external NTP server.
Time
Setting Description Factory Default
Specify the current time using the 12-hour AM/PM format. You
hh, mm, ss can manually input the time, or you can click Sync From Sync From Browser
Browser to sync the time with your web browser.
Time Server 1
Setting Description Factory Default
Specify the IP or domain address of the primary NTP server to
NTP time server use (e.g., 192.168.1.1, time.stdtime.gov.tw, or None
time.nist.gov).
Sync Interval
Setting Description Factory Default
Specify the interval (in seconds) at which the system will sync
10 to 1440 (sec.) 10
the clock with the time server.
Time Zone
Setting Description Factory Default
GMT (Greenwich
Time zone Select a time zone.
Mean Time)
Offset
Setting Description Factory Default
User-specified value Specify the offset value for Daylight Saving Time. None
Start
Setting Description Factory Default
User-specified date Specify the date that Daylight Saving Time begins. Jan, 1st, Sun, 00.
End
Setting Description Factory Default
User-specified date Specify the date that Daylight Saving Time ends. Jan, 1st, Sun, 00
Wireless Settings
On the Wireless Settings page, you can configure the device’s operating mode, SSID, MAC Cloning
settings, as well as check the Wi-Fi connection status. Click Wireless Settings under Wi-Fi in the function
tree to access this screen.
General Settings
The General section is used for setting the AWK’s operation mode, creating SSIDs, and configuring RF
settings. Click the General tab to access this screen.
Operation Mode
NOTE
The AWK-1151C is a client device and does not support AP and Master mode.
AP Mode Settings
Select AP from the drop-down list of Operation Mode. AP Mode requires at least one active SSID.
NOTE
AP mode is only supported by the AWK-3252A and AWK-4252A Series.
Environment
Setting Description Factory Default
Set the application environment to indoor. Available channels
Indoor
vary depending on the selection.
Indoor
Set the application environment to outdoor. Available channels
Outdoor
vary depending on the selection.
Environment
Setting Description Factory Default
Set the application environment to indoor. Available channels
Indoor
vary depending on the selection.
Indoor
Set the application environment to outdoor. Available channels
Outdoor
vary depending on the selection.
RF Band
Setting Description Factory Default
5 GHz Select 5 GHz as the RF band.
2.4 GHz Select 2.4 GHz as the RF band. 5 GHz
5 GHz & 2.4 GHz Select both 5 GHz and 2.4 GHz as the RF bands.
NOTE
Once Sniffer and RF settings have been configured, you can add the device's IP as an interface in your
network capturing software (e.g. Wireshark) and start capturing packets using Sniffer mode.
Environment
Setting Description Factory Default
Set the application environment to indoor. Available channels
Indoor
vary depending on the selection.
Indoor
Set the application environment to outdoor. Available channels
Outdoor
vary depending on the selection.
Select Client-Router from the drop-down list of Operation Mode. Client-Router Mode requires at least one
active SSID.
Environment
Setting Description Factory Default
Set the application environment to indoor. Available channels
Indoor
vary depending on the selection.
Indoor
Set the application environment to outdoor. Available channels
Outdoor
vary depending on the selection.
Environment
Setting Description Factory Default
Set the application environment to indoor. Available channels
Indoor
vary depending on the selection.
Indoor
Set the application environment to outdoor. Available channels
Outdoor
vary depending on the selection.
SSID Status
Setting Description Factory Default
Enabled/Disabled Enable or disable the SSID. Disabled
SSID
Setting Description Factory Default
RF Band
Setting Description Factory Default
2.4 GHz Use the 2.4 GHz RF band on this SSID.
5 GHz
5 GHz Use the 5 GHz RF band on this SSID.
32 to 2346 bytes Specify the RTS/CTS threshold for the SSID. 2346
Security
Setting Description Factory Default
Open Disable security on the SSID. This is not recommended.
WPA Use WPA authentication.
Use WPA2 authentication. This mode supports IEEE 802.11i
WPA2
with TKIP/AES + 802.1X encryption.
Use WPA3 authentication. This mode supports SAE
WPA3 (Simultaneous Authentication of Equals) to avoid network Open
attacks, such as KRACK.
Use WPA/WPA2 Mixed authentication. This allows both WPA
WPA/WPA2 Mixed
and WPA2 clients to connect to the AWK.
Use WPA/WPA3 Mixed authentication. This allows both WPA2
WPA2/WPA3 Mixed
and WPA3 clients to connect to the AWK.
The AWK Series provides various standardized wireless security modes: Open, WPA (Wi-Fi Protected
Access), WPA2, and WPA3.
When using any security mode except Open, configure the following settings.
WPA Mode
Setting Description Factory Default
Authenticate WPA, WPA2, and WPA3 with a Pre-shared Key
Personal
(PSK).
Personal
Authenticate WPA, WPA2, and WPA3 with EAP security
Enterprise
protocol.
Encryption
Setting Description Factory Default
AES Use Advance Encryption System (AES) encryption.
Use TKIP/AES Mixed encryption. This option provides a TKIP
broadcast key and TKIP+AES unicast key to support legacy AP TKIP/AES Mixed
TKIP/AES Mixed*
clients. This option is rarely used and is not available when
using WAP3.
*This option is available for legacy mode in AP/Master only and does not support AES-enabled clients.
Key Renew
Setting Description Factory Default
60 to 86400 seconds (1
Specify the interval at which the group key is renewed. 3600 (seconds)
minute to 1 day)
WARNING
The Open mode does not feature any form of authentication and data encryption. For security reasons, we
highly recommend NOT to use Open as the security mode.
To edit an existing SSID, click the Edit icon next to the SSID you want to edit. Refer to Create a New
SSID for more information about setting.
To delete an existing SSID, check the SSID, then click the Delete icon above the table.
NOTE
Available RF settings depend on which Operation mode is active: AP, Master, Client, Client-Router, Sniffer,
or Slave mode.
RF Type
Setting Description Factory Default
Enable IEEE 802.11g/n. 802.11n may operate at a slower
G/N Mixed
speed if 802.11g clients are connected to the network.
Enable IEEE 802.11b/g/n. 802.11g/n may operate at a slower B/G/N Mixed
B/G/N Mixed
speed if 802.11b clients are on the network
N Only (2.4 GHz) Only enable IEEE 802.11n.
Channel
Bonded Channel
Setting Description Factory Default
The bonded channel used by the AP will be shown here if
10 (read only) 10
channel width is set to 20/40 MHz.
Antenna
Setting Description Factory Default
1 Specify antenna 1 as the output antenna port.
2 Specify antenna 2 as the output antenna port. All
ALL Specify both antennas as the output antenna port.
Antenna Gain
Setting Description Factory Default
0 to 18 (dBi) Specify the antenna gain. 2
Beacon Interval
Setting Description Factory Default
40 to 1000 (ms.) Specify the interval at which a beacon is sent. 100 (ms)
For 5 GHz
Configure the following settings:
RF Type: 5 GHz
Setting Description Factory Default
AC Only (5 GHz) Only enable IEEE 802.11ac.
N/AC Mixed Enable IEEE 802.11n/ac. A/N/AC Mixed
A/N/AC Mixed Enable IEEE 802.11a/n/ac.
Channel
Setting Description Factory Default
36 (5180 MHz) to 165 Select the channel from the drop-down list. Each channel
36 (5180 MHz)
(5825 MHz) supports different frequencies.
Bonded Channel
Setting Description Factory Default
The bonded channel used by the AP will be shown here if
40/44/48 (read only) 40/44/48
channel width is set to 20/40/80 MHz.
Antenna
Setting Description Factory Default
ALL Specify both antennas as the output antenna port.
1 Specify antenna 1 as the output antenna port. All
2 Specify antenna 2 as the output antenna port.
NOTE
Available RF settings depend on which Operation mode is active.
Select the SSID from the drop-down list to view its current status. In Client Mode, you can also view the
client list to see all the connected client devices.
Click the Filter icon to select the information items that you want to show.
Reboot Recovery
Setting Description Factory Default
Enabled/Disabled Enable or disable Reboot Recovery function. Disabled
AP Alive Check
This is a recovery mechanism which checks whether it is still possible to receive data frame from the
connected AP. When the timeout is triggered, the client will send a null data packet to probe the AP it is
connected to. If the AP does not respond after the specified number of retries, the client will begin scan for
other AP candidates in order to recover network communications as quickly as possible.
20 to 1000 (ms) Specify the interval at which the device will probe the AP. 50
Retry Count
Setting Description Factory Default
Specify the maximum number of times the device will probe
3 to 10 3
the AP.
Expiry
Setting Description Factory Default
Specify the connection expiration interval (in ms). If
100 to 10000 (ms.) exceeded, the client will consider the AP unreachable or 1000
unresponsive, and will trigger the recovery mechanism.
Threshold Indicate
Setting Description Factory Default
SNR Use SNR as the threshold indicator.
SNR
Signal Strength Use signal strength as the threshold indicator.
NOTE
The SNR and signal strength thresholds are used to determine when the AWK will start looking for a better
AP to associate with. If the current connection quality to the AP (based on SNR or signal strength) is lower
than the specified threshold value, the client will start looking for other suitable wireless devices.
Host Type
Setting Description Factory Default
Static Use Static as the host type.
Static
Dynamic Use Dynamic as the host type.
Check Interval
Setting Description Factory Default
Specify the interval at which the client will check the
1 to 60 (sec.) 30
connection to the host.
Check Timeout
Setting Description Factory Default
Specify the connection expiration interval (in ms). If
100 to 10000 (ms) exceeded, the client will consider the remote host unreachable 1000
or unresponsive, and will trigger the recovery mechanism.
Retry Interval
Setting Description Factory Default
Specify the interval at which the device will check the host
1 to 30 (sec.) 1
again after a failed attempt.
Retry Count
Setting Description Factory Default
Specify the maximum number of times the device will check
1 to 5 5
the host.
NOTE
The Roaming Threshold determines when clients will start background scanning for other candidate APs
with a stronger signal. Once the AWK starts background scanning, the client will compare the connection
quality of the current and candidate AP. If the difference is larger than the specified Roaming Difference,
the client will roam to the new AP.
NOTE
While the AWK is scanning the background, it will allocate 1/3 of its RF resources to search for candidate
APs based on the channel plan configured on the Wi-Fi > Wireless Settings page. The maximum
background scanning time required is proportional to the number of channels checked in channel plan.
NOTE
Once the background scan successfully identifies a candidate AP, the device will roam, The typical Turbo
Roaming handover time of < 150 ms is an average of all documented test results, in optimized conditions,
across APs configured with interference-free RF channels, and default Turbo Roaming parameters. The
clients were configured with 3-channel roaming at 100 Kbps traffic load. Other conditions and factors may
affect actual roaming performance.
Ports
From the Ports section, you can configure Port Settings.
Port Settings
The Ports Settings page is used to configure the physical LAN 1 and LAN 2 network ports on the device.
Click Port Settings under Ports in the function tree to access this screen.
General Settings
Click General tab first, then click the Edit icon on the port you want to configure.
Status
Setting Description Factory Default
Enabled/Disabled Enable or disable the port. Enabled
ATTENTION
The AWK-1151C Series only has one LAN port (LAN1). If this port is disabled, the device will become
inaccessible. The port can only be re-enabled via the console port or by resetting the device to factory
default settings using the reset button.
Description
Setting Description Factory Default
0 to 127 characters Enter a description for the port. None
ATTENTION
When both LAN1 and LAN2 are enabled, only one LAN port should be used as an uplink. The other LAN
port may be used to connect other Ethernet based devices such as IP cameras. Be careful NOT to connect
both LAN ports as uplinks to a switch simultaneously to prevent switching loops.
Status Check
Click the Port Status tab to check the current port and port link status.
VLAN
VLANs now extend as far as the reach of the access point signal. Clients can be segmented into wireless
sub-networks via SSID and VLAN assignment. A Client can access the network by connecting to an AP
configured to support its assigned SSID/VLAN.
Benefits of VLANs
VLANs are used to conveniently, efficiently, and easily manage your network in the following ways:
In addition to enhancing wireless traffic management, the VLAN-capable AP supports easy assignment of
wireless users to workgroups. In a typical scenario, each user VLAN represents a department workgroup; for
example, one VLAN could be used for a marketing department and the other for a human resource
department.
In this scenario, the AP would assign every packet it accepted to a VLAN. Each packet would then be
identified as marketing or human resource, depending on which wireless client received it. The AP would
insert VLAN headers or “tags” with identifiers into the packets transmitted on the wired backbone to a
network switch.
Finally, the switch would be configured to route packets from the marketing department to the appropriate
corporate resources such as printers and servers. Packets from the human resource department could be
restricted to a gateway that allowed access to only the Internet. A member of the human resource
department could send and receive e-mail and access the Internet but would be prevented from accessing
servers or hosts on the local corporate network.
Management VLAN ID
Setting Description Factory Default
Specify the management VLAN of this AWK.
1 to 4094 By default, there is only VLAN ID 1. Additional VLAN IDs will 1
need to be created first before they can be selected.
Mode
Setting Description Factory Default
Access mode is used if the port is connected to a single
Access
device, without tags.
Hybrid mode is used if the port is connected to another Access Access
Hybrid 802.1Q VLAN-aware switch or another LAN that combines
tagged and untagged devices.
PVID
Setting Description Factory Default
Set the default VLAN ID for untagged devices connected to the
1 to 4094 1
port.
Tagged VLAN
Setting Description Factory Default
If the port type is set to Trunk or Hybrid, specify the VLAN ID
1 to 4094 None
for tagged devices that connect to this port.
Untagged VLAN
Setting Description Factory Default
If the port type is set to Hybrid, specify the VLAN ID for
Dependent on the
1 to 4094 tagged devices that connect to this port and the tags that
selected PVID
need to be removed in egress packets.
VLAN ID
Setting Description Factory Default
1 to 4094 Enter the VLAN ID. None
Name
Setting Description Factory Default
0 to 32 characters Enter a name for the VLAN. None
NOTE
Once created, the VLAN ID cannot be changed. Only the VLAN name can be edited.
To modify a VLAN ID and VLAN name combination, delete the entry and create a new entry with the
desired VLAN ID and name.
Name
Setting Description Factory Default
0 to 32 characters Enter a name for the VLAN ID. None
To edit the VLAN interface settings, click the Edit icon next to the interface you want to edit.
Mode
Setting Description Factory Default
Access mode is used if the port is connected to a single
Access
device, without tags.
Hybrid mode is used if the port is connected to another Access Access
Hybrid 802.1Q VLAN-aware switch or another LAN that combines
tagged and untagged devices.
PVID
Setting Description Factory Default
Set the default VLAN ID for untagged devices connected to the
1 to 4094 1
port.
Tagged VLAN
Setting Description Factory Default
If the port type is set to Hybrid, specify the VLAN ID for
1 to 4094 None
tagged devices that connect to this port.
Untagged VLAN
Setting Description Factory Default
If the port type is set to Hybrid, specify the VLAN ID for
VID range from 1 to
tagged devices that connect to this port and the tags that 1
4094
need to be removed in egress packets.
General Settings
The General tab lets you configure the device’s basic network information. Click the General tab to access
this screen.
IP Mode
Setting Description Factory Default
The AWK is assigned an IP address automatically by the
DHCP
network’s DHCP server. Static
Static Manually configure up the AWK’s IP address.
IP Address
Setting Description Factory Default
IP address Enter the AWK’s IP address. 192.168.127.253
Subnet mask
Setting Description Factory Default
Select the subnet mask. This is used to identify the type of
Subnet mask network the AWK is connected to (e.g., 255.255.0.0 for a 24 (255.255.255.0)
Class B network, or 255.255.255.0 for a Class C network).
Default Gateway
Setting Description Factory Default
Enter the IP address of the router that connects the LAN to an
IP address None
outside network.
Routing
The Routing section is used for managing static routes and checking the routing table.
Entry Status
Setting Description Factory Default
Enabled/Disabled Enable or disable the static route entry. Disabled
Destination
Setting Description Factory Default
IP address Specify the destination IP address. None
Netmask
Setting Description Factory Default
IP address Specify the subnet mask for this IP address. 24 (255.255.255.0)
Next Hop
Setting Description Factory Default
Specify the next gateway IP address. This IP address should
IP address None
be in the same subnet as the specified interface.
Interface
Setting Description Factory Default
Interface Select the network interface for this route. WAN
Metric
Setting Description Factory Default
Specify the cost metric this route. Routes with a lower metric
1 to 32766 None
value take priority over routes with a higher cost.
Routing Table
To view the current routing table, click Routing Table under Routing > Unicast Route in the function
tree.
Rule Status
Setting Description Factory Default
Enabled/Disabled Enable or disable the NAT rule. Disabled
Name
Setting Description Factory Default
0 to 31 characters Enter a name for this rule. None
Description
Setting Description Factory Default
0 to 127 characters Enter a description for this rule. None
Priority
Setting Description Factory Default
1 to 31 Specify the priority for this rule. 1
NAT Mode
Setting Description Factory Default
1 to 1 Set the NAT mode to 1-to-1.
None
PAT Set the NAT mode to PAT (Port Address Translation).
WAN
Setting Description Factory Default
IP address For 1-to-1 mode only. Specify the IP address for the WAN. None
For PAT mode only. Specify the TCP or UDP port number for
0 to 65535 None
the WAN.
LAN
Setting Description Factory Default
IP address Specify the LAN IP address. None
0 to 65535 For PAT mode only. Specify the LAN TCP or UDP port number. None
For 1 to 1 NAT Mode and PAT Mode, refer to the following figure illustrations.
To edit an existing NAT rule, click the Edit icon next to the rule you want to edit.
Refer to Create a New NAT Rule for more information about each setting.
You select what information you want to view by clicking Select Visible Columns icon and checking
the corresponding check boxes.
Layer 2 Policy
From the Layer 2 Policy screen, you can manage the L2 firewall policy and create, edit, and delete policy
rules. Click Layer 2 Policy under Firewall in the function tree to access this screen.
Default Action
Setting Description Factory Default
Accept Accept all packets that do not match any policy rule.
Drop
Drop Drop all packets that do not match any policy rule.
ATTENTION
Be careful when configuring the packet filtering function:
If the default action is set to Drop and all rules are disabled, all packets will be allowed.
If the default action is set to Accept and all rules are disabled, all packets will be denied.
Rule Status
Setting Description Factory Default
Enabled/Disabled Enable or disable the Layer 2 firewall rule. Disabled
Priority
Setting Description Factory Default
Specify the priority for this rule. A lower number represents a
1 to 64 higher priority. Rules with a higher priority will be checked and 1
enforced first.
Default Action
Setting Description Factory Default
Accept Packets that match the policy rule will be allowed.
Accept
Drop Packets that match the policy rule will be denied.
ATTENTION
Be careful when configuring the packet filtering function:
If the default action is set to Drop and all rules are disabled, all packets will be allowed.
Layer 3 Policy
From the Layer 3 Policy screen, you can manage the L3 firewall policy and create, edit, and delete policy
rules. Click Layer 3 Policy under Firewall in the function tree to access this screen.
Default Action
Setting Description Factory Default
Accept Packets that match the policy rule will be allowed.
Drop
Drop Packets that match the policy rule will be denied.
ATTENTION
Be careful when configuring the packet filtering function:
If the default action is set to Drop and all rules are disabled, all packets will be allowed.
If the default action is set to Accept and all rules are disabled, all packets will be denied.
Rule Status
Setting Description Factory Default
Enabled/Disabled Enable or disable the Layer 3 firewall rule. Disabled
Priority
Setting Description Factory Default
1 to 64 Specify the priority for this rule. 1
Default Action
Setting Description Factory Default
Accept Packets that match the policy rule will be allowed.
Accept
Drop Packets that match the policy rule will be denied.
The AWK’s IP protocol filter is a policy-based filter that can allow or filter out IP-based packets with specified
IP protocol and source/destination IP addresses.
The AWK provides 64 entities for setting IP protocol and source/destination IP addresses in your filtering
policy. Four IP protocols are available: All, ICMP, TCP, and UDP. You must specify either the Source IP or
the Destination IP. By combining IP addresses and netmasks, you can specify a single IP address or a range
of IP addresses to accept or drop. For example, “IP address 192.168.1.1 and netmask 255.255.255.255”
refers to the sole IP address 192.168.1.1. “IP address 192.168.1.1 and netmask 255.255.255.0” refers to
the range of IP addresses from 192.168.1.1 to 192.168.255.
Source
IP Address
Setting Description Factory Default
IP address Specify the source IP address. Any
Netmask
Setting Description Factory Default
32
Netmask Select the subnet mask
(255.255.255.255)
Port Range
Setting Description Factory Default
0 to 65535 If the Protocol is set to TCP or UDP, specify the port range. None
Destination
IP Address
Setting Description Factory Default
IP address Specify the destination IP address. Any
Netmask
Setting Description Factory Default
32
Netmask Specify the subnet mask.
(255.255.255.255)
Port Range
Setting Description Factory Default
0 to 65535 If the Protocol is set to TCP or UDP, specify the port range. None
Security
The Security section lets you configure Device Security settings.
Login Policy
On the Login Policy page, you can configure login messages and login security functions. Click Login
Policy under Security > Device Security in the function tree to access this screen.
Login Message
Setting Description Factory Default
Enter the message that will be displayed on the login screen
0 to 500 characters None
when accessing the device.
Lockout Period
Setting Description Factory Default
Specify the duration (in minutes) the user will be unable to log
1 to 10 (min.) 5
in for after exceeding the number of allowed retries.
Session Lifetime
Setting Description Factory Default
Specify how long a user can be inactive for before being
5 to 1440 (min.) 10
automatically logged out and be required to log in again.
Diagnostics
The Diagnostics section is used for monitoring and troubleshooting and includes the System Status,
Network Status, Event Logs and Notifications, and Tools pages.
System Status
Utilization
The Utilization screens features widgets and charts showing the real-time resource usage of the AWK.
Click Utilization under Diagnostics > System Status in the function tree to access this screen.
CPU Usage
This widget shows the current CPU usage.
Network Statistics
The Network Statistics page shows real-time data for all interfaces. Click Network Statistics under
Diagnostics > Network Status in the function tree to access this page.
LLDP
LLDP is an OSI Layer 2 protocol defined by IEEE 802.11AB. LLDP standardizes the self-identification
advertisement method, and allows each networking device, such as a Moxa managed switch or access point,
to periodically send its system and configuration information to its neighbors. Because of this, all LLDP
devices are kept informed of each other’s status and configurations. With SNMP, this information can be
used to generate network visualization.
From the web interface, you can enable or disable LLDP, and set the LLDP transmit interval. In addition, you
can view the neighbor-list, which is reported by its network neighbors.
LLDP Status
Setting Description Factory Default
Enabled/Disabled Enable or disable LLDP. Enabled
Transmission Interval
Setting Description Factory Default
Specify the transmission interval at which LLDP messages are
5 to 4095 (sec.) 30
sent.
NOTE
The LLDP protocol transmits data in clear text and discloses the device model name.
LLDP Status
Click the Status tab to view the LLDP status.
Event Log
From the Event Log page, you can view the current log list, configure the log oversize action, and back up
the event log. Click Event Log under Diagnostics > Event Logs and Notifications in the function menu to
access this page.
Registered Logs
Click the Registered Logs tab to view and edit event log groups.
To edit an event log group, click the Edit icon next to the group you want to edit.
Action
Setting Description Factory Default
Local Save the event logs locally.
Local, Syslog
Syslog Send the event logs to a Syslog server.
Oversize Action
From the Oversize Action page, you can configure what happens when the log capacity has been reached.
Click the Oversize Action tab to access this screen.
Oversize-Action
Setting Description Factory Default
Overwrite the oldest
Overwrite the oldest event log.
event log Overwrite the oldest
Stop recording event event log
Stop recording new event logs.
log
Capacity Warning
Setting Description Factory Default
Enabled/Disabled Enable or disable event log capacity warnings. Disabled
Backup
Click Backup tab to select the storage location.
Storage Location
Setting Description Factory Default
Local Back up the event log to the local storage on the AWK device.
TFTP Back up the event log via TFTP.
None
SFTP Back up the event log via SFTP.
ABC-02 Back up the event log to an ABC-02 USB tool.
Notifications
You can configure the notification settings for individual event types. Click Notifications under
Diagnostics > Event Logs and Notifications in the function tree to access this screen.
To edit the notification settings, click the Edit icon next to the event you want to edit.
Notification Method
Setting Description Factory Default
Trap Send notifications through SNMP Trap.
Email Send notifications through email.
Trap/Email
Use a relay for sending notifications. This option is only
Relay
available for specific event groups.
Syslog
You can set up one or more Syslog servers to store event logs. Click Syslog under Diagnostics > Event
Logs and Notifications in the function tree to access this screen.
Syslog Status
Setting Description Factory Default
Enabled/Disabled Enable or disable logging events to a syslog server. Disabled
SNMP Trap/Inform
The SNMP Trap/Inform section is used for setting up SNMP Traps and Inform triggers for events. Click
SNM Trap/Inform under Diagnostics > Event Logs and Notifications in the function tree to access this
page.
Recipient IP/Name
Setting Description Factory Default
0 to 60 characters or IP
Enter the name or IP of the recipient. None
address
Mode
Setting Description Factory Default
Disabled Disable the SNMP Trap/Inform function.
Trap V1 Set the trap version to Trap V1.
Trap V2c Set the trap version to Trap v2c.
Disabled
Inform V2c Set the inform version to Inform V2c.
Trap V3 Set the trap version to Trap V3.
Inform V3 Set the inform version to Inform V3.
Inform Retry
Setting Description Factory Default
1 to 99 Specify the maximum number of Inform retries. 3
Timeout
Setting Description Factory Default
1 to 300 Specify the Inform timeout value. 10
Trap/Inform Account tab to access this screen. Click the Add icon to create a new entry.
Username
Setting Description Factory Default
At least 4 characters,
Enter a username for the account. None
(max. 32 characters)
Authentication type
Setting Description Factory Default
None Do not use any authentication mechanism.
MD5 Use MD5 as the authentication type. None
SHA Use SHA as the authentication type.
Email Server
Setting Description Factory Default
IP address or URL The IP address or URL of the email server. None
Authentication Status
Setting Description Factory Default
Enabled/Disabled Enable or disable authentication for the email server. Disabled
Username
Setting Description Factory Default
Max. 60 characters Enter the email user account. None
Password
Setting Description Factory Default
Max. of 60 characters Enter the email user password None
NOTE
Relay Alarm Cut-off is only supported by the AWK-3252A and AWK-4252A Series.
Wi-Fi Tools
Under Wi-Fi Tools are the Channel Scan, and Wi-Fi Mirroring functions.
Channel Scan
The Channel Scan function is used to analyze the selected RF band for available channels. Click Channel
Scan under Diagnostics > Tools > Wi-Fi Tools in the function tree to access this screen.
RF Band
Setting Description Factory Default
5 GHz Scan the 5 GHz RF band.
2.4 GHz Scan the 2.4 GHz RF band. None
5 GHz & 2.4 GHz Scan both 5 GHz and 2.4 GHz RF bands.
The result of the scan will be shown in the table at the bottom of the page.
Mirroring Type
Setting Description Factory Default
Local Select Local to mirror traffic to the local storage on the device.
Select Remote to have the AWK act as a server to be used
None
Remote with capturing tool such as Wireshark to capture the mirror
traffic.
When finished, click START to start mirroring, and STOP to stop mirroring.
The result of the mirroring will be shown below. If you selected Local as the mirroring type, click
DOWNLOAD to download the result to your local machine.
File Password
Setting Description Factory Default
Enter the password for the file. This password will be required
1 to 64 characters None
to open the compressed file.
Storage Location
Setting Description Factory Default
Local The file will be downloaded to the local storage on the AWK.
TFTP The file will be downloaded to a TFTP server.
None
SFTP The file will be downloaded to an SFTP server.
ABC-02 The file will be downloaded to the connected ABC-02 USB.
Interval
Setting Description Factory Default
1 to 30 (sec.) Specify the interval at which the AWK will collect information. None
Stop Date
Setting Description Factory Default
Date Specify the date the device will stop collecting information. None
Stop Time
Setting Description Factory Default
Time Specify the time the device will stop collecting information. 01:00 AM
Storage Location
Setting Description Factory Default
Local The file will be downloaded to the local storage on the AWK.
TFTP The file will be downloaded to a TFTP server.
None
SFTP The file will be downloaded to an SFTP server.
ABC-02 The file will be downloaded to the connected ABC-02 USB.
When finished, click START to begin collecting information, and STOP to end.
Diagnostic Support
This feature allows an authorized user to generate an engineering account for Moxa support staff to access
and troubleshoot the AWK Series. Click Diagnostic Support under Diagnostics > Tools in the function
tree to access this screen.
Duration
Setting Description Factory Default
1 to 180 (days) Specify how long the diagnostics account will be active for. None
You can check the account status at any time in the bottom section of the screen. Click DEACTIVATE to
immediately terminate a generated diagnostics account.
NOTE
Only provide generated diagnostics account credentials to authorized Moxa support personnel.
Target
Setting Description Factory Default
IP address/hostname Enter the IP address or hostname you want to ping. None
Ping Interval
Setting Description Factory Default
1 to 30 (sec.) Specify the interval at which the AWK will ping the host. 1
Stop Method
Setting Description Factory Default
Rounds Specify Rounds as the stop method.
Rounds
Timestamps Specify Timestamps as the stop method.
Setup Wizard
The Setup Wizard allows users to perform basic device configurations to get the AWK running quickly.
Click Setup Wizard in the function tree to start the Wizard, then follow the on-screen instructions. There
are three configuration tabs: Wi-Fi Basic, Wi-Fi Security, and System. While the Wizard will start from
the Wi-Fi Basic section by default, you can go to any other tab at any time.
Operation Mode
Setting Description Factory Default
Disabled Disable the operation mode.
Specify the operation mode as AP. Refer to AP Mode
AP
Settings.
Specify the operation mode as Master. Refer to Master Mode
Master
Settings.
Specify the operation mode as Client. Refer to Client Mode Disabled
Client
Settings.
Specify the operation mode as Client-Router. Refer to Client-
Client-Router
Router Mode Settings.
Specify the operation mode as Slave. Refer to Slave Mode
Slave
Settings.
Environment
Setting Description Factory Default
Set the application environment to indoor. Available channels
Indoor
vary depending on the selection.
Indoor
Set the application environment to outdoor. Available channels
Outdoor
vary depending on the selection.
1 (2412 MHz) to 11 Select the channel from the drop-down list. Each channel
6 (2437 MHz)
(2462 MHz) supports different frequencies.
SSID: 5 GHZ
SSID Status
Setting Description Factory Default
Enabled/Disable Enable or disable the SSID. Disabled
SSID
5 GHz Channel Plan (for Client, Client-Router, and Slave modes only)
36 (5180 MHz) to 165 Select the channel from the drop-down list. Each channel
36 (5180 MHz)
(5825 MHz) supports different frequencies.
Client/Client-Router/Slave Mode
SSID
SSID (read only) Shows the name for the SSID. None
When using any security mode except Open, configure the following settings:
WPA type
Setting Description Factory Default
Personal Use WPA, WPA2, and WPA3 with a Pre-shared Key (PSK).
Personal
Enterprise Use WPA, WPA2, and WPA3 with EAP security.
Encryption
Setting Description Factory Default
AES Use Advance Encryption System (AES) encryption.
Use TKIP/AES Mixed encryption. This option provides a TKIP
broadcast key and TKIP+AES unicast key to support legacy AP TKIP/AES Mixed
TKIP/AES Mixed*
clients. This option is rarely used and is not available when
using WAP3.
*This option is available for legacy mode in AP/Master only and does not support AES-enabled clients.
EAPOL Version
Setting Description Factory Default
1 Use EAPOL Version 1 as the security authentication method.
1
2 Use EAPOL Version 2 as the security authentication method.
System
Time
Clock Source
Setting Description Factory Default
Sync From Browser Synchronize the system clock with the browser’s clock.
Set the clock source to NTP. This will sync the system clock Sync From Browser
NTP
with an external NTP server.
Time Zone
Setting Description Factory Default
Time zone Select a time zone. UTC+00:00
Offset
Setting Description Factory Default
User-specified value Specify the offset value for Daylight Saving Time. 00:00
Start
Setting Description Factory Default
User-specified date Specify the date that Daylight Saving Time begins. None
End
Setting Description Factory Default
User-specified date Specify the date that Daylight Saving Time ends. None
IP Configuration
IP Mode
Setting Description Factory Default
The AWK is assigned an IP address automatically by the
DHCP
network’s DHCP server. Static
Static Manually configure up the AWK’s IP address.
To disable the Auto Save function, click Disable Auto Save in the menu. When prompted, click DISABLE
to disable the function.
Locator
Clicking Locator will trigger the wireless and SYSTEM LEDs to start flashing green at a 4 Hz interval for one
minute (default) alongside an audible beeper. This feature is useful for locating the physical device in a field
site.
Duration
Setting Description Factory Default
1 to 300 (sec.) Specify the duration the LEDs will be blinking for. 60
LEDs triggered:
Reboot
To reboot the AWK, click Reboot.
When prompted, check Keep all event logs if you want to keep the event history, then click CONFIRM.
WARNING
Resetting the AWK to the factory default settings will permanently delete all your configuration settings.
This is permanent and cannot be undone.
Current Password
Setting Description Factory Default
4 to 63 characters Enter the current password. None
New Password
Setting Description Factory Default
4 to 63 characters Enter the new password. None
Confirm Password
Setting Description Factory Default
4 to 63 characters Enter the new password again. None
This chapter presents additional information about this product. You can also learn how to contact Moxa for
technical support.
Device Recovery
In event the device is not working properly, including configuration changes not applying, the first
troubleshooting action is to perform a power cycle. This is done by removing and reconnecting the power
and verifying if the situation is resolved.
If power cycle does not solve the issue, the next step is to perform a reset to factory default setting. Refer
to Reset Device.
If you cannot access the web interface, and/or the Reset button is disabled, you can attempt to reset the
device via the serial console’s CLI FailSafe mode.
NOTE
The admin password is required to authorize the FailSafe function.
Follow the instructions in the Accessing the Serial Consoles section to access the serial console CLI
interface and enter the “reload” command to reboot the device.
When the terminal is showing “Restarting device … [device]# Booting …”, enter the “failsafe” command.
When the command line prompt displays the login prompt, it means the device was successfully reset to
factory default settings.
This chapter explains how to access the AWK Series. In addition to HTTP/HTTPS access, the AWK Series can
also be accessed through the serial console and Telnet/SSH console. The serial console connection method,
which requires a serial cable to connect the AWK Series to a PC’s COM port, can be used if you do not know
the AWK Series' IP address. The other consoles can be used to access the AWK Series over an Ethernet
LAN, or over the Internet.
ATTENTION
Do not use the RS-232 console manager when the AWK Series is powered at reversed voltage (ex. -48
VDC), even though reverse voltage protection is supported.
If you need to connect the RS-232 console at reversed voltage, we highly recommend using an isolator,
such as the Moxa TCC-82 isolator.
NOTE
We recommend using Moxa PComm (Lite) Terminal Emulator, which can be downloaded free of charge
from Moxa’s website.
Before running PComm Terminal Emulator, use an RJ45-to-DB9-F (or RJ45-to-DB25-F) cable to connect the
AWK Series' RS-232 console port to your PC’s COM port (generally COM1 or COM2, depending on how your
system is set up). After installing PComm Terminal Emulator, perform the following steps to access the RS-
232 console utility.
1. From Windows desktop, open the Start menu and run PComm Terminal Emulator in the PComm
(Lite) group.
2. Select Open under Port Manager to open a new connection.
3. The Console login screen will appear. Log into the RS-232 console with the device’s account and
password.
NOTE
To modify the appearance of the PComm Terminal Emulator window, select Edit > Font and then choose
the desired formatting options.
ATTENTION
If you unplug the RS-232 cable or trigger DTR, you will be disconnected and logged out for network
security reasons. You will need to log in again to resume operations.
NOTE
The AWK Series' default IP address is 192.168.127.253 and the default subnet mask is 255.255.255.0
(for a Class C network). To configure the AWK Series remotely over a LAN network, set the PC host’s IP
address to 192.168.127.xxx and subnet mask to 255.255.255.0.
1. From Windows Desktop, run Start > Run, and type telnet (AWK IP address) in the Run window and
click OK. The AWK’s default IP address is 192.168.127.253.
2. When using an SSH client (e.g. PuTTY), run the software and enter the AWK devce's IP address as the
Host Name along with port 22, and select SSH as the connection type.
3. The Console login screen will appear. Please refer to the previous paragraph “RS-232 Console
Configuration” and for login and administration.