Modern corporate networks require not just wireless coverage, but high density and fault tolerance. Eltex W2AC This is a professional dual-band access point capable of operating both in conjunction with a controller and in standalone mode. Its standalone operation makes it attractive for small businesses and distributed offices where deploying a separate management server may be unnecessary.
Before starting the configuration, you must ensure that the device is physically connected to the network. Nutrition Power is supplied via a PoE injector or switch supporting the 802.3af/at standard. Once powered on, the LEDs on the device should start flashing in a specific pattern, indicating the operating system is loading. If you see a steady green light or a flashing green light, the hardware is ready for software configuration.
For the initial connection, you will need a computer with a network card configured to automatically obtain an IP address. By default, the access point attempts to obtain an address using the protocol DHCPIf there is no DHCP server on your network, W2AC It may go into standby mode or use a static address specified in the documentation, but most often, pre-configuring the DHCP client on the PC itself or using a discovery utility is required. Make sure the Ethernet cable is in good condition and plugged into the port. LAN.
⚠️ Attention: The web configurator interface may vary slightly depending on the firmware version. If you don't see the options described, check the manufacturer's official website for the latest firmware update.
The web interface can be accessed through any modern browser. In the address bar, enter the IP address the device received from your router, or the default address if you're connected directly. Administrators often use special port scanning utilities or the router's ARP tables to locate the device on the local network. The default login credentials are usually listed on a sticker on the bottom of the device's case or in the user manual.
After successful authorization, you will be taken to the main control panel menu. This displays summary information about the system status, uptime, CPU load, and memory. First, we recommend changing the administrator password to prevent unauthorized access. configurations equipment. Without this step, the network remains vulnerable to brute-force attacks.
Basic configuration of network interfaces
The foundation for stable operation is the correct configuration of IP parameters. In the section Network → Interface You can choose the method for obtaining an address. For a static connection, you must manually enter the IP address, subnet mask, and default gateway. This eliminates possible address conflicts and ensures that the access point is always accessible at the same address.
If your infrastructure uses VLAN, traffic tagging is also configured here. Eltex W2AC supports 802.1Q, which allows you to separate traffic from different departments or guests at a logical level. It is important to specify it correctly VLAN ID for the management interface, otherwise you may lose access to the device after applying the settings.
☑️ Check network settings
Don't forget to configure DNS servers, especially if the access point will be used for authentication via external portals or time synchronization with NTP servers. Missing DNS servers may prevent firmware updates or license verification. After making changes, be sure to click the button Apply or Savefor the parameters to take effect.
Setting up the wireless module and radio frequencies
The key stage is setting up radio modules. W2AC operates in two bands: 2.4 GHz and 5 GHz. In the menu Wireless → Radio The required bands must be activated. For the 2.4 GHz band, it is recommended to select channels 1, 6, or 11 to minimize interference with neighboring networks. The channel width here is usually fixed at 20 MHz for maximum stability.
The 5 GHz band offers more bandwidth and less interference. You can set the channel width here. 40 MHz or 80 MHz to achieve high data transfer rates. However, it's worth remembering that increasing the channel width reduces the number of available non-overlapping frequencies. In densely populated areas, it's better to use 40 MHz.
| Parameter | 2.4 GHz band | 5 GHz band |
|---|---|---|
| Recommended width | 20 MHz | 40-80 MHz |
| Max. power | 20 dBm | 23 dBm |
| Standard | 802.11n/ac | 802.11ac/ax |
Transmitter power also requires attention. Setting the maximum value isn't always the best solution, as it can result in the client device "seeing" the access point from a distance but being unable to transmit a response signal due to the low power of its adapter. It's best to adjust the power experimentally, starting with mid-range values.
Creating and securing wireless networks (SSID)
To provide user access, you need to create an SSID. In the section Wireless → SSID Click the Add New Network button. You can create up to 16 virtual networks on a single physical device, each with its own security settings and VLAN assignment. Network Name (SSID) should be clear, but should not contain personal information.
The choice of encryption method is critical. For the corporate segment, the standard is WPA2-Enterprise or WPA3, which requires a Radius server for user authentication using login and password. For guest access or small offices, it's sufficient to use WPA2-PSK with a secure access key.
⚠️ Attention: Never use the legacy WEP encryption protocol or Open mode without client isolation, as this makes transmitted data vulnerable to interception.
You can also configure SSID hiding so that the network doesn't appear in the list of available networks for regular users. However, this isn't a security measure; it merely hides the network name from casual viewing. To truly restrict access, use MAC address filtering or built-in authorization mechanisms via the Captive Portal.
What is Client Isolation?
Client isolation is a feature that prevents devices connected to the same Wi-Fi network from exchanging data with each other. This is critical for guest networks in cafes or hotels to prevent attackers from accessing other visitors' files.
Advanced Features: QoS, Band Steering, and Mesh
Band Steering is used to optimize load balancing between bands. It encourages dual-band client devices to connect to the 5 GHz band, freeing up the 2.4 GHz band for legacy devices. This significantly increases overall network throughput and reduces interference.
Function QoS (Quality of Service) allows you to prioritize specific types of traffic. For example, you can configure a rule to prioritize VoIP traffic or video conferencing over file sharing or updates. This ensures smooth voice communication even under high bandwidth load.
If you have multiple access points Eltex, they can be combined into a single mesh network or configured for seamless roaming (802.11r/k/v). This allows client devices to switch between access points without losing connection while moving around the office. Configuration requires identical SSID and security settings on all nodes.
Maintenance, monitoring and software updates
Regular equipment maintenance is the key to stability. In the section System → Maintenance Firmware update functionality is available. Before installing a new version, it is recommended to back up the current configuration. The firmware file is downloaded via the web interface or TFTP.
Status monitoring is performed via built-in graphs and logs. You can track the number of connected clients, signal strength, packet retries, and CPU load. If problems occur, event logs (System Log) are the first source of information for diagnosis.
⚠️ Attention: The firmware update process may take several minutes. During this time, it is strictly forbidden to power off the device, as this will corrupt the software and require recovery via the console port.
SSH access is also useful for remote management and diagnostics. It allows you to execute more in-depth commands and collect diagnostic data that is not available through the web interface. Remember to disable Telnet if it is enabled by default, as it transmits data in cleartext.
How to reset to factory settings?
If you've forgotten your password or your settings have been reset, you can perform a reset. With your device turned on, locate the reset button. Press it with a paperclip and hold for more than 10 seconds until the display changes. The device will reboot to factory settings.
Common problems and solutions
One common issue is slow connection speed. This can be caused by interference, incorrect channel selection, or using a narrow channel when a wide one is available. It's also worth checking the negotiated speed in the client status—if the device connects at a low speed (for example, 54 Mbps instead of 866 Mbps), it may be located far from the access point or have an old adapter.
Connection problems (loop authentication) are often related to incompatible encryption methods or errors in the Radius server settings. Access point logs typically indicate the reason for the failure: "Invalid password," "Radius timeout," or "Unsupported cipher." Analyzing these codes allows you to quickly pinpoint the source of the error.
If the access point reboots intermittently, check the power supply. An insufficient PoE injector or a faulty cable can cause voltage drops during peak loads, causing a reboot. Use cables rated at least Category 5e and ensure the cable length is no more than 100 meters.
What is the default IP address of Eltex W2AC?
By default, the device is configured to obtain an address via DHCP. If a DHCP server is not found, it can use the address 192.168.1.1 or 192.168.0.1 (check the specifications for your specific firmware version). For guaranteed access, it is best to use the Eltex Device Discovery utility.
Is it possible to use W2AC without a controller?
Yes, the W2AC model supports standalone mode. In this mode, all settings are stored locally on the device, and it functions as an independent access point. However, for centralized management of multiple access points, a controller is recommended.
How do I enable a guest network with SMS authentication?
Implementing SMS authorization requires an external authorization portal (Captive Portal) and integration with an SMS gateway. The access point itself is configured to redirect unauthorized users to the portal's URL. The access point itself only redirects traffic, without directly processing SMS messages.