(完整版)上网行为管理AC-1200实际配置管理手册

合集下载

深信服上网行为管理-管理员手册

任何个人、机构未经深信服的书面授权许可，不得以任何方式复制或引用本文的任何片断。

目录第1章前言 ................................................................................................................... 错误!未定义书签。

第2章系统管理 ........................................................................................................... 错误!未定义书签。

设备登录 .............................................................................................................. 错误!未定义书签。

管理员配置 .......................................................................................................... 错误!未定义书签。

修改管理员密码 ......................................................................................... 错误!未定义书签。

TP-Link AC1200 Wi-Fi 范围扩展器用户指南说明书

User GuideAC1200 Wi-Fi Range Extender with AC Pass-throughRE365ContentsAbout This Guide 1 Chapter 1 Get to Know About Y our Extender 2 1. 1. Product Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 1. 2. Appearance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31. 2. 1. L ED Explanation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41. 2. 2. P ort and Button Description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Chapter 2 Set Up Internet Connection 5 2. 1. Quick Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62. 1. 1. M ethod 1: Via a Web Browser. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62. 1. 2. M ethod 2: Via the TP-Link T ether App. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .102. 1.3. M ethod 3: Via the WPS Button. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11 2. 2. Position Y our Extender. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12 Chapter 3 Customize Y our Network13 3. 1. Check Internet Status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14 3. 2. Configure Wireless Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14 3. 3. Change LAN Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16 3.4. Specify DHCP Server Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17 3.5. Adjust Wi-Fi Coverage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18 3.6. Set Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18 Chapter 4 More Features of Y our Extender 21 4. 1. Use Y our Extender as a Wireless Adapter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22 4. 2. Transform Y our Existing Wired Network to a Wireless One . . . . . . . . . . . . . . . . . . .224. 2. 1. T o Set Up the Extender as an Access Point . . . . . . . . . . . . . . . . . . . . . . . . . . .224. 2. 2. T o Connect Y our Wireless Devices to the Extender via WPS. . . . . . . . . . .24 Chapter 5 TP-Link Cloud Service 265. 1. Register a TP-Link ID. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27 5. 2. Change Y our TP-Link ID Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27 5. 3. Manage the User TP-Link IDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28 5. 4. Manage the Extender via TP-Link T ether App. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30 Chapter 6 Manage Y our Extender 316. 1. Set Up System Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32 6. 2. Control LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .326. 4. Upgrade the Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34 6. 5. Backup and Restore Configuration Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35 6. 6. Change Login Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .36 6.7. System Log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .36 FAQ 38About This GuideThis guide is a complement to Quick Installation Guide. The Quick Installation Guide provides instructions for quick internet setup, while this guide contains details of each function and demonstrates how to configure them.When using this guide, please notice that features of the extender may vary slightly depending on the model and software version you have, and on your location, language, and internet service provider. All screenshots, images, parameters and descriptions documented in this guide are used for demonstration only. ConventionsMore InfoThe latest software, management app and utility are available from the Download Center at /support.The Quick Installation Guide can be found where you find this guide or inside the package of the range extender.Specifications can be found on the product page at .A T echnical Support Forum is provided for you to discuss our products at .Our T echnical Support contact information can be found at Contact T echnical Support page at /support.Chapter 1Get to Know About Y our ExtenderThis chapter introduces what the extender can do and its appearance. It contains the following sections:• Product Overview• Appearance1 1 Product OverviewBring Dead Zones Back to LifeTired of Wi-Fi “dead zones”? The TP-Link extender is connected to your router wirelessly, strengthening its signal and expanding its coverage into areas that could not otherwise be reached. The device also reduces signal interference to ensure reliable Wi-Fi coverage throughout your home or office.Easy Installation & Quick PositionThe extender works with any standard wireless router. Instantly connect the extender to a router by pressing the router’s WPS button (if available) followed by the extender’s RE/WPS button. Alternatively, follow the Quick Setup instructions on the extender’s web management page.Once the extender is connected to a router, you can relocate it to your preferred location with no further configuration required. The intelligent signal light can help to find the best location.Easy Management with the TP-Link T ether AppT ether provides a simple, intuitive way to access and manage your extender with your smart devices.1 2 Appearance1 2 1 LED ExplanationChapter 2Set Up Internet ConnectionThis chapter informs you how to boost your host wireless coverage. Please follow the step-by-step instructions to set up the internet connection.It contains the following sections:• Quick Setup• Position Y our Extender2 1 Quick SetupPower onPlug the extender into an electrical outlet next to your host router, and then wait until the Power LED is solid on.Note: For safety, we suggest that you plug the extender in upright directions as shown below.ether app, and via the WPS button.2 1 1 Method 1: Via a Web Browser1. Connect your computer to the extender's wireless network.Tips:Before connecting, please find the SSID (network name) on the label of the extender.• For Windows Users1 ) Unplug the Ethernet cable from your computer (if any).2 ) Click the Wi-Fi icon on the taskbar and connect to the extender’s wirelessnetwork: TP-Link_Extender_2.4GHz or TP-Link_Extender_5GHz.• For Mac OS X Users 1 ) Unplug the Ethernet cable from your computer (if any).2 ) Click the Wi-Fi icon in the top right corner of the screen, and connect to the extender’s network: TP-Link_Extender_2.4GHz or TP-Link_Extender_5GHz .2. Follow the instructions of Quick Setup Wizard to connect the extender to your host router.1 ) Launch a web browser, enter or http://192.168.0.254 in the address field, and then create a password for future login attempts, and click Start .Tips: If the login window does not appear, please refer to FAQ .2 ) Select your host router’s 2.4GHz SSID (network name), enter its password (NOT the password you just created for management), and click Next .3 ) Select your host router’s 5GHz SSID (network name), enter its password (NOT the password you just created for management), and click Next.Tips: If your host router does not support 5GHz wireless network, please click Skip to continue.4 ) Either keep the default SSIDs (network names) or customize them for the extended networks, and then click Next.5 ) Verify your wireless settings and click Next. The corresponding LED(s) (2.4GHzor 5GHz) should turn on.6 ) T o enjoy a more complete service from TP-Link (remote management, TP-LinkDDNS, etc.), log in with your TP-Link ID or click Register Now to get one. Then follow the instructions to bind the extender to your TP-Link ID.Note:• T o learn more about the TP-Link Cloud service, please refer to the TP-Link Cloud Service section.• If you do not want to register a TP-Link ID for now, you may click Log In Later to proceed.7 ) Enjoy! Connect to the extended network and enjoy the internet. Both extendedbut may have different network names if you have customized the SSIDs during the configuration.Tips: Since the performance of the extended network will be affected by the distance between extender and host router, we highly recommend you to relocate your extender referring to Position Y our Extender .2 1 2 Method 2: Via the TP-Link T ether App1. Launch the Apple App Store or Google Play Store and search TP-Link T ether or simplyscan the QR code to download and install the app.OR2. Go to Wi-Fi Settings and connect your device to the extender’s wireless network: TP-Link_Extender_2.4GHz or TP-Link_Extender_5GHz .3. Launch T ether and select your extender from the Local Device list.4. Create a password for future logins and click Create.5. Follow the on-screen instructions to complete the configuration.Tips: Y ou can manage your extender via T ether, such as controlling LEDs, sharing passwords of your• For more information about using WPS button on your host router, please refer to the router manufacturer’s user guide.2. Wait until the Signal LED changes to solid blue, which indicates that the WPS connection is successful. If it doesn’t, please refer to other methods.3. If you are connecting the extender to a dual-band router but only the 2.4GHz or 5GHz LED is on, repeat Step 1 and 2 to connect to the other band.4. Enjoy! Connect to the extended network and enjoy the internet. Both extended networks share the same SSIDs (network names) and passwords as those of your host networks.Tips:extender and host router, we recommend that you relocate your extender by referring to Position Y our Extender.2 2network.Tips: Tmonitors.Chapter3Customize Y our NetworkThis chapter guides you on how to configure network settings that are available for this extender.It contains the following sections:• Check Internet Status• Configure Wireless Network• Change LAN Settings• Specify DHCP Server Settings• Adjust Wi-Fi Coverage• Set Access Control3 1 Check Internet StatusY ou can view the internet status of your extender to check whether you have successfully set up the extended network(s).1. Visit , and log in with the password you set for the extender.2. Go to Settings > Status to view the internet status of your extender.• The extender is functioning normally.• The extender is not connected to the host networks. Please go to Settings > Wireless > Connect to Network to check the passwords of the host networks. If the problem still exists, please refer to the FAQ section.• The extender is connected to the host network, but is not transmitting data. Please check your router’s internet connection.• The extender is connected to the router abnormally. Please go to Settings > Network and try setting your extender to obtain an IP address automatically.Click the Internet/Router/Range Extender/Clients icon to view corresponding information.3 2 Configure Wireless NetworkIf you want to extend another host network after Quick Setup, you can refer to thisVisit , and log in with the password you set for the extender. Note: Here we take the configuration of the 2.4GHz network as an example. If the 5GHz network is available on your extender, please refer to the instructions to set your 5GHz network.¾T o extend another host network:1. Go to Settings > Wireless > Connect to Network.2. Enable Connect to 2.4GHz Network and click Wireless Scanner to find all available networks.3. Select the 2.4GHz host network you want to extend.Note:If the network you want to extend is on but not listed, please try the following steps.1. Move the extender closer to your router, and click Rescan in the top-right corner of the list.2. You can manually enter the SSID (network name) and password of the network you want to extend, and clickSave.4. Once a host network is selected, the SSID and security type will be automatically filled in. If the selected network is encrypted, enter the password in the Password field.5. Click Save.¾T o enable or disable the extended network:1. Go to Settings > Wireless > Extended Network.2. Extended networks are enabled by default. If you want to disable the wireless function of a certain band, just clear the Enable checkbox. In this case, all the wireless settings of this band will be invalid.3. Click Save.¾T o change the wireless network name (SSID):1. Go to Settings > Wireless > Extended Network.2. Create a new SSID in Extended 2.4GHz SSID or click Copy Host SSID. The value is case-sensitive.3. Click Save.Note: If you have changed the wireless settings via a wireless device, you will be disconnected after the settings are applied. Please write down the new SSID for future use.¾T o hide the SSID of the extended network:1. Go to Settings > Wireless > Extended Network.2. Select Hide SSID broadcast, and the corresponding SSID will not be displayed when wireless devices scan for local wireless networks. Devices must join the network manually in order to connect.3. Click Save.3 3 Change LAN SettingsThe extender is preset with a default LAN IP 192.168.0.254, with which you can log in to the web management page. The LAN IP address, together with the Subnet Mask, also defines the subnet that the connected devices are on. If the IP address conflicts with another device on your local network or your network requires a specific IP subnet, you can change it.1. Visit , and log in with the password you set for the extender.2. Go to Settings > Network.3. Select Use the following IP address.4. Enter a new IP address as needed and leave the Subnet Mask as the default settings and enter the gateway that is in the same subnet as the IP address. The gateway is usually the LAN IP address of your extender.5. Click Save.3 4 Specify DHCP Server SettingsBy default, the DHCP (Dynamic Host Configuration Protocol) Server is enabled and the extender acts as a DHCP server; it dynamically assigns TCP/IP parameters to client devices from the IP Address Pool. Y ou can change the settings of the DHCP Server if necessary.1. Visit , and log in with the password you set for the extender.2. Go to Settings > Network.¾T o specify the IP address that the extender assigns:1. Select Auto (recommended) or On to enable the DHCP Server.2. Enter the starting and ending IP addresses in the IP Address Pool.3. Enter other parameters if the ISP requires them. The Default Gateway is automatically filled in and is the same as the LAN IP address of the extender.4. Click Save.¾T o view the DHCP Client List:Y ou can view the information of the DHCP clients connected to the extender in the DHCP Client List.3 5 Adjust Wi-Fi CoverageY ou can set the extender’s Wi-Fi coverage depending on how large you want your Wi-Fi area to be.1. Visit and log in with the password you set for the extender.2. Go to Settings > Advanced Settings > Wi-Fi Coverage.3. Select Min, Mid or Max to adjust your Wi-Fi coverage of the extender.4. Click Save.3 6 Set Access ControlAccess Control allows you to permit or block specific devices from accessing the internet for a specific period.1. Visit and log in with the password you set for the extender.3. Enable Access Control.¾T o block specific device(s):Note: Devices connected to the extender via an Ethernet cable cannot be blocked.1. Select Blacklist and click Save.2. Select the device to be blocked in the Online Devices table by ticking the corresponding checkbox.3. Click Block and the selected device(s) will be added to the Devices in Blacklist table.4. Click in the Devices in Blacklist table to set the Effective Time for a certain entry as needed.5. Click OK.¾T o permit specific device(s):1. Select Whitelist and click Save.2. Click Add in the Devices in Whitelist table. Enter the Device Name and MAC Address. And you can set the Effective Time for a certain entry as needed.3. Click OK.Chapter 4More Features of Y our ExtenderThis chapter explains how to use the extender as a wireless adapter and as an access point.It contains the following sections:• Use Y our Extender as a Wireless Adapter• Transform Y our Existing Wired Network to a Wireless One4 1 Use Y our Extender as a Wireless AdapterThe extender can be used as a wireless adapter to connect any wired-only device, such as a Blu-ray player, game console, DVR, or smart TV, to your wireless network. After configuration, you can connect an Ethernet-enabled device to the extender via an Ethernet cable.Note: Extenders that have no Ethernet port do not support this feature.By default, the Ethernet port of the extender is connected to the 5GHz wireless netwok. ¾T o change the connected wireless frequency:1. Visit , and log in with the password you set for the extender.2. Go to Settings > Network.3. Select 2.4GHz or 5GHz and click Save.4 2 Transform Y our Existing Wired Network to aWireless OneThe extender can work as an access point, transforming your existing wired network to a wireless one.4 2 1 T o Set Up the Extender as an Access Point1. Visit , and log in with the password you set for the extender.2. Click Mode in the top right corner of the page. Select Access Point and click Save. The extender will reboot and switch to Access Point mode.3. After rebooting, connect the extender to your modem or wired router via an Ethernet cable.4. Visit , and log in with the password you set for the extender.5. Go to Quick Setup to configure your extender.1 ) Configure your wireless settings and click Next.2 ) Confirm the information and click Finish. Now, you can enjoy Wi-Fi.4 2 2 T o Connect Y our Wireless Devices to the Extender via WPS Wi-Fi Protected Setup (WPS) provides an easier way to set up a secure Wi-Fi connection. Wireless devices that support WPS, including Android phones, tablets and most USB network cards, can be connected to your extender through this method (not supported by iOS devices).1. Visit , and log in with the password you set for the extender.2. Go to Settings > Wireless > WPS.3. Enable WPS.4. Connect via WPS:• AP’s PIN: Enable AP’s PIN and enter the PIN on your device. Y ou can click Generate to get a new PIN or click Default to restore the PIN to its factory one.• Push Button (Recommended): Click Connect and push the WPS button on the client device.• PIN code: Enter the client’s PIN, and click Connect.Chapter 5TP-Link Cloud ServiceTP-Link Cloud service provides a better way to manage your cloud devices. Log in to your extender with a TP-Link ID, and you can easily monitor and manage your home network when you are out and about via the T ether app on your smartphone or tablet. T o ensure that your extender stays new and gets better over time, the TP-Link Cloud will notify you when an important firmware upgrade is available. Surely you can also manage multiple TP-Link Cloud devices with a single TP-Link ID.This chapter introduces how to register a new TP-Link ID, bind or unbind TP-Link IDs to manage your extender, and the T ether app with which you can manage your home network no matter where you may find yourself.It contains the following sections:• Register a TP-Link ID• Change Y our TP-Link ID Information• Manage the User TP-Link IDs• Manage the Extender via TP-Link T ether AppChapter 5TP-Link Cloud Service 5 1 Register a TP-Link IDIf you have skipped the registration during the Quick Setup process, you can：1. Visit , and log in with the password you set for the extender.2. Go to Settings > TP-Link Cloud.3. Click Register Now and follow the instructions to register a TP-Link ID.4. After activating your TP-Link ID, come back to the TP-Link Cloud page to log in. The first-time login TP-Link ID will be bound automatically to your cloud extender as an Admin.Note:• T o learn more about the Admin and User TP-Link ID, refer to Manage the User TP-Link IDs.• Once the extender is bound to your TP-Link ID, you need to log in to the extender with the TP-Link ID.• Y ou can register another TP-Link ID via the T ether APP. Please refer to Manage the Extender via TP-Link T ether App to install the app and register a new one• If you want to unbind the Admin TP-Link ID from your extender, please go to Settings > TP-Link Cloud, click Unbind in the Device Information section.5 2 Change Y our TP-Link ID InformationFollow the steps below to change your email address and password of your TP-Link ID as needed.1. Visit , and log in with your TP-Link ID.2. Go to Settings > TP-Link Cloud, and focus on the Account Information section.¾Change your email address1. Click behind the Email.2. Enter the password of your TP-Link ID, then the new email address. And click Save.¾Change your password1. Click behind the Password.2. Enter the current password, then a new password twice. And click Save.5 3 Manage the User TP-Link IDsThe first-time login TP-Link ID will be bound automatically to your extender as an Admin account. An Admin account can add or remove other TP-Link IDs to the same extender as User s. Admin account and User accounts both can monitor and manage the extender locally or remotely, except that user accounts cannot:• Reset the extender to its factory default settings from the web management page or the T ether app.• Add/remove other TP-Link IDs to/from the extender.5 3 1 Add an TP-Link ID to Manage the Extender1. Visit , and log in with your TP-Link ID.2. Go to Settings > TP-Link Cloud, and focus on the Bound Accounts section.3. Click , enter another TP-Link ID as needed and click Save.Note:If you need another TP-Link ID, please refer to Manage the Extender via TP-Link T ether App to install the app and register a new one.4. The new TP-Link ID will be displayed in the Bound Accounts table as a User.5 3 2 Remove TP-Link ID(s) From Managing the Extender1. Visit , and log in with your TP-Link ID.2. Go to Settings > TP-Link Cloud, and focus on the Bound Accounts section.3. Check the box(es) of the TP-Link ID(s) you want to remove and click Unbind.5 4 Manage the Extender via TP-Link T ether App The T ether app runs on iOS and Android devices like smartphones and tablets.1. Open the Apple App Store or Google Play and search the key word TP-Link T ether or simply scan the QR code to download and install the app.OR2. Connect your device to the extender’s wireless network.3. Launch the T ether app, select the model of your extender and log in with your TP-Link ID or the password you set for the extender.4. Manage your extender as needed.Chapter 6 Manage Y our Extender This chapter presents how to manage and maintain your extender.It contains the following sections:• Set Up System Time• Control LEDs• Power Schedule• Upgrade the Firmware• Backup and Restore Configuration Settings• Change Login Password• System Log6 1 Set Up System TimeThe System Time of the extender will be used for time-based functions such as the Power Schedule function. If you have enabled the Daylight Saving Time feature, the system time will be sychronized with the daylight saving time you configure.1. Visit , and log in with the password you set for the extender.2. Go to Settings > System T ools > Time Settings.¾T o get system time:1. Select your local Time Zone from the drop-down list.2. Click Save.¾T o set up Daylight Saving Time:1. Select Enable Daylight Saving Time.2. Select the Start and End date and time of the daylight saving time at your local time zone.3. Click Save.6 2 Control LEDsThe LEDs of the extender indicate its activities and status. Y ou can enable the Night Mode feature to specify a time period during which the LEDs are off.1. Visit , and log in with the password you set for the extender.2. Go to Settings > System T ools > LED Control.¾T o specify a time period when LEDs are off:1. Select Night Mode.2. Specify a time period in the LED Off Time field, and the LEDs will be off during this period.3. Click Save.6 3 Power ScheduleThe Power Schdule feature allows you to specify a time period during which the extender is off.1. Visit , and log in with the password you set for the extender.2. Go to Settings > Advanced Settings > Power Schedule.¾T o specify a time period when the extender is off:1. Select Enable Power Schedule.2. Specify a time period in the Power-Off Time field and days in the Day(s) field, and the extender will be off during this period.3. Click Save.6 4 Upgrade the FirmwareTP-Link is committed to improving product features, giving you a better network experience. Y ou can upgrade the firmware online or download the latest firmware file from the Support page at our website and upgrade the extender to the latest firmware version.Note:1. Make sure the latest firmware file is matched with the hardware version (as shown in the download section of the Support page).2. Make sure that you have a stable connection between the extender and your computer. It is NOT recommended to upgrade the firmware wirelessly.3. Backup your extender configuration.4. Do NOT power off the extender during the firmware upgrade.¾T o upgrade the firmware online:1. Visit , and log in with the password you set for the extender.2. Go to Settings > System T ools > Firmware Upgrade, and click Check for upgrade to see whether a new firmware is released.3. Focus on the Online Upgrade section, and click Upgrade.4. Wait a few minutes for the firmware upgrade to complete and the extender to reboot.¾T o upgrade the firmware locally:1. Download the latest firmware file for the extender from our website .2. Visit , and log in with the password you set for the extender.3. Go to Settings > System T ools > Firmware Upgrade.5. Wait a few minutes for the firmware upgrade to complete and the extender to reboot.6 5 Backup and Restore Configuration SettingsThe configuration settings are stored as a configuration file in the extender. Y ou can backup the configuration file and restore the extender to the previous settings from the backup file when needed. Moreover, if necessary, you can erase the current settings and reset the extender to the default factory settings.1. Visit , and log in with the password you set for the extender.2. Go to Settings > System T ools > Backup & Restore.¾T o backup configuration settings:Click Backup to save a copy of the current settings to your local computer. A ‘.bin’ file of the current settings will be stored on your computer.¾T o restore configuration settings:1. Click Browse to locate the backup configuration file stored on your computer, and click Restore.2. Wait a few minutes for the restore and reboot.Note: During the restore process, do not power off or reset the extender.。

深信服AC_1200配置手册

附件五上网行为管理AC-1200配置管理文档1. 设备名称本系统上网行为管理设备采用深信服公司生产的AC-1200。

2.设备功能根据用户提出的应用需求，AC-1200在本系统中的设计功能是对网络资源进行合理的分配，并对内部工作人员的上网行为进行规范，以及对防火墙的功能进行必要的补充。

3.设备硬件信息3.1 AC-1200产品外形AC-1200产品外形和接口信息如图1所示。

图1 AC-1200产品外形和接口信息网络连接与管理方式AC-1200的ETH0（LAN）口通过透明网桥的方式与核心交换机CISCO4506的GE3/1连接，加入本地局域网络。

ETH2(WAN1)口与路由器CISCO2821，与Internet连接。

ETH1(DMZ)端口作为WEB管理端口连接到核心交换机的G3/30。

设备端口IP地址分配见表1。

本设备只提供WEB管理方式。

通过网络连接到WEB管理端口，打开浏览器，在地址栏输入https://192.168.5.41 ，进入管理页面输入用户名和密码，单击“登录”，即可进入管理界面，如图2所示。

表1设备端口IP地址分配表图2 WEB登录页面4. 配置管理4.1 WEBUI界面登录后看到的是WEB管理的首页，包含左侧的功能菜单栏和右侧的状态信息显示。

如图3所示。

图3 WEB用户管理界面4.2 系统配置系统配置部分包含系统信息、管理员帐户、系统时钟等信息。

4.2.1 系统信息系统信息包含系统内的序列号和license信息，如图4所示。

图4系统信息4.2.2 管理员帐户本系统内除admin帐户外，另创建了一个gtyl管理员帐户，其权限与admin相同。

图5所示为管理员帐户列表。

图5管理员帐户列表如需对管理员帐户进行配置，直接单击蓝色用户名，如需创建新管理员，单击左上角“新增”图标，即可进入创建页面。

4.2.3 系统时间系统时间设置界面如图6所示。

图6系统时间设置页面4.2.4 系统升级如图7列表中所显示的，除病毒库未购买升级服务，网关补丁不需购买服务外，其他服务都在2012年4月7日到期，到时可根据实际情况决定是否购买。

海康威视1200M 11AC 双频千兆口企业级无线路由器操作手册说明书

保留一切权利。

本手册的任何部分，包括文字、图片、图形等均归属于杭州海康威视数字技术股份有限公司或其关联公司（以下简称“海康威视”）。

未经书面许可，任何单位或个人不得以任何方式摘录、复制、翻译、修改本手册的全部或部分。

除非另有约定，海康威视不对本手册提供任何明示或默示的声明或保证。

关于本产品本手册描述的产品仅供中国大陆地区销售和使用。

本产品只能在购买地所在国家或地区享受售后服务及维保方案。

关于本手册本手册仅作为相关产品的指导说明，可能与实际产品存在差异，请以实物为准。

因产品版本升级或其他需要，海康威视可能对本手册进行更新，如您需要最新版手册，请您登录海康威视官网查阅（）。

海康威视建议您在专业人员的指导下使用本手册。

商标声明●为海康威视的注册商标。

●本手册涉及的其他商标由其所有人各自拥有。

责任声明●在法律允许的最大范围内，本手册以及所描述的产品（包含其硬件、软件、固件等）均“按照现状”提供，可能存在瑕疵或错误。

海康威视不提供任何形式的明示或默示保证，包括但不限于适销性、质量满意度、适合特定目的等保证；亦不对使用本手册或使用海康威视产品导致的任何特殊、附带、偶然或间接的损害进行赔偿，包括但不限于商业利润损失、系统故障、数据或文档丢失产生的损失。

●您知悉互联网的开放性特点，您将产品接入互联网可能存在网络攻击、黑客攻击、病毒感染等风险，海康威视不对因此造成的产品工作异常、信息泄露等问题承担责任，但海康威视将及时为您提供产品相关技术支持。

●使用本产品时，请您严格遵循适用的法律法规，避免侵犯第三方权利，包括但不限于公开权、知识产权、数据权利或其他隐私权。

您亦不得将本产品用于大规模杀伤性武器、生化武器、核爆炸或任何不安全的核能利用或侵犯人权的用途。

上网行为管理产品手册AC

上网行为管理AC产品概述上网行为管理具备专业的行为管理、应用控制、流量管控、信息管控、非法热点管控、行为分析、无线网络管理等功能, 有效防止人员进行与工作无关的网络行为、提高带宽资源利用率、规避泄密和法规风险、保障内网数据安全、可视化管理以及全面管控无线AP,真正做到有线无线统一上网行为管理。

上网行为管理主要应用于互联网出口上网行为管理、万兆环境上网行为管理、有线无线统一上网行为管理几大应用场景,服务于18,000多家各行业用户。

所以在现代网络管理方面，不仅要做得全面，涵盖有线网络和无线网络的统一管理，还要对网络中的应用、流量、信息等各方面的管控做得越来越精细。

上网行为管理AC具备专业的应用控制和流量管理功能，管控与工作无关的网络行为，杜绝带宽资源滥用，提高工作效率；具备精细信息管控功能，记录上网轨迹，管控外发信息，规避泄密和法规风险；提供智能数据分析功能，提供可视化详细报表；还可以全面管理无线AP和有效管控非法无线热点，首家实现有线无线网络统一行为管理。

如今互联网技术发展迅速,网络应用和网络行为多种多样,企业网络管理需要面对更加复杂的网络环境,会遇到更多的问题:●01 办公效率低下：员工在上班时间玩游戏、聊天、看视频、浏览新闻、在线购物等与工作无关的网络行为,影响工作效率;●02 核心业务无法保障：员工大量进行P2P下载、在线视频等带宽占用大的应用,容易挤占正常业务系统带宽(如 OA系统、邮件系统等),影响核心业务的正常进行;●03 企业信息存在安全风险：各种外发途径(如HTTP上传、网盘上传、论坛发帖和上传、邮件外发附件、IM外发、微博上传等)容易泄露企业核心信息,造成无法估量的损失;●04 非法Wi-Fi热点暴露内网：无线共享设备如360随身Wi-Fi、小度Wi-Fi、小米Wi-Fi、猎豹免费Wi-Fi软件等,价格低廉且易用,此类共享网络的行为容易导致内网暴露,成为不法分子入侵内网的跳板,窃取核心资料或攻击内网,造成极大的安全隐患;●05 无线网络缺乏有效管理：在有线和无线混合使用的网络里,有线和无线无法统一管控,无线App应用无法有效识别和控制,无线用户权限无法精细划分,管理难度大。

深信服C1200配置手册{zx}

附件五上网行为管理配置管理文档. 设备名称本系统上网行为管理设备采用深信服公司生产的。

2.设备功能根据用户提出的应用需求，在本系统中的设计功能是对网络资源进行合理的分配，并对内部工作人员的上网行为进行规范，以及对防火墙的功能进行必要的补充。

3.设备硬件信息产品外形产品外形和接口信息如图所示。

图产品外形和接口信息网络连接与管理方式的（）口通过透明网桥的方式与核心交换机的连接，加入本地局域网络。

()口与路由器，与连接。

()端口作为管理端口连接到核心交换机的。

设备端口地址分配见表。

本设备只提供管理方式。

通过网络连接到管理端口，打开浏览器，在地址栏输入，进入管理页面输入用户名和密码，单击“登录”，即可进入管理桌面，如图所示。

表设备端口地址分配表图登录页面. 配置管理桌面登录后看到的是管理的首页，包含左侧的功能菜单栏和右侧的状态信息显示。

如图所示。

图用户管理桌面系统配置系统配置部分包含系统信息、管理员帐户、系统时钟等信息。

系统信息系统信息包含系统内的序列号和信息，如图所示。

图系统信息管理员帐户本系统内除帐户外，另创建了一个管理员帐户，其权限与相同。

图所示为管理员帐户列表。

图管理员帐户列表如需对管理员帐户进行配置，直接单击蓝色用户名，如需创建新管理员，单击左上角“新增”图标，即可进入创建页面。

系统进度系统进度设置桌面如图所示。

图系统进度设置页面系统升级如图列表中所显示的，除病毒库未购买升级服务，网关补丁不需购买服务外，其他服务都在年月日到期，到时可根据实际情况决定是否购买。

在服务期内的项目已全部设置自动升级。

图系统升级全局排除地址全局排除地址列表中的服务器网址不受监控和限制，如图所示。

本次设置未启动该项目，今后可根据实际应用自行设置。

图全局排除地址网络配置本系统网络配置为透明方式，()和()之间配置网桥，线路从路由器连接到口，端口连接到核心交换机的端口，配置为管理端口，加入，地址为。

如图列表所示。

图网络配置防火墙防火墙功能使用实现，此处不做配置。

上网行为管理操作手册

上网行为管理操作手册
1、打开浏览器输入：https://10.201.24.130或者https://10.201.24.123,登陆上网行为管理设
备，如图所示：
2、提示安装插件，单击浏览器下方工具条“右键”，安装插件，如图所示：
安装插件：
点击安装完成输入用户名和密码进入主界面：
3、点击“系统配置”模块下的“序列号”选项，可以查看设备序列号：
示：
5、点击“系统配置”模块下的“系统日期和时间”选项，可设置当前日期和时间：
6、点击“系统配置”模块下的“控制台用户管理”选项，可进行设备用户管理和设置：
7、点击“系统配置”模块下的“配置备份和恢复”选项，可进行设备配置的备份和恢复：
8、点击“系统配置”模块下的“重启操作”选项，可执行设备重启和服务重启操作：
护，如图所示：
10、点击“系统配置”模块下的“自动升级”选项，可执行设备相关库的升级操作：
如图所示：
定制，如图所示：
如图所示：
点击“进入内置数据中心”：
全屏：
行为统计”操作，如图所示：
报表统计，如图所示：
还可以对报表生成条目进行定制，如图所示：
16、进入“配置导入导出”选项，可进行配置文件的备份和恢复，如图所示：
助。

Netgear AC1200设置指南说明书

Graduate Accommodation Internet ServiceNetgear AC1200 Setup guideInternet access is via a network router that connects to a data socket in your flat. This requires your IT Services Remote Access username and password. All network traffic will be logged against your username for audit purposes. For more details about how the University processes personal data please refer to the privacy policy.By connecting to the service you agree to abide by all relevant law, rules and regulations.Before you beginYou will need1.An Eduroam Wi-Fi/VPN account (also known as a Remote Access account) same username asyour Oxford SSO account. See https:///self/remote_access. For security, usea different password to your Oxford SSO account.2.NB make sure your internet web browser allows ‘Pop-Ups’. Seehttps:///Allow-Pop%E2%80%93ups3. A Netgear router.4. A mains power adapter.5. 1 supplied network cable. Note: Do not use the blue cable included in the Netgear router box.Connecting your routerStep 1: Turning your router on - Plug the mains adapter into the wall and connect the power cable to the back of the router and press the power button on rear of the router. At this stage DO NOT connect your network cable to the router’s Internet port (highlighted blue).Step 2: Router Reset – Your router should be reset. Wait until the 2nd LED is lit green then press and hold the reset button at the back of the router until all the LEDs blink green.Step 3: Connect to the router – After router reset you need to connect to it and configure it. Wireless ConnectionThe label on the bottom of the router has connection information i.e. Wi Fi network name (SSID on your device choose name ending in 5G or 5GHz) and password (passphrase/network key).Step 4: Connect to the management interface.When connected open a web browser and type in the following address or you can type http://192.168.1.1NOTE: If you see a Netgear Service Terms/Condition, screen select ‘I Agree’ and click ‘Apply/Next’.Step 5: On NETGEAR genie webpage select No, I want to configure the Internet connection myself and select NEXT.Select OK on the pop up screen.Step 6: You should now be on the Admin Account Settings page. Set a password for logging in to the router’s management page and set your own security questions and answers.Select NEXT and you will have to login again with username: admin and the new password you have just setup.Step 7: Select the Basic Tab then the Internet ERROR Not Connected option.Step 8: Select No. I want to configure the Internet connection myself and select NEXT.Step 9: Select Yes to Does your Internet connection require a login? The Internet Service Provider should be set to PPPOE. In Login enter your Single Sign On username***************.UK(forexample**************.UK).In password, enter your Remote Access password. This is the same password you use for Eduroam and the IT Services VPN service. Click Apply and plug your network data cable between the router’s Internet port (highlighted blue) and your active wall socket.Select the internet setup Test button and you should see a successful connection screen. Do not register on the Netgear customer registration page instead Select the X (Close) button to close the registration pop up window. On the ‘Are you sure page’ select option Do Not Create Account. You should now be able to browse the internet. If you had problems configuring your router see Common Problems.Common ProblemsCannot access 192.168.1.1 address1)Switch off your device/laptop2)Disconnect the network cable from the router’s Internet port (highlighted blue) on rear of yourrouter3)Reset your router as detailed in Step 2 in these instructions4)Switch on your device/laptop and continue from Step 3 in these instructions5)No Test success or Customer Netgear Registration page opened in your browser at Step 96)Browser Pop Ups need to be enabled.7)Once Pop Ups enabled login to router and do Test again or start from Step 1 in these instructions 3rd LED on your router lit amber/orange?▪Eduroam Remote Access password entered at Step 9 in these instructions is failing to authenticate ▪Retry entering Eduroam Remote Access password at Step 9▪Unable to remember Eduroam Remote Access password then reset it here:https:///self/remote_access3rd LED on your router is not lit green▪Check your network cable is in your active wall socket & the internet port on rear of your router▪Only one wall socket in your Flat is active so is there another wall socket to try?▪The network cable could be faulty so do you have another cable to try?FAQHow do I report a problem with my internet? Please call 01865 280923 or email*******************************andconfirm:Your OXFORD Single Sign On (SSO) username:Contact email & Telephone number:Site / Building / Room:How you are connecting: wireless/wired?Are there 3 LEDs lit green on your router?Have you setup your Remote Access account password?I am due to leave my accommodation, what should I do? When leaving your accommodation, reset the router by holding the reset button for at least 10 seconds until all of the lights come on. This wipes your logon credentials.What can I use the service for? The network is intended primarily for academic purposes but the reasonable and limited use for social and recreational purposes is acceptable for tenants. All use must be legal and meet the University regulations and policies applying to all University ICT facilities.Who can use the connection in my flat? The only people permitted to using the connection in the flat are those living in it. Ultimate responsibility for the service and all activity on the connection lies with the individual whose remote access account is being used.。

1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。

附件五上网行为管理AC-1200配置管理文档1. 设备名称本系统上网行为管理设备采用深信服公司生产的AC-1200。

3.设备硬件信息3.1 AC-1200产品外形AC-1200产品外形和接口信息如图1所示。

图1 AC-1200产品外形和接口信息网络连接与管理方式AC-1200的ETH0（LAN）口通过透明网桥的方式与核心交换机CISCO4506的GE3/1连接，加入本地局域网络。

ETH2(WAN1)口与路由器CISCO2821，与Internet连接。

ETH1(DMZ)端口作为WEB管理端口连接到核心交换机的G3/30。

设备端口IP地址分配见表1。

本设备只提供WEB管理方式。

表1设备端口IP地址分配表接口IP地址描述ETH0 (LAN) 透明模式与核心交换G3/1连接ETH1 (DMZ) 192.168.5.41 与VLAN5某端口连接（WEB管理）ETH2 (WAN1) 192.168.1.6 与路由器G0/0/0连接图2WEB登录页面4. 配置管理4.1 WEBUI界面登录后看到的是WEB管理的首页，包含左侧的功能菜单栏和右侧的状态信息显示。

如图3所示。

图3 WEB用户管理界面4.2 系统配置系统配置部分包含系统信息、管理员帐户、系统时钟等信息。

4.2.1 系统信息系统信息包含系统内的序列号和license信息，如图4所示。

图4系统信息4.2.2 管理员帐户本系统内除admin帐户外，另创建了一个gtyl管理员帐户，其权限与admin相同。

图5所示为管理员帐户列表。

图5管理员帐户列表如需对管理员帐户进行配置，直接单击蓝色用户名，如需创建新管理员，单击左上角“新增”图标，即可进入创建页面。

4.2.3 系统时间系统时间设置界面如图6所示。

在服务期内的项目已全部设置自动升级。

图7 系统升级4.2.5 全局排除地址全局排除地址列表中的服务器网址不受监控和限制，如图8所示。

本次设置未启动该项目，今后可根据实际应用自行设置。

图8全局排除地址4.3 网络配置本系统网络配置为透明方式，ETH0(LAN)和ETH2(WAN1)之间配置网桥，Internet 线路从路由器连接到WAN1口，LAN端口连接到核心交换机的VLAN 1端口，配置DMZ 为管理端口，加入VLAN 5，IP地址为192.168.5.41。

如图9列表所示。

图9网络配置4.4 防火墙防火墙功能使用USG2220实现，此处不做配置。

4.5 安全防护本设备的安全防护功能是对USG2220的部分补充。

4.5.1 防DOS攻击DOS攻击（拒绝服务攻击）是通过发送大量请求，耗尽服务器资源，使得合法请求得不到响应。

本设备防DOS攻击设置如图10所示。

图10防DOS攻击设置4.5.2 防ARP欺骗ARP欺骗是一种常见的内网病毒，中毒的客户端不断向内网发广播包，严重影响局域网的通讯，甚至断网。

本设备防ARP欺骗设置如图11所示。

图11防ARP欺骗4.5.3 网关杀毒本设备的杀毒网关未购买病毒库升级服务，病毒库为2011-03-31之前，已设置全部杀毒功能。

如图12所示。

图12 网关杀毒配置4.6 流量管理4.6.1 虚拟线路配置这里的虚拟线路配置实际就是Internet的接入线路配置。

我们配置上、下行线路带宽均为10240Kbps(10Mbps)。

如图13所示。

图13虚拟线路配置4.6.2 通道配置通道配置是本设备进行网络流量管理的核心内容。

通过添加不同的通道，并对他们进行网络带宽的分配，可以使符合该通道策略的应用得到带宽的保证或限制。

通道配置如图14所示。

图14通道配置配置列表中的项目，除上班时间流量管理是我们这次添加的项目，其余均为系统根据实际情况已制定的通道。

此次配置将全部应用启动。

下面已低延时保障为例，说明配置参数。

如图15和图16所示。

图15低延时保障通道配置图16 低延时通道应用范围从图16可以看出，本设置适用于实时性较高的应用，如网游、股票行情和交易等。

从图15可以看到，系统预留20%的带宽保证这类应用的流量需求。

实际操作中，我们添加了一个命名为上班时间流量限制的通道，以此为例，讲解添加配置步骤。

首先，单击图14左上角的加号“添加通道”。

如图17所示，我们设置通道为限制通道，最大上、下行带宽为50%，优先级为低，并且设置单IP资源不超过50Kbps。

在通道适用范围中，我们设置为适用于所有应用，适用对象为临时人员（自动获取IP地址的人员），生效时间为工作时间，目标IP组为自动获取。

如图18所示。

其中用户组“临时人员”、生效时间“工作时间”（周一到周日，9：00-19：00）、目标IP组“自动获取”都是已经在对象定义和用户管理中定义好。

当带宽资源已经满负荷时，系统将保证优先级高的通道的带宽。

图17配置带宽通道设置实例图18通道适用范围设置实例4.7 用户和上网策略4.7.1 上网策略制定上网策略的目的是保证带宽不被非公业务占用和协助行政规定的实施。

这里通过一个示例说明上网策略的配置方法。

（本策略不被启动）。

策略目的：在上班时间段，禁止“临时人员”、“综合管理部人员”、“财务部人员”、“公司领导”通过互联网使用“HTTP协议”、“QQ”、“淘宝”、“迅雷下载”“P2P 网络视频”。

策略启动后结果：上述人员在周一到周日9：00-19：00，无法浏览网页，不能通过QQ聊天，无法使用迅雷下载，无法观看P2P视频。

设置步骤如下：1)添加上网策略单击导航菜单的“用户与策略管理”→“上网策略”→“新增”→“上网权限策略”，如图19所示。

图19添加上网策略2）配置策略名称和信息在上网权限策略页面中，输入策略名称“办公策略”和策略信息“测试”，如图20所示。

图20 配置策略名称和信息然后单击“应用”栏下面的显示器图标，选择要配置的应用。

进入图22所显示的画面。

选择好应用后，单击“确定”。

图22应用选择确定后进入图23所示页面。

图234）配置适用组和用户单击图23中的“适用组和用户”，选中需要禁止应用的用户组，点“提交”如图24所示。

图24配置适用组和用户至此，本策略配置完成。

4.7.2 用户管理在用户管理部分，已经把终端客户按部门分组添加到系统中，每个用户与一个或几个IP地址绑定，台式机用户绑定一个，笔记本用户绑定两个，领导绑定三个。

图25所示为组/用户视图，左侧为用户组列表，右侧为选中用户组中的成员。

图25中选中的是“公司领导”用户组，右侧显示的是改组成员名单。

单击右侧列表中的具体成员名称，可以进入该用户的具体配置信息视图。

在此可以对该用户进行配置。

配置的内容包括用户属性（图26）和策略列表（图27）。

如图26中设置用户“张先龙”绑定IP地址192.168.100.20-192.168.100.22，图27中设置该用户应用策略“办公策略”，（该策略未启动）。

图25组/用户视图图26用户属性设置图 27用户策略列表4.8 对象定义对象定义部分包含系统配置所用到的基础信息的定义。

其中各种库资源都由系统自定义，并可从网上自动升级。

本次配置我们定义了IP组（图28）和时间计划组（图29）两项内容，其他内容可根据需求再添加。

图28 IP组定义图29时间计划组定义4.9 实时状态监控实施状态中包括运行状态、安全状态、流量状态、上网行为监控和在线用户管理等功能。

下面做分别介绍。

4.9.1 运行状态图3所示的是系统实时运行状态概览，包含资源信息、接口吞吐率折线图、应用流量排名、用户流量排名等。

此视图内容可自定义。

4.9.2 安全状态本项统计安全事件列表，如图30所示。

图30安全状态监控4.9.3 流量状态本项内容包括用户流量排名（图31）、应用流量排名（图32）、流量管理状态（图33）和连接监控（图34）。

图31用户流量排名图32应用流量排名图33流量状态管理图34连接监控4.9.4 上网行为监控针对各个用户的上网行为的监控功能。

如图35所示。

图35上网行为监控4.9.5 在线用户管理本项功能是针对在线用户进行控制管理。

如图36所示。

图36在线用户管理4.10 统计报表在管理页面的任何一页，单击右上角的“内置数据中心”，将会弹出新的页面（图37），这就是内置数据中心。

在这里可以查询各种历史记录和统计报表。

报表以表格、柱状图和饼图等形式展现。

图38所示，历史记录报表表格。

图39所示为统计报表中应用流量统计中2011年5月8日全天的各种应用的流量分布。

此统计方式为饼图。

报表功能使用方便，能够提供最全面的网络资源使用数据，帮助IT管理员作出决策。

本文档不做更多说明。

图37内置数据中心首页图38历史记录报表图39应用流量统计图。