Attention:

① Avoid configuring moxa devices used in the AMB chassis to obtain IP addresses via DHCP.

② Please do not enable Mac Clone when using moxa in AMB chassis.

Introduction to Hardware

LED indicator

The LEDs located on the front and side panels of the AWK-1137C offer a fast and effortless method to determine the current operational status and wireless settings.

The SYS LED indicates system failures and user-configured events. If the AWK-1137C cannot retrieve the IP address from the DHCP server, the SYS LED will blink at one-second intervals.

The table below summarizes how to access the wireless settings of the device from the LED display. For further details, refer to Chapter 3 of the "Basic WLAN Settings" section.

Beeper

Once the system is prepared, the buzzer will produce two brief beeps.

Reset Button

The RESET button is situated on the side panel of the AWK-1137C. You can reboot the AWK-1137C or restore it to its original factory settings by pressing the Reset button with a pointed object, such as an unfolded paper clip.

• To restart the system: Press and hold the RESET button for less than 5 seconds, then release.

• RESET to factory defaults: Press and hold the Reset button for at least 5 seconds until the STATE LED begins to flash green. Release the button to reset the AWK-1137C.

Installation and Configuration for First-time Users

Before installing AWK-1137C, make sure that all items listed in the packaging are present in the box. You will need to use a laptop or PC with an Ethernet port to access Moxa. AWK-1137C comes with a default IP address that must be used when connecting to the device for the first time.

• Step 1: Connect the power supply

The AWK-1137C utilizes a DC power supply.

• Step 2: Connect your Moxa device using a laptop or PC

AWK-1137C supports automatic MDI/MDI-X detection, allowing you to connect it to your computer using either a straight-through or crossover cable. Once connected, the LAN port LED indicator on AWK-1137C will illuminate.

• Step 3: Configure the computer's IP address

Select an IP address on the same subnet as AWK-1137C. Since the default IP address of AWK-1137C is 192.168.127.253 and the subnet mask is 255.255.255.0, you should configure the IP address of your computer to 192.168.127.xxx.

Note:
After selecting Maintenance-Load Factory Default and clicking Submit, the AWK-1137C will be reset to its factory defaults and its IP address will be changed to 192.168.127.253.

• Step 4: Configure AWK-1137C using the web-based manager

Start your computer's web browser and enter http://192.168.127.253 in the address bar to access the homepage of your web-based network manager. Prior to accessing the homepage, you will be prompted to enter a username and password, as displayed below. For initial configuration, enter the default login credentials and click the Login button.

Note:
Default account and password:
User name: admin
Password: moxa

Note: Default account and password: Username: admin Password: moxa

It is highly recommended that you change the default password to ensure a higher level of security. To do this, select Maintenance-Password and then follow the on-screen instructions to change your password.
Note:
After clicking Submit to apply the changes, the web page will refresh and display (update) status, with a flashing reminder in the upper right corner of the web page.

To activate the changes, click Restart, and then click Save and Restart after changing the Settings. The AWK-1137C takes about 30 seconds to complete the restart process.

• Step 5: Choose the operating mode for AWK-1137C

The default operation mode of AWK-1137C is set to client. For more information on configuring AWK-1137C, refer to Chapter 3.

• Step 6: Test the Connection

Introduction to the Interface

Provide an Overview:

This screen provides details on the system information, device information, and connected network information for Moxa.

General Configuration

System Information (system information)

Device Name: This corresponds to the above overview and can be modified here. Certain customers, such as Chengdu Siemens, may have specific requirements for equipment names when adding domains to the network, so please make any necessary changes here.

The text associated with the Login authentication failure message is displayed when an incorrect password is entered on the login page. The default value is "Invalid username or password".

Interface On/Off (LAN Port Switch)

Used to enable or disable LAN1 or LAN2.

Network Settings

Here are some important points to consider:

① If the default IP address is modified, document and label it. However, if there are multiple moxa devices on the same LAN, it is recommended to alter the default IP address.

② Avoid switching the IP address to DHCP mode as it may prevent the router from obtaining an IP address and displaying the configuration page.

System Time (system time)

Typically, DNS is not connected during initial network configuration at the factory. As a result, Moxa is unable to retrieve the NTP server time. You can manually set the time here.

Setting up Wireless LAN

AeroMag

Typically disabled for the quick setup mode utilized by MOXA APs (AWK3131A or AWK4131A).

Moxa's AeroMag tool rapidly, automatically, and accurately configures fundamental Wi-Fi settings based on your current wireless environment and AP location. In the AeroMag topology, the AWK-1137C serves as the AeroMag client, while the AWK-3131A or AWK-4131A serves as the AeroMag AP.

Operating Mode

The 1137 has four operational modes: Client, Client-Router, Slave, and Sniffer.

Wireless LAN / Basic Wireless LAN Setup

Here is the RF type: B/G/N Mixed when using a 2.4GHz network, A/N Mixed when using a 5GHz network.

Click on "Site Survey" to explore the surrounding network.

Click on the SSID you want, and then choose OK.

If you are unable to locate the desired network in the network list, there are two potential scenarios:

① The RF type has been incorrectly selected. For instance, the network that needs to be chosen is 2.4G, but A/N Mixed has been set instead.

802.11n operates on both 2.4GHz and 5GHz frequencies, which can result in networks appearing with both 2.4GHz and 5GHz channels in the available list.

② 1137C-EU is a device that conforms to the European standard. In the European standard, the 5G channel only reaches 140, so channels that comply with the national standard cannot appear in the list.

The 5G channels available in GB are 149, 153, 157, 161, and 165.

WLAN Security Settings (Wireless LAN Security Configuration)

**Open:** No encryption, network is not secured.

WEP: Short for Wired Equivalent Privacy, WEP is a protocol that encrypts data transmitted wirelessly between two devices to prevent unauthorized users from eavesdropping or intruding into the wireless network. It uses a static key to encrypt all traffic, which means the administrator would have to personally visit each host if they wanted to update the key.

WPA: WI-FI Protected Access, WPA and WPA2, is a system designed to protect wireless security in response to several serious weaknesses that researchers found in the Wired Equivalent Privacy (WEP) of previous generations of systems. Unlike previous WEP static keys, WPA requires constant conversion of keys. WPA uses an effective key distribution mechanism.

WPA2: Implements the mandatory elements of 802.11i, specifically replacing the Michael algorithm with the CCMP (Counter Mode Cryptographic Block Link Message Integrity Protocol) message authentication code, which is widely recognized as highly secure.

Enhanced Wireless LAN Configuration (Wireless Local Area Network)

This section provides information on additional wireless-related parameters that can assist you in configuring your wireless network.

Transmission Rate (transmission rate)

Minimum Transmission Rate

Transmission Power (transmission power)

Fragmentation Threshold

RTS Threshold (Request to Send Threshold)

Note: For more information on the above settings, you can refer to the related glossary in Appendix A. By correctly configuring these parameters, you can optimize the performance of your wireless network.

Antenna

* Unlike the multi-stream data transmission of 802.11n (2x2 MIMO) that doubles the throughput, 2T2R transmits/receives the same data on both antenna ports.

Windows Media Player

Turbo Roaming

After activating Turbo Roaming, the following parameters will be shown:

• Roaming threshold: Determines when to start searching for a new access point candidate. If the current connection quality (SNR or signal strength) drops below the specified threshold, AWK initiates a background scan and searches for the next hop candidates.

Note:
When an AWK device conducts a background scan, its wireless performance decreases by one third of its normal performance.

• **Roaming Difference:** This determines whether roaming should be performed. After background scanning is triggered, roaming will only occur if the connection quality provided by the candidate access point (based on the roaming variance value) is better than the current connection. If multiple access points meet the criteria, the AWK device will select the best roaming point.

• **Scan channels:** Predefined communication and roaming channels.

•AP alive check: Enables AeroLink Protection to respond more quickly to WLAN disconnections.

Note:
Enabling this feature will cause AWK-1137C to send packets every 10 milliseconds without checking whether the connection is valid. The high transmission frequency of small biopsy packets may affect other wireless communications using the same channel, so only enable this feature if you have full control over the specified wireless channel.

**•AP candidate threshold:** Once the "AP alive check" determines that the current access point is no longer available, the surrounding access points must have a sufficient connection quality (SNR/signal strength) to be considered as potential associated APs.

Attention Please
The Turbo Roaming recovery time (<150 ms) listed in the product documentation is the average of the test results recorded under optimized conditions with AP configured with a disturbance-free 20 MHz RF channel, WPA2-PSK security, and the default Turbo Roaming parameters. The client is configured with 3-channel roaming, and the traffic load is 100 Kbps. However, various factors affect the AP switchover recovery time of roaming clients, including but not limited to the following:
• Field RF interference
• Speed of mobile client devices
• Application traffic throughput
• The Turbo Roaming parameters have been set, namely, roaming threshold, roaming difference, and AP candidate threshold.
Therefore, it is recommended to conduct a field survey before device deployment to assess the ideal parameter settings on the client and AP to develop the best deployment plan for your application.

MAC clone

**• MAC clone interface:** Specifies the LAN port from which the AWK client should replicate the MAC address of the connected device.

Wireless LAN Certificate Settings (For EAP-TLS in Client/Slave Mode Only)

When using EAP-TLS, clients must have a WLAN certificate to support WPA/WPA2-Enterprise. AWK-1137C can support PKCS#12, which is the file format commonly used to store private keys and accompanying public key certificates. This certificate format is protected by a password-based symmetric key.

Current Status: Displays information regarding the current WLAN certificate that has been imported to AWK-1137C. If no certificate is present, no information will be displayed.

Certificate issued to: Display certificate user

Certificate Issuer: Displays the entity that issued the certificate

Certificate Expiration Date: Indicates the date when the certificate will expire

To import a new WLAN certificate to the Import WLAN Certificate page, follow these steps:

1. Enter the password (or key) in the Certificate Special Password field and click Submit to set the password.

2. The password is shown in the Certificate Special Password field. Click the Browse button in the Select Certificate/key file, and then choose the certificate file.

3. Click "Upload Certificate file" to import the certificate file. If the import is successful, you will be able to view the uploaded information in the "Current Certificate" section. If the import fails, you may need to return to Step 1 and ensure that the password is set correctly before attempting to import the certificate file again.

Attention please:
After restarting AWK-1137C, the WLAN certificate will remain. Even if it has expired, you can still view it on the current certificate.

Advanced Configuration

There are several advanced features available to enhance the AWK-1137C and wireless networking systems. A VLAN is a group of clients and hosts that are grouped together as if they were connected to a broadcast domain in a Layer 2 network. A DHCP server helps to efficiently deploy wireless clients. Packet filters provide security mechanisms in different network layers, such as firewalls. Additionally, the AWK-1137C's SNMP support makes network management easier.

DHCP Server (for Client-Router Mode Only)

DHCP (Dynamic Host Configuration Protocol) is a network protocol that enables administrators to assign temporary IP addresses to network computers by leasing IP addresses to users for a limited time, rather than assigning permanent IP addresses.

AWK-1137C can function as a simplified DHCP server, effortlessly assigning IP addresses to your DHCP clients by responding to their DHCP requests. The IP-related parameters you configure on this page are also transmitted to the client.

You can assign a static IP address to a particular client by entering its MAC address. AWK-1137C offers a static DHCP mapping list that can contain up to 16 entities. Remember to check the Activity checkbox for each entity to activate the settings.

You can verify the status of IP address assignment in the DHCP client list under Status.

DHCP Server

Default Gateway (Gateway)

Subnet Mask (Subnet Mask)

Primary/Secondary DNS Server

Starting IP Address

Maximum number of users

The test revealed that the value had reached 128, indicating that the maximum number of users permitted was 128.

Packet Filters

AWK-1137C offers a range of filters for IP-based packets that pass through LAN and WLAN interfaces. These filters can be configured as firewalls to bolster network security.

MAC Filtering

The MAC filter for AWK-1137C is a policy-based filter that permits or blocks IP packets based on a specified MAC address. AWK-1137C offers 32 entities for configuring MAC addresses in your filtering policy. Don't forget to select the "Active" checkbox for each entity to enable the settings.

MAC Filters

Policy

should not be altered in terms of HTML tags and attributes. The text within this HTML code can be refined as follows:

Attention Please
Be cautious while enabling filters:
Discard + "No entity on list activated" = Allow all packets
Accepted + "No entity on the list is active" = Reject all packets

IP Protocol Filters

The AWK-1137C IP protocol filter is a policy-based filter that enables or blocks IP-based packets with a specified IP protocol and source/destination IP address.

The AWK-1137C offers 32 entities to configure IP protocols and source/destination IP addresses in your filtering policy. You can choose from four IP protocols: All, ICMP, TCP, and UDP. It is necessary to specify either the source or destination IP address. By combining IP addresses and network masks, you can define an IP address or a range of IP addresses to accept or reject. For instance, the IP address 192.168.1.1 and netmask 255.255.255.255 represent the unique IP address 192.168.1.1. On the other hand, the IP address 192.168.1.1 and network mask 255.255.255.0 indicate that the IP addresses range from 192.168.1.1 to 192.168.255. Remember to activate the settings by checking the "Active" checkbox for each entity.

Filters for IP Protocol

Policy

should not be altered in terms of HTML tags and attributes. The text within this HTML code can be refined as follows:

Attention Please
Be cautious while enabling filters:
Discard + "No entity on list activated" = Allow all packets
Accepted + "No entity on the list is active" = Reject all packets

TCP/UDP Port Filters

The AWK-1137C TCP/UDP port filter is a policy-based filter that enables the filtering or allowing of TCP/UDP-based packets with a designated source or destination port.

AWK-1137C offers 32 entities to establish protocol-specific source/target port ranges. Apart from selecting TCP or UDP, you can also configure the source port, destination port, or both. If you specify a single port, you can leave the end port field empty. However, the end port cannot exceed the start port.

The application name is a text string that describes the corresponding entity with a maximum of 31 characters. Please ensure that you select the "Active" checkbox for each entity to activate the settings.

TCP/UDP Port Filters

Policy

should not be altered in terms of HTML tags and attributes. The text within this HTML code can be refined as follows:

Attention Please
Be cautious while enabling filters:
Discard + "No entity on list activated" = Allow all packets
Accepted + "No entity on the list is active" = Reject all packets

Static Route (Only for Client-Router Mode)

The Static Route page is used to configure the static routing table of the AWK-1137C.

NAT Settings and Port Forwarding (Only for Client-Router Mode)

Support for Network Address Translation (NAT), or more specifically, One-to-Many NAT, Network Address Port Translation (NAPT), or Port Address Translation (PAT), to facilitate the Client-Router mode of operation. This function converts outgoing traffic from multiple dedicated IP addresses to a single external IP (WLAN IP) that has a randomly assigned port for returning traffic.

In order to enable external devices to initiate communication, port forwarding is utilized to establish a fixed mapping between an external port (WAN port) and an internal IP/port combination (LAN IP/LAN port).

Enabling Network Address Translation (NAT) and port forwarding provides the following advantages:

• Utilize NAT to conceal the internal IP addresses of vital networks or devices in order to bolster the security of industrial network applications.

• Utilize a dedicated IP address for either a single or multiple groups of Ethernet devices. For instance, one-to-many NAT simplifies the process of replicating or expanding a production line.

Network Address Translation

Port forwarding

Active: Click the checkbox to enable port forwarding rules.

Protocol: Specifies the communication protocol.

The WAN port specifies the external port to be forwarded to.