I'm having issues with the EAP330

This is the Log:



































































































[TD="class: grid-td"]50:c7:bf:bb:e7:a4 [TD="class: grid-td"]50:c7:bf:bb:e7:a4 [TD="class: grid-td"]50:c7:bf:bb:e7:a4 [TD="class: grid-td"]50:c7:bf:bb:e7:a4 [TD="class: grid-td"]50:c7:bf:bb:e7:a4 [TD="class: grid-td"]50:c7:bf:bb:e7:a4 [TD="class: grid-td"]50:c7:bf:bb:ec:e1 [TD="class: grid-td"]50:c7:bf:bb:ec:e1 [TD="class: grid-td"]50:c7:bf:bb:ec:e1 [TD="class: grid-td"]50:c7:bf:bb:ec:e1 [TD="class: grid-td"]50:c7:bf:bb:ec:e1 [TD="class: grid-td"]50:c7:bf:bb:ec:e1 [TD="class: grid-td"]50:c7:bf:bb:e7:a4 [TD="class: grid-td"]50:c7:bf:bb:e7:a4 [TD="class: grid-td"]50:c7:bf:bb:e7:a4 [TD="class: grid-td"][/TD]

50:c7:bf:76:07:64	ERROR	2017-12-20 05:15:43	Wrong user name or wrong password of mail account	[/TD]
ERROR	2017-12-19 20:14:27	Failed to mail log buf--server fail	[/TD]
WARNING	2017-12-19 20:14:27	Delete vlan interface br1,ip 172.16.20.23 successfully	[/TD]
WARNING	2017-12-19 20:14:27	Set vlan interface br1,ip 172.16.20.23 successfully	[/TD]
WARNING	2017-12-19 20:14:27	Delete vlan interface br1,ip 172.16.20.23 successfully	[/TD]
WARNING	2017-12-19 20:14:27	Set vlan interface br1,ip 172.16.20.23 successfully	[/TD]
WARNING	2017-12-19 20:14:27	Set vlan interface br1,ip 172.16.20.22 successfully	[/TD]
WARNING	2017-12-19 10:46:10	Set vlan interface br1,ip 172.16.20.22 successfully	[/TD]
WARNING	2017-12-19 10:46:10	Delete vlan interface br1,ip 172.16.20.22 successfully	[/TD]
WARNING	2017-12-19 10:46:10	Set vlan interface br1,ip 172.16.20.22 successfully	[/TD]
ERROR	2017-12-19 10:46:10	Failed to mail log buf--server fail	[/TD]
WARNING	2017-12-19 10:46:10	Set vlan interface br1,ip 172.16.20.23 successfully	[/TD]
WARNING	2017-12-19 10:46:10	Delete vlan interface br1,ip 172.16.20.22 successfully	[/TD]
WARNING	2017-12-19 10:29:37	Delete vlan interface br1,ip 172.16.20.23 successfully	[/TD]
WARNING	2017-12-19 10:29:37	Delete vlan interface br1,ip 172.16.20.23 successfully	[/TD]
ERROR	2017-12-19 10:29:37	Failed to mail log buf--server fail

Today one eap330 was off line, had to reboot it... Pretty sheety stuff. I know it's all about the settings but this is just a nightmare.
The EAP330 was the worst investment they keep having troubles. They never in the world could handled more than 20!!!

Why they cannot make a plug and play product? I mean is always the same settings unless it is a corporate network...

If someone has a good setting he could share so I could just change it to my need.

Hi gygy42,

Just a thought; Could be a cabling issue or you are not running up against the limit of POE power on the switch.
Would you mind telling us how your 16 EAPs are connected to the 2 t1600g-28ts POE switches?

OK, sorry for the late reply. Was going crazy until I found all issues...
So for people getting the same problem I will explain some of my problem/solution.



[*]the EAP controller and Access Point:




[*]Advance option, like Tammy007 said, you should start switching off all this option
[LIST=1]
[*]Airtime fairness: only available on the eap330
[*]Band steering: Get issues with some android devices (modern Samsung mainly)
[*]Load Balance: when devices under -75db it happens that the device connect and disconnect… (went better after I applied some tweak to the radio settings -> see)

[*] Reboot AP once a day, well just if like me you made the mistake to buy the buggy EAP330. EAP245 are stable and could run for a week or more without problem.
[*] Radio, I reduced the 2.4ghz band to medium and used only 20mhz band width (the 20/40 is faster but you get more interference). I also put my 3 main AP on channel 1, 6 and 11. The rest on automatic. The 5ghz I used also only the 20mhz band width and also for the main 3 AP 3 different fixe channel. The result was more space for the band and less overlapping channels. The counterpart was a lose from speed, not relevant for hotel internet.
[*] SSID VLAN, you can only use this if you have the switch that is VLAN compatible. If not us the “Access Control” instead.
[*] ACCESS Control, you can block the access to your network thank to this option. I used this 172.16.20.0/22 (it mean 172.16.20.0 255.255.252.0) to block the access inside the public network and used this “except subnets” 172.16.20.53/32 (only this IP address) to grant access to the hotspot server.
[/LIST]



[*]The switch T1600G-PS28




[*]Don’t forget to save the config when you finish to make setup or you will lose at reboot all the config. I mean you have to click on the safe config on the left down menu.
[*]For the VLAN creation and interfaces… It’s confusing and hard to understand the logic. Therefor I would recommend to visit this page for more info

https://www.thomas-krenn.com/en/wiki/VLAN_Basics
http://www.microhowto.info/tutorials/802.1q.html#idp28880
http://blog.securite.free.fr/index.php/tagged-untagged
https://www.administrator.de/frage/gibt-pvid-vlans-325880.html#comment-1166889
For info my setup was:
VLAN10 private -> for the private network ports (computer inside the LAN) untagged and PVID10 and for the AP ports VLAN10 and VLAN200 (public VLAN) Tagged and PVID200. For the server I used port tagged VLAN10 and VLAN200 and PVID1 but my server had tagged VLAN interfaces!
http://www.microhowto.info/howto/configure_an_ethernet_interface_as_a_vlan_trunk_on_debian.html


[*]The router/Load balancer TL-ER5120!!!!




[*]Multi-WAN: if you want to use the load balancing feature you should take a look here

http://www.tp-link.com/us/faq-715.html

I had an error rate from over 7% with the bad settings.
My settings was -> Load Balance activated and application optimization and bandwidth based balance routing disactivated.

Concerning hardware choice.

I had to install this in Thailand where weather is hot and humidity is high. Customer always try to get the best for their bucks.

So after having install 5 POE switch T1600G-PS28, 3 Load balancer TL-ER5120, 1 AC50, 10 EAP330, 15 EAP245, 1 EAP225 and 4 CAP1750.


The POE T1600G-PS28 switch is hard to setup specially to create VLANs and of course if you forget to save and you reboot afterwards. Then you get use to all this. Didn’t have any issues yet.


The Load balancer/router TL-ER5120, I would not use it anymore. It’s expensive and has a limited usage. I would buy and try the more complex and full of option MIKROTIK ROUTEROS. It come with a really handy and easy to use VPN for administrating your whole network from outside. It has also all the same gadget like multi-WAN and much more.


The AC50 and CAP1750 are a good option for small install, in the other hand do I really need a controller for 4-5 AP???


The EAP330, is expensive, overheated (burning hot at only 30% of working load). Crash every day… etc. I will not recommend it. You better go with the EAP245.


The EAP245/225. If you don’t put more than 15-20 user it’s a good choice for the money. Had no big issues nor crashes. Only watch out not to overload.


The EAP software linux controller need more option. I installed a DHCP server, Zerotier and also Webmin.

https://community.spiceworks.com/topic/1331562-isc-dhcp-server-for-multiple-vlans

Thanks,
Yes

The switch T1600G-PS28
Don’t forget to save the config when you finish to make setup or you will lose at reboot all the config. I mean you have to click on the safe config on the left down menu.

Is what I thought, but I never used smart switch before. Is like when working on linux server and the "if" config. But if I did this error I guess some other people could have this issue... And it can be quite annoying to lose the set-up after reboot just because not aware.

The 5ghz I used also only the 20mhz band width and also for the main 3 AP 3 different fixe channel. The result was more space for the band and less overlapping channels. The counterpart was a lose from speed, not relevant for hotel internet.

Thank you for the tip, had read about the non overlapping channels but was not sure because my channel scanner was shoving overlapping channels...

I'm still looking for an option to supervise my network from outside. I mean I can make port forwarding for each interface and use dyndns... But now a days must be possible with just one NIC and some software to create a NAT pass-trough VPN.
With the ZeroTier software is almost done. I can create VPN easily but using just 1 NIC and bridge is to dangerous.

If someone has some advice...

Yes it's what I did, created a special VLAN with own subnet. Created 2 zerotier network, one for admin the network and one just for access the server (in bridge mode could not access the server from outside). It work even with double NAT and don't need to make any port forward.

Now I still have problem with my Hotel network, if signal is weak (under -75db) smart-phone and tablet devices get kicked randomly. I think I should only use fix channel but if there is any interference it will not change the channel...
I'm playing with wifi signal power and channel, but should I use the AP load balance and the RSSI treshold? I'm using -80db but tried -75db.

Found this from meraki/cisco:

https://documentation.meraki.com/MR/Deployment_Guides/High_Density_Wi-Fi_Deployment_Guide_(CVD)

They recommend using 20mhz band for 5ghz and lowering the transmit power. The problem it is a lot of work doing it one by one. And it's static it mean if there is a change it will not adapt....