ZyXEL Communications Wireless Access Point ZyAIR B-500 manual

ZyAIR B-500 Wireless Access Point User's Guide Version 3.50 June 2004[...]

ZyAIR B-500 Wireless Access Point User’s Guide ii Copyright Copyright Copyright © 2004 by Zy XEL Communications Corporation. The contents of this publi cation may not be reproduced i n any part or a s a whole, transcribed, sto red in a retrieval system, translated into any langu age, or tr ansmitted in any form or by any means, electronic, mecha[...]

ZyAIR B-500 Wireless Access Point User’s Guide FCC Statement iii Federal Communications Commission (FCC) Interference S t atement This device complies with Part 15 of FCC rules. Operation is subject to the following two cond itions: • This device m ay not cause harmful interference. • This device must accept any interference received, incl ud[...]

ZyAIR B-500 Wireless Access Point User’s Guide iv ZyXEL Warranty ZyXEL Limited W arranty ZyXEL warrants to the original end us er (purchaser) that this product is free from any defects in materials or workm anship for a period of up to two y ears from the date of purchase. During the warranty peri od, and upon proof of purchase, should the produc[...]

ZyAIR B-500 Wireless Access Point User’s Guide Customer Support v Customer Support Please have th e following i nformation re ady when you cont act customer support. • Product model and serial num ber. • Warranty Information. • Date that you received your device. • Brief descri ption of the problem and the steps you took t o solve it. SUP[...]

ZyAIR B-500 Wireless Access Point User’s Guide vi ZyXEL Warranty SUPPORT E-MAIL TELEPHONE 1 WEB SITE METHOD LOCATION SALES E-MAIL FAX 1 FTP SITE REGULAR MAIL support@zyxel.fi +358-9-4780-8411 www.zyx el.fi FINLAND sales@zyx el.fi +358-9-4780 8448 ZyXEL Communications Oy Malminkaari 10 00700 Helsinki Finland[...]

ZyAIR B-500 Wireless Access Point User’s Guide Table of Contents vii T able of Content s Copyright ...................................................................................................................... ................................... ii Federal Communications Commission (FCC) Interfer en ce S tatemen t ........................[...]

ZyAIR B-500 Wireless Access Point User’s Guide viii Table of Content s 5.1.2 BSS ............................................................................................................................ ........ 5-1 5.1.3 ESS .......................................................................................................................[...]

ZyAIR B-500 Wireless Access Point User’s Guide Table of Contents ix 9.5 Configuratio n Screen ........................................................................................................... ......9-8 9.5.1 Backup C onfig uration ........................................................................................................9-8[...]

ZyAIR B-500 Wireless Access Point User’s Guide x Ta ble of Contents Chapter 17 Firmware and Configur ation File Main ten ance ................................................................. 17-1 17.1 Filename C onventions ........................................................................................................... .. 17-1 17.2 Bac[...]

ZyAIR B-500 Wireless Access Point User’s Guide List of Figures xi List of Figures Figure 1-1 Internet Access App lication ......................................................................................... ................. 1-4 Figure 1-2 Corporation Network A pplication ......................................................................[...]

ZyAIR B-500 Wireless Access Point User’s Guide xii List of Figures Figure 9-12 Network T e mporarily Disconnected................................................................................... ....... 9-10 Figure 9-13 Configur ation Upload Error ......................................................................................... ........[...]

ZyAIR B-500 Wireless Access Point User’s Guide List of Figures xiii Figure 18-2 V alid CI Com mands .................................................................................................. ............... 18-1 Figure 18-3 Menu 24.10 System Main tenance : T i me and Date Settin g ...................................................... 18-[...]

[...]

ZyAIR B-500 Wireless Access Point User’s Guide List of Tables xv List of T ables T able 3-1 W izard 1 : General Setup ............................................................................................. .................. 3-2 T able 3-2 W izard 2 : W ireless LAN Setup ......................................................................[...]

ZyAIR B-500 Wireless Access Point User’s Guide xvi List of Tables T able 17-1 Filename Conve ntions ................................................................................................ ................ 17-2 T able 17-2 General Comm ands fo r Third Party FTP Clients ......................................................................[...]

ZyAIR B-500 Wireless Access Point User’s Guide Preface xvii Preface Congratulations on your purchase from the ZyAIR B-500 Wireless Access Point. An access point (AP) acts as a bridge betwee n the wireless and wired networks, extending your existing wired networ k without any additional wiri ng. This User’s G uide is desig ned to guide yo u thro[...]

ZyAIR B-500 Wireless Access Point User’s Guide xviii Preface • Mouse action s equences are denoted usi ng a com ma. For exam ple, “click the Apple ic on, Co ntrol Panels and then Modem ” means first click the Apple icon, then point your mouse pointer to Control Panels and then click Modem . • For brevity’s sake, we will use “e.g.,” [...]

Overview I P P a a r r t t I I : : OVERVIEW This part introduces the main features and applications of ZyAIR and shows how to access the web configurator and use the Wizard to setup the ZyAIR.[...]

[...]

ZyAIR B-500 Wireless Access Point User’s Guide Getting to Know Your ZyAIR 1-1 Chapter 1 Getting to Know Your ZyAIR This chapter introduces the main features and applications of the ZyAIR. 1.1 Introducing the ZyAIR Wireless Access Point The ZyAIR extends the range of your existing wired netwo rk without any additional wiring efforts. The ZyAIR pro[...]

ZyAIR B-500 Wireless Access Point User’s Guide 1-2 Getting to Know Your ZyAIR 802.11b Wireless LAN Standard ZyAIR product s containing the lett e r “B” in the model nam e, such as ZyAIR B-1000, ZyAIR B -500, comply with the 802.11b wireless standard. The 802.11b data rate an d correspondi ng modulation tec hniques are as follows . The modulat[...]

ZyAIR B-500 Wireless Access Point User’s Guide Getting to Know Your ZyAIR 1-3 WEP Encryption WEP (Wired Equivalen t Privacy) en crypts data frames before transmitting over the wireless network to help keep network c o mmunicat ions private. Wi-Fi Protected Access Wi-Fi Protected Access (WPA) is a subset of the IEEE 802.11i security specifica tion[...]

ZyAIR B-500 Wireless Access Point User’s Guide 1-4 Getting to Know Your ZyAIR Wireless LAN Channel Usage The Wireless Channel Usage screen displa ys whether the radio channels are used by other wireless devices within the transmission rang e of the ZyAIR. This allows you to select the channel with minimum interference for your ZyAIR. 1.3 Applicat[...]

ZyAIR B-500 Wireless Access Point User’s Guide Getting to Know Your ZyAIR 1-5 Figure 1-2 Corporation Network Application[...]

[...]

ZyAIR B-500 Wireless Access Point User’s Guide Introducing the Web Configurato r 2-1 Chapter 2 Introducing the Web Configurator This chapter describes how to access the ZyAIR we b configurator and provides an overview of its screens. The default IP address of the ZyAIR is 192.168.1.2. 2.1 Accessing the ZyAIR W eb Configurator Step 1. Make sure yo[...]

ZyAIR B-500 Wireless Access Point User’s Guide 2-2 Introducing the Web Configurator The management session automa tically times out w hen the time period set in the Administrator Inactivity T imer field expires (default five minutes). Simply log back into the ZyAIR if this happens to y ou. 2.2 Resetting the ZyAIR If you forget your password or ca[...]

ZyAIR B-500 Wireless Access Point User’s Guide Introducing the Web Configurato r 2-3 2.3 Navigating the ZyAIR W eb Configurator The following summarizes how to navigate the web configurat or. Follow the instructions below or click the icon (located in the top right corner of most screens) to view online help. Figure 2-2 Navigating the Zy AIR Web [...]

[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wizard Setup 3-1 Chapter 3 Wizard Setup This chapter provides information on the Wiza rd Setup screens in the web configurator. 3.1 Wizard Setup Overview The web configurator’s setup wizar d helps you configure your ZyAIR for wireless stations to access your wired LAN. 3.1.1 Channel A channel is t [...]

ZyAIR B-500 Wireless Access Point User’s Guide 3-2 Wizard Setup 3.2 Wizard Setup: General Setup General Setup contains administrative and syste m-related information. Figure 3-1 Wizard 1 : General Setup The following table describes the labels in this screen. Table 3-1 Wizard 1 : General Setup LA BEL DESCRIPTION System Name It is recommended you [...]

ZyAIR B-500 Wireless Access Point User’s Guide Wizard Setup 3-3 Table 3-1 Wizard 1 : General Setup LA BEL DESCRIPTION Domain Name This is not a required field. Le ave this field blank or enter the domain name here if you k now it. Next Click Next to proceed to the next scre en. 3.3 Wizard Setup: Wireless LAN Use the second wizard screen to set up[...]

ZyAIR B-500 Wireless Access Point User’s Guide 3-4 Wizard Setup Table 3-2 Wizard 2 : Wireless LAN Setup LA BEL DESCRIPTION Choose Channel ID To manually set the ZyAIR to use a channel, select a channel from the drop-do wn list box. Open the Channel Usag e screen to make sure the channel is not alread y used by another AP or independent peer-to-pe[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wizard Setup 3-5 The following table describes the labels in this screen. Table 3-3 Wizard 2 : Wireless LAN Setup LA BEL DESCRIPTION Wireless LAN Setup WEP Encryption Select 64-bit WEP or 128-bit WEP to allo w data encryption. ASCII Select this option in order to enter ASCII characters as the WEP key[...]

ZyAIR B-500 Wireless Access Point User’s Guide 3-6 Wizard Setup Extend Security If you choose Extend security in the Wireless LAN Setup screen, you can set up a Pre -Shared Key . The following table describes the labels in this screen. Table 3-4 Wizard 2 : Wireless LAN Setup LA BEL DESCRIPTION Wireless LAN Setup Pre-Shared Key Type from 8 to 31 c[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wizard Setup 3-7 Table 3-5 Private IP Address Ranges 10.0.0.0 - 10. 255.255.255 172.16.0.0 - 172.31.255.255 192.168.0.0 - 192. 168.255.255 You can obt ain your IP a ddress from the IANA, fr om an ISP or have it assigned by a private networ k. If you belong to a small organization and your Internet ac[...]

ZyAIR B-500 Wireless Access Point User’s Guide 3-8 Wizard Setup Figure 3-3 Wizard 3 : IP Address Assignment The following table describes the labels in this screen. Table 3-6 Wizard 3 : IP Address Assi gnment LA BEL DESCRIPTION IP Address Assignment Get automatically From DHCP Select this option if your ZyAIR is usin g a dynamic ally assigned IP [...]

ZyAIR B-500 Wireless Access Point User’s Guide Wizard Setup 3-9 Table 3-6 Wizard 3 : IP Address Assi gnment LA BEL DESCRIPTION Gateway IP Address Enter the IP address of a gat eway. The gateway is an immedi ate neighbor of your ZyAIR that will forward the packe t to the destination. On the LAN, the gateway must be a router on the same se gment as[...]

ZyAIR B-500 Wireless Access Point User’s Guide 3-10 Wizard Setup Well done! You have successfully set up your ZyAIR to operate on your network and ac cess the Internet.[...]

System, Wireless and IP II Part II: SYSTEM, WIRELESS AND IP This part covers the inform ation and web conf igurator screens of System, Wireless and IP .[...]

[...]

ZyAIR B-500 Wireless Access Point User’s Guide System Screens 4-1 Chapter 4 System Screens This chapter provides information on the System screens. 4.1 System Overview This section provides inf ormation on general sy stem setup. 4.2 Configuring General Setup Click SYSTEM to open the General screen. Figure 4-1 System General Setup The following ta[...]

ZyAIR B-500 Wireless Access Point User’s Guide 4-2 System Screens Table 4-1 System General Setup LABEL DESCRIPTION System Name Type a descriptive name to identif y the ZyAIR in the Ethernet net work. This name can be up to 30 alpha numeric charac ters long. Spaces ar e not allowed, but dashes "-" and underscores "_" are acce p[...]

ZyAIR B-500 Wireless Access Point User’s Guide System Screens 4-3 Figure 4-2 Password The following table describes the labels in this screen. Table 4-2 Password LABEL DESCRIPTION Old Password Type in your existing system pass word (1234 is the default password). New Password T ype your new system password (up to 3 1 characters). Note that as you[...]

ZyAIR B-500 Wireless Access Point User’s Guide 4-4 System Screens Figure 4-3 Time Setting The following table describes the labels in this screen. Table 4-3 Time Setting LABEL DESCRIPTION Time Protocol Select the time service protocol that your time server sends when you turn on the ZyAIR. Not all time servers support all prot ocols, so you ma y [...]

ZyAIR B-500 Wireless Access Point User’s Guide System Screens 4-5 Table 4-3 Time Setting LABEL DESCRIPTION Time Server Address Enter the IP address or the URL of your time server. Check with your ISP/n etwork administrator if you are uns ur e of this information. Current Time (hh:mm:ss) This field displays the time of your ZyAIR. Each time you re[...]

[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless Configuration and Roaming 5-1 Chapter 5 Wireless Configuration and Roaming This chapter discusses how to configure Wireless and Roaming screens on the ZyAIR. 5.1 Wireless LAN Overview This section introduces the wireless LA N (WLAN) and so me bas ic scenar ios. 5.1.1 IBSS An Independent Basi[...]

ZyAIR B-500 Wireless Access Point User’s Guide 5-2 Wireless Configuration and Roaming Figure 5-2 Basic Service set 5.1.3 ESS An Extended Service Set (ESS) consists of a series of overlapping BSSs, each contai ning an access point, with each access point conne cted together by a wired ne twork. This wired connection between APs is called a Distrib[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless Configuration and Roaming 5-3 Figure 5-3 Extended Service Set 5.2 Wireless LAN Basics Refer also to the chapter on wizard setup for m o re background information on Wireless L AN features, such as channels. 5.2.1 RTS/CTS A hidden node occurs when two stati ons are within range of the sam e a[...]

ZyAIR B-500 Wireless Access Point User’s Guide 5-4 Wireless Configuration and Roaming Figure 5-4 RTS/CTS When station A sends data to the AP, it might not know that the statio n B is already using the channel. If these two stations send data at the same time, co llisions may occur when both sets of data arri ve at the AP at the same time, resulti[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless Configuration and Roaming 5-5 If the Fragmentation Thres hold value is smaller than th e RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshak e will n ever occur as data frames will b e fragmented before they rea ch RTS/CTS size. 5.3 Preamble T y[...]

ZyAIR B-500 Wireless Access Point User’s Guide 5-6 Wireless Configuration and Roaming Figure 5-5 Wireless The following table describes the general wireless LAN labels in this screen. Table 5-1 Wireless LABEL DESCRIPTION ESSID (Extended Service Set IDentity) T he ESSI D identifies the Service Set with which a wireless station is associated . Wire[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless Configuration and Roaming 5-7 Table 5-1 Wireless LABEL DESCRIPTION Hide ESSID Select this check box to hide the ESSID in the outgoing beac on frame so a station cannot obtain the ESSID through passive scanning using a site survey tool. Choose Channel ID Set the operating frequenc y/channel d[...]

ZyAIR B-500 Wireless Access Point User’s Guide 5-8 Wireless Configuration and Roaming 5.5 Configuring Roaming A wireless station is a device with an IEEE 802.11b c o mpliant wireless adapters. An acce ss point (AP) acts as a bridge between the wirele ss and wired networks. An AP creates its own wireless coverage area. A wireless station can assoc[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless Configuration and Roaming 5-9 Figure 5-6 Roaming Example The steps below describe the roam ing process. Step 1. As wireless sta tion Y moves from the cover age area of acce ss point AP 1 to that of access point AP 2 , it scans and uses the signal of access point AP 2 . Step 2. Access point A[...]

ZyAIR B-500 Wireless Access Point User’s Guide 5-10 Wireless Configuration and Roaming 5. The access points m ust be connected to the Ethern et and be able to get IP addresses from a DHCP server if usin g dynami c IP address assignm ent. To enab le roaming on your ZyAIR, clic k the WIRELESS lin k under ADVANC ED and then the Roaming tab. The scre[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless Security 6-1 Chapter 6 Wireless Security This chapter describes how to use the MAC F ilter, 802.1x, Local User Database and RADIUS to configure wireless security on your ZyAIR. 6.1 Wireless Security Overview Wireless security is vital to your network to prot ect wireless communicati on betwe[...]

ZyAIR B-500 Wireless Access Point User’s Guide 6-2 Wireless Security Figure 6-2 Wireless The following table d escribes the wirele ss LAN security labe l in this screen. Table 6-1 Wireless LABEL DESCRIPTION Security Choose from one of the security f eatures list ed in the drop-down box. • No Security • Static WEP • WPA-PSK • WPA • 802.1[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless Security 6-3 6.2 Security Parameters Summary Refer to this table to see what other security pa rameters you should c onfigure for each Authentication Method/ key m anagement protocol ty pe. Yo u e nter manual keys by first sel ecting 64-bit WEP or 128-bit WEP from the WEP Encryption field an[...]

ZyAIR B-500 Wireless Access Point User’s Guide 6-4 Wireless Security 6.3.2 Authentication Three diffe rent method s can be use d to authenti cate wireless st ations to th e network: Open System , Shared Key , and Auto . The following figure illustrates the steps involved. Figure 6-3 WEP Authentication Steps Open system authentication i n volves a[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless Security 6-5 When your ZyAIR's authenti cation method is se t to open system, it will only accept ope n system authentication requests. Th e same is true for shared key auth entication. However, when it is set to auto authentication, the ZyAIR will accept e ither type of authe ntication[...]

ZyAIR B-500 Wireless Access Point User’s Guide 6-6 Wireless Security Figure 6-4 Wireless: Static WEP The following table d escribes the wireless LAN security lab els in this screen.[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless Security 6-7 Table 6-3 Wireless: Static WEP LABEL DESCRIPTION Security Select Static WEP from the drop-down list. WEP Encryption Select 64-bit WEP or 128-bit WEP to enable data encrypti on. Authentication Method Select Au t o , Open System or Shared Key from the drop-down list box. If WEP en[...]

ZyAIR B-500 Wireless Access Point User’s Guide 6-8 Wireless Security 6.5.2 Encryption WPA impro ves data encry ption by using Tem poral Key Integrity Prot ocol (TKIP ), Message Integrity Check (MIC) and IEEE 802.1x . Temporal Key Integrity Pr otocol (TK IP) uses 128 -bit keys t hat are dynam ically generated and dist ributed by the authentication[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless Security 6-9 Figure 6-5 WPA - PSK Authentica tion 6.7 Configuring WP A-PSK Authentication In order to configure and enable WPA-PSK Authentication; click th e WIRELESS lin k under ADVA NCED to display the Wireless screen. Select WPA-PSK from the Security list.[...]

ZyAIR B-500 Wireless Access Point User’s Guide 6-10 Wireless Security Figure 6-6 Wireless: WPA-PSK The following table d escribes the wireless LAN security lab els in this screen. Table 6-4 Wireless: WPA-PSK LABEL DESCRIPTION Security Select WPA-PSK from the drop-down list.[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless Security 6-11 Table 6-4 Wireless: WPA-PSK LABEL DESCRIPTION Pre-Shared Key T he encryption mechanisms used for WP A and WPA -PSK are the same. T he only difference between the t wo is that WPA-PSK uses a simple common password, instead of user-specific credentials. Type a pre-shared key from[...]

ZyAIR B-500 Wireless Access Point User’s Guide 6-12 Wireless Security 6.9 WP A with RADIUS Application Example You need the IP addr ess of the RADIUS server, its port number ( default is 1812), and the RADIUS shar ed secret. A WPA application exam ple with an external RADIUS server l ooks as follows. “A” is the RADIUS server. “DS” is the [...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless Security 6-13 Figure 6-8 Wireless: WPA The following table d escribes the wireless LAN security lab els in this screen. Table 6-5 Wireless: WPA LABEL DESCRIPTION Security Select WPA from the drop-down list.[...]

ZyAIR B-500 Wireless Access Point User’s Guide 6-14 Wireless Security Table 6-5 Wireless: WPA LABEL DESCRIPTION ReAuthentication Timer (in seconds) Specify how often wireless stations have to reenter usern ames and passwords in order to stay connected. Enter a time interval bet ween 10 and 9999 seconds. The default time interval is 1800 seconds ([...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless Security 6-15 • EAP-TTLS • PEAP EAP-MD5 cannot be used w ith Dynamic WEP Key Exchange. 6.13 Configuring 802.1x and Dynamic WEP Key Exchange In order to conf igure and enab le 802.1x and Dyn amic WEP Key Exchange; click the WIRELESS link under ADVANCED to d isplay the Wireless screen. Sel[...]

ZyAIR B-500 Wireless Access Point User’s Guide 6-16 Wireless Security Table 6-6 Wireless: 802.1x and Dy namic WEP LABEL DESCRIPTION Security Select 802.1x + Dynami c WEP from the drop-do wn list. ReAuthentication Timer (in seconds) Specify how often wireless stations have to reenter usern ames and passwords in order to stay connected. Enter a tim[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless Security 6-17 Figure 6-10 Wireless: 802.1x + Static WEP The following table d escribes the wireless LAN security lab els in this screen.[...]

ZyAIR B-500 Wireless Access Point User’s Guide 6-18 Wireless Security Table 6-7 Wireless: 802.1x + Static WEP LABEL DESCRIPTION Security Select 802.1x + Static WEP from the drop-do wn list. WEP Encryption Select 64-bit WEP or 128-bit WEP to enable data encryption. Authentication Method Select Au t o , Open System or Shared Key from the drop-down [...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless Security 6-19 Table 6-7 Wireless: 802.1x + Static WEP LABEL DESCRIPTION Authentication Databases The authentication databas e contains wireless station login information. The local user database is the built-in database on the Z yAI R. The RADIUS is an external server. Use this drop-down lis[...]

ZyAIR B-500 Wireless Access Point User’s Guide 6-20 Wireless Security Figure 6-11 Wireless: 802.1x + No WEP The following table d escribes the wireless LAN security lab els in this screen. Table 6-8 Wireless: 802.1x + No WEP LABEL DESCRIPTION Security Select 802.1x f rom the drop-down list.[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless Security 6-21 Table 6-8 Wireless: 802.1x + No WEP LABEL DESCRIPTION ReAuthentication Timer (in Seconds) Specify how often wireless stations have to reenter usern ames and passwords in order to stay connected. This field is activated onl y when you select Authentication Required in the Wirele[...]

ZyAIR B-500 Wireless Access Point User’s Guide 6-22 Wireless Security Once you enable user authentica tion, you need to specify an extern al RADIUS server or create local user accoun t s on the ZyAIR for authen tication. 6.16 MAC Filter The MAC filter screen allows you to confi gure the ZyAIR to give exclusive access to up to 32 de vices (Allow A[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless Security 6-23 Figure 6-12 MAC Address Filter The following table describes the labels in this screen.[...]

ZyAIR B-500 Wireless Access Point User’s Guide 6-24 Wireless Security Table 6-9 MAC Address Filter LA BEL DESCRIPTION Active Select Yes from the drop down list box to enable MAC address filtering. Filter Action Define the filter action for the list of MAC addresses in the MAC address filter table. Select Deny Association to block access to the Zy[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless Security 6-25 • Access-Accept Sent by a RADIUS server allowing access. • Access-Challenge Sent by a RADIUS server requesting m ore inform ation in order to allow access. The access point sends a proper response from the user and then sends another Access-Request m essage. The following t[...]

ZyAIR B-500 Wireless Access Point User’s Guide 6-26 Wireless Security The details below provide a gene ral descriptio n of how I EEE 802.1x EAP authentication works. For an example list of EAP-MD5 authentication st eps, see the IEEE 802. 1x appendix. • The wireless station sends a “ start” message to the ZyAIR. • The ZyAIR sends a “requ[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless Security 6-27 Figure 6-14 Local User Database[...]

ZyAIR B-500 Wireless Access Point User’s Guide 6-28 Wireless Security The following table describes the labels in this screen. Table 6-10 Local User Database LABEL DESCRIPTION Active Select this check box to activate the user profile. User Name Enter the username (up to 31 characters) for this user profile. Password T ype a password (up to 31 cha[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless Security 6-29 Figure 6-15 RADIUS The following table describes the labels in this screen. Table 6-11 RADIUS LABEL DESCRIPTION Authentication Server Active Select Yes from the drop-down list box to e nable us er authentication throug h an external authenti cation server. Select No to enable u[...]

ZyAIR B-500 Wireless Access Point User’s Guide 6-30 Wireless Security Table 6-11 RADIUS LABEL DESCRIPTION Port Number Enter the port numb er of the exte rnal authentication server. The default port number is 1812 . You need not change this value unl ess your network adminis trator instructs you to do so with additional information. Shared Secret [...]

ZyAIR B-500 Wireless Access Point User’s Guide IP 7-1 Chapter 7 IP Screen This chapter discusses how to configure IP on the ZyAIR 7.1 Factory Ethernet Defaults The Ethernet param eters of the ZyAIR are pres et in the factory with the following values: • IP address of 192.168.1.2 • Subnet mask o f 255.255.25 5.0 (24 bits) These parameters shou[...]

ZyAIR B-500 Wireless Access Point User’s Guide 7-2 IP The following table describes the labels in this screen. Table 7-1 IP Setup LA BEL DESCRIPTION IP Address Assignment Get automatically from DHCP Select this option if your ZyAIR is usin g a dynamic ally assigned IP address from a DHCP server each time. Y ou must know the IP ad dress assigned t[...]

Logs III Part III: LOGS This part prov ides information and configuration in structions for the logs.[...]

[...]

ZyAIR B-500 Wireless Access Point User’s Guide Logs Screens 8- 1 Chapter 8 Logs Screens This chapter contains informati on about configuring general log s ettings and viewing the ZyAIR’s logs. Refer to the appendix for example log message explanations. 8.1 Configuring View Log The web configurator allows you to look at all of the ZyAIR’s logs[...]

ZyAIR B-500 Wireless Access Point User’s Guide 8-2 Logs Screens The following table describes the labels in this screen. Table 8-1 View Log LABEL DESCRIPTION Display Select a log category from the drop down list box to displa y logs within the selected category. To vie w all logs, select All Logs . The number of categories sho wn in the drop do w[...]

ZyAIR B-500 Wireless Access Point User’s Guide Logs Screens 8- 3 Figure 8-2 Log Settings The following table describes the labels in this screen.[...]

ZyAIR B-500 Wireless Access Point User’s Guide 8-4 Logs Screens Table 8-2 Log Settings LABEL DESCRIPTION Address Info Mail Server Enter the server name or the IP addr ess of the mail serv er for the e-mail addresses specified below. If this field is left blank, logs and alert messages will not be sent via e-mail. Mail Subject Type a title that yo[...]

ZyAIR B-500 Wireless Access Point User’s Guide Logs Screens 8- 5 Table 8-2 Log Settings LABEL DESCRIPTION Clear log after sanding mail Select the check box to clear all logs after lo gs and alert messages are sent via e- mail. Log Select the categories of logs that you want to record. Send Immediate Alert Select the categories of alerts for which[...]

[...]

Maintenance IV Part IV: MAINTENANCE This part describ es the Maintenan ce we b configurator screens.[...]

[...]

ZyAIR B-500 Wireless Access Point User’s Guide Maintenance 9-1 Chapter 9 Maintenance This chapter describes the Maintenance screens that display system information such as ZyNOS firmware, port IP addresses and port traffic statistics. 9.1 Maintenance Overview The maintenance scree ns can help you view syst em info rm ation, upload n ew firmware, [...]

ZyAIR B-500 Wireless Access Point User’s Guide 9-2 Maintenance Table 9-1 System Status LA BEL DESCRIPTION ZyNOS Firmware Version This is the ZyNOS Firmware version and the date created. ZyNOS is ZyXE L's proprietary Network Operating S ystem design. IP Address This is the Ethernet port IP address. IP Subnet Mask This is the Ethernet port sub[...]

ZyAIR B-500 Wireless Access Point User’s Guide Maintenance 9-3 Table 9-2 System Status: Show Statistics LA BEL DESCRIPTION Status This shows the port speed and duple x setting if you are using Ethernet encapsu lation for the Ethernet port. This shows the transmission speed only for wireless port. TxPk ts This is the number of transmitted packets [...]

ZyAIR B-500 Wireless Access Point User’s Guide 9-4 Maintenance Figure 9-3 Association List The following table describes the labels in this screen. Table 9-3 Association List LA BEL DESCRIPTION # This is the index number of an associated wireless station. MAC Address This field displays the MAC address of an associated wireless station. Associati[...]

ZyAIR B-500 Wireless Access Point User’s Guide Maintenance 9-5 Figure 9-4 Channel Usage The following table describes the labels in this screen. Table 9-4 Channel Usage LA BEL DESCRIPTION SSID This is the Service Set IDentification name of the AP in an Infrastructure wireless network or wireless station in an Ad-Hoc wi reless network. For our pur[...]

ZyAIR B-500 Wireless Access Point User’s Guide 9-6 Maintenance Table 9-4 Channel Usage LA BEL DESCRIPTION Signal This field displays the strength of the AP’s signal. If you must choose a chann el that’s currently in use, choose one with low signal strength for minimum interference. Network Mode “Network mode” in this screen refers to your[...]

ZyAIR B-500 Wireless Access Point User’s Guide Maintenance 9-7 Table 9-5 Firmware Upload LA BEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse ... to find it. Browse... Click Browse... to find the .bin file you want to upl oad. Remember that you must decompress compressed (.zip) files befor[...]

ZyAIR B-500 Wireless Access Point User’s Guide 9-8 Maintenance If the upload was not successful, the fo llowing screen will appear. Click Return to go back to the F/W Upload screen. Figure 9-8 Firmware Upload Error 9.6 Configuration Screen See the Firmware and Configuration File Maintenance chapter for tran sferr ing conf iguration files us ing F[...]

ZyAIR B-500 Wireless Access Point User’s Guide Maintenance 9-9 Figure 9-9 Configuration 9.6.1 Backup Configuration Backup config uration allows you to back u p (save) th e Zy AIR’s current configuration to a file on your computer. O nce your Zy AIR is confi gured and functioni ng properly , it is hi ghly recomm ended that you back[...]

ZyAIR B-500 Wireless Access Point User’s Guide 9-10 Maintenance up your configuration file before making configuratio n ch anges. The backup configur ation file will be useful in case you need to return to your prev ious settings. Click Backup to save the ZyAIR’s current conf iguration to your co mputer. 9.6.2 Restore Configuration Restore conf[...]

ZyAIR B-500 Wireless Access Point User’s Guide Maintenance 9-11 Figure 9-11 Network Temporarily Disconnected If you uploaded the d efault configuration file you may need to change t he IP addre ss of your c omputer to be in the same subnet a s that of the defau lt ZyAIR IP address (192.168.1.2). See your Quick Installation Guide for details on ho[...]

ZyAIR B-500 Wireless Access Point User’s Guide 9-12 Maintenance Figure 9-13 Reset Warning Message You can also press the RESET button on the top panel to reset the factory defaults of your ZyAIR. Refer to the section on resetting the ZyAIR for more inform ation on the RESET button. 9.7 Rest art Screen System restart allows you to reboot the ZyAIR[...]

SMT Configuration V Part V: SMT CONFIGURATION This part cont ains SMT (System Manage ment T erminal) configuration and background information for features only configurable by SMT . See the web configurator p arts of this guide for background information on features configurable by web configurator a nd SMT .[...]

[...]

ZyAIR B-500 Wireless Access Point User’s Guide Introducing the SMT 10-1 Chapter 10 Introducing the SMT This chapter describes how to access the SMT and provides an overview of its menus . 10.1 Connect to your Zy AIR Using T elnet The following proced ure details how to telnet into your ZyAIR. Step 1. In Windows, click St art (usually in the botto[...]

ZyAIR B-500 Wireless Access Point User’s Guide 10-2 Introducing the SMT Figure 10-2 Menu 23.1 Sy stem Securit y : Change Pass word Step 4. Type your ne w system passw ord in the New Password field (up to 30 characters), and press [ENTER] . Step 5. Re-type your new system password in th e Retype to confirm field for confirm ation and p ress [ENTER[...]

ZyAIR B-500 Wireless Access Point User’s Guide Introducing the SMT 10-3 ZyAI R B-5 00 Main Menu Menu 1 General Setup Men u 3 LAN Setup Menu 3.5 Wireless L AN Setu p Menu 3.2 TCP/IP Se tup Me nu 3 . 5.1 WLAN M AC Addr ess Fi lter Menu 3.5.2 Roaming Configuration Menu 14 Di al-i n User Set up Menu 14.1 Edi t Dial-i n User Menu 22 SNMP Configu ratio[...]

ZyAIR B-500 Wireless Access Point User’s Guide 10-4 Introducing the SMT 10.4 Navigating the SMT Interface The SMT (System Management Terminal) is the inte rface that you use t o configure you r ZyAIR. Several operations that you should be familiar with before you attempt to modify the configuration are listed in the table below. Table 10-1 Main M[...]

ZyAIR B-500 Wireless Access Point User’s Guide Introducing the SMT 10-5 Figure 10-4 ZyAIR B-500 SMT Main Menu 10.4.1 System Management T erminal Interface Summary Table 10-2 Main Menu Summary # MENU TITLE DESCRIPTION 1 General Setup Use this menu to set up your general information. 3 LAN Setup Use this menu to set up y our LAN and WLAN connection[...]

[...]

ZyAIR B-500 Wireless Access Point User’s Guide General Setup 11-1 Chapter 11 General Setup The chapter shows you the information on general setup. 11.1 General Setup Menu 1 – General Setup contains admini strative and syste m-relate d information (s hown next). The System Name fiel d is for iden tification purposes. It is recomm ended you type [...]

ZyAIR B-500 Wireless Access Point User’s Guide 11-2 General Setup Table 11-1 Menu 1 General Setup FIELD DESCRIPTION EXAMPLE System Name Choose a descriptive name fo r identification purp oses. This name can be up to 30 alphanumeric characters lon g. Spaces are not allowed, but dashes “-” and underscores "_" are acce pted. B-500 Doma[...]

ZyAIR B-500 Wireless Access Point User’s Guide LAN Setup 12-1 Chapter 12 LAN Setup This chapter shows you how to configure the LAN on your ZyAIR. . 12.1 LAN Setup This section describes how to configure the Ethern et using Menu 3 – LAN Setup . From the main menu, enter 3 to displ ay menu 3. Figure 12-1 Menu 3 LAN Setup 12.2 TCP/IP Ethernet Setu[...]

ZyAIR B-500 Wireless Access Point User’s Guide 12-2 LAN Setup Table 12-1 Menu 3.2 TCP/IP Setup FIELD DESCRIPTION EXAMPLE IP Address Assignment Press [SPACE BAR] and then [ENTER] to select Dynamic to have the ZyAIR obtain an IP address from a DHCP server. You must know the IP address assigned to the Z yAIR (by the DHCP server) to access the ZyAIR [...]

ZyAIR B-500 Wireless Access Point User’s Guide LAN Setup 12-3 Figure 12-3 Menu 3.5 Wireless LAN Setup The following table describes the fields in this menu. Table 12-2 Menu 3.5 Wireless LAN Setup FIELD DESCRIPTION EXMAPLE ESSID The ESSID (Extended Service Set IDentit y) identifies the AP to which the wireless stations associate. Wireless st ation[...]

ZyAIR B-500 Wireless Access Point User’s Guide 12-4 LAN Setup Table 12-2 Menu 3.5 Wireless LAN Setup FIELD DESCRIPTION EXMAPLE Default Key Enter the key number (1 to 4) in this field. Only one key can be enab led at any one time. This key must be the same on the ZyAIR and the wireless stations to communicate. 1 Key 1 to Key 4 The WEP keys are use[...]

ZyAIR B-500 Wireless Access Point User’s Guide LAN Setup 12-5 Table 12-2 Menu 3.5 Wireless LAN Setup FIELD DESCRIPTION EXMAPLE When you have compl eted this menu, press [ENTER] at the prompt “Press ENTER to confirm or ESC to cancel” to save your configuration or press [E SC] to cancel and go back to the prev ious screen. 12.3.1 Configuring MA[...]

ZyAIR B-500 Wireless Access Point User’s Guide 12-6 LAN Setup Figure 12-5 Menu 3.5.1 WLAN M AC Address Filter The following table describes the fields in this menu. Table 12-3 Menu 3.5.1 WLAN M AC Address Filter FIELD DESCRIPTION Active To enable MAC address filter ing, press [SPACE BAR] to select Yes and press [ENTER]. Filter Action Define the f[...]

ZyAIR B-500 Wireless Access Point User’s Guide LAN Setup 12-7 12.3.2 Configuring Roaming Enable the roaming featur e if you have two or more ZyAIRs on the same subnet. Follow th e steps below to allow roam ing on your ZyAIR. Step 1. From the main menu, en ter 3 to display Menu 3 – LAN Setup . Step 2. Enter 5 to display Menu 3.5 – Wireless LAN[...]

ZyAIR B-500 Wireless Access Point User’s Guide 12-8 LAN Setup Table 12-4 Menu 3.5.2 Roaming Confi guration FIELD DESCRIPTION Active Press [SPACE BAR] and then [ENTER] to select Yes to enable roaming on the ZyAIR if you have two or more ZyAIRs on the same subnet. Port # T ype the port number to communicate roaming informatio n between access point[...]

ZyAIR B-500 Wireless Access Point User’s Guide Dial-in User Setup 13-1 Chapter 13 Dial-in User Setup This chapter shows you how to create user accounts on the ZyAIR. 13.1 Dial-in User Setup By storing user profiles locally, your ZyAIR is able to authenticate wireless users without interacting with a network RAD IUS server. Follow the steps below [...]

ZyAIR B-500 Wireless Access Point User’s Guide 13-2 Dial-in User Setup Table 13-1 Menu 14.1- Edit Dial-in User FIELD DESCRIPTION User Name Enter a username up to 31 alphanumeric characters long for this user pro file. This field is case sensitive. Active Press [SPACE BAR] to select Yes and press [ENTER] to enable the user profile. Password Enter [...]

ZyAIR B-500 Wireless Access Point User’s Guide SNMP Configuration 14-1 Chapter 14 SNMP Configuration This chapter explains SNMP Configuration menu 22. 14.1 About SNMP Simple Netw ork Managem ent Protocol is a p rotocol use d for exchan ging management info rmation bet ween network de vices. SNMP is a mem b er of the TC P/IP protoc ol suite. Y our[...]

ZyAIR B-500 Wireless Access Point User’s Guide 14-2 SNMP Configuration An agent is a managem ent software m odule that resides i n a managed device (the Zy AIR). An age n t translates the local management information from the managed device into a form compatible with SNMP. The manager i s the console throug h which net work ad m inistrators perf[...]

ZyAIR B-500 Wireless Access Point User’s Guide SNMP Configuration 14-3 Figure 14-2 Menu 22 SNMP Configuration The following table d escribes the SNMP configuration parameters. Table 14-1 Menu 22 SNMP Configur ation FIELD DESCRIPTION EXAMPLE SNMP: Get Community Type the Get Community , which is the password for the incoming Get- and GetNext reques[...]

ZyAIR B-500 Wireless Access Point User’s Guide 14-4 SNMP Configuration Table 14-2 SNMP Traps TRAP # TRAP NAME DESCRIPTION 1 coldStart ( defined in RFC-121 5 ) A trap is sent after booting ( power on). 2 warmStart ( defined in RFC-1215 ) A trap is sent after booting (soft ware reboot). 3 linkUp ( defined in RF C-1215 ) A trap is sent when the port[...]

ZyAIR B-500 Wireless Access Point User’s Guide System Security 15-1 Chapter 15 System Security This chapter describes how to configure the system security on the ZyAIR. 15.1 System Security You can confi gure the system password, a n external RADIUS server a nd 802.1x in t his menu. 15.1.1 System Password Figure 15-1 Menu 23 Sy s tem Security You[...]

ZyAIR B-500 Wireless Access Point User’s Guide 15-2 System Security Figure 15-3 Menu 23.2 Sy stem Securit y : RADIUS Server The following table describes the fields in this menu. Table 15-1 Menu 23.2 Sy s tem Security : RADIUS Serv er FIELD DESCRIPTION EX AMPLE Authentication Server Active Press [SPACE BAR] to select Yes and press [ENTER] to enab[...]

ZyAIR B-500 Wireless Access Point User’s Guide System Security 15-3 Table 15-1 Menu 23.2 Sy s tem Security : RADIUS Serv er FIELD DESCRIPTION EX AMPLE Port The default port of the RADIUS server for accounting is 1813 . You need not change this value unl ess your network administrator instructs you to do so with additional information. 1813 Shared[...]

ZyAIR B-500 Wireless Access Point User’s Guide 15-4 System Security Figure 15-5 Menu 23.4 Sy stem Securit y : IEEE802.1x The following table describes the fields in this menu. Table 15-2 Menu 23.4 Sy stem Security : IEEE802.1x FIELD DESCRIPTION Wireless Port Control Press [SPACE BAR] and select a security mode for the wireless LAN access. Select [...]

ZyAIR B-500 Wireless Access Point User’s Guide System Security 15-5 Table 15-2 Menu 23.4 Sy stem Security : IEEE802.1x FIELD DESCRIPTION Idle Timeout The ZyAIR automatically disconn ects a wireless station from the wired network after a period of inactivity. The wireless station needs to enter the username a nd password again before acces s to th[...]

ZyAIR B-500 Wireless Access Point User’s Guide 15-6 System Security Table 15-2 Menu 23.4 Sy stem Security : IEEE802.1x FIELD DESCRIPTION Authentication Databases The authentication databas e cont ains wireless station login information. The local user database is the built-in databas e on the ZyAIR. The RADIUS is an external server. Use this fiel[...]

ZyAIR B-500 Wireless Access Point User’s Guide System Information and Diagnosis 16-1 Chapter 16 System Information and Diagnosis This chapter covers the information and diag nostic tools in SMT menus 24.1 to 24.4. 16.1 Overview These tools include updates on system status, port status, log and trace capabilities and upgrades for t h e system soft[...]

ZyAIR B-500 Wireless Access Point User’s Guide 16-2 System Information and Diagnosis The following ta ble describe s the fields present in Menu 24.1 – System Maintenance – Status which are read-only and meant fo r diagnosti c purposes . Figure 16-2 Menu 24.1 Sy stem Maintenance : Status The following table describes the fields presen t in thi[...]

ZyAIR B-500 Wireless Access Point User’s Guide System Information and Diagnosis 16-3 Table 16-1 Menu 24.1 Sy stem Maintenance : Status FIELD DESCRIPTION System Up Time This is the time the ZyAI R is up and running from the last reboot. 16.3 System Information To get to the System Information: Step 1. Enter 24 to display Menu 24 – System Maint e[...]

ZyAIR B-500 Wireless Access Point User’s Guide 16-4 System Information and Diagnosis The following table describes the fields in this menu. Table 16-2 Menu 24.2.1 Sy stem Maintenance : Information FIELD DESCRIPTION Name Displays the system name of your Z y AIR. This information can be changed in Menu 1 – General Setup . Routing Refers to the ro[...]

ZyAIR B-500 Wireless Access Point User’s Guide System Information and Diagnosis 16-5 16.4 Log and T race Your ZyAIR provides the error logs and trace records that are stored local ly. 16.4.1 Viewing Error Log The first place you should look for clues when som e thing goes wrong is th e error log. Follow the procedures to view the loc al error/tra[...]

ZyAIR B-500 Wireless Access Point User’s Guide 16-6 System Information and Diagnosis Figure 16-8 Menu 24.4 Sy stem Maintenance : Diagnostic Follow the procedure next to get to disp lay this menu: Step 1. From the main menu, type 24 to open Menu 24 – System Maintenance . Step 2. From this m enu, type 4. Diag nostic to open Menu 24. 4 – System [...]

ZyAIR B-500 Wireless Access Point User’s Guide Firmware and Configuraiton File Maintenance 17-1 Chapter 17 Firmware and Configuration File Maintenance This chapter tells you how to backup and restor e your configuration file as well as upload n ew firmware and configuration files using the SMT screens. 17.1 Filename Conventions The configu ration[...]

ZyAIR B-500 Wireless Access Point User’s Guide 17-2 Firmware and Configuraiton File Maintenance Table 17-1 Filename Conventions FILE TYPE INTERN AL NA ME EXTERNAL NA ME DESCRIPTION Configuration File Rom-0 *.rom This is the configuration fi lename on the ZyAIR. Uploading the rom-0 file replaces the entire ROM file system, including your Z yAIR co[...]

ZyAIR B-500 Wireless Access Point User’s Guide Firmware and Configuraiton File Maintenance 17-3 17.2.2 Using the FTP command from the DOS Prompt Step 1. Launch the FTP client on your c omputer. Step 2. Enter “open” and the IP addr ess of your ZyAIR. Step 3. Press [ENTER] when prom pted for a username. Step 4. Enter “root” and your SMT pas[...]

ZyAIR B-500 Wireless Access Point User’s Guide 17-4 Firmware and Configuraiton File Maintenance Table 17-2 General Commands for Third Party FTP Clients COMMAND DESCRIPTION Initial Remote Directory Specify the default remote director y (path). Initial Local Directory Specify the default local dir ectory (path). 17.2.3 Backup Confi guration Using T[...]

ZyAIR B-500 Wireless Access Point User’s Guide Firmware and Configuraiton File Maintenance 17-5 where “i” specifies binary image tra nsfer mode (use t his mode when transferring binary files), “host” is the ZyAIR IP address, “get” tra nsfers the file source on t he ZyAIR (rom-0 name of the configuration file on the ZyAIR) to the file [...]

ZyAIR B-500 Wireless Access Point User’s Guide 17-6 Firmware and Configuraiton File Maintenance Figure 17-3 Menu 24.6 Restore Co nfiguration 17.4 Uploading Firmware and Configuration Files Menu 24.7 – System Main tenance – Upload Firmware allows y ou to upgrade t he firmware an d the configuration file. WA R N I N G ! PLEASE W AIT A FEW MI NU[...]

ZyAIR B-500 Wireless Access Point User’s Guide Firmware and Configuraiton File Maintenance 17-7 17.4.1 Firmware Upload FTP is the pre ferred me thod for uploa d ing the firm ware and configuration. To use this feat ure, your computer m u st have an F TP client. When you telnet into the ZyAIR, you will see the following screens for uploading firmw[...]

ZyAIR B-500 Wireless Access Point User’s Guide 17-8 Firmware and Configuraiton File Maintenance Figure 17-6 Menu 24.7.2 Sy stem Maintenance : Upload System Configurati on File To transfer the firm ware and the conf iguration file, follow these examples: 17.4.3 Using the FTP command fr om the DOS Prompt Example Step 1. Launch the FTP client on you[...]

ZyAIR B-500 Wireless Access Point User’s Guide Firmware and Configuraiton File Maintenance 17-9 Figure 17-7 FTP Session Example More commands that you may find in third par ty FTP clients, are listed earlier in this chapter. 17.4.4 TFTP File Upload The ZyAIR also supports the up/downlo ading of the firmware and the configuration file using TFTP ([...]

ZyAIR B-500 Wireless Access Point User’s Guide 17-10 Firmware and Configuraiton File Maintenance 17.4.5 Example: TFTP Command The following is an exam ple TFTP command: TFTP [-i] host put firmware.bin ras where “i” specifies binary image tra nsfer mode (use t his mode when transferring binary files), “host” is the ZyAIR’s IP address, ?[...]

ZyAIR B-500 Wireless Access Point User’s Guide System Maintenance and Information 18-1 Chapter 18 System Maintenance and Information This chapter leads yo u through SMT menus 24.8 and 24.10. 18.1 Command Interpreter Mode The Command I nterpreter (CI) is a part o f the main system firmware. The CI provides much of t h e same functionality as the S[...]

ZyAIR B-500 Wireless Access Point User’s Guide 18-2 System Maintenance and Information 18.2 T ime and Date Setting The ZyAIR keeps track of the time and date. There is also a software mechanism to set the time manually or get the current time and dat e from an external serv er when you turn on your ZyAIR. Menu 24.10 allow s you to updat e the tim[...]

ZyAIR B-500 Wireless Access Point User’s Guide System Maintenance and Information 18-3 Table 18-1 Menu 24.10 System Main tenance : Time and Date Setting FIELD DESCRIPTION Time Protocol Enter the time service protocol t hat your time server sends whe n you turn on the ZyAIR. Not all time servers support all protoc ols, so you ma y have to check wi[...]

ZyAIR B-500 Wireless Access Point User’s Guide 18-4 System Maintenance and Information i. On leaving m enu 24.10 a fter making chan ges. ii. When the ZyAIR starts up, if there is a time server configured in menu 24.10. iii. 24-h our intervals after starting.[...]

Appendices VI Part VI: APPENDICES This part prov ides troubleshooting and backgroun d information about setting up your compute r ’s IP addre ss, wireless LAN, 802.1x and IP subnetting. It also provides information on the command interpreter interface and logs.[...]

[...]

ZyAIR B-500 Wireless Access Point User’s Guide T roubles hooting A-1 Appendix A Troubleshooting This appendix covers potential problems and possibl e remedies. After each problem description, some instructions are provided to help you to diagnose and to solve the problem. Problems S t arting Up the ZyAIR Chart A-1 Troubleshooti ng the Start-Up of[...]

ZyAIR B-500 Wireless Access Point User’s Guide A-2 T roubles hooting Chart A-2 Troubleshooti ng the Ethernet Interfa ce PROBLEM CORRECTIVE ACTION I cannot ping any computer on the LAN. If the ETHN LED on the front panel is off, c heck the Ethernet cable connections between your Z yAIR and the Ethernet device. Check the Ethernet cable connections [...]

ZyAIR B-500 Wireless Access Point User’s Guide T roubles hooting A-3 Problems with the WLAN Interface Chart A-5 Troubleshooti ng the WLAN Interface PROBLEM CORRECTIVE ACTION Cannot access the ZyAIR from the WLAN. Make sure the wireless adapter on the wireless station is working properly. Check that both the ZyAIR and your wire less station are us[...]

[...]

ZyAIR B-500 Wireless Access Point User’s Guide Brute-Force Passw ord Guessing Protection B-1 Appendix B Brute-Force Password Guessing Protection The followin g describes the c ommands for enabling, disabling and con figuring t he brute-f orce password guessing prote ction mechanism for the password. See the Com mand Interpreter a ppendix for in f[...]

[...]

ZyAIR B-500 Wireless Access Point User’s Guide Setting Up Y our Computer ’s IP Address C-1 Appendix C Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethe rnet adapter card and TCP/IP installed. Windows 95/ 98/Me/NT/2 000/XP, Maci ntosh OS 7 a nd later operating sy stems and all versio ns of UNIX/LINU X include the[...]

ZyAIR B-500 Wireless Access Point User’s Guide C-2 Setting Up Your Computer’s IP Address If yo u need th e adap ter: a. In the Network window, click Add . b. Select Ad a p t er and then click Ad d . c. Select the manufacturer and model of your network adapter and then click OK . If you need TCP/IP: a. In the Network window, click Add . b. Selec[...]

ZyAIR B-500 Wireless Access Point User’s Guide Setting Up Y our Computer ’s IP Address C-3 1. Click the IP Address tab. -If your IP address is dynamic, select Obtain an IP address automatically . -If you have a static IP address, select Specify an IP address and type your informatio n into the IP Address and Subne t Mask fields. 2. Click the DN[...]

ZyAIR B-500 Wireless Access Point User’s Guide C-4 Setting Up Your Computer’s IP Address 3. Click the Gateway tab. -If you do not know your gateway’s IP address, remove previously installed gate ways. -If you have a gateway IP address, type it in the Ne w gat ewa y f iel d and click Add . 4. Click OK to save and close the TCP/IP Properties wi[...]

ZyAIR B-500 Wireless Access Point User’s Guide Setting Up Y our Computer ’s IP Address C-5 1. For Windows XP, click start , Control Panel . In Windows 2000/NT, click Start , Settings , Control Panel . 2. For Windows XP, click Network Connections . For Windows 2000/NT, click Network and Dial-up Connections . 3. Right-click Local A rea Connection[...]

ZyAIR B-500 Wireless Access Point User’s Guide C-6 Setting Up Your Computer’s IP Address 4. Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties . 5. The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). -If you have a dynamic IP address click Obtain an IP address automatically[...]

ZyAIR B-500 Wireless Access Point User’s Guide Setting Up Y our Computer ’s IP Address C-7 6. -If you do not kno w your gateway's IP address, remove any previously installed gate ways in the IP Settin gs tab and click OK . Do one or more of the following if you want to configure additional IP addres ses: -In the IP Settings tab, in IP addr[...]

ZyAIR B-500 Wireless Access Point User’s Guide C-8 Setting Up Your Computer’s IP Address 7. In the Internet Protocol TCP/IP Properties window (the Gene ral t ab in Windows XP): -Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). -If you know your DNS server IP address(es), click Use the follow ing D[...]

ZyAIR B-500 Wireless Access Point User’s Guide Setting Up Y our Computer ’s IP Address C-9 1. Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel . 2. Select Ethernet built-in from the Connect v i a list. 3. For d ynamically assigned settings, sel ect Using DHCP Server from the Configure: list.[...]

ZyAIR B-500 Wireless Access Point User’s Guide C-10 Setting Up Your Computer’s IP Addres s 4. For staticall y assigned settings, do the following: -From the Configure box, select Manually . -Type your IP address in the IP Address box. -Type your subnet mask in the Subnet mask box. -Type the IP address of your ZyAIR in the Router address box. 5.[...]

ZyAIR B-500 Wireless Access Point User’s Guide Setting Up Y our Computer ’s IP Address C-1 1 2. Click Network in the icon bar. - Select Automatic from the Location list. - Select Built-in Ethernet from the Show list. - Click the TCP/IP tab. 3. For dynamically assigned settings, select Using DHCP from the Configure list. 4. For statically assign[...]

[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless LAN and IEEE 802.11 D-1 Appendix D Wireless LAN and IEEE 802.11 A wireless LAN (WLA N) provides a flexi ble data co mmunications system that you can use to access various services (navi g ating the Internet, email, printer services, etc.) without the use of a cabled connection. In effect a w[...]

ZyAIR B-500 Wireless Access Point User’s Guide D-2 Wireless LAN and IEEE 802 .11 unlicensed ISM (Industrial, Scientific and Medical) ba nd. The th ird method is infrared technology, using very high fre quencies, just below vi sible light in t he electromagnetic spectrum to carry data. Ad-hoc Wireless LAN Configuration The simplest WL AN configura[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless LAN and IEEE 802.11 D-3 The Extended Service Set (ESS) shown in the next figure consists of a series of overlapping BSSs (each containing an Access Point) connected together by means of a Distribution System (DS). Although the DS could be any type of net work, it is almost invari ably an Eth[...]

[...]

ZyAIR B-500 Wireless Access Point User’s Guide Wireless LAN with IEEE 802.1x E-1 Appendix E Wireless LAN With IEEE 802.1x As wireless networks becom e popular for both portable com puting and c orporate networks, securit y is now a priority. Security Flaws with IEEE 802.1 1 Wireless networks based on the o riginal IEEE 802 .11 have a poor reputat[...]

ZyAIR B-500 Wireless Access Point User’s Guide E-2 Wireless LAN with IEEE 80 2.1x RADIUS Server Authentication Seque nce The following figure depicts a ty pical wirele ss network wi th a re mote RADIUS server for user authentication using EA POL (E AP Ov er LAN) . Diagram E-1 Sequences for EAP MD5–Challenge Authentication Client computer access[...]

ZyAIR B-500 Wireless Access Point User’s Guide Types of EAP Authentication F-1 Appendix F Types of EAP Authentication This appendix discusses th e five popular EAP authentication type s: EAP-M D5 , EAP-TLS , EAP-TTLS , PEAP and LEAP . The ty pe of authe ntication you use depends on the RADIUS server. Consult your network adm inistrator for mor e [...]

ZyAIR B-500 Wireless Access Point User’s Guide F-2 Types of EAP Authentication and EAP-GTC ( EAP-Gener ic Token Card), for client auth entication. EAP-GTC is implemented only by Cisco. LEAP LEAP (Ligh tweight Extensible Auth entication Pro t ocol) is a Cisco implement ation of I EEE802.1 x . For added sec urity , certificate-based authenticat ion[...]

ZyAIR B-500 Wireless Access Point User’s Guide IP Subnetting G-1 Appendix G IP Subnetting IP Addressing Routers “route” base d on the network num ber. The rout er that delivers the data packet to the correct destination hos t uses the host ID. IP Classes An IP address is made up of four octets (ei ght bits), written in dotted deci mal notatio[...]

ZyAIR B-500 Wireless Access Point User’s Guide G-2 IP Subnetting A class “A” address (24 host bits) can have 2 24 –2 hosts (app roximately 16 m illion hosts). Since the first octet of a class “A” IP addre ss must c ontain a “0”, the first octet of a class “A” ad dress can have a value of 0 to 12 7. Similarly the first octet of a[...]

ZyAIR B-500 Wireless Access Point User’s Guide IP Subnetting G-3 sequence of ones beginning from the left most bit of the mask, followed by a contin uous sequence of zeros, for a total number of 32 bits. Since the m ask is always a c ontinuous n umber of ones beginning from the le ft, followe d by a contin uous number of zer os for the rem ainder[...]

ZyAIR B-500 Wireless Access Point User’s Guide G-4 IP Subnetting Divide the network 19 2.168.1.0 i nto two se parate subnets by converting one o f the host ID bits of the IP address to a networ k number bit. The “bor rowed” host ID bit can be either “0” or “1” thus giving two subnets; 192.168.1.0 with mask 255 .255.255.128 and 19 2.16[...]

ZyAIR B-500 Wireless Access Point User’s Guide IP Subnetting G-5 to an actual host for the first su bnet is 192.168.1.1 an d the highest is 192.168.1.126. Similarly th e host ID range for the second subnet is 19 2.168.1.129 to 192.1 68.1.254 . Example: Four Subnet s The above exam ple illustrated using a 25-bit subnet mask to divide a class “C?[...]

ZyAIR B-500 Wireless Access Point User’s Guide G-6 IP Subnetting Chart G-9 Subnet 3 NETWORK NUMBER LA ST OCTET BIT V ALUE Subnet Mask (Binary) 11111111.11111111.1 1111111. 11 0 00000 Subnet Address: 192. 168.1.128 Lo west Ho st ID: 192.168.1.129 Broadcast Address: 192.168. 1.191 Hig hest Host ID: 192.168.1.190 Chart G-10 Subnet 4 NETWORK NUMBER L[...]

ZyAIR B-500 Wireless Access Point User’s Guide IP Subnetting G-7 The following table is a summary for class “C” subnet planning . Chart G-12 Class C Subnet Planning NO. “BORROWED” HOST BITS SUBNET M ASK NO. SUBNETS NO. HOSTS PER SUBNET 1 255.255.255.128 (/25) 2 126 2 255.255.255.192 (/26) 4 62 3 255.255.255.224 (/27) 8 30 4 255.255.255.24[...]

ZyAIR B-500 Wireless Access Point User’s Guide G-8 IP Subnetting Chart G-13 Class B Subnet Planning NO. “BORROWED” HOST BITS SUBNET MASK NO. SUBNETS NO. HOSTS PER SUBNET 9 255.255.255.128 (/25) 512 126 10 255.255.255.192 (/26) 1024 62 11 255.255.255.224 (/27) 2048 30 12 255.255.255.240 (/28) 4096 14 13 255.255.255.248 (/29) 8192 6 14 255.255.[...]

ZyAIR B-500 Wireless Access Point User’s Guide Command Interpreter H-1 Appendix H Command Interpreter The following describes how to use the command interpreter. Enter 24 in the main menu to bring up the system m a intenance m enu. Enter 8 to go to Menu 24.8 - Comm and Interpreter Mode . See the included disk or www.z yxel.com for more deta iled [...]

[...]

ZyAIR B-500 Wireless Access Point User’s Guide Log Description I-1 Appendix I Log Descriptions Chart I-1 System Maintenance Log s LOG MESSAGE DESCRIPTION Time calibration is successful The ZyAIR has adjusted its time based on information from the time server. Time calibration failed The ZyAIR failed to get information from the time server. DHCP c[...]

ZyAIR B-500 Wireless Access Point User’s Guide I-2 Lo g Descriptions Chart I-2 ICMP Notes TYPE CODE DESCRIPTION 0 Echo Reply 0 Echo reply message 3 Destination Unreachabl e 0 Net unreachable 1 Host unrea chable 2 Protocol unreachable 3 Port unreachable 4 A packet that needed fragmentation was dropped because it was set to Don't Fragment (DF)[...]

ZyAIR B-500 Wireless Access Point User’s Guide Log Description I-3 Chart I-2 ICMP Notes TYPE CODE DESCRIPTION 13 Timestamp 0 Timestamp request message 14 Timestamp Reply 0 Timestamp reply message 15 Information Request 0 Information request message 16 Information Reply 0 Information reply message Chart I-3 Sys log LOG MESSAGE DESCRIPTION Mon dd h[...]

ZyAIR B-500 Wireless Access Point User’s Guide I-4 Lo g Descriptions Chart I-4 Log Categories and Av ailable Settings LOG CATEGORIES AVAILABLE PA R AMETERS 8021x 0, 1 access 0, 1, 2, 3 error 0, 1, 2, 3 icmp 0, 1 mten 0, 1 packetfilter 0, 1 remote 0, 1 tcpreset 0, 1 Use 0 to not record logs for that category, 1 to record onl y logs for that catego[...]

ZyAIR B-500 Wireless Access Point User’s Guide Log Description I-5 # .time source destination notes message 0|11/11/2002 15:10:12 |172.22.3.80:137 |172.22.255.255:137 |ACCESS BLOCK[...]

[...]

ZyAIR B-500 Wireless Access Point User’s Guide Index J-1 Appendix J Index 8 802.1x Overvi ew ................................................... 6-14 A Address Assi gnment ................................................ 3-6 Ad-hoc Config uration............................................. D-2 Alternative Subnet Ma sk Notati on .................[...]

ZyAIR B-500 Wireless Access Point User’s Guide J-2 Index G General Setup ......................................... 3-2, 4-1, 11-1 H Hidden Me nus........................................................ 10-4 Host .........................................................................4-3 Host IDs ..................................................[...]

ZyAIR B-500 Wireless Access Point User’s Guide Index J-3 Community ....................................................... 14-3 Configura tion .................................................... 14-2 Get .................................................................... 14-2 GetNext .............................................................[...]