ZyXEL NWA5121-N manual

Quick Start Guide www .zyxel.com NWA5120 Series 802.11 a/b/g/n Unified Access P oint V e rsion 2.25 Edition 1, 01/2013 Copyright © 2013 Z yXEL Communications Corpor ation User’s Guide Default Login Details LAN IP Address http://192.168.1.2 User Name admin P assword 1234[...]

NWA1120 Series U ser’s Guide 2 IMPORT ANT! READ CAREFULL Y BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. This is a User’s Gu ide for a series of products. Not all products support all firmware features. Screenshots and graphics in this book may differ sl ightly from your product due to differences in your product firmware o r your computer [...]

Contents Overview NWA5120 Series User’ s Guide 3 Contents Overview User ’ s Guide .............................................................................. .................................... ..................... 1 1 Introduction ........... ............. ................ ................ ................. ............. ................ [...]

Contents Overview NWA5120 Series U ser’s Guide 4[...]

Table of Contents NWA5120 Series User’ s Guide 5 Table of Contents Contents Overview ......................... ..................................................... ............................... ................. 3 Table of Contents ................................................. ..................................................... .........[...]

Table of Contents NWA5120 Series U ser’s Guide 6 3.2.2 Memory Usage ....................... ................ ............. ................ ................ ................ ........ ............ 37 Chapter 4 Monitor ................................................................... ..................................................... .........[...]

Table of Contents NWA5120 Series User’ s Guide 7 Chapter 8 AP Profile ............................................................... ...................................................... ........................ 73 8.1 Overview ................ ................ ............. ................ ................ ................ ............. .....[...]

Table of Contents NWA5120 Series U ser’s Guide 8 1 1.3.2 Time Server Synchroniza tion ............ ................. ................ ................ ............. ................ .. ... 1 16 1 1.4 WWW Overview ............................. ............ ................. ................ ................ ................ ... ............... 1 1[...]

Table of Contents NWA5120 Series User’ s Guide 9 Chapter 14 Diagnostics ................................................. ..................................................... .............. ................... 163 14.1 Overview ....... ................ ................. ................ ............. ................ ................ ...........[...]

Table of Contents NWA5120 Series U ser’s Guide 10[...]

11 P ART I User ’ s Guide[...]

12[...]

NWA5120 Series User’ s Guide 13 C HAPTER 1 Introduction 1.1 Overview This User’s Guide covers the following models: NW A5121 -N, NWA5121-NI, and NW A5123-NI. Y our NW A is a wireless AP (Access Point). It extends th e r ange of your existing wired network without additional wiring, providing easy network access to mobile users. Y our NWA’ s b[...]

Chapter 1 Introductio n NWA5120 Series U ser’s Guide 14 1.1.1 MBSSID A Basic Service Set (BSS) is the set of devices fo rming a single wireless network (usually an access point and one or more wireless clients). The Service Set IDentifier (SSID) is the name of a BSS. In Multiple BSS (MBSSID) mode, the NW A provides mult iple virtual APs, each for[...]

Chapter 1 Introduction NWA5120 Series User’ s Guide 15 Note: A different channel should be configured for each WLAN interface to reduce the effects of r adio interference. Y ou could use the 2.4 GHz band for regular Intern et surfing and downloading while using the 5 GHz band for time sensitive traffic like high-definition video, music, and gamin[...]

Chapter 1 Introductio n NWA5120 Series U ser’s Guide 16 Web Configurator The W eb Configurator allows easy NW A setup and management using an Internet browser . This User’s Guide provides informat ion about the W eb Configurator . Command-Line Interface (CLI) The CLI allows you to use text -based commands to configure the NW A. Y ou can access [...]

Chapter 1 Introduction NWA5120 Series User’ s Guide 17 1.5 LEDs The following are the LED descriptions for your NWA. Figure 3 LED 1.6 S t arting and Stopping the NW A Here are some of the wa ys to start and stop the NW A. T a ble 3 LED COLOR ST ATUS DESCRIPTION Amber On There is system error and the NW A ca nnot boot up, or the NWA doesn’t have[...]

Chapter 1 Introductio n NWA5120 Series U ser’s Guide 18 Always use Maintenance > Shut down or the shutdown command before you turn off the NW A or remove the power . Not doing so can cause the firmware to become corrupt. The NWA does not stop or start the system processes when you apply configuration files or run shell scripts although you may[...]

NWA5120 Series User’ s Guide 19 C HAPTER 2 The Web Configurator 2.1 Overview The NWA W eb Configur ator allows easy management using an Internet browser . In order to use the W eb Configurator , you must: • Use Internet Explorer 7.0 and later or Firefox 1.5 and later • Allow pop-up windows • Enable JavaScript (enabled by default) • Enable[...]

Chapter 2 The Web Configurator NWA5120 Series U ser’s Guide 20 4 Click Login . If you logged in using the default user name and password, the Update Admin Info screen appears. Otherwise, the dashboard appears. The Update Admin Info screen appears every time you log in using the default user name and default password. If you change th e password f[...]

Chapter 2 The Web Configurator NWA5120 Series User’ s Guide 21 2.3 Navigating the W eb Configurator The following summarizes how to navigate the web configur ator from the Dashboard screen. This guide uses the NWA5123-NI screens as an exampl e. Th e screens may v ary slightly for different models. Figure 4 The W e b Configurator’ s Main Screen [...]

Chapter 2 The Web Configurator NWA5120 Series U ser’s Guide 22 The icons provide the following functions. About Click About to display basic information about the NWA. Figure 6 About The following table describes labels that can appear in this screen. T a ble 5 Title Bar: Web Configurator Icons LABEL DESCRIPTION Logout Click this to log out of th[...]

Chapter 2 The Web Configurator NWA5120 Series User’ s Guide 23 Site Map Click Site MAP to see an overview of links to the W eb Configurator screens. Click a screen’ s link to go to that screen. Figure 7 Site Map Object Reference Click Object Refe rence to open the Object Reference screen. Select the type of object and the individual object and [...]

Chapter 2 The Web Configurator NWA5120 Series U ser’s Guide 24 The fields vary with the type of object. The followi ng table des cribes labels that can appear in this screen. CLI Messages Click CLI to look at the CLI commands sent by the W eb Configur ator . These commands appear in a popup window , such as the following. Figure 9 CLI Messages Cl[...]

Chapter 2 The Web Configurator NWA5120 Series User’ s Guide 25 drag it to resize them. The following sections introduce the NWA’ s navigation panel menus and their screens. Figure 10 Navigation Panel Dashboard The dashboard displays gene ral device informatio n, system status, system resource usage, and interface status in widgets that you can [...]

Chapter 2 The Web Configurator NWA5120 Series U ser’s Guide 26 Maintenance Menu Use the maintenance menu screens to manage configur ation and firmware files, run diagnostics, and reboot or shut down the NW A. MON Mode Configure how the NWA monitors for rogue APs. Load Balancing Configure load balancing for tr affi c moving to and from wirel ess c[...]

Chapter 2 The Web Configurator NWA5120 Series User’ s Guide 27 2.3.3 W arning Messages W arning messages, such as those resulting from misconfiguration, displa y in a popup window . Figure 1 1 W arning Message 2.3.4 T ables and Lists The W eb Configurator tables and lists are quite flexible and provide several options for how to display their ent[...]

Chapter 2 The Web Configurator NWA5120 Series U ser’s Guide 28 • Filter by mathematical operators (<, >, or =) or searching for text. 3 Select a column heading cell’s right bo rder and drag to re-size the column. 4 Select a column heading and drag an d drop it to change the column order . A green check mark displays next to the column?[...]

Chapter 2 The Web Configurator NWA5120 Series User’ s Guide 29 2.3.4.2 Working wi th T able Entries The tables have icons for working with table entries. A sample is shown next. Y ou can often use the [Shift] or [Ctrl] key to select multiple entries to remove, activ ate, or deactivate. Ta b l e 11 Common Table Icons Here are descriptions for the [...]

Chapter 2 The Web Configurator NWA5120 Series U ser’s Guide 30[...]

31 P ART II T echnical Reference[...]

32[...]

NWA5120 Series User’ s Guide 33 C HAPTER 3 Dashboard 3.1 Overview Use the Dashboard screens to check status information about the NW A. 3.1.1 What Y o u Can Do in this Chapter •T h e m a i n Dashboard screen ( Section 3.2 on page 33 ) displays the NW A ’ s general device information, system status, system resource usage, and interface status.[...]

Chapter 3 Dashboa rd NWA5120 Series U ser’s Guide 34 The following table describes the labels in this screen. T a ble 13 Dashboard LABEL DESCRIPTION Widget Settings (A) Use this link t o re-open closed widgets. Widgets that are al ready open appear grayed out. Up Arrow (B) Click this to collapse a widget. Refresh Time Setting ( C) Set the interva[...]

Chapter 3 Dashboard NWA5120 Series User’ s Guide 35 Boot Status This field displays de tails about the NWA’ s startup state. OK - The NWA started up successfully . Firmware update OK - A firmware update was successful . Problematic configuratio n after firmware update - The application of the configurati on failed after a firmware upgrade. Syst[...]

Chapter 3 Dashboa rd NWA5120 Series U ser’s Guide 36 3.2.1 CPU Usage Use this screen to look at a chart of the NW A’s recent CPU usage. T o access this screen, click CPU Usage in the dashboard. Figure 14 Dashboard > CPU Usage The following table describes the labels in this screen. Band This indicates the wireless fre quency band currently b[...]

Chapter 3 Dashboard NWA5120 Series User’ s Guide 37 3.2.2 Memory Usage Use this screen to look at a chart of the NW A’s re cent memory (RAM) usage. T o access this screen, click Memory Usage in the dashboard. Figure 15 Dashboard > Memory Usage The following table describes the labels in this screen. T a ble 15 Dashboard > Memory Usage LAB[...]

Chapter 3 Dashboa rd NWA5120 Series U ser’s Guide 38[...]

NWA5120 Series User’ s Guide 39 C HAPTER 4 Monitor 4.1 Overview Use the Monitor screens to check status and statistics information. 4.1.1 What Y o u Can Do in this Chapter •T h e LAN Status screen ( Section 4.3 on page 40 ) displays general LAN interface information and packet statistics. •T h e LAN Status Graph screen ( Section 4. 3.1 on pag[...]

Chapter 4 Mon itor NWA5120 Series U ser’s Guide 40 4.3 LAN S t atus Use this screen to look at general LAN interface information and packet statistics. T o access this screen, click Monitor > LAN Status . Figure 16 Monitor > LAN Status The following table describes the labels in this screen. T a ble 16 Monitor > LAN Status LABEL DESCRIPT[...]

Chapter 4 Monitor NWA5120 Series User’ s Guide 41 Action Use this field to get or to upda te the IP address for the i nterface. Click Renew to send a new DHCP request to a DHCP server . If the in terface cannot use one of thes e ways to get or to update its IP addr ess, this field displays n/a . Port S ta ti st ic s Ta b l e Switc h to Gra phic V[...]

Chapter 4 Mon itor NWA5120 Series U ser’s Guide 42 4.3.1 LAN St atus Graph Use the port statistics graph to loo k at a line graph of pack et statistics for the NWA’ s physical LAN port. T o view , in the LAN Status screen click the Switch to Graphic View button. Figure 17 Monitor > LAN Status > Switch to Gr aphic View The following table [...]

Chapter 4 Monitor NWA5120 Series User’ s Guide 43 4.4 Radio List Use this screen to view statistics for the NW A’ s wireless radio tr ansmitters. T o access this screen, click Monitor > Wireless > AP Information > Radio List . Figure 18 Monitor > Wireless > AP Information > Radio List The following table describes the labels i[...]

Chapter 4 Mon itor NWA5120 Series U ser’s Guide 44 4.4.1 AP Mode Radio Information This screen allows you to view a selected radio’ s SSID details, wireless traffic statistics and station count for the preceding 24 hours. T o access this window , select a radio and click the More Information button in the Radio List screen. Figure 19 Monitor &g[...]

Chapter 4 Monitor NWA5120 Series User’ s Guide 45 The following table describes the labels in this screen. 4.5 S t ation List Use this screen to view statistics pertaining to the associated stations (or “wireless clients”). Click Monitor > Wireless > Stati on Info to access this screen. Figure 20 Monitor > Wireless > Station Info [...]

Chapter 4 Mon itor NWA5120 Series U ser’s Guide 46 The following table describes the labels in this screen. 4.6 Rogue AP Use this screen to view informatio n about suspected rogue APs. Click Monitor > Wireless > Rogue AP > Detected Device to access this screen. Note: The radio or at least one of the NWA’ s radio must be set to monitor [...]

Chapter 4 Monitor NWA5120 Series User’ s Guide 47 4.7 V iew Log Log messages are stored in two separate logs, one for regular log message s and one for debugging messages. In the regular log, you can look at all the log messages by se lecting All Logs , or you can select a specific category of log messages (for ex ample, user). Y ou can also look[...]

Chapter 4 Mon itor NWA5120 Series U ser’s Guide 48 Events that gener ate an alert (as well as a log message) display in red. R egular logs display in black. Click a column’ s heading cell to sort the ta ble entries by that column’ s criteria . Click the heading cell again to reverse the sort order . Figure 22 Monitor > Log > View Log Th[...]

Chapter 4 Monitor NWA5120 Series User’ s Guide 49 The W eb Configurator saves the filter settings if y ou leave the View Log screen and return to it later . Destinat ion Address This displays when you show the filt er . T ype the IP address of the desti nation of the incoming packet wh en the log m essage was generated. Do n ot includ e the port [...]

Chapter 4 Mon itor NWA5120 Series U ser’s Guide 50[...]

NWA5120 Series User’ s Guide 51 C HAPTER 5 LAN Setting 5.1 Overview This chapter describes how you can configur e the management IP address of your NW A. The Internet Protocol (IP) address identifies a device on a network. Ev ery networking device (including computers, servers, routers, printers , etc.) needs an IP address to communicate across t[...]

Chapter 5 LAN Setting NWA5120 Series U ser’s Guide 52 5.2 LAN Setting Use this screen to configure the IP address for your NW A. T o access this screen, click Configuration > LAN Setting . Figure 24 Configuration > LAN Setting Each field is described in the following table. T a ble 23 Configuration > LAN Setting LABEL DESCRIPTION IP Addr[...]

NWA5120 Series User’ s Guide 53 C HAPTER 6 Wireless 6.1 Overview This chapter discusses how to configure the wireless network settings in your NW A. The following figure provides an example of a wireless network. Figure 25 Example of a Wireless Network The wireless network is the part in the blue circle. In this wireless network, devices A and B [...]

Chapter 6 Wireless NWA5120 Series U ser’s Guide 54 6.1.2 What Y ou Need to Know The following terms and concepts may help as you read this chapter . St ation / Wireless Client A station or wireless client is any wireless-capable de vice that can connect to an AP using a wireless signal. Dynamic Channel Selection (DCS) Dynamic Channel Selection (D[...]

Chapter 6 Wireless NWA5120 Series User’ s Guide 55 Each field is described in the following table. 6.3 MON Mode Use this screen to assign APs either to the rogue AP list or the friendly AP list. A rogue AP is a wireless access point operating in a network’ s coverage area that is not under the control of the network administrator , and which ca[...]

Chapter 6 Wireless NWA5120 Series U ser’s Guide 56 Click Configuration > Wireless > MON Mode to access this screen. Figure 27 Configuration > Wireless > MON Mode Each field is described in the following table. T a ble 25 Configuration > W ireless > M ON Mode LABEL DESCRIPTION Rogue/Friendly AP List Add Click this button to add a[...]

Chapter 6 Wireless NWA5120 Series User’ s Guide 57 6.3.1 Add/Edit Rogue/Friendly List Click Add or sele ct an AP and click the Edit button in the Configuration > Wireless > MON Mode table to display this screen. Figure 28 Configuration > Wireless > MON Mode > Add/Edit R ogue/Friendly AP List Each field is described in the following[...]

Chapter 6 Wireless NWA5120 Series U ser’s Guide 58 Each field is described in the following table. 6.4.1 Disassociating an d Delaying Connections When your AP becomes overloaded, there are two ba sic responses it can take. The first one is to “delay” a client connection. This means that the AP withholds the connection until the data transfer [...]

Chapter 6 Wireless NWA5120 Series User’ s Guide 59 until it can afford the bandwidth or the laptop is picked up by a different AP with bandwidth to spare. Figure 30 Delaying a Connection The second response your AP can take is to kick the connections that are pushing it ov er its balanced bandwidth allotment. Figure 31 Kicking a Connection Connec[...]

Chapter 6 Wireless NWA5120 Series U ser’s Guide 60 6.5 DCS Use this screen to configure dynamic radio channel selection. Click Configuration > Wireless > DCS to access this screen. Figure 32 Configuration > Wireless > DCS Each field is described in the following table. T a ble 28 Configuration > Wireles s > DCS LABEL DESCRIPTION[...]

Chapter 6 Wireless NWA5120 Series User’ s Guide 61 DCS Sensitivity Level Select the AP’ s sensitivity lev el toward other c hannels. Options are High , Medium , and Low . G e n e ra l l y , a s l on g a s t h e a r e a i n w h ic h y o u r A P i s l oc a t e d h as mi n i m a l in te r f e r en ce fr o m other device s you can set t he DCS Sens[...]

Chapter 6 Wireless NWA5120 Series U ser’s Guide 62 6.6 T echnical Reference The following section contains additional technical information about the features described in this chapter . Dynamic Channel Selection When numerous APs broadcast within a given area , they introduce the possibilit y of heightened radio interference, especially if some [...]

Chapter 6 Wireless NWA5120 Series User’ s Guide 63 Finally , there is an alternative four channel scheme fo r ETSI, consisting of channels 1, 5, 9, 13. This offers significantly less overlap that the other o ne. Figure 35 An Alternative Four -Channel Deployment Load Balancing Because there is a hard upper limit on an AP’ s wi reless bandwidth, [...]

Chapter 6 Wireless NWA5120 Series U ser’s Guide 64[...]

NWA5120 Series User’ s Guide 65 C HAPTER 7 User 7.1 Overview This chapter describes how to set up user accounts and user settings for the NWA. 7.1.1 What Y o u Can Do in this Chapter •T h e User screen (see Section 7.2 on page 66 ) provides a summary of all user accounts. •T h e Setting screen (see Section 7.3 on page 68 ) controls default se[...]

Chapter 7 User NWA5120 Series U ser’s Guide 66 7.2 User Summary The User screen provides a summary of all user accounts. T o access this screen click Configuration > Object > User . Figure 36 Configuration > Object > User The following table describes the labels in this screen. 7.2.1 Add/Edit User The User Add/ Edit screen allows you [...]

Chapter 7 User NWA5120 Series User’ s Guide 67 • Alphanum eric A-z 0-9 (there is no unicode su pport) • _ [underscores] •- [ d a s h e s ] The first character must be alphabetical (A -Z a-z), an underscore (_), or a dash (-). Other limitations on user names are: • User names are case-sensitive. If you enter a user ' bob' but use[...]

Chapter 7 User NWA5120 Series U ser’s Guide 68 The following table describes the labels in this screen. 7.3 Setting This screen controls default settings, login settings, lockout settings, and other user settings for the NW A. T a ble 31 Configuration > User > User > Ad d/Edit A User LABEL DESCRIPTION User Name T ype the user name fo r t[...]

Chapter 7 User NWA5120 Series User’ s Guide 69 T o access this screen, login to the W e b Configurator , and click Configuration > Object > User > Setting . Figure 38 Configuration > Object > User > Setting The following table describes the labels in this screen. T a ble 32 Configuration > Object > User > S etting LABEL[...]

Chapter 7 User NWA5120 Series U ser’s Guide 70 7.3.1 Edit User Authen tication Timeout Settings This screen allows you to set the default authentication timeout settings for the selected type of user account. These default authentication timeout settings also control the settings for any existing user accounts that are set to use the de fault set[...]

Chapter 7 User NWA5120 Series User’ s Guide 71 The following table describes the labels in this screen. T a ble 33 User > Setting > Edit User Authentication Timeout Settings LABEL DESCRIPTION User T ype This read-only field iden ti fies the type of user acco unt for which you are configuring the default settin gs. • admin - this user can [...]

Chapter 7 User NWA5120 Series U ser’s Guide 72[...]

NWA5120 Series User’ s Guide 73 C HAPTER 8 AP Profile 8.1 Overview This chapter shows you how to configure preset profiles for the NW A. 8.1.1 What Y o u Can Do in this Chapter •T h e Radio screen ( Section 8.2 on page 74 ) creates radio configur ations that can be used by the APs. •T h e SS ID screen ( Section 8.3 on page 79 ) configures thr[...]

Chapter 8 AP Profile NWA5120 Series U ser’s Guide 74 WEP WEP (Wired Equivalent Priv acy) encryption scrambl es all data packets transmitted between the AP and the wireless stations associated with it in order to keep network communications pr ivate. Both the wireless stations and the access points must use the same WEP k ey for data encryption an[...]

Chapter 8 AP Profile NWA5120 Series User’ s Guide 75 Rem ov e Click this to remove the select ed radio profile. Activ ate T o turn on an entry , sele ct it and click Activate . Inactiv ate T o turn off an entry , select it an d click Inactivate . Object Reference Click th is to view which o ther objects ar e linked to the sele cted radio profile.[...]

Chapter 8 AP Profile NWA5120 Series U ser’s Guide 76 8.2.1 Add/Edit Radio Profile This screen allows you to create a new radio profile or edit an existing one. T o access this screen, click the Add button or select a radio profile from the list and click the Edit button. Figure 41 Configuration > Object > AP Profile > Add/Edit Profile[...]

Chapter 8 AP Profile NWA5120 Series User’ s Guide 77 The following table describes the labels in this screen. T a ble 35 Configuration > Object > AP Profile > Add/Edit Profile LABEL DESCRIPTION Hide / Show Adv anced S etting s Click this to hide or show the Advanced Settings in this window . Cr e at e N ew Ob j ec t S el e ct a n i t em [...]

Chapter 8 AP Profile NWA5120 Series U ser’s Guide 78 Enable A-MSDU Aggregation Select this to en able A-MSDU aggregation. Mac Service Data Unit (MSDU) aggregation collects Ethernet fr ames without any of their 802.11n headers and wraps the header- less payload in a single 802.11n MAC header . This method is useful for increasi ng bandwidth throug[...]

Chapter 8 AP Profile NWA5120 Series User’ s Guide 79 8.3 SSID The SSID screens allow you to configure three differe nt types of profiles for your network ed APs: an SSID list, which can assign specific SSID configur ations to your APs; a security list, which can assign specific encryption methods to the APs when allowing wireless clients to conne[...]

Chapter 8 AP Profile NWA5120 Series U ser’s Guide 80 Note: Y ou can have a maximum of 32 SSID profiles on the NWA. Figure 42 Configuration > Object > AP Profile > SSID List The following table describes the labels in this screen. T a ble 36 Configuration > Object > AP Profile > SSID List LABEL DESCRIPTION Add Click this to add a[...]

Chapter 8 AP Profile NWA5120 Series User’ s Guide 81 8.3.1.1 Add/Ed it SSID Profile This screen allows you to create a new SSID profile or edit an existing one. T o access this screen, click the Add button or select an SSID profile from the list and click the Edit button. Figure 43 Configuration > Object > AP Profile > Add/Edit SSID Prof[...]

Chapter 8 AP Profile NWA5120 Series U ser’s Guide 82 8.3.2 Security List This screen allows you to manage wireless security configurations that can be used by your S S IDs. Wireless security is implemented strictly between the AP broadcasting the SSID and the stations that are connected to it. T o access this screen click Configuration > Objec[...]

Chapter 8 AP Profile NWA5120 Series User’ s Guide 83 Note: Y ou can have a maximum of 32 security profiles on the NWA. Figure 44 Configuration > Object > AP Profile > SSID > Security List The following table describes the labels in this screen. 8.3.2.1 Add/Edit Security Profile This screen allows you to create a new security profile o[...]

Chapter 8 AP Profile NWA5120 Series U ser’s Guide 84 Note: This screen’ s options change based on th e Security Mode selected. Only the default screen is displayed here. Figure 45 SSID > Security Profile > Add/Edit Security Profile[...]

Chapter 8 AP Profile NWA5120 Series User’ s Guide 85 The following table describes the labels in this screen. T a ble 39 SSID > Security Profile > Add/Edit Security Profile LABEL DESCRIPTION Profile Name Enter up to 31 alphanu meric characters for the pro file name. This name is only visible in the W eb Configurator and is only for mana gem[...]

Chapter 8 AP Profile NWA5120 Series U ser’s Guide 86 8.3.3 MAC Filter List This screen allows you to create and manage security configur ations that can be used by your SSIDs. T o access this screen click Configuration > Object > AP Profile > SSID > MAC Filter List . Note: Y ou can have a maximum of 32 MAC filteri ng profiles on the N[...]

Chapter 8 AP Profile NWA5120 Series User’ s Guide 87 The following table describes the labels in this screen. 8.3.3.1 Add/Edit MAC Filter Profile This screen allows you to create a new MAC filtering profile or edit an existing one. T o access this screen, click the Add button or select a MAC filter profile from the list and click the Edit button.[...]

Chapter 8 AP Profile NWA5120 Series U ser’s Guide 88 8.3.4 Layer-2 Isolation List Layer-2 isolation is used to prevent wireless clients associated with your NWA from communicating with other wireless clients, APs, computers or routers in a network. In the following example, layer-2 isolation is enabled on the NWA to allow a guest wireless client [...]

Chapter 8 AP Profile NWA5120 Series User’ s Guide 89 This screen allows you to specify devices you want the users on y our wireless networks to access. T o access this screen click Conf iguration > Object > AP Profi le > SSID > Layer-2 Iso lation List . Figure 49 Configuration > Object > AP Profile > SSID > Lay er-2 Isolat[...]

Chapter 8 AP Profile NWA5120 Series U ser’s Guide 90 Note: Y ou need to know the MAC address of ea ch wireless client, AP , computer or router that you want to al low to communicate with the NW A's wireless clients. Figure 50 SSID > MAC Filter List > Add/Edit Lay er-2 Isolation Profile The following table describes the labels in this s[...]

NWA5120 Series User’ s Guide 91 C HAPTER 9 MON Profile 9.1 Overview This screen allows you to set up monitor mode configur ations that allow your NWA to scan for other wireless devices in the vicinity . Once detected, you can use the Wireless > MON Mode screen ( Section 6.3 on page 55 ) to classify them as either rogue or friendly . 9.1.1 What[...]

Chapter 9 MON Profile NWA5120 Series U ser’s Guide 92 9.2.1 Add/Edit MON Profile This screen allows you to create a new monitor mode profile or edit an existing one. T o acce ss this screen, click the Add button or select and existing monitor mode profile and click the Edit button. Figure 52 Configuration > Object > MON Profile > Add/Edi[...]

Chapter 9 MON Profile NWA5120 Series User’ s Guide 93 The following table describes the labels in this screen. 9.3 T echnical Reference The following section contains additional technical information about the features described in this chapter . Rogue APs R ogue APs are wireless access points operating in a network’s cover age area that are no[...]

Chapter 9 MON Profile NWA5120 Series U ser’s Guide 94 or set up their own rogue APs in order to capture information from wireless clients. If a scan reveals a rogue AP , you can use commercially-av ailable software to physically locate it. Figure 53 Ro g u e A P E xa m p l e In the example above, a corporate network’ s security is compromised b[...]

NWA5120 Series User’ s Guide 95 C HAPTER 10 Certificates 10.1 Overview The NWA can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-priv ate key pairs. A certificate contains the certificate owner ’s identity and public k ey . Certificates provide a way to ex change public keys for use in authen[...]

Chapter 10 Certif icates NWA5120 Series U ser’s Guide 96 5 Additionally , Jenny uses her own private k ey to sign a message and Tim uses Jenny’ s public key to verify the message. The NWA uses certificates based on public -key cr yptology to authenticate users attempting to establish a connection, not to encrypt the data th at y ou send after e[...]

Chapter 10 Certificates NWA5120 Series User’ s Guide 97 • Binary PKCS#12: This is a format for tr ansferri ng public key and private ke y certificates.The private k ey in a PKCS #12 file is within a passw ord-encrypted envelope. The file’ s password is not connected to your certificate’ s public or private passwords. Exporting a PK CS #12 f[...]

Chapter 10 Certif icates NWA5120 Series U ser’s Guide 98 10.2 My Certificates Click Configuration > Object > Certifi cate > My Certificates to open this screen. This is the NW A’s summary list o f certificates and certification requests. Figure 54 Configuration > Object > Certificate > My Certificates The following table descr[...]

Chapter 10 Certificates NWA5120 Series User’ s Guide 99 Subject This field displays identi fying information about the certificate’s owner , such as CN (Common Name), OU (Organizational Unit or department), O (Organ ization or company) and C (Country). It is recommended that each certificate have unique subject information. Issuer This field di[...]

Chapter 10 Certif icates NWA5120 Series U ser’s Guide 100 10.2.1 Add My Certificates Click Configuration > Object > Certifi cate > My Certificates and then the Add icon to open the Add My Certificates screen. Use this screen to have the NW A create a self-signed certificate, enroll a certificate with a certification authority or gener at[...]

Chapter 10 Certificates NWA5120 Series User’ s Guide 101 The following table describes the labels in this screen. T a ble 47 Configuration > Ob ject > Cer tif icate > My Certificates > Add LABEL DESCRIPTION Name T ype a name to identify this certificat e. Y ou can use up to 31 alphanum eric and ;‘~!@#$%^&()_+[]{} ’ ,.=- charac[...]

Chapter 10 Certif icates NWA5120 Series U ser’s Guide 102 If you configured the Add My Certificates screen to have the NW A enroll a certificate and the certificate enrollment is not successful, you see a screen with a Return button that takes you back to the Add My Certificates screen. Click Return and check your information in the Add My Certif[...]

Chapter 10 Certificates NWA5120 Series User’ s Guide 103 10.2.2 Edit My Certificates Click Configuration > Object > Certifi cate > My Certificates and then the Edit icon to open the My Certificate Edit screen. Y ou can use this screen to vi ew in-depth certificate information and change the certificate’ s name. Figure 56 Configuration [...]

Chapter 10 Certif icates NWA5120 Series U ser’s Guide 104 The following table describes the labels in this screen. T a ble 48 Configuration > Object > Certificate > My Certificates > Edit LABEL DESCRIPTION Name This field disp lays the ident ifying name of this certif icate. Y ou can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[[...]

Chapter 10 Certificates NWA5120 Series User’ s Guide 105 10.2.3 Import Certificates Click Configuration > Object > Certifi cate > My Certificates > Import to open the My Certificate Impor t screen. F ollow the instructions in this screen to save an existing certificate to the NWA. Note: Y ou can import a certificate that matche s a co[...]

Chapter 10 Certif icates NWA5120 Series U ser’s Guide 106 Y ou must remove any spaces in the certificate’s filename before y ou can import it. Figure 57 Configuration > Object > Certificate > My Certificates > Import The following table describes the labels in this screen. 10.3 T rusted Certificates Click Configuration > Object &[...]

Chapter 10 Certificates NWA5120 Series User’ s Guide 107 being trustworthy; thus y ou do not need to import any certificate that is signed by one of these certificates. Figure 58 Configuration > Object > Certificate > T rusted Certificates The following table describes the labels in this screen. T a ble 50 Configuration > Object > [...]

Chapter 10 Certif icates NWA5120 Series U ser’s Guide 108 10.3.1 Edit T rusted Certificates Click Configuration > Object > Cert ific ate > Trust ed Certific ates and then a certificate’ s Edit icon to open the Trusted Certificates Edit screen. Use this screen to view in-depth information about the certificate, change the certificate’[...]

Chapter 10 Certificates NWA5120 Series User’ s Guide 109 The following table describes the labels in this screen. T a ble 51 Configuration > Object > Certificate > T rusted Certificates > Edit LABEL DESCRIPTION Name This field display s the identify ing name of this certificate. Y ou can change th e name. Y ou can use up to 31 alphanu[...]

Chapter 10 Certif icates NWA5120 Series U ser’s Guide 11 0 10.3.2 Import T rusted Certificates Click Configuration > Object > Certificat e > Trusted Certificates > Import to open the Import Trusted Certificates screen. Follow the instructions in this screen to sa ve a trusted certificate to the NW A. Signature Algorithm This field dis[...]

Chapter 10 Certificates NWA5120 Series User’ s Guide 111 Note: Y ou mus t remove any spaces from t he certificate’s filename be fore you can import the certificate. Figure 60 Configuration > Object > Certificate > T rusted Certificates > Import The following table describes the labels in this screen. 10.4 T echnical Reference The fo[...]

Chapter 10 Certif icates NWA5120 Series U ser’s Guide 11 2[...]

NWA5120 Series User’ s Guide 11 3 C HAPTER 11 System 1 1.1 Overview Use the system screens to configure general NW A settings. 1 1.1.1 What Y ou Can Do in this Chapter •T h e Host Name scre en ( Section 11.2 on page 113 ) configures a unique name for the NW A in your net wor k. •T h e Dat e/Tim e screen ( Section 11.3 on page 114 ) configures[...]

Chapter 11 System NWA5120 Series U ser’s Guide 11 4 The following table describes the labels in this screen. 1 1.3 Date and Time For effectiv e scheduling and logging, the NWA system time must be accurate. The NWA has a software mechanism to set the time manually or ge t the current time an d date from an external server . T o change your NW A’[...]

Chapter 11 System NWA5120 Series User’ s Guide 11 5 The following table describes the labels in this screen. T a ble 54 Configuration > System > Dat e/Time LABEL DESCRIPTION Current Time and Date Current Time This field displays the present time of your NWA. Current Date This field displays the present date of your NW A. Time and Da te Setu[...]

Chapter 11 System NWA5120 Series U ser’s Guide 11 6 1 1.3.1 Pre-defined NTP Time Servers List When you turn on the NW A for the first time, the date and time start at 2003-01-01 00:00:00. The NW A then attempts to synchronize with one of the following pre-defined list of Network Time Protocol (NTP) time servers. The NWA continues to use the f oll[...]

Chapter 11 System NWA5120 Series User’ s Guide 11 7 The Current Time and Current Date fields will display the appropriate settings if the synchronization is successful. If the synchronization w as not successful, a log displays in the View Log screen. T ry re-configuring the Date/Time screen. T o ma nually set the NW A date and time: 1 Click Syst[...]

Chapter 11 System NWA5120 Series U ser’s Guide 11 8 1 1.4 WWW Overview The following figure shows secure and insecure ma nagement of the NWA coming in from the W AN. HT TPS and SSH access are secure. HT TP , T e lnet, and FTP management access are not secure. Figure 64 Secure and Insecure Service Access From the WAN 1 1.4.1 Service Access Limit a[...]

Chapter 11 System NWA5120 Series User’ s Guide 11 9 HT TPS on the NWA is used so that you can securely access the NW A using the W eb Configurator . The SSL protocol specifies that the HT TPS server (t he NWA) must alwa ys authenticate itself to the HT TPS client (the computer which requests th e HT TPS connection with the NWA), whereas the HT TP[...]

Chapter 11 System NWA5120 Series U ser’s Guide 120 1 1.4.4 Configuring WWW Service Control Click Configuration > System > WWW to open the WWW screen. Use this screen to specify HT TP or HT TPS settings. Figure 66 Configuration > System > WWW > Service Control The following table describes the labels in this screen. T a ble 56 Confi[...]

Chapter 11 System NWA5120 Series User’ s Guide 121 1 1.4.5 HTTPS Example If you haven’t changed the default HT TPS port on the NWA, th en in your browser enter “https:// NW A IP Address/” as the web site address where “N WA IP Address” is the IP address or domain name of the NWA you wish to access. 1 1.4.5.1 Internet Exp lorer W arning [...]

Chapter 11 System NWA5120 Series U ser’s Guide 122 Figure 68 Security Certificate 1 (Firefox) Figure 69 Security Certificate 2 (Firefox) 1 1.4.5.3 Avoiding Br owser W arning Messages Here are the main reasons your browser displays w arnings about the NWA’ s HTTPS serv er certificate and what you can do to av oid seeing the warnings: • The iss[...]

Chapter 11 System NWA5120 Series User’ s Guide 123 • For the browser to trust a self-signed certificat e, import the self-signed certificate into y our operating system as a trusted certificate. • T o have the browser trust the certificates issued by a certificate authority , import the certificate authority’ s certificate into your operati[...]

Chapter 11 System NWA5120 Series U ser’s Guide 124 1 1.4.5 .5 Inst alling the CA ’ s Certificate 1 Double click the CA ’s trusted certificate to produce a screen similar to the one shown next. 2 Click Install Certificate and follow the wizard as shown earlier in this appendix. 1 1.4.5.6 Installing a Personal Certificate Y ou need a password i[...]

Chapter 11 System NWA5120 Series User’ s Guide 125 1 Click Next to begin the wizard. 2 The file name and path of the certificate you do uble-clicked should automatically appear in the File name text box. Click Browse if you wish to import a different certificate.[...]

Chapter 11 System NWA5120 Series U ser’s Guide 126 3 Enter the password given to you by the CA. 4 Have the wizard determine where the certificate should be sav ed on your computer or select Place all cert ificates i n the fo llowing st ore and choose a different location.[...]

Chapter 11 System NWA5120 Series User’ s Guide 127 5 Click Finish to complete the wizard and begin the import process. 6 Y ou should see the following screen when the certificate is correctly installed on y our computer . 1 1.4.5.7 Usin g a Certific ate When Accessing the NW A T o access the NWA via HT TPS: 1 Enter ‘https://NW A IP Address/ in [...]

Chapter 11 System NWA5120 Series U ser’s Guide 128 2 When Authenticate Client Certificates is selected on the NWA, the following screen asks y ou to select a personal certificate to send to the NWA. Th is screen displays even if you only have a single certificate as in the example. 3 Y ou next see the W eb Configurator login screen. 1 1.5 SSH Y o[...]

Chapter 11 System NWA5120 Series User’ s Guide 129 1 1.5.1 How SSH Works The following figure is an example of how a secure connection is estab lished between two remote hosts using SSH v1. Figure 72 How SSH v1 W orks Ex ample 1 Host Identification The SSH client sends a connection request to the S SH server . The server identifies itself with a [...]

Chapter 11 System NWA5120 Series U ser’s Guide 130 1 1.5.2 SSH Implement ation on the NW A Y our NWA supports S SH versions 1 and 2 using RS A authentication and four encryption methods (AES, 3DES, Archfour , and Blowfish). The SSH server is implemented on the NWA for management using port 22 (by default). 1 1.5.3 Requirement s for Using SSH Y ou[...]

Chapter 11 System NWA5120 Series User’ s Guide 131 1 1.5.5 Examples of S ecure T elnet Using SSH This section shows two examples using a command interface and a gr aphical interface SSH client program to remotely access the NW A. The confi guration and connection steps are similar for most SSH client progr ams. Refer to your SSH client progr am u[...]

Chapter 11 System NWA5120 Series U ser’s Guide 132 2 Enter “ ssh –1 192.168.1.2 ” . This command forces your computer to connect to the NW A using SSH version 1. If th is is the first time you are connecting to the NW A using SSH, a message displays prompting you to sa ve the host information of the NWA. T ype “ yes ” and press [ENTER] [...]

Chapter 11 System NWA5120 Series User’ s Guide 133 1 1.7 FTP Y ou can upload and download the NW A’s firmware and configuration files using FTP . T o use this feature, your computer must have an FTP client. See Chapter 13 on page 151 for more information about firmware and configuration files. T o change your NW A’s FTP settings, click Config[...]

Chapter 11 System NWA5120 Series U ser’s Guide 134 (SNMPv1), version two (SNMPv2c), and version th ree (SNMPv3). The next figure illustrates an SNMP management operation. Figure 79 SNMP Management Model An SNMP managed network consists of two main types of component: agents and a manager . A n a g e n t i s a m a n a g e m e n t s o f t w a r e m[...]

Chapter 11 System NWA5120 Series User’ s Guide 135 1 1.8.1 Supported MIBs The NWA supports MIB II that is defined in RFC - 1213 and RFC-1215. The NW A also supports private MIBs (ZYXEL -ES-CAPWAP .MIB, ZYXEL -ES-COMMO N.MIB, ZYXEL -ES-HYBRIDAP .MIB, ZYXEL -ES- PROWLAN.MIB, ZYXEL -ES-RFMGMT .MIB, ZY XEL -ES -SMI.MIB, and ZYXEL -ES-WIRELESS .MIB) t[...]

Chapter 11 System NWA5120 Series U ser’s Guide 136 The following table describes the labels in this screen. T a ble 61 Configuration > System > SNMP LABEL DESCRIPTION Enable Select the check box to allow or disa llow users to acce ss the NWA using SNMP . Server Port Y ou may change the server port number for a service if needed, however you[...]

Chapter 11 System NWA5120 Series User’ s Guide 137 1 1.8.4 Adding or Editing an SNMPv3 User Profile This screen allows you to add or edit an SNMP v3 user profile. T o access this screen, click the Configuration > System > SNMP screen’ s Add button or select a SNMPv3 user profile from the list and click the Edit button. Figure 81 Configura[...]

Chapter 11 System NWA5120 Series U ser’s Guide 138[...]

NWA5120 Series User’ s Guide 139 C HAPTER 12 Log and Report 12.1 Overview Use the system screens to configur e daily reporting and log settings. 12.1.1 What Y ou Can Do In this Chapter •T h e Email D aily Report screen ( Section 12.2 on page 139 ) configures how and where to send daily reports and what reports to send. •T h e Log S etting scr[...]

Chapter 12 Log and Report NWA5120 Series U ser’s Guide 140 Click Configuration > Log & Report > Email Daily Report to display the following screen. Configure this screen to have the NW A e-mail you system statistics every day . Figure 82 Configuration > Log & R eport > Email Daily Report The following table describes the label[...]

Chapter 12 Log and Report NWA5120 Series User’ s Guide 141 12.3 Log Setting These screens control log messages and alerts. A log message stores the information for viewing (for exampl e, in the Monitor > View Lo g screen) or regular e-mailing later , and an alert is e- mailed immediately . Usually , alerts are used for even ts that require mor[...]

Chapter 12 Log and Report NWA5120 Series U ser’s Guide 142 12.3.1 Log Setting T o access this screen, click Configuration > Log & Report > Log Setting . Figure 83 Configuration > Lo g & Report > Log Setting The following table describes the labels in this screen. T a ble 64 Configuration > Log & Report > Lo g Setting[...]

Chapter 12 Log and Report NWA5120 Series User’ s Guide 143 12.3.2 Edit System Log Settings This screen controls the detailed settings for each log in the system log (which includes the e-mail profiles). Select a system log entry in the Log Setting screen and click the Edit icon. Figure 84 Configuration > Lo g & Report > Log Se tting >[...]

Chapter 12 Log and Report NWA5120 Series U ser’s Guide 144 The following table describes the labels in this screen. T a ble 65 Configuration > Log & Report > Log Set ting > Edit System Log Se tting LABEL DESCRIPTION E-Mail Server 1/2 Active Sel ect this to send log me ssages and al erts according to the information in this section. Y[...]

Chapter 12 Log and Report NWA5120 Series User’ s Guide 145 E-mail Se rver 2 Use the E-Mail Server 2 drop -down list to c hange the se ttings for e -mailing logs to e-mail server 2 for all log categories. Using the System Log drop-down list to disable all logs overrides your e-mai l server 2 settin gs. enable normal logs (green check mark) - e-mai[...]

Chapter 12 Log and Report NWA5120 Series U ser’s Guide 146 12.3.3 Edit Remote Server This screen controls the settings for each log in the remote server (syslog). Select a remote server entry in the Log Setting screen and click the Edit icon. Figure 85 Configuration > Lo g & Report > Log Setting > Edit R emote Server[...]

Chapter 12 Log and Report NWA5120 Series User’ s Guide 147 The following table describes the labels in this screen. 12.3.4 Active Log Summary This screen allows you to view and to edit what information is included in the system log, e-mail profiles, and remote servers at the same time. It does not let you change other log settings (for T a ble 66[...]

Chapter 12 Log and Report NWA5120 Series U ser’s Guide 148 example, where and how often log information is e-mailed or re mote server names). T o access this screen, go to the Log Setting screen, and click the Active Log Summary button. Figure 86 Active Log Summary This screen provides a different view and a different wa y of indicating which mes[...]

Chapter 12 Log and Report NWA5120 Series User’ s Guide 149 The following table describes the fields in this screen. T a ble 67 Configuration > Log & Report > Log Se tting > Active Lo g Summary LABEL DESCRIPTION Active Log Summary If the NW A is set to contro ller mode, the AC section controls l ogs gener ated by the controller and th[...]

Chapter 12 Log and Report NWA5120 Series U ser’s Guide 150 E-mail Server 1 E-mail Select whether each category of events should be inclu ded in the log messages wh en it is e-mailed (green check mark) and/or in aler ts (red exclamati on point) for the e-mail settings speci fied in E-Mail Server 1 . The NWA does not e-mail debugging information, e[...]

NWA5120 Series User’ s Guide 151 C HAPTER 13 File Manager 13.1 Overview Configuration files define the NW A’s settings. Shell scripts are files of commands that you can store on the NW A and run when you need them. Y ou can apply a configuration file or run a shell script without the NW A restarting. Y ou can store multiple configuration files [...]

Chapter 13 Fil e Manager NWA5120 Series U ser’s Guide 152 While configuration files and shell scripts have th e same syntax, the NWA applies configuration files differently than it runs shell scripts. This is explained below . Y ou have to ru n the aforemention ed example as a shell script because the first command is run in Privilege mode. If yo[...]

Chapter 13 File Manager NWA5120 Series User’ s Guide 153 configuration files from the NWA to y our computer and upload configur ation files from your computer to the NWA. Once your NW A is configured and functioning properly , it is highly recommended that you back up your configur ation file before making further conf iguration changes. The back[...]

Chapter 13 Fil e Manager NWA5120 Series U ser’s Guide 154 The following table describes the labels in this screen. T a ble 69 Maintenance > File Manager > Configuration File LABEL DESCRIPTION Ren am e Use this button to change the label of a configur ation file on the NWA. Y ou can only rename manually saved configuration files. Y ou cannot[...]

Chapter 13 File Manager NWA5120 Series User’ s Guide 155 Apply Use this button to ha ve the NWA us e a specific configur ation file. Click a configuration file ’ s row to select it and cl ick Apply to have the NWA use that configuration file. The NWA does not have to restart in order to use a different configuration file , although you will nee[...]

Chapter 13 Fil e Manager NWA5120 Series U ser’s Guide 156 13.2.1 Example of Configurati on File Download Using FTP The following example gets a configuration file named startup-config.conf from the NW A and saves it on the computer . 1 Connect your computer to the NW A. 2 The FTP server IP address of the NWA in standalone AP mode is 192.168.1.2, [...]

Chapter 13 File Manager NWA5120 Series User’ s Guide 157 8 Use "get” to download files. T ran sfer the configuration file on the NW A to your computer . T ype get followed by the name of the configur ation file. This examples uses get startup-conf ig.conf . 9 W ait for the file transfer to complete. 10 Enter “quit” to exit the ftp prom[...]

Chapter 13 Fil e Manager NWA5120 Series U ser’s Guide 158 The firmware up date can take up to five minutes. Do not turn off or reset the NW A while the firmware update is in progress! Figure 88 Maintenance > File Manager > Firmware Package The following table describes the labels in this screen. After you see the Firmware Upload in Process [...]

Chapter 13 File Manager NWA5120 Series User’ s Guide 159 13.3.1 Example of Firm ware Upload Using FTP This procedure requires the NWA’ s firmware. Download the firmware package from www.zyx el.com and unzip it. The firmware file uses a .bin ex tension, for example, "225AAHY0C0.bin". Do the following after you ha ve obtained the firmwa[...]

Chapter 13 Fil e Manager NWA5120 Series U ser’s Guide 160 Click Maintenance > File Manager > Shell Script to open this screen. Use the Shell Script screen to store, name, download, upload and run shell script files. Y ou can store multiple shell script files on the NWA at the sam e time. Note: Y ou shou ld include write commands in your scr[...]

Chapter 13 File Manager NWA5120 Series User’ s Guide 161 # This column displa ys the number for each shell script file entry . File Name This column displays t he label that identifie s a shell script file. Size This column displa ys the size (in KB) of a sh ell script file. Last Modified This column displays the date and time that the individual[...]

Chapter 13 Fil e Manager NWA5120 Series U ser’s Guide 162[...]

NWA5120 Series User’ s Guide 163 C HAPTER 14 Diagnostics 14.1 Overview Use the diagnostics screen for troubleshooting. 14.1.1 What Y ou Can Do in this Chapter •T h e Dia gnostics screen ( Section 14.2 on page 163 ) generates a file containing the NW A’ s configuration and diagnostic information if y ou n eed to provide it to customer support [...]

Chapter 14 Diagnostics NWA5120 Series U ser’s Guide 164 Collect Now Click this to have the NWA create a new diagnostic file. Download Click this t o save the most r e cent diagnostic file to a computer . T a ble 72 Maintenance > Diagnostics LABEL DESCRIPTION[...]

NWA5120 Series User’ s Guide 165 C HAPTER 15 Reboot 15.1 Overview Use this to restart the device. 15.1.1 What Y ou Need T o Know If you applied changes in the W eb configurator , these were saved automatically and do not change when you reboot. If you made changes in the CLI, howev er , you hav e to use the writ e command to save the configur ati[...]

Chapter 15 Reboo t NWA5120 Series U ser’s Guide 166[...]

NWA5120 Series User’ s Guide 167 C HAPTER 16 Shutdown 16.1 Overview Use this screen to shutdown the device. Always use Maintena nce > Shut down > Shut down or the shutdown command before you turn off the NW A or remove the power . Not doing so can cause the firmware to become corrupt. 16.1.1 What Y ou Need T o Know Shutdown writes all cache[...]

Chapter 16 Shutdown NWA5120 Series U ser’s Guide 168[...]

NWA5120 Series User’ s Guide 169 C HAPTER 17 Troubleshooting 17.1 Overview This chapter offers some suggestions to solve problems you might encounter . The potential problems are divided into the following categories. • Po wer , Hardware Connections, and LED • NWA Access and Login • Internet Access • Wireless Connections • Resetting the[...]

Chapter 17 Tro ubleshooting NWA5120 Series U ser’s Guide 170 5 If the problem continues, contact the v e ndor . 17.3 NW A Access and Login I forgot the IP address for the NWA. 1 The default IP address is 192.168.1.2 . 2 If you changed the IP address and have forgotten it, you hav e to reset the device to its factory defaults. See Section 17.6 on [...]

Chapter 17 Troubl eshooting NWA5120 Series User’ s Guide 171 • T ry to access the NW A using another service, such as T elnet. If you can access the NW A, check the remote management settings to find out why the NW A does not respond to HT TP . • If your computer is connected wirelessly , use a computer that is connected to a LAN / ETHE RNET [...]

Chapter 17 Tro ubleshooting NWA5120 Series U ser’s Guide 172 2 Make sure the NW A is connected to a broadband modem or router with Internet access and your computer is set to obtain an dynamic IP address. 3 If you are trying to access the Internet wirelessly , make sure the wireless settings on the wireless client are the same as the settings on [...]

Chapter 17 Troubl eshooting NWA5120 Series User’ s Guide 173 1 Make sure the wireless LAN (wireless radio) is enabled on the NW A . 2 Make sure the r adio or at least one of the NW A’s r adios is operating in AP mode. 3 Make sure the wireless adapter (installed on your computer) is working properly . 4 Make sure the wireless adapter (installed [...]

Chapter 17 Tro ubleshooting NWA5120 Series U ser’s Guide 174 • PEM (Base-64) encoded PKCS#7: This Privacy Enhanced Mail (PEM) format uses lowercase letters, uppercase letters and numerals to convert a binary PKCS#7 certificate into a printable form. • Binary PKCS#12: This is a format for tr ansferri ng public key and private ke y certificates[...]

Chapter 17 Troubl eshooting NWA5120 Series User’ s Guide 175 In the Monitor > Wireless > AP Information > Radio List screen, there is no load balancing indicato r associated with any AP s assigned to the load balancing task. • Check to be sure that the AP profile which contains the load balancing settings is correctly assigned to the A[...]

Chapter 17 Tro ubleshooting NWA5120 Series U ser’s Guide 176[...]

NWA5120 Series User’ s Guide 177 A PPENDIX A Importing Certificates This appendix shows you how to import public key certificates into y our web browser . Public key certificates are used by web browsers to ensure that a secure web site is legitimate. When a certificate authority such as V eriSign, Comodo, or Network Solutions, to name a few , re[...]

Appendix A Importing Certificates NWA5120 Series U ser’s Guide 178 1 If your device’ s W eb Configurator is set to use SSL certifi cation, then the first time you browse to it you are presented with a certification erro r . 2 Click Continue to this website (not recommended) . 3 In the Address Bar , click Cert ificate Error > View certificate[...]

Appendix A Imp orting Certificates NWA5120 Series User’ s Guide 179 4 In the Certificate dialog box, click Install Cer tificate . 5 In the Certificate Import Wizard , click Next .[...]

Appendix A Importing Certificates NWA5120 Series U ser’s Guide 180 6 If you want Internet Explorer to Automatically select certificat e store based on the typ e of certificate , click Next again and then go to step 9. 7 Otherwise, select Place all certificates in the following store and then click Browse . 8 In the Select Certificate Store dialog[...]

Appendix A Imp orting Certificates NWA5120 Series User’ s Guide 181 9 In the Completing the Certificate Import Wizard screen, click Finish . 10 If you are presented with another Security Warning , click Yes . 11 Finally , click OK when presented with the successful certificate installation message .[...]

Appendix A Importing Certificates NWA5120 Series U ser’s Guide 182 12 The next time you start Internet Explorer and go to a Z yXEL W eb Configurator page, a sealed padlock icon appears in the address bar . Click it to view the page’s Website Identification information. Inst alling a St and-Alone Certific ate File in Internet Explorer Rather tha[...]

Appendix A Imp orting Certificates NWA5120 Series User’ s Guide 183 Removing a Certificate in Internet Explorer This section shows you how to remove a public key ce rtificate in Internet Explorer 7 on Windows XP . 1 Open Internet Explorer and click Tools > Internet Options . 2 In the Internet Options dialog box, click Content > Certificates[...]

Appendix A Importing Certificates NWA5120 Series U ser’s Guide 184 3 In the Certificates dialog box, click the Trusted Root Certif icates Authorities tab, select the certificate that you want to delete, and then click Remove . 4 In the Certificates confirmation, click Yes . 5 In the Root Certificate Store dialog box, click Yes . 6 The next time y[...]

Appendix A Imp orting Certificates NWA5120 Series User’ s Guide 185 Firefox The following example uses Mozilla Firefox 2 on Windows XP Professional; however , the screens can also apply to Firefox 2 on all platforms. 1 If your device’ s W eb Configurator is set to use SSL certifi cation, then the first time you browse to it you are presented wi[...]

Appendix A Importing Certificates NWA5120 Series U ser’s Guide 186 Inst alling a St and-Alone Ce rtificate File in Firefox Rather than browsing to a Z y XEL W eb Configurator and installing a public key certificate when prompted, you can install a stand-alone certif icate file if one has been issued to y ou. 1 Open Firefox and click Tools > Op[...]

Appendix A Imp orting Certificates NWA5120 Series User’ s Guide 187 3 In the Certificate Manager dialog bo x, click Web Sites > Import . 4 Use the Select File dialog box to locate the certificate and then click Open . 5 The next time you visit the web site, click the padlock in the address bar to open the Page Info > Security window to see [...]

Appendix A Importing Certificates NWA5120 Series U ser’s Guide 188 1 Open Firefox and click Tools > Options . 2 In the Options dialog bo x, click Advanced > Encryption > View Certi ficates .[...]

Appendix A Imp orting Certificates NWA5120 Series User’ s Guide 189 3 In the Certificate Manager dialog bo x, sele ct the Web Sites tab, select the certificate that you want to remov e, and then click Delete . 4 In the Delete Web Site Certificates dialog box, click OK . 5 The next time you go to the web site that issued the public key certificate[...]

Appendix A Importing Certificates NWA5120 Series U ser’s Guide 190[...]

NWA5120 Series User’ s Guide 191 A PPENDIX B Legal Information Copyright Copyright © 2013 by Z yXEL Communications Corpor ation. Th e c o n te nt s of t hi s pu b li ca t io n ma y n o t b e re p ro d uc e d i n a n y p a rt o r a s a w ho l e, t ra ns c ri be d , s t or e d i n a r e tr i eva l sy s te m , t r anslated into any language, or tr [...]

Appendix B Legal Information NWA5120 Series U ser’s Guide 192 IC Radiation Exposur e St atement This equipmen t complies with IC radiati on exposure limi ts set forth for an uncontrolle d environment. End users must follow the spe cific operating instructions for satisfying RF exposu re compliance. 注意 ! 依據 低功 率 電波 輻 射性電?[...]

Appendix B Legal Informa tion NWA5120 Series User’ s Guide 193 Open Source Licenses This product contains in part some free software distribu ted under GPL licens e terms and/or GPL like lic enses. Open source lice nses are provided w ith the firmware pac kage. Y ou can download the latest firmware at www. zyxel.com. T o obtain the source code co[...]

Appendix B Legal Information NWA5120 Series U ser’s Guide 194 National Restrictions This prod uct may be us ed in all E U count ries (and o ther coun tries foll owing the E U direct ive 1999/5 /EC) witho ut any limi tation except for the count ries mentio ned below: Ce produit peut être utilisé dans tous les pays de l’UE (et da ns tous les pa[...]

Appendix B Legal Informa tion NWA5120 Series User’ s Guide 195 List of national codes Safety Warnings • Do NOT u se this product near w ater , for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, d ust or corrosive liquids. • Do NOT s tore things on the de vice. • Do NOT install, use, or service[...]

Appendix B Legal Information NWA5120 Series U ser’s Guide 196 RoHS ENGL I SH DEUTSCH ESP AÑOL FRANÇA IS Green Prod uct Declaration RoHS Directiv e 2011/65/EU WEEE Directiv e 2002/96/EC ( W EEE: Waste E lectrical and Ele ctronic Equipment) 2003/108/EC;2008/34/ EC Declaration S ignature: Name/T itle: Thomas Wei / Quality Management Department/ Se[...]

Index NWA5120 Series User’ s Guide 197 Index Symbols A access 19 access privileges 14 access users 65 see also users 65 admin users 65 multiple logins 70 see also users 65 alerts 141 , 144 , 145 , 147 , 148 , 149 applications MBSSID 14 B backing up conf iguration files 153 Basic Service Set see BSS boot module 158 BSS 14 C CA and certificates 96 [...]

Index NWA5120 Series U ser’s Guide 198 editing 151 how applied 152 lastgood.conf 153 , 156 managing 152 startup-config.conf 156 startup-config-bad.conf 153 syntax 15 1 system-default.conf 156 uploading 156 uploading with FTP 133 use without restart 151 cookies 19 copyright 191 CPU usage 34 , 36 current date/time 34 , 11 4 daylight savings 11 5 se[...]

Index NWA5120 Series User’ s Guide 199 HyperT ext T ransfer Protocol ov er Secure Socket Layer , see HTTPS I IEEE 802.1x 74 installation 13 interface status 35 interfaces as DHCP servers 11 4 interference 15 Internet Explorer 19 Internet telephony 14 IP Address 51 gateway IP address 51 J Jav a permissions 19 Jav aScripts 19 K key p air s 95 L las[...]

Index NWA5120 Series U ser’s Guide 200 O objects certificates 95 users, account user 65 Online Certificate Status Protocol (OCSP) 111 vs CRL 111 other documentation 2 overview 13 P packet statistics 42 physical ports packet statistics 42 pop-up windows 19 power off 18 power on 18 product registration 192 Public-K ey Infrastructure (PKI) 96 public[...]

Index NWA5120 Series User’ s Guide 201 MIB 134 , 135 network components 134 Set 134 Tr a p 134 traps 135 vers ion s 133 SSH 128 and certificates 130 client requirements 130 encryption methods 130 for secure T elnet 13 1 how connection is established 129 vers ion s 130 with Linux 131 with Microsoft Windows 131 SSID 14 SSID profile pre-configured 1[...]

Index NWA5120 Series U ser’s Guide 202 V Va n t a g e R e p o r t ( V R P T ) 142 , 147 Vo I P 14 VRPT (V antage Report) 142 , 147 W warm sta rt 18 warning message popup 27 warranty 192 note 192 W eb Configurator 16 , 19 access 19 requirements 19 supported browsers 19 web config urator 13 WEP (Wired Equivalent Priv acy) 74 Wi-Fi Protected Access [...]