ZyXEL Communications B-1000 manuel d'utilisation

ZyAIR Access Point Series User's Guide Version 3.50 October 2003[...]

ZyAIR Access Point Series User’s Guide ii Copyright Copyright Copyright © 2003 by Zy XEL Communications Cor poration. The contents of this publi cation ma y not be reproduced in any part or as a whol e, transcri bed, stored in a retrieval system, translated into any langu age, or tr ansmitted in any form or by any means, electronic, mechanical, [...]

ZyAIR Access Point Series User’s Guide FCC Statement i ii Federal Communications Commission (FCC) Interference S t atement This device complies with Part 15 of FCC rules. Operation is subject to the following two cond itions: • This device m ay not cause harm ful interference. • This device must accept any interference received, including int[...]

ZyAIR Access Point Series User’s Guide iv ZyXEL Warranty ZyXEL Limited W arranty ZyXEL warrants to the original end us er (purchaser) that this product is free from any defects in materials or workm anship fo r a period of up to tw o years fr om the da te of purchase . During the warranty period, a n d upon proof of purchase, should the product h[...]

ZyAIR Access Point Series User’s Guide Customer Support v Customer Support Please have th e following i nformation re ady when you contact customer support. • Product model and serial num ber. • Warranty Information. • Date that you received your device. • Brief descri ption of the problem and the steps you took to solve it . METHOD LOCAT[...]

ZyAIR Access Point Series User’s Guide vi T able of Contents T able of Content s Copyright...................................................................................................................... ................................... ii Federal Communications Commission (FCC) Interfer en ce S tatemen t .................................[...]

ZyAIR Access Point Series User’s Guide Table of Contents vii 5.1.2 BSS............................................................................................................................ .........5-1 5.1.3 ESS ............................................................................................................................ .....[...]

ZyAIR Access Point Series User’s Guide viii Table of Contents 8.3 Configur ing IP ................................................................................................................. .......... 8-2 LOGS ....................................................................................................................................[...]

ZyAIR Access Point Series User’s Guide Table of Contents ix 16.1 About SNMP ..................................................................................................................... ....... 16-1 16.2 Supporte d MIBs ................................................................................................................. ......[...]

ZyAIR Access Point Series User’s Guide x Ta ble of Contents Appendix F T ypes of EAP Authentication ......................................................................................... ....... F-1 Appendix G Power over Et hernet Specifications .................................................................................. ... G-1 Appendix[...]

ZyAIR Access Point Series User’s Guide List of Figures xi List of Figures Figure 1-1 PoE Inst allation Ex ample ............................................................................................ ................. 1-3 Figure 1-2 WD S Func tionality Ex ample .................................................................................[...]

ZyAIR Access Point Series User’s Guide xii List of Figures Figure 9-2 Log Se ttings ........................................................................................................ .......................... 9-3 Figure 10-1 System Status ......................................................................................................[...]

ZyAIR Access Point Series User’s Guide List of Figures xiii Figure 17-3 Menu 23.2 System Security : RA DIUS Server ........................................................................ 17 -2 Figure 17-4 Menu 23 System Security......................................................................................................... 17-3 Figure 1[...]

[...]

ZyAIR Access Point Series User’s Guide List of Tables xv List of T ables T able 1-1 Model Sp ecific Features.............................................................................................. ................... 1-1 T able 3-1 W izard 1 : General Setup ....................................................................................[...]

ZyAIR Access Point Series User’s Guide xvi List of Tables T able 13-6 Menu 3.5.3. 1 ESS x Conf igura tion .................................................................................... ....... 13-10 T able 13-7 Menu 3.5.4 Bri dge Link Conf iguration ................................................................................ .... 13-12 [...]

ZyAIR Access Point Series User’s Guide Preface xvii Preface Congratulations on your purchase from the ZyAIR Access Point (AP) series. An AP acts as a bridge betwe en the wireless and wi red network s, extendi ng your exist ing wire d network without any additio nal wiring. Some features are not available in every model. Refer to the Model Specifi[...]

ZyAIR Access Point Series User’s Guide xviii Preface • Mouse action s equences are denoted usi ng a com ma. For ex ample, “cli ck the Apple i con, Co ntrol Panels and then Modem ” means first click the Apple icon, then point your mouse pointer to Control Panels and then click Modem . • For brevity’s sake, we will use “e.g.,” as a sh[...]

Overview I P P a a r r t t I I : : OVERVIEW This part introduces the main features and applications of ZyAIR and shows how to access the web configurator and use the Wizard to configure for Internet Access.[...]

[...]

ZyAIR Access Point Series User’s Guide Getting to Know Your ZyAIR 1-1 Chapter 1 Getting to Know Your ZyAIR This chapter introduces the main features and applications of the ZyAIR. 1.1 Introducing the ZyAIR Access Point Series The ZyAIR Access Point extends the rang e of your existing wired network without an y additional wiring efforts. The ZyAIR[...]

ZyAIR Access Point Series User’s Guide 1-2 Getting to Know Your ZyAIR Table 1-1 Model Specific Features ZYA IR MODEL FEATURES B-1000 B-1000 V.2 B-3000 Power over Ethernet O Bridge/Repeater O AP & WDS (Wireless Distribution System) Support Concurrently O Table Key: An “O” in a model’s column sho ws that t he model has the specified f eat[...]

ZyAIR Access Point Series User’s Guide Getting to Know Your ZyAIR 1-3 Bridge/Repeater A Bridge/Re peater link LE D turns steady on gree n when your ZyAIR acts as a bridge, establ ishing a wir eless link to anot her AP. It turns steady o n orange when y o ur ZyAIR acts as a repeater, establishin g wireless li nks to two or more APs. Power over Eth[...]

ZyAIR Access Point Series User’s Guide 1-4 Getting to Know Your ZyAIR The ZyAIR may be prone to RF (Radio Frequen cy) interference from other 2.4 GHz devices such as micro w ave ovens, wireless phones, Bluetooth enabled d evices, and other wireless LANs. Output Power Management Output Power Management is the ability to set the level of output pow[...]

ZyAIR Access Point Series User’s Guide Getting to Know Your ZyAIR 1-5 Wireless LAN MAC Address Filtering Your ZyAIR checks the MAC address of the wireless station ag ainst a list of allowed or denied MAC addresses. IEEE 802.1x Network Security The ZyAIR supports the IEEE 802.1x standard to enhanc e user au thentication. Use th e built-in user pro[...]

ZyAIR Access Point Series User’s Guide 1-6 Getting to Know Your ZyAIR (System Management Term in al) interface. The SMT is a menu-drive n interface that you can access from a terminal emulator over a telnet co nnection. Logging and Tracing ♦ Built-in message logging and packet tracing. ♦ Unix syslog facility support. Embedded FTP and TFTP Ser[...]

ZyAIR Access Point Series User’s Guide Getting to Know Your ZyAIR 1-7 Figure 1-3 Internet Access Application 1.3.2 Corporation Ne twork Application In situations where users are always on the move in the coverage area but s till need access to corporate network access, the ZyAIR is an ideal solution for wireless stations to connect to the corpora[...]

[...]

ZyAIR Access Point Series User’s Guide Introducing the Web Configurato r 2-1 Chapter 2 Introducing the Web Configurator This chapter describes how to access the ZyAIR we b configurator and provides an overview of its screens. The default IP address of the ZyAIR is 192.168.1.2. 2.1 Accessing the ZyAIR W eb Configurator Step 1. Make sure your ZyAIR[...]

ZyAIR Access Point Series User’s Guide 2-2 Introducing the Web Configurator The ZyAIR automatically times out af ter five minutes of inactivity . Simply log back into the ZyAIR if this happens to you. 2.2 Resetting the ZyAIR If you forget your password or ca nnot access the Zy AIR, you will need to reload the factory-default configuration file or[...]

ZyAIR Access Point Series User’s Guide Introducing the Web Configurato r 2-3 2.3 Navigating the ZyAIR W eb Configurator We use the ZyAIR B-3000 web configurator in this guid e as an example. The web configurator screens for your model may vary sli ghtly fo r differe nt ZyAIR m odels. The followin g summari zes how to navigat e the web co nfigurat[...]

[...]

ZyAIR Access Point Series User’s Guide Wizard Setup 3-1 Chapter 3 Wizard Setup This chapter provides information on the Wiza rd Setup screens in the web configurator. 3.1 Wizard Setup Overview The web configurator’s setup wizar d helps you configure your ZyAIR for wireless stations to access your wired LAN. 3.1.1 Channel The range of radio freq[...]

ZyAIR Access Point Series User’s Guide 3-2 Wizard Setup 3.2 Wizard Setup: General Setup General Setup contains administrative and syste m-related information. Figure 3-1 Wizard 1 : General Setup The following table describes the labels in this screen.[...]

ZyAIR Access Point Series User’s Guide Wizard Setup 3-3 Table 3-1 Wizard 1 : General Setup LA BEL DESCRIPTION System Name It is recommended you type your comp uter's "Computer name".  In Windows 95/98 click Start , Settings , Control Panel , Network . Click the Identification tab, note the entry for the Computer Name field and e[...]

ZyAIR Access Point Series User’s Guide 3-4 Wizard Setup Figure 3-2 Wizard 2 : Wireless LAN Setup The following table describes the labels in this screen. Table 3-2 Wizard 2 : Wireless LAN Setup LA BEL DESCRIPTION Wireless LAN Setup ESSID Enter a descriptive name (up to 32 printabl e 7-bit ASCII cha racters) for the wireless LAN. If you change thi[...]

ZyAIR Access Point Series User’s Guide Wizard Setup 3-5 Table 3-2 Wizard 2 : Wireless LAN Setup LA BEL DESCRIPTION WEP Encryption Select Disable allows all wireless computers to communicate with the access points without any data encryption. Select 64-bit WEP or 128-bit WEP to allo w data encryption. ASCII Select this option in order to enter ASC[...]

ZyAIR Access Point Series User’s Guide 3-6 Wizard Setup You can obt ain your IP a ddress from the IANA, fr om an ISP or have it assigned by a private network. If y ou belong to a small organization and your Internet access is t hrough an ISP, the ISP can provide you with the Internet addres ses for your local networks. On the othe r hand, if you [...]

ZyAIR Access Point Series User’s Guide Wizard Setup 3-7 Figure 3-3 Wizard 3 : IP Address Assignment The following table describes the labels in this screen. Table 3-4 Wizard 3 : IP Address Assi gnment LA BEL DESCRIPTION IP Address Assignment Get automatically Select this option if your ZyAIR is usin g a dynamicall y assigned IP address from a DHC[...]

ZyAIR Access Point Series User’s Guide 3-8 Wizard Setup Table 3-4 Wizard 3 : IP Address Assi gnment LA BEL DESCRIPTION Gateway IP Address Type the IP address of the ga teway. The gate way is an immediate neighbor of your ZyAIR that will forward the packe t to the destination. On the LAN, the gateway must be a router on the same se gment as your Z[...]

ZyAIR Access Point Series User’s Guide Wizard Setup 3-9 Well done! You have successfully set up your ZyAIR to operate on your network and ac cess the Internet.[...]

[...]

System, Wireless, VLAN and IP II Part II: SYSTEM, WIRELESS, VLAN AND IP This part covers the inform ation and web configur ator screens of System, Wireless, VLAN and IP .[...]

[...]

ZyAIR Access Point Series User’s Guide System Screens 4-1 Chapter 4 System Screens This chapter provides information on the System screens. 4.1 System Overview This section provides inf ormation on general system set up. 4.2 Configuring General Setup Click ADVANC ED and th en SYSTEM to open the General screen. Figure 4-1 System General Setup The [...]

ZyAIR Access Point Series User’s Guide 4-2 System Screens Table 4-1 System General Setup LABEL DESCRIPTION System Name Type a descriptive name to identif y the ZyAIR in the Ethernet net work. This name can be up to 30 alpha numeric charac ters long. Spaces ar e not allowed, but dashes "-" and underscores "_" are acce pted. Dom[...]

ZyAIR Access Point Series User’s Guide System Screens 4-3 Figure 4-2 Password The following table describes the labels in this screen. Table 4-2 Password LABEL DESCRIPTION Old Password Type in your existing system pass word (1234 is the default password). New Password Type your new s ystem password (up to 31 characters). Note that as you type a p[...]

ZyAIR Access Point Series User’s Guide 4-4 System Screens Figure 4-3 Time Setting The following table describes the labels in this screen. Table 4-3 Time Setting LABEL DESCRIPTION Time Protocol Select the time service protocol that your time server sends when you turn on the ZyAIR. Not all time servers support all prot ocols, so you ma y have to [...]

ZyAIR Access Point Series User’s Guide System Screens 4-5 Table 4-3 Time Setting LABEL DESCRIPTION Time Server Address Enter the IP address or the URL of your time server. Check with your ISP/network administrator if you are uns ur e of this information. Current Time (hh:mm:ss) This field displays the time of your ZyAIR. Each time you reload this[...]

[...]

ZyAIR Access Point Series User’s Guide System Screens 5-1 Chapter 5 Wireless Configuration and Roaming This chapter discusses how to configure Wireless and Roaming screens on the ZyAIR. Some features such as Multiple-ESS are not available on all models. 5.1 Wireless LAN Overview This section introduces the wireless LA N (WLAN) and so me basi c sc[...]

ZyAIR Access Point Series User’s Guide 5-2 Wireless Configuration and Roaming Figure 5-2 Basic Service set 5.1.3 ESS An Extended Service Set (ESS) consists of a series of overlapping BSSs, each contai ning an access point, with each access point conne cted together by a wired ne twork. This wired connection between APs is called a Distribution Sy[...]

ZyAIR Access Point Series User’s Guide System Screens 5-3 Figure 5-3 Extended Service Set 5.2 Wireless LAN Basics Refer also to the Wizard Setup chapter for more backgro und information on Wireless LAN features, suc h as channels. 5.2.1 RTS/CTS A hidden node occurs when two stati ons are within range of the sam e acce ss point, but are not within[...]

ZyAIR Access Point Series User’s Guide 5-4 Wireless Configuration and Roaming Figure 5-4 RTS/CTS When station A sends data to th e ZyAIR, it might not know th at the station B is already using the chann el. If these two stations send data at the same time, collision s may occur when both sets of data arrive at the AP at the same time, resulting i[...]

ZyAIR Access Point Series User’s Guide System Screens 5-5 A large Fragmentation Thre shold is recommend ed for networks no t prone to interfer ence while you shou ld set a smaller t hreshold for b usy networks or networks that are pr one to inte rference. If the Fragmentation Thres hold value is smaller than th e RTS/CTS value (see previously) yo[...]

ZyAIR Access Point Series User’s Guide 5-6 Wireless Configuration and Roaming The following table describes the general wireless LAN labels in this screen. Table 5-1 Wireless LABEL DESCRIPTION Operating Mode Select the operating mode from the drop-d own list. Options are Access Point , Multiple ESS and Bridge . The screen changes when you select [...]

ZyAIR Access Point Series User’s Guide System Screens 5-7 5.4 Configuring Bridge The ZyAIR can function as a wireless netw ork bridge all owing you to wirele ssly connect two wired net work segments. You nee d to know the MAC address o f the peer device, which also m ust be in bridge mode. In the example below, Computers B and C will be ab le to [...]

ZyAIR Access Point Series User’s Guide 5-8 Wireless Configuration and Roaming Figure 5-8 Bridge Loop: Bridge Connected to Wir ed LAN To prevent bridge loops, en sure that your ZyAIR is not set to bridge mode while connec ted to both wired and wireless segments of t he same LAN. Click ADVANC ED and WIRELESS . Select Bridge in the Operating Mode dr[...]

ZyAIR Access Point Series User’s Guide System Screens 5-9 Figure 5-9 Wireless : Bridge The following table describes the bridge labels in this screen. Table 5-2 Wireless : Bridge LABEL DESCRIPTION Operating Mode Select Bridge in this field to displa y the screen as shown in Figure 5- 9 . Peer Bridge MAC Address Type the MAC address of the peer de[...]

ZyAIR Access Point Series User’s Guide 5-10 Wireless Configuration and Roaming 5.5 Configuring Roaming A wireless station is a device with an IEEE 802.11b compliant wireless a dapters. An access point (AP) acts as a bridge between the wirel ess and wired networks. An AP creates its own wireless coverage area. A wireless station can associate with[...]

ZyAIR Access Point Series User’s Guide System Screens 5- 11 The steps below describe the roaming proce ss. Step 1. As wireless station Y moves from the coverage area of acce ss point AP 1 to that of access point AP 2 , it scans and uses the signal of access point AP 2 . Step 2. Access point AP 2 acknowledges t he presence of wireless station Y an[...]

ZyAIR Access Point Series User’s Guide 5-12 Wireless Configuration and Roaming Table 5-3 Roaming LABEL DESCRIPTION Active Select Yes from the drop-down list box to enable roaming on the Z yAIR if you have two or more ZyAIRs on the same subnet. All APs on the same subnet and the wireless st ations must have the same ESSID to allow roaming. Port # [...]

ZyAIR Access Point Series User’s Guide Wireless Security 6-1 Chapter 6 Wireless Security This chapter describes how to use the MAC F ilter, 802.1x, Local User Database and RADIUS to configure wireless security on your ZyAIR. 6.1 Wireless Security Overview Wireless security is vital to your network to prot ect wireless communicati on between wirel[...]

ZyAIR Access Point Series User’s Guide 6-2 Wireless Security 6.2.2 Authentication Three diffe rent method s can be use d to authenti cate wireless st ations to t he network: Open System , Shared Key , and Auto . The following figure illustrates the steps involved. Wireless Station Access Point Open System Request Authentication Acceptance Authent[...]

ZyAIR Access Point Series User’s Guide Wireless Security 6-3 When your ZyAIR's authenti cation method is se t to open system, it will only accept ope n system authentication requests. The same is true for shared key authen tication. However, when it is set to auto authentication, the ZyAIR will accept e ither type of authe ntication reques t[...]

ZyAIR Access Point Series User’s Guide 6-4 Wireless Security The following table d escribes the wireless LAN security lab els in this screen. Table 6-1 Wireless LABEL DESCRIPTION WEP Encryption Select Disable to allow wireless stations to communi cate with the access points without any data encryption. Select 64-bit WEP or 128-bit WEP to enable d[...]

ZyAIR Access Point Series User’s Guide Wireless Security 6-5 Table 6-1 Wireless LABEL DESCRIPTION Reset Click Reset to beg in configuring this screen afresh. 6.4 MAC Filter The MAC filter screen allows you to confi gure the ZyAIR to give exclusive access to up to 32 de vices (Allow Association) or exclude up to 32 devices from accessing the ZyAIR[...]

ZyAIR Access Point Series User’s Guide 6-6 Wireless Security Figure 6-4 MAC Address Filter The following table describes the labels in this screen. Table 6-2 MAC Address Filter LA BEL DESCRIPTION Active Select Yes from the drop down list bo x to enable MAC address filtering.[...]

ZyAIR Access Point Series User’s Guide Wireless Security 6-7 Table 6-2 MAC Address Filter LA BEL DESCRIPTION Filter Action Define the filter action for the list of MAC addresses in the MAC address filter table. Select Deny Association to block access to the router, MAC addresses not listed will be allowed to access the router. Select Allow Associ[...]

ZyAIR Access Point Series User’s Guide 6-8 Wireless Security • Access-Reject Sent by a RADIUS server rejecting access . • Access-Accept Sent by a RADIUS server allowing access. • Access-Challenge Sent by a RADIUS server requesting m ore inform ation in order to allow access. The access point sends a proper response from the user and then se[...]

ZyAIR Access Point Series User’s Guide Wireless Security 6-9 Ether net A P RADI US Ser ver W i reless S tation Figure 6-5 EAP Authentication The details below provide a gener al description of how IEEE 802.1x EAP auth entication works. For an example list of EAP-MD5 authentication st eps, see the IEEE 802.1x appendix. • The wireless station sen[...]

ZyAIR Access Point Series User’s Guide 6-10 Wireless Security 6.8 Introduction to Local User Database By storing user profiles locally on the ZyAIR, your ZyAIR is able to authenticate wireless users without interacting with a network RADIUS server. Howeve r, there is a limit on t he number of users you m ay authenticate in this way. 6.9 Configuri[...]

ZyAIR Access Point Series User’s Guide Wireless Security 6-11 Table 6-3 802.1x Authentication LABEL DESCRIPTION Wireless Port Control To control wireless stations access to the wired net work, select a control method from the drop-down list box. Cho ose from No A uthentication R equired , Authentication Required and No Access Allowed . No Authent[...]

ZyAIR Access Point Series User’s Guide 6-12 Wireless Security Table 6-3 802.1x Authentication LABEL DESCRIPTION Authentication Databases This field is activated only when you select Authentication Required in the Wireless Port Control field. The authentication databas e cont ains wireless station login information. The local user database is the [...]

ZyAIR Access Point Series User’s Guide Wireless Security 6-13 6.10 Configuring Local User Dat abase To change your ZyAI R’s local user da tabase, click ADVANCED , WIRELESS and then the Local User Database tab. The screen appears as shown. Figure 6-7 Local User Database[...]

ZyAIR Access Point Series User’s Guide 6-14 Wireless Security The following table describes the labels in this screen. Table 6-4 Local User Database LABEL DESCRIPTION Active Select this check box to activate the user profile. User Name Enter the username (up to 31 characters) for this user profile. Password Type a password (up to 31 characters) f[...]

ZyAIR Access Point Series User’s Guide Wireless Security 6-15 The following table describes the labels in this screen. Table 6-5 RADIUS LABEL DESCRIPTION Authentication Server Active Select Yes from the drop-down list box to e nable us er authentication throug h an external authenti cation server. Select No to enable user aut hentication using t [...]

[...]

ZyAIR Access Point Series User’s Guide Multiple ESS and VLAN 7-1 Chapter 7 Multiple ESS and VLAN This chapter is only applicable to the ZyAIR B-3000. 7.1 Wireless LAN Infrastructures See the Wizard Setup and Wireless Configuration chapters for s ome basic WL AN scenarios a nd termi nology. 7.1.1 Multiple ESS Traditionally, you needed d ifferent A[...]

ZyAIR Access Point Series User’s Guide 7-2 Multiple ESS and VLAN Station 1 relays communications via the ZyAIR within the Multi-ESS coverage area and with AP X if it moves to the RD ESS coverage area. Similarly, station 2 relays communications via the ZyAIR within the Multi-ESS coverage ar ea and with AP Y if it moves to the Sales ESS coverage ar[...]

ZyAIR Access Point Series User’s Guide Multiple ESS and VLAN 7-3 If no devices are in the management VLAN, then no one will be able to access the ZyAIR and you will have to restore the default configuration file. 7.2.2 Multi-ESS with VLAN Example In this exam ple, VLAN 2 is the ma nagement VL AN and incl udes the comput ers in ESS1 an d LAN 1. Co[...]

ZyAIR Access Point Series User’s Guide 7-4 Multiple ESS and VLAN Figure 7-3 Wireless : Multiple ESS The following table describes the labels in this screen.[...]

ZyAIR Access Point Series User’s Guide Multiple ESS and VLAN 7-5 Table 7-1 Wireless : Multiple ESS LABEL DESCRIPTION Operating Mode Select Multiple ESS in this field to display the screen as shown in Figure 7-3 . Choose Channel ID Set the operating frequenc y/channel dep ending on your par ticular region. To manually set the ZyAIR to use a chan n[...]

ZyAIR Access Point Series User’s Guide 7-6 Multiple ESS and VLAN Figure 7-4 Wireless : Edit ESS The following table describes the labels in this screen. Table 7-2 Wireless : Edit ESS LABEL DESCRIPTION ESSID Enter a descriptive name (up to 32 al phanum eric characters) for identification purposes. This name is case sensitive. Active Select this ch[...]

ZyAIR Access Point Series User’s Guide Multiple ESS and VLAN 7-7 Table 7-2 Wireless : Edit ESS LABEL DESCRIPTION Unicast WEP key Key 1 or Key 2 Ke y 1 or key 2 is used to encrypt unicast transmissions. If you chose 64-bit WEP , then enter any 5 A SCII characters or 10 hexade cimal characters ("0-9", "A-F"). If you chose 128-bi[...]

ZyAIR Access Point Series User’s Guide 7-8 Multiple ESS and VLAN Figure 7-5 MAC Filter Summary The following table describes the labels in this screen. Table 7-3 MAC Filter Summary LABEL DESCRIPTION Set This is the index number of each ESS. ESSID This is the identification name of each ESS. Status This field displays Disable if the MAC filter is [...]

ZyAIR Access Point Series User’s Guide Multiple ESS and VLAN 7-9 Figure 7-6 VLAN The following table describes the labels in this screen. Table 7-4 VLAN LABEL DESCRIPTION Enable VLAN Tagging Select this check box to turn on VLAN tagging. Management VLAN ID Enter a number from 1 to 255 to define this VLAN group. At least one devic e in your networ[...]

[...]

ZyAIR Access Point Series User’s Guide IP 8-1 Chapter 8 IP Screen This chapter discusses how to configure IP on the ZyAIR 8.1 Factory Ethernet Defaults The Ethernet param eters of the ZyAIR are pres et in the factory with the following values: • IP address of 192.168.1.2 • Subnet mask o f 255.255.2 55.0 (24 bits ) These parameters should work[...]

ZyAIR Access Point Series User’s Guide 8-2 IP Regardless of your p articular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address a ssignment, please refer to RFC 15 97, Address Allocation for Private Internet s and RFC 1466, Guidelines for Management of IP Address Sp ace. 8.3 Confi[...]

ZyAIR Access Point Series User’s Guide IP 8-3 Table 8-2 IP Setup LA BEL DESCRIPTION Get automatically Select this option if your ZyAIR is usin g a dynamicall y assigned IP address from a DHCP server each time. Y ou must know the IP ad dress assigned to the ZyAIR (by the DHCP se rver) to access the Zy AIR again. Use fixed IP address Select this op[...]

[...]

Logs III Part III: LOGS This part prov ides information and configuration in structions for the logs.[...]

ZyAIR Access Point Series User’s Guide Logs Screens 9-1 Chapter 9 Logs Screens This chapter contains informati on about configuring general log s ettings and viewing the ZyAIR’s logs. Refer to the appendix for example log message explanations. 9.1 Configuring View Log The web configurator allows you to look at all of the ZyAIR’s logs in one l[...]

ZyAIR Access Point Series User’s Guide 9-2 Logs Screens The following table describes the labels in this screen. Table 9-1 View Log LABEL DESCRIPTION Display Select a log category from the drop down list box to displa y logs within the selected category. To vie w all logs, select All Logs . The number of categories sho wn in the drop do wn list b[...]

ZyAIR Access Point Series User’s Guide Logs Screens 9-3 Figure 9-2 Log Settings The following table describes the labels in this screen. Table 9-2 Log Settings LABEL DESCRIPTION Address Info[...]

ZyAIR Access Point Series User’s Guide 9-4 Logs Screens Table 9-2 Log Settings LABEL DESCRIPTION Mail Server Enter the server name or the IP addr ess of the mail serv er for the e-mail addresses specified below. If this field is left blank, logs and alert messages will not be sent via e-mail. Mail Subject Type a title that you want to be in the s[...]

ZyAIR Access Point Series User’s Guide Logs Screens 9-5 Table 9-2 Log Settings LABEL DESCRIPTION Send Immediate Alert Select the categories of alerts for which you want the ZyAIR to immediately send e-mail alerts. Apply Click Apply to save your customized settings and exit this screen. Reset Click Reset to reconfi gure all the fields in this scre[...]

Maintenance IV Part IV: MAINTENANCE This part describ es the Maintenan ce web configurator screen s.[...]

[...]

ZyAIR Access Point Series User’s Guide Maintenance 10-1 Chapter 10 Maintenance This chapter displays system information such as ZyNOS firmware, port IP addresses and port traffic statistics. 10.1 Maintenance Overview The maintenance scree ns can help you view syst em info rm ation, upload n ew firmware, m anage configuratio n and restart your ZyA[...]

ZyAIR Access Point Series User’s Guide 10-2 Maintenance Table 10-1 System Status LA BEL DESCRIPTION ZyNOS Firmware Version This is the ZyNOS Firmware version and the date created. ZyNOS is ZyXEL' s proprietary Network Operating S ystem design. Routing Protocols T his shows the routing protocol – BRIDGE for which the Z yAIR is configured. I[...]

ZyAIR Access Point Series User’s Guide Maintenance 10-3 Table 10-2 System Status: Sho w Statistics LA BEL DESCRIPTION Status This shows the port speed and duple x setting if you are using Ethernet encapsu lation for the Ethernet port. This shows the transmission speed only for wireless port. TxPk ts This is the number of transmitted packets on th[...]

ZyAIR Access Point Series User’s Guide 10-4 Maintenance Figure 10-3 Association List The following table describes the labels in this screen. Table 10-3 Association List LA BEL DESCRIPTION # This is the index number of an associated wireless station. MAC Address This field displays the MAC address of an associated wireless station. Association Ti[...]

ZyAIR Access Point Series User’s Guide Maintenance 10-5 Figure 10-4 Channel Us age (ZyAIR B-1000) The following table describes the labels in this screen. Table 10-4 Channel Usage (ZyAIR B-1 000) LA BEL DESCRIPTION Channel T his is the index number of the channel currently used by the associate d AP in an Infrastructure wireless network or wirele[...]

ZyAIR Access Point Series User’s Guide 10-6 Maintenance Figure 10-5 Channel Usa ge The following table describes the labels in this screen. Table 10-5 Channel Usage LA BEL DESCRIPTION SSID This is the Service Set IDentification nam e of the AP in an Infrastructure wireless network or wireless station in an Ad-Hoc wi reless network. For our purpos[...]

ZyAIR Access Point Series User’s Guide Maintenance 10-7 Table 10-5 Channel Usage LA BEL DESCRIPTION Network Mode “Network mode” in this screen refers to your wireless LAN infrastructure (refer to the Wireless LAN chapter) and WEP setup. Network modes are: Infrastructure (same as an extende d service set ESS)), Infrastructure w ith WEP (WEP en[...]

ZyAIR Access Point Series User’s Guide 10-8 Maintenance Table 10-6 Firmware Upload LA BEL DESCRIPTION File Path Type in the location of the file you want to upload i n this field or click Browse ... to find it. Browse... Click Browse... to find the .bin file you want to upl oad. Remember that you must decompress compressed (.zip) files before you[...]

ZyAIR Access Point Series User’s Guide Maintenance 10-9 If the upload was not successful, the fo llowing screen will appear. Click Return to go back to the F/W Upload screen. Figure 10-9 Firm ware Upload Error 10.5 Configuration Screen The web co nfigur ator use s TFTP to tr ansfer f iles. Se e the Firmware and Configu ration File Mainten ance ch[...]

ZyAIR Access Point Series User’s Guide 10-10 Maintenance Figure 10-10 Backup Configura tion 10.5.2 Restore Configuration Restore confi guration repl aces your ZyAIR 's current co nfiguration with a pre viously sav ed configurati on. Restore file s (usually) ha ve a .ROM ext ension, e.g ., "zyair.rom ". The system reboots auto matic[...]

ZyAIR Access Point Series User’s Guide Maintenance 10-11 Table 10-7 Restore Confi guration LA BEL DESCRIPTION File Path Type in the location of the file you want to upload i n this field or click Browse ... to find it. Browse... Click Browse... to find the file yo u want to upload. Remember that you must decompress compressed (.ZIP) files bef ore[...]

ZyAIR Access Point Series User’s Guide 10-12 Maintenance If the upload was not successful, the fo llowing screen will appear. Click Return to go back to the Configuration screen. Figure 10-14 Configurati on Upload Error 10.5.3 Back to Factory Default s Clicking t he Reset button in this section clears all user-enter ed configuration information a[...]

ZyAIR Access Point Series User’s Guide Maintenance 10-13 Figure 10-16 Reset Warni ng Message You can also press the RESET button on the rear panel to reset the factory defaults of your ZyAIR. Ref er to the Resetting the ZyAIR section for more info rmation on the RESET button.[...]

[...]

SMT Configuration V Part V: SMT CONFIGURATION This part cont ains SMT (System Manage ment T erminal) configuration and background information for features only configurable by SMT . See the web configurator p arts of this guide for background information on features configurable by web configurator a nd SMT .[...]

[...]

ZyAIR Access Point Series User’s Guide Introducing the SMT 11-1 Chapter 11 Introducing the SMT This chapter describes how to access the SMT and provides an overview of its menus . 11.1 Connect to your ZyAIR Using T elnet The following proced ure details how to telnet into your ZyAIR. Step 1. In Windows, click St art (usually in the bottom left co[...]

ZyAIR Access Point Series User’s Guide 11-2 Introducing the SMT Figure 11-2 Menu 23.1 Sy stem Securit y : Change Pass w ord Step 4. Type your ne w system password in the New Passw ord field (up to 30 cha racters), and press [ENTER] . Step 5. Re-type your new system password in th e Retype to confirm field for confirm ation and p ress [ENTER] . No[...]

ZyAIR Access Point Series User’s Guide Introducing the SMT 11-3 ZyAIR B-30 00 Main Menu Menu 1 General S etup Menu 3 LAN Setup Menu 3.5 Wireless LAN Setu p Menu 3.2 TCP/IP Setup Me nu 3 .5. 1 WLAN MAC Address Filter Menu 3.5. 2 Roaming Configuration Menu 14 Dial -in U ser Setup Menu14.1 Edit Di al-in User Menu 22 SNMP Configuration Menu 23 Syste [...]

ZyAIR Access Point Series User’s Guide 11-4 Introducing the SMT 11.4 Navigating the SMT Interface The SMT (System Management Terminal) is the inte rface that you use t o configure you r ZyAIR. Several operations that you should be familiar with before you attempt to modify the configuration are listed in the table below. Table 11-1 Main Menu Comm[...]

ZyAIR Access Point Series User’s Guide Introducing the SMT 11-5 Figure 11-4 ZyAIR B-300 0 SMT Main Menu 11.4.1 System Management T erminal Interface Summary Table 11-2 Main Menu Summary # MENU TITLE DESCRIPTION 1 General Setup Use this menu to set up your general information. 3 LAN Setup Use this menu to set up your LAN and WLAN connection. 14 Di[...]

[...]

ZyAIR Access Point Series User’s Guide General Setup 12-1 Chapter 12 General Setup The chapter shows you the information on general setup. 12.1 General Setup Menu 1 – General Setup contains admini strative and syste m-related informati on (shown ne xt). The System Name fiel d is for id entification p urposes. It is recomm ended you type y our c[...]

ZyAIR Access Point Series User’s Guide 12-2 General Setup Table 12-1 Menu 1 General Setup FIELD DESCRIPTION EXAMPLE System Name Choose a descriptive name fo r identification purp oses. This name can be up to 30 alphanumeric characters lon g. Spaces are not allowed, but dashes “-” and underscores "_" are acce pted. B-3000 Domain Name[...]

ZyAIR Access Point Series User’s Guide LAN Setup 13-1 Chapter 13 LAN Setup This chapter shows you how to configure the LAN on your ZyAIR. . 13.1 LAN Setup This section describes how to configure the Ethern et using Menu 3 – LAN Setup . From the main menu, enter 3 to displ ay menu 3. Figure 13-1 Menu 3 LAN Setup Detailed e xplanation about the L[...]

ZyAIR Access Point Series User’s Guide 13-2 LAN Setup Follow the instructions in the following table on how to configur e the fields in this menu. Table 13-1 Menu 3.2 TCP/IP Setup FIELD DESCRIPTION EXAMPLE IP Address Assignment Press [SPACE BAR] and then [ENTER] to select Dynamic to have the ZyAIR obtain an IP address from a DHCP server. You must[...]

ZyAIR Access Point Series User’s Guide LAN Setup 13-3 Figure 13-3 Menu 3.5 Wireless LAN Setup The following table describes the fields in this menu. Table 13-2 Menu 3.5 Wireless LAN Setup FIELD DESCRIPTION EXMAPLE Operating Mode Press [SPACE BAR] and select Access Point , Multiple ESS or Bridge . This field is not available on al l models. Access[...]

ZyAIR Access Point Series User’s Guide 13-4 LAN Setup Table 13-2 Menu 3.5 Wireless LAN Setup FIELD DESCRIPTION EXMAPLE WEP Encryption Select Disable to allow wireless stations to communicate with the access points without any data encr yption. Select 64-bit WEP or 128-bit WEP to enable data e ncryption. Disable Default Key Enter the key number (1[...]

ZyAIR Access Point Series User’s Guide LAN Setup 13-5 13.3.1 Configuring MAC Address Filter Your ZyAIR checks the MAC address of the wireless station device against a list of all owed or denie d MAC addresses. H owever, int ruders could fake allowed M AC addresses so MAC-based authenticati on is less secure than EAP authenti cation. Follow the st[...]

ZyAIR Access Point Series User’s Guide 13-6 LAN Setup Figure 13-5 Menu 3.5.1 WLAN M AC Address Filter The following table describes the fields in this menu. Table 13-3 Menu 3.5.1 WLAN M AC Address Filter FIELD DESCRIPTION Active To enable MAC address filter ing, press [SPACE BAR] to select Yes and press [ENTER]. Filter Action Define the filter ac[...]

ZyAIR Access Point Series User’s Guide LAN Setup 13-7 13.3.2 Configuring Roaming Enable the roaming featur e if you have two or more ZyAIRs on the same subnet. Follow th e steps below to allow roam ing on your ZyAIR. Step 1. From the main menu, enter 3 to display Menu 3 – LAN Setup . Step 2. Enter 5 to displ ay Menu 3.5 – Wireless LAN Setup .[...]

ZyAIR Access Point Series User’s Guide 13-8 LAN Setup Table 13-4 Menu 3.5.2 Roaming Confi guration FIELD DESCRIPTION Active Press [SPACE BAR] and then [ENTER] to select Yes to enable roaming on the ZyAIR if you have two or more ZyAIRs on the same subnet. Port # Type the port number to communicate roam ing information bet ween access points. The p[...]

ZyAIR Access Point Series User’s Guide LAN Setup 13-9 Figure 13-9 Menu 3.5.3 Multiple ESS Configuration The following table describes the fields in this menu. Table 13-5 Menu 3.5.3 Mu ltiple ESS C onfiguration FIELD DESCRIPTION EXAMPLE WEP Press [SPACE BAR] to select 64-bit WEP or 128-bit WEP . Action Press [SPACE BAR] to select Edit or Delete . [...]

ZyAIR Access Point Series User’s Guide 13-10 LAN Setup Figure 13-10 Menu 3.5.3.1 ESS x Configuration The following table describes the fields in this menu. Table 13-6 Menu 3.5.3.1 ESS x Configuration FIELD DESCRIPTION ESSID Enter the descr iptive name up to 32 al phanumeric characters for identificat ion. This field is case sensitive. Active Pres[...]

ZyAIR Access Point Series User’s Guide LAN Setup 13-11 Table 13-6 Menu 3.5.3.1 ESS x Configuration FIELD DESCRIPTION Edit MAC Address Filter Each service set has its own MAC address filter. Refer to MAC Address Filter section for details. When you have compl eted this menu, press [ENTER] at the prompt “Press ENTER to confirm or ESC to cancel”[...]

ZyAIR Access Point Series User’s Guide 13-12 LAN Setup Figure 13-12 Menu 3.5.4 Bridge Link Configura tion The following table describes the fields in this menu. Table 13-7 Menu 3.5.4 Bridge Link Co nfiguration FIELD DESCRIPTION EXAMPLE Active Press [SPACE BAR] to select Yes or No and press [ENT ER]. No Peer Address Type the MAC address of peer de[...]

ZyAIR Access Point Series User’s Guide Dial-in User Setup 14-1 Chapter 14 Dial-in User Setup This chapter shows you how to create user accounts on the ZyAIR. 14.1 Dial-in User Setup By storing user profiles locally, your ZyAIR is able to authenticate wireless users without interacting with a network RAD IUS server. Follow the steps below to set u[...]

ZyAIR Access Point Series User’s Guide 14-2 Dial-in User Setup Table 14-1 Menu 14.1- Edit Dial-in User FIELD DESCRIPTION User Name Enter a username up to 31 a lphanumeric characters lo ng for this user profile. This field is case sensitive. Active Press [SPACE BAR] to select Yes and press [ENTER] to enable the user profile. Password Enter a passw[...]

ZyAIR Access Point Series User’s Guide VLAN Setup 15-1 Chapter 15 VLAN Setup This chapter explains VLAN Setup menu 16. Re fer to the Multiple-ESS and VLAN chapter for background information on VLAN. This chapt er is not available on all models. 15.1 VLAN Setup To setup VLAN, select option 16 from the main me nu to ope n Menu 16 – VLAN Set up as[...]

[...]

ZyAIR Access Point Series User’s Guide SNMP Configuration 16-1 Chapter 16 SNMP Configuration This chapter explains SNMP Configuration menu 22. 16.1 About SNMP Simple Netw ork Managem ent Protocol is a p rotocol use d for excha nging m anagement i nformation between network de vices. SNMP is a mem b er of the TC P/IP protoc ol suite. Y our ZyAIR s[...]

ZyAIR Access Point Series User’s Guide 16-2 SNMP Configuration An agent is a managem ent software m odule that resides i n a managed device (the Zy AIR). An agent translates the local management information from the managed device into a form compatible with SNMP. The manager i s the console throug h which net work ad m inistrators perfor m netwo[...]

ZyAIR Access Point Series User’s Guide SNMP Configuration 16-3 Figure 16-2 Menu 22 SNMP Configuration The following table d escribes the SNMP configu ration parameters. Table 16-1 Menu 22 SNMP Configur ation FIELD DESCRIPTION EXAMPLE SNMP: Get Community Type the Get Community , which is the password for the incoming Get- and GetNext requests from[...]

ZyAIR Access Point Series User’s Guide 16-4 SNMP Configuration Table 16-2 SNMP Traps TRAP # TRAP NAME DESCRIPTION 1 coldStart ( defined in RFC-121 5 ) A trap is sent after booting ( power on). 2 warmStart ( defined in RFC-1215 ) A trap is sent after booting (software reboot). 3 linkUp ( defined in RF C-1215 ) A trap is sent when the port is up. 4[...]

ZyAIR Access Point Series User’s Guide System Security 17-1 Chapter 17 System Security This chapter describes how to configure the system security on the ZyAIR. 17.1 System Security You can confi gure the system password, a n external RADIUS server a nd 802.1x in t his menu. 17.1.1 System Passw ord Figure 17-1 Menu 23 Sy s tem Security You should[...]

ZyAIR Access Point Series User’s Guide 17-2 System Security Figure 17-3 Menu 23.2 Sy stem Securit y : RADIUS Server The following table describes the fields in this menu. Table 17-1 Menu 23.2 Sy s tem Security : RADIUS Serv er FIELD DESCRIPTION EX AMPLE Authentication Server Active Press [SPACE BAR] to select Yes and press [ENTER] to enable user [...]

ZyAIR Access Point Series User’s Guide System Security 17-3 Table 17-1 Menu 23.2 Sy s tem Security : RADIUS Serv er FIELD DESCRIPTION EX AMPLE Port The default port of the RADIUS server for accounting is 1813 . You need not change this value unl ess your network administrator instructs you to do so with additional information. 1813 Shared Secret [...]

ZyAIR Access Point Series User’s Guide 17-4 System Security Figure 17-5 Menu 23.4 Sy stem Securit y : IEEE802.1x The following table describes the fields in this menu. Table 17-2 Menu 23.4 Sy stem Security : IEEE802.1x FIELD DESCRIPTION Wireless Port Control Press [SPACE BAR] and select a security mode for the wireless LAN access. Select No Authe[...]

ZyAIR Access Point Series User’s Guide System Security 17-5 Table 17-2 Menu 23.4 Sy stem Security : IEEE802.1x FIELD DESCRIPTION Authentication Databases This field is activated only when you se lect Authentication Required in the Wireless Port Control field. The authentication databas e contains wireless station login information. The local user[...]

[...]

ZyAIR Access Point Series User’s Guide System Information and Diagnosis 18-1 Chapter 18 System Information and Diagnosis This chapter covers the information and diag nostic tools in SMT menus 24.1 to 24.4. These tools include updates on system status, port status, log and trace capabilities and upgrades for the system software. This chapter descr[...]

ZyAIR Access Point Series User’s Guide 18-2 System Information and Diagnosis Figure 18-2 Menu 24.1 Sy stem Maintenance : Status The following table describes the fields presen t in this menu. Table 18-1 Menu 24.1 Sy stem Maintenance : Status FIELD DESCRIPTION Port This is the port type. Port types are: Ethernet and Wireless Status This shows the [...]

ZyAIR Access Point Series User’s Guide System Information and Diagnosis 18-3 Table 18-1 Menu 24.1 Sy stem Maintenance : Status FIELD DESCRIPTION System Up Time This is the time the ZyAI R is up and running from the last reboot. 18.2 System Information To get to the System Information: Step 1. Enter 24 to display Menu 24 – System Maintena nce . [...]

ZyAIR Access Point Series User’s Guide 18-4 System Information and Diagnosis The following table describes the fields in this menu. Table 18-2 Menu 24.2.1 Sy stem Maintenance : Information FIELD DESCRIPTION Name Displays the system name of your Zy AIR. This information can be changed in Menu 1 – General Setup . Routing Refers to the routing pro[...]

ZyAIR Access Point Series User’s Guide System Information and Diagnosis 18-5 18.3 Log and T race Your ZyAIR provides the error logs and trace records that are stored local ly. 18.3.1 Viewing Error Log The first place you should look for clues when som e thing goes wrong is th e error log. Follow the procedures to view the loc al error/trace log: [...]

ZyAIR Access Point Series User’s Guide 18-6 System Information and Diagnosis Figure 18-8 Menu 24.4 Sy stem Maintenance : Diagnostic Follow the procedure next to get to disp lay this menu: Step 1. From the main menu, type 24 to open Menu 24 – System Maintenance . Step 2. From this m enu, type 4. Diag nostic to open Menu 24. 4 – System Mainte n[...]

ZyAIR Access Point Series User’s Guide Firmware and Configuraiton File Maintenance 19-1 Chapter 19 Firmware and Configuration File Maintenance This chapter tells you how to backup and restor e your configuration file as well as upload n ew firmware and configuration files using the SMT screens. 19.1 Filename Convent ions The configu ration file ([...]

ZyAIR Access Point Series User’s Guide 19-2 Firmware and Configuraiton File Maintenance Table 19-1 Filename Conventions FILE TYPE INTERNAL NA ME EXTERNAL NA ME DESCRIPTION Configuration File Rom-0 *.rom This is the configuration fi lename on the ZyAIR. Uploading the rom-0 file replaces the entire ROM file system, including your Z yAIR configurati[...]

ZyAIR Access Point Series User’s Guide Firmware and Configuraiton File Maintenance 19-3 19.2.2 Using the FTP command from the DOS Prompt Step 1. Launch the FTP client on your c omputer. Step 2. Enter “open” and the IP addr ess of your ZyAIR. Step 3. Press [ENTER] when prom pted for a username. Step 4. Enter “root” and your SMT password as[...]

ZyAIR Access Point Series User’s Guide 19-4 Firmware and Configuraiton File Maintenance Table 19-2 General Commands for Third Party FTP Clients COMMAND DESCRIPTION Initial Remote Directory Specify the default remote director y (path). Initial Local Directory Specify the default local dir ectory (path). 19.2.3 Backup Confi guration Using TFTP The [...]

ZyAIR Access Point Series User’s Guide Firmware and Configuraiton File Maintenance 19-5 where “i” specifies binary image tra nsfer mode (use t his mode when transferring binary files), “host” is the ZyAIR IP address, “get” tra nsfers the file source on t he ZyAIR (rom-0 name of the configuration file on the ZyAIR) to the file destinat[...]

ZyAIR Access Point Series User’s Guide 19-6 Firmware and Configuraiton File Maintenance Figure 19-3 Menu 24.6 Restore Co nfiguration 19.4 Uploading Firmware and Configuration Files Menu 24.7 – System Main tenance – Upload Firmware allows y o u to upgrade t h e firmware an d the configuration file. WA R N I N G ! PLEASE W AIT A FEW MI NUTES FO[...]

ZyAIR Access Point Series User’s Guide Firmware and Configuraiton File Maintenance 19-7 19.4.1 Firmware Upload FTP is the pre ferred m ethod for uploa ding the firmware and co nfiguration. To use this feature, your computer m u st have an F TP client. When you telnet into the ZyAIR, you will see the following screens for uploading firmware and th[...]

ZyAIR Access Point Series User’s Guide 19-8 Firmware and Configuraiton File Maintenance Figure 19-6 Menu 24.7.2 Sy stem Maintenance : Upload System Configurati on File To transfer the firm ware and the conf iguration file, follow these examples: 19.4.3 Using the FTP command fr om the DOS Prompt Example Step 1. Launch the FTP client on your c ompu[...]

ZyAIR Access Point Series User’s Guide Firmware and Configuraiton File Maintenance 19-9 Figure 19-7 FTP Session Example More commands that you may find in third par ty FTP clients, are listed earlier in this chapter. 19.4.4 TFTP File Upload The ZyAIR also supports the up/downlo ading of the firmware and the configuration file using TFTP (Trivial [...]

ZyAIR Access Point Series User’s Guide 19-10 Firmware and Configuraiton File Maintenance 19.4.5 Example: TFTP Command The following is an exam ple TFTP command: TFTP [-i] host put firmware.bin ras where “i” specifies binary image tra nsfer mode (use t his mode when transferring binary files), “host” is the ZyAIR’s IP address, “ put”[...]

ZyAIR Access Point Series User’s Guide System Maintenance and Information 20-1 Chapter 20 System Maintenance and Information This chapter leads yo u through SMT menus 24.8 and 24.10. 20.1 Command Interpreter Mode The Command I nterpreter (CI) is a part o f the main system firmware. The CI provi des much of the same functionality as the SMT, while[...]

ZyAIR Access Point Series User’s Guide 20-2 System Maintenance and Information 20.2 T ime and Date Setting The ZyAIR keeps track of the time and date. There is also a software mechanism to set the time manually or get the current time and dat e from an external serv er when you turn on your ZyAIR. Menu 24.10 allow s you to updat e the tim e and d[...]

ZyAIR Access Point Series User’s Guide System Maintenance and Information 20-3 Table 20-1 Menu 24.10 System Main tenance : Time and Date Setting FIELD DESCRIPTION Use Time Server when Boo tup Enter the time service protocol that your time server sends when you turn on the ZyAIR. Not all time servers support all prot ocols, so you ma y have to che[...]

[...]

Appendices VI Part VI: APPENDICES This part prov ides troubleshooting and backgroun d information about setting up your compute r ’s IP address, wireless LA N, 802.1x, PPPoE, PPTP and IP subnetting. It also provides information on the antenna, PoE, command interpreter interface, NetBIOS co mmands and logs.[...]

[...]

ZyAIR Access Point Series User’s Guide T r oubleshooting A-1 Appendix A Troubleshooting This appendix covers potential problems and possibl e remedies. After each problem description, some instructions are provided to help you to diagnose and to solve the problem. Problems S t arting Up the ZyAIR Chart A-1 Troubleshooti ng the Start-Up of Your Zy[...]

ZyAIR Access Point Series User’s Guide A-2 T roubleshooting Chart A-2 Troubleshooti ng the Ethernet Interfa ce PROBLEM CORRECTIVE ACTION I cannot ping any computer on the LAN. If the ETHN LED on the front panel is off, c heck the Ethernet cable connections between your Z yAIR and the Ethernet device. Check the Ethernet cable connections be t ween[...]

ZyAIR Access Point Series User’s Guide T r oubleshooting A-3 Problems with the WLAN Interface Chart A-5 Troubleshooti ng the WLAN Interface PROBLEM CORRECTIVE ACTION Cannot access the ZyAIR from the WLAN. Make sure the wireless card is properly inse rted in the Z yAIR and the link LED is on. Make sure the wireless adapter on the wireless station [...]

[...]

ZyAIR Access Point Series User’s Guide Brute-Force Password Guessing Protection B-1 Appendix B Brute-Force Password Guessing Protection The followin g describes t he commands for enablin g, disabl ing and con figuring t he brute-f orce passwor d guessing prote ction mechanism for the password. See the Com mand Interpreter appendix for information[...]

[...]

ZyAIR Access Point Series User’s Guide Setting Up Y our Computer ’s IP Addres s C-1 Appendix C Setting up Your Computer’s IP Address All comput ers must have a 10M or 100M Ethe rnet adapter card and TCP/IP installed. Windows 9 5/98/Me/NT/ 2000/XP, Maci ntosh OS 7 and lat er operati ng system s and all versions of UNIX/LINU X include the softw[...]

ZyAIR Access Point Series User’s Guide C-2 Setting Up Your Computer’s IP Address If yo u need th e adap ter: a. In the Network window, click Add . b. Select Ad ap t e r and then click Ad d . c. Select the manufacturer and model of your network adapter and then click OK . If you need TCP/IP: a. In the Network window, click Add . b. Select Protoc[...]

ZyAIR Access Point Series User’s Guide Setting Up Y our Computer ’s IP Addres s C-3 1. Click the IP A d dress tab. -If your IP address is dynamic, select Obtain an IP address automatically . -If you have a static IP address, select Specify an IP address and type your informatio n into the IP Address and Subne t Mask fields. 2. Click the DNS Con[...]

ZyAIR Access Point Series User’s Guide C-4 Setting Up Your Computer’s IP Address 3. Click the Gateway tab. -If you do not know your gateway’s IP address, remove previously installed g ateways. -If you have a gateway IP address, type it in the Ne w gat ewa y f iel d and click Add . 4. Click OK to save and close the TCP/IP Properties wind ow. 5[...]

ZyAIR Access Point Series User’s Guide Setting Up Y our Computer ’s IP Addres s C-5 1. For Windo ws XP, click start , Control Panel . In Windows 2000/NT, click Start , Settings , Control Panel . 2. For Windo ws XP, click Network Connections . For Windows 2000/NT, click Network and Dial-up Connect ions . 3. Right-click Local A rea Connection and[...]

ZyAIR Access Point Series User’s Guide C-6 Setting Up Your Computer’s IP Address 4. Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties . 5. T he Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). -If you have a dynamic IP address click Obtain an IP address automaticall y . -If[...]

ZyAIR Access Point Series User’s Guide Setting Up Y our Computer ’s IP Addres s C-7 6. -If you do not know your gatewa y's IP address, remove any previously install ed gateways in the IP Settin gs tab and click OK . Do one or more of the following if you want to configure additional IP addres ses: -In the IP Settings tab, in IP addresses, [...]

ZyAIR Access Point Series User’s Guide C-8 Setting Up Your Computer’s IP Address 7. In the Internet Protocol TCP/IP Properties window (the Gene ral tab in Windows XP): -Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). -If you know your DNS server IP address(es), click Use the following DNS server [...]

ZyAIR Access Point Series User’s Guide Setting Up Y our Computer ’s IP Addres s C-9 1. Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel . 2. Select Ethernet built-in from the Connect v ia list. 3. For d ynamically assigned settings, select Using DHCP Server from the Configure: list.[...]

ZyAIR Access Point Series User’s Guide C-10 Setting Up Your Computer’s IP Address 4. For staticall y assigned settings, do the follo wing: -From the Configure box, select Manually . -Type your IP address in the IP Address box. -Type your subnet mask in the Subnet mask box. -Type the IP address of your ZyAIR in the Router address box. 5. Close t[...]

ZyAIR Access Point Series User’s Guide Setting Up Y our Computer ’s IP Addres s C-1 1 2. Click Network in the icon bar. - Select Automatic from the Location list. - Select Built-in Ethernet from the Show list. - Click the TCP/IP tab. 3. For dynamically assigned settings, sel ect Using DHCP from the Configure list. 4. For statically assigned set[...]

[...]

ZyAIR Access Point Series User’s Guide Wireless LAN and IEEE 802.11 D-1 Appendix D Wireless LAN and IEEE 802.11 A wireless LAN (WLA N) provides a flexi ble data co mmunications system that you can use to access various services (navi gating the Internet, email, printer services, etc.) without t he use of a cabled connection. In effect a wireless [...]

ZyAIR Access Point Series User’s Guide D-2 Wireless LAN and IEEE 802 .11 unlicensed ISM (Industrial, Scientific and Medical) ba nd. The th ird method is infrared techno logy, using very high fre quencies, just below vi sible light i n the electrom agnetic spect rum to carry data. Ad-hoc Wireless LAN Configuration The simplest WLAN config uration [...]

ZyAIR Access Point Series User’s Guide Wireless LAN and IEEE 802.11 D-3 The Extended Service Set (ESS) shown in the next figure consists of a series of overlapping BSSs (each containing an Access Point) connected together by means of a Distribution System (DS). Although the DS could be any type of net work, it i s almost invari ably an Ethernet L[...]

[...]

ZyAIR Access Point Series User’s Guide Wireless LAN with IEEE 802.1x E-1 Appendix E Wireless LAN With IEEE 802.1x As wireless networks becom e popular for both portable com puting an d corporate networks, sec urity is now a priority. Security Flaws with IEEE 802.1 1 Wireless networks based on the o riginal IEEE 802.1 1 have a po or reputation for[...]

ZyAIR Access Point Series User’s Guide E-2 Wireles s LAN with IEEE 80 2.1x RADIUS Server Authentication Se quence The following figure depicts a ty pical wirel ess network wi th a re mote RADI US server for user authentication using EA POL (EAP Over L AN). Diagram E-1 Sequences for EAP MD5–Challenge Authentication Client computer access authori[...]

ZyAIR Access Point Series User’s Guide Types of EAP Authentication F-1 Appendix F Types of EAP Authentication This appendix discu sses the four popular EAP authenticatio n types: EAP-MD5 , EAP-TLS , EAP-TTLS and PEAP . The type of auth entication you use depend s on the RADIUS server or the AP. Con sult your network a dministrat or for mor e info[...]

ZyAIR Access Point Series User’s Guide F-2 Types of EAP Authentication hiding client identity. However, P EAP only su pports EAP m ethods, such as EAP-MD5 a nd EAP- MSCHAPv2, for client authenticatio n. For added sec urity, certi ficate-based authe n tications (EAP-TLS, EAP-TT LS and PEAP) use dynam ic keys for data enc ryption. They are ofte n d[...]

ZyAIR Access Point Series User’s Guide Power over Ethernet Specifications G-1 Appendix G Power over Ethernet Specifications You can use a power ove r Ethernet injector to po wer this device. The inje ctor must comply to IEEE 802.3af. Chart 1 Power over Ethernet Injec tor Specifications Power Output 15.4 Watts maximum Power Current 400 mA maxim um[...]

[...]

ZyAIR Access Point Series User’s Guide Antenna Selection and Positioning Recommendation H-1 Appendix H Antenna Selection and Positioning Recommendation An antenna couples RF signals onto air. A transmitter within a wireless device sends an RF signal to the antenna, which propagates th e signal through the air. The antenna also op erates in revers[...]

ZyAIR Access Point Series User’s Guide H-2 Antenna Selection and Positioning Recommendation environm ent. With a wide coverage a rea, it is possi ble to ma ke circular ove rlapping co verage areas with multiple access poi nts. • Directional antennas conce n trate the RF signal in a beam , like a flashlight. The angle of the beam width determ in[...]

ZyAIR Access Point Series User’s Guide PPPoE I-1 Appendix I PPPoE PPPoE in Action An ADSL m odem bridges a PPP session over Ether net (PPP o ver Etherne t, RFC 2516 ) from y our PC to a n ATM PVC (Pe rmanent Virt ual Circuit), which c onnects to a DSL Access Conce ntrator wh ere the PPP session terminates (see the next figure). One PVC can suppor[...]

ZyAIR Access Point Series User’s Guide I-2 PPPoE How PPPoE Works The PPPoE driver m akes the Ethernet appear as a seri al link to the PC an d the PC runs PPP over it, while the modem bridge s the Ethernet frames to the Access Concentrator (AC ) . Between the AC and an ISP, the AC is acting as a L2TP (Layer 2 Tunneling Prot oc ol) L A C (L2TP Acce[...]

ZyAIR Access Point Series User’s Guide PPTP J-1 Appendix J PPTP What is PPTP? PPTP (Point -to-Point T unneling Pr otocol) is a Microsoft propriet ary proto col (RFC 26 37 for PPTP i s informational only) to tunnel PPP frames. How can w e transport PPP frames from a PC to a broadband modem over Ethernet? A solution is to build PPTP into th e ANT ([...]

ZyAIR Access Point Series User’s Guide J-2 PPTP PPTP Protocol Overview PPTP is very si milar to L2TP, since L2T P is based on both PPTP a nd L2F (Cisco’s Layer 2 Forwardi ng). Conceptually, there are three parties in PPTP, name ly the PNS (PPTP Network Serve r), the PAC (PPTP Access Concentrator) and the PPTP user. The PNS is the box that hosts[...]

ZyAIR Access Point Series User’s Guide PPTP J-3 Diagram J-3 Example Message Exchange bet w een PC and an ANT PPP Data Connection The PPP frames are tunneled betwee n the PNS and PAC over GRE (General Ro uting Encapsulation, RFC 1701, 1702). The individual calls with in a tunnel are distingu ished using the Call ID field in the GRE header.[...]

[...]

ZyAIR Access Point Series User’s Guide IP Subnetting K-1 Appendix K IP Subnetting IP Addressing Routers “route” base d on the network n umber. The rout er that delivers the data packet to the correct destination hos t uses the host ID. IP Classes An IP address is made up of four octets (eig ht bits), written in dotted deci mal notation, for e[...]

ZyAIR Access Point Series User’s Guide K-2 IP Subnetting A class “A” address (24 host bits) can have 2 24 –2 hosts (app roxim ately 16 m illion hosts). Since the first octet of a class “A” IP addre ss must c ontain a “0”, the first octet of a class “A” ad dress can have a value of 0 to 127. Similarly the first octet of a class ?[...]

ZyAIR Access Point Series User’s Guide IP Subnetting K-3 sequence of ones beginning from the left most bit of the mask, followed by a contin uous sequence of zeros, for a total number of 32 bits. Since the m ask is always a c ontinuous number of ones beginni ng from the left, foll owed by a c ontinuous number of zer os for the rem ainder of the 3[...]

ZyAIR Access Point Series User’s Guide K-4 IP Subnetting Divide the network 19 2.168.1. 0 into two se parate subnets by co nverting one of the host ID bits of the IP address to a networ k number bit. The “bor rowed” host ID bit can be either “0” or “1” thus giving two subnets; 192.168.1.0 with mask 255 .255.255.128 and 19 2.168.1.128 [...]

ZyAIR Access Point Series User’s Guide IP Subnetting K-5 to an actual host for the first su bnet is 192.168.1.1 an d the highest is 192.168.1.126. Similarly th e host ID range for the second subnet is 19 2.168.1.129 to 192.1 68.1.254. Example: Four Subnet s The above exam ple illustrated using a 25-bit subnet mask to divide a class “C” addres[...]

ZyAIR Access Point Series User’s Guide K-6 IP Subnetting Chart K-9 Subnet 3 NETWORK NUMBER LAST OCTET BIT VA LUE Subnet Mask (Binary) 11111111.11111111.11111111. 11 000000 Subnet Address: 192. 168.1.128 Lo west Ho st ID: 192.168.1.129 Broadcast Address: 192.168. 1.191 Hig hest Host ID: 192.168.1.190 Chart K-10 Subnet 4 NETWORK NUMBER LAST OCTET B[...]

ZyAIR Access Point Series User’s Guide IP Subnetting K-7 The following table is a summary for class “C” subnet planning. Chart K-12 Class C Subnet Planning NO. “BORROWED” HOST BITS SUBNET M ASK NO. SUBNETS NO. HOSTS PER SUBNET 1 255.255.255.128 (/25) 2 126 2 255.255.255.192 (/26) 4 62 3 255.255.255.224 (/27) 8 30 4 255.255.255.240 (/28) 1[...]

ZyAIR Access Point Series User’s Guide K-8 IP Subnetting Chart K-13 Class B Subnet Planning NO. “BORROWED” HOST BITS SUBNET MASK NO. SUBNETS NO. HOSTS PER SUBNET 9 255.255.255.128 (/25) 512 126 10 255.255.255.192 (/26) 1024 62 11 255.255.255.224 (/27) 2048 30 12 255.255.255.240 (/28) 4096 14 13 255.255.255.248 (/29) 8192 6 14 255.255.255.252 [...]

ZyAIR Access Point Series User’s Guide Command Interpreter L-1 Appendix L Command Interpreter The following describes how to use the command interpreter. Enter 24 in the main menu to bring up the system m a intenance m enu. Enter 8 to go to Menu 24.8 - Comm and Interpreter Mode . See the included disk or zyxel.c o m for m ore detail ed informat i[...]

[...]

ZyAIR Access Point Series User’s Guide NetBIOS Filter Commands M -1 Appendix M NetBIOS Filter Commands The following describes the NetBIOS packet filter commands. See the Command Interpreter appendix for information on the comm and structure. Introduction NetBIOS (Network Basic Input/Output System) are TCP or UDP broadcast packets that enable a c[...]

ZyAIR Access Point Series User’s Guide M-2 NetBIOS Filter Com mands Chart M-1 NetBI OS Filter Default Settings NAME DESCRIPTION EXA MPLE WAN to LAN This field displays whether NetBIOS packets are blocked or forwarded from the WAN to the LAN. Forward IPSec Packets This field displays whether NetBIOS packets sent through a VPN connection are blocke[...]

ZyAIR Access Point Series User’s Guide Log Description N-1 Appendix N Log Descriptions Chart N-1 System Error L ogs LOG MESSAGE DESCRIPTION %s exceeds the max. number of session per host! This attempt to create a NAT session exceeds the maximum number of NAT session table entries allowed to be crea ted per host. Chart N-2 System Main tenance Logs[...]

ZyAIR Access Point Series User’s Guide N-2 Lo g Descriptions Chart N-2 System Main tenance Logs FTP Login Successfully Someone has logged on to the router via FT P. FTP Login Fail Someone has failed to log on to the router vi a FTP. NAT Session Table is Full! The maximum number of NAT session tab le entries has been exceeded and the table is full[...]

ZyAIR Access Point Series User’s Guide Log Description N-3 Chart N-3 ICMP Notes TYPE CODE DESCRIPTION 8 Echo 0 Echo message 11 Time Exceeded 0 Time to live exceeded in transit 1 Fragment reassembly time exceeded 12 Parameter Problem 0 Pointer indicates the error 13 Timestamp 0 Timestamp request message 14 Timestamp Reply 0 Timestamp reply message[...]

ZyAIR Access Point Series User’s Guide N-4 Lo g Descriptions Configuring What You Want the ZyAIR to Log Use the sys logs load command to load the log setting buffer that allows you to conf igure which logs the ZyAIR is to record. Use sys logs category followed by a log categ ory and a para meter to decide what to record Chart N-5 Log Categories a[...]

ZyAIR Access Point Series User’s Guide Log Description N-5 message 0|11/11/2002 15:10:12 |172.22.3.80:137 |172.22.255.255:137 |ACCESS BLOCK[...]

[...]

ZyAIR Access Point Series User’s Guide Power Adaptor Specifications O-1 Appendix O Power Adaptor Specifications NORTH AMERICAN PLUG STANDARDS AC Power Adaptor Model AD48 -120120 0DUY Input Power AC120Volts/60Hz/0.25A Output Power DC12Volts/1.2A Power Consumption 10 W Safety Standards UL, CUL (UL 1950, CSA C22. 2 No.234-M90) NORTH AMERICAN PLUG ST[...]

ZyAIR Access Point Series User’s Guide O-2 Power Adaptor Specific ations JAPAN PLU G STANDA RDS AC Power Adaptor Model JOD-48-1124 Input Power AC100Volts/ 50/60Hz/ 27VA Output Power DC12Volts/1.2A Power Consumption 10 W Safety Standards T-Mark (Japan Dentori) AUSTRALIA AND NEW ZEALAND PLUG STANDARDS AC Power Adaptor Model AD-120 1200DS or AD-1212[...]

ZyAIR Access Point Series User’s Guide Index P-1 Appendix P Index A Address Assignm e nt .........................................3-5, 8-1 Ad-hoc Config uration............................................. D-2 Alternative Subnet Ma sk Notati on ......................... K-3 Antenna Directional .....................................................[...]

ZyAIR Access Point Series User’s Guide P-2 Index H Hidden Me nus........................................................ 11-4 Host .........................................................................4-3 Host IDs .................................................................. K-1 I IBSS....................... See Independent Basic Service [...]

ZyAIR Access Point Series User’s Guide Index P-3 Trap ................................................................... 16-2 Traps ........................................................16- 3, 16-4 Trusted Ho st...................................................... 16-3 Subnet Mask .................................. 3-6, 8-1, 13-2, 18-4 Subnet[...]