ZyXEL Communications G-3000H manuel d'utilisation

G-3000H 802.1 1g Wireless Access Point User ’ s Guide V ersion 3.50 1 1/2005[...]

G-3000H User’s Guide 2 Copyright Copyright Copyright © 2005 by ZyXEL Communications Corpo ration. The contents of this publication may not be reprod uced in any part or as a whole, transcribed, stored in a retrieval system, tran slated into any language, or transmitted in any form or by any means, el ectronic, mechanical , magnetic, optical, che[...]

G-3000H User’s Guide Federal Com munications Commission ( FCC) Interf erence Statem ent 3 Federal Communications Commission (FCC) Interference S t atement This device complies with Part 15 of FCC rul es. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interf[...]

G-3000H User’s Guide 4 Federal Communications Commission (FCC) Interference Statement Certifications Go to www .zyxel.com 1 Select your product from t he drop-down list box on the Zy XEL home page to go to that product's page. 2 Select the certification you wish to view from this page[...]

G-3000H User’s Guide ZyXEL Limited Warranty 5 ZyXEL Limited W arranty ZyXEL warrants to the original en d user (purchaser) that this product is free from any defects in materials or workmansh ip for a period of up to tw o years from the date of purchase . During the warranty period, and upon proof of purchase, should the product have ind ications[...]

G-3000H User’s Guide 6 Customer Suppo rt Customer Support Please have the following information r eady when you contact customer support. • Product model and serial number . • W arranty Information. • Date that you received your de vice. • Brief description of the problem and the steps yo u took to solve i t. METHOD LOCATION SUPPORT E-MAI[...]

G-3000H User’s Guide Customer Support 7 POLAND info@pl.zyxel.com +48-22-5286603 www .pl.zyxel.com ZyXEL Communications ul.Emilli Plater 53 00-1 13 W arszawa Poland +48-22-5206701 RUSSIA http://zyxel.ru/support +7-095-542- 89-29 www .zyxel.ru ZyXEL Russia Ostrovityanova 37a S tr . Moscow , 1 17279 Russia sales@zyxel.ru +7-095-542-89-25 SP AIN supp[...]

G-3000H User’s Guide 8 Customer Suppo rt[...]

G-3000H User’s Guide Table of Contents 9 T able of Content s Copyright .................................................. ................................................................ 2 Federal Communications Commissi on (FCC) Interference St atement ............... 3 ZyXEL Limited W arranty .......................... .........................[...]

G-3000H User’s Guide 10 Table of Contents 3.1.3 WEP Encryption ..... ............. ................ ............. ............. ................ ............ 45 3.2 Wizard Setup: General Setup ............. ................ ............. ............. ................ ..... 46 3.3 Wizard Setup: Wireless LAN ............... ......... .............[...]

G-3000H User’s Guide Table of Contents 11 6.1.2 Authentication ..................... ............. ................ ............. ................ ............ 73 6.1.3 Restricted Access ...................... ............. ................ ............. ................ ..... 73 6.1.4 Hide ZyAIR Identity ....... ............. ................ ..[...]

G-3000H User’s Guide 12 Table of Contents 8.2 Configuring Layer-2 Isolat ion .... ............. ............. ................ ............. ............. ...104 8.2.1 Layer-2 Isolation Examples ....... ... .......... ............ ............. ................ ....... 105 8.2.2 Layer-2 Isolation Example 1 ......... ...... ................ ......[...]

G-3000H User’s Guide Table of Contents 13 Chapter 12 Remote Management Screens ..................................................................... ....... 147 12.1 Remote Management Overview ..................... ............ ................. ................ ...147 12.1.1 Remote Management Limitations .. ............. ................ .......[...]

G-3000H User’s Guide 14 Table of Contents Chapter 16 General Setup ..................................................... .................................................. 177 16.1 General Setup .. ....... ............. ............. ................ ............. ............. ............ .......177 16.1.1 Procedure T o Configure Menu 1 . .....[...]

G-3000H User’s Guide Table of Contents 15 Chapter 23 Firmware and Configuration File Maintenance ................................................. 207 23.1 Filename Conventions .................. ............. ................ ............. ............. .......... 207 23.2 Backup Configuration . ................ ............. ............. .....[...]

G-3000H User’s Guide 16 Table of Contents Appendix B Specifications .......................................... ............................................................ 233 Appendix C Power over Ethernet (PoE) Specifications ................. ....................................... 235 Appendix D Brute-Force Password Guessing Protecti on .....[...]

G-3000H User’s Guide List of Figure s 17 List of Figures Figure 1 PoE Installation Example ............... ................ ............. ................ ................ .......... 32 Figure 2 WDS Functionality Example ............. ....... ................ ............. ............. ................ ... 33 Figure 3 Access Point Application ..[...]

G-3000H User’s Guide 18 List of Figures Figure 39 Multi-ESS with VLAN Example .......... ................. ............ .......................... .......... 94 Figure 40 Wireless: Mu ltiple ESS .......... ................. ................................................ ............. 95 Figure 41 SSID ............. ............. ...............[...]

G-3000H User’s Guide List of Figure s 19 Figure 82 Remote Management : WW W ... ............. ................ ............. ................ ............. ... 149 Figure 83 T elnet Configuratio n on a TCP/IP Network ............ ................ ............. ................ 150 Figure 84 Remote Management: T elnet ................. ...........[...]

G-3000H User’s Guide 20 List of Figures Figure 125 Menu 23 System Security .......... ................ ................ ................ ................ ....... 199 Figure 126 Menu 23 - System Se curity . ............. ............. ................ ............. ............. .......... 200 Figure 127 Menu 23.5 Security Profile Edit .. ...... .[...]

G-3000H User’s Guide List of Figure s 21 Figure 168 Macintosh OS 8/9: TCP/IP ...... ................ ............. ................ ................ ............. 247 Figure 169 Macintosh OS X: Apple Menu ....................... ................ ................. ................ ... 248 Figure 170 Macintosh OS X: Network ................ .......[...]

G-3000H User’s Guide 22 List of Figures[...]

G-3000H User’s Guide List of Tables 23 List of T ables T able 1 IEEE 802.1 1b ........... ................ ................. ................................................ ............. 34 T able 2 IEEE 802.1 1g ........... ................ ................. ................................................ ............. 34 T able 3 Wizard 1: Ge[...]

G-3000H User’s Guide 24 List of Tables T able 39 My Certificate Import ................. ................ ................ ............. ................ ............. 133 T able 40 My Certificate Creat e . ................ ................ ............. ................ ................ ............. 134 T able 41 My Certificate Details ........[...]

G-3000H User’s Guide List of Tables 25 T able 82 Menu 24.1 1 Remote Ma nagement Control ...... ................ ................. ............ ....... 228 T able 83 Troubleshooting the S tart-Up of Y our ZyAIR ................... ................. ................ ... 231 T able 84 Troubleshooting the Ethernet Interface ........... ..............[...]

G-3000H User’s Guide 26 List of Tables[...]

G-3000H User’s Guide Preface 27 Preface Congratulations on your purchase of the G- 3000H - 802.1 1g W ireless Acc ess Point/Bridge/ Repeater . An AP acts as a bridge between the wireless and wired networks, ex tending your existing wired network without any additional wiring. The ZyAIR can function as a wireless network bridge/repeater and establ[...]

G-3000H User’s Guide 28 Preface User Guide Feedback Help us help you! E-mail all User Guide-related comments, questions or suggestions for improvement to techwriters@zyxel.com.tw or send regular mail to The T echnical W riting T eam, ZyXEL Communications Corp., 6 In novatio n Road II, Science-Based Industrial Park, Hsinchu, 300, T aiwan. Tha nk y[...]

G-3000H User’s Guide Preface 29 Graphics Icons Key ZyAIR Computer Notebook computer Server DSLAM Firewall Modem Switch Router Wireless Signal[...]

G-3000H User’s Guide 30 Preface[...]

G-3000H User’s Guide Chapter 1 Getting to Know Your ZyAIR 31 C HAPTER 1 Getting to Know Y our ZyAIR This chapter introduces the main feat ures and applications of the ZyAIR. 1.1 Introducing the ZyAIR The G-3000H extends the range of your existing wired network without any additional wiring efforts, providing easy network access to mobile users. T[...]

G-3000H User’s Guide 32 Chapter 1 Getting to Know Your ZyAIR ZyAIR LED The blue ZyAIR LED (also kno wn as the Breathing LED) is on when the ZyAIR is on an d blinks (or breaths) when data is being transmitted to/from its wireless stations. Y ou may use the web configurator to turn this LED of f ev en when the ZyAIR is on and data is being transmit[...]

G-3000H User’s Guide Chapter 1 Getting to Know Your ZyAIR 33 VLAN A VLAN (V irtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Only st ations within the same group can talk to each other . Stations on a logical network can belong to one or more groups. The ZyAIR supports 802.1Q VLAN tagging. T a[...]

G-3000H User’s Guide 34 Chapter 1 Getting to Know Your ZyAIR The 802.1 1b data rate and correspo nding modulation techniq ues are shown in the table below . The modulation technique defines how bits are encoded onto radio waves. 802.1 1g Wireless LAN St andard The ZyAIR, complies with the 802.1 1g wireless standard and is also fully compatible wi[...]

G-3000H User’s Guide Chapter 1 Getting to Know Your ZyAIR 35 Limit the nu mber of Client Connections Y ou may set a maximum number of wireless sta tions that may connect to the ZyAIR. This may be necessary if for example, the re is inte rference or difficulty with channel assignment due to a high density of APs within a coverage area. SSL Passthr[...]

G-3000H User’s Guide 36 Chapter 1 Getting to Know Your ZyAIR Full Network Management The embedded web co nfigurator is an all-platform web-ba sed utility that allows you to easily access the ZyAIR’ s management settings. Most functions of the Z yAIR are also s oftware configurable via the SMT (System Management T erminal) interface. The SMT is [...]

G-3000H User’s Guide Chapter 1 Getting to Know Your ZyAIR 37 1.3.1 Access Point The ZyAIR is an ideal access solution for wirele ss Internet connection. A typical Internet access application for your ZyAIR is shown as follows. Stations A, B and C can access the wired network through the ZyAIRs. Figure 3 Access Point Application 1.3.2 Multiple ESS[...]

G-3000H User’s Guide 38 Chapter 1 Getting to Know Your ZyAIR Figure 4 Multiple ESS Application 1.3.3 AP + Bridge In AP+Bridge mode, the ZyAIR supports both AP ( A and B can connect to the wired network through X ) and bridge ( X can communicate with Y ) connection at the same time. When the ZyAIR is in AP + Bridge mode, the traf fic betw een ZyAI[...]

G-3000H User’s Guide Chapter 1 Getting to Know Your ZyAIR 39 Figure 5 AP+Bridge Application 1.3.4 Bridge / Repeater The ZyAIR can act as a wireless network bridge a nd establish wireless links with other APs. In bridge mode, the ZyAIR’ s ( A and B ) are co nnected to in dependent wire d networks an d have a bridge ( A can communicate with B ) c[...]

G-3000H User’s Guide 40 Chapter 1 Getting to Know Your ZyAIR Figure 6 Bridge Application Figure 7 Repeater Application[...]

G-3000H User’s Guide Chapter 2 Introducing the Web Configur ator 41 C HAPTER 2 Introducing the W eb Configurator This chapter describes how to access the ZyAIR web configurator and provides an overview of its screens. The default IP addr ess of the ZyAIR is 192.168.1.2. 2.1 Accessing the ZyAIR W eb Configurator 1 Make sure your ZyAIR hardware is [...]

G-3000H User’s Guide 42 Chapter 2 Introducing the Web Configurator Figure 8 Change Password Screen 6 Click Apply in the Replace Certificate screen to create a certificate using your ZyAIR’ s MAC address that will be specific to this device. Figure 9 Replace Certificate Screen Y ou should now see the MAIN MENU screen . Note: The management sessi[...]

G-3000H User’s Guide Chapter 2 Introducing the Web Configur ator 43 2.2 Resetting the ZyAIR If you forget your password or cannot access the web configurator, you will need to reload the factory-default configuration file or use the RESET button on the side panel of the Zy AIR. Uploading this configuration f ile replaces the current configur atio[...]

G-3000H User’s Guide 44 Chapter 2 Introducing the Web Configurator Note: Follow the instruction s you see in the MAIN MENU screen or click the icon (located in the top right corner of most screens) to view online help. The icon does not appear in the MAIN MENU screen. Figure 10 The MAIN M ENU Screen of the Web Config urator Click W IZARD SETUP fo[...]

G-3000H User’s Guide Chapter 3 Wizard Setup 45 C HAPTER 3 W izard Setup This chapter provides informa tion on the W izard Setup screens in the web configurator . 3.1 Wizard Setup Overview The web confi gurator ’ s setup wizard helps you c onfigure your ZyAIR for wireless stations to access your wired LAN. 3.1.1 Channel A channel is the radio fr[...]

G-3000H User’s Guide 46 Chapter 3 Wizard Setup 3.2 Wizard Setup: General Setup General Setup contains administrative and system-related information. Figure 1 1 Wizard 1: General Setup The following table describes the labels in this screen. 3.3 Wizard Setup: Wireless LAN Use the second wizard screen to set up the wireless LAN. Table 3 Wizard 1: G[...]

G-3000H User’s Guide Chapter 3 Wizard Setup 47 Figure 12 Wizard 2: Wireless LAN Setup The following table describes the labels in this screen. Table 4 Wizard 2: Wireless LAN Setup LABEL DESCRIPTION Wireless LAN Setup Name (SSID) Enter a descriptive name (up to 32 printable 7-bit ASCII characters) fo r the wireless LAN. If you change this field on[...]

G-3000H User’s Guide 48 Chapter 3 Wizard Setup 3.4 Wizard Setup: IP Address The third wizard screen allows you to configure IP address assignme nt. 3.4.1 IP Address Assignment Every computer on the Internet must have a unique IP address. If your networks are is olated from the Internet, for instance, only between your two branch of fices, you ca [...]

G-3000H User’s Guide Chapter 3 Wizard Setup 49 Once you have decided on the ne twork number , pi ck an IP address that is easy to remember , for instance, 192.168.1.2, for your Zy AIR, but make sure that no other device on your network is using that IP address. The subnet mask specifies the network number portion of an IP address. Y our ZyAIR wil[...]

G-3000H User’s Guide 50 Chapter 3 Wizard Setup 3.5 Basic Setup Complete When you cli ck Finish in the Wizard 3 IP Addr ess Assignment screen, a warning window display as shown. Click OK to close the window and log in to the web configurator again using the new IP address if you change the default IP address (192.168.1.2). Y ou have successfully s[...]

G-3000H User’s Guide Chapter 4 Syst em Screens 51 C HAPTER 4 System Screens 4.1 System Overview This section provides information on general system setup. 4.2 Configuring General Setup Click the SYSTEM link under ADV ANCED to open the General screen. Figure 15 System General Setup The following table describes the labels in this screen. Table 7 S[...]

G-3000H User’s Guide 52 Chapter 4 Syste m Screens 4.3 Configuring Password T o change your ZyA IR’ s password (recommended), click the SYSTEM link under ADV ANCED and then the Password tab. The screen appears as shown. This screen allows you to change the ZyAIR’ s password. If you forget your password (o r the ZyAIR IP address), you will need[...]

G-3000H User’s Guide Chapter 4 Syst em Screens 53 Figure 16 Password . The following table describes the labels in this screen. 4.4 Configuring T ime Setting T o change your ZyAIR ’ s time and date, click the SYSTEM link under ADV ANCED and then the T ime Setting tab. The screen appears as shown. Use this screen to configure the ZyAIR’ s time[...]

G-3000H User’s Guide 54 Chapter 4 Syste m Screens Figure 17 T ime Setting The following table describes the labels in this screen. Table 9 Time Setting LABEL DESCRIPTION T ime Protocol Select the time service protocol that y our time server se nds when you turn on the ZyAIR. Not all time servers support all protocols, so you may have to check wit[...]

G-3000H User’s Guide Chapter 4 Syst em Screens 55 Ti m e Z o n e Choose the time zone of your location. This will set the time difference between your time zone and Greenwich Mean T ime (GMT). Daylight Savings Select this option if you use dayli ght savings time. Dayligh t saving is a pe riod from late spring to early fall when many countries set[...]

G-3000H User’s Guide 56 Chapter 4 Syste m Screens[...]

G-3000H User’s Guide Chapter 5 Wireless Configuration 57 C HAPTER 5 W ireless Configuration This chapter discusses how to config ure W ireless screens on the ZyAIR. 5.1 Wireless LAN Overview This section introduces the wireless LAN (WLAN) and some basic scenarios. 5.1.1 BSS A Basic Service Set (BSS) exists when all co mmunications between wireles[...]

G-3000H User’s Guide 58 Chapter 5 Wirele ss Configuration Figure 18 Basic Service set 5.1.2 ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distributio n System (DS). An ESSID (E[...]

G-3000H User’s Guide Chapter 5 Wireless Configuration 59 Figure 19 Extended Service Set 5.2 Wireless LAN Basics Refer also to the Wi z a r d S e t u p chapter for more background information on W ireless LAN features, such as channels. See the W ireless LANs Appendix for information on the following: • W ireless LAN T opologies •C h a n n e l[...]

G-3000H User’s Guide 60 Chapter 5 Wirele ss Configuration 5.3 WMM QoS WMM (W i-Fi MultiMedia) QoS (Qua lity of Service) ensures quality of ser vice in wireless networks for multimedia applica tions. WMM QoS prioritizes wirel ess traf fic according to the delivery requirements of the individual and applications. W M M QoS is a part of the IEEE 802[...]

G-3000H User’s Guide Chapter 5 Wireless Configuration 61 5.3.2.1 DiffServ DiffServ is a class of service (CoS) mode l that ma rks packets so that they receive specific per- hop treatment at DiffServ-compliant network de vices along the route based on the application types and traf fic flow . Packets are marke d with Dif fServ Code Points (DSCPs) [...]

G-3000H User’s Guide 62 Chapter 5 Wirele ss Configuration 5.4 Sp anning T ree Protocol (STP) STP detects and breaks network loops and provide s backup links between switches, bridges or routers. It allows a bridge to interact with o ther STP-compliant bridges in your networ k to ensure that only one route exists be tween any two stations on the n[...]

G-3000H User’s Guide Chapter 5 Wireless Configuration 63 On each bridge, the root port is the port thro ugh which this bridge communicates with the root. It is the port on this switch with the lowest path cost to the root (the root path cost). If there is no root port, then this bridge has been accepted as the root bridge of the spanning tree net[...]

G-3000H User’s Guide 64 Chapter 5 Wirele ss Configuration 1 Configure the ZyAIR as an AP , an AP+Bridge, a Bridge/Repeater or to use multiple ESS in the Wir eless screen. Y ou can also select an SSID Profile in the Wire l e ss screen. 2 Use the SSID screens to view and create SSID profiles. 3 Use the Security screen to configure wirele ss profil [...]

G-3000H User’s Guide Chapter 5 Wireless Configuration 65 Figure 21 Wire less: Access Point The following table describes the general wireless LAN labels in this screen. Table 14 Wireless: Access Point LABEL DESCRIPTION Operating Mode Select the operating mod e from the drop-down list. The op tions are Access Point , Bridge/Repe ater , AP+Bridge a[...]

G-3000H User’s Guide 66 Chapter 5 Wirele ss Configuration 5.6.2 Bridge/Repeater Mode The ZyAIR can act as a wireless network bridge and esta blish wireles s links with other APs. Y ou need to know the M AC address of the peer device, wh ich also must be in bridge mode. The ZyAIR can establish up to five wireless links with other APs. Hide Name (S[...]

G-3000H User’s Guide Chapter 5 Wireless Configuration 67 In the example below , when both ZyAIRs are in Bridge/Repeater mo de, they form a WDS (W ireless Distribution System) allowing the computers in LAN 1 to connect to the computers in LAN 2. Figure 22 Bridging Example Be careful to avoid bridge loops when you enab le bridging in the ZyAI R. Br[...]

G-3000H User’s Guide 68 Chapter 5 Wirele ss Configuration Figure 23 Bridge Loop: T wo Brid ges Connected to Hub If your ZyAIR (in bridge mode) is co nnected to a wired LAN while comm unicating with another wireless bridge that is also conn ected to the same wired LAN as shown next. Figure 24 Bridge Loop: Brid ge Connected to Wired LAN T o prevent[...]

G-3000H User’s Guide Chapter 5 Wireless Configuration 69 Figure 25 Wireless: Bridge/Rep eater The following table describes the bridge labels in this screen. Table 15 Wireless: Bridge /Repeater LABEL DESCRIPTIONS Operating Mode Select Bridge/Repeater in this field to display the screen as shown. Choose Channel ID Set the operating frequency/chan [...]

G-3000H User’s Guide 70 Chapter 5 Wirele ss Configuration See T able 14 on page 65 for information on the ot her labels in this screen. 5.6.3 AP+Bridge Mode Click the WIRELESS link under ADV ANCED . Select AP+Bridge as the Operating Mo de to display the screen as shown next. In this scr een, you can configure the ZyAIR to function as an AP and br[...]

G-3000H User’s Guide Chapter 5 Wireless Configuration 71 Figure 26 Wireless: AP+Bridge See the tables describing the fields in the Access Point and Bridge/Repeater operating modes for descriptions of the fields in this screen. 5.6.4 Multiple ESS Mode Select MESSID as the Operating Mode to display the screen. Refer to the chapter on Multiple ESS a[...]

G-3000H User’s Guide 72 Chapter 5 Wirele ss Configuration[...]

G-3000H User’s Guide Chapter 6 Wireless Secu rity Configuration 73 C HAPTER 6 W ireless Security Configuration This chapter describes how to use the Security , RADIUS and Local User Database screens to configure wireless security on yo ur ZyAIR. 6.1 Wireless Security Overview W ireless security is vital to your network to p rotect wireless commu [...]

G-3000H User’s Guide 74 Chapter 6 Wireless Secu rity Configuration 6.1.4 Hide ZyAIR Identity If you hide the ESSID, then the ZyAIR cannot be seen when a wireless client sca ns for local APs. The trade-off for the extra sec urity of “hiding” the ZyAIR may be inconvenience for some valid WLAN clients. 6.1.5 WEP Encryption WEP encryption scrambl[...]

G-3000H User’s Guide Chapter 6 Wireless Secu rity Configuration 75 The following figure shows an overview of auth entication when you specify a RADIUS serve r on your access point. Figure 27 EAP Authentication The details below provide a general descrip tion of how IEEE 802.1x EAP authentication works. For an example list of EAP-MD5 authen ticati[...]

G-3000H User’s Guide 76 Chapter 6 Wireless Secu rity Configuration 6.6.1 User Authentication WP A applies IEEE 802.1x and Extensible Auth entication Protocol (EAP) to authenticate wireless clients using an external RADIUS databa se. See later in this chapter and the appendices for more information on IEEE 802.1x, RADIUS, EAP and PEAP . If you don[...]

G-3000H User’s Guide Chapter 6 Wireless Secu rity Configuration 77 1 First enter identical passwords into the AP an d all wireless c lients. The Pre-Shared Key (PSK) must co nsist of between 8 and 6 3 ASCII characters (including spaces and symbols). 2 The AP checks each wireless client's password and (only) allows it to join the network if t[...]

G-3000H User’s Guide 78 Chapter 6 Wireless Secu rity Configuration Figure 29 WP A(2) with RAD IUS Application Example 6.8 Security Modes The following table describes the security modes you can configure. Table 16 Security Modes SECURITY MODE DESCRIPTION None Select this to have no data encryption. WEP Select this to use WEP encryption. 802.1x-On[...]

G-3000H User’s Guide Chapter 6 Wireless Secu rity Configuration 79 6.9 Security Modes and Wireless Client Comp atibility Different security modes can be configured fo r each SSID. However , no t all security modes are compatible with the security mode of th e wireless client. The follow ing table shows combinations of security modes between a W i[...]

G-3000H User’s Guide 80 Chapter 6 Wireless Secu rity Configuration The Funk Software's Odyssey client is bundle d free (at the time of wr iting) with the client wireless adaptor(s). 6.1 1 Wireless Security Effectiveness The following figure shows th e relative effectiveness of th ese wireless security methods available on your ZyAIR. EAP (Ex[...]

G-3000H User’s Guide Chapter 6 Wireless Secu rity Configuration 81 Figure 30 Security The following table describes the labels in this screen. The next screen v aries by the Security Mode you select. 6.12.1 Security: No Access Select No Access in the Security Mode field to display the following screen. Table 19 Securi ty LABEL DESCRIPTION Index T[...]

G-3000H User’s Guide 82 Chapter 6 Wireless Secu rity Configuration Figure 31 Security: No Access or None The following table describes the labels in this screen. 6.12.2 Security: WEP Select WEP in the Security Mode field to display the following screen. Figure 32 Security: WEP The following table describes the labels in this screen. Table 20 Secu[...]

G-3000H User’s Guide Chapter 6 Wireless Secu rity Configuration 83 6.12.3 Security: 802.1x Only , 802.1x St atic 64-b it WEP , 128-bit WEP Select 802.1x Only , 802.1x S tatic 64 or 802.1x S tatic 12 8 in the Security Mode field to display the following screen. WEP Encryption Select Disable to allow wireles s stations to communicate with the acces[...]

G-3000H User’s Guide 84 Chapter 6 Wireless Secu rity Configuration Figure 33 Security: 802.1x Only , 802.1x Static 64-bit WEP, 128-bit WEP The following table describes the labels in this screen. Table 22 Security: 802.1x Only, 802.1x St atic 64-bit WEP, 128-bit WEP LABEL DESCRIPTION Name T ype a name to identify th is security profile. Security [...]

G-3000H User’s Guide Chapter 6 Wireless Secu rity Configuration 85 6.12.4 Security: 802.1x Dyna mic 64-bit WEP , 128-bit WEP Select 802.1x Dynamic 64 or 80 2.1x Dynamic 12 8 in the Security Mode field to disp lay the following screen. Figure 34 Security: 802.1x Dynamic 64-bit WEP , 128-bit WEP The following table describes the labels in this scre[...]

G-3000H User’s Guide 86 Chapter 6 Wireless Secu rity Configuration 6.12.5 Security: WP A, WP A-MIX, WP A2, WP A2-MIX Select WP A , WP A-MIX , WP A2 or WP A2-MIX in the Security Mode field to display the following screen. ReAuthentication T imer S pecify how often wireless stations have to rese nd usernames and passwords in order to stay connected[...]

G-3000H User’s Guide Chapter 6 Wireless Secu rity Configuration 87 Figure 35 Security: WP A, WP A-MIX, WP A2 or WP A2-MIX The following table describes the labels not previously discussed 6.12.6 Security: WP A-PSK, WP A2-PSK, WP A2-PSK-MIX Select WP A-PSK , WP A2-PSK or WP A2-PSK-MIX in the Security Mode field to display the following screen. Tab[...]

G-3000H User’s Guide 88 Chapter 6 Wireless Secu rity Configuration Figure 36 Security: WP A-PSK, W P A2-PSK or WP A2-PSK-MIX The following table describes the labels not previously discussed Table 25 Security: WP A-PSK, WPA2-PSK or WPA2-PSK-MIX LABEL DESCRIPTION Name T ype a name to identify this security profile. Security Mode Choose WP A-PSK , [...]

G-3000H User’s Guide Chapter 6 Wireless Secu rity Configuration 89 6.13 Introduction to RADIUS RADIUS is based on a client-sever model that supports authentication and accounting, where access point is the client and the server is the RADIUS server . The RADIUS server handles the following tasks among others: • Authentication Determines the ide[...]

G-3000H User’s Guide 90 Chapter 6 Wireless Secu rity Configuration Figure 37 RADIUS The following table describes the labels in this screen. Table 26 RADIUS LABEL DESCRIPTION Index Select the RADIUS profile you want to configure from the drop-down list box. Profile Name T ype a name for the RADIUS profile associated with the Index number above. P[...]

G-3000H User’s Guide Chapter 6 Wireless Secu rity Configuration 91 6.15 Configuring Local User Dat abase T o change your ZyAIR’ s local user database, click the WIRELE SS link under ADV ANCED and then the Local User Da tabase tab. The scree n appears as shown. Figure 38 Local User Database The following table describes the labels in this screen[...]

G-3000H User’s Guide 92 Chapter 6 Wireless Secu rity Configuration[...]

G-3000H User’s Guide Chapter 7 Multiple ESS, SSID and VLAN 93 C HAPTER 7 Multiple ESS, SSID and VLAN This chapter describes how to use configur e multiple ESS, SSID and VLAN on your ZyAIR. 7.1 Wireless LAN Infrastructures See the W izard Setup and Wireless LAN chap ters for some basic WLAN scenarios and terminology . 7.1.1 Multiple ESS T radition[...]

G-3000H User’s Guide 94 Chapter 7 Multiple ESS, SSID and VLAN 7.1.3 Multiple ESS Example Refer to the section on ZyAIR ap plications for more information. 7.1.4 Multi-ESS with VLAN Exam ple In this example, VLAN 2 is the management VLAN and includes the comput ers in ESS1 and LAN 1. Computers in ESS2 and LAN 2 belong to VLAN 2. “W ireless group[...]

G-3000H User’s Guide Chapter 7 Multiple ESS, SSID and VLAN 95 Figure 40 Wireless: Multiple ESS The following table describes the labels in this screen. Table 28 Wireless: Multiple ESS LABEL DESCRIPTION Operating Mode Select MESSID in this field to display t he screen as shown Choose Channel ID Set the operating fre quency/channel dependin g on yo[...]

G-3000H User’s Guide 96 Chapter 7 Multiple ESS, SSID and VLAN Select SSID Profile The SSID (Ser vice Set IDentity) identifies the Service Set with which a wireless station is associated. Wirele ss stations associating to the access point (AP) must have the sa me SSID. Note: If you are configuring the ZyAIR from a computer connected to the wireles[...]

G-3000H User’s Guide Chapter 7 Multiple ESS, SSID and VLAN 97 7.2 SSID Click the WIRELESS link under ADV ANCED and the SSID tab to display the screen as shown. Figure 41 SSID The following table describes the labels in this screen. Max. Frame Burst Enable Maximum Frame Burst to help eliminate coll isions in mixed-mode networks (networks with both[...]

G-3000H User’s Guide 98 Chapter 7 Multiple ESS, SSID and VLAN 7.2.1 Configuring SSID Configure appropriate fields in the Wi rel e s s , Security , RADIUS , MAC Filter , Layer-2 Isolation and VLAN screens to use those settings in th e following screen. These settings can be used instead of the default settings to create SSID profiles. SSID This fi[...]

G-3000H User’s Guide Chapter 7 Multiple ESS, SSID and VLAN 99 Figure 42 Configuring SSID The following table describes the labels in this screen. Table 30 Configuring SSID LABEL DESCRIPTION Name T ype a name to identify this SSID profile on the ZyAIR. SSID T ype a na me to identify this wireless profile on the netwo rk. When a wireless client sca[...]

G-3000H User’s Guide 100 Chapter 7 Multiple ESS, SSID and VLAN 7.2.2 Second Rx VLAN ID The ZyAIR tags Ethernet frames in VLAN 1 w ith VLAN ID 1 and tags Ethernet frames in VLAN 2 with VLAN ID 2. Both VLAN 1 and VLAN 2 have Internet access. VLAN 1 and VLAN 2 have access to a server . Ethe rnet frames forwarded from the server back to the switch ar[...]

G-3000H User’s Guide Chapter 7 Multiple ESS, SSID and VLAN 101[...]

G-3000H User’s Guide 102 Chapter 7 Multiple ESS, SSID and VLAN[...]

G-3000H User’s Guide Chapter 8 Other Wireless Configurations 103 C HAPTER 8 Other W ireless Configurations This chapter describes how to configure the Layer -2 Isolation , MAC Filter and Roaming screens on your ZyAIR. 8.1 Layer-2 Isolation Introduction Layer-2 i s olation is used to prevent wirel ess clients associated with your ZyAIR from commun[...]

G-3000H User’s Guide 104 Chapter 8 Other Wirele ss Configurations Figure 45 Layer-2 Isolation Application MAC addresses that are not listed in the Allow devices with these MAC addresses table a re blocked from communicating with the ZyAIR’ s wire less clients except for broadcast packets. Layer-2 isolation does not check the traf fic be tween w[...]

G-3000H User’s Guide Chapter 8 Other Wireless Configurations 105 Figure 46 Layer-2 Isolation Configura tion Screen The following table describes th e labels in this screen. 8.2.1 Layer-2 Isolation Examples The following section sho ws you example layer - 2 isolation configurations on the ZyAIR (A). Table 31 Layer-2 Isolation Configura tion LABEL [...]

G-3000H User’s Guide 106 Chapter 8 Other Wirele ss Configurations Figure 47 Layer-2 Isolation Example 8.2.2 Layer-2 Isolation Example 1 In the following example wire less clients 1 and 2 cannot communicate with C, B or 3. • Select the Enable Layer -2 Isola tion check box, but do no t configure any MAC addresses in the Allow devices with these M[...]

G-3000H User’s Guide Chapter 8 Other Wireless Configurations 107 • Select the Enable Layer -2 Isola tion check box. • Enter C’ s MAC address in the Allow de vices with these MAC addresses field. Figure 49 Layer-2 Isolation Example 2 8.2.4 Layer-2 Isolation Example 3 In the following example wirele ss clients 1 and 2 can communicate with B a[...]

G-3000H User’s Guide 108 Chapter 8 Other Wirele ss Configurations Figure 50 Layer-2 Isolation Example 3 8.3 Configuring MAC Filter The MAC filter screen allows you to configure the ZyAIR to give exclusive access to up to 32 devices (Allow Association) or exclude up to 32 devices from accessing the ZyAIR (Deny Association). Every Ethernet device h[...]

G-3000H User’s Guide Chapter 8 Other Wireless Configurations 109 Figure 51 MAC Addres s Filter The following table describes the labels in this screen. Note: T o activate MAC filtering on a pro file, select Enable from the Enable MAC Filtering drop-down list box in the SSI D config uration screen and click Apply . 8.4 Configuring Roaming A wirele[...]

G-3000H User’s Guide 110 Chapter 8 Other Wirele ss Configurations The roaming feature on the access points allows the access points to relay information about the wireless stations to each other . When a wireless station moves from a covera ge area to another , it scans and uses the channel of a new access point, which th en informs the a ccess p[...]

G-3000H User’s Guide Chapter 8 Other Wireless Configurations 111 8.4.1 Requirements for Roaming The following requirements must be met in order for wirele ss stations to roam between the coverage areas . 1 All the access points must be on the same subnet and configured wi th the same ESSID. 2 If IEEE 802.1x user auth entication is enabled and to [...]

G-3000H User’s Guide 112 Chapter 8 Other Wirele ss Configurations[...]

G-3000H User’s Guide Chapter 9 VLAN 113 C HAPTER 9 VLAN This chapter discusses how to configure VLAN on the ZyAIR. 9.1 VLAN A VLAN (V irtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Stations on a logical network can belong to one or more groups. Only stations within the same group can t alk t[...]

G-3000H User’s Guide 114 Chapter 9 VLAN Figure 54 VLAN The following table describes the labels in this screen. Table 34 VLAN LABEL DESCRIPTION Enable VLAN T agging Select this check box to turn on VLAN tagging. Management VLAN ID Enter a number from 1 to 4094 to define this VLAN group. At lea st one device in your network must belong to this VLA[...]

G-3000H User’s Guide Chapter 9 VLAN 115 9.2.1 Configuring Mana gement VLAN Example This section shows you how to create a VLAN on an Ethernet switch. By default, the port on the ZyAIR is a member of the management VLAN (VID 1). The following procedure sho ws you how to configure a tagg ed VLAN. Note: Use the out-of-band management port or console[...]

G-3000H User’s Guide 116 Chapter 9 VLAN 5 Ty p e a VL AN Group ID . This should be the same as th e management VLAN ID on the ZyAIR. 6 Enable Tx T agging on the port which you want to connect to the ZyAIR. Disable Tx Ta g g i n g on the port yo u are using to connect to your computer . 7 Under Control , select Fixed to set the port as a member of[...]

G-3000H User’s Guide Chapter 9 VLAN 117 3 Click Apply . Figure 59 VLAN Setu p 4 The ZyAIR attempts to connect with a VLAN-aware device. Y ou can now access and mange the ZyAIR though the Ethernet switch. Note: If you do not conn ect the ZyAIR to a co rrect ly configured VLAN-aware device, you will lock yourself out of the ZyAI R. If this happens,[...]

G-3000H User’s Guide 118 Chapter 9 VLAN 1 When you configure your wireless credentials, the ZyAIR sends the information to the IAS server using RADIUS protoc ol. 2 Authentication by the RADIUS server is successful. 3 The RADIUS server sends three attr ibutes related to this feature. 4 The ZyAIR compares these a ttributes with the VLAN screen mapp[...]

G-3000H User’s Guide Chapter 9 VLAN 119 • The IAS uses group memberships to determ ine whic h user accounts belong to which VLAN groups. Click the Add button and co nfigure the VLAN group details. 3 Repeat the previous step to add each VLAN group required. Figure 61 Add Group Members 9.2.2.2 Configuring Remote Access Policies Once the VLAN Grou[...]

G-3000H User’s Guide 120 Chapter 9 VLAN Figure 62 New Remote Access Po licy for VLAN Group 2 The Conditions window displays. Select Add to add a condition for this policy to act on. 3 In the Select Attribute screen, click Windows-Gr oups and the Add button. Figure 63 S pecifying Windows-Group Condition 4 The Select Gr oups window displa ys. Selec[...]

G-3000H User’s Guide Chapter 9 VLAN 121 Figure 64 Adding VLAN Group 6 When the Permissions options screen displays, select Grant remote access permission . • Click Next to grant access based on group membership. • Click the Edit Profile button. Figure 65 Granting Permissions an d User Profile Screens 7 The Edit Dial-in Pr ofile screen display[...]

G-3000H User’s Guide 122 Chapter 9 VLAN Figure 66 Authentication T ab Settings 8 Click the Encryption tab. Select the St r o n g e s t encryption option. This step is not required for EAP-MD5, but is performed as a safeguard. Figure 67 Encryption T ab Settings 9 Click the IP tab and select the Client may re quest an IP addr ess chec k box for DHC[...]

G-3000H User’s Guide Chapter 9 VLAN 123 Figure 68 Connection Attributes Scr een 11 The RADIUS Attribute screen displays. From the list, three RADIUS attributes will be added: • T unnel-Medium-T ype • Tunnel-Pvt- Group-ID • Tunnel-T ype • Click the Add button • Select T unnel-Medium-T ype • Click the Add button.[...]

G-3000H User’s Guide 124 Chapter 9 VLAN Figure 69 RADIUS Attribu te Screen 12 The Enumerable Attribute Information screen displays. Select the 802 value from the Attribute value drop-down list box. • Click OK . Figure 70 802 Attribute Setting for T unnel-Medium-T ype 13 Return to the RADIUS Attribute Scr een shown as Figure 69 on page 124 . •[...]

G-3000H User’s Guide Chapter 9 VLAN 125 Figure 71 VLAN ID Attribute Setting for T unnel-Pvt-Group-ID 15 Return to the RADIUS Attribute Scr een shown as Figure 69 on page 124 . • Select T unnel-T ype . • Click Add . 16 The Enumerable Attribute Information screen displays. • Select V irtual LANs (VLAN) from the attribute value drop-down list [...]

G-3000H User’s Guide 126 Chapter 9 VLAN Figure 73 Completed Advanced T ab Note: Repeat the Configuring Remote Access Policies procedure for each VLAN Group defined in the Active Directo ry . Remember to place the most ge neral Remote Access Policies at the bottom of the list and the most specific at th e top of the list.[...]

G-3000H User’s Guide Chapter 10 IP Screen 127 C HAPTER 10 IP Screen This chapter discusses how to configure IP on the ZyAIR 10.1 Factory Ethernet Default s The Ethernet parameters of the ZyAIR are pr eset in the factory w ith the following values: 1 IP address of 192.168.1.2 2 Subnet mask of 25 5.255.255.0 (2 4 bits) These parameters should work [...]

G-3000H User’s Guide 128 Chapter 10 IP Screen Note: Regardless of your p articular situation, do not create an arbitra ry IP address; always follow the guidelines above. F or more information on address assignment, please refer to RFC 1597, Address Allocation for Priva te Internets and RFC 1466, Guidelines for Management of I P Address S pace. 10[...]

G-3000H User’s Guide Chapter 11 Certificates 129 C HAPTER 11 Certificates This chapter gives background in formation about public-key certificates and explains how to use them. 1 1.1 Certificates Overview The ZyAIR can use certificates (also called digita l IDs) to authenticate users. Certificates are based on public-private key pairs. A certific[...]

G-3000H User’s Guide 130 Chapter 11 Certificates 1 1.1.1 Advant ages of Certificates Certificates offer th e following benefits. • The ZyAIR only has to store the certificates of the certification authorities that you decide to trust, no matter how many de vices you need to authenticate. • Key distribution is simple and very secure si nce you[...]

G-3000H User’s Guide Chapter 11 Certificates 131 Figure 75 My Certificates The following table describes the labels in this screen. Table 38 My Certificates LABEL DESCRIPTION PKI S torage S pace in Use This bar displays the percentage of the ZyAI R’s PKI storage space that is currently in use. When you are using 80% or less of the storage space[...]

G-3000H User’s Guide 132 Chapter 11 Certificates 1 1.5 Certificate File Format s The certification authority certific ate that yo u want to import ha s to be in one of these file formats: • Binary X.509: This is an ITU-T recommen dation that defines th e formats for X.509 certificates. • PEM (Base-64) encoded X.509: This Priv acy Enhanced Mai[...]

G-3000H User’s Guide Chapter 11 Certificates 133 • PEM (Base-64) encoded PKCS#7: This Priv acy Enhanced Mail (PEM) format uses 64 ASCII characters to convert a binary PKCS #7 certificate into a printable form. 1 1.6 Importing a Certificate Click CER TIFICA TES , My Certificates and then Import to open the My Certificate Import screen. Follow th[...]

G-3000H User’s Guide 134 Chapter 11 Certificates 1 1.7 Creating a Certificate Click CER TIFICA TES , My Certificates and then Create to open the My Certificate Create screen. Use this screen to have the ZyAIR create a self-signed certificate, enroll a certificate with a certification authority or gene rate a certification request, see the followi[...]

G-3000H User’s Guide Chapter 11 Certificates 135 Organizational Unit T ype up to 127 characters to identify the organizational unit or department to which the certificate owner belongs. Y ou may use any character , including spaces, but the ZyAIR drop s traili ng spaces. Organization T ype up to 127 characters to identify the company or group to [...]

G-3000H User’s Guide 136 Chapter 11 Certificates After you click Apply in the My Certificate Create screen, you see a screen that tells you the ZyAIR is generating the self-signed cer tificate or certification request. After the ZyAIR successfully enrolls a certificate or generates a certification request or a se lf- signed certificate, you see a[...]

G-3000H User’s Guide Chapter 11 Certificates 137 Figure 78 My Certificate Deta ils The following table describes the labels in this screen. Table 41 My Certificate Det ails LABEL DESCRIPTION Name Thi s field displays the id entifying name of this certifi cate. If you want to change the name, type up to 31 characters to identify this certifica te.[...]

G-3000H User’s Guide 138 Chapter 11 Certificates Certificate Path Click the Refre sh button to have this read-only text box disp lay the hierarchy of certification authoriti es that validate the certificate (and the ce rtificate itself). If the issuing certificatio n authority is one that you have imported as a trusted certification authority , i[...]

G-3000H User’s Guide Chapter 11 Certificates 139 1 1.9 T rusted CAs Click CER TIFICA TES , T rusted CAs to open the T rusted CAs screen. This screen displays a summary list of certificates of the certifica tion authorities that you have set the ZyAIR to accept as trusted. The ZyAIR accepts any valid certificate signed by a certification authority[...]

G-3000H User’s Guide 140 Chapter 11 Certificates Figure 79 T rusted CAs The following table describes the labels in this screen. Table 42 Tr u s t ed C A s LABEL DESCRIPTION PKI S torage S pace in Use This bar displays the percentage of the Zy AIR’s PKI storage space that is currently in use. When yo u are using 80% or less of the storage space[...]

G-3000H User’s Guide Chapter 11 Certificates 141 1 1.10 Importing a T rusted CA ’ s Certificate Click CER TIFICA TES , T rusted CAs to open the Tr u s t e d C A s screen and then click Import to open the T rusted CA Import screen. Follow the instructions in this screen to save a trusted certification authority’ s certificat e to the ZyAIR, se[...]

G-3000H User’s Guide 142 Chapter 11 Certificates 1 1.1 1 T rusted CA Certificate Det ails Click CER TIFICA TES , T rusted CAs to open the Tr u s t e d C A s screen. Click the details icon to open the T rusted CA Details screen. Use this screen to view in-depth information about the certification authority’ s certificate, ch ange the certificate[...]

G-3000H User’s Guide Chapter 11 Certificates 143 Figure 81 T rusted CA Details The following table describes the labels in this screen. Table 44 T rusted CA Details LABEL DESCRIPTION Name Th is field displays the identi fying name of this certificate. If you w ant to change the name, type up to 31 characters to identify this key cert ificat e. Y [...]

G-3000H User’s Guide 144 Chapter 11 Certificates Certificate Path Click the Refresh button to have this read-only text box display the end entity’s certificate and a list of cert ification authority certificat es that shows the hierarchy of certification authorities that validate th e end entity’s certificate. If the issuing certification aut[...]

G-3000H User’s Guide Chapter 11 Certificates 145 CRL Distribution Points This field displays how many directory se rvers with Lists of re voked certificates the issuing certification authori ty of this certificate makes available. This field also displays the domain names or IP addresses of the servers. MD5 Fingerpr int This is the certif icate?[...]

G-3000H User’s Guide 146 Chapter 11 Certificates[...]

G-3000H User’s Guide Chapter 12 Remo te Management Scr eens 147 C HAPTER 12 Remote Management Screens This chapter provides information on the Remote Management screens. 12.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which ZyAIR interface (if any) from which computers. Y ou may manag[...]

G-3000H User’s Guide 148 Chapter 12 Remo te Managemen t Screens 12.1.2 Remote Management and NA T When NA T is enabled: • Use the ZyAIR’ s W AN IP address when configuring from the W AN. • Use the ZyAIR’ s LAN IP address when configuring from the LAN. 12.1.3 System T imeout There is a default system management idle tim eout of five minute[...]

G-3000H User’s Guide Chapter 12 Remo te Management Scr eens 149 Figure 82 Remote Management: WWW The following table describes the labels in this screen. Table 45 Remote Management: WWW LABEL DESCRIPTION HTTPS Server Certificate Select the Server Certificate that the ZyAIR will u se to identify itself. The ZyAIR is the SSL server and must always [...]

G-3000H User’s Guide 150 Chapter 12 Remo te Managemen t Screens 12.3 Configuring T elnet Y ou can configure your ZyAIR for remote T e lne t access as shown next. The administrator uses T elnet from a computer on a remote network to access the ZyAIR. Figure 83 T elnet Configuration on a TCP/IP Network 12.4 Configuring TELNET Click REMOTE MGNT and [...]

G-3000H User’s Guide Chapter 12 Remo te Management Scr eens 151 Figure 84 Remote Management: T elnet The following table describes the labels in this screen. 12.5 Configuring FTP Y ou can upload and download the ZyAIR’ s fi rmware and configuration files usi ng FTP , please see the chapter on firmware and configuration file maintena nce for det[...]

G-3000H User’s Guide 152 Chapter 12 Remo te Managemen t Screens Figure 85 Remote Management: FTP The following table describes the labels in this screen. 12.6 SNMP Simple Network Management Protocol (SNM P) i s a protocol u sed for exchanging management information b etween network devices. SNMP is a member of the TCP/IP protocol suite. Y our ZyA[...]

G-3000H User’s Guide Chapter 12 Remo te Management Scr eens 153 Figure 86 SNMP Management Model An SNMP managed network consis ts of two main types of comp onent: agen ts and a manager . An agent is a management software module that resides in a managed de vice (the ZyAIR). An agent translates the local ma nagemen t information from the mana ged [...]

G-3000H User’s Guide 154 Chapter 12 Remo te Managemen t Screens 12.6.1 Supported MIBs The ZyAIR supports MIB II that is define d in RFC-1213 and RFC-1215 as well as the proprietary ZyXEL private MIB. The purpose of the MIBs is to let administrators collect statistical data and monito r status and performance. 12.6.2 SNMP T raps The ZyAIR can send[...]

G-3000H User’s Guide Chapter 12 Remo te Management Scr eens 155 12.7 SNMP T rap s Some traps include an SNMP in terface index. The following ta ble maps the SNMP interface indexes to the ZyAIR’ s physical ports. 12.7.1 Configuring SNMP T o change yo ur ZyAIR’ s SNMP settings , click REMOTE MGMT , then the SNMP tab. The screen appears as shown[...]

G-3000H User’s Guide 156 Chapter 12 Remo te Managemen t Screens Figure 87 Remote Management: SNMP The following table describes the labels in this screen. Table 50 Remote Management: SNMP LABEL DESCRIPTION SNMP Configuration Get Community Enter the Get Community , which is the password for the incoming Get and GetNext requests from the management[...]

G-3000H User’s Guide Chapter 13 L og Screens 157 C HAPTER 13 Log Screens This chapter contains inform ation about configuring genera l log settings and viewing the ZyAIR’ s logs. Refer to the appendix for example log message explanations. 13.1 Configuring V iew Log The web confi gurator allows you to look at all of the ZyAIR’ s logs in one lo[...]

G-3000H User’s Guide 158 Chapter 13 Log Screens 13.2 Configuring Log Settings T o change your ZyA IR’ s log settings, click the LOGS links under ADV ANCED and then the Log Settings tab. The screen appears as shown. Use the Log Settings screen to configure to where the ZyAIR is to send the logs; the schedule for when the ZyAIR is to send th e lo[...]

G-3000H User’s Guide Chapter 13 L og Screens 159 Figure 89 Log Settings The following table describes the labels in this screen. Table 52 Log Settings LABEL DESCRIPTION Address Info Mail Server Enter the server name or the IP address of the mail server for the e-mail addresses specified be low . If this field is left blank, logs and alert message[...]

G-3000H User’s Guide 160 Chapter 13 Log Screens Log Schedule This drop-down menu is used to conf igure the frequency of log me ssages being sent as E-mail : •D a i l y • Weekly • Hourly • When Log is Full • None. If the We e kl y or the Daily option is selected, sp ecify a time of day when the E- mail should be sent. If the We e kl y op[...]

G-3000H User’s Guide Chapter 14 Maintenance 161 C HAPTER 14 Maintenance This chapter displays system information such as ZyNOS firmware, port IP addresses and port traffic statistics. 14.1 Maintenance Overview The maintenanc e screens can help you view system inform a tion, upload new firmware, manage configuratio n and restart your ZyAIR. 14.2 S[...]

G-3000H User’s Guide 162 Chapter 14 Maintenance 14.2.1 System St atistics Read-only information here incl udes port status, packet specific statistics and bridge link status. Also provided are "system up time" and "poll int erval(s)". The Poll Interval field is configurable. Figure 91 System St atus: Show S tatistics The follo[...]

G-3000H User’s Guide Chapter 14 Maintenance 163 14.3 Association List V iew the wireles s stations that are cu rrently associated to the ZyAIR in the Association List screen. Click MAINTENANCE and then the Association List tab to display the screen as shown next. Figure 92 Association List The following table describes the labels in this screen. [...]

G-3000H User’s Guide 164 Chapter 14 Maintenance 14.4 Channel Usage The Channel Usage screen shows whether a channel is used by another wireless network or not. If a chan nel is being used, you should select a channel removed from it by five channels to completely avoid overlap. Click MAINTENANCE and then the Channel Usage tab to display the scree[...]

G-3000H User’s Guide Chapter 14 Maintenance 165 Figure 93 Channel Usage The following table describes the labels in this screen. Table 56 Channel Usage LABEL DESCRIPTION SSID This is the Service Set IDentification name of the AP in an Infrastructure wireless network or wireless station in an Ad-Hoc wireless netwo rk. For our purposes, we define a[...]

G-3000H User’s Guide 166 Chapter 14 Maintenance 14.5 F/W Upload Screen Find firmware at www .zyxel.com in a file that (usually) uses the system model name with a "*.bin" extension, e.g., "zyair .bin". The up load process uses HTTP (Hypertext T ransfer Protocol) and may take up to two minutes. Afte r a successful upload, th e s[...]

G-3000H User’s Guide Chapter 14 Maintenance 167 After you see the Firmware Upload in Pr ocess screen, wait two minutes before logging into the ZyAIR again. Figure 95 Firmware Upload In Proces s The ZyAIR automatically restarts in this tim e causing a temporary network discon nect. In some operating systems, you may see the following icon on your [...]

G-3000H User’s Guide 168 Chapter 14 Maintenance Figure 97 Firmware Upload Error 14.6 Configuration Screen See the Firmware and Configuration File Mai ntenance chapter for transferring configuration files using FTP/TFTP commands. Click MAINTENANCE , and then the Configuration tab. Information related to factory defaults, backup co nfiguration, and[...]

G-3000H User’s Guide Chapter 14 Maintenance 169 Click Backup to save the ZyAIR’ s c urrent configuration to your computer . 14.6.2 Restore Configuration Restore configuration allows you to upload a new or previously saved configuration file from your computer to your ZyAIR. Note: Do not turn of f the ZyAIR while confi guration file upload is in[...]

G-3000H User’s Guide 170 Chapter 14 Maintenance Figure 101 Configuration Up load Error 14.6.3 Back to Factory Default s Pressing the Reset button in this section clears al l user-e ntered configuration information and returns the ZyAIR to its factory defaults as sh own on the screen. The following warning screen will appear . Figure 102 Reset W a[...]

G-3000H User’s Guide Chapter 15 Intro ducing the SMT 171 C HAPTER 15 Introducing the SMT This chapter describes h ow to access the SMT and provides an over view of its menus . 15.1 Connect to your ZyAIR Using T elnet The following procedure details ho w to tel n et into your ZyAIR. 1 In W indows , click St a r t (usually in the bottom left corner[...]

G-3000H User’s Guide 172 Chapter 15 In troducing the SMT Figure 105 Menu 23.1 System Security: Change Pas sword 4 T ype your new system password in the New Password field (up to 30 characters), and press [ENTER] . 5 Re-type your new system password in the Retype to confirm field for confirmation and press [ENTER] . Note that as you type a passwor[...]

G-3000H User’s Guide Chapter 15 Intro ducing the SMT 173 15.4 Navigating the SMT Interface The SMT (System Manage ment T erminal) is the interface that you use to co nfigure your ZyAIR. Several operations that you should be fam iliar with before you a ttempt to modify the configuration are listed in the table below . 24 System Maintenance 24.1 Sy[...]

G-3000H User’s Guide 174 Chapter 15 In troducing the SMT After you enter the password, the SMT di splays the main menu, as shown next. Figure 106 G-3000H SMT Main Menu 15.4.1 System Manage ment T erminal Interface Summary Required fields < ? > or ChangeMe All fields with the symbol <?> must be filled in order to be able to save the ne[...]

G-3000H User’s Guide Chapter 15 Intro ducing the SMT 175 24 System Maintenance This menu provides system status, diagnostics, softwar e upload, etc. 99 Exit Use this to exit from SMT and return to a blank screen. Table 61 Main Menu Su mmary # MENU TITLE DESCRIPTION[...]

G-3000H User’s Guide 176 Chapter 15 In troducing the SMT[...]

G-3000H User’s Guide Chapter 16 General Setup 177 C HAPTER 16 General Setup The chapter shows you th e information on gene ral setup. 16.1 General Setup Menu 1 – General Setup contains administrative and system-related information (shown next). The System Name field is for identification purposes. It is recommended you type your computer's[...]

G-3000H User’s Guide 178 Chapter 16 General Setup First/Second/Third System DNS Server Press [SP ACE BAR] to select From DHCP , User Defined or None and press [ENTER]. These fields are not available on all models. IP Address Ente r the IP addresses of the DNS server s. This field is available when you select User-Defined in the field above. When [...]

G-3000H User’s Guide Chapter 17 LAN Setup 179 C HAPTER 17 LAN Setup This chapter shows you h ow to configure the LAN on yo ur ZyAIR. 17.1 LAN Setup This section describes how to configure the Ethernet using Menu 3 – LAN Setup . Fr om the main menu, enter 3 to display menu 3. Figure 108 Menu 3 LAN Setup Detailed explanation about the LAN Setup m[...]

G-3000H User’s Guide 180 Chapter 17 LAN Setup Figure 109 Menu 3.2 TCP/IP Setup Follow the instructions in the following table on how to configure the fields in this menu. 17.3 Wireless LAN Setup Use menu 3.5 to set up your ZyAIR as the wi reless access point. T o edit menu 3.5, enter 3 from the main menu to display Menu 3 – LAN Setup . When men[...]

G-3000H User’s Guide Chapter 17 LAN Setup 181 Figure 1 10 Menu 3.5 Wireless LAN Setup The following table describes the fields in this menu. Menu 3.5 - Wireless LAN Setup Edit MAC Address Filter= N/A Operating Mode= Bridge / Repeat er Edit Roaming Configuration= N/A Edit SSID Profile= N/A Hide Name (SSID)= N/A Select SSID Profile= N/A Channel ID=[...]

G-3000H User’s Guide 182 Chapter 17 LAN Setup 17.3.1 Configurin g MAC Address Filter Y our ZyAIR checks the MAC addre ss of the wirele ss station device against a list of allowed or denied MAC addresses. However , intruders could fake allowe d MAC addresses so MAC- based authentication is less secu re than EAP authentication. Follow the steps bel[...]

G-3000H User’s Guide Chapter 17 LAN Setup 183 Figure 1 1 1 Menu 3.5 Wireless LAN Setup 3 Press [SP ACE BAR] to select Access Point or AP + Bridge in the Operating Mode field and press [ENTER]. 4 In the Edit MAC Addr ess Filter field, press [SP ACE BAR] to select Y es and press [ENTER]. Menu 3.5.1 – WLAN MAC Address Filter displays as shown next[...]

G-3000H User’s Guide 184 Chapter 17 LAN Setup The following table describes the fields in this menu. 17.3.2 Configuring Roaming Enable the roaming feature if you have two or more ZyAIRs on the same subnet. Follow the steps below to allow ro aming on your ZyAIR. 1 From the main menu, enter 3 to display Menu 3 – LAN Setup . 2 Enter 5 to display M[...]

G-3000H User’s Guide Chapter 17 LAN Setup 185 Figure 1 13 Menu 3.5 Wirele ss LAN Setup 3 Move the cu rs or to the Edit Roaming Configuration field. Press [SP ACE BAR] to select Ye s and then press [ENTER]. Menu 3.5.2 – Roaming Configuration displays as shown next. Figure 1 14 Menu 3.5.2 Ro aming Configuration The following table describes the f[...]

G-3000H User’s Guide 186 Chapter 17 LAN Setup 17.3.3 Configuring SSID Profiles Follow the steps below to config ure SSID profiles on your ZyAIR. 1 From the main menu, enter 3 to open Menu 3 – LAN Setup . 2 Enter 5 to display Menu 3.5 – Wir eles s LAN Setup . Figure 1 15 Menu 3.5 Wirele ss LAN Setup 3 In the Operating Mode field, pre ss [SP AC[...]

G-3000H User’s Guide Chapter 17 LAN Setup 187 Figure 1 16 Menu 3.5.6 - SS ID Profile Ed it The following table describes the fields in this menu. 17.3.4 Configuring Bridge Link Follow the steps below to con figure bridge link on your ZyAIR. 1 From the main menu, enter 3 to open Menu 3 – LAN Setup . 2 Enter 5 to display Menu 3.5 – Wir eles s L[...]

G-3000H User’s Guide 188 Chapter 17 LAN Setup Figure 1 17 Menu 3.5 Wirele ss LAN Setup 3 In the Operating Mode field, press [SP ACE BAR] to select Bridge / Repeate r or AP + Bridge and press [ENTER]. 4 Move the cu rs or to the Edit Bridge Link Configuration field. Press [SP ACE BAR] to select Ye s and press [ENTER]. Menu 3.5.4 – Bridge Link Con[...]

G-3000H User’s Guide Chapter 17 LAN Setup 189 Figure 1 18 Menu 3.5.4 Br idge Link Configura tion The following table describes the fields in this menu. 17.3.5 Configurin g Layer-2 Isolation Follow the steps below to configur e layer -2 isolation on your ZyAIR. 1 From the main menu, enter 3 to open Menu 3 – LAN Setup . 2 Enter 5 to display Menu [...]

G-3000H User’s Guide 190 Chapter 17 LAN Setup Figure 1 19 Menu 3.5 Wirele ss LAN Setup 3 Move the cu rs or to the Edit Layer -2 Isolation field. Press [SP ACE BAR] to select Ye s and press [ENTER]. Menu 3.5.5 – Layer 2 Isol ation displays as shown next. Figure 120 Menu 3.5.5 Layer -2 Isolation Menu 3.5 - Wireless LAN Setup Edit MAC Address Filt[...]

G-3000H User’s Guide Chapter 17 LAN Setup 191 The following table describes the fields in this menu. Table 69 Menu 3.5.5 Layer-2 Iso lation FIELD DESCRIPTION Allow devices with these MAC addresses These are the MAC address of a wirele ss client, AP , computer or router. A wireless client associated with the ZyAIR ca n communic ate with ano ther w[...]

G-3000H User’s Guide 192 Chapter 17 LAN Setup[...]

G-3000H User’s Guide Chapter 18 Dial-in User Setup 193 C HAPTER 18 Dial-in User Setup This chapter shows you how to cr eate user accounts on the ZyAIR. 18.1 Dial-in User Setup By storing user profiles locally , your ZyAIR is able to authenticate wireless users without interacting with a network RADIUS server . Follow the steps below to set up us [...]

G-3000H User’s Guide 194 Chapter 18 Dia l-in User Se tup Figure 122 Menu 14.1- Edit Dial-in User The following table describes th e fields in this screen. Menu 14.1 - Edit Dial-in User User Name= test Active= Yes Password= ******** Press ENTER to Confirm or ESC to Can cel: Leave name field blank to delete pro file Table 70 Menu 14.1- Edit Dial-in[...]

G-3000H User’s Guide Chapter 19 VLAN Setup 195 C HAPTER 19 VLAN Setup This chapter explains VLAN Setup menu 16. Refer to the Multiple-ESS and VLAN chapter for background information on VLAN. 19.1 VLAN Setup T o setup VLAN, select option 16 from the main menu to open Menu 16 – VLAN Setup as shown next. Figure 123 Menu 16 VLAN Setup The following[...]

G-3000H User’s Guide 196 Chapter 19 VLAN Setup Active T o ena ble a VLAN mapping profile, press [SP ACE BAR] to select Ye s and press [ENTER]. ID Press [SP ACE BAR] to select a VLAN ID or enter one from 1 to 4094. Incoming traffic from the WLAN is authorized and assigned a VLAN ID by the RADIUS server before it is sent to the LAN interface o f th[...]

G-3000H User’s Guide Chapter 20 SNMP Configuration 197 C HAPTER 20 SNMP Configuration This chapter explains SNMP Configuration me nu 22. See the web configurator chapter on SNMP for background information. 20.1 SNMP Configuration T o configure SNMP , select option 22 from the main menu to open Menu 22 – SNMP Configuration as shown next. The “[...]

G-3000H User’s Guide 198 Chapter 20 SNMP Configuration Destination T ype the IP add ress of the station to send your SNMP traps to. When you have completed this menu, press [ENTER] at the prompt “Press ENTER to confirm or ESC to cancel” to sa ve your configuration or p ress [ESC] to cancel and go back to the previous screen. Table 72 Menu 22 [...]

G-3000H User’s Guide Chapter 21 System Security 199 C HAPTER 21 System Security This chapter describes how to configur e the system security on the ZyAIR. 21.1 System Security Y ou can configure the system password, a n exte rnal RADIUS server and 802.1x in this menu. 21.1.1 System Password Figure 125 Menu 23 System Security Y ou should change th[...]

G-3000H User’s Guide 200 Chapter 21 Syst em Security Figure 126 Menu 23 - System Security From Menu 23 - System Security , enter 5 to display Menu 23.5 – Security Profile Edit as shown next. Figure 127 Menu 23.5 Security Profile Edit The fields in this screen va ry according to the security Mod e you select. See Wireless Security Configuration,[...]

G-3000H User’s Guide Chapter 22 System Inform ation and Diagnosis 201 C HAPTER 22 System Information and Diagnosis This chapter covers the information and diag nostic tools in SMT menus 24.1 to 24.4. These tools include updates on system status , port status, log and trace capabiliti es and upgrades for the system software. This chapte r describe[...]

G-3000H User’s Guide 202 Chapter 22 System Information and Diagnosis Figure 129 Menu 24.1 System Maintenan ce: St atus The following table describes the fields present in this menu. Menu 24.1 - Sys tem Maintenance - Status 01:55:5 Sat. Jan. 01, 200 Port Status TxPkts RxP kts Cols Tx B/s Rx B/s Up Tim Ethernet 100M/Full 5802 2001 0 303 128 1:54: W[...]

G-3000H User’s Guide Chapter 22 System Inform ation and Diagnosis 203 22.2 System Information T o get to the System Information: 1 Enter 24 to display Menu 24 – System Maintenance . 2 Enter 2 to display Menu 24.2 – System Information and Con sole Port Speed . 3 From this menu you have two choices as shown in th e next figure: Figure 130 Menu [...]

G-3000H User’s Guide 204 Chapter 22 System Information and Diagnosis 22.2.2 Console Port Speed Y ou can set up different port speeds for the console port through Menu 24.2.2 – System Maintenance – Console Port Speed . Y our ZyAIR supports 96 00 (default), 19200, 384 00, 57600 and 1 15200 bps console port speeds. Press [ SP ACE BAR ] and then [...]

G-3000H User’s Guide Chapter 22 System Inform ation and Diagnosis 205 Figure 133 Menu 24.3 System Maintenan ce: Log and T race 3 Enter 1 from Menu 24.3 – System Maintenance – Log and T race and press [ENTER] twice to display the error log in the system. After the ZyAIR finishes displaying the error log, you will have the optio n to clear it. [...]

G-3000H User’s Guide 206 Chapter 22 System Information and Diagnosis 1 From the main menu, type 24 to open Menu 24 – System Maintenance . 2 From this menu , type 4. Diagnostic to open Menu 24.4 – System Maintenance – Diagnostic . The following table describes the diagnostic tests available in menu 24.4 for your ZyAIR and the connectio ns. T[...]

G-3000H User’s Guide Chapter 23 Firmware and Confi guration File Maintenance 207 C HAPTER 23 Firmware and Configuration File Maintenance This chapter tells y ou how to backup and restor e your configuration file as well as upload new firmware and configuratio n files using the SMT screens. 23.1 Filename Conventions The configuration file (often c[...]

G-3000H User’s Guide 208 Chapter 23 Firmware and Con f iguration File Main tenance The following table is a summary . Please note that the internal filename refe rs to the filename on the ZyAIR and the external file name refers to the filename not on the ZyAIR, that is, on your computer , local network or FTP site and so the name (but not the ext[...]

G-3000H User’s Guide Chapter 23 Firmware and Confi guration File Maintenance 209 Figure 136 Menu 24.5 Backup Configuration 23.2.2 Using the FTP command from the DOS Prompt 1 Launch the FTP client on your computer . 2 Enter “open” and the IP add ress of your ZyAIR. 3 Press [ENTER] when prompted for a username. 4 Enter “root” and your SMT p[...]

G-3000H User’s Guide 210 Chapter 23 Firmware and Con f iguration File Main tenance Figure 137 FTP Session Example The following table describes some of the co mmands that you may see in third party FTP clients. 23.2.3 Backup Configuration Using TFTP The ZyAIR supports the up/down loading of th e firmware and the configuration file using TFTP (T r[...]

G-3000H User’s Guide Chapter 23 Firmware and Confi guration File Maintenance 211 3 Enter command “sys stdio 0” to disable th e SMT timeout, so the TF TP transfer will not be interrupted. Enter comman d “sys stdio 5” to restore the five-minute SMT timeout (default) when the file transfer is complete. 4 Launch the TFTP client on your comput[...]

G-3000H User’s Guide 212 Chapter 23 Firmware and Con f iguration File Main tenance Figure 138 System Maintenanc e: Backup Configuration 2 The following screen indicates that the Xmodem download has started. Figure 139 System Maintenance: S tarting Xmodem Download Screen 3 Run the HyperT erminal program by clicking Tr a n s f e r , then Rece ive F[...]

G-3000H User’s Guide Chapter 23 Firmware and Confi guration File Maintenance 213 23.3.1 Restore Using FTP For details about backup usin g (T)FTP please refer to earlier sections on FTP and TFTP file upload in this chapter . Figure 142 Menu 24.6 Restore Co nfiguration 23.4 Uploading Firmware and Configuration Files Menu 24.7 – System Maintenance[...]

G-3000H User’s Guide 214 Chapter 23 Firmware and Con f iguration File Main tenance 23.4.1 Firmware Upload FTP is the preferred method for uploading the firm ware and configuration. T o use this feature, your computer must ha ve an FTP client. When you telnet into the ZyAIR, you will see the following screens fo r uploading firmware and the config[...]

G-3000H User’s Guide Chapter 23 Firmware and Confi guration File Maintenance 215 T o transfer the firmware and the conf iguration file, follo w these ex amples: 23.4.3 Using the FTP command from the DOS Prompt Exampl e 1 Launch the FTP client on your computer . 2 Enter “open” and the IP add ress of your ZyAIR. 3 Press [ENTER] when prompted fo[...]

G-3000H User’s Guide 216 Chapter 23 Firmware and Con f iguration File Main tenance 2 Put the SMT in command interprete r (CI) mode by entering 8 in Menu 24 – System Maintenance . 3 Enter the command “sys stdio 0” to disable the SMT timeout, so the TFTP transfer will not be interrupted. Enter command “sys stdio 5” to restore the five-min[...]

G-3000H User’s Guide Chapter 23 Firmware and Confi guration File Maintenance 217 Figure 147 Menu 24.7.1 as seen using the Console Port After the "Starting Xmodem uplo ad" message appears, activate the Xmodem protocol on your computer . Follow the procedure as shown prev iously for the HyperT erminal program. The procedure for other seri[...]

G-3000H User’s Guide 218 Chapter 23 Firmware and Con f iguration File Main tenance Figure 149 Menu 24.7.2 as seen using the Console Port 2 After the "Starting Xmodem upload" message appears, activate the Xmode m protocol on your computer . Follow the procedure as sh own previously for the HyperT erminal program. The procedure for othe r[...]

G-3000H User’s Guide Chapter 24 System Mainten ance and Information 219 C HAPTER 24 System Maintenance and Information This chapter leads you through SM T menus 24.8 and 24.10. 24.1 Command Interpreter Mode The Command Interpreter (CI) is a part of the ma in system firmware. The CI provides much of the same functionality as the SMT , while a ddin[...]

G-3000H User’s Guide 220 Chapter 24 System Mainten ance and Information Figure 151 Menu 24 System Maintenan ce Figure 152 V alid CI Commands 24.1.1 CNM V antage CNM (Centralized Netw ork Management) is a b rowser-based, global management solution that allows an administrator to eas ily configure, manage, monitor and troubleshoo t ZyXEL devices lo[...]

G-3000H User’s Guide Chapter 24 System Mainten ance and Information 221 Figure 153 CNM CL The following table describes the commands in th is screen. All commands begin with “cnm” so for example, type “cnm active 1” to enable V antage CNM on your device. G-3000H>cnm active sgid mana gerIp debug reset simulate encr ykey encrymode G-3000[...]

G-3000H User’s Guide 222 Chapter 24 System Mainten ance and Information managerIp [addr] This command displays the public IP address of the V antage C NM server . If the V antage serve r is on the same subnet as the ZyXEL device, enter the private or public IP address of the V antage C NM server . If the V antage CNM server is on a different subn[...]

G-3000H User’s Guide Chapter 24 System Mainten ance and Information 223 24.1.3 Configuration Example This is an example allowing V antage CNM serv er (on the same subnet as your ZyXEL device) with an IP address of 10.1.1.1, to mana ge your device. The device and V antage CNM communicate using DES encryptio n and a password of “1 2345678”. enc[...]

G-3000H User’s Guide 224 Chapter 24 System Mainten ance and Information Figure 154 CNM Configuration Example 24.2 T ime and Date Setting The ZyAIR keeps track of the time and date. Th ere is also a software mechanism to set the G-3000H> cnm active sgid mana gerIp debug reset encrykey encr ymode keepalive version G-3000H> G-3000H> cnm act[...]

G-3000H User’s Guide Chapter 24 System Mainten ance and Information 225 time manually or get the current time and date fro m an external server when you turn on your ZyAIR. Menu 24.10 allows you to update the time and da te settings of your ZyAIR. The real time is then displayed in the ZyAIR error logs. 1 Select menu 24 in th e main menu to open [...]

G-3000H User’s Guide 226 Chapter 24 System Mainten ance and Information 24.2.1 Resetting the T ime The ZyAIR resets the time in three instances: 1 On leaving menu 24.10 after making changes. 2 When the ZyAIR starts up, if there is a timeserver configured in menu 24.10. 3 24-hour intervals after starting. 24.3 Remote Management Setup 24.3.1 T elne[...]

G-3000H User’s Guide Chapter 24 System Mainten ance and Information 227 24.3.3 We b Y ou can use the ZyAIR’ s embedded web configur ator for configuration and file management. See the online help for details. 24.3.4 Remote Management Setup Remote management setup is for managing T elnet, FTP and W eb services. Y ou can customize the service por[...]

G-3000H User’s Guide 228 Chapter 24 System Mainten ance and Information Figure 157 Menu 24.1 1 Remote Management Control The following table describes the fields in this menu. Menu 24.11 - Re mote Management Control TELNET Server: Port = 23 Access = ALL Secure Clien t IP = 0.0.0.0 FTP Server: Port = 21 Access = ALL Secure Clien t IP = 0.0.0.0 HTT[...]

G-3000H User’s Guide Chapter 24 System Mainten ance and Information 229 24.3.5 Remote Management Limit ations Remote management over LAN or W AN will not work when: 1 A filter in menu 3.1 (LAN) or in menu 1 1.5 (W AN) is applied to block a T e lnet, FTP or W eb service. 2 Y ou have disabled that service in menu 24.1 1. 3 The IP address in the Sec[...]

G-3000H User’s Guide 230 Chapter 24 System Mainten ance and Information[...]

G-3000H User’s Guide Appendix A Tro ubleshooting 231 Appendix A T r oubleshooting This appendix covers poten tial problems and possible re medies. After each problem description, some instructions ar e provided to help you to diag nose and to solve the problem. Problems St arting Up the ZyAIR Problems with the Ethernet Interface Table 83 Troubles[...]

G-3000H User’s Guide 232 Appendix A Troubleshooting Problems with the Password Problems with T elnet Problems with the WLAN Interface Table 85 Troubleshootin g the Password PROBLEM CORRECTIVE ACTION I cannot access the ZyAIR. The Password and Username fields are ca se-sensitive. Make sure th at you enter the correct password and username using th[...]

G-3000H User’s Guide Appendix B Spec ifications 233 Appendix B S pecifications Hardware Firmware Table 88 Hardwa re Power S pecification DC 12V 1200mA Operation T emperature 5º C ~ 50º C S torage T emperature -20º C ~ 55º C Operation Humidity 10% to 90% (Non-conde nsing) S torage Humidity 5% to 95% (Non -condensing) Table 89 Firmware S tandar[...]

G-3000H User’s Guide 234 Appendix B Specifications Diagnostics Capabilities The access point can perfo rm self-diagnostic tests. These tests check the integrit y of the following circuits: FLASH memory . DRAM. Wireless port. Syslog. Errorlog. T race log . Packet Log. Management Embedded Web Configurator management. Command-line interface. T eln e[...]

G-3000H User’s Guide Appendix C Power over Ethernet ( PoE) Specifications 235 Appendix C Power over Ethernet (PoE) S pecifications Y ou can use a power over Et hernet injector to power this device . The injector must comply to IEEE 802.3af.-7 Table 90 Power over Et hernet In jector Specifications Power Output 15.4 W atts maximum Power Current 400[...]

G-3000H User’s Guide 236 Appendix C Power over Ethe rnet (PoE) Specifications[...]

G-3000H User’s Guide Appendix D Br ute-Force Pa ssword Gues sing Protectio n 237 Appendix D Brute-Force Password Guessing Protection The following describes the c ommands for enablin g, disabling and configuring the brute-force password guessing protection m echanism for the password. See Appendix I for information on the command structure. Examp[...]

G-3000H User’s Guide 238 Append ix D Brute- Force Pas sword Guess ing Protec tion[...]

G-3000H User’s Guide Appendix E Setting up Your Computer’s IP Addr ess 239 Appendix E Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed. W indows 95/98/Me/NT/2000/XP , Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software componen[...]

G-3000H User’s Guide 240 Appendix E Setting up Your Computer’s IP Add ress Figure 158 WIndows 95/98 /Me: Networ k: Configura tion Inst alling Component s The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microso ft Networks. If you need the adapter: 1 I[...]

G-3000H User’s Guide Appendix E Setting up Your Computer’s IP Addr ess 241 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click OK . 5 Restart your computer so the changes you made take ef fect. Configuring 1 In the Network window Configuration tab, select your[...]

G-3000H User’s Guide 242 Appendix E Setting up Your Computer’s IP Add ress Figure 160 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know your gateway’ s IP address, remove previously installed gateways. • If you have a gateway IP address, type it in the New gateway field and click Add . [...]

G-3000H User’s Guide Appendix E Setting up Your Computer’s IP Addr ess 243 Figure 161 Windows XP: S tar t Menu 2 For W indows XP , click Network Connections . For W indows 2000/NT , click Network and Dial-up Connections . Figure 162 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .[...]

G-3000H User’s Guide 244 Appendix E Setting up Your Computer’s IP Add ress Figure 163 Windows XP: Control Panel: Network Connections: Pro perties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and click Properties . Figure 164 Windows XP: Local Area Conne ction Properties 5 The Internet Pr otocol TCP/IP Properties windo[...]

G-3000H User’s Guide Appendix E Setting up Your Computer’s IP Addr ess 245 • If you have a static IP address click Use the following IP Address and fill in the IP addr ess , Subnet mask , and Default gateway fields. Click Advanced . Figure 165 Windows XP: Advanced TCP/IP Settings 6 If you do not know your gateway's IP address , remove an[...]

G-3000H User’s Guide 246 Appendix E Setting up Your Computer’s IP Add ress • Click Obtain DNS server address automatically if you do not know your DNS server IP addre ss(es). • If you know your DNS server IP addres s(es), click Use the following DNS server addresses , and type them in the Preferr ed DNS server and Alternate DNS server field[...]

G-3000H User’s Guide Appendix E Setting up Your Computer’s IP Addr ess 247 Figure 167 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 168 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configur e: list.[...]

G-3000H User’s Guide 248 Appendix E Setting up Your Computer’s IP Add ress 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of your ZyAIR in the Router address box. 5[...]

G-3000H User’s Guide Appendix E Setting up Your Computer’s IP Addr ess 249 Figure 170 Macintosh O S X: Netw ork 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of yo[...]

G-3000H User’s Guide 250 Appendix E Setting up Your Computer’s IP Add ress[...]

G-3000H User’s Guide Appendix F IP Address Assignment Conflicts 251 Appendix F IP Address Assignment Conflict s This appendix describes situations where IP address conflicts may occur . Subscribers with duplicate IP addresses will not be able to access the Internet. Case A: The ZyAIR is using the same LAN and W AN IP addresses The following figur[...]

G-3000H User’s Guide 252 Appendix F IP Address Assignment Conflicts Figure 172 IP Address Conflicts: Case B T o solve this problem, make sure the ZyAIR L AN IP address is not in the DHCP IP address pool. Case C: The Subscriber IP address is the same as the IP address of a network device The following figure depicts an example where the subscriber[...]

G-3000H User’s Guide Appendix F IP Address Assignment Conflicts 253 Figure 174 IP Address Conflicts: Case D This problem can be solved by adding a VLAN- enabled switch or set the computers to obtain IP addresses dynamically .[...]

G-3000H User’s Guide 254 Appendix F IP Address Assignment Conflicts[...]

G-3000H User’s Guide Appendix G W ireless LANs 255 Appendix G Wireless LANs Wireless LAN T opologies This section discusses ad-hoc and in frastructure w ireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an inde pe ndent (Ad-hoc) WLAN that connects a set of computers with wireless stations (A, B, C). Any [...]

G-3000H User’s Guide 256 Appendix G Wireless LANs Figure 176 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS). This type of wireless LAN[...]

G-3000H User’s Guide Appendix G W ireless LANs 257 Figure 177 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.1 1a/b/g wireless devices. Channels available depend on your ge ographical area. Y ou may have a choice o f channels (for your region) so you should use a dif ferent channel th an an adjacent AP (access [...]

G-3000H User’s Guide 258 Appendix G Wireless LANs Figure 178 RTS/ CT S When station A sends data to the AP , it might no t know that the station B is already using the channel. If these two stations se nd data at the same time, collis ions may occur when both sets of data arrive at the AP at the same time, r esulting in a loss of me ssages for bo[...]

G-3000H User’s Guide Appendix G W ireless LANs 259 A large Fragmentation Thr eshold is recommended for networks not prone to interference while you should set a smaller thresh old for busy networks or ne tworks that are prone to interference. If the Fragmentation Threshold value is smaller than the RT S / C T S value (see previously) you set then[...]

G-3000H User’s Guide 260 Appendix G Wireless LANs IEEE 802.1x In June 2001, the IEEE 802.1x st andard was designed to extend th e features of IEEE 802.1 1 to support extended authentication as well as providing additional accounting and control features. It is supported by W indows XP and a number of network devices. So me advantages of IEEE 802.[...]

G-3000H User’s Guide Appendix G W ireless LANs 261 • Access-Challenge Sent by a RADIUS server requesting more information in order to allow access. The access point sends a proper response from the user and then sends another Access- Request message. The following types of RADIUS messages are exchanged between the acces s point and the RADIUS s[...]

G-3000H User’s Guide 262 Appendix G Wireless LANs EAP-TLS (T ransport Layer Security) W ith EAP-TLS, digital certifications are needed by both the server and the wireless stations for mutual authentication. The server presents a certificate to the client. After validating the identity of the server , the client sends a differ ent certificate to t[...]

G-3000H User’s Guide Appendix G W ireless LANs 263 The following table is a comparison of the features of authentication types. WP A(2) W i-Fi Protected Access (WP A) is a subset of the IEEE 802.1 1i standard. WP A 2 (IEEE 802.1 1i) is a wireless security standard tha t defines stronger encryp tion, authentication and key manage ment than WP A. K[...]

G-3000H User’s Guide 264 Appendix G Wireless LANs The Message Integrity Check (MIC ) is designed to prevent an attacker from capturing data packets, altering them and resending them. The MIC provides a strong mathematical function in which the receiver and the transmitter each compute and then compare the MIC. If they do not match, it is assumed [...]

G-3000H User’s Guide Appendix G W ireless LANs 265 Shared WEP No Enable with Dynamic WEP Key Y es Ena ble without Dynamic WEP Key Y es Disa ble WP A WEP No Y es WP A TKIP No Y es WP A-PSK WEP Y es Y es WP A-PSK TKIP Y es Y es Table 95 Wireless Security Relational Matrix (continued) AUTHENTICATION METHOD/ KEY MANAGEMENT PROTOCOL ENCRYPTION METHOD [...]

G-3000H User’s Guide 266 Appendix G Wireless LANs[...]

G-3000H User’s Guide Appendix H IP Subnetting 267 Appendix H IP Subnetting IP Addressing Routers “route” based on the network number . The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (ei ght bits), wri tten in dotted decimal notation, for example, 19[...]

G-3000H User’s Guide 268 Appendix H IP Subnettin g Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a valu e of 0 to 127. Similarly the first octet of a class “B” must begi n with “10”, therefore the first octet of a class “B” address has a valid range of 1[...]

G-3000H User’s Guide Appendix H IP Subnetting 269 Since the mask is always a continuous number of ones begin ning from the left, fo llowed by a continuous number of zeros for the remainder of the 32 bit mask, you can si mply specify the number of ones instead of writing the value of each octet. This is usually specified by writing a “/” follo[...]

G-3000H User’s Guide 270 Appendix H IP Subnettin g Note: In the following chart s, shaded/bolded last octet bit values indicate host ID bit s “borrowed” to form network ID bits. The number of “borrowed” host ID bits determines the number of subnets you can have. The remaining number of h ost ID bits (af ter “borrowing”) determines the[...]

G-3000H User’s Guide Appendix H IP Subnetting 271 Example: Four Subnet s The above exampl e illustrated using a 25-bit subne t mask to divide a class “C” address space into two subnets. Similarly to divide a class “C” address into four subnets, you need to “borrow” two host ID bits to give four possible combinations of 00 , 01, 10 and[...]

G-3000H User’s Guide 272 Appendix H IP Subnettin g Example Eight Subnet s Similarly use a 27-bit mask to create 8 subnets (001 , 010, 01 1, 100, 101, 1 10). The following table shows class C IP ad dress last octet values for each subnet. The following table is a summary for class “C” subnet planning. Table 106 Subnet 4 NETWORK NUMBER LAST OCT[...]

G-3000H User’s Guide Appendix H IP Subnetting 273 Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet ma sk also determines which bits are part of the network number and which are part of the host ID. A class “B” address has two host ID octets ava ilable for subnetting and a class “A” add[...]

G-3000H User’s Guide 274 Appendix H IP Subnettin g[...]

G-3000H User’s Guide Appendix I Co mmand Interpreter 275 Appendix I Command Interpreter The following describes how to use the comman d interpreter . Enter 24 in the main menu to bring up the system maintena nce menu. Enter 8 to go to Menu 24.8 - Command Interpr e ter Mode . See the included disk or zyxel.com for more detailed information on thes[...]

G-3000H User’s Guide 276 Appendix I Command Interpreter[...]

G-3000H User’s Guide Appendix J L og Descriptio ns 277 Appendix J Log Descriptions This appendix provides descrip tions of example log messages. Table 110 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router has adjusted its time based on information from the time server . Time calibration failed The router fa[...]

G-3000H User’s Guide 278 Appendix J Log Descriptio ns Log Commands Go to the comma nd inte rpreter interface (the Comma nd Interpreter appendix explain s how to access and use the commands). Configuring What Y ou W a nt the ZyAIR to Log Use the sys logs load command to load the log se tting buffer th at allows you to configur e which logs the ZyA[...]

G-3000H User’s Guide Appendix J L og Descriptio ns 279 Use sys logs category followed by a log category and a parameter to decide what to record Use the sys logs save command to store the settings in the ZyAIR (you must do this in order to record logs). Displaying Logs Use the sys logs display command to show all of the logs in the ZyAIR’s log.[...]

G-3000H User’s Guide 280 Appendix J Log Descriptio ns[...]

G-3000H User’s Guide Appendix K Indoor Installation Recommendation s 281 Appendix K Indoor Inst allation Recommendations An antenna couples RF signals onto air . A tran smitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air . The antenna also operates in reverse by capturing RF signals fro [...]

G-3000H User’s Guide 282 Appendix K Indoo r Installation Recommendatio n s • Omni-directional antennas send the RF signal out in all directions on a horizontal p lane. The covera ge area is torus -shaped (lik e a donut) which makes these antennas ideal for a room environment. W ith a wide coverage area, it is possible to make circular overlappi[...]

G-3000H User’s Guide Appendix L P ower Adapto r Specificat ions 283 Appendix L Power Adaptor S pecifications Table 114 North American Plug Standar ds AC Power Adaptor Model ADS6818 -1812-W 1215 Input Power 100~240 V olts AC, 50~60 Hz, 0.5 A Output Power 12 V olts DC, 1.5A, 18W Power Consumption 6 W Max Safety S tandards UL, CUL (UL60950 Third Edi[...]

G-3000H User’s Guide 284 Appendix L Power Adaptor Specifications[...]

G-3000H User’s Guide Index 285 Index A Address Assignment 48 , 127 Alternative Subnet Mask Notation 269 Antenna Directional 282 Omni-directional 282 Antenna gain 281 AP (access point) 257 Applications 36 Authentication databases 85 , 86 Auto-crossover Et hernet/Fast Ethernet Interface 31 Auto-negotiating Ethernet/Fast Ethernet Interface 31 auto-n[...]

G-3000H User’s Guide 286 Index F Filename C onventions 207 Finland, Contact Information 6 Firmware File Maintenance 166 Fragment Threshold 181 Fragmentation Threshold 258 Fragmentation threshold 258 France, Contact Information 6 FTP 147 , 151 , 229 Restrictions 229 FTP File T ransfer 214 FTP Restrictio ns 147 G General Setup 46 , 51 , 177 General[...]

G-3000H User’s Guide Index 287 PHB (Per-Hop Behavior) 61 Ping 206 PoE 32 , 235 Power over Ethernet 32 Power S pecification 235 Preamble Mode 259 Priorities 60 Private IP Address 48 , 127 Product Model 6 Product Serial Number 6 Q Quick S tart Guide 41 R RADIUS 35 , 260 Shared Secret Key 261 RADIUS Message T ypes 260 RADIUS Messages 260 Rapid STP 6[...]

G-3000H User’s Guide 288 Index TFTP File Transfer 215 TFTP Restrictions 147 T ime and Date Setting 225 T ime Setting 53 Ti m e Z o n e 226 To S 60 T race Record s 204 T roub leshooting Accessing ZyAIR 232 Ethernet Port 231 St a r t - U p 231 T ype Of Service 60 U Upload Firmware 213 Use Authentication 264 User Authentication 76 User Profiles 193 [...]