ZyXEL NWA5123-NI manuel d'utilisation

Quick Start Guide www .zyxel.com NWA5120 Series NW A5121-N NW A5121-NI NW A5123-NI 802.11 a/b/g/n Unified Access P oint V e rsion 4.10 Edition 1, 05/2014 Copyright © 2014 Z yXEL Communications Corpor ation User’s Guide Default Login Details LAN IP Address http://192.168.1.2 User Name admin P assword 1234[...]

NWA5120 Series User’s Guid e 2 IMPORT ANT! READ CAREFULL Y BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. This is a User’s Gu ide for a series of products. Not all products support all firmware features. Screenshots and graphics in this book may differ sl ightly from your product due to differences in your product firmware o r your computer [...]

[...]

Table of Contents NWA5120 Series User’s Guid e 4 Table of Contents Contents Overview ......................... ..................................................... ............................... ................. 3 Table of Contents ................................................. ..................................................... .........[...]

Table of Co ntents NWA5120 Series User’s Guid e 5 3.2 Dashboard .......... ............. ................. ................ ................ ............. ................ ............ .......... .............. 31 3.2.1 CPU Usage ... ................ ................ ................ ............. ................ ................ ............. .[...]

Table of Contents NWA5120 Series User’s Guid e 6 7.4 Load Balancing ......... ................ ................ ................ ............. ................ ................. ..... ................. .... 62 7.4.1 Disassociating and Delaying Connections ... ................ ................ ................. ................ .......... 63 7.5 D[...]

Table of Co ntents NWA5120 Series User’s Guid e 7 1 1.1.1 What Y ou Can Do in this Chapter ......... ................ ................ ................ ............. ................ .. .. 98 1 1.2 WDS Profile ................... ............. ................ ................. ................ ................ ............. ......... ...........[...]

Table of Contents NWA5120 Series User’s Guid e 8 13.8.2 SNMP Trap s .. ................ ............. ................ ................ ................ ................. ............ . ........... 139 13.8.3 Configuring SNMP ... ... ............. ............. ................ ................ ............. ................ .......... ........ 1[...]

Table of Co ntents NWA5120 Series User’s Guid e 9 Chapter 19 T roubleshooting .................................................... ..................................................... ..................... .. 169 19.1 Overview ....... ................ ................. ................ ............. ................ ................ ............[...]

10 P ART I User ’ s Guide[...]

NWA5120 Series User’s Guid e 11 C HAPTER 1 Introduction 1.1 Overview This User’s Guide covers the following models: NW A5121 -N, NWA5121-NI, and NW A5123-NI. Y our NW A is a wireless AP (Access Point). It extends th e r ange of your existing wired network without additional wiring, providing easy network access to mobile users. Y ou can set the[...]

Chapter 1 Introduction NWA5120 Series User’s Guid e 12 Y our NWA is easy to install, configure and us e. The embedded W eb-b ased configurator enables simple, straightforward management and maintenanc e. See the Quick Start Guide for how to make hardware connections. 1.1.1 Manage ment Mode An AP controller can use Control And Provisioning of Wire[...]

Chapter 1 Introduction NWA5120 Series User’s Guid e 13 Figure 1 Multiple BSSs 1.1.3 Dual-Radio The NWA5123-NI is equipped with dual wireless radios. This means you can configure two different wireless networks to operate simultaneously . Note: A different channel should be configured for each WLAN interface to reduce the effects of radio interfer[...]

Chapter 1 Introduction NWA5120 Series User’s Guid e 14 Figure 2 Dual-Radio Application 1.1.4 Root AP In Root AP mode, the NWA ( Z ) can act as the root AP in a wireless network and also allow repeaters ( X and Y ) to extend the r ange of its wireless network at the same time. In the figu re below , both clients A , B and C can access the wired ne[...]

Chapter 1 Introduction NWA5120 Series User’s Guid e 15 SSID to associate with the NW A in Root AP mo de. A repeater must use the repeater SSID to connect to the NW A in Root AP mode. When the NWA is in R oot AP mode, repeater security between the NWA and other repeater is independent of the security betw een the wireless clients and the AP or rep[...]

Chapter 1 Introduction NWA5120 Series User’s Guid e 16 At the time of writing, repeater security is compatible with the NW A only . 1.2 W ays to Manage the NW A Y ou can use the following ways to manage the NW A. Web Configurator The W eb Configurator allows easy NW A setup and management using an Internet browser . This User’s Guide provides i[...]

Chapter 1 Introduction NWA5120 Series User’s Guid e 17 1.5 LEDs The following are the LED descriptions for your NWA. Figure 5 LED 1.6 S t arting and Stopping the NW A Here are some of the wa ys to start and stop the NW A. T a ble 3 LED COLOR ST ATUS DESCRIPTION Amber On There is system error and the NW A c annot boot up, or the NWA doesn’t have[...]

Chapter 1 Introduction NWA5120 Series User’s Guid e 18 Always use Maintenance > Shut down or the shutdown command before you turn off the NW A or remove the power . Not doing so can cause the firmware to become corrupt. The NWA does not stop or start the system processes when you apply configuration files or run shell scripts although you may [...]

NWA5120 Series User’s Guid e 19 C HAPTER 2 The Web Configurator 2.1 Overview The NWA W eb Configur ator allows easy management using an Internet browser . In order to use the W eb Configurator , you must: • Use Internet Explorer 7.0 and later versions, Mozilla Firefox 9.0 and later versions, Safari 4.0 and later versions, or Google Chrome 10.0 [...]

Chapter 2 The Web Configurator NWA5120 Series User’s Guid e 20 4 Click Login . If you logged in using the default user name and password, the Update Admin Info screen appears. Otherwise, the dashboard appears. The Update Admin Info screen appears every time you log in using the default user name and default password. If you change th e password f[...]

Chapter 2 The Web Configurator NWA5120 Series User’s Guid e 21 Figure 6 The W e b Configurator’ s Main Screen The W eb Configurator’s main screen is divided into these parts: • A - Title Bar • B - Navigation P anel • C - Main Window 2.3.1 T itle Bar The title bar provides some useful links that always appear o ver the screens below , re[...]

Chapter 2 The Web Configurator NWA5120 Series User’s Guid e 22 About Click About to display basic information about the NWA. Figure 8 About The following table describes labels that can appear in this screen. Site Map Click Site MAP to see an overview of links to the W eb Configurator screens. Click a screen’ s link to go to that screen. Object[...]

Chapter 2 The Web Configurator NWA5120 Series User’s Guid e 23 Figure 9 Site Map Object Reference Click Object Refe rence to open the Object Reference screen. Select the type of object and the individual object and click Refresh to show which configur ation settings reference the object. Figure 10 Object Referenc e[...]

Chapter 2 The Web Configurator NWA5120 Series User’s Guid e 24 The fields vary with the type of object. The followi ng table des cribes labels that can appear in this screen. CLI Messages Click CLI to look at the CLI commands sent by the W eb Configur ator . These commands appear in a popup window , such as the following. Figure 1 1 CLI Message s[...]

Chapter 2 The Web Configurator NWA5120 Series User’s Guid e 25 Figure 12 Navigation Panel Dashboard The dashboard displays gene ral device informatio n, system status, system resource usage, and interface status in widgets that you can re-arr ange to suit your needs. For details on the Dashboard’ s features, see Chapter 3 on page 31 . Monitor M[...]

Chapter 2 The Web Configurator NWA5120 Series User’s Guid e 26 Maintenance Menu Use the maintenance menu screens to manage configur ation and firmware files, run diagnostics, and reboot or shut down the NW A. AP Manage ment WLAN Setting Edit wireless AP in formation, remo ve AP s, and reboot them. MON Mode R ogue/Friendly AP List Configure how th[...]

Chapter 2 The Web Configurator NWA5120 Series User’s Guid e 27 2.3.3 W arning Messages W arning messages, such as those resulting from misconfiguration, display in a popup window . Figure 13 W arning Message 2.3.4 T ables and Lists The W eb Configurator tables and lists are quite flexible and provide several options for how to display their entri[...]

Chapter 2 The Web Configurator NWA5120 Series User’s Guid e 28 • Filter by mathematical operators (<, >, or =) or searching for text. 3 Select a column heading cell’s right bord er and drag to re-size the column. 4 Select a column heading and drag an d drop it to change the column order . A green check mark displays next to the column?[...]

Chapter 2 The Web Configurator NWA5120 Series User’s Guid e 29 2.3.4.2 Working wi th T able Entries The tables have icons for working with table entries. A sample is shown next. Y ou can often use the [Shift] or [Ctrl] key to select multiple entries to remove, activ ate, or deactivate. Ta b l e 1 1 Common Table Icons Here are descriptions for the[...]

30 P ART II T echnical Reference[...]

NWA5120 Series User’s Guid e 31 C HAPTER 3 Dashboard 3.1 Overview Use the Dashboard screens to check status information about the NW A. 3.1.1 What Y o u Can Do in this Chapter •T h e m a i n Dashboard screen ( Section 3.2 on page 31 ) displays the NW A ’ s general device information, system status, system resource usage, and interface status.[...]

Chapter 3 Dashboard NWA5120 Series User’s Guid e 32 The following table describes the labels in this screen. T a ble 13 Dashboard LABEL DESCRIPTION Widget Settings (A) Use this link t o re-open closed widgets. Widgets that are al ready open appear grayed out. Up Arrow (B) Click this to collapse a widget. Refresh Time Setting ( C) Set the interval[...]

Chapter 3 Dashboard NWA5120 Series User’s Guid e 33 Boot Status This field displays de tails about the NWA’ s startup state. OK - The NWA started up successfully . Firmware update OK - A firmware update was successful . Problematic configuratio n after firmware update - The application of the configurati on failed after a firmware upgrade. Syst[...]

Chapter 3 Dashboard NWA5120 Series User’s Guid e 34 3.2.1 CPU Usage Use this screen to look at a chart of the NW A’s recent CPU usage. T o access this screen, click CPU Usage in the dashboard. Figure 16 Dashboard > CPU Usage The following table describes the labels in this screen. 3.2.2 Memory Usage Use this screen to look at a chart of the [...]

Chapter 3 Dashboard NWA5120 Series User’s Guid e 35 Figure 17 Dashboard > Memory Usage The following table describes the labels in this screen. T a ble 15 Dashboard > Memory Usage LABEL DESCRIPTION The y-axis represents the percentage of RA M usage. The x- axis shows the time period over which the RAM usag e occurred Refresh Interv al Enter[...]

NWA5120 Series User’s Guid e 36 C HAPTER 4 Monitor 4.1 Overview Use the Monitor screens to check status and statistics information. 4.1.1 What Y o u Can Do in this Chapter •T h e Network Status screen ( Section 4.3 on page 37 ) displays general LAN interface information and packet statistics. •T h e Network Status Graph screen ( Secti on 4.3.[...]

Chapter 4 Monitor NWA5120 Series User’s Guid e 37 4.3 Network S tatus Use this screen to look at general Ethernet interface information and packet statistics. T o access this screen, click Moni tor > Network Status . Figure 18 Monitor > Network Status The following table describes the labels in this screen. T a ble 16 Monitor > Network S[...]

Chapter 4 Monitor NWA5120 Series User’s Guid e 38 4.3.1 Network St atus Graph Use the port statistics graph to loo k at a line graph of pack et statistics for the NWA’ s physical Ethernet port. T o view, in the Network Status screen click the Switch to Graphic View button. Action Use this field to get or to upda te the IP address for the i nter[...]

Chapter 4 Monitor NWA5120 Series User’s Guid e 39 Figure 19 Monitor > Network Status > Switch to Gr aphic View The following table describes the labels in this screen. 4.4 Radio List Use this screen to view statistics for the NW A’ s wireless radio tr ansmitters. T o access this screen, click Monitor > Wireless > AP Information >[...]

Chapter 4 Monitor NWA5120 Series User’s Guid e 40 Figure 20 Monitor > Wireless > AP Information > Radio List The following table describes the labels in this screen. 4.4.1 AP Mode Radio Information This screen allows you to view a selected radio’ s SSID details, wireless traffic statistics and station count for the preceding 24 hours. [...]

Chapter 4 Monitor NWA5120 Series User’s Guid e 41 Figure 21 Monitor > Wireless > AP Information > Radio List > More Information[...]

Chapter 4 Monitor NWA5120 Series User’s Guid e 42 The following table describes the labels in this screen. 4.5 S t ation List Use this screen to view statistics pertaining to the associated stations (or “wireless clients”). Click Monitor > Wireless > Stati on Info to access this screen. Figure 22 Monitor > Wireless > Station Info [...]

Chapter 4 Monitor NWA5120 Series User’s Guid e 43 The following table describes the labels in this screen. 4.6 WDS Link Info Use this screen to view the WDS traffic statistics be tween the NW A and a root AP or repeaters. Click Monitor > Wireless > WDS Link Info to access this screen. Figure 23 Monitor > Wireless > WDS Link Info T a b[...]

Chapter 4 Monitor NWA5120 Series User’s Guid e 44 The following table describes the labels in this screen. 4.7 Detected Device Use this screen to view informatio n about suspected rogue APs. Click Monitor > Wireless > Detected Device to access this screen. Note: The radio or at least one of the NWA’ s radio must be set to monitor mode (in[...]

Chapter 4 Monitor NWA5120 Series User’s Guid e 45 Figure 24 Monitor > Wireless > Detected Device The following table describes the labels in this screen. 4.8 V iew Log Log messages are stored in two separate logs, one for regular log message s and one for debugging messages. In the regular log, you can look at all the log messages by se lec[...]

Chapter 4 Monitor NWA5120 Series User’s Guid e 46 T o access this screen, click Monitor > Log . The log is displayed in the following screen. Note: When a log reaches the maximum nu mber of log messages, new log messages automatically overwrite existing log messages, starting with the oldest existing log message first. Events that gener ate an[...]

Chapter 4 Monitor NWA5120 Series User’s Guid e 47 The following table describes the labels in this screen. T a ble 23 Monitor > Log > View Log LABEL DESCRIPTION Show Fil ter / Hide Filte r Click this button to show or hide the filt er settings. If the filt er settings ar e hidden, the Di splay , Email Log Now , Refresh , and Clear Log field[...]

Chapter 4 Monitor NWA5120 Series User’s Guid e 48 The W eb Configurator saves the filter settings if y ou leave the View Log screen and return to it later .[...]

NWA5120 Series User’s Guid e 49 C HAPTER 5 Management Mode 5.1 Overview This chapter discusses using the NWA in management mode, which determines whether the NW A is used in its default standalone mode, or as part of a Control And Provisioning of Wireless Access Po ints (CAPWAP) network. 5.2 About CAPW AP The NWA supports CAPW AP . This is ZyXEL [...]

Chapter 5 Manageme nt Mode NWA5120 Series User’s Guid e 50 1 An AP in managed AP mode joins a wired network (receives a dynamic IP address). 2 The AP sends out a discovery request, looking for a CAPW AP AP controller . 3 If there is an AP controller on the network, it rece ives the discovery request. If the AP controller is in Manual mode it adds[...]

Chapter 5 Management Mode NWA5120 Series User’s Guid e 51 Figure 27 CAPWAP and DHCP Option 138 5.2.4 Notes on CAPW AP This section lists some additional features of Z yXEL ’s implementation of the CAPWAP protocol. • When the AP controller uses its internal R emote Authentication Dial In User Service (RADIUS) server , managed APs also use the [...]

Chapter 5 Manageme nt Mode NWA5120 Series User’s Guid e 52 Figure 28 Configuration > MGNT Mode Each field is described in the following table. T a ble 24 Configuration > MG NT Mode LABEL DESCRIPTION Standalone AP Select this to manage the NWA usin g its own web configurator , neither managing nor managed by other devices. Managed AP Select [...]

NWA5120 Series User’s Guid e 53 C HAPTER 6 Network 6.1 Overview This chapter describes how you can configure th e management IP address and VLAN settings of your NWA. The Internet Protocol (IP) address identifies a device on a network. Ev ery networking device (including computers, servers, routers, printers , etc.) needs an IP address to communi[...]

Chapter 6 Network NWA5120 Series User’s Guid e 54 Figure 30 Configuration > Network > IP Setting Each field is described in the following table. T a ble 25 Configuration > Network > IP Setting LABEL DESCRIPTION IP Address Assignme nt Get Automati cally Select this to ma ke the interface a DHCP c lient and automat ically get the IP add[...]

Chapter 6 Network NWA5120 Series User’s Guid e 55 6.3 VLAN This section discusses how to configure the NW A’s VLAN settings. Figure 31 Management VLAN Se tup In the figure above, to access an d manage the NWA from computer A , the NW A and switch B ’s ports to which computer A and the NW A are connected should be in the same VLAN. Link -Local[...]

Chapter 6 Network NWA5120 Series User’s Guid e 56 A Virtual Local Area Network (VLAN) allows a physical network to be partitioned into multiple logical networks. Devices on a logical network belong to on e gr ou p. A d ev ic e ca n b el on g to mo re th an o ne group. With VLAN, a device cannot directly talk to or hear from devices that are not i[...]

NWA5120 Series User’s Guid e 57 C HAPTER 7 Wireless 7.1 Overview This chapter discusses how to configure the wireless network settings in your NW A. The following figure provides an example of a wireless network. Figure 33 Example of a Wireless Network The wireless network is the part in the blue circle. In this wireless network, devices A and B [...]

Chapter 7 Wireless NWA5120 Series User’s Guid e 58 7.1.2 What Y ou Need to Know The following terms and concepts may help as you read this chapter . St ation / Wireless Client A station or wireless client is any wireless-capable de vice that can connect to an AP using a wireless signal. Dynamic Channel Selection (DCS) Dynamic Channel Selection (D[...]

Chapter 7 Wireless NWA5120 Series User’s Guid e 59 Each field is described in the following table. T a ble 27 Configuration > Wir eless > AP Manage ment LABEL DESCRIPTION Model This field displays the NWA’ s model name. Radio 1 Acti vate Select the check bo x to enable the NW A’s first (de fault) radio . Radio 1 OP Mode Select the opera[...]

Chapter 7 Wireless NWA5120 Series User’s Guid e 60 7.3 MON Mode Use this screen to assign APs either to the rogue AP list or the friendly AP list. A rogue AP is a wireless access point operating in a network’ s coverage area that is not under the control of the network administrator , and which can potentially open up holes in a network’ s se[...]

Chapter 7 Wireless NWA5120 Series User’s Guid e 61 Each field is described in the following table. 7.3.1 Add/Edit Rogue/Friendly List Click Add or sele ct an AP and click the Edit button in the Configuration > Wireless > MON Mode table to display this screen. Figure 36 Configuration > Wireless > MON Mode > Add/Edit R ogue/Friendly [...]

Chapter 7 Wireless NWA5120 Series User’s Guid e 62 7.4 Load Balancing Use this screen to configure wireless network tr affic load balancing between the APs on your network. Click Configuration > Wireless > Load Balancing to access this screen. Figure 37 Configuration > Wireless > Load Balancing Each field is described in the following[...]

Chapter 7 Wireless NWA5120 Series User’s Guid e 63 7.4.1 Disassociating an d Delaying Connections When your AP becomes overloaded, there are two ba sic responses it can take. The first one is to “delay” a client connection. This means that the AP withholds the connection until the data transfer throughput is lowered or the client connection i[...]

Chapter 7 Wireless NWA5120 Series User’s Guid e 64 Figure 39 Kicking a Connection Connections are kicked based on either idle ti meout or signal strength . The NWA first looks to see which devices have been idle the longest, then starts kicking them in or der of highest idle time. If no connections are idle, the next criteria the NWA analyzes is [...]

Chapter 7 Wireless NWA5120 Series User’s Guid e 65 Figure 40 Configuration > Wireless > DCS Each field is described in the following table. T a ble 31 Configuration > Wireles s > DCS LABEL DESCRIPTION Select Now Click this to hav e the NWA scan for and select an available channel i mmediately . Enable Dynami c Channel Selection Select[...]

Chapter 7 Wireless NWA5120 Series User’s Guid e 66 7.6 T echnical Reference The following section contains additional technical information about the features described in this chapter . Dynamic Channel Selection When numerous APs broadcast within a given area , they introduce the possibilit y of heightened radio interference, especially if some [...]

Chapter 7 Wireless NWA5120 Series User’s Guid e 67 In the 2.4 G Hz spectrum, each channel from 1 to 13 is broken up into discrete 22 MHz segments that are spaced 5 MHz apart. Channel 1 is centered on 2.412 GHz while channel 13 is centered on 2.472 GHz. Figure 41 An Example Three-Channel Deployment Three channels are situated in such a way as to c[...]

Chapter 7 Wireless NWA5120 Series User’s Guid e 68 Load Balancing Because there is a hard upper limit on an AP’ s wi reless bandwidth, load balancing can be crucial in areas crowded with wireless users. Rather than let every user connect and subsequently dilute the available bandwidth to the point where each connecting device receives a meager [...]

NWA5120 Series User’s Guid e 69 C HAPTER 8 User 8.1 Overview This chapter describes how to set up user accounts and user settings for the NWA. 8.1.1 What Y o u Can Do in this Chapter •T h e User screen (see Section 8.2 on page 70 ) provides a summary of all u ser accounts. •T h e Setting screen (see Section 8.3 on page 72 ) controls default s[...]

Chapter 8 User NWA5120 Series User’s Guid e 70 8.2 User Summary The User screen provides a summary of all user accounts. T o access this screen click Configuration > Object > User . Figure 44 Configuration > Object > User The following table describes the labels in this screen. 8.2.1 Add/Edit User The User Add/ Edit screen allows you [...]

Chapter 8 User NWA5120 Series User’s Guid e 71 • Alphanum eric A-z 0-9 (there is no unicode s upport) • _ [underscores] •- [ d a s h e s ] The first character must be alphabetical (A -Z a-z), an underscore (_), or a dash (-). Other limitations on user names are: • User names are case-sensitive. If you enter a user ' bob' but use[...]

Chapter 8 User NWA5120 Series User’s Guid e 72 The following table describes the labels in this screen. 8.3 Setting This screen controls default settings, login settings, lockout settings, and other user settings for the NW A. T o access this screen, login to the W e b Configurator , and click Configuration > Object > User > Setting . T [...]

Chapter 8 User NWA5120 Series User’s Guid e 73 Figure 46 Configuration > Object > User > Setting The following table describes the labels in this screen. T a ble 35 Configuration > Object > User > S etting LABEL DESCRIPTION User Default Se tting Default Auth enticatio n Timeout Settin gs These authenti cation timeout s ettings a[...]

Chapter 8 User NWA5120 Series User’s Guid e 74 8.3.1 Edit User Authen tication Timeout Settings This screen allows you to set the default authentication timeout settings for the selected type of user account. These default authentication timeout settings also control the settings for any existing user accounts that are set to use the de fault set[...]

Chapter 8 User NWA5120 Series User’s Guid e 75 The following table describes the labels in this screen. T a ble 36 User > Setting > Edit User Authentication Timeout Settings LABEL DESCRIPTION User T ype This read-only field iden ti fies the type of user acco unt for which you are configuring the default settin gs. • admin - this user can [...]

NWA5120 Series User’s Guid e 76 C HAPTER 9 AP Profile 9.1 Overview This chapter shows you how to configure preset profiles for the NW A. 9.1.1 What Y o u Can Do in this Chapter •T h e Radio screen ( Section 9 .2 on page 77 ) creates r adio configurations that can be used by the APs. •T h e SSID screen ( Section 9.3 on page 82 ) c onfigures th[...]

Chapter 9 AP Profile NWA5120 Series User’s Guid e 77 WEP WEP (Wired Equivalent Priv acy) encryption scrambl es all data packets transmitted between the AP and the wireless stations associated with it in order to keep network communications pr ivate. Both the wireless stations and the access points must use the same WEP k ey for data encryption an[...]

Chapter 9 AP Profile NWA5120 Series User’s Guid e 78 9.2.1 Add/Edit Radio Profile This screen allows you to create a new radio profile or edit an existing one. T o access this screen, click the Add button or select a radio profile from the list and click the Edit button. Rem ov e Click this to remove the sele cted radio profile. Activ ate T o tur[...]

Chapter 9 AP Profile NWA5120 Series User’s Guid e 79 Figure 49 Configuration > Object > AP Profile > Add/Edit Profile[...]

Chapter 9 AP Profile NWA5120 Series User’s Guid e 80 The following table describes the labels in this screen. T a ble 38 Configuration > Object > AP Profile > Add/Edit Profile LABEL DESCRIPTION Hide / Show Adv anced S etting s Click this to hide or show the Advanced Settings in this window . Cr e at e N ew Ob j ec t S e le c t a n i t em[...]

Chapter 9 AP Profile NWA5120 Series User’s Guid e 81 Enable A-MSDU Aggregation Select this to en able A-MSDU aggregation. Mac Service Data Unit (MSDU) aggregation collects Ethernet fr ames without any of their 802.11n headers and wraps the header- less payload in a single 802.11n MAC header . This method is useful for increasi ng bandwidth throug[...]

Chapter 9 AP Profile NWA5120 Series User’s Guid e 82 9.3 SSID The SSID screens allow you to configure three differe nt types of profiles for your network ed APs: an SSID list, which can assign specific SSID configur ations to your APs; a security list, which can assign specific encryption methods to the APs when allowing wireless clients to conne[...]

Chapter 9 AP Profile NWA5120 Series User’s Guid e 83 Note: Y ou can have a maximum of 32 SSID profiles on the NWA. Figure 50 Configuration > Object > AP Profile > SSID List The following table describes the labels in this screen. 9.3.2 Add/Edit SSID Profile This screen allows you to create a new SSID profile or edit an existing one. T o [...]

Chapter 9 AP Profile NWA5120 Series User’s Guid e 84 Figure 51 Configuration > Object > AP Profile > Add/Edit SSID Profile The following table describes the labels in this screen. T a ble 40 Configuration > Object > AP Pr ofile > Add/Edit SSID Profile LABEL DESCRIPTION Create n ew Object Select an object type from the list to cr[...]

Chapter 9 AP Profile NWA5120 Series User’s Guid e 85 9.4 Security List This screen allows you to manage wireless security configurations that can be used by your S S IDs. Wireless security is implemented strictly between the AP broadcasting the SSID and the stations that are connected to it. T o access this screen click Configuration > Object [...]

Chapter 9 AP Profile NWA5120 Series User’s Guid e 86 Figure 52 Configuration > Object > AP Profile > SSID > Security List The following table describes the labels in this screen. 9.4.1 Add/Edit Security Profile This screen allows you to create a new security profile or edit an existing one. T o access this screen, click the Add button[...]

Chapter 9 AP Profile NWA5120 Series User’s Guid e 87 Figure 53 SSID > Security Profile > Add/Edit Security Profile The following table describes the labels in this screen. T a ble 42 SSID > Security Profile > Add/Edit Security Profile LABEL DESCRIPTION Profile Name Enter up to 31 alphanu meric characters for the pro file name. This na[...]

Chapter 9 AP Profile NWA5120 Series User’s Guid e 88 Radius Server T ype This shows External and the NW A uses an external RADIUS server for authentication. Primary / Secondar y Radi us Server Activate Select this to ha ve the NW A use the specified RADIUS serv er . Radius Server IP Address Enter the IP addres s of the RADIUS s e rver to be used [...]

Chapter 9 AP Profile NWA5120 Series User’s Guid e 89 9.5 MAC Filter List This screen allows you to create and manage security configur ations that can be used by your SSIDs. T o access this screen click Configuration > Object > AP Profile > SSID > MAC Filter List . Note: Y ou can have a maximum of 32 MAC filteri ng profiles on the NW [...]

Chapter 9 AP Profile NWA5120 Series User’s Guid e 90 9.5.1 Add/Edit MAC Filter Profile This screen allows you to create a new MAC filtering profile or edit an existing one. T o access this screen, click the Add button or select a MAC filter profile from the list and click the Edit button. Note: Each MAC filtering profile can include a maximum of [...]

Chapter 9 AP Profile NWA5120 Series User’s Guid e 91 9.6 Layer-2 Isolation List Layer-2 isolation is used to prevent wireless clients associated with your NWA from communicating with other wireless clients, APs, computers or routers in a network. In the following example, layer-2 isolation is enabled on the NWA to allow a guest wireless client ( [...]

Chapter 9 AP Profile NWA5120 Series User’s Guid e 92 Figure 57 Configuration > Object > AP Profile > SSID > Lay er-2 Isolation List The following table describes the labels in this screen. 9.6.1 Add/Edit Layer-2 Isolation Profile This screen allows you to create a new layer-2 isol ation profile or edit an existing one. T o access this[...]

Chapter 9 AP Profile NWA5120 Series User’s Guid e 93 Figure 58 SSID > MAC Filter List > Add/Edit Lay er-2 Isolation Profile The following table describes the labels in this screen. T a ble 46 SSID > MAC Filter List > Add/Edit Layer-2 Isolation Profile LABEL DESCRIPTION Profile Name Enter up to 31 alphanumeric char acters for the profi[...]

NWA5120 Series User’s Guid e 94 C HAPTER 10 MON Profile 10.1 Overview This screen allows you to set up monitor mode configur ations that allow your NWA to scan for other wireless devices in the vicinity . Once detected, you can use the Wireless > MON Mode screen ( Section 7.3 on page 60 ) to classify them as either rogue or friendly . 10.1.1 W[...]

Chapter 10 MON Profile NWA5120 Series User’s Guid e 95 10.2.1 Add/Edit MON Profile This screen allows you to create a new monitor mode profile or edit an existing one. T o acce ss this screen, click the Add button or select and existing monitor mode profile and click the Edit button. Figure 60 Configuration > Object > MON Profile > Add/E[...]

Chapter 10 MON Profile NWA5120 Series User’s Guid e 96 The following table describes the labels in this screen. 10.3 T echnical Reference The following section contains additional technical information about the features described in this chapter . Rogue APs R ogue APs are wireless access points operating in a network’s cover age area that are [...]

Chapter 10 MON Profile NWA5120 Series User’s Guid e 97 Figure 61 Ro g u e A P E xa m p l e In the example above, a corporate network’ s security is compromised by a rogue AP ( RG ) set up by an employee at his workstation in order to allow him to connect his notebook computer wirelessly ( A ). The company’ s legitimate wireless network (the d[...]

NWA5120 Series User’s Guid e 98 C HAPTER 11 WDS Profile 1 1.1 Overview This chapter shows you how to configure WDS profiles for the NW A to form a WDS with other APs. 1 1.1.1 What Y ou Can Do in this Chapter The WDS Profile screen ( Section 11.2 on page 98 ) creates preset WDS configurations that can be used by the NWA. 1 1.2 WDS Profile This scr[...]

Chapter 11 WDS Profile NWA5120 Series User’s Guid e 99 1 1.2.1 Add/Edit WDS Profile This screen allows you to create a new WDS profile or edit an existing one. T o access this screen, click the Add button or select and e xisting profile and click the Edit button. Figure 63 Configuration > Object > WDS Profile > Add/Edit WDS Profile The f[...]

NWA5120 Series User’s Guid e 100 C HAPTER 12 Certificates 12.1 Overview The NWA can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-priv ate key pairs. A certificate contains the certificate owner ’s identity and public k ey . Certificates provide a way to ex change public keys for use in authe[...]

Chapter 12 Certificates NWA5120 Series User’s Guid e 101 5 Additionally , Jenny uses her own private k ey to sign a message and Tim uses Jenny’ s public key to verify the message. The NWA uses certificates based on public -key cr yptology to authenticate users attempting to establish a connection, not to encrypt the data th at y ou send after e[...]

Chapter 12 Certificates NWA5120 Series User’s Guid e 102 • Binary PKCS#12: This is a format for tr ansferri ng public key and private key certificates.The private k ey in a PKCS #12 file is within a passw ord-encrypted envelope. The file’ s password is not connected to your certificate’ s public or private passwords. Exporting a PK CS #12 f[...]

Chapter 12 Certificates NWA5120 Series User’s Guid e 103 12.2 My Certificates Click Configuration > Object > Certifi cate > My Certificates to open this screen. This is the NW A’s summary list o f certificates and certification requests. Figure 64 Configuration > Object > Certificate > My Certificates The following table descr[...]

Chapter 12 Certificates NWA5120 Series User’s Guid e 104 12.2.1 Add My Certificates Click Configuration > Object > Certifi cate > My Certificates and then the Add icon to open the Add My Certificates screen. Use this screen to have the NW A create a self-signed certificate, enroll a certificate with a certification authority or gener ate[...]

Chapter 12 Certificates NWA5120 Series User’s Guid e 105 Figure 65 Configuration > Object > Certif icate > My Certificates > Add[...]

Chapter 12 Certificates NWA5120 Series User’s Guid e 106 The following table describes the labels in this screen. T a ble 52 Configuration > Ob ject > Cer tif icate > My Certificates > Add LABEL DESCRIPTION Name T ype a name to identify this certificat e. Y ou can use up to 31 alphan umeric and ;‘~!@#$%^&()_+[]{} ’ ,.=- charac[...]

Chapter 12 Certificates NWA5120 Series User’s Guid e 107 If you configured the Add My Certificates screen to have the NW A enroll a certificate and the certificate enrollment is not successful, you see a screen with a Return button that takes you back to the Add My Certificates screen. Click Return and check your information in the Add My Certifi[...]

Chapter 12 Certificates NWA5120 Series User’s Guid e 108 12.2.2 Edit My Certificates Click Configuration > Object > Certifi cate > My Certificates and then the Edit icon to open the My Certificate Edit screen. Y ou can use this screen to vi ew in-depth certificate information and change the certificate’ s name. Figure 66 Configuration [...]

Chapter 12 Certificates NWA5120 Series User’s Guid e 109 The following table describes the labels in this screen. T a ble 53 Configuration > Object > Certificate > My Certificates > Edit LABEL DESCRIPTION Name This field disp lays the ident ifying name of this certif icate. Y ou can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[][...]

Chapter 12 Certificates NWA5120 Series User’s Guid e 11 0 12.2.3 Import Certificates Click Configuration > Object > Certifi cate > My Certificates > Import to open the My Certificate Impor t screen. F ollow the instructions in this screen to save an existing certificate to the NWA. Note: Y ou can import a certificate that matche s a c[...]

Chapter 12 Certificates NWA5120 Series User’s Guid e 111 Figure 67 Configuration > Object > Certificate > My Certificates > Import The following table describes the labels in this screen. 12.3 T rusted Certificates Click Configuration > Object > Certifi cate > Trusted Certificates to open the Trusted Certificates screen. This[...]

Chapter 12 Certificates NWA5120 Series User’s Guid e 11 2 Figure 68 Configuration > Object > Certificate > T rusted Certificates The following table describes the labels in this screen. T a ble 55 Configuration > Object > Certificate > T rusted Certificates LABEL DESCRIPTION PKI Stor age Space in Use This bar displays the percen[...]

Chapter 12 Certificates NWA5120 Series User’s Guid e 11 3 12.3.1 Edit T rusted Certificates Click Configuration > Object > Cert ific ate > Trust ed Certific ates and then a certificate’ s Edit icon to open the Trusted Certificates Edit screen. Use this screen to view in-depth information about the certificate, change the certificate’[...]

Chapter 12 Certificates NWA5120 Series User’s Guid e 11 4 The following table describes the labels in this screen. T a ble 56 Configuration > Object > Certificate > T rusted Certificates > Edit LABEL DESCRIPTION Name This field display s the identify ing name of this certificate. Y ou can change th e name. Y ou can use up to 31 alphan[...]

Chapter 12 Certificates NWA5120 Series User’s Guid e 11 5 12.3.2 Import T rusted Certificates Click Configuration > Object > Certificat e > Trusted Certificates > Import to open the Import Trusted Certificates screen. Follow the instructions in this screen to sa ve a trusted certificate to the NW A. Note: Y ou mus t remove any spaces [...]

Chapter 12 Certificates NWA5120 Series User’s Guid e 11 6 Figure 70 Configuration > Object > Certificate > T rusted Certificates > Import The following table describes the labels in this screen. 12.4 T echnical Reference The following section contains additional technical information about the features described in this chapter . OCSP[...]

NWA5120 Series User’s Guid e 11 7 C HAPTER 13 System 13.1 Overview Use the system screens to configure general NW A settings. 13.1.1 What Y ou Can Do in this Chapter •T h e Host Name screen ( Section 13.2 on page 117 ) configures a unique name for the NW A in your net wor k. •T h e Date/Tim e screen ( Section 13.3 on page 118 ) configures the[...]

Chapter 13 Syste m NWA5120 Series User’s Guid e 11 8 The following table describes the labels in this screen. 13.3 Date and T i me For effectiv e scheduling and logging, the NWA system time must be accurate. The NWA has a software mechanism to set the time manually or ge t the current time an d date from an external server . T o change your NW A?[...]

Chapter 13 System NWA5120 Series User’s Guid e 11 9 The following table describes the labels in this screen. T a ble 59 Configuration > System > Dat e/Time LABEL DESCRIPTION Current Time and Date Current Time This field displays the present time of your NWA. Current Date This field displays the present date of your NW A. Time and Da te Setu[...]

Chapter 13 Syste m NWA5120 Series User’s Guid e 120 13.3.1 Pre-define d NTP Time Serv ers List When you turn on the NW A for the first time, the date and time start at 2003-01-01 00:00:00. The NW A then attempts to synchronize with one of the following pre-defined list of Network Time Protocol (NTP) time servers. The NWA continues to use the f ol[...]

Chapter 13 System NWA5120 Series User’s Guid e 121 The Current Time and Current Date fields will display the appropriate settings if the synchronization is successful. If the synchronization w as not successful, a log displays in the View Log screen. T ry re-configuring the Date/Time screen. T o ma nually set the NW A date and time: 1 Click Syste[...]

Chapter 13 Syste m NWA5120 Series User’s Guid e 122 Figure 74 Secure and Insecure Service Access From the WAN 13.4.1 Service Access Limit ations A service cannot be used to access the NW A when you hav e disabled that service in the corresponding screen. 13.4.2 System T imeout There is a lease timeout for administrators. The NW A automatically lo[...]

Chapter 13 System NWA5120 Series User’s Guid e 123 Please refer to the following figure. 1 HT TPS connection requests from an SSL -aware web browser go to port 443 (by default) on the NWA’ s web server . 2 HT TP connection requests from a web browser go to port 80 (by default) on the NW A’ s web server . Figure 75 HTTP/HT TPS Implementation N[...]

Chapter 13 Syste m NWA5120 Series User’s Guid e 124 The following table describes the labels in this screen. 13.4.5 HTTPS Example If you haven’t changed the default HT TPS port on the NWA, th en in your browser enter “https:// NW A IP Address/” as the web site address where “N WA IP Address” is the IP address or domain name of the NWA y[...]

Chapter 13 System NWA5120 Series User’s Guid e 125 Figure 77 Security Alert Dialog Box (Internet Explorer) Select Continue to this website. to proceed to the W eb Configurator login screen. Otherwise, select Click here to close this webpage. to block the access. 13.4.5.2 Mozilla Firefox W arning Messages When you attempt to access the NWA HT TPS [...]

Chapter 13 Syste m NWA5120 Series User’s Guid e 126 Figure 78 Security Certificate 1 (Firefox) Figure 79 Security Certificate 2 (Firefox) 13.4.5.3 A voiding Browser W arning Messages Here are the main reasons your browser displays w arnings about the NWA’ s HTTPS server certificate and what you can do to av oid seeing the warnings: • The issu[...]

Chapter 13 System NWA5120 Series User’s Guid e 127 • For the browser to trust a self-signed certificat e, impo rt the self-signed certificate into your operating system as a trusted certificate. • T o have the browser trust the certificates issued by a certificate authority , import the certificate authority’ s certificate into your operati[...]

Chapter 13 Syste m NWA5120 Series User’s Guid e 128 13.4.5.5 Inst alling th e CA ’ s Certific ate 1 Double click the CA ’s trusted certificate to produce a screen similar to the one shown next. 2 Click Install Certificate and follow the wizard as shown earlier in this appendix. 13.4.5.6 Inst alling a Personal Certificate Y ou need a password [...]

Chapter 13 System NWA5120 Series User’s Guid e 129 1 Click Next to begin the wizard. 2 The file name and path of the certificate you do uble-clicked should automatically appear in the File name text box. Click Browse if you wish to import a different certificate.[...]

Chapter 13 Syste m NWA5120 Series User’s Guid e 130 3 Enter the password given to you by the CA. 4 Have the wizard determine where the certificate should be sav ed on your computer or select Place all cert ificates i n the fo llowing st ore and choose a different location.[...]

Chapter 13 System NWA5120 Series User’s Guid e 131 5 Click Finish to complete the wizard and begin the import process. 6 Y ou should see the following screen when the certificate is correctly installed on your compu ter . 13.4.5.7 Using a Certificat e When Accessing the NW A T o access the NWA via HT TPS: 1 Enter ‘https://NW A IP Address/ in yo[...]

Chapter 13 Syste m NWA5120 Series User’s Guid e 132 2 When Authenticate Client Certificates is selected on the NWA, the following screen asks y ou to select a personal certificate to send to the NWA. Th is screen displays even if you only have a single certificate as in the example. 3 Y ou next see the W eb Configurator login screen. 13.5 SSH Y o[...]

Chapter 13 System NWA5120 Series User’s Guid e 133 Figure 82 How SSH v1 W ork s Example 1 Host Identification The SSH client sends a connection request to the S SH server . The server identifies itself with a host key . The client encrypts a randomly gener ated se ssion key with the host ke y and server key and sends the result back to the server[...]

Chapter 13 Syste m NWA5120 Series User’s Guid e 134 13.5.3 Requirement s for Using SSH Y ou must install an SSH client progr am on a client computer (Windows or Linux operating system) that is used to connect to the NWA over SSH. 13.5.4 Configuring SSH Click Configuration > System > SSH to open the following screen. Use this screen to confi[...]

Chapter 13 System NWA5120 Series User’s Guid e 135 1 Launch the SSH client and specif y the connection information (IP address, port number) for the NW A. 2 Configure the SSH client to accept connection using SSH ve rsion 1. 3 A window displays prompting you to store the host key in y o u computer . Click Yes to continue. Figure 84 SSH Example 1:[...]

Chapter 13 Syste m NWA5120 Series User’s Guid e 136 3 The CLI screen displays next. 13.6 T elnet Y ou can use T elnet to access the NWA’ s command line interface. Click Configuration > System > TELNET to configure your NW A for remote T e lnet access. Use this screen to enable or disable T elnet and set the server port number . Figure 87 [...]

Chapter 13 System NWA5120 Series User’s Guid e 137 Figure 88 Configuration > System > FTP The following table describes the labels in this screen. 13.8 SNMP Simple Network Management Protocol is a protocol used for exchanging management information between network devices. Y our NWA supports SNMP agent functionality , which allows a manager[...]

Chapter 13 Syste m NWA5120 Series User’s Guid e 138 Figure 89 SNMP Management Model An SNMP managed network consists of two main types of component: agents and a manager . A n a g e n t i s a m a n a g e m e n t s o f t w a r e m o d u l e t h a t r e s i d e s i n a m a n a g e d d e v i c e ( t h e N W A ) . A n a g e n t translates the local m[...]

Chapter 13 System NWA5120 Series User’s Guid e 139 is to let administrators collect statistical data and monitor status and performance. Y ou can download the NW A’s MIB s from www. zyxel.com. 13.8.2 SNMP T raps The NWA will send tr aps to the SNMP manager wh en any one of the following events occurs. 13.8.3 Configuring SNMP T o change your NWA[...]

Chapter 13 Syste m NWA5120 Series User’s Guid e 140 13.8.4 Adding or Editin g an SNMPv3 User Profile This screen allows you to add or edit an SNMP v3 user profile. T o access this screen, click the Configuration > System > SNMP screen’ s Add button or select a SNMPv3 user profile from the list and click the Edit button. Figure 91 Configur[...]

Chapter 13 System NWA5120 Series User’s Guid e 141 The following table describes the labels in this screen. T a ble 67 Configuration > System > SNMP LABEL DESCRIPTION User Name Se lect the user nam e of the user account for which this SNMPv3 user profile is confi gured. Authentica tion Sele ct the type of auth entication the SNMPv3 user mu [...]

NWA5120 Series User’s Guid e 142 C HAPTER 14 Log and Report 14.1 Overview Use the system screens to configur e daily reporting and log settings. 14.1.1 What Y ou Can Do In this Chapter •T h e Email Daily Report screen ( Section 14.2 on page 142 ) configures how and where to send daily reports and what reports to send. •T h e Log Setting scree[...]

Chapter 14 Log a nd Report NWA5120 Series User’s Guid e 143 Figure 92 Configuration > Log & R eport > Email Daily Report The following table describes the labels in this screen. T a ble 68 Configuration > Log & Report > Email Daily Report LABEL DESCRIPTION Enable Email Daily Report Select this to send reports by e-mail ev ery [...]

Chapter 14 Log and Report NWA5120 Series User’s Guid e 144 14.3 Log Setting These screens control log messages and alerts. A log message stores the information for viewing (for exampl e, in the Monitor > View Lo g screen) or regular e-mailing later , and an alert is e- mailed immediately . Usually , alerts are used for even ts that require mor[...]

Chapter 14 Log a nd Report NWA5120 Series User’s Guid e 145 Figure 93 Configuration > Lo g & Report > Log Setting The following table describes the labels in this screen. T a ble 69 Configuration > Log & Report > Log Setting LABEL DESCRIPTION Edit Double-click an ent ry or select it and click Edit to open a sc reen where you c[...]

Chapter 14 Log and Report NWA5120 Series User’s Guid e 146 14.3.2 Edit System Log Settings This screen controls the detailed settings for each log in the system log (which includes the e-mail profiles). Select a system log entry in the Log Setting screen and click the Edit icon. Figure 94 Configuration > Lo g & Report > Log Se tting >[...]

Chapter 14 Log a nd Report NWA5120 Series User’s Guid e 147 The following table describes the labels in this screen. T a ble 70 Configuration > Log & Report > Log Set ting > Edit System Log Se tting LABEL DESCRIPTION E-Mail Server 1/2 Active Sel ect this to send log me ssages and al erts according to the information in this section. [...]

Chapter 14 Log and Report NWA5120 Series User’s Guid e 148 14.3.3 Edit Remote Server This screen controls the settings for each log in the remote server (syslog). Select a remote server entry in the Log Setting screen and click the Edit icon. E-mail Se rver 2 Use the E-Mail Server 2 drop -down list to change the se ttings for e -mailing lo gs to [...]

Chapter 14 Log a nd Report NWA5120 Series User’s Guid e 149 Figure 95 Configuration > Lo g & Report > Log Setting > Edit R emote Server[...]

Chapter 14 Log and Report NWA5120 Series User’s Guid e 150 The following table describes the labels in this screen. 14.3.4 Active Log Summary This screen allows you to view and to edit what information is included in the system log, e-mail profiles, and remote servers at the same time. It does not let you change other log settings (for example, w[...]

Chapter 14 Log a nd Report NWA5120 Series User’s Guid e 151 Figure 96 Active Log Summary This screen provides a different view and a different wa y of indicating which messages are included in each log and each alert. (The Default category includes debugging messages generated by open source software.)[...]

Chapter 14 Log and Report NWA5120 Series User’s Guid e 152 The following table describes the fields in this screen. T a ble 72 Configuration > Log & Report > Log Se tting > Active Lo g Summary LABEL DESCRIPTION Active Log Summary If the NW A is set to contro ller mode, the AC section controls l ogs gener ated by the controller and th[...]

Chapter 14 Log a nd Report NWA5120 Series User’s Guid e 153 E-mail Server 1 E-mail Select whether each category of events should be inclu ded in the log messages wh en it is e-mailed (green check mark) and/or in aler ts (red exclamati on point) for the e-mail settings speci fied in E-Mail Server 1 . The NWA does not e-mail debugging information, [...]

NWA5120 Series User’s Guid e 154 C HAPTER 15 File Manager 15.1 Overview Configuration files define the NW A’s settings. Shell scripts are files of commands that you can store on the NW A and run when you need them. Y ou can apply a configuration file or run a shell script without the NW A restarting. Y ou can store multiple configuration files [...]

Chapter 15 File Manager NWA5120 Series User’s Guid e 155 While configuration files and shell scripts have th e same syntax, the NWA applies configuration files differently than it runs shell scripts. This is explained below . Y ou have to ru n the aforemention ed example as a shell script because the first command is run in Privilege mode. If you[...]

Chapter 15 File Manager NWA5120 Series User’s Guid e 156 configuration files from the NWA to y our computer and upload configur ation files from your computer to the NWA. Once your NW A is confi gured and functioning properly , it is highly recommended that y ou back up your configur ation file before making further conf iguration changes. The ba[...]

Chapter 15 File Manager NWA5120 Series User’s Guid e 157 The following table describes the labels in this screen. T a ble 74 Maintenance > File Manager > Configuration File LABEL DESCRIPTION Ren am e Use this button to change the label of a configur ation file on the NWA. Y ou can only rename manually saved configuration files. Y ou cannot [...]

Chapter 15 File Manager NWA5120 Series User’s Guid e 158 Apply Use this button to ha ve the NWA us e a specific configur ation file. Click a configuration file ’ s row to select it and cl ick Apply to have the NWA use that configuration file. The NWA does not have to restart in order to use a different configuration file , although you will nee[...]

Chapter 15 File Manager NWA5120 Series User’s Guid e 159 15.2.1 Example of Configurati on File Download Using FTP The following example gets a configuration file named startup-config.conf from the NW A and saves it on the computer . 1 Connect your computer to the NW A. 2 The FTP server IP address of the NWA in standalone AP mode is 192.168.1.2, s[...]

Chapter 15 File Manager NWA5120 Series User’s Guid e 160 8 Use "get” to download files. T ran sfer the configuration file on the NW A to your computer . T ype get followed by the name of the configur ation file. This examples uses get startup-conf ig.conf . 9 W ait for the file transfer to complete. 10 Enter “quit” to exit the ftp prom[...]

Chapter 15 File Manager NWA5120 Series User’s Guid e 161 Figure 98 Maintenance > File Manager > Firmware Package The following table describes the labels in this screen. After you see the Firmware Upload in Process screen, wait tw o minutes before logging into the NW A again. Note: The NW A automatically reboots after a successful upload. T[...]

Chapter 15 File Manager NWA5120 Series User’s Guid e 162 15.3.1 Example of Firm ware Upload Using FTP This procedure requires the NWA’ s firmware. Download the firmware package from www.zyx el.com and unzip it. The firmware file uses a .bin ex tension, for example, "410AAHY1C0.bin". Do the following after you ha ve obtained the firmwa[...]

Chapter 15 File Manager NWA5120 Series User’s Guid e 163 Click Maintenance > File Manager > Shell Script to open this screen. Use the Shell Script screen to store, name, download, upload and run shell script files. Y ou can store multiple shell script files on the NWA at the sam e time. Note: Y ou shou ld include write commands in your scri[...]

Chapter 15 File Manager NWA5120 Series User’s Guid e 164 # This column displa ys the number for each shell script file entry . File Name This column displays t he label that identifie s a shell script file. Size This column displa ys the size (in KB) of a sh ell script file. Last Modified This column displays the date and time that the individual[...]

NWA5120 Series User’s Guid e 165 C HAPTER 16 Diagnostics 16.1 Overview Use the diagnostics screen for troubleshooting. 16.1.1 What Y ou Can Do in this Chapter •T h e Diagnostics screen ( Section 16.2 on page 165 ) generates a file contain ing the NWA’ s configuration and diagnostic information if y ou n eed to provide it to customer support d[...]

Chapter 16 Diagnostics NWA5120 Series User’s Guid e 166 Collect Now Click this to have the NWA create a new diagnostic file. Download Click this t o save the most r e cent diagnostic file to a computer . T a ble 77 Maintenance > Diagnostics LABEL DESCRIPTION[...]

NWA5120 Series User’s Guid e 167 C HAPTER 17 Reboot 17.1 Overview Use this screen to restart the device. 17.1.1 What Y ou Need T o Know If you applied changes in the W eb configurator , these were saved automatically and do not change when you reboot. If you made changes in the CLI, howev er , you hav e to use the writ e command to save the confi[...]

NWA5120 Series User’s Guid e 168 C HAPTER 18 Shutdown 18.1 Overview Use this screen to shutdown the device. Always use Maintena nce > Shut down > Shut down or the shutdown command before you turn off the NW A or remove the power . Not doing so can cause the firmware to become corrupt. 18.1.1 What Y ou Need T o Know Shutdown writes all cache[...]

NWA5120 Series User’s Guid e 169 C HAPTER 19 Troubleshooting 19.1 Overview This chapter offers some suggestions to solve problems you might encounter . The potential problems are divided into the following categories. • Po wer , Hardware Connections, and LED • NWA Access and Login • Internet Access • Wireless Connections • Resetting the[...]

Chapter 19 Troub leshooting NWA5120 Series User’s Guid e 170 5 If the problem continues, contact the v endor . 19.3 NW A Access and Login I forgot the IP address for the NWA. 1 The default IP address (in standalone AP mode) is 192.168.1 .2. 2 If you changed the IP address and have forgotten it, you hav e to reset the device to its factory default[...]

Chapter 19 Troubl eshooting NWA5120 Series User’s Guid e 171 • T ry to access the NW A using another service, such as T elnet. If you can access the NW A, check the remote management settings to find out why the NW A does not respond to HT TP . • If your computer is connected wirelessly , use a computer that is connected to a LAN / ETHE RNET [...]

Chapter 19 Troub leshooting NWA5120 Series User’s Guid e 172 2 Make sure the NW A is connected to a broadband modem or router with Internet access and your computer is set to obtain an dynamic IP address. 3 If you are trying to access the Internet wirelessly , make sure the wireless settings on the wireless client are the same as the settings on [...]

Chapter 19 Troubl eshooting NWA5120 Series User’s Guid e 173 1 Make sure the wireless LAN (wireless radio) is enabled on the NW A . 2 Make sure the r adio or at least one of the NW A’s r adios is operating in AP mode. 3 Make sure the wireless adapter (installed on your computer) is working properly . 4 Make sure the wireless adapter (installed [...]

Chapter 19 Troub leshooting NWA5120 Series User’s Guid e 174 • PEM (Base-64) encoded PKCS#7: This Privacy Enhanced Mail (PEM) format uses lowercase letters, uppercase letters and numerals to convert a binary PKCS#7 certificate into a printable form. • Binary PKCS#12: This is a format for tr ansferri ng public key and private key certificates.[...]

Chapter 19 Troubl eshooting NWA5120 Series User’s Guid e 175 In the Monitor > Wireless > AP Information > Radio List screen, there is no load balancing indicato r associated with any AP s assigned to the load balancing task. • Check to be sure that the AP profile which contains the load balancing settings is correctly assigned to the A[...]

NWA5120 Series User’s Guid e 176 A PPENDIX A Importing Certificates This appendix shows you how to import public key certificates into y our web browser . Public key certificates are used by web browsers to ensure that a secure web site is legitimate. When a certificate authority such as V eriSign, Comodo, or Network Solutions, to name a few , re[...]

Appendix A Importing Certificates NWA5120 Series User’s Guid e 177 1 If your device’ s W eb Configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification erro r . 2 Click Continue to this website (not recommended) . 3 In the Address Bar , click Cert ificate Error > View certi ficate[...]

Appendix A Importing Certificates NWA5120 Series User’s Guid e 178 4 In the Certificate dialog box, click Install Cer tificate . 5 In the Certificate Import Wizard , click Next .[...]

Appendix A Importing Certificates NWA5120 Series User’s Guid e 179 6 If you want Internet Explorer to Automatically select certificat e store based on the typ e of certificate , click Next again and then go to step 9. 7 Otherwise, select Place all certificates in the following store and then click Browse . 8 In the Select Certificate Store dialog[...]

Appendix A Importing Certificates NWA5120 Series User’s Guid e 180 9 In the Completing the Certificate Import Wizard screen, click Finish . 10 If you are presented with another Security Warning , click Yes . 11 Finally , click OK when presented with the successful certificate installation message.[...]

Appendix A Importing Certificates NWA5120 Series User’s Guid e 181 12 The next time you start Internet Explorer and go to a ZyXEL W eb Configurator page, a sealed padlock icon appears in the address bar . Click it to view the page’s Website Identification information. Inst alling a St and-Alone Certific ate File in Internet Explorer Rather than[...]

Appendix A Importing Certificates NWA5120 Series User’s Guid e 182 Removing a Certificate in Internet Explorer This section shows you how to remove a public key ce rtificate in Internet Explorer 7 on Windows XP . 1 Open Internet Explorer and click Tools > Internet Options . 2 In the Internet Options dialog box, click Content > Certificates [...]

Appendix A Importing Certificates NWA5120 Series User’s Guid e 183 3 In the Certificates dialog box, click the Trusted Root Certif icates Authorities tab, select the certificate that you want to delete, and then click Remove . 4 In the Certificates confirmation, click Yes . 5 In the Root Certificate Store dialog box, click Yes . 6 The next time y[...]

Appendix A Importing Certificates NWA5120 Series User’s Guid e 184 Firefox The following example uses Mozilla Firefox 2 on Windows XP Professional; however , the screens can also apply to Firefox 2 on all platforms. 1 If your device’ s W eb Configurator is set to use SSL certification, then the first time you browse to it you are presented with[...]

Appendix A Importing Certificates NWA5120 Series User’s Guid e 185 Inst alling a St and-Alone Ce rtificate File in Firefox Rather than browsing to a Z yXEL W eb Configurator and installing a public key certificate when prompted, you can install a stand-alone certif icate file if one has been issued to y ou. 1 Open Firefox and click Tools > Opt[...]

Appendix A Importing Certificates NWA5120 Series User’s Guid e 186 3 In the Certificate Manager dialog bo x, click Web Sites > Import . 4 Use the Select File dialog box to locate the certificate and then click Open . 5 The next time you visit the web site, click the padlock in the address bar to open the Page Info > Security window to see t[...]

Appendix A Importing Certificates NWA5120 Series User’s Guid e 187 1 Open Firefox and click Tools > Options . 2 In the Options dialog bo x, click Advanced > Encryption > View Certi ficates .[...]

Appendix A Importing Certificates NWA5120 Series User’s Guid e 188 3 In the Certificate Manager dialog bo x, select the Web Sites tab, select the certificate t hat you want to remov e, and then click Delete . 4 In the Delete Web Site Certificates dialog box, click OK . 5 The next time you go to the web site that issued the public key certificate [...]

NWA5120 Series User’s Guid e 189 A PPENDIX B IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 38 IP addresses. IPv6 Addressing The 128-bit IPv6 address is written as eight 16-bit hexadecimal bloc[...]

Appendix B IPv6 NWA5120 Series User’s Guid e 190 Global Address A global address uniquely iden tifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. Unspecified Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not h[...]

Appendix B IPv6 NWA5120 Series User’s Guid e 191 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 ~ 10, A ~ F). Each block’s 16 bits are then represented by four hexadecimal c[...]

Appendix B IPv6 NWA5120 Series User’s Guid e 192 combines its interface ID and global and subnet in formation advertised from the router . This is a routable global IP address. DHCPv6 The Dynamic Host Configur ation Protocol for IPv6 (DHCPv6, RFC 3315) is a server-client protocol that allows a DHCP server to assign and pa ss IPv6 network addresse[...]

Appendix B IPv6 NWA5120 Series User’s Guid e 193 such as the system name. The interface-ID option provides slot number , port information and the VLAN ID to the DHCPv6 server . The remote-ID option (if any) is stripped from the R elay-R eply messages before the relay agent sends the packets to the clients. The DHCP server copies th e interface-ID[...]

Appendix B IPv6 NWA5120 Series User’s Guid e 194 determine whether the destination address is on- link and can be reached directly without passing through a router . If the address is onlink, the addre ss is considered as the next hop. Otherw ise, the NW A determines the next-hop from the default rout er list or routing table. Once the next hop I[...]

Appendix B IPv6 NWA5120 Series User’s Guid e 195 Example - Enabling IPv6 on Windows XP/2003/Vist a By default, Windows XP and Windows 2003 suppo r t IPv6. This example shows y ou how to use the ipv6 install command on Windows XP/2003 to enable IPv6. This also displays how to use the ipconfig command to see auto-generated IP addresses. IPv6 is ins[...]

Appendix B IPv6 NWA5120 Series User’s Guid e 196 5 Click Start and then OK . 6 Now your computer can obtain an IP v6 address from a DH CPv6 server . Example - Enabling IPv6 on Windows 7 Windows 7 supports IPv6 by default. DHCPv6 is al so en abled when you enable IPv6 on a Windows 7 computer . T o enable IPv6 in Windows 7: 1 Select Control Panel &[...]

Appendix B IPv6 NWA5120 Series User’s Guid e 197 4 Click Close to exit the Local Area Connectio n Status screen. 5 Select Start > All Programs > Accessories > Command Prompt . 6 Use the ipconfig command to check your dynamic IPv6 address. This example shows a global address (2001:b021:2d::1000) obta ined from a DHCP server . C:>ipcon[...]

NWA5120 Series User’s Guid e 198 A PPENDIX C Customer Support In the event of problems th at cannot be solved by using this manual, you should contact your vendor . If you cannot contact your v endor , then contact a Z yXEL office for the region in which you bought the device. Regional websites are listed below (see also http://www .zyxel.com/ ab[...]

Appendix C Customer Support NWA5120 Series User’s Guid e 199 Korea • Z yXEL K orea Corp. • http://www.zyx el.kr Malaysia • Z yXEL Malaysia Sdn Bhd. • http://www.zyx el.com.my Pakist an • ZyXEL P akistan (Pvt.) Ltd. • http://www.zyx el.com.pk Philipines • Z yXEL Philippines • http://www.zyx el.com.ph Singapore • Z yXEL Singapore [...]

Appendix C Cus tomer Support NWA5120 Series User’s Guid e 200 Belgium • Z yXEL Communications B.V . • http://www.zyx el.com/be/nl/ Bulgaria •Z y X E L България • http://www.zyx el.com/bg/bg/ Czech • Z yXEL Communications Czech s.r .o • http://www.zyx el.cz Denmark • Z yXEL Communications A/S • http://www.zyx el.dk Estonia [...]

Appendix C Customer Support NWA5120 Series User’s Guid e 201 Lithuania • Z yXEL Lithuania • http://www.zyx el.com/lt/lt/homepage.shtml Netherlands •Z y X E L B e n e l u x • http://www.zyx el.nl Norway • Z yXEL Communications • http://www.zyx el.no Poland • Z yXEL Communications Poland • http://www.zyx el.pl Romania •Z y X E L R[...]

Appendix C Cus tomer Support NWA5120 Series User’s Guid e 202 T urkey •Z y X E L T u r k e y A . S . • http://www.zyx el.com.tr UK • Z yXEL Communications UK Ltd. • http://www.zyx el.co.uk Ukraine •Z y X E L U k r a i n e • http://www.ua.zyx el.com Latin America Argentina • Z yXEL Communication Corpor ation • http://www.zyx el.com[...]

Appendix C Customer Support NWA5120 Series User’s Guid e 203 Oceania Australia • Z yXEL Communications Corporation • http://www.zyx el.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyx el.co.za[...]

NWA5120 Series User’s Guid e 204 A PPENDIX D Legal Information Copyright Copyright © 2014 by Z yXEL Communications Corpor ation. Th e c o n te nt s of t hi s pu b li c at io n ma y no t be r ep r od uc e d i n an y pa rt o r a s a wh ol e , t ra ns c ri b e d, st o re d in a re t ri e val s ys t em , tr anslated into any language, or tr ansmitte[...]

Appendix D Legal Information NWA5120 Series User’s Guid e 205 IC Radiation Exposur e St atement This equipmen t complies with IC radiati on exposure limi ts set forth for an uncontrolle d environment. End users must follow the spe cific operating instructions for satisfying RF exposu re compliance. 注意 ! 依據 低功 率 電波 輻 射性電?[...]

Appendix D Legal Information NWA5120 Series User’s Guid e 206 Registration Register your product onli ne to receive e-mail not ices of firmware upgrades and information at www .zyxel.com. Open Source Licenses This product contains in part some free software distribu ted under GPL licens e terms and/or GPL like lic enses. Open source lice nses are[...]

Appendix D Legal Information NWA5120 Series User’s Guid e 207 National Restrictions This prod uct may be us ed in all E U count ries (and o ther coun tries foll owing th e EU direct ive 1999/5 /EC) witho ut any limi tation except for the count ries mentio ned below: Ce produit peut être utilisé dans tous les pays de l’UE (et da ns tous les pa[...]

Appendix D Legal Information NWA5120 Series User’s Guid e 208 List of national codes Safety Warnings • Do NOT u se this product near w ater , for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, d ust or corrosive liquids. • Do NOT s tore things on the de vice. • Do NOT install, use, or service [...]

Appendix D Legal Information NWA5120 Series User’s Guid e 209 Environment al Product Declaration[...]

Index NWA5120 Series User’s Guid e 210 Index Symbols A access 19 access privileges 12 access users 69 see also users 69 admin users 69 multiple logins 74 see also users 69 alerts 144 , 147 , 148 , 150 , 151 , 152 AP 11 applications MBSSID 12 Re pe a t e r 15 B backing up conf iguration files 156 Basic Service Set see BSS boot module 161 BSS 12 C [...]

Index NWA5120 Series User’s Guide 21 1 configuration files 154 at restart 156 backing up 156 downloading 157 downloading with FTP 136 editing 154 how applied 155 lastgood.conf 156 , 159 managing 155 startup-config.conf 159 startup-config-bad.conf 156 syntax 15 4 system-default.conf 159 uploading 159 uploading with FTP 136 use without restart 154 [...]

Index NWA5120 Series User’s Guid e 212 over SSL, see HT TPS redirect to HT TPS 124 vs HTTPS 12 3 HT TPS 122 and certificates 122 authenticating clients 122 avoiding warning messages 126 example 12 4 vs HTTP 123 with Internet Explorer 124 with Netscape Navigator 125 HyperT ext T ransfer Protocol ov er Secure Socket Layer , see HTTPS I IEEE 802.1x [...]

Index NWA5120 Series User’s Guide 213 Management Mode CAPWAP and DHCP 50 CAPWAP and IP Subnets 50 managed AP 49 standalone mode 49 management mode 12 managing the device good habits 16 usi ng FT P . Se e FTP . MBSSID 12 memory usage 32 , 34 message bar 27 messages CLI 24 warn ing 27 mode 11 managed mode 12 standalone 12 mode changge 12 model name[...]

Index NWA5120 Series User’s Guid e 214 Rivest, Shamir and Adleman public-key algorithm (RSA) 106 root AP 11 RSA 106 , 109 , 11 5 RSSI threshold 81 S SCEP (Simple Certificate Enrollment Protocol) 107 screen resolution 19 Secure Socket Layer , see SSL serial number 32 service control and users 122 limitations 122 timeouts 122 Service Set 76 Service[...]