ZyXEL NWA5301-NJ manuel d'utilisation

Quick Start Guide www .zyxel.com NWA5301-NJ 802.11 b/g/n In-w all Managed Access P oint V e rsion 4.10 Edition 2, 05/2014 Copyright © 2014 Z yXEL Communications Corpor ation User’s Guide Default Login Details (Standalone AP Mode) LAN IP Address http://192.168.1.2 User Name admin P assword 1234[...]

NWA5301-NJ User’s Guide 2 IMPORT ANT! READ CAREFULL Y BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. Screenshots and graphics in this book may differ sl ightly from your product due to differences in your product firmware o r your computer operatin g system . Every ef fort has been m ade to ensure that the information in this manual is accurat[...]

Contents Overview NWA5301-NJ User’s Guide 3 Contents Overview User ’ s Guide .................................... ..................................................... ......................... ..................... 10 Introduction ........... .................... ...................... ....................... ...................... ...........[...]

Table of Contents NWA5301-NJ User’s Guide 4 Table of Contents Contents Overview ............... ............................................................... ............................... ................. 3 Table of Contents ................................................. ..................................................... ........... ..[...]

Table of Co ntents NWA5301-NJ User’s Guide 5 3.1 Overview ................ ...................... .................... ...................... ....................... ........... ..................... .... 3 3 3.1.1 What Y ou Can Do in this Chapter ................. .......................... ....................... ...................... . ... 33[...]

Table of Contents NWA5301-NJ User’s Guide 6 7.3.1 Disassociating and Delaying Connections ... ....................... ...................... ....................... ....... 6 2 7.4 DCS ............. ................... ....................... ....................... ................... ..................... ........... ................. 63 7.5 T [...]

Table of Co ntents NWA5301-NJ User’s Guide 7 1 1.1.3 V erifying a Certificate ............... ...................... .......................... ....................... .......... ............. 96 1 1.2 My C ertificates . ....................... ................... ....................... ....................... ................ ............. ....[...]

Table of Contents NWA5301-NJ User’s Guide 8 13.3 Log Setting ............. ....................... ................... ....................... ...................... ......... ...................... 138 13.3.1 Log Setting Screen ........ ................... ....... ....................... ...................... ................... ... ......... 1[...]

Table of Co ntents NWA5301-NJ User’s Guide 9 18.7 Getting More Troubleshooting Help ..... ...... ............. ....................... ....................... .................. ...... 169 Appendix A Importing Certificates .................................. ......................................................... ........ 170 Appendix B IPv6 ...[...]

10 P ART I User ’ s Guide[...]

NWA5301-NJ User’s Guide 11 C HAPTER 1 Introduction 1.1 Overview The NWA is an in-the-w all IEEE 802.11b/g/n wi reless access point that supports P ower over Ethernet (PoE) to eliminate the need for power sockets. The NWA extends the r ange of your existing wire d network without additional wiring, providing easy network access to mobile users. Y [...]

Chapter 1 Introduction NWA5301-NJ User’s Guide 12 The NWA controls network access with Media Access Control (MAC) address filtering. It also provides a high level of network tr affic securi ty , supporting IEEE 802.1x, Wi-Fi Protected Access (WPA), WPA2 and Wired Equiv alent Privacy (WEP) data encryption. Y our NWA is easy to install, configure a[...]

Chapter 1 Introduction NWA5301-NJ User’s Guide 13 Figure 1 Multiple BSSs 1.1.3 Root AP In Root AP mode, the NWA ( Z ) can act as the root AP in a wireless network and also allow repeaters ( X and Y ) to extend the r ange of its wireless network at the same time. In the figu re below , both clients A , B and C can access the wired network through [...]

Chapter 1 Introduction NWA5301-NJ User’s Guide 14 Figure 2 Root AP Application On the NW A in Root AP mode, y ou can have multiple SSIDs activ e for reqular wireless connections and one SSID for the connection with a repeater (repeater S SID). Wireless clients can use either SSID to associate with the NW A in Root AP mo de. A repeater must use th[...]

Chapter 1 Introduction NWA5301-NJ User’s Guide 15 Figure 3 Re peater Application When the NWA is in R epeater mode, repeat er se curity between the NW A and other repeater is independent of the security betw een the wireless clients and the AP or repeater . When repe ater security is enabled, both APs and repeater s must use the same pre-shared k[...]

Chapter 1 Introduction NWA5301-NJ User’s Guide 16 File T ransfer Protocol (FTP) This protocol can be used for firmw are u pgr ades and configuration backup and restore. Simple Network Manage ment Protocol (SNMP) The NWA can be monitored by an SNMP manager . See the SNMP chapter in this User’s Guide. 1.3 Good Habit s for Managing the NW A Do the[...]

Chapter 1 Introduction NWA5301-NJ User’s Guide 17 4 Use a punch-down tool to seat the wires down properly into the slot. 5 T rim any excess wires. Place the dust caps ov er the terminated wires. T a ble 2 Color Co des for 110 Punch Down Block Wiring PIN# WIRE COLOR 1W h i t e / O r a n g e 2O r a n g e 3W h i t e / G r e e n 4B l u e 5W h i t e /[...]

Chapter 1 Introduction NWA5301-NJ User’s Guide 18 1.4.2 Phone Port Connect a digital telephone to the RJ-45 PHONE port at the bottom of the NW A to forward voice traffic to/from the telephon e switchboard that is connected to the RJ-45 PHONE port on the back of the NW A. The NWA does not support V oIP (V oice over Inter net Protocol) and the PHON[...]

Chapter 1 Introduction NWA5301-NJ User’s Guide 19 • 115200 bps • No parity , 8 data bits, 1 stop bit • No flow control The following table shows you the wire color codes and pin assignment for the console cable. 1.5 LEDs The LEDs automatically turn off when the NW A is ready . Y ou can press the LED ON button for one second to turn on the L[...]

Chapter 1 Introduction NWA5301-NJ User’s Guide 20 1.6 S t arting and Stopping the NW A Here are some of the wa ys to start and stop the NW A. Always use Maintenance > Shut down or the shutdown command before you turn off the NW A or remove the power . Not doing so can cause the firmware to become corrupt. The NWA does not stop or start the sys[...]

NWA5301-NJ User’s Guide 21 C HAPTER 2 The Web Configurator 2.1 Overview The NWA W eb Configurator allows easy management using an Internet browser . In order to use the W eb Configurator , you must: • Use Internet Explorer 7.0 and later versions, Mozilla Firefox 9.0 and later versions, Safari 4.0 and later versions, or Google Chrome 10.0 and la[...]

Chapter 2 The Web Configurator NWA5301-NJ User’s Guide 22 4 Click Login . If you logged in using the default user name and password, the Update Admin Info screen appears. Otherwise, the dashboard appears. The Update Admin Info screen appears every time you log in using the default user name and default password. If you change th e password for th[...]

Chapter 2 The Web Configurator NWA5301-NJ User’s Guide 23 Figure 5 The W eb Configurator’s Main Screen The W eb Configurator’s main screen is divided into these parts: • A - Title Bar • B - Navigation P anel • C - Main Window 2.3.1 T itle Bar The title bar provides some useful links that always appear o ver the screens below , regardles[...]

Chapter 2 The Web Configurator NWA5301-NJ User’s Guide 24 About Click About to display basic information about the NWA. Figure 7 About The following table describes labels that can appear in this screen. Site Map Click Site MAP to see an overview of links to the W eb Configurator screens. Click a screen’ s link to go to that screen. Object Refe[...]

Chapter 2 The Web Configurator NWA5301-NJ User’s Guide 25 Figure 8 Site Map Object Reference Click Object Refe rence to open the Object Reference screen. Select the type of object and the individual object and click Refresh to show which configur ation settings reference the object. Figure 9 Object Reference[...]

Chapter 2 The Web Configurator NWA5301-NJ User’s Guide 26 The fields vary with the type of object. The followi ng table describes labels that can appear in this screen. CLI Messages Click CLI to look at the CLI commands sent by the W eb Configurator . These commands appear in a popup window , such as the following. Figure 10 CLI Messages Click Cl[...]

Chapter 2 The Web Configurator NWA5301-NJ User’s Guide 27 Figure 1 1 Navigation Panel Dashboard The dashboard displays gene ral device informatio n, system status, system resource usage, and interface status in widgets that you can re-arr ange to suit your needs. For details on the Dashboard ’s features, se e Chapter 3 on page 33 . Monitor Menu[...]

Chapter 2 The Web Configurator NWA5301-NJ User’s Guide 28 Maintenance Menu Use the maintenance menu screens to manage configur ation and firmware files, run diagnostics, and reboot or shut down the NW A. Load Balancing Configure load balancing for traffi c mo ving to and from wireless clients. DCS Configure dynamic wireless channel selection. Obj[...]

Chapter 2 The Web Configurator NWA5301-NJ User’s Guide 29 2.3.3 W arning Messages W arning messages, such as those resulting from misconfiguration, display in a popup window . Figure 12 W arning Message 2.3.4 T ables and Lists The W eb Configurator tables and lists are quite flexible and provide several options for how to display their entries. 2[...]

Chapter 2 The Web Configurator NWA5301-NJ User’s Guide 30 • Filter by mathematical operators (<, >, or =) or searching for text. 3 Select a column heading cell’s right bo rder and drag to re-size the column. 4 Select a column heading and drag an d drop it to change the column order . A green check mark displays next to the column’ s t[...]

Chapter 2 The Web Configurator NWA5301-NJ User’s Guide 31 2.3.4.2 Working wi th T able Entries The tables have icons for working with table entries. A sample is shown next. Y ou can often use the [Shift] or [Ctrl] key to select multiple entries to remove, activ ate, or deactivate. T a ble 12 Com mon Table Icons Here are descriptions for the most [...]

32 P ART II T echnical Reference[...]

NWA5301-NJ User’s Guide 33 C HAPTER 3 Dashboard 3.1 Overview Use the Dashboard screens to check status information about the NW A. 3.1.1 What Y o u Can Do in this Chapter •T h e m a i n Dashboard screen ( Section 3.2 on page 33 ) displays the NW A’ s general device information, system status, system resource usage, and interface status. Y ou [...]

Chapter 3 Dashboard NWA5301-NJ User’s Guide 34 The following table describes the labels in this screen. T a ble 14 Dashboard LABEL DESCRIPTION Widget Settings (A) Use this link t o re-open closed widgets. Widgets that are al ready open appear grayed out. Up Arrow (B) Click this to collapse a widget. Refresh Time Setting ( C) Set the interval for [...]

Chapter 3 Dashboard NWA5301-NJ User’s Guide 35 Boot Status This field displays de tails about the NWA’ s startup state. OK - The NWA started up successfully . Firmware update OK - A firmware update was successful . Problematic configuratio n after firmware update - The application of the configurati on failed after a firmware upgrade. System de[...]

Chapter 3 Dashboard NWA5301-NJ User’s Guide 36 3.2.1 CPU Usage Use this screen to look at a chart of the NW A’s recent CPU usage. T o access this screen, click CPU Usage in the dashboard. Figure 15 Dashboard > CPU Usage Station This displays the n umber of wi reless clients conn ected to the NWA. WDS Downlink Status WDS Uplink Status This di[...]

Chapter 3 Dashboard NWA5301-NJ User’s Guide 37 The following table describes the labels in this screen. 3.2.2 Memory Usage Use this screen to look at a chart of the NW A’ s re cent memory (RAM) usage. T o access this screen, click Memory Usage in the dashboard. Figure 16 Dashboard > Memory Usage The following table describes the labels in th[...]

NWA5301-NJ User’s Guide 38 C HAPTER 4 Monitor 4.1 Overview Use the Monitor screens to check status and statistics information. 4.1.1 What Y o u Can Do in this Chapter •T h e Network Status screen ( Section 4.2 on page 38 ) displays general Ethernet interface information and packet statistics. •T h e Radio List screen ( Section 4.3 on page 40 [...]

Chapter 4 Monitor NWA5301-NJ User’s Guide 39 Figure 17 Monitor > Network Status The following table describes the labels in this screen. T a ble 17 Monitor > Network Status LABEL DESCRIPTION Interface Summary IPv6 Interface Summary Use the Interface Summary section for I Pv4 network settings. Use the IPv6 Interface Summary section for IPv6 [...]

Chapter 4 Monitor NWA5301-NJ User’s Guide 40 4.3 Radio List Use this screen to view statistics for the NW A’ s wireless radio tr ansmitter . T o access this screen, click Monitor > Wireless > AP Information > Radio List . Figure 18 Monitor > Wireless > AP Information > R adio List The following table describes the labels in th[...]

Chapter 4 Monitor NWA5301-NJ User’s Guide 41 4.3.1 AP Mode Radio Information This screen allows you to view a selected radio’ s SSID details, wireless traffic statistics and station count for the preceding 24 hours. T o access this window , select a radio and click the More Information button in the Radio List screen. Radio This indicates the r[...]

Chapter 4 Monitor NWA5301-NJ User’s Guide 42 Figure 19 Monitor > Wireless > AP Information > R adio List > More Information[...]

Chapter 4 Monitor NWA5301-NJ User’s Guide 43 The following table describes the labels in this screen. 4.4 S t ation List Use this screen to view statistics pertaining to the associated stations (or “wireless clients”). Click Monitor > Wireless > Station In fo to access this screen. Figure 20 Monitor > Wireless > Station Info T a b[...]

Chapter 4 Monitor NWA5301-NJ User’s Guide 44 The following table describes the labels in this screen. 4.5 WDS Link Info Use this screen to view the WDS traffic statistics be tween the NW A and a root AP or repeaters. Click Monitor > Wireless > WDS Link Info to access this screen. Figure 21 Monitor > Wireless > WDS Link Info T a ble 20[...]

Chapter 4 Monitor NWA5301-NJ User’s Guide 45 The following table describes the labels in this screen. 4.6 V iew Log Log messages are stored in two separate logs, one for regular log message s and one for debugging messages. In the regular log, you can look at all the log messages by se lecting All Logs , or you can select a specific category of l[...]

Chapter 4 Monitor NWA5301-NJ User’s Guide 46 Figure 22 Monitor > Log > View Log The following table describes the labels in this screen. T a ble 22 Monitor > Log > View Log LABEL DESCRIPTION Show Fil ter / Hide Filte r Click this button to show or hide the filt er settings. If the filt er settings ar e hidden, the Di splay , Email Log[...]

Chapter 4 Monitor NWA5301-NJ User’s Guide 47 The W eb Configurator saves the filter settings if y ou leave the Vie w Log screen and return to it later . Source Interface This displays when y ou show the filt er . Selec t the source interface of the packet th at generated the log message. Destinat ion Interface This displays when you show the fi l[...]

NWA5301-NJ User’s Guide 48 C HAPTER 5 Management Mode 5.1 Overview This chapter discusses using the NWA in management mode, which determines whether the NW A is used in its default standalone mode, or as part of a Control And Provisioning of Wireless Access Po ints (CAPWAP) network. 5.2 About CAPW AP The NWA supports CAPW AP . This is ZyXEL ’ s[...]

Chapter 5 Management Mode NWA5301-NJ User’s Guide 49 1 An AP in managed AP mode joins a wired network (receives a dynamic IP address). 2 The AP sends out a discovery request, looking for a CAPW AP AP controller . 3 If there is an AP controller on the network, it rece ives the discovery request. If the AP controller is in Manual mode it adds the d[...]

Chapter 5 Manageme nt Mode NWA5301-NJ User’s Guide 50 Figure 24 CAPWAP and DHCP Option 138 5.2.4 Notes on CAPW AP This section lists some additional features of Z yXEL ’s implementation of the CAPWAP protocol. • When the AP controller uses its internal R emote Authentication Dial In User Service (RADIUS) server , managed APs also use the AP c[...]

Chapter 5 Management Mode NWA5301-NJ User’s Guide 51 Figure 25 Configur ation > MGNT Mode Each field is described in the following table. T a ble 23 Configuration > MGNT Mode LABEL DESCRIPTION Standalone AP Selec t this to manage the NWA usin g its own web configurator , neith er managing nor managed by other devices. Managed AP Select this[...]

NWA5301-NJ User’s Guide 52 C HAPTER 6 Network 6.1 Overview This chapter describes how you can configure th e management IP address and VLAN settings of your NWA. The Internet Protocol (IP) address identifies a device on a network. Ev ery networking device (including computers, servers, routers, printers , etc.) needs an IP address to communicate [...]

Chapter 6 Network NWA5301-NJ User’s Guide 53 Figure 27 Configur ation > Network > IP Setting Each field is described in the following table. T a ble 24 Configuration > Network > IP Setting LABEL DESCRIPTION IP Address Assignme nt Get Automati cally Select this to ma ke the interface a DHCP client an d automatically get the IP addres s[...]

Chapter 6 Network NWA5301-NJ User’s Guide 54 6.3 VLAN This section discusses how to configure the NW A’s VLAN settings. Figure 28 Management VL AN Setup In the figure above, to access an d manage the NWA from computer A , the NW A and switch B ’s ports to which computer A and the NW A are connected should be in the same VLAN. Link -Local Addr[...]

Chapter 6 Network NWA5301-NJ User’s Guide 55 A Virtual Local Area Network (VLAN) allows a physical network to be partitioned into multiple logical networks. Devices on a logical network belong to on e gr ou p. A d ev ice can be lon g t o mo re t ha n on e group. With VLAN, a device cannot directly talk to or hear from devices that are not in the [...]

Chapter 6 Network NWA5301-NJ User’s Guide 56 Each field is described in the following table. 6.3.1 Port Setting Edit Use this screen to enable or disable a port and configure the port ’ s PVID. T o access this screen, select a port and click the Edit button in the Configuration > Netw ork > VLAN screen. Figure 30 Configur ation > Netwo[...]

Chapter 6 Network NWA5301-NJ User’s Guide 57 Each field is described in the following table. 6.3.2 VLAN Add/Edit Use this screen to create a new VLAN or configure an existing VLAN on the NWA. T o access this screen, click Add or select a VLAN and click the Edit button in the Configuration > Network > VLAN screen. Figure 31 Configur ation &g[...]

Chapter 6 Network NWA5301-NJ User’s Guide 58 Member Configur ation Use these sett ings to assign po rts to this VL AN as members. Edit Click this to edit the sele cted port’s membership v a lues. # This is sequenti al indi cator of the port number . Port Name This indicates the port name. Member This indicate s whether the selected port is a me[...]

NWA5301-NJ User’s Guide 59 C HAPTER 7 Wireless 7.1 Overview This chapter discusses how to configure the wireless network settings in your NW A. The following figure provides an example of a wireless network. Figure 32 Example of a Wireless Network The wireless network is the part in the blue circle. In this wireless network, devices A and B are c[...]

Chapter 7 Wireless NWA5301-NJ User’s Guide 60 7.1.2 What Y ou Need to Know The following terms and concepts may help as you read this chapter . St ation / Wireless Client A station or wireless client is any wireless-capable de vice that can connect to an AP using a wireless signal. Dynamic Channel Selection (DCS) Dynamic Channel Selection (DCS) i[...]

Chapter 7 Wireless NWA5301-NJ User’s Guide 61 Each field is described in the following table. 7.3 Load Balancing Use this screen to configure wireless network tr affic load balancing between the APs on your network. Click Configuration > Wireless > Load Balancing to access this screen. Figure 34 Configuration > Wireless > Load Balanci[...]

Chapter 7 Wireless NWA5301-NJ User’s Guide 62 Each field is described in the following table. 7.3.1 Disassociating an d Delaying Connections When your AP becomes overloaded, there are two ba sic responses it can take. The first one is to “delay” a client connection. This means that the AP withholds the connection until the data transfer throu[...]

Chapter 7 Wireless NWA5301-NJ User’s Guide 63 Figure 35 Delaying a Connection The second response your AP can take is to kick the connections that are pushing it ov er its balanced bandwidth allotment. Figure 36 Kicking a Connection Connections are kicked based on either idle ti meout or signal strength . The NWA first looks to see which devices [...]

Chapter 7 Wireless NWA5301-NJ User’s Guide 64 Figure 37 Configuration > Wireless > DCS Each field is described in the following table. T a ble 30 Configuration > Wireless > DCS LABEL DESCRIPTION Select Now Click this to hav e the NWA scan for and select an available channel i mmediately . Enable Dynami c Channel Selection Select this [...]

Chapter 7 Wireless NWA5301-NJ User’s Guide 65 7.5 T echnical Reference The following section contains additional technical information about the features described in this chapter . Dynamic Channel Selection When numerous APs broadcast within a given area , they introduce the possibilit y of heightened radio interference, especially if some or al[...]

Chapter 7 Wireless NWA5301-NJ User’s Guide 66 Load balancing by traffic level limits the number of connections to the AP based on maximum bandwidth av ailable. If you are uncertain as to the exact number of wireless connections you will have then choose this option. By setting a maximum bandwidth cap , you allow any number of devices to connect a[...]

NWA5301-NJ User’s Guide 67 C HAPTER 8 User 8.1 Overview This chapter describes how to set up user accounts and user settings for the NWA. 8.1.1 What Y o u Can Do in this Chapter •T h e User screen (see Section 8.2 on page 68 ) provides a summary of all u ser accounts. •T h e Setting screen (see Section 8.3 on page 70 ) controls default settin[...]

Chapter 8 User NWA5301-NJ User’s Guide 68 8.2 User Summary The User screen provides a summary of all user accounts. T o access this screen click Configuration > Object > User . Figure 38 Configuration > Object > User The following table describes the labels in this screen. 8.2.1 Add/Edit User The User Add/ Edit screen allows you to cr[...]

Chapter 8 User NWA5301-NJ User’s Guide 69 • Alphanum eric A- z 0-9 (there is no unicode support) • _ [underscores] •- [ d a s h e s ] The first character must be alphabetical (A -Z a-z), an underscore (_), or a dash (-). Other limitations on user names are: • User names are case-sensitive. If you enter a user ' bob' but use &apo[...]

Chapter 8 User NWA5301-NJ User’s Guide 70 The following table describes the labels in this screen. 8.3 Setting This screen controls default settings, login settings, lockout settings, and other user settings for the NW A. T o access this screen, login to the W eb Configurator , and click Configuration > Object > User > Setting . T a ble [...]

Chapter 8 User NWA5301-NJ User’s Guide 71 Figure 40 Configur ation > Object > User > Setting The following table describes the labels in this screen. T a ble 34 Configuration > Obje ct > User > Setting LABEL DESCRIPTION User Default Se tting Default Auth entication Timeout Settin gs These authenti cation timeout s ettings are us[...]

Chapter 8 User NWA5301-NJ User’s Guide 72 8.3.1 Edit User Authen tication T imeout Settings This screen allows you to set the default authentication timeout settings for the selected type of user account. These default authentication timeout settings also control the settings for any existing user accounts that are set to use the de fault setting[...]

Chapter 8 User NWA5301-NJ User’s Guide 73 The following table describes the labels in this screen. T a ble 35 User > Setting > Edit User Authentication Timeout Settings LABEL DESCRIPTION User T ype This read-only field iden ti fies the type of u ser account for which you are configuring the default settin gs. • admin - this user can look [...]

NWA5301-NJ User’s Guide 74 C HAPTER 9 AP Profile 9.1 Overview This chapter shows you how to configure preset wireless profiles for the NW A. 9.1.1 What Y o u Can Do in this Chapter •T h e Radio screen ( Section 9.2 on page 75 ) creates r adio configurations that can be used by the APs. •T h e SSID screen ( Section 9.3 on page 80 ) c onfigures[...]

Chapter 9 AP Profile NWA5301-NJ User’s Guide 75 WEP WEP (Wired Equivalent Priv acy) encryption scrambl es all data packets transmitted between the AP and the wireless stations associated with it in order to keep network communications pr ivate. Both the wireless stations and the access points must use the same WEP k ey for data encryption and dec[...]

Chapter 9 AP Profile NWA5301-NJ User’s Guide 76 9.2.1 Add/Edit Radio Profile This screen allows you to create a new radio profile or edit an existing one. T o access this screen, click the Add button or select a r adio profile from the list and click the Edit button. Activ ate T o turn on an entry , select it and click Activate . Inactiv ate T o [...]

Chapter 9 AP Profile NWA5301-NJ User’s Guide 77 Figure 43 Configuration > Object > AP Profile > Add/Edit Profile[...]

Chapter 9 AP Profile NWA5301-NJ User’s Guide 78 The following table describes the labels in this screen. T a ble 37 Configuration > Object > AP Profile > Add/Edit Profile LABEL DESCRIPTION Hide / Show Adv anced S etting s Click this to hide or show the Advanced Settings in this window . Cr ea te Ne w Ob je ct S el ec t an it em fr om thi[...]

Chapter 9 AP Profile NWA5301-NJ User’s Guide 79 R TS/CTS Threshold Use RT S/CTS to reduce data co llisions on th e wireless networ k if you have wireless clients that are associated wi th the same AP but ou t of r ange of one another . When enabled, a wireless client sends an RT S (R equest T o Send) and then waits for a CTS (Clear T o Send) befo[...]

Chapter 9 AP Profile NWA5301-NJ User’s Guide 80 9.3 SSID The SSID screens allow you to configure three differe nt types of profiles for your network ed APs: an SSID list, which can assign specific SSID configur ations to your APs; a security list, which can assign specific encryption methods to the APs when allowing wireless clients to connect to[...]

Chapter 9 AP Profile NWA5301-NJ User’s Guide 81 Figure 44 Configuration > Object > AP Profile > S SID List The following table describes the labels in this screen. 9.3.2 Add/Edit SSID Profile This screen allows you to create a new SSID profile or edit an existing one. T o access this screen, click the Add button or select an SSID profile[...]

Chapter 9 AP Profile NWA5301-NJ User’s Guide 82 Figure 45 Configuration > Object > AP Profile > Add/Edit S SID Profile The following table describes the labels in this screen. T a ble 39 Configuration > Objec t > AP Pr ofile > Add/Edit SSID Profile LABEL DESCRIPTION Create n ew Object Select an object type from the list to creat[...]

Chapter 9 AP Profile NWA5301-NJ User’s Guide 83 9.4 Security List This screen allows you to manage wireless security configurations that can be used by your S SIDs. Wireless security is implemented strictly between the AP broadcasting the SSID and the stations that are connected to it. T o access this screen click Configuration > Object > A[...]

Chapter 9 AP Profile NWA5301-NJ User’s Guide 84 Figure 46 Configuration > Object > AP Profile > SSID > Security List The following table describes the labels in this screen. 9.4.1 Add/Edit Security Profile This screen allows you to create a new security profile or edit an existing one. T o access this screen, click the Add button or s[...]

Chapter 9 AP Profile NWA5301-NJ User’s Guide 85 Figure 47 SSID > Securit y Profile > Add/Edit Security Profile The following table describes the labels in this screen. T a ble 41 SSID > Security Profile > Add/Edit Security Profile LABEL DESCRIPTION Profile Name Enter up to 31 alph anumeric characters for the profil e name. This name i[...]

Chapter 9 AP Profile NWA5301-NJ User’s Guide 86 Radius Server T ype This shows External and the NWA uses an exter nal RADIUS server for authentication. Primary / Secondar y Radi us Server Activate Select this to ha ve the NW A use the specified RADIUS serv er . Radius Server IP Address Enter the IP addres s of the RADIUS se rver to be used for au[...]

Chapter 9 AP Profile NWA5301-NJ User’s Guide 87 9.5 MAC Filter List This screen allows you to create and manage security configur ations that can be used by your SSIDs. T o access this screen click Configuration > Object > AP Profile > SSID > MAC Filter List . Note: Y ou can have a maximum of 32 MAC filteri ng profiles on the NW A. Fi[...]

Chapter 9 AP Profile NWA5301-NJ User’s Guide 88 9.5.1 Add/Edit MAC Filter Profile This screen allows you to create a new MAC filtering profile or edit an existing one. T o access this screen, click the Add button or select a MAC filter profile from the list and click the Edit button. Note: Each MAC filtering profile can include a maximum of 512 M[...]

Chapter 9 AP Profile NWA5301-NJ User’s Guide 89 9.6 Layer-2 Isolation List Layer-2 isolation is used to prevent wireless clients associated with your NWA from communicating with other wireless clients, APs, computers or routers in a network. In the following example, layer-2 isolation is enabled on the NW A to allow a guest wireless clie nt ( A )[...]

Chapter 9 AP Profile NWA5301-NJ User’s Guide 90 Figure 51 Configuration > Object > AP Profile > S SID > Layer-2 Isolation List The following table describes the labels in this screen. 9.6.1 Add/Edit Layer-2 Isolation Profile This screen allows you to create a new layer-2 isol ation profile or edit an existing one. T o access this scre[...]

Chapter 9 AP Profile NWA5301-NJ User’s Guide 91 Figure 52 SSID > MAC Filter List > Add/Edit Layer-2 Isolation Pro file The following table describes the labels in this screen. T a ble 45 SSID > MAC Filter List > Add/Edit Layer -2 Isolation Profile LABEL DESCRIPTION Profile Name Enter up to 31 alphanumeric char acters for the profile n[...]

NWA5301-NJ User’s Guide 92 C HAPTER 10 WDS Profile 10.1 Overview This chapter shows you how to configure WDS profiles for the NW A to form a WDS with other APs. 10.1.1 What Y ou Can Do in this Chapter The WDS Profile screen ( Section 10.2 on page 92 ) creates preset WDS configurations that can be used by the NWA. 10.2 WDS Profile This screen allo[...]

Chapter 10 WDS Profile NWA5301-NJ User’s Guide 93 10.2.1 Add/Edit WDS Profile This screen allows you to create a new WDS profile or edit an existing one. T o access this screen, click the Add button or select and e xisting profile and click the Edit button. Figure 54 Configuration > Object > WDS Profile > Add/Edit WDS Profile The followi[...]

NWA5301-NJ User’s Guide 94 C HAPTER 11 Certificates 1 1.1 Overview The NWA can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-priv ate key pairs. A certificate contains the certificate owner ’ s identity and public key . Certificates provide a way to ex change public keys for use in authentica[...]

Chapter 11 Certificates NWA5301-NJ User’s Guide 95 5 Additionally , Jenny uses her own private k ey to sign a message and Tim uses Jenny’ s public k ey to verify the message. The NWA uses certificates based on public -key cr yptology to authenticate users attempting to establish a connection, not to encrypt the data th at y ou send after establ[...]

Chapter 11 Certificates NWA5301-NJ User’s Guide 96 • Binary PKCS#12: This is a format for tr ansferri ng public k ey and private key certificates.The private k ey in a PKCS #12 file is within a passw ord-encrypted envelope. The file’ s password is not connected to your certificate’ s public or private passwords. Exporting a PKCS #12 file cr[...]

Chapter 11 Certificates NWA5301-NJ User’s Guide 97 1 1.2 My Certificates Click Configuration > Object > Certifi cate > My Certificates to open this screen. This is the NW A’s summary list o f certificates and certification requests. Figure 55 Configuration > Object > Certificate > My Certificates The following table describes [...]

Chapter 11 Certificates NWA5301-NJ User’s Guide 98 1 1.2.1 Add My Certificates Click Configuration > Object > Certifi cate > My Certificates and then the Ad d icon to open the Add My Certificates screen. Use this screen to have the NW A create a self-signed certificate, enroll a certificate with a certification authority or gener ate a c[...]

Chapter 11 Certificates NWA5301-NJ User’s Guide 99 Figure 56 Configuration > Object > Certif icate > My Certificates > Add[...]

Chapter 11 Certificates NWA5301-NJ User’s Guide 100 The following table describes the labels in this screen. T a ble 49 Configuration > Objec t > Certif icate > My Certificates > Add LABEL DESCRIPTION Name T ype a name to identify this certificat e. Y ou can use up to 31 alphan umeric and ;‘~!@#$%^&()_+[]{} ’ ,.=- characters. [...]

Chapter 11 Certificates NWA5301-NJ User’s Guide 101 If you configured the Add My Certificates screen to have the NW A enroll a certificate and the certificate enrollment is not successful, you see a screen with a Return button that takes y ou back to the Add My Certificates screen. Click Return and check your information in the Add My Certificate[...]

Chapter 11 Certificates NWA5301-NJ User’s Guide 102 1 1.2.2 Edit My Certificates Click Configuration > Object > Certifi cate > My Certificates and then the Ed it icon to open the My Certificate Edit screen. Y ou can use this screen to vi ew in-depth certificate information and change the certificate’ s name. Figure 57 Configuration >[...]

Chapter 11 Certificates NWA5301-NJ User’s Guide 103 The following table describes the labels in this screen. T a ble 50 Configuration > Object > Certificate > My Certificates > Edit LABEL DESCRIPTION Name This field disp lays the identifying n ame of this certif icate. Y ou can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[]{}’[...]

Chapter 11 Certificates NWA5301-NJ User’s Guide 104 1 1.2.3 Import Certificates Click Configuration > Object > Certifi cate > My Certificates > Import to open the My Certificate Impor t screen. F ollow the instructions in this screen to save an existing certificate to the NWA. Note: Y ou can import a certificate that matche s a corres[...]

Chapter 11 Certificates NWA5301-NJ User’s Guide 105 Figure 58 Configuration > Object > Certificate > My Certificates > Import The following table describes the labels in this screen. 1 1.3 T rusted Certificates Click Configuration > Object > Certifi cate > Trusted Certificates to open the Trusted Certificates screen. This scr[...]

Chapter 11 Certificates NWA5301-NJ User’s Guide 106 Figure 59 Configuration > Object > Certificate > T rusted Certificates The following table describes the labels in this screen. T a ble 52 Configur ation > Object > Certificate > T rusted Certificates LABEL DESCRIPTION PKI Stor age Space in Use This bar displays the percentage [...]

Chapter 11 Certificates NWA5301-NJ User’s Guide 107 1 1.3.1 Edit T r usted Certificates Click Configuration > Object > Cert ific ate > Trust ed Certific ates and then a certificate’ s Edit icon to open the Trusted Certificates Edit screen. Use this screen to view in-depth information about the certificate, change the certificate’ s n[...]

Chapter 11 Certificates NWA5301-NJ User’s Guide 108 The following table describes the labels in this screen. T a ble 53 Configur ation > Object > Certificate > T rusted Certificates > Edit LABEL DESCRIPTION Name This field display s the identifying name of this certificate. Y ou can change th e name. Y ou can use up to 31 alphanumeric[...]

Chapter 11 Certificates NWA5301-NJ User’s Guide 109 1 1.3.2 Import T r usted Certificates Click Configuration > Object > Certificat e > Trusted Certificates > Import to open the Import Trusted Certificates screen. Follow the instructions in this screen to sa ve a trusted certificate to the NW A. Note: Y ou m ust remove any spaces from[...]

Chapter 11 Certificates NWA5301-NJ User’s Guide 11 0 Figure 61 Configuration > Object > Certificate > T rusted Certificates > Import The following table describes the labels in this screen. 1 1.4 T echnical Reference The following section contains additional technical information about the features described in this chapter . OCSP OCS[...]

NWA5301-NJ User’s Guide 111 C HAPTER 12 System 12.1 Overview Use the system screens to configure general NW A settings. 12.1.1 What Y ou Can Do in this Chapter •T h e Host Name screen ( Section 12.2 on page 111 ) configures a unique name for the NW A in your netw ork. •T h e Date/Tim e screen ( Section 12.3 on page 112 ) configures the date a[...]

Chapter 12 Syste m NWA5301-NJ User’s Guide 11 2 The following table describes the labels in this screen. 12.3 Date and T ime For effectiv e scheduling and logging, the NWA system time must be accurate. The NWA has a software mechanism to set the time manually or ge t the current time an d date from an external server . T o change your NW A’ s t[...]

Chapter 12 System NWA5301-NJ User’s Guide 11 3 The following table describes the labels in this screen. T a ble 56 Configuration > Syst em > Date/Time LABEL DESCRIPTION Current Time and Date Current Time This field displays the present time of your NWA. Current Date This field displays the present date of your NW A. Time and Da te Setup Man[...]

Chapter 12 Syste m NWA5301-NJ User’s Guide 11 4 12.3.1 Pre-define d NTP Time Serv ers List When you turn on the NW A for the first time, the date and time start at 2003-01-01 00:00:00. The NW A then attempts to synchronize with one of the following pre-defined list of Network Time Protocol (NTP) time servers. The NWA continues to use the f ollowi[...]

Chapter 12 System NWA5301-NJ User’s Guide 11 5 The Current Time and Current Date fields will display the appropriate settings if the synchronization is successful. If the synchronization w as not successful, a log displays in the View Log screen. T ry re-configuring the Date/Time screen. T o ma nually set the NW A date and time: 1 Click System &g[...]

Chapter 12 Syste m NWA5301-NJ User’s Guide 11 6 Figure 65 Secure and Insecure Service Access From the W AN 12.4.1 Service Access Limit ations A service cannot be used to access the NW A when you hav e disabled that service in the corresponding screen. 12.4.2 System T imeout There is a lease timeout for administrators. The NW A automatically logs [...]

Chapter 12 System NWA5301-NJ User’s Guide 11 7 Please refer to the following figure. 1 HT TPS connection requests from an SSL -aware web browser go to port 443 (by default) on the NWA’ s web server . 2 HT TP connection requests from a web browser go to port 80 (by default) on the NW A’ s web server . Figure 66 HT TP/HT TPS Implementation Note[...]

Chapter 12 Syste m NWA5301-NJ User’s Guide 11 8 The following table describes the labels in this screen. 12.4.5 HTTPS Example If you haven’t changed the default HT TPS port on the NWA, th en in your browser enter “https:// NW A IP Address/” as the web site address where “N WA IP Address” is the IP address or domain name of the NWA you w[...]

Chapter 12 System NWA5301-NJ User’s Guide 11 9 Figure 68 Security Alert Dialog Box (Internet Explorer) Select Continue to this website. to proceed to the W eb Configurator login screen. Otherwise, select Click here to close this webpage. to block the access. 12.4.5.2 Mozilla Firefox W arning Messages When you attempt to access the NWA HT TPS serv[...]

Chapter 12 Syste m NWA5301-NJ User’s Guide 120 Figure 69 Security Certificate 1 (Firefox) Figure 70 Security Certificate 2 (Firefox) 12.4.5.3 A vo iding Browser W arning Messages Here are the main reasons your browser displays w arnings about the NWA’ s HTTPS server certificate and what you can do to av oid seeing the warnings: • The issuing [...]

Chapter 12 System NWA5301-NJ User’s Guide 121 • For the browser to trust a self-signed certificat e, impo rt the self-signed certificate into your operating system as a trusted certificate. • T o have the browser trust the certificates issued by a certificate authority , import the certificate authority’ s certificate into your operating sy[...]

Chapter 12 Syste m NWA5301-NJ User’s Guide 122 12.4.5.5 Inst alling th e CA ’ s Certificate 1 Double click the CA ’s trusted certificate to produce a screen similar to the one shown next. 2 Click Install Certificate and follow the wizard as shown earlier in this appendix. 12.4.5.6 Inst alling a Personal Certificate Y ou need a password in adv[...]

Chapter 12 System NWA5301-NJ User’s Guide 123 1 Click Next to begin the wizard. 2 The file name and path of the certificate you do uble-clicked should automatically appear in the File name text box. Click Browse if you wish to import a different certificate.[...]

Chapter 12 Syste m NWA5301-NJ User’s Guide 124 3 Enter the password given to you by the CA. 4 Have the wizard determine where the certificate should be sav ed on your computer or select Place all cert ificates i n the fo llowing st ore and choose a different location.[...]

Chapter 12 System NWA5301-NJ User’s Guide 125 5 Click Finish to complete the wizard and begin the import process. 6 Y ou should see the following screen when the certificate is correctly installed on your compu ter . 12.4.5.7 Using a Certificat e When Accessing the NW A T o access the NWA via HT TPS: 1 Enter ‘https://NW A IP Address/ in your br[...]

Chapter 12 Syste m NWA5301-NJ User’s Guide 126 2 When Authenticate Client Certificates is selected on the NW A, the following screen asks you to select a personal certificate to send to the NWA. Th is screen displays even if you only have a single certificate as in the example. 3 Y ou next see the W eb Configurator login screen. 12.5 SSH Y ou can[...]

Chapter 12 System NWA5301-NJ User’s Guide 127 Figure 73 How SSH v1 W orks Example 1 Host Identification The SSH client sends a connection request to the S SH server . The server identifies itself with a host key . The client encrypts a randomly gener ated session key with the host key and serv er key and sends the result back to the server . The [...]

Chapter 12 Syste m NWA5301-NJ User’s Guide 128 12.5.3 Requirement s for Using SSH Y ou must install an SSH client progr am on a client computer (Windows or Linux operating system) that is used to connect to the NWA over SSH. 12.5.4 Configuring SSH Click Configuration > System > SSH to open the following screen. Use this screen to configure [...]

Chapter 12 System NWA5301-NJ User’s Guide 129 1 Launch the SSH client and specif y the connection information (IP address, port number) for the NW A. 2 Configure the SSH client to accept connection using SSH ve rsion 1. 3 A window displays prompting you to store the host key in y ou computer . Click Yes to continue. Figure 75 SSH Example 1: Store[...]

Chapter 12 Syste m NWA5301-NJ User’s Guide 130 3 The CLI screen displays next. 12.6 T elnet Y ou can use T el net to access the NWA’ s command line interface. Click Configuratio n > System > TELNET to configure your NW A for remote T e lnet access. Use this screen to enable or disable T elnet and set the server port number . Figure 78 Con[...]

Chapter 12 System NWA5301-NJ User’s Guide 131 Figure 79 Configuration > System > FTP The following table describes the labels in this screen. 12.8 SNMP Simple Network Management Protocol is a protocol used for exchanging management information between network devices. Y our NWA supports SNMP agent functionality , which allows a manager stat[...]

Chapter 12 Syste m NWA5301-NJ User’s Guide 132 Figure 80 SNMP Management Model An SNMP managed network consists of two main types of component: agents and a manager . A n a g en t i s a m an a g em e nt s of t wa r e m o d ul e th a t re s id e s i n a ma n ag e d de v ic e ( th e NW A) . An a g en t translates the local management information fr[...]

Chapter 12 System NWA5301-NJ User’s Guide 133 is to let administrators collect statistical data and monitor status and performance. Y ou can download the NW A’s MIB s from www. zyxel.com. 12.8.2 SNMP T raps The NWA will send tr aps to the SNMP manager wh en any one of the following events occurs. 12.8.3 Configuring SNMP T o change your NWA’ s[...]

Chapter 12 Syste m NWA5301-NJ User’s Guide 134 12.8.4 Adding or Editin g an SNMPv3 User Profile This screen allows you to add or edit an SNMP v3 user profile. T o access this screen, click the Configuration > System > SNMP screen’ s Add button or select a SNMPv3 user profile from the list and click the Edit button. Figure 82 Configuration[...]

Chapter 12 System NWA5301-NJ User’s Guide 135 The following table describes the labels in this screen. T a ble 64 Configuration > Syste m > SNMP LABEL DESCRIPTION User Name Select the use r name of the user account for which this SNMPv3 user profile is configured. Authentica tion Select the type of authentication the SNMPv3 user must use to[...]

NWA5301-NJ User’s Guide 136 C HAPTER 13 Log and Report 13.1 Overview Use the system screens to configur e daily reporting and log settings. 13.1.1 What Y ou Can Do In this Chapter •T h e Email Daily Report screen ( Section 13.2 on page 136 ) configures how and where to send daily reports and what reports to send. •T h e Log Setting screens ( [...]

Chapter 13 Log a nd Report NWA5301-NJ User’s Guide 137 Figure 83 Configuration > Lo g & Report > Email Daily Repo rt The following table describes the labels in this screen. T a ble 65 Configur ation > Log & R eport > Email Daily R eport LABEL DESCRIPTION Enable Email Daily Report Select this to send reports by e-mail ev ery d[...]

Chapter 13 Log and Report NWA5301-NJ User’s Guide 138 13.3 Log Setting These screens control log messages and alerts. A log message stores the information for viewing (for exampl e, in the Monitor > View Lo g screen) or regular e-mailing later , and an alert is e- mailed immediately . Usually , alerts are used for even ts that require more ser[...]

Chapter 13 Log a nd Report NWA5301-NJ User’s Guide 139 Figure 84 Configur ation > Log & R eport > Log Setting The following table describes the labels in this screen. T a ble 66 Configuration > Log & Re port > Log Setting LABEL DESCRIPTION Edit Double-click an ent ry or select it and click Edit to open a sc reen where you can [...]

Chapter 13 Log and Report NWA5301-NJ User’s Guide 140 13.3.2 Edit System Log Settings This screen controls the detailed settings for each log in the system log (which includes the e-mail profiles). Select a system log entry in the Log Setting screen and click the Edit icon. Figure 85 Configur ation > Log & R eport > Log Se tting > Ed[...]

Chapter 13 Log a nd Report NWA5301-NJ User’s Guide 141 The following table describes the labels in this screen. T a ble 67 Configuration > Log & Report > Log Setting > Edit System Log Setting LABEL DESCRIPTION E-Mail Server 1/2 Active Sel ect this to send log messages an d al erts according to the information in this section. Y ou sp[...]

Chapter 13 Log and Report NWA5301-NJ User’s Guide 142 13.3.3 Edit Remote Server This screen controls the settings for each log in the remote server (syslog). Select a remote server entry in the Log Setting screen and click the Edit icon. E-mail Se rver 2 Use the E-Mail Server 2 drop-do wn list to change t he settings for e -mailing logs to e-mail[...]

Chapter 13 Log a nd Report NWA5301-NJ User’s Guide 143 Figure 86 Configur ation > Log & R eport > Log Setting > Ed it Remote Ser ver[...]

Chapter 13 Log and Report NWA5301-NJ User’s Guide 144 The following table describes the labels in this screen. 13.3.4 Active Log Summary This screen allows you to view and to edit what information is included in the system log, e-mail profiles, and remote servers at the same time. It does not let you change other log settings (for example, where [...]

Chapter 13 Log a nd Report NWA5301-NJ User’s Guide 145 Figure 87 Active Log Summary This screen provides a different view and a different wa y of indicating which messages are included in each log and each alert. (The Default category includes debugging messages generated by open source software.)[...]

Chapter 13 Log and Report NWA5301-NJ User’s Guide 146 The following table describes the fields in this screen. T a ble 69 Configuration > Log & Report > Log Setti ng > Active Log Summar y LABEL DESCRIPTION Active Log Summary If the NW A is set to contro ller mode, the AC section controls l ogs gener ated by the controller and the AP [...]

Chapter 13 Log a nd Report NWA5301-NJ User’s Guide 147 E-mail Server 1 E-mail Select whether each category of events should be inclu ded in the log messages when it is e-mailed (green check mark) and/or in aler ts (red exclamati on point) for the e-mail settings speci fied in E-Mail Server 1 . The NWA does not e-mail debugging information, even i[...]

NWA5301-NJ User’s Guide 148 C HAPTER 14 File Manager 14.1 Overview Configuration files define the NW A’s settings. Shell scripts are files of commands that you can store on the NW A and run when you need them. Y ou can apply a configuration file or run a shell script without the NW A restarting. Y ou can store multiple configuration files and s[...]

Chapter 14 File Manager NWA5301-NJ User’s Guide 149 While configuration files and shell scripts have th e same syntax, the NWA applies configuration files differently than it runs shell scripts. This is explained below . Y ou have to run the afor emention ed example as a shell script because the first command is run in Privilege mode. If you remo[...]

Chapter 14 File Manager NWA5301-NJ User’s Guide 150 configuration files from the NWA to y our computer and upload configur ation files from your computer to the NWA. Once your NW A is configured and functioning properly , it is highly recommended that y ou back up your configur ation file before making further conf iguration changes. The backup c[...]

Chapter 14 File Manager NWA5301-NJ User’s Guide 151 The following table describes the labels in this screen. T a ble 71 Mainten ance > File Manager > Configuration File LABEL DESCRIPTION Ren ame Use this button to change t he label of a configur ation file on the NW A. Y ou can only rename manually saved configuration files. Y ou cannot ren[...]

Chapter 14 File Manager NWA5301-NJ User’s Guide 152 Apply Use this button to ha ve the NWA us e a specific configur ation file. Click a configuration file ’ s row to select it and click Apply to have the NWA use that configuration file. The NWA does not have to restart in order to use a different configuration file , although you will need to w[...]

Chapter 14 File Manager NWA5301-NJ User’s Guide 153 14.2.1 Example of Configurati on File Download Using FTP The following example gets a configuration file named startup-config.conf from the NW A and saves it on the computer . 1 Connect your computer to the NW A. 2 The FTP server IP address of the NWA in standalone AP mode is 192.168.1.2, so set[...]

Chapter 14 File Manager NWA5301-NJ User’s Guide 154 8 Use "get” to download files. T ran sfer the configuration file on the NW A to your computer . T ype get followed by the name of the configur ation file. This examples uses get startup-conf ig.conf . 9 W ait for the file transfer to complete. 10 Enter “quit” to exit the ftp prompt. 1[...]

Chapter 14 File Manager NWA5301-NJ User’s Guide 155 Figure 89 Maintenance > File Manager > Firmw are P ackage The following table describes the labels in this screen. After you see the Firmware Upload in Process screen, wait tw o minutes before logging into the NW A again. Note: The NW A automatically reboots after a successful upload. The [...]

Chapter 14 File Manager NWA5301-NJ User’s Guide 156 14.3.1 Example of Firm ware Upload Using FTP This procedure requires the NWA’ s firmware. Download the firmware package from www.zyx el.com and unzip it. The firmware file uses a .bin ex tension, for example, "410AANB0C0.bin". Do the following after you ha ve obtained the firmware fi[...]

Chapter 14 File Manager NWA5301-NJ User’s Guide 157 Click Maintenance > File Manager > Shell Script to open this screen. Use the Shell Script screen to store, name, download, upload and run shell script files. Y ou can store multiple shell script files on the NWA at the sam e time. Note: Y ou sh ould include write commands in your scripts. [...]

Chapter 14 File Manager NWA5301-NJ User’s Guide 158 # This column displays the number for each shell scri pt file entry . File Name This column displays t he label that identifie s a shell script file. Size This column displa ys the size (in KB) of a sh ell script file. Last Modified This column displays the date and time that the individual shel[...]

NWA5301-NJ User’s Guide 159 C HAPTER 15 Diagnostics 15.1 Overview Use the diagnostics screen for troubleshooting. 15.1.1 What Y ou Can Do in this Chapter •T h e Diagnostics screen ( Section 15.2 on page 159 ) gener ates a file containing the NW A’ s configuration and diagnostic information if y ou n eed to provide it to customer support durin[...]

Chapter 15 Diagnostics NWA5301-NJ User’s Guide 160 Collect Now Click this to have the NWA create a new diagnostic file. Download Click this t o save the most re cent diagnostic file to a computer . T a ble 74 Mainten ance > Diagnostics LABEL DESCRIPTION[...]

NWA5301-NJ User’s Guide 161 C HAPTER 16 Reboot 16.1 Overview Use this to restart the device. 16.1.1 What Y ou Need T o Know If you applied changes in the W eb configurator , these were saved automatically and do not change when you reboot. If you made changes in the CLI, howev er , you hav e to use the writ e command to save the configur ation be[...]

NWA5301-NJ User’s Guide 162 C HAPTER 17 Shutdown 17.1 Overview Use this screen to shutdown the device. Always use Maintena nce > Shut down > Shutdown or the shutdown command before you turn off the NW A or remove the power . Not doing so can cause the firmware to become corrupt. 17.1.1 What Y ou Need T o Know Shutdown writes all cached data[...]

NWA5301-NJ User’s Guide 163 C HAPTER 18 Troubleshooting 18.1 Overview This chapter offers some suggestions to solve problems you might encounter . The potential problems are divided into the following categories. • Po wer , Hardware Connections, and LED • NWA Access and Login • Internet Access • Wireless Connections • Resetting the NW A[...]

Chapter 18 Troub leshooting NWA5301-NJ User’s Guide 164 5 If the problem continues, contact the v endor . 18.3 NW A Access and Login I forgot the IP address for the NWA. 1 The default IP address (in standalone AP mode) is 192.168.1.2 . 2 If you changed the IP address and have forgotten it, you hav e to reset the device to its factory defaults. Se[...]

Chapter 18 Troubl eshooting NWA5301-NJ User’s Guide 165 • T ry to access the NW A using another service, such as T elnet. If you can access the NW A, check the remote management settings to find out why the NW A does not respond to HT TP . • If your computer is connected wirelessly , use a computer that is connected to a LAN / ET HERNET port.[...]

Chapter 18 Troub leshooting NWA5301-NJ User’s Guide 166 2 Make sure the NW A is connected to a broadband modem or router with Internet access and your computer is set to obtain an dynamic IP address. 3 If you are trying to access the Internet wirelessly , make sure the wireless settings on the wireless client are the same as the settings on the N[...]

Chapter 18 Troubl eshooting NWA5301-NJ User’s Guide 167 1 Make sure the wireless LAN (wireless radio) is enabled on the NW A. 2 Make sure the r adio or at least one of the NW A’s r adi os is oper ating in AP mode. 3 Make sure the wireless adapter (installed on your computer) is working properly . 4 Make sure the wireless adapter (installed on y[...]

Chapter 18 Troub leshooting NWA5301-NJ User’s Guide 168 • PEM (Base-64) encoded PKCS#7: This Privacy Enhanced Mail (PEM) format uses lowercase letters, uppercase letters and numerals to convert a binary PKCS#7 certificate into a printable form. • Binary PKCS#12: This is a format for tr ansferri ng public k ey and private key certificates.The [...]

Chapter 18 Troubl eshooting NWA5301-NJ User’s Guide 169 In the Monitor > Wireless > AP Information > Radio List screen, there is no load balancing indicato r associated with any AP s assigned to the load balancing task. • Check to be sure that the AP profile which contains the load balancing settings is correctly assigned to the APs in[...]

NWA5301-NJ User’s Guide 170 A PPENDIX A Importing Certificates This appendix shows you how to import public key certificates into y our web browser . Public key certificates are used by web browsers to ensure that a secure web site is legitimate. When a certificate authority such as V eriSign, Comodo, or Network Solutions, to name a few , receive[...]

Appendix A Importing Certificates NWA5301-NJ User’s Guide 171 1 If your device’ s W eb Configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification erro r . 2 Click Continue to this website (not recommended) . 3 In the Address Bar , click Certificate Error > View certificate s .[...]

Appendix A Importing Certificates NWA5301-NJ User’s Guide 172 4 In the Certificate dialog box, click Install Cer tificate . 5 In the Certificate Import Wizard , click Next .[...]

Appendix A Importing Certificates NWA5301-NJ User’s Guide 173 6 If you want Internet Explorer to Automatically select certificat e store based on the typ e of certificate , click Next again and then go to step 9. 7 Otherwise, select Place all certificates in the following store and then click Browse . 8 In the Select Certificate Store dialog box,[...]

Appendix A Importing Certificates NWA5301-NJ User’s Guide 174 9 In the Completing the Certificate Import Wizard screen, click Finish . 10 If you are presented with another Security Warning , click Yes . 11 Finally , click OK when presented with the successful certificate installation message.[...]

Appendix A Importing Certificates NWA5301-NJ User’s Guide 175 12 The next time you start Internet Explorer and go to a ZyXEL W eb Configurator page, a sealed padlock icon appears in the address bar . Click it to view the page’s Website Identification information. Inst alling a St and-Alone Certific ate File in Internet Explorer Rather than brow[...]

Appendix A Importing Certificates NWA5301-NJ User’s Guide 176 Removing a Certificate in Internet Explorer This section shows you how to remove a public key certificate in Internet Explorer 7 on Windows XP . 1 Open Internet Explorer and click Tools > Internet Options . 2 In the Internet Options dialog box, click Content > Certificates .[...]

Appendix A Importing Certificates NWA5301-NJ User’s Guide 177 3 In the Certificates dialog box, click the Trusted Root Certif icates Authorities tab, select the certificate that you want to delete, and then click Remove . 4 In the Certificates confirmation, click Yes . 5 In the Root Certificate Store dialog box, click Yes . 6 The next time you go[...]

Appendix A Importing Certificates NWA5301-NJ User’s Guide 178 Firefox The following example uses Mozilla Firefox 2 on Windows XP Professional; however , the screens can also apply to Firefox 2 on all platforms. 1 If your device’ s W eb Configurator is set to use SSL certification, then the first time you browse to it you are presented with a ce[...]

Appendix A Importing Certificates NWA5301-NJ User’s Guide 179 Inst alling a St and-Alone Ce rtificate File in Firefox Rather than browsing to a Z yXEL W eb Configurator and installing a public k ey certificate when prompted, you can install a stand-alone certif icate file if one has been issued to y ou. 1 Open Firefox and click Tools > Options[...]

Appendix A Importing Certificates NWA5301-NJ User’s Guide 180 3 In the Certificate Manager dialog bo x, click Web Sites > Import . 4 Use the Select File dialog box to locate the certificate and then click Open . 5 The next time you visit the web site, click the padlock in the address bar to open the Page Info > Security window to see the we[...]

Appendix A Importing Certificates NWA5301-NJ User’s Guide 181 1 Open Firefox and click Tools > Options . 2 In the Options dialog bo x, click Advanced > Encryption > View Certi ficates .[...]

Appendix A Importing Certificates NWA5301-NJ User’s Guide 182 3 In the Certificate Manager dialog bo x, select the Web Sites tab, select the certificate t hat you want to remov e, and then click Delete . 4 In the Delete Web Site Certificates dialog box, click OK . 5 The next time you go to the web site that issued the public key certificate you j[...]

NWA5301-NJ User’s Guide 183 A PPENDIX B IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 38 IP addresses. IPv6 Addressing The 128-bit IPv6 address is written as eight 16-bit hexadecimal blocks se[...]

Appendix B IPv6 NWA5301-NJ User’s Guide 184 Global Address A global address uniquely iden tifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. Unspecified Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not have i[...]

Appendix B IPv6 NWA5301-NJ User’s Guide 185 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 ~ 10, A ~ F). Each block’s 16 bits are then represented by four hexadecimal charac[...]

Appendix B IPv6 NWA5301-NJ User’s Guide 186 combines its interface ID and global and subnet in formation advertised from the router . This is a routable global IP address. DHCPv6 The Dynamic Host Configur ation Protocol for IPv6 (DHCPv6, RFC 3315) is a server-client protocol that allows a DHCP server to assign and pa ss IPv6 network addresses, pr[...]

Appendix B IPv6 NWA5301-NJ User’s Guide 187 such as the system name. The interface-ID option provides slot number , port information and the VLAN ID to the DHCPv6 server . The remote-ID option (if any) is stripped from the R elay-R eply messages before the relay agent sends the packets to th e clients. The DHCP server copies the interface-ID opti[...]

Appendix B IPv6 NWA5301-NJ User’s Guide 188 determine whether the destination address is on- link and can be reached directly without passing through a router . If the address is onlink, the addre ss is considered as the next hop. Otherwise, the NW A determines the next-hop from the default rout er list or routing table. Once the next hop IP addr[...]

Appendix B IPv6 NWA5301-NJ User’s Guide 189 Example - Enabling IPv6 on Windows XP/2003/Vist a By default, Windows XP and Windows 2003 suppo r t IPv6. This example shows y ou how to use the ipv6 install command on Windows XP/2003 to enable IPv6. This also displays how to use the ipconfig command to see auto-generated IP addresses. IPv6 is installe[...]

Appendix B IPv6 NWA5301-NJ User’s Guide 190 5 Click Start and then OK . 6 Now your computer can obtain an IP v6 address from a DH CPv6 server . Example - Enabling IPv6 on Windows 7 Windows 7 supports IPv6 by default. DHCPv6 is al so en abled when you enable IPv6 on a Windows 7 computer . T o enable IPv6 in Windows 7: 1 Select Control Panel > N[...]

Appendix B IPv6 NWA5301-NJ User’s Guide 191 4 Click Close to exit the Local Area C onnection Status scree n. 5 Select Start > All Programs > Accessories > Command Prompt . 6 Use the ipconfig command to check your dynamic IPv6 address. This example shows a global address (2001:b021:2d::1000) obta ined from a DHCP server . C:>ipconfig [...]

NWA5301-NJ User’s Guide 192 A PPENDIX C Customer Support In the event of problems th at cannot be solved by using this manual, you should contact your vendor . If you cannot contact your v endor , then contact a Z yXEL office for the region in which you bought the device. Regional websites are listed below (see also http://www .zyxel.com/ about_z[...]

Appendix C Customer Support NWA5301-NJ User’s Guide 193 Korea • Z yXEL K orea Corp. • http://www.zyx el.kr Malaysia • Z yXEL Malaysia Sdn Bhd. • http://www.zyx el.com.my Pakist an • ZyXEL P akistan (Pvt.) Ltd. • http://www.zyx el.com.pk Philipines • Z yXEL Philippines • http://www.zyx el.com.ph Singapore • Z yXEL Singapore Pte L[...]

Appendix C Cus tomer Support NWA5301-NJ User’s Guide 194 Belgium • Z yXEL Communications B.V . • http://www.zyx el.com/be/nl/ Bulgaria •Z y X E L България • http://www.zyx el.com/bg/bg/ Czech • Z yXEL Communications Czech s.r .o • http://www.zyx el.cz Denmark • Z yXEL Communications A/S • http://www.zyx el.dk Estonia •Z [...]

Appendix C Customer Support NWA5301-NJ User’s Guide 195 Lithuania • Z yXEL Lithuania • http://www.zyx el.com/lt/lt/homepage.shtml Netherlands •Z y X E L B e n e l u x • http://www.zyx el.nl Norway • Z yXEL Communications • http://www.zyx el.no Poland • Z yXEL Communications Poland • http://www.zyx el.pl Romania •Z y X E L R o m [...]

Appendix C Cus tomer Support NWA5301-NJ User’s Guide 196 T urkey •Z y X E L T u r k e y A . S . • http://www.zyx el.com.tr UK • Z yXEL Communications UK Ltd. • http://www.zyx el.co.uk Ukraine •Z y X E L U k r a i n e • http://www.ua.zyx el.com Latin America Argentina • Z yXEL Communication Corpor ation • http://www.zyx el.com/ec/e[...]

Appendix C Customer Support NWA5301-NJ User’s Guide 197 Oceania Australia • Z yXEL Communications Corporation • http://www.zyx el.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyx el.co.za[...]

NWA5301-NJ User’s Guide 198 A PPENDIX D Legal Information Copyright Copyright © 2014 by Z yXEL Communications Corpor ation. Th e c on te nts of th is pub li ca ti on may no t b e r ep rod uc ed in any pa rt or as a wh ol e, tra ns cr ibe d, st or ed in a re tr ie val sy st em, tr anslated into any language, or tr ansmitted in any form or by any [...]

Appendix D Legal Information NWA5301-NJ User’s Guide 199 注意 ! 依據 低功 率 電波 輻 射性電機管 理 辦法 第十二條 經型式認證 合格之低功 率 射頻電機，非經許可，公司 、商號或使用 者均 不 得擅自變 更 頻 率 、加大功 率 或變 更 原設計之特性及功能。 第十四條 低功 率 ?[...]

Appendix D Legal Information NWA5301-NJ User’s Guide 200 National Restrictions This prod uct may be used in all EU coun tries (and ot her countries fo llowing the E U directive 199 9/5/EC) witho ut any limitat ion except for the count ries mentioned b elow: Ce produit peut être utilisé dans tous les pays de l’UE (et da ns tous les pays ay an [...]

Appendix D Legal Information NWA5301-NJ User’s Guide 201 Belgium The Belgian Institute for Postal Service s and T el ecommunications (BI PT) must be notified of any outdoor wirele ss link having a ran ge exceeding 300 meters. Please check http://w ww .bipt.be for more details. Draadloze verbindingen voor buiteng ebruik en met een reikwijd te van [...]

Appendix D Legal Information NWA5301-NJ User’s Guide 202 • Use ONL Y an appropriate power adaptor or co rd f or yo ur d evi ce. Conn ect it t o th e ri ght supp ly v olta ge ( for exa mple , 11 0V A C in North America or 230V AC in Europe). • Do NOT al low anything to rest on the p owe r adaptor or cord and do NOT place the pr oduct where any[...]

Index NWA5301-NJ User’s Guide 203 Index Symbols A access 21 access privileges 12 access users 67 see also users 67 admin users 67 multiple logins 72 see also users 67 alerts 138 , 141 , 142 , 144 , 145 , 146 AP 11 applications MBSSID 12 Re pe at e r 14 B backing up conf iguration files 150 Basic Service Set see BSS boot module 155 BSS 12 C CA and[...]

Index NWA5301-NJ User’s Guide 204 downloading 151 downloading with FTP 130 editing 148 how applied 149 lastgood.conf 150 , 153 managing 149 startup-config.conf 153 startup-config-bad.conf 150 syntax 14 8 system-default.conf 153 uploading 153 uploading with FTP 130 use without restart 148 contact information 192 Control and Provisioning of Wireles[...]

Index NWA5301-NJ User’s Guide 205 and certificates 11 6 authenticating clients 11 6 avoiding warning messages 120 example 11 8 vs HTTP 11 7 with Internet Explorer 11 8 with Netscape Navigator 11 9 HyperT ext T ransfer Protocol ov er Secure Socket Layer , see HT TPS I IEEE 802.1x 75 installation 12 interface status 35 interfaces as DHCP servers 11[...]

Index NWA5301-NJ User’s Guide 206 good habits 16 usi ng FT P . See FTP . MBSSID 12 memory usage 34 , 37 message bar 29 messages CLI 26 warn ing 29 mode 11 managed mode 12 standalone 12 mode change 12 model name 34 My Certificates, see also certificates 97 N Netscape Navigator 21 network access control 12 Network Time Protocol (NTP) 11 4 O objects[...]

Index NWA5301-NJ User’s Guide 207 Service Set 74 Service Set Identifier see SSID shell scripts 148 downloading 157 editing 156 how applied 149 managing 157 syntax 14 8 uploading 158 shutdown 20 , 162 vs reset 162 Simple Certificate Enrollment Protocol (SCEP) 10 1 Simple Network Management Protocol, see SNMP SNMP 131 , 132 agents 132 Get 132 GetNe[...]

Index NWA5301-NJ User’s Guide 208 user objects 67 users 67 access, see also access users admin (type) 67 admin, see also admin users and service control 11 6 currently logged in 34 default lease time 71 , 73 default reauthentication time 71 , 73 lease time 70 limited-admin (type) 67 lockout 72 reauthentication time 70 types of 67 user (type) 67 u[...]