ZyXEL NWA-3160 manual

www .zyxel.com NW A-3160 Series IEEE 802.1 1a/b/g Business WLAN Access Point IEEE 802.1 1b/g Business WLAN Access Point IEEE WirelessN Busine ss WLAN Access Point User ’ s Guide V ersion 3.60 03/2008 Edition 3 DEFAULT LOGIN IP Address http://1 92 .168.1.2 Password 1234[...]

[...]

About This User's Guide ZyXEL NWA-3160 Series User’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who want to configure the ZyXEL Device using the web configurator . Y ou should have at leas t a basic knowledge of TCP/IP networking concepts and topology . Related Document ation • Quick Start Gui[...]

Document Conventions ZyXEL NWA-3160 Series User’s Guide 4 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User ’ s Guide. 1 W arnings tell you about things that could harm you or your device. " Notes tell you other import ant information (for example, other things yo u may need to configure or he[...]

Document Conventions ZyXEL NWA-3160 Series User’s Guide 5 Icons Used in Figures Figures in this User ’ s Guide may use the followi ng generic icons. The ZyXEL Device icon is not an exact representation of your device. ZyXEL Device Computer Notebook computer Server DSLAM Firewall T ele phone Switch Router[...]

Safety Warnings ZyXEL NWA-3160 Series User’s Guide 6 Safety Warnings 1 For your safety , be sure to read and follow all warning notices and instructions. • Do NOT use this product near water , for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT store thin gs on[...]

Safety Warnings ZyXEL NWA-3160 Series User’s Guide 7[...]

Safety Warnings ZyXEL NWA-3160 Series User’s Guide 8[...]

Contents Overview ZyXEL NWA-3160 Series User’s Guide 9 Contents Overview Introduction .......................................... ........................................................................ .......... 31 Introducing the ZyXEL Device ............... ................ ................ ................ ................. ................ .[...]

Contents Overview ZyXEL NWA-3160 Series User’s Guide 10[...]

Table of Contents ZyXEL NWA-3160 Series User’s Guide 11 Table of Contents About This User's Guide ................................ ........................................................................ .. 3 Document Conventions.................................................................. ......................................... .4 Sa[...]

Table of Contents ZyXEL NWA-3160 Series User’s Guide 12 Chapter 3 T utorial ........................................................................ ............................................... .............. 47 3.1 How to Configure the Wirele ss LAN ... ............. ................ ................ ................. ............ ....... 47 [...]

Table of Contents ZyXEL NWA-3160 Series User’s Guide 13 5.2 The Management Mode Screen ................ ................ ................ ................ ................ .......... 81 Chapter 6 AP Controller Mode (NW A-3160 Only) .................................................................................. 83 6.1 S tatus Screen ...........[...]

Table of Contents ZyXEL NWA-3160 Series User’s Guide 14 8.3.3.2 A T C+WMM from WLAN to LAN .......... ................ ................ .......... 109 8.3.4 T ype Of Service (T oS) ............... ................ ................. ................ ............. ................ . 109 8.3.4.1 DiffServ ............ ................. ..............[...]

Table of Contents ZyXEL NWA-3160 Series User’s Guide 15 9.10 Introduction to RADIUS ................. ................ ................ ................ ................. ................ . 136 9.1 1 Conf iguring RADIUS ... ................ ................ ................ ................ ............. ................ ....... .1 3 6 Chapter 10[...]

Table of Contents ZyXEL NWA-3160 Series User’s Guide 16 13.3.3 Rogue AP List ...................... ................ ................ ................ ................. ................ . 16 3 Chapter 14 Remote Management Screens .................................. ........................................................... 165 14.1 Remote Managem[...]

Table of Contents ZyXEL NWA-3160 Series User’s Guide 17 Chapter 17 Log Screens ............................................................................................... ..................... ...... 201 17.1 Configuring View Log ..... .......... ................ ............. ................ ................ ................ ......... .. 20[...]

Table of Contents ZyXEL NWA-3160 Series User’s Guide 18 Chapter 20 Introducing the SMT ............................................................ ................................................ .2 3 7 20.1 Introduction to the SMT .............. ................ ................ ................... ................. ................ .2 3 7 20.2[...]

Table of Contents ZyXEL NWA-3160 Series User’s Guide 19 26.2 Backup Configuration .... ...... ............. ................ ................. ................ ............. ................ .2 5 8 26.2.1 Using the FTP command from the DOS Prompt .. ................ ................. ................ . 258 26.2.2 Backup C onfiguration Using TFTP [...]

Table of Contents ZyXEL NWA-3160 Series User’s Guide 20 Appendix C Pop-up Windows, JavaScripts and Java Permissions ...................................... 313 Appendix D IP Addresses and Subnetting ................................................ ........................... 319 Appendix E T ext File Based Auto Configuration ......................[...]

List of Figures ZyXEL NWA-3160 Series User’s Guide 21 List of Figures Figure 1 Access Point Application ...... ............. ...... ............. ................ ................ ............. .......... ............. 34 Figure 2 Bridge Application ................................ ................ ................ ................ ..............[...]

List of Figure s ZyXEL NWA-3160 Series User’s Guide 22 Figure 39 T utorial: MAC Filter Edit (SERVER_1) .. ................ ................. ............ ................. ................ ... 71 Figure 40 T utorial: SSID Profiles Activated ..... ... .......... ................ ............. ................ ................ .... ......... 72 Fig[...]

List of Figures ZyXEL NWA-3160 Series User’s Guide 23 Figure 82 Wireless: Mu ltiple BSS ....... ................................ ................ ....................................... ...... ..... 140 Figure 83 SSID ...... ................ ................ ................ ................ ................. ................ ......... ..........[...]

List of Figure s ZyXEL NWA-3160 Series User’s Guide 24 Figure 125 Management VLAN Conf iguration Example .................. ................ ................ ................ ..... 214 Figure 126 VLAN-Aware Switch - S tatic VLAN ... ...... ............. ................. ................ ............. ................ .2 1 4 Figure 127 VLAN-Aware[...]

List of Figures ZyXEL NWA-3160 Series User’s Guide 25 Figure 168 Menu 22 SNMP Configuration ............. ............. ................ ................ ............. ................ .. ... 247 Figure 169 Menu 23 System Passwo rd .... ................ ................. ............. ................ ................ .......... .... 249 Figure 1[...]

List of Figure s ZyXEL NWA-3160 Series User’s Guide 26 Figure 21 1 Security Settings - Ja va Sc ripting ........... ................. ................ ................ ................ ..... ...... 317 Figure 212 Security Settings - Java .............. ... ................ ................ ............. ................ ............. .......... .[...]

List of Tables ZyXEL NWA-3160 Series User’s Guide 27 List of Tables T able 1 Models Cov ered .... ................ ................ ................ ................ .................... ............... .......... ....... 33 T able 2 LEDs .............. ................ ................. ................ ................ ................ ........[...]

List of Tables ZyXEL NWA-3160 Series User’s Guide 28 T able 39 Wireless Security Levels .. ............. ... ................ ............. ................ ................ ............. .......... . 128 T able 40 WIRELES S > Security .............. ................ ................. ............. ................ ................ ..... .....[...]

List of Tables ZyXEL NWA-3160 Series User’s Guide 29 T able 82 Sys log ... ................ ................ ................ ................ ................. ................ ......... ................ ..... 206 T able 83 Log Categories and Ava ilable Settings .. ................ ................. ................ ................ ............[...]

List of Tables ZyXEL NWA-3160 Series User’s Guide 30 T able 125 Subnet 2 ............... ............. ................ ................ ................ ................ ............... ........ ........... 324 T able 126 Subnet 3 ............... ............. ................ ................ ................ ................ ............... ..[...]

31 P ART I Introduction Introducing the ZyXEL Device (33) Introducing the W eb Configurator (43) T utorial (47) S tatus Screens (75) Management Mod e (79) AP Controller Mode (NW A-3160 Only) (83)[...]

32[...]

ZyXEL NWA-3160 Series User’s Guide 33 C HAPTER 1 Introducing the ZyXEL Device This chapter introduces the main applications and features of the ZyXEL Device. It also introduces the ways yo u can manage the ZyXEL Device. 1.1 Introducing the ZyXEL Device Y our ZyXEL Device extends the range of your existing wired networ k wi thout additional wiring[...]

Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 34 " A different channel should be configured for each WLAN interface to reduce the effect s of radio interference. 1.2.1 Access Point The ZyXEL Device is an ideal access solution fo r wireless Internet connection. A typical Internet access application for your ZyXEL D[...]

Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 35 Figure 2 Bridge Application Figure 3 Repeater Application 1.2.3 AP + Bridge (NW A -3160 and NW A-3163 Only) In AP+Bridge mode, the ZyXEL Device supports both AP and bridge connectio n at the same time.[...]

Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 36 In the figure below , A and B use X as an AP to access the wired network, while X and Y communicate in bridge mode. When the ZyXEL Device is in AP + Bridge mode, security between APs (the W ireless Distribution System or WDS) is independent of the security between the wi[...]

Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 37 For example, you might want to set up a wire less network in your office where Internet telephony (V oice over IP , or V oIP) users have priority . Y ou also want a regular wireless network for standard users, as well as a ‘guest ’ wireless network for vis itors. In [...]

Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 38 1.3 CAPW AP (NW A-3160 and NW A-3163 Only) CAPW AP allows a single access point (the AP cont roller) to manage up to eight other access points (the managed APs ). The managed APs r eceive all their configura tion information from the AP controller . This includes radio c[...]

Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 39 1.6 Hardware Connections See your Quick S tart Guide for informa tion on making hardware connections. 1.6.1 Antennas The ZyXEL Device has two antennas. When yo u are looking at the ZyXEL Device from the front, the main antenna is on the left. The main antenna can both tr[...]

Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 40 Figure 7 LEDs T able 2 LEDs LABEL COLOR STATUS DESCRIPTION WDS (NW A-31 60 and NW A- 3163 only) Off Either • The ZyXEL Device is in Acces s Point or MBSSID mode and is functioning normally . or • The ZyXEL Device is in AP+Bridge o r Bridge/ Repeater mode and has not [...]

Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 41 ETHERNET Green On The ZyXEL Device has a 10 Mbps Ethernet connection. Blinking The ZyXEL Device has a 10 Mbps Ethernet connection and is sending or receivin g data. Y ellow O n The ZyXEL Device has a 100 Mbps Ethernet connection. Blinking The ZyXEL Device has a 100 Mbps [...]

Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 42[...]

ZyXEL NWA-3160 Series User’s Guide 43 C HAPTER 2 Introducing the Web Configurator This chapter describes how to access the ZyXEL Device’ s web configura tor and provides an overview of its screens. " When your ZyXEL Device is in (CAPW AP) Managed AP mode (NW A-3160 and NW A-3163 only) the Web Configurator is not available. Th e ZyXEL Devic[...]

Chapter 2 Introducing the Web Configur ator ZyXEL NWA-3160 Series User’s Guide 44 Figure 8 Change Password Screen 6 Click Apply in the Replace Certificate screen to create a certificate using your ZyXEL Device’ s MAC address that will be specific to this device. Figure 9 Replace Certificate Screen Y ou should now see the St a t u s screen. See [...]

Chapter 2 Introducing the Web Configurator ZyXEL NWA-3160 Series User’s Guide 45 2.2.1 Methods of Restoring Factory-Default s Y ou can erase the current configuration and restore factory defaults in three ways: Use the RESET button to upload the default configuratio n file. Hold this button in for about 10 seconds (the lights will begin to blink)[...]

Chapter 2 Introducing the Web Configur ator ZyXEL NWA-3160 Series User’s Guide 46 Click MAINTENANCE to view information about your ZyXEL Device or upgrade configuration and firmware file s. Maintenance features include St a t u s (Statistics), Association List , Channel Usage (NW A-3160 and NW A-3163 only), F/W (firmware) Upload , Configuration ([...]

ZyXEL NWA-3160 Series User’s Guide 47 C HAPTER 3 Tutorial This chapter first provides an overview of ho w to configure the wireless LAN on your ZyXEL Device, and then gives step-by- step guidelines showing how to configure your ZyXEL Device for some example scenarios. 3.1 How to Configure the Wireless LAN This section shows how to choose which wi[...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 48 3.1.2 Wireless LAN Configuration Overview The following figure shows th e steps you should take to configure t h e wireless settings according to the operatin g mode you select. Use the W eb Configurato r to set up your ZyXEL Device’ s wireless network (see your Quick Start Guide for info[...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 49 Figure 1 1 Configuring Wireless LAN S elect Operating Mode Access Point Bridge / Repeater Mo de. AP + Bridge Mode. MBSSID Mode. Select 802.1 1 Mode and Channel ID . Select SSID Configure SSID P rofile. Edit Security Pr ofile . Configure RADIUS authentication (optional). Configure internal A[...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 50 3.1.3 Further Reading Use these links to find more information on the steps: • Choosing 802.1 1 Mode : see Section 8.7. 1 on page 1 1 3 . • Choosing a wireless Channel ID : see Section 8.7. 1 on page 1 13 . • Selecting and configurin g SSID profile (s): see Section 8.7.1 on page 1 13 [...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 51 Figure 12 T utorial: Example MBSSID Set up The standard network ( SSID04 ) has ac cess to all resources. The V oIP ne twork ( V oIP_SSID ) has access to a ll resources and a high Quality of Service (QoS) setting (see Chapter 8 on page 105 for information on QoS). The guest network ( Guest_S[...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 52 Figure 13 T utorial: Wireless LAN: Before Select MBSSID from the Operating Mode drop-down list box. The screen displays as follows. Figure 14 T utorial: Wireless LAN: Change Mode This Select SSID Pr ofile table allows you to activate or deactivate SSID profiles. Y our wireless network was p[...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 53 Select the Index box for the en try and click Apply to activate the profile. Y our standard wireless network ( SSID04 ) is now accessible to your wireless clients as before. Y ou do not need to configure anything el se for your standard n etwork. 3.2.2 Configure the V oIP Network Next, clic[...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 54 Figure 16 T utorial: V oIP SSID Profile Edit • Choose a new SSID for the V oIP network. In this example, enter V OIP_SSID_Example . Note that although the SSID chan ges, the SSID profile name ( V oIP_SSID ) remains the same as before. • Select Enable from the Hide Name (SSID) list box. [...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 55 Figure 17 T utorial: V oIP Sec urity Y ou already chose to use the security02 profile for this network, so select the radio button for security02 and click Edit . The following screen appears. Figure 18 T utorial: V oIP Security Profile Edit •C h a n g e t h e Name field to “V oIP_Secur[...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 56 • Click Apply . The WIRELESS > Security screen displays. Ensure that the Prof ile Name for entry 2 displays “ Vo I P _ S e c u r i t y ” and that the Security Mode is WP A2-PSK . Figure 19 T utorial: V oIP Sec urity: Updated 3.2.2.2 Activate the V oIP Profile Y ou need to activate [...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 57 Figure 21 T utorial: Guest Edit • Choose a new SSID for the guest network. In this example, enter Guest_SSID_Example . Note that although the SSID chan ges, the SSID profile name ( Guest_SSID ) remains the same as before. • Select Disable from the Hide Nam e (SSID) list box. This makes [...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 58 • Select WP A-PSK in the Security Mode field. WP A-PSK provides strong security that is supported by most wireless clients . Even though your Guest_S SID clients do not have access to sensitive information on the network, you should not leave the network without security . An attacker cou[...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 59 Figure 25 T utorial: Layer 2 Isolation Profile Enter the MAC addresses of the two network devi ces you want users on the guest network to be able to access: the main network router (00:AA:00:AA:00:AA) and the network printer (AA:00:AA:00:AA:00). Cl ick Apply . 3.2.3.3 Activate the Guest Pro[...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 60 • T ry to access each network using the corre ct security settings, and then using incorrect security settings, such as the WP A-PSK for an other active network. If the behavior is dif ferent from expected (for example, if you can access the V oIP wireless netwo rk using the security sett[...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 61 Figure 27 T utorial: Wireless Netw ork Example In the figure, the solid circle represents the range of your wireless network, and the dashed circle represents the extent of the coffee shop’ s wireless networ k. Note that the two networks overlap. This means that one or more of your APs ca[...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 62 " The ZyXEL Device can detect the MAC addresse s of APs automatically . However , it is more secure to obt ain the correct MAC addresses from another source and add them to the friendl y AP list manually . For example, an att acker ’s AP m imicking the correct SSID could be placed on[...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 63 " Y ou can add APs that are not p art of your network to the friendly AP list, as long as you know that they do not pose a t hreat to your network’ s security . The Friendly AP screen now appears as follows. Figure 29 T utorial: Friendly AP (After Data Entry) 3 Next, you will save th[...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 64 Figure 31 T utorial: Warning 5 Save the friendly AP list somewhere it can be accessed by all the other access points on the network. In this example, save it on the network file server ( E in Figure 27 on page 61 ). The default filename is “Flist”. Figure 32 T utorial: Save Friendly AP [...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 65 2 In the Period (min.) field, enter how often yo u want the ZyXEL Device to scan for rogue APs. Y ou can have the ZyXEL Device sca n anywhere from once every ten minutes to once every hour . In this example, enter “10”. 3 Click Apply . 3.3.3 Set Up E-mail Logs In this section, you will [...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 66 • Enter the email address to which you want alerts to be sent ( myname@myfirm.co m , in this example). •I n t h e Send Immediate Alert section, select the events you want to trigger immediate e- mails. Ensure that Rogue AP is selected. • Click Apply . 3.3.4 Configure Y our Other Acces[...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 67 • Check your e-mail. Y ou should have receiv ed at least one e-mail alert (your other ZyXEL Devices may also have sent alerts , depending on their proximity and the output power of your “rogue” AP). 3.4 Using Multiple MAC Filters and L-2 Isolation Profiles This example shows you how t[...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 68 3.4.3 Setup In this example, you have already set up the ZyXEL Device in MBSSID mode (see Chapter 10 on page 139 ). It uses two SSID profiles simultaneously . Y ou have configured each SSID profile as shown in the following table. Each SSID profile already uses a different pre-shared key . [...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 69 Y ou will configure the MAC filter to restrict access to Alice alone, and then configure layer-2 isolation to allow her to access onl y the network router , the file server and the Internet security gateway . T ake the following steps to co nfigure the SER VER_1 network. 1 Log into the ZyXE[...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 70 Figure 37 T utorial: SSID Edit Select l2Isolation03 in the L2 Isolatio n field, a nd select macf ilter03 in the MAC Filtering field. Click Apply . 3 Click the Layer -2 Isolation tab. When the Layer-2 Isolation screen appears, select L2Isolation03 ’ s entry and click Edit . The following s[...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 71 Figure 39 T utorial: MAC Filter Edit (SERVER_1) Y ou have restricted a ccess to the SER VER_1 ne twork to only the networking device whose MAC address you entered. The SER VER_1 network is now configured. 3.4.5 Configure the SER V ER_2 Network Next, you will configure the SER VER_2 network [...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 72 3.4.6 Checking your Settings and T esting the Configuration Use the following sections to ensure that yo ur wireless networks are set up correctly . 3.4.6.1 Checking Settings T ake the following steps to ch eck that the ZyXEL Device is using the correct SSIDs, MAC filters and layer-2 isolat[...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 73 • Using Alice’ s computer and wireless client , and the correct secu rity settings, do the following. Attempt to access Server 1. Y o u should be able to do so. Attempt to access the Internet. Y o u should be able to do so. Attempt to access Server 2. Y ou should be unable to do so. If [...]

Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 74[...]

ZyXEL NWA-3160 Series User’s Guide 75 C HAPTER 4 Status Screens The St a t u s screen displays wh en you log in to the ZyXEL Device, or click ST A TUS in the navigation menu. Use the St a t u s screens to look at the current status of the device, system resources, interface s and SSID status. The St a t u s screen also provides detaile d informat[...]

Chapter 4 Sta tus Screens ZyXEL NWA-3160 Series User’s Guide 76 Figure 42 The S tatus Screen The following table describes the labels in this screen. T able 10 The Stat us Screen LABEL DESCRIPTION Automati c Refresh Interval Enter how often you want the ZyXEL Device to upda te this screen. Refresh Click this to update this screen imme diately . S[...]

Chapter 4 Status Screens ZyXEL NWA-3160 Series User’s Guide 77 System Resources Flash This field displays the amount of the ZyXEL Device’s flash memory currently in use. The flash memory is used to store firmware and SSID profiles. Memory This field displa ys what percentage of the ZyXEL Device’s volatile memory is currently in use. The highe[...]

Chapter 4 Sta tus Screens ZyXEL NWA-3160 Series User’s Guide 78[...]

ZyXEL NWA-3160 Series User’s Guide 79 C HAPTER 5 Management Mode This chapter discusses the MGNT MODE (Management Mode) screen (NW A-3160 and NW A-3163 only). This screen de termines whether the ZyXEL Devi ce is used in its default, standalone mode, or as part of a CAPW AP (Control And Provisioning of W irele ss Access Points) network. 5.1 About [...]

Chapter 5 Manage ment Mode ZyXEL NWA-3160 Series User’s Guide 80 2 The AP sends out a management request, looking for an AP in CAPW AP AP controller mode. 3 If there is an AP controller on the network, it receives the manageme nt request. If the AP controller is in Manual mode (see Section 6.3.3 on page 91 ) it adds the details of the AP to its U[...]

Chapter 5 Manag ement Mode ZyXEL NWA-3160 Series User’s Guide 81 5.1.4 Notes on CAPW AP This section lists some add itional features of ZyXEL ’ s implementation of the CAPW AP protocol. • When the ZyXEL Device is in AP controller mode and uses its internal RADIUS server (see Chapter 15 on page 1 77 ), managed APs also use the ZyXEL Device’ [...]

Chapter 5 Manage ment Mode ZyXEL NWA-3160 Series User’s Guide 82 Managed AP Select this to have the ZyXEL Device managed by ano ther ZyXEL Device on your network. When you do this, the ZyXEL Device can be configured ONL Y by the management AP . If you do not have an AP controller on your network and want to return the ZyXEL Device to standalone m[...]

ZyXEL NWA-3160 Series User’s Guide 83 C HAPTER 6 AP Controller Mode (NWA-3160 Only) When the ZyXEL Device is an AP controller , it can manage other access points. Y ou configure settings for the AP co ntroller and the managed access po ints in the AP controller , which then sends the configura tion details to the managed AP s. The ZyXEL Device ca[...]

Chapter 6 AP Co ntroller Mode (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 84 The following table describes the new labels in this screen. 6.1.1 The AP List St atus Screen Use this screen to see a list of the APs ma naged by the ZyXEL Device. When the ZyXEL Device is in AP controller mode, cli ck AP List in the St a t u s screen. The follow[...]

Chapter 6 AP Controller Mo de (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 85 The following table describes the labels in this screen. 6.1.2 The AP St atistics Screen Use this screen to statistics relating to th e APs managed by the ZyXEL Device. When the ZyXEL Device is in AP controller mode, click AP S tatistics in the St a t u s screen. [...]

Chapter 6 AP Co ntroller Mode (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 86 6.1.3 The AP Association List Screen Use this screen to see information about the wi reless clients associated to the APs managed by the ZyXEL Device. When the ZyXEL Devi ce is in AP controller mode, click A ssociation List in the St a t u s screen. The following [...]

Chapter 6 AP Controller Mo de (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 87 When the ZyXEL Device is in AP controller mode, click SSID Information in the St a t u s screen. The following screen displays. Figure 50 SSID Informa tion The following table describes the labels in this screen. 6.2 Navigation Bar When the ZyXEL Device is in AP c[...]

Chapter 6 AP Co ntroller Mode (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 88 6.3 The Controller Screens This section discusses the Controller screens that display when the ZyXEL Device is in AP controller mode (NW A-3 160 only). 6.3.1 The AP Lists Screen When the ZyXEL Device is in AP controller mode, click CONTROLLER > AP Lists . The f[...]

Chapter 6 AP Controller Mo de (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 89 Figure 52 The Controller > AP List s Screen The following table describes the labels in this screen. T able 18 The Controller > AP Lists Screen LABEL DESCRIPTION Managed Access Points List This secti on lists t he access points currently controlled by the Zy[...]

Chapter 6 AP Co ntroller Mode (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 90 6.3.2 The AP List s Edit Screen Use this screen to change the descriptio n or radio profile of an AP managed by the ZyXEL Device. Click Edit in the CONTROL LER > AP Lists screen. The following screen displays. Figure 53 The Controller > AP List s > Edit S[...]

Chapter 6 AP Controller Mo de (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 91 6.3.3 The Configuration Screen Use this screen to control th e way in which the ZyXEL Device accepts new APs to manage. Y ou can also configure the pre-shared key (PSK) that is use to secure the data transmitted between the ZyXEL Device and the APs it manages. Whe[...]

Chapter 6 AP Co ntroller Mode (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 92 6.4 The Profile Edit Screens This section describes the Profile Edit screens, which are availabl e only in AP controller mode (NW A-3160 only). The following Profil e Edit screens are identical to those available in sta ndalone mode: •T h e Profile Edit > SSI[...]

Chapter 6 AP Controller Mo de (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 93 6.5 The Radio Profile Edit Screen Use this screen to configure a specific radio profile. In the Profile Edit > Ra dio screen, select a profile and click Edit . The following screen displays. Figure 56 The Profile Edit > Radio > Edit Screen 802.1 1 Mode Th[...]

Chapter 6 AP Co ntroller Mode (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 94 The following table describes the labels in this screen. T able 22 The Profile Edit > Radio > Edit Screen LABEL DESCRIPTION Profile Name Enter a name identifying thi s profile. 802.1 1 Mode Select 802.1 1b Only to allow only IEEE 802.1 1 b compliant WLAN dev[...]

Chapter 6 AP Controller Mo de (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 95 Apply Click this to save your changes. Reset Click this to reload the previous configuration for this screen. T able 22 The Profile Edit > Radio > Edit Screen LABEL DESCRIPTION[...]

Chapter 6 AP Co ntroller Mode (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 96[...]

97 P ART II The W eb Configurator System Screens (99) W ireless Config uration (105) W ireless Security Configuration (123) MBSSID and SSID (139) Other W ireless Configuration (147) IP Screen (157) Rogue AP (159) Remote Management Screens (165) Internal RADIUS Server (177) Certificates (183) Log Screens (201) VLAN (209) Maintenance (227)[...]

98[...]

ZyXEL NWA-3160 Series User’s Guide 99 C HAPTER 7 System Screens 7.1 System Overview This section provides information on general system setup. 7.2 Configuring General Setup Click SYSTEM > General . Figure 57 System > General The following table describes the labels in this screen. T able 23 System > General LABEL DESCRIPTION General Setu[...]

Chapter 7 System Screens ZyXEL NWA-3160 Series User’s Guide 100 7.3 Administrator Authentication on RADIUS The administrator authentication on RADIUS fe ature lets a (external or internal) RADIUS server authenticate management logins t o the Zy XEL Device. This is u s eful if you need to regularly change a password that you u se to manage several[...]

Chapter 7 S ystem Screen s ZyXEL NWA-3160 Series User’s Guide 101 Figure 58 SYSTEM > Password. The following table describes the labels in this screen. T able 24 Password LABEL DESCRIPTIONS Enable Admin at Local Select this check box to have the de vice authenticate ma nagement l ogins to the device. Use old setting Select this to have the ZyX[...]

Chapter 7 System Screens ZyXEL NWA-3160 Series User’s Guide 102 7.4 Configuring T ime Setting T o change your ZyX EL Device’ s time and date, click SYSTEM > T ime Setting . The screen appears as shown. Use this screen to configur e the ZyXEL Device’ s time based on yo ur local time zone. Figure 59 SYSTEM > T ime Setting RADIUS Select th[...]

Chapter 7 S ystem Screen s ZyXEL NWA-3160 Series User’s Guide 103 The following table describes the labels in this screen. T able 25 SYSTEM > Time Setting LABEL DESCRIPTION Current T ime This field displays the time of your ZyXEL Device. Each time you reload this page, th e ZyXEL Device synchronizes the tim e with the time server (if configure[...]

Chapter 7 System Screens ZyXEL NWA-3160 Series User’s Guide 104 7.5 Pre-defined NTP T ime Servers List When you turn on the ZyXEL De vice for the first time, the date and time start at 2000-01-01 00:00:00. When you select Auto in the SYSTEM > Time Setting screen, the ZyXEL Device then attempts to synchronize w ith one of the following pre-defi[...]

ZyXEL NWA-3160 Series User’s Guide 105 C HAPTER 8 Wireless Configuration This chapter discusses how to configure the ZyXEL Device’ s Wire l es s screens. 8.1 Wireless LAN Overview This section introduces the wireless LAN (WLAN) and some basic scenarios. 8.1.1 BSS A Basic Service Set (BSS) exists when all co mmunications between wireless station[...]

Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 106 8.1.2 ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distributio n System (DS). An ESSID (ESS IDentificat[...]

Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 107 8.3 Quality of Service This section discusses the Quality of Service (QoS) fe atures available on the ZyXEL Device. 8.3.1 WMM QoS WMM (W i-Fi MultiMedia) QoS (Qua lity of Service) ensures quality of ser vice in wireless networks. It controls WLAN transmission priority on pack[...]

Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 108 A TC assigns priority based on packet size, since time-sensitive applications such as Internet telephony (V oice over IP or V oIP) tend to have smaller pa cket sizes than non-time sensitive applications such as FTP (File T ransfer Protoc ol). The following tabl e shows some c[...]

Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 109 The following table shows how priorities are ass igned for packets coming from the LAN to the WLAN. 8.3.3.2 A TC+WMM from WLAN to LAN A TC+WMM from WLAN to LAN automatically pr ioritizes (assigns an A TC value to) all packets coming from the WLAN. Packets are a ssigned an A T[...]

Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 11 0 DSCP is backward compatible with the three precedence bits in the T oS octet so that non- DiffServ compliant , T oS-enabled network device will not conflict with the DSCP mapping. The DSCP value determines the forwardi ng behavior , the PHB (Per-Hop Behavior), that each pack[...]

Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 111 8.4.2 STP T erminolo gy The root bridge is the base of the spannin g tree; it is the bridge with the l owest identifier value (MAC address). Path cost is the cost of tr ansmitting a frame onto a LAN thro ugh that port. It is assigned according to the speed of the link to whic[...]

Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 11 2 8.4.4 STP Port St ates STP assigns five port states (see next table) to eliminate packet looping. A bridge port is not allowed to go directly fro m blocking state to forwarding state so as to eliminate transient loops. 8.5 DFS When you ch oose 802.1 1a in Access Point mode ([...]

Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 11 3 8.7 Configuring Wireless Settings Click WIRELESS > Wir eless . The screen varies depending upon the op erating mode you select. 8.7.1 Access Point Mode : NW A-3160 and NW A-3163 This section describes the Access Point mo de screen for the NW A-3160 and NW A-3163. For the [...]

Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 11 4 8.7.2 Access Point Mode: NW A-3165 This section describes the Access Point mode screen for the NW A-3165 . For the NW A-3160 and NW A-3163, see Section 8.7.1 on page 1 13 . Select Access Point as the Operating Mode to display the scree n shown next. RTS/CTS Threshold (Reques[...]

Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 11 5 Figure 64 Wireless: Access Point (NWA-3165) The following table describes the general wireless LAN labels in this screen. T able 36 Wireless: Access Point (NWA-3165) LABEL DESCRIPTION Operating Mode Select Access Point from the drop -down list. 802.1 1 Mode Select 802.1 1b/g[...]

Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 11 6 8.7.3 Bridge/Repeater Mode (NW A-3160 and NW A-3163 Only) The ZyXEL Device can act as a wireless network bridge and establish wireless links with other APs. Y ou need to know the MAC address of the peer device, which also must be in bridge mode. The ZyXEL Device can establis[...]

Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 11 7 Figure 65 Bridging Example Be careful to avoid bridg e loops when you enable bridging in th e ZyXEL Device. Bridge loops cause broadcast traffic to circ le the network endlessly , resulting in possible throughput degradation and disru ption of communications. Th e following [...]

Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 11 8 Figure 67 Bridge Loop: Bridge Connected to Wired LAN T o prevent bridge loops, ensu re that you enable STP in the Wi re l e ss screen or your ZyXEL Device is not set to bridge mode while co nnec ted to both wired and wireless segments of the same LAN. T o have the ZyXEL Devi[...]

Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 11 9 The following table describes the bridge labels in this screen. T able 37 Wireless: Bridge/Repeater (NW A-3160 and NWA-3163 Only) LABEL DESCRIPTIONS Operating Mode Select Bridge/Repeater in this field. 802.1 1 mode Select 802.1 1b Only to allow only IEEE 802.1 1b compliant W[...]

Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 120 See T able 35 on page 1 13 for information on the other labels in this screen. 8.7.4 AP+Bridge Mode (N W A-3160 and NW A-3163 Only) Select AP+Bridge as the Operating Mo de in the WIRELESS > Wir eless screen to have the ZyXEL Device function as a bridge and access point sim[...]

Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 121 Figure 69 Wireless: AP+Bridge See the tables describing the fields in the Access Point and Bridge/Repeater operating modes for descriptions of the fields in this screen. 8.7.5 MBSSID Mode Select MBSSID as the Operating Mode . Refer to Chapter 10 on page 139 for configuration [...]

Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 122[...]

ZyXEL NWA-3160 Series User’s Guide 123 C HAPTER 9 Wireless Security Configuration This chapter describes how to use the Security and RADIUS screens to configure wireless security on your ZyXEL Device. 9.1 Wireless Security Overview W ireless security is vital to your network to pr otect wireless communicat ion between wirele ss stations, access p[...]

Chapter 9 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 124 Y our ZyXEL Device allows you to configure up to four 64-bit, 128-bit or 152-bit WEP keys but only one key can be enabled at any one time. 9.2 802.1x Overview The IEEE 802.1x standard outlines enhanced security methods for both the authentication of wireless station[...]

Chapter 9 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 125 9.4.1 User Authentication WP A applies IEEE 802.1x and Extensible Auth entication Protocol (EAP) to authenticate wireless clients using a RADIUS database. See later in this chapter and the appendices for more information on IEEE 80 2.1x, RADIUS, EAP and PEAP . If yo[...]

Chapter 9 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 126 3 The AP derives and distrib utes key informatio n to the wireless clients. The key itself is not sent over the network, but i s derived from the PSK an d information exchanged between the AP and the client. 4 The AP and wireless clients use the TKIP or AES encrypti[...]

Chapter 9 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 127 Figure 72 WP A(2) with RAD IUS Application Example 9.6 Security Modes The following table describes the security modes you can configure. T able 38 Security Modes SECURITY MODE DESCRIPTION None Select this to have no data encryption. WEP Sele ct this to use WEP encr[...]

Chapter 9 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 128 9.7 Wireless Client WP A Supplicant s A wireless client supplicant is the software that runs on an operating system instructing the wireless client how to use WP A. At the time of writing, the most widely available supplicant is the WP A patch for W indows XP , Funk[...]

Chapter 9 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 129 Figure 73 Wireless > Security The following table describes the labels in this screen. The next screen varies according to the Security Mode you select. 9.9.1 Security: WEP Select WEP in the Security Mode field to display the following screen. " If you use W[...]

Chapter 9 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 130 Figure 74 WIRELESS > Security: WEP The following table describes the labels in this screen. 9.9.2 Security: 802.1x Only Select 802.1x-Only in the Security Mode field to display the following screen. T able 41 Security: WEP LABEL DE SCRIPTION Name T ype a name to [...]

Chapter 9 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 131 Figure 75 Security: 802.1x Only The following table describes the labels in this screen. 9.9.3 Security: 802.1x S tatic 64-bit, 802.1x S t atic 128-bit Select 802.1x S tatic 64 or 802.1x S tatic 128 in the Security Mode field to display the following screen. T able [...]

Chapter 9 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 132 Figure 76 Security: 802.1x Static 64-bit, 802.1x Static 128-bit The following table describes the labels in this screen. T able 43 Security: 802.1x Static 64-b it, 802.1x Sta t ic 128-bit LABEL DESCRIPTION Name T ype a name to identify this secu rity profile. Securi[...]

Chapter 9 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 133 9.9.4 Security: WP A Select WP A in t he Security Mode field to display the followi ng screen. Figure 77 Security: WP A The following table describes the labels in this screen. 9.9.5 Security: WP A2 or WP A2-MIX Select WP A2 or WP A2-M IX in the Security Mode field [...]

Chapter 9 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 134 Figure 78 Security:WP A2 or WP A2-MIX The following table describes the labels not previously discussed T able 45 Security: WPA2 or WPA2-MIX LABEL DE SCRIPTIONS Name T ype a name to identify this security profile. Security Mode Choose WP A2 or WP A2-MIX in this fiel[...]

Chapter 9 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 135 9.9.6 Security: WP A-PSK, WP A2-PSK, WP A2-PSK-MIX Select WP A-PSK , WP A2-PSK or WP A2-PSK-MIX in the Security Mode field to display the following screen. Figure 79 Security: WP A-PSK, W P A2-PSK or WP A2-PSK-MIX The following table describes the labels not previou[...]

Chapter 9 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 136 9.10 Introduction to RADIUS RADIUS is based on a client-sever model that supports authentication and accounting, where the access point is the client and the serve r is the RADIUS server . The RADIUS server handles the following tasks, among others: • Authenticati[...]

Chapter 9 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 137 Backup If the ZyXEL Device ca nnot communicate with the Primary accounting server , you can have the ZyXEL Device use a Backu p RADIUS server . Make sure the Active check boxes are selected if you want to use backup servers. The ZyXEL Device will attempt to communic[...]

Chapter 9 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 138[...]

ZyXEL NWA-3160 Series User’s Guide 139 C HAPTER 10 MBSSID and SSID This chapter describes how to configure and use your ZyXEL Device’ s MBSSID mode and configure SSID profiles. 10.1 Wireless LAN Infrastructures See the W ireless LAN chapter for some basic WLAN scenarios and terminology . 10.1.1 MBSSID T raditionally , you needed to u se differe[...]

Chapter 10 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 140 The switch adds PVID (Port VLAN IDentit y) tags to incoming frames that don’t already have tags (on switch ports wh ere PVI D is enabled). Figure 81 Multiple BSS with VLAN Example 10.1.5 Configur ing Multiple BSSs Click WIRELESS > Wir eless and select MBSSID in the Operating M[...]

Chapter 10 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 141 The following table describes the labels in this screen. T able 48 Wireless: Multiple BSS LABEL DESCRIPTION Operating Mode Select MBSSID in this field to disp lay the screen as shown 802.1 1 Mode Select 802.1 1b Only to allow only I EEE 802.1 1b compliant WLAN devices to associate [...]

Chapter 10 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 142 10.2 SSID When the ZyXEL Device is set to Access Point, AP+Bridge (NW A-3160 and NW A -3163 only) or MBSSID mode, you n e ed to choose the SSID pro file(s) you want to use in your wireless network (see Section 8.6 on page 1 12 for more information on operating modes). Use the WIREL[...]

Chapter 10 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 143 Figure 83 SSID The following table describes the labels in this screen. 10.2.2 Configuring SSID Each SSID profile references the settings configured in the following screens: T able 49 SSID LABEL DESCRIPTION Index This field displays the index number of each SSID profile. Profile N[...]

Chapter 10 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 144 • WIRELESS > Security (one of the security profil es). • WIRELESS > RADIUS (one of the RADIUS profiles). • WIRELESS > MAC Filter (the MAC filter list , if activated in the SSID profile). • WIRELESS > Layer 2 Isolation (the layer 2 isolation list, if activated in[...]

Chapter 10 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 145 QoS Select the Quality of Service priority for this BSS’ s traffic. • In the pre-configured V oIP_SSID profile, the QoS setting is Vo I P . This is not user-con figurable. The Vo I P setting is avail able only on the Vo I P _ S S I D profile, and provides the highest level of Q[...]

Chapter 10 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 146[...]

ZyXEL NWA-3160 Series User’s Guide 147 C HAPTER 11 Other Wireless Configuration This chapter describes how to configure the Layer -2 Isolation and MAC Filter screens on your ZyXEL Device. 1 1.1 Layer-2 Isolation Introduction Layer-2 isol ation is used to prevent wireless clients associated with your ZyXEL Device from communicating with other wire[...]

Chapter 11 Other Wire less Configuration ZyXEL NWA-3160 Series User’s Guide 148 Figure 85 Layer-2 Isolation Application MAC addresses that are not listed in the Allow devices with these MAC addresses table are blocked from communica ting with the ZyXEL Devi ce’ s wireless clients except for broadcast packets. Layer-2 isolation does not check th[...]

Chapter 11 Other Wireless Configu ration ZyXEL NWA-3160 Series User’s Guide 149 Figure 86 WIRELESS > Layer 2 Isolation The following table describes the labels in this screen. 1 1.3 Configuring Layer-2 Isolation T o configure layer-2 isolation, click WIRELESS > Layer-2 Isolation > Edit . The screen appears as shown. " If layer-2 iso[...]

Chapter 11 Other Wire less Configuration ZyXEL NWA-3160 Series User’s Guide 150 Figure 87 WIRELESS > Layer-2 Isolat ion Configuration Screen The following table describes th e labels in this screen. 1 1.3.1 Layer-2 Isolation Examples The following section sho ws you example laye r -2 isolation configur ations on the ZyXEL Device ( A ). T able [...]

Chapter 11 Other Wireless Configu ration ZyXEL NWA-3160 Series User’s Guide 151 " When configuring, remember to select the correct layer-2 isolat ion profile in the WIRELESS > SSID > Edit screen of the relevant SSID profile. Figure 88 Layer-2 Isolation Example Co nfiguration 1 1.3.1.1 Layer-2 Isolation Example 1 In the following exampl[...]

Chapter 11 Other Wire less Configuration ZyXEL NWA-3160 Series User’s Guide 152 Figure 90 Layer-2 Isolation Example 2 1 1.4 The MAC Filter Screen The MAC filter function allows you to configur e the ZyXEL Device to give exclusive access to devices (Allow Association) or exclude de vices from accessing the ZyXEL Device (Deny Association). Every Et[...]

Chapter 11 Other Wireless Configu ration ZyXEL NWA-3160 Series User’s Guide 153 The following table describes the labels in this screen. 1 1.4.1 Configuring MAC Filtering T o change your ZyXEL Device ’ s MAC filter settings, click WIRELESS > MAC Filter > Edit . The screen appears as shown. Figure 92 MAC Addres s Filter T able 53 WIRELESS [...]

Chapter 11 Other Wire less Configuration ZyXEL NWA-3160 Series User’s Guide 154 The following table describes the labels in this screen. " T o activate MAC filtering on an SSID profi le, select the correct filter from the Enable MAC Filtering drop-down list box in the WIRELESS > SSID > Edit screen and click Apply . 1 1.5 Configuring Ro[...]

Chapter 11 Other Wireless Configu ration ZyXEL NWA-3160 Series User’s Guide 155 Figure 93 Roaming Example The steps below describe the roaming process. 1 W ireless station Y moves from the coverage area of access point AP 1 to that of access point AP 2 . 2 W ireless station Y sc ans and detects the signal of access point AP 2 . 3 W ireless statio[...]

Chapter 11 Other Wire less Configuration ZyXEL NWA-3160 Series User’s Guide 156 Figure 94 Roaming Select the Roaming Active check box and click Apply .[...]

ZyXEL NWA-3160 Series User’s Guide 157 C HAPTER 12 IP Screen This chapter discusses how to config ure IP settings on the ZyXEL Device. 12.1 Factory Ethernet Default s The Ethernet parameters of the ZyXEL Device are preset in the fact ory with the following values: 1 IP address of 192.168.1.2 2 Subnet mask of 25 5.255.255.0 (24 bits) These paramet[...]

Chapter 12 IP Screen ZyXEL NWA-3160 Series User’s Guide 158 " Regardless of your p articular situation, do not create an arbitrary IP address; always follow the guidelines above. For more informa tion on address assignment, please refer to RFC 1597, Address Alloc ation for Private Internets and RFC 1466, Guidelines for Manage ment of IP Addr[...]

ZyXEL NWA-3160 Series User’s Guide 159 C HAPTER 13 Rogue AP This chapter discusses rogue wireless access poin ts (APs) and how to c onfigure the ZyXEL Device’ s rogue AP detection feature. " Rogue AP detection features are availab le on the NW A-3160 and NW A-3163 only . 13.1 Rogue AP Introduction A rogue AP is a wireless access point oper[...]

Chapter 13 Rogue AP ZyXEL NWA-3160 Series User’s Guide 160 Figure 96 Rogue AP: Example 13.2.1 “Honeypot” Att ack Rogue APs need not be co nnected to the legitimate network to pose a severe security threat. In the following example, an attacke r ( X ) is stationed in a vehicle outside a company building, using a rogue access point equipped wit[...]

Chapter 13 Rogue AP ZyXEL NWA-3160 Series User’s Guide 161 Figure 97 “Honeypot” Att a ck 13.3 Configuring Rogue AP Detection (NW A-3160 and NW A- 3163 Only) Y ou can configure the ZyXEL Device to detect rogue IEEE 802.1 1a (5 GHz - NW A-3160 only) and IEEE 802.1 1b/g/n (2.4 GHz) APs. " Rogue AP detection is not available on the NW A-3165[...]

Chapter 13 Rogue AP ZyXEL NWA-3160 Series User’s Guide 162 13.3.1 Rogue AP: Configuration Click ROGUE AP > Configu r ation . The following screen appears. Figure 98 ROGUE AP > Configuration The following table describes the labels in this screen. 13.3.2 Rogue AP: Friendly AP The friendly AP list displays deta ils of all the access points in[...]

Chapter 13 Rogue AP ZyXEL NWA-3160 Series User’s Guide 163 Figure 99 ROGUE AP > Friendly AP The following table describes the labels in this screen. 13.3.3 Rogue AP List This list displays details of all IEEE 802.1 1a (NW A-3160 only) and IEEE 802.1 1b/g/n wireless access points within the ZyXEL Devi ce’ s coverage area, except for the ZyXEL[...]

Chapter 13 Rogue AP ZyXEL NWA-3160 Series User’s Guide 164 Figure 100 ROGUE AP > Rogue AP The following table describes the labels in this screen. T able 59 ROGUE AP > Rogue AP LABEL DESCRIPTION Rogue AP List This displays details o f access points in the ZyXEL Device’s coverage area that are not listed in the friendly AP list (see Sect i[...]

ZyXEL NWA-3160 Series User’s Guide 165 C HAPTER 14 Remote Management Screens This chapter provides information on the Remote Management screens. 14.1 Remote Management Overview Remote management allows you to determin e which services/protocols can access which of the ZyXEL Device’ s inte rfaces (if any) from which computers. Y ou may manage yo[...]

Chapter 14 Remo te Management Screens ZyXEL NWA-3160 Series User’s Guide 166 14.2 Configuring T elnet Y ou can configure your ZyXEL Device for remote T elnet access as show n next. The administrator uses T elnet from a computer on a remote netw ork to access the ZyXEL Device. Figure 101 T elnet Configuration on a TCP/IP Network Click the REMOTE M[...]

Chapter 14 Remot e Management Screens ZyXEL NWA-3160 Series User’s Guide 167 14.3 Configuring FTP Y ou can upload and download the ZyXEL Devi ce’ s firmw are and configuration files using FTP , please see the chapter on firmware and configuration file maintenance for details. T o use this feature, your computer must have an FTP client. T o chan[...]

Chapter 14 Remo te Management Screens ZyXEL NWA-3160 Series User’s Guide 168 14.4 Configuring WWW T o change your ZyXEL Device’ s W orld W ide W eb settings, click REMOTE MGNT > WWW . Figure 104 Remote Mana gement: WWW The following table describes the labels in this screen. Secured Client IP Address A secured client is a “trusted” compu[...]

Chapter 14 Remot e Management Screens ZyXEL NWA-3160 Series User’s Guide 169 14.5 SNMP Simple Network Management Protocol (SNM P) i s a protocol used for ex changing management information b e tween network devices. SNMP is a memb er of the TCP/IP protocol suite. Y our ZyXEL Device support s SNMP agent functiona lity , which allows a manager stat[...]

Chapter 14 Remo te Management Screens ZyXEL NWA-3160 Series User’s Guide 170 Figure 105 SNMP Managemen t Model An SNMP managed network consis ts of two main types of comp onent: ag ents and a manager . An agent is a management software module that resi des in a managed device (the ZyXEL Device). An agent translates the local manageme nt informati[...]

Chapter 14 Remot e Management Screens ZyXEL NWA-3160 Series User’s Guide 171 14.5.2 SNMP T rap s The ZyXEL Device can send the following traps to the SNMP manager . 14.6 SNMP T rap Interface Index Some traps include an SNMP in terface index. The following ta ble maps the SNMP interface indexes to the ZyXEL Device’ s physical and virtual ports. [...]

Chapter 14 Remo te Management Screens ZyXEL NWA-3160 Series User’s Guide 172 14.6.1 SNMP v3 and Security SNMP v3 enhances security for SNMP manage ment. SNMP managers can be required to authenticate with agents before co nducting SNMP mana gement sessions. Security can be further enhanced by encryp ting the SNMP mes sages sent from the managers. [...]

Chapter 14 Remot e Management Screens ZyXEL NWA-3160 Series User’s Guide 173 Figure 106 Remote Mana gement: SNMP The following table describes the labels in this screen. T able 66 Remote Managemen t : SNMP LABEL DESCRIPTION SNMP Configuration Get Community Enter the Get Community , which is the password for the incoming Get and GetNext requests f[...]

Chapter 14 Remo te Management Screens ZyXEL NWA-3160 Series User’s Guide 174 14.6.2.1 The SNMPv3 User Profi le Screen (NW A-3165 Only) Use this screen to set up the details of SNMPv3 users. Click Configure SNMPv3 User Profile in the REMOTE MGNT > SNMP scree n. The following screen displays. Figure 107 Remote Manage ment: SNMPv3 User Profile Co[...]

Chapter 14 Remot e Management Screens ZyXEL NWA-3160 Series User’s Guide 175 The following table describes the labels in this screen. T able 67 Remote Management: SNMP User Profile LABEL DESCRIPTION Enable SNMPv3A dmin Select this box to activate the SNMPv3 administration account. The SNMPv3 administrator can issue Get and Set commands to the ZyX[...]

Chapter 14 Remo te Management Screens ZyXEL NWA-3160 Series User’s Guide 176[...]

ZyXEL NWA-3160 Series User’s Guide 177 C HAPTER 15 Internal RADIUS Server The ZyXEL Device can use its interna l RADIUS server to authenticate wireless clients. It ca n also serve as a RADIUS server to authenticate other APs and their wireless clients. For more background information on RADIUS, see Section 9.10 on page 136 . 15.1 Internal RADIUS [...]

Chapter 15 Internal RADIUS Server ZyXEL NWA-3160 Series User’s Guide 178 " The internal RADIUS server does not s upport domain accounts (DOMAIN/user). When you configure your W indows XP SP2 Wireless Ze ro Configuration PEAP/ MS-CHAPv2 settings, deselect the Use W indows logon name and p assword check box. When authentication beg ins, a pop-[...]

Chapter 15 Internal RADIUS Server ZyXEL NWA-3160 Series User’s Guide 179 15.3 T rusted AP Overview A trusted AP is an AP that uses the ZyXEL De vice’ s internal RADIUS server to authenticate its wireless clients. Each wireless client must ha ve a user name and password configured in the AUTH. SER VER > T rusted Users screen. The following fi[...]

Chapter 15 Internal RADIUS Server ZyXEL NWA-3160 Series User’s Guide 180 Figure 109 T rusted AP Overview 1 Configure an IP address and shared secret in the T rusted AP database to authenticate an AP as a trusted AP . 2 Configure wireless client user names and passwords in the T rus ted Users database to use a trusted AP as a relay between the ZyX[...]

Chapter 15 Internal RADIUS Server ZyXEL NWA-3160 Series User’s Guide 181 Figure 1 10 T rusted AP Screen The following table describes the labels in this screen. 15.5 Configuring T rusted Users A trusted user entry consists of a wireless client user name and password. T o configure trusted user entries, click AUTH SERV ER > T rusted Users . The[...]

Chapter 15 Internal RADIUS Server ZyXEL NWA-3160 Series User’s Guide 182 Figure 1 1 1 T ruste d Users Screen The following table describes the labels in this screen. T able 70 Trusted Users LABEL DESCRIPTION # This field displays the trusted user index number . Active Select this check box to have the ZyAIR authenticate wireless c lients with the[...]

ZyXEL NWA-3160 Series User’s Guide 183 C HAPTER 16 Certificates This chapter gives background in formation about public-key certificates and explains how to use them. 16.1 Certificates Overview The ZyXEL Device can use certificates (also ca lled digital IDs) to authenticate users. Certificates are based on public -private key pairs. A certificate[...]

Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 184 Certification authorities maintain directory ser vers with databases of valid and revoked certificates. A directory of certificates that have been revoked before the scheduled exp iration is called a CRL (Certificate Revocation List ). The ZyXEL Device can check a peer ’ s certifica[...]

Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 185 Figure 1 13 Certificate Det ails 4 Use a secure method to verify that the certificate owner ha s the same information in the Thumbprint Algorithm and Thumbprint fields. The secure method may vary according to your situation. Possible examples would be over the telephon e or through an[...]

Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 186 Figure 1 14 My Certificates The following table describes the labels in this screen. T able 71 My Certificates LABEL DESCRIPTION PKI S torage S pace in Use This bar displays the percentage of the Zy XEL Device’s PKI storage space that is currently in use. When you are using 80% or l[...]

Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 187 16.6 Certificate File Format s The certification authority certific ate that yo u want to import ha s to be in one of these file formats: • Binary X.509: This is an ITU-T recommen dation that defines th e formats for X.509 certificates. • PEM (Base-64) encoded X.509: This Priv acy[...]

Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 188 16.7 Importing a Certificate Click CER TIFICA TES > My Certificates and then Import to open the My Certificate Import screen. Follow the instructions in this sc reen to save an exis ting certificate to the ZyXEL Device. " Y ou can import only a certificate that matches a corre[...]

Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 189 16.8 Creating a Certificate Click CER TIFICA TES > My Certificates and then Create to open the My Certifica te Create screen. Use this screen to have the ZyXEL Device create a self-signed certificate, enroll a certificate with a certification authorit y or generate a certification [...]

Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 190 Common Name Select a radio button to identify th e certifica te’s owner by IP address, domain name or e-mail address. T y pe the IP address (in dotted decimal notation), domain name or e-mail address in the field provide d. The domain name or e- mail address can be up to 31 ASCII ch[...]

Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 191 After you click Apply in the My Certificate Create screen, you see a screen that tells you the ZyXEL Device is generating the self-signe d certificate or certification request. After the ZyXEL Device successfully enrolls a ce rtificate or generates a certification request or a self-si[...]

Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 192 Figure 1 17 My Certificate Details The following table describes the labels in this screen. T able 74 My Certificate Details LABEL DESCRIPTION Name This field displays the identifying name of this certificate. If you want to change the name, type up to 31 characters to ident ify this [...]

Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 193 Certificate Path Click the Refresh button to have th is read-only te xt box display the h ierarchy of certification authorities that validate th e ce rtificate (and th e certificate itself). If the issuing certification authority is one that you have imported as a trusted certificatio[...]

Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 194 16.10 T rusted CAs Click CER TIFICA TES > T rusted CAs to open the Tr u s t e d C A s screen. Thi s screen displays a summary list of certificates of the certification authorities that you ha ve set the ZyXEL Device to accept as trusted. The ZyXEL De vice accepts any valid certific[...]

Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 195 The following table describes the labels in this screen. 16.1 1 Importing a T rusted CA ’ s Certificate Click CER TIFICA TES > T rusted CAs to open the T rusted CAs screen and then click Import to open the T rusted CA Import screen. Follow the instructions in this screen to save [...]

Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 196 " Y ou must remove any sp aces from the certificate’ s filename before you can import the certificate. Figure 1 19 T rusted CA Import The following table describes the labels in this screen. 16.12 T rusted CA Certificate Det ails Click CER TIFICA TES > T rusted CAs to open t[...]

Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 197 Figure 120 T rusted CA Details The following table describes the labels in this screen. T able 77 T rusted CA Details LABEL DESCRIPTION Name This field displays the identifying name of this certificate . If you want to change the name, type up to 31 characters to i dentify this ke y c[...]

Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 198 Certifica te Information These read-only fields disp lay detailed information about the certificate . T ype Thi s field displays genera l information about the certificat e. CA-signed me ans that a Certification Authorit y sig ned the certificate. Self-signed means that the certificat[...]

Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 199 SHA1 Fingerprin t This is the cert ificate’s message digest that the ZyXEL Device calculated using the SHA1 algo rithm. Y ou cannot use this va lue to verify that this is the remote host’s actual certificate because the ZyXEL Device has signed the certificate; thus causing this va[...]

Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 200[...]

ZyXEL NWA-3160 Series User’s Guide 201 C HAPTER 17 Log Screens This chapter contains inform ation about configuring genera l log settings and viewing the ZyXEL Device’ s logs. 17.1 Configuring V iew Log The web confi gurator allows you to look at a ll of the ZyXEL Device’ s logs in one location. Click LOGS > V iew Log . U se the Vi e w L o[...]

Chapter 17 Log Scre ens ZyXEL NWA-3160 Series User’s Guide 202 17.2 Configuring Log Settings T o change your ZyXEL De vice’ s log settings, click LOGS > Log Settings . The scre en appears as shown. Use the Log Settings screen to configure to where and when the ZyX EL Device is to send the logs and which logs and/or im mediate alerts it is to[...]

Chapter 17 Log Screens ZyXEL NWA-3160 Series User’s Guide 203 Figure 122 Log Settings The following table describes the labels in this screen. T able 79 Log Settings LABEL DESCRIPTION Address Info Mail Server Enter the server name or the IP address of the mail server for the e-mail addresses specified below . If this field is left blank, logs and[...]

Chapter 17 Log Scre ens ZyXEL NWA-3160 Series User’s Guide 204 17.3 Example Log Messages This section provides descriptions of some example log messages. Log Facility Select a location from the drop down list box. The log facility allows you to log the messages to different files in the syslog server . Refer to the documentation of your syslog pr[...]

Chapter 17 Log Screens ZyXEL NWA-3160 Series User’s Guide 205 TELNET Login Successfully Someone has logged on to the router via te lnet. TELNET Login Fail Someone has failed to log on to the router via telnet. FTP Login Successfully Someone has logged on to the router via FT P . FTP Login Fail Someone has failed to log on to the router via FTP . [...]

Chapter 17 Log Scre ens ZyXEL NWA-3160 Series User’s Guide 206 17.4 Log Commands Go to the command i nterpreter interface (the Comma nd Interpreter a ppendix explains how to access and use the commands). 17.4.1 Configuring What Y ou W ant the ZyXEL Device to Log Use the sys logs load command to load the log se tting buffer th at allows you to con[...]

Chapter 17 Log Screens ZyXEL NWA-3160 Series User’s Guide 207 17.5 Log Command Example This example shows how to set the ZyXEL Device to record the error logs and alerts and then view the results. ras> sys logs load ras> sys logs category error 3 ras> sys logs save ras> sys logs display access #. time source destination notes message [...]

Chapter 17 Log Scre ens ZyXEL NWA-3160 Series User’s Guide 208[...]

ZyXEL NWA-3160 Series User’s Guide 209 C HAPTER 18 VLAN This chapter discusses how to configure VLAN on the ZyXEL Device. 18.1 VLAN A VLAN (V irtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Stations on a logical network can belong to one or more groups. Only stations within the same group can[...]

Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 210 18.2 Configuring VLAN The ZyXEL Device allows you to configure VL AN based on SSID profile (wireless VLAN), and / or based on your RA DIUS server (RADIUS VLAN). • When you use wireless VLAN, the ZyXEL Devi ce tags all packets from an SSID with the VLAN ID you set in the Wir eless VLA N scre[...]

Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 21 1 Figure 123 WIRELESS VLAN The following table describes the labels in this screen T able 84 WIRELESS VLAN FIELD DESCRIPTION Enable VIRTUAL LAN Select this box to enable VLAN tagging. Management VLAN ID Enter a number from 1 to 4094 to define this VLAN group. At least one device in your networ[...]

Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 212 18.2.2 RADIUS VLAN Click VLAN > RADIUS VLAN . The following screen appe ars. Figure 124 RADIUS VLAN VLAN ID Ente r a VLAN ID number from 1 to 4094. Packets coming from the WLAN using this SSID profile are tagged with the VLAN ID number by the ZyXEL Device . Different SSID profil es can use[...]

Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 213 The following table describes the labels in this screen. 18.2.3 Configuring Ma nagement VLAN Example This section shows you how to create a VLAN on an Ethernet switch. By default, the port on the ZyXEL Device is a member of the management VLAN (VLAN ID 1). The followi ng procedure shows you h[...]

Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 214 Figure 125 Management VLAN Con figuration Example Perform the following steps in the switch web configurator: 1 Click VLAN under Advanced Appli c ation . 2 Click St a t i c V L A N . 3 Select the ACTIVE check box. 4 Ty p e a Name for the VLAN ID. 5 Ty p e a VLAN Group ID . This should be the [...]

Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 215 Figure 128 VLAN-Aware Switch - VLAN S tatus Follow the instructions in the Quick S tart Guide to set up yo ur ZyXEL Device for configuration. The ZyXEL Dev ice should be connected to the VLAN-aware switch. In the above example, the switch is using port 1 to connec t to your computer and po rt[...]

Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 216 18.2.4 Configuring Microsof t’ s IAS Server Example Dynamic VLAN assignme nt can be used with the ZyXEL Device . Dynamic VLAN assignment allows network admi nistrators to assign a speci fic VLAN (configured on the ZyXEL Device) to an individual’ s W indows Us er Account. When a wireless s[...]

Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 217 Figure 130 New Global Security Group 2 In VLAN Group ID Pr operties , click the Members tab. • The IAS uses group memberships to determ ine whic h user accounts belong to which VLAN groups. Click the Add button and co nfigure the VLAN group details. 3 Repeat the previous step to add each VL[...]

Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 218 •E n t e r a Policy friendly name that describes the policy . Each Remote Access Policy will be matched to one VLAN Gr oup. An example may be, Allow - VLAN 10 Policy . • Click Nex t . Figure 132 New Remote Access Policy for VLAN Group 2 The Conditions window displays. Select Add to add a [...]

Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 219 Figure 134 Adding VLAN Group 6 When the Permissions options screen displays, select Grant r emote access permission . • Click Nex t to grant access based on group membership. • Click the Edit Profile button. Figure 135 Granting Permission s and User Profile Screen s 7 The Edit Dial-in Pr [...]

Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 220 Figure 136 Authentication T ab Settings 8 Click the Encryption tab. Select the St r o n g e s t encryption option. This step is not required for EAP-MD5, but is performed as a safeguard. Figure 137 Encryption T ab Settings 9 Click the IP tab and select the Client may re quest an IP address ch[...]

Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 221 Figure 138 Connection Attributes Screen 11 The RADIUS Attribute screen displays. From the list, three RADIUS attributes will be added: • T unnel-Medium-T ype • T unnel-Pvt-Group-ID • T unnel-T ype • Click the Add button • Select T unnel-Medium-T ype • Click the Add button. Figure [...]

Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 222 Figure 140 802 Attribute Setting for T unnel-Medium-T ype 13 Return to the RADIUS Attribute Sc reen shown as Figure 139 on page 221 . • Select T unnel-Pvt-Group-ID. • Click Add . 14 The Attribute Information screen displays. •I n t h e Enter the attribute value in: field select St r i n[...]

Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 223 Figure 142 VLAN Attribute Setting for T unnel-T ype 17 Return to the RADIUS Attribute Sc reen shown as Figure 139 on page 221 . • Click the Close button. • The completed Advanced tab configuration should rese mble the following screen. Figure 143 Completed Adva nced T ab " Repeat the[...]

Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 224 18.2.5 Second Rx VLAN ID Example In this example, the ZyXEL Device is configured to tag packets from SSID01 with VLAN ID 1 and tag packets from SSID02 with VLAN ID 2. VLAN 1 and VLAN 2 have access to a server , S , and the Internet, as shown in the following figure. Figure 144 Second Rx VLAN [...]

Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 225 5 Enter a Second Rx VLAN ID . The following screen shows SSID03 tagged with a VLAN ID of 3 and a Second Rx VLAN ID of 4 . Figure 145 Configuring SSID: Second Rx VLAN ID Example 6 Click Apply to save these settings. Outgoi ng packets from clients in SSID03 are tagged with a VLAN ID of 3 , and [...]

Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 226[...]

ZyXEL NWA-3160 Series User’s Guide 227 C HAPTER 19 Maintenance This chapter displays system information such as ZyNOS firmware, port IP addresses and port traffic statistics. 19.1 Maintenance Overview The maintenanc e screens can help you view system in forma tion, upload new firmware, manage configuratio n and restart your ZyXEL Device. 19.2 Sys[...]

Chapter 19 Maintenance ZyXEL NWA-3160 Series User’s Guide 228 19.2.1 System St atistics Click Maintenance > Show S tatistics . Read-only information here includes port status, packet specific statistics and bridge link status . Also provided are "system up time" and "poll interval(s)". The Poll Interval field is configurabl[...]

Chapter 19 Maintenance ZyXEL NWA-3160 Series User’s Guide 229 Figure 148 Associa tion List The following table describes the labels in this screen. 19.4 Channel Usage (NW A-3160 and NW A-3163 Only) The Channel Usage screen shows whether a channel is used by another wireless network or not. If a chan nel is being used, you should select a channel [...]

Chapter 19 Maintenance ZyXEL NWA-3160 Series User’s Guide 230 The following table describes the labels in this screen. 19.5 F/W Upload Screen Find firmware at www .zyxel.com in a file that (usually) uses the system model name with a "*.bin" extension, for exampl e "NW A-3160.bin". The upload process uses HTTP (Hypertext T rans[...]

Chapter 19 Maintenance ZyXEL NWA-3160 Series User’s Guide 231 1 Do not turn off the ZyXEL De vice while firmware upload is in progress! After you see the Firmware Upload in Pr ocess screen, wait two minutes before logging into the ZyXEL Device again. Figure 151 Firmware Uplo ad In Process The ZyXEL Device automatically restarts in this time causi[...]

Chapter 19 Maintenance ZyXEL NWA-3160 Series User’s Guide 232 Figure 153 Firmware Upload Error 19.6 Configuration Screen See Chapter 26 on page 257 for information on how to transf er configuration files using FTP/ TFTP commands. Click MAINTENANCE > Configuration . Information related to factory defaults, back up configuration, and rest oring [...]

Chapter 19 Maintenance ZyXEL NWA-3160 Series User’s Guide 233 19.6.2 Restore Configuration Restore configuration allows you to upload a new or previously saved configuration file from your computer to your ZyXEL Device. 1 Do not turn off the ZyXEL De vice while configuration file upload is in progress. After you see a “restore configuration suc[...]

Chapter 19 Maintenance ZyXEL NWA-3160 Series User’s Guide 234 Figure 157 Configuration Upload Err or 19.6.3 Back to Factory Default s Pressing the Reset button in this section clears al l user-e ntered configuration information and returns the ZyXEL Device to its factory defau lts as shown on the screen. The following warning screen will appear .[...]

235 P ART III SMT , T roubleshooting and S pecifications Introducing the SMT (237) General Setup (243) LAN Setup (245) SNMP Configuration (247) System Password (249) System Information and Diagnosis (251) Firmware and Configuration File Maintenance (257) System Main tenance an d Information (263) T roubleshooting (271) Product Specification s (277)[...]

236[...]

ZyXEL NWA-3160 Series User’s Guide 237 C HAPTER 20 Introducing the SMT This chapter describes how to access the SM T and provides an overview of its menus . " At the time of writing, only the NW A-3165 provides an SMT . 20.1 Introduction to the SMT T he ZyXEL Device’ s SMT (System Management T e rminal) is a menu-driven interface that you [...]

Chapter 20 Introd ucing the SMT ZyXEL NWA-3160 Series User’s Guide 238 Figure 160 Initial Screen 20.2.2 Entering the Password The login screen appears after you press [ENTER ], prompting you to enter the password, as shown below . For your first login, enter th e default password “1234”. As you type the password, the screen displays an “X?[...]

Chapter 20 Introdu cing the SMT ZyXEL NWA-3160 Series User’s Guide 239 " Whether or not you use administrato r authentication on RADIUS, you still use the local system p assword to log in via the console port. Please note that if there is no activity for long er than five minutes after you log in, your ZyXEL Device will automatically log you[...]

Chapter 20 Introd ucing the SMT ZyXEL NWA-3160 Series User’s Guide 240 Figure 163 Menu 23 System Password 3 T ype your new system p a ssword in the New Password field (up to 30 characters), and press [ENTER]. 4 Re-type your new system password in the Retype to confirm field for confirmation and press [ENTER]. Note that as you type a password, the[...]

Chapter 20 Introdu cing the SMT ZyXEL NWA-3160 Series User’s Guide 241 Several operations that you should be fam iliar with before you a ttempt to modify the configuration are listed in the table below . After you enter the password, the SMT di splays the main menu, as shown next. " Not all fields are available in a ll models. T able 94 Main[...]

Chapter 20 Introd ucing the SMT ZyXEL NWA-3160 Series User’s Guide 242 Figure 164 SMT Main Menu 20.6.1 System Manage ment T erminal Interface Summary Copyright (c) 1994 - 2008 ZyXEL Communications Corp. NWA-31 60 Main Menu Getting Started Advanced Management 1. General Setup 22. SNMP Configuration 3. LAN Setup 23. System Security 24. System Maint[...]

ZyXEL NWA-3160 Series User’s Guide 243 C HAPTER 21 General Setup The chapter shows you th e information on general setu p. 21.1 General Setup Menu 1 – General Setup contains administrative and system-related information (shown next). The System Name field is for identification purposes. The Domain Name entry is what is propagated to th e DHCP c[...]

Chapter 21 Gener al Setup ZyXEL NWA-3160 Series User’s Guide 244 IP Address Enter the IP addresses of the DNS servers. This field is availabl e when you select User-Defin ed in the field above. When you have completed this menu, press [ ENTER ] at the prompt “Press ENTER to Confirm…” to save your configur ation, or press [ ESC ] at any time[...]

ZyXEL NWA-3160 Series User’s Guide 245 C HAPTER 22 LAN Setup This chapter shows you how to configure the LAN on your ZyXEL Device. 22.1 LAN Setup This section describes how to configure the Ethernet using Menu 3 – LAN Setup . From the main menu, enter “3 ” to display menu 3. Figure 166 Menu 3 LAN Setup Detailed explanation about the LAN Set[...]

Chapter 22 LAN Set up ZyXEL NWA-3160 Series User’s Guide 246 Follow the instructions in the following table on how to configure the fields in this menu. T able 97 Menu 3.2 TCP/IP Setup FIELD DESCRIPTION IP Address Assignment Press [SP ACE BAR] and then [ENTER] to se lect Dynamic to have the ZyXEL Device obtain an IP address from a DHCP server . Y[...]

ZyXEL NWA-3160 Series User’s Guide 247 C HAPTER 23 SNMP Configuration This chapter explains SNMP Configuration me nu 22. See the web configurator chapter on SNMP for background information. " This menu is available in the NW A-3160 and NW A-3163 only . 23.1 SNMP Configuration T o configure SNMP , select option 22 from the main menu to open M[...]

Chapter 23 SNMP Configuration ZyXEL NWA-3160 Series User’s Guide 248 Tr a p : Community T yp e the trap community , which is the password sent with each trap to the SNMP manager . Destination T yp e the IP address of the station to send your SNMP traps to. When you have completed this menu, press [ENTER] at the prompt “Press ENTER to confirm or[...]

ZyXEL NWA-3160 Series User’s Guide 249 C HAPTER 24 System Password This chapter describes how to configure the ZyXEL Device’ s system password. 24.1 System Password Y ou can configure the system password in this menu. Refer to Section 20.4 on page 239 . Figure 169 Menu 23 System Password Y ou should change the default password. If y ou forget y[...]

Chapter 24 System Password ZyXEL NWA-3160 Series User’s Guide 250[...]

ZyXEL NWA-3160 Series User’s Guide 251 C HAPTER 25 System Information and Diagnosis This chapter covers the information and diag nostic tools in SMT menus 24.1 to 24.4. These tools include updates on system status , port status, log and trace capabiliti es and upgrades for the system software. This chapte r describes how to use these tools in det[...]

Chapter 25 System Information and Diagnosis ZyXEL NWA-3160 Series User’s Guide 252 Figure 171 Menu 24.1 System Maintenan ce: St atus The following table describes the fields present in this menu. Menu 24.1 - Sys tem Maintenance - Status 00:15:06 Sat. Jan. 01, 2000 Port Status TxPkts RxP kts Cols Tx B/s Rx B/s Up Time Ethernet 100M/Full 761 366 0 [...]

Chapter 25 System Information and Diagnosis ZyXEL NWA-3160 Series User’s Guide 253 25.2 System Information T o get to the System Information: 1 Enter “24” to display Menu 24 – System Maintenance . 2 Enter “2” to display Menu 24.2 – System Information and Console Port Speed . 3 From this menu you have two choices as shown in the ne xt [...]

Chapter 25 System Information and Diagnosis ZyXEL NWA-3160 Series User’s Guide 254 25.2.2 Console Port Speed Y ou can set up different port speeds for the console port through Menu 24.2.2 – System Maintenance – Console Port Speed . Y our ZyXEL Device supports 9600 (default), 19200, 38400, 57600 and 11520 0 bps console port sp eeds. Press [SP [...]

Chapter 25 System Information and Diagnosis ZyXEL NWA-3160 Series User’s Guide 255 Figure 175 Menu 24.3 System Maintenance: Log and T race 3 Enter 1 from Menu 24.3 – System Maintenance – Log and T race and press [ENTER] twice to display the error log in the system. After the ZyXEL Device finishes di splaying the error log, you w ill have the [...]

Chapter 25 System Information and Diagnosis ZyXEL NWA-3160 Series User’s Guide 256 The following table describes the diagnostic te sts available in menu 24.4 for your ZyXEL Device and the connections. T able 101 Menu 24.4 System Maintenance Menu: Diagnostic FIELD DESCRIPTION Ping Host Ping the host to see if the links and TC P/IP protocol on both[...]

ZyXEL NWA-3160 Series User’s Guide 257 C HAPTER 26 Firmware and Configuration File Maintenance This chapter tells y ou how to backup an d restor e your configuration file as well as upload new firmware and configuratio n files using the SMT screens. 26.1 Filename Conventions The configuration file (often ca lled the romfile or rom-0) contai ns th[...]

Chapter 26 Firmware and Conf iguration File Main tenance ZyXEL NWA-3160 Series User’s Guide 258 The following table is a summary . Please note that the internal filename refe rs to the filename on the ZyXEL Device and the external filename refers to the filename not on the ZyXEL Device, that is, on your comp uter, local network or FTP site and so[...]

Chapter 26 Firmw are and Co nfiguration File Maintenance ZyXEL NWA-3160 Series User’s Guide 259 Figure 178 FTP Session Example The following table describes some of the co mmands that you may see in third party FTP clients. 26.2.2 Backup Configuration Using TFTP The ZyXEL Device supports the up/downlo ading of the firmware and the configuration f[...]

Chapter 26 Firmware and Conf iguration File Main tenance ZyXEL NWA-3160 Series User’s Guide 260 5 Use the TFTP client (see the example belo w) to transfer files between the ZyXEL Device and the computer . The file na me for the configuration file is rom-0 (rom-zer o , not capital o). Note that the telnet co nnection must be active and the SMT in [...]

Chapter 26 Firmw are and Co nfiguration File Maintenance ZyXEL NWA-3160 Series User’s Guide 261 4 Enter “root” and your SMT passwo rd as requested. The default is 1234. 5 Enter “bin” to set transfer mode to binary . 6 Use “put” to transfer files from the computer to the ZyXEL Device for example “put firmware.bin ras” transfers th [...]

Chapter 26 Firmware and Conf iguration File Main tenance ZyXEL NWA-3160 Series User’s Guide 262 Note that the telnet co nnection must be active and the SMT in CI mode b efore and during the TFTP transfer . For details on TFTP commands (see following example), please consult the documentation of your TFTP client program. Fo r UNIX, use “get” t[...]

ZyXEL NWA-3160 Series User’s Guide 263 C HAPTER 27 System Maintenance and Information This chapter leads you through SM T menus 24.8 and 24.10. 27.1 Command Interpreter Mode The Command Interpreter (CI) is a part of the ma in system firmware. The CI provides much of the same functionality as the SMT , while a dding some low-level se tup and diagn[...]

Chapter 27 System Maintenance and Information ZyXEL NWA-3160 Series User’s Guide 264 " Not all commands are available in all models. Figure 181 V alid CI Commands 27.1.1 Command Synt ax • The command keywords are in courier new font. • Enter the command keywords exactly as shown, do not abbreviate. • The required fields in a command ar[...]

Chapter 27 Syste m Maintenance an d Information ZyXEL NWA-3160 Series User’s Guide 265 This command sets the password protection to bl ock all ac cess attempts for five minutes after the third time an incorrect password is entered. 27.2 T ime and Date Setting The ZyXEL De vice keeps track of t he time and date. There is also a software mechanism [...]

Chapter 27 System Maintenance and Information ZyXEL NWA-3160 Series User’s Guide 266 27.2.1 Resetting the T ime The ZyXEL Device resets the time in three instances: 1 On leaving menu 24.10 after making changes. 2 When the ZyXEL Device starts up, if there is a timeserver configured in menu 24.10. 3 24-hour intervals after starting. 27.3 Remote Man[...]

Chapter 27 Syste m Maintenance an d Information ZyXEL NWA-3160 Series User’s Guide 267 Figure 183 T elnet Configuration on a TCP/IP Network 27.3.2 FTP Y ou can upload and download ZyXEL Dev ice fi rmware and configuratio n files using FTP . T o use this feature, your computer mu st have an FTP client. 27.3.3 We b Y ou can use the ZyX EL Device’[...]

Chapter 27 System Maintenance and Information ZyXEL NWA-3160 Series User’s Guide 268 Figure 184 Menu 24.1 1 Remote Ma nagement Control The following table describes the fields in this menu. Menu 24.11 - Re mote Management Control TELNET Server: Port = 23 Access = ALL Secure Clien t IP = 0.0.0.0 FTP Server: Port = 21 Access = ALL Secure Clien t IP[...]

Chapter 27 Syste m Maintenance an d Information ZyXEL NWA-3160 Series User’s Guide 269 27.3.5 Remote Management Limit ations Remote management over LAN or W AN will not work when: 1 Y ou have disabled that service in menu 24.1 1. 2 The IP address in the Secured Client IP field (menu 24.1 1) does not match the client IP address. If it does not mat[...]

Chapter 27 System Maintenance and Information ZyXEL NWA-3160 Series User’s Guide 270[...]

ZyXEL NWA-3160 Series User’s Guide 271 C HAPTER 28 Troubleshooting This chapter offers some sugg estions to solve problems you might encounter . The potential problems are divided into the following categories. • Power , Hardware Connections, and LEDs • ZyXEL Device Access and Login • Internet Access • W ireless Router/A P T roubles hooti[...]

Chapter 28 Trou bleshooting ZyXEL NWA-3160 Series User’s Guide 272 28.2 ZyXEL Device Access and Login V I forgot the IP address for the ZyXEL Device. 1 The default IP address is 192.168.1.2 . 2 If you changed the IP addre ss and have forgotten it, you might get the IP address o f the ZyXEL Device by looking up th e IP address of the default gate [...]

Chapter 28 Trou bleshooting ZyXEL NWA-3160 Series User’s Guide 273 Advanced Suggestions • T ry to access the ZyXEL Device using anot her service, such as T elnet. If you can access the ZyXEL Device, check the remote manage ment settings to find out why the ZyXEL Device does not respond to HTTP . • If your computer is connected to the WA N por[...]

Chapter 28 Trou bleshooting ZyXEL NWA-3160 Series User’s Guide 274 28.3 Internet Access V I cannot access the Internet. 1 Check the hardware connections , and make su re the LEDs are be having as expected. Se e the Quick S tart Guide and Section 28.1 on pa ge 271 . 2 Make sure you entered your ISP account in formation correctly . These fields are[...]

Chapter 28 Trou bleshooting ZyXEL NWA-3160 Series User’s Guide 275 28.4 Wireless Router/AP T roubleshooting V I cannot access the ZyXEL Device or ping a ny computer from the WLAN. 1 Make sure the wireless LAN is enabled on the ZyXEL Device 2 Make sure the wireless adapter on the wireless station is working properly . 3 Make sure the wireless adap[...]

Chapter 28 Trou bleshooting ZyXEL NWA-3160 Series User’s Guide 276[...]

ZyXEL NWA-3160 Series User’s Guide 277 C HAPTER 29 Product Specifications The following tables summarize the ZyXEL De vice’ s hardware and firmware features. T able 108 Hardware Specifications SPECIFICATIO N DESCRIPTION Dimensions 190x 135 x 40 mm Weight NW A-3160: 4 20g NW A-3163: 4 20g NW A-3165: 3 92g Power 12V DC, 1.5 A max. (T here is no t[...]

Chapter 29 Product Specifications ZyXEL NWA-3160 Series User’s Guide 278 Output Power NW A-3160: IEEE 802.1 1b/g 54Mbps: 16dBm 24Mbps: 17dBm 6Mbps: 18dBm 1 1Mp bs: 18dBm IEEE 802.1 1a 54Mbps: 12dBm 24Mbps: 12dBm 6Mbps: 14dBm 1 1Mp bs: 14dBm NW A-3163: IEEE 802.1 1b/g 54Mbps: 20dBm 24Mbps: 21dBm 1 1Mp bs: 23dBm 6Mbps: 23dBm NW A-3165: IEEE 802.1 1[...]

Chapter 29 Product Specifications ZyXEL NWA-3160 Series User’s Guide 279 Approvals EMC: FCC Class B, CE-EMC Class B, C-T ick Class B, Safety: CSA International, CE EN60950-1 Plenum Rating The ZyXEL Device’s housing is treated with fire-retardant chemicals. In the event of fire, plenum-rated materials burn more slowly an d produce less smoke tha[...]

Chapter 29 Product Specifications ZyXEL NWA-3160 Series User’s Guide 280 W all-mounting Instructions Complete the following step s to hang your ZyXEL Device on a wall. " See T able 108 on p age 277 for the size of screws to use and how far a part to place them. 1 Select a position free of obstructions on a sturdy wall. 2 Drill two holes for [...]

Chapter 29 Product Specifications ZyXEL NWA-3160 Series User’s Guide 281 Figure 185 W all-mounting Example The following are dimension s of an M4 tap screw and masonry plug used for wall mounting. All measurements are in millimeters (mm). Figure 186 Masonry Plug and M4 T ap Screw Power Adaptor Specifications T able 1 10 North American Plug Standa[...]

Chapter 29 Product Specifications ZyXEL NWA-3160 Series User’s Guide 282 Power over Ethernet (PoE) S pecifications Y ou can use a power over Et hernet injector to power this device . The injector must comply to IEEE 802.3af. Power Co nsumption 6 W Max Safety S tandards UL, CUL (UL60950 Third Ed ition, CSA C22.2 No. 60950) Ta b l e 1 11 European P[...]

Chapter 29 Product Specifications ZyXEL NWA-3160 Series User’s Guide 283 1 Output T ransmit Data + 2 Output T ransmit Data - 3 Receive Da ta + 4 Power + 5 Power + 6 Receive Da ta - 7 Power - 8 Power - T able 1 15 Power over Ethernet Injector RJ-45 Port Pin Assignments 123456 78[...]

Chapter 29 Product Specifications ZyXEL NWA-3160 Series User’s Guide 284[...]

285 P ART IV Appendices and Index Setting up Y our Computer ’ s IP Address (263) W ireless LANs (299) Pop-up W indows, JavaScripts and Java Permissions (313) IP Addresses and Subnetting (319) T ext File Based Auto Configuration (327) Legal Information (335) Customer Support (339) Index (345)[...]

286[...]

ZyXEL NWA-3160 Series User’s Guide 287 A PPENDIX A Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed. W indows 95/98/Me/NT/2000/XP , Macintosh OS 7 and later opera ting systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/ [...]

Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 288 Figure 187 WIndows 95/98 /Me: Networ k: Configuratio n Inst alling Components The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microsoft Netwo rks. If you need the [...]

Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 289 Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab. • If your IP address is dynamic, select Obtain an IP address automatically . • If you have a static IP[...]

Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 290 Figure 189 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know you r gateway’ s IP addr ess, remove previously installed gateways. • If you have a gateway IP address, type it in the New gateway field a[...]

Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 291 Figure 190 Windows XP: S tart Menu 2 For W indows XP , click Network Connections . For W indows 2000/NT , click Network and Dial-up Connections . Figure 191 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .[...]

Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 292 Figure 192 Windows XP: Control Panel: Network Connections: Pro perties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and click Properties . Figure 193 Windows XP: Local Area Conne ction Properties 5 The Internet Protocol TCP/IP Pr o[...]

Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 293 Figure 194 Windows XP: Advanced TCP/IP Settings 6 If you do not know your gateway's IP address, remove any previously installe d gateways in the IP Settin gs tab and click OK . Do one or more of the fo llowing if you want to configure additi onal IP add[...]

Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 294 If you have previously co nfigured DNS servers, click Advanced and then the DNS tab to order them. Figure 195 Windows XP: Internet Protocol (TCP/IP) Propert ies 8 Click OK to close the Internet Protocol (TCP/IP) Properties window . 9 Click OK to close the Lo[...]

Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 295 Figure 196 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 197 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list. 4 For statically assigned settings, do[...]

Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 296 • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of your ZyXEL Device in the Router address box. 5 Close the TCP/IP Contr ol Panel . 6 Click Save if prompted, to save chan ges to you[...]

Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 297 Figure 199 Macintosh O S X: Netw ork 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP [...]

Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 298[...]

ZyXEL NWA-3160 Series User’s Guide 299 A PPENDIX B W ireless LANs Wireless LAN T opologies This section discusses ad-hoc and in frastructure w ireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an inde pendent (Ad-hoc) WLAN that connects a se t of computers with wireless adapters (A, B, C). An y time two [...]

Appendix B Wireless LANs ZyXEL NWA-3160 Series User’s Guide 300 Figure 201 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS). This type o[...]

Appendix B Wir eless LANs ZyXEL NWA-3160 Series User’s Guide 301 Figure 202 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.1 1a/b/g wireless devices. Channels available depend on your ge ographical area. Y ou may have a choice of channels (for your region) so you should use a dif ferent channel th an an adjacen[...]

Appendix B Wireless LANs ZyXEL NWA-3160 Series User’s Guide 302 Figure 203 RTS /C T S When station A sends data to the AP , it might not know that the station B is already using the channel. If these two stations se nd data at the same time, collis ions may occur when both sets of data arrive at the AP at the same time, r esulting in a loss of me[...]

Appendix B Wir eless LANs ZyXEL NWA-3160 Series User’s Guide 303 If the Fragmentation Threshold value is smaller than the RT S /C T S value (see previously) you set then the R TS (Request T o Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmen ted before they reach R TS/CTS size. Preamble T ype Preamble is used to [...]

Appendix B Wireless LANs ZyXEL NWA-3160 Series User’s Guide 304 W ireless security methods availabl e on the ZyXEL Device are data encryption, wireless client authentication, restricting access by devi ce MAC address and hiding the ZyXEL Device identity . The following figure shows th e relative effectiveness of th ese wireless security methods a[...]

Appendix B Wir eless LANs ZyXEL NWA-3160 Series User’s Guide 305 Determines the network services available to authenticated users once they are connected to the network. • Accounting Keeps track of the client’ s network activity . RADIUS is a simple package exchange in whic h your AP acts as a message rela y between the wireless client and th[...]

Appendix B Wireless LANs ZyXEL NWA-3160 Series User’s Guide 306 For EAP-TLS authentication type, you must firs t hav e a wired connection to the network and obtain the certificate(s) from a certificate authorit y (CA). A certificate (als o called digital IDs) can be used to authenticate users and a CA issu es certificates and guar antees the iden[...]

Appendix B Wir eless LANs ZyXEL NWA-3160 Series User’s Guide 307 Dynamic WEP Key Exchange The AP maps a unique ke y that is generated w ith the RADIUS se rver . This key expires when the wireless connection times out, disconnects or reauthentic ation times out. A new WEP key is generated each time r eauthentication is performed. If this feature i[...]

Appendix B Wireless LANs ZyXEL NWA-3160 Series User’s Guide 308 Encryption Both WP A and WP A2 improve data encryp tion by using T emporal Key Integrity Protocol (TKIP), Message Integrity Check (MIC) and IE EE 802.1x. WP A and WP A2 use Advanced Encryption S tandard (AES) in the Counter mode with Cipher block chaining Message authentication code [...]

Appendix B Wir eless LANs ZyXEL NWA-3160 Series User’s Guide 309 Wireless Client WP A Supplicant s A wireless client supplicant is the software that runs on an operating system instructing the wireless client how to use WP A. At the time of writing, the most widely available supplicant is the WP A patch for W indows XP , Funk Software's Odys[...]

Appendix B Wireless LANs ZyXEL NWA-3160 Series User’s Guide 310 4 The AP and wireless clients use the TKIP or AES encryption process to encrypt data exchanged between them. Figure 205 WP A(2)-PSK Authentication Security Parameters Summary Refer to this table to see what other secur ity parameters you should configure for each Authentication Metho[...]

Appendix B Wir eless LANs ZyXEL NWA-3160 Series User’s Guide 31 1 Antenna Characteristics Frequency An antenna in the frequency of 2.4GHz (IEEE 802.11 b) or 5GHz(IEEE 802.1 1a) is needed to communicate efficiently in a wireless LAN. Radiation Pattern A radiation pattern is a diagra m that allows you to visualize the shape of the antenna’ s cove[...]

Appendix B Wireless LANs ZyXEL NWA-3160 Series User’s Guide 312 For omni-directional antennas mounted on a table, desk, and so on, point the antenna up. For omni-directional antennas mounted on a wall or ceiling, point the antenn a down. For a single AP application, place omni-directional antennas as close to the center of the coverage area as po[...]

ZyXEL NWA-3160 Series User’s Guide 313 A PPENDIX C Pop-up Windows, JavaScript s and Java Permissions In order to use the web configurator you need to allow: • W eb browser pop-u p windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). " Internet Explorer 6 screens are u sed here. Screens [...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions ZyXEL NWA-3160 Series User’s Guide 314 2 Clear the Block pop-ups check box in the Pop-up Block e r section of the screen. This disables any web po p-up blockers you may have enabled . Figure 207 Internet Options: Privacy 3 Click Apply to save this setting. Enable pop-up Blockers with Ex[...]

Appendix C Pop-up Windows, JavaScripts and Java Per m issions ZyXEL NWA-3160 Series User’s Guide 315 Figure 208 Internet Options: Privacy 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. 4 Click Add to move the IP address to the list of Allo[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions ZyXEL NWA-3160 Series User’s Guide 316 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript s If pages of the web configura tor do not display properly in Internet Explorer , ch eck that JavaScripts are allowed. 1 In Internet Explorer , click T o[...]

Appendix C Pop-up Windows, JavaScripts and Java Per m issions ZyXEL NWA-3160 Series User’s Guide 317 Figure 21 1 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click To o l s , Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM . 4 Under Java permissions ma[...]

Appendix C Pop-up Windows, JavaScripts and Java Perm issions ZyXEL NWA-3160 Series User’s Guide 318 JA V A (Sun) 1 From Internet Explorer , click To o l s , Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is sele cted. 3 Click OK to clos e the window . Figure 213 Java (Sun)[...]

ZyXEL NWA-3160 Series User’s Guide 319 A PPENDIX D IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify ind ividual devices on a network. Every networking device (includin g computers, servers, routers, printe rs, etc.) ne eds an IP address to communicate across the network. These networking de[...]

Appendix D IP Addresses a nd Subnetting ZyXEL NWA-3160 Series User’s Guide 320 Figure 214 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the s ubnet mask. Subnet Masks A subnet mask is used to dete rmine which bits are part of th e network number , and which bits are par[...]

Appendix D IP Addresses and Subnetting ZyXEL NWA-3160 Series User’s Guide 321 Subnet masks are expressed in dotted decimal no tation just like IP addresses. The follow ing examples show the binary and decimal not ation for 8-bit, 16-bit, 24-bit an d 29-bit subnet masks. Network Size The size of the network number determines the maximum number of [...]

Appendix D IP Addresses a nd Subnetting ZyXEL NWA-3160 Series User’s Guide 322 Subnetting Y ou can use subnetting to divide one network into multiple sub-networks. In the following example a network administrator creates two sub-networks to isolate a group of servers from the rest of the c ompany network for security reasons. In this example, the[...]

Appendix D IP Addresses and Subnetting ZyXEL NWA-3160 Series User’s Guide 323 Figure 216 Subnetting Example: Af ter Subnetting In a 25-bit subnet the host ID has 7 bits , so each sub-network has a maximum of 2 7 – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’ s address itself, all ones is the subnet’ s broadcast address). [...]

Appendix D IP Addresses a nd Subnetting ZyXEL NWA-3160 Series User’s Guide 324 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subnets (000, 00 1, 010, 01 1, 100, 101, 1 10 and 111 ) . The following table shows IP address last octet values for each subnet. T able 125 Subnet 2 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BI T VA [...]

Appendix D IP Addresses and Subnetting ZyXEL NWA-3160 Series User’s Guide 325 Subnet Planning The following table is a summary for su bnet planning on a network with a 24-bit network number . The following table is a summary for su bnet planning on a network with a 16-bit network number . 5 128 129 158 159 6 160 161 190 191 7 192 193 222 223 8 22[...]

Appendix D IP Addresses a nd Subnetting ZyXEL NWA-3160 Series User’s Guide 326 Configuring IP Addresses Where you obtain your netwo rk number depends on yo ur particular situation. If the ISP or your network administrator assigns yo u a bloc k of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.[...]

ZyXEL NWA-3160 Series User’s Guide 327 A PPENDIX E T ext File Based Auto Configuration This chapter describes how admini strators can use text configuration files to configure the wireless LAN settings for multiple APs. T ext File Based Auto Configuration Overview Y ou can use plain text configuration files to configure the wireless LAN settings [...]

Appendix E Tex t File Ba sed Auto Configuration ZyXEL NWA-3160 Series User’s Guide 328 " If adjacent APs use the same c onfiguration file, you should leave out the channel setting since they could in terfere with each other ’s wire less traffic. Auto Configuration by DHCP A DHCP response can use options 66 and 67 to assign a TFTP server IP[...]

Appendix E Text File Based Auto Configuration ZyXEL NWA-3160 Series User’s Guide 329 V erifying Y our Configuration File Upload Via SNMP Y ou can use SNMP management software t o disp lay the configuration file version cu rrently on the device by using the fol lowing MIB. T roubleshooting Via SNMP If you have any dif ficulties with the configurat[...]

Appendix E Tex t File Ba sed Auto Configuration ZyXEL NWA-3160 Series User’s Guide 330 If there are any errors while processing the config uration file, the AP generates a message with the line number and reason for the first error (s ubsequent errors during the processing of an individual config uration file are not recorded). Y ou can use SNMP [...]

Appendix E Text File Based Auto Configuration ZyXEL NWA-3160 Series User’s Guide 331 Figure 220 802.1X Configuration File Example Figure 221 WP A-PSK Configuration File Example !#ZYXEL PROWLAN !#VERSION 12 wcfg security 2 name Test-8021x wcfg security 2 mode 8021x-static12 8 wcfg security 2 wep key1 abcdefghijk lm wcfg security 2 wep key2 bcdefgh[...]

Appendix E Tex t File Ba sed Auto Configuration ZyXEL NWA-3160 Series User’s Guide 332 Figure 222 WP A Configuration File Example Wlan Command Configuration File Example This example configur ation file uses the wlan command to configure the AP to use the security and SSID profiles from the wcfg command configuratio n f ile examples and general w[...]

Appendix E Text File Based Auto Configuration ZyXEL NWA-3160 Series User’s Guide 333 Figure 223 Wlan Configuration File Example !#ZYXEL PROWLAN !#VERSION 15 wcfg ssid 1 name ssid-wep wcfg ssid 1 security Test-wep wcfg ssid 2 name ssid-8021x wcfg ssid 2 security Test-8021x wcfg ssid 2 radius radius-rd wcfg ssid 3 name ssid-wpapsk wcfg ssid 3 secur[...]

Appendix E Tex t File Ba sed Auto Configuration ZyXEL NWA-3160 Series User’s Guide 334[...]

ZyXEL NWA-3160 Series User’s Guide 335 A PPENDIX F Legal Information Copyright Copyright © 2008 by ZyXEL Communications Corporation. The contents of this publication may not be reprod uced in any part or as a whole, transcribed, stored in a retrieval system, tran slated into any language, or transmitted in any form or by any means, el ectronic, [...]

Appendix F L egal Information ZyXEL NWA-3160 Series User’s Guide 336 If this device does cause harmful inte rference to radio/television reception, which can be determined by turning th e device off and on, the user is enc ouraged to try to correct the interference by one or more of the following measures: 1 Reorient or relocate the receiving ant[...]

Appendix F Legal Information ZyXEL NWA-3160 Series User’s Guide 337 Vie wing Certifications 1 Go to http://www .zyxel.com . 2 Select your product on the ZyXEL home pag e to go to that product's page. 3 Select the certification you wish to view from this page. ZyXEL Limited W arranty ZyXEL warrants to the original en d user (purchaser) that t[...]

Appendix F L egal Information ZyXEL NWA-3160 Series User’s Guide 338[...]

[Document Title] 339 A PPENDIX G Customer Support In the event of problems that cannot be solved by using this manual, you should contact your vendor . If you cannot contact yo ur vendor , then contac t a ZyXEL office for the region in which you bought the dev ice. Regional of fices are listed below (see also http:// www .zyxel.com/web/conta ct_us.[...]

Appendix G Custo mer Support [Document Title] 340 • Address: 1005F , ShengGao Internationa l T ower , No.137 XianXia Rd., Shanghai • W eb: http://www .zyxel.cn Cost a Rica • Support E-mail: soporte@zyxel.co.cr • Sales E-mail: sales@zyxel.co.cr • T elephone: +506-2017878 • Fax: +506-2 015098 • W eb: www .zyxel.co.cr • Re g u l ar M a[...]

Appendix G Custome r Support [Document Title] 341 Germany • Support E-mail: support@zyxel.de • Sales E-mail: sales@zyxel.de • T elephone: +49-2405-6909-69 • Fax: +49-2405-6909-99 • W eb: www .zyxel.de • Re g ul a r Ma i l: ZyXEL Deut schland GmbH., Adenauerstr . 20/A2 D-52146, W u erselen, Germany Hungary • Support E-mail: support@zyx[...]

Appendix G Custo mer Support [Document Title] 342 Malaysia • Support E-mail: support@zyxel.com.my • Sales E-mail: sales@zyxel.com.my • T elephone: +603-8076-9933 • Fax: +603-8076- 9833 • W eb: http://www .zyxel.com.my • Regular Mail: ZyXEL Malaysia Sdn Bhd., 1-02 & 1-03, Jalan Kenari 17F , Bandar Puchong Jaya, 47100 Puchong, Selango[...]

Appendix G Custome r Support [Document Title] 343 Singapore • Support E-mail: support@zyxel.com.sg • Sales E-mail: sales@zyxel.com.sg • T elephone: +65-6899-6678 • Fax: +65-6899-8887 • W eb: http://www .zyxel.com.sg • Regular Mail: ZyXEL Singapore Pte Ltd., No. 2 International Business Park, The Strategy #03-28, Sin gapore 609930 Spain [...]

Appendix G Custo mer Support [Document Title] 344 T urkey • Support E-mail: cso@zyxel.com.tr • T elephone: +90 212 222 55 22 • Fax: +90-212-220-2 526 • W eb: http:www .zyxel.com.tr • Address: Kaptanpasa Mahallesi Piyalep asa Bulvari Ortadogu Plaza N:14/13 K:6 Okmeydani/Sisli Istanbul/T urkey Ukraine • Support E-mail: su pport@ua.zyxel.c[...]

Index ZyXEL NWA-3160 Series User’s Guide 345 Index A access 34 access point 34 access privileges 36 address assignment 157 address filtering 33 administrator authentication on RADIU S 100 Advanced Encryption St andard See AES. AES 308 alternative subnet mask notation 321 antenna 277 directional 31 1 gain 31 1 omni-directional 31 1 AP 33 , 34 , 35[...]

Index ZyXEL NWA-3160 Series User’s Guide 346 DiffServ 109 DiffServ Code Point (DSCP) 109 DiffServ Code Points 109 DiffServ marking rule 11 0 disclaimer 335 Distribution System 106 DS field 109 DSCPs 109 Dynamic Frequency Selection 11 2 dynamic WEP key exchange 307 E EAP 123 , 124 EAP authentication 305 encryption 36 , 125 , 30 8 error log 254 err[...]

Index ZyXEL NWA-3160 Series User’s Guide 347 MAC address filter actio n 154 MAC filter 37 , 123 , 152 MAC filtering 279 MAC service dat a unit 94 , 11 4 , 11 5 , 11 9 , 141 main menu 241 maintenance 33 management 33 management AP 83 Management Information Base (MIB) 170 management VLAN 213 managing the device good habits 38 using FTP . See FTP . [...]

Index ZyXEL NWA-3160 Series User’s Guide 348 threshold 301 , 302 RTS/CTS handshake 94 , 11 4 , 11 5 , 11 9 , 141 S safety warnings 6 screws 280 security 34 security profiles 33 server 33 Service Set 11 4 , 11 6 , 141 Service Set Identifier see SSID SMT 240 SMT menu overview 240 SNMP 169 , 28 0 community 247 configuration 247 manager 170 MIBs 170 [...]

Index ZyXEL NWA-3160 Series User’s Guide 349 W warranty 337 note 337 wcfg command 330 WDS 34 , 36 , 11 6 web 168 web configurator 33 , 43 , 45 WEP 33 WEP encryption 123 , 130 Wi-Fi Multimedia QoS 107 Wi-Fi Protected Access 33 , 307 wired network 33 , 34 wireless channel 275 wireless client WP A supplicants 128 , 30 9 Wireless Distribution System [...]

Index ZyXEL NWA-3160 Series User’s Guide 350[...]