ZyXEL Communications 100-NH manual

Quick Start Guide www .zyxel.com NWA1000 Series NW A 1100-NH / 1121-NI / 1123-NI / 1123- AC WLAN P oE Access P oints V e rsion 2.00 Edition 1, 06/2014 Copyright © 2014 Z yXEL Communications Corpor ation User’s Guide Default Login Details LAN IP Address http://192.168.1.2 User Name admin P assword 1234[...]

NWA1000 Series U ser’s Guide 2 IMPORT ANT! READ CAREFULL Y BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. This is a User’s Gu ide for a series of products. Not all products support all firmware features. Screenshots and graphics in this book may differ sl ightly from your product due to differences in your product firmware o r your computer [...]

Contents Overview NWA1000 Series User’ s Guide 3 Contents Overview User ’ s Guide .............................................................................. .................................... ....................... 8 Introducing the NWA ................. ................ ................ ................ ................ ............. ..[...]

Table of Contents NWA1000 Series U ser’s Guide 4 Table of Contents Contents Overview .............................................................................. ............................... ................. 3 Table of Contents ................................................. ..................................................... ..........[...]

Table of Contents NWA1000 Series User’ s Guide 5 Chapter 4 T utorial ................................................................... .................................................... ............ .............. 28 4.1 How to Configure the Wirele ss LAN .... ................ ............. ................ ................ ............. ....[...]

Table of Contents NWA1000 Series U ser’s Guide 6 6.6 Wireless Security S creen ....... ................ ............. ................ ................ ................ .............. ...... .......... 72 6.6.1 Security: WEP ................. ................ ............. ................ ................ ................. ............ .... ....[...]

Table of Contents NWA1000 Series User’ s Guide 7 9.3 What Y ou Need T o Know .... ............. ................ ................ ................ ................ ................ .... ........... 106 9.4 Log Settings Screen .. ................ ................ ................ ................. ............ ................. ....... ...........[...]

8 P ART I User ’ s Guide[...]

NWA1000 Series User’ s Guide 9 C HAPTER 1 Introducing the NWA This chapter introduces the main applications and features of the NWA. It also discusses the w ays you can manage yo ur NWA. 1.1 Introducing the NW A This User’s Guide covers the following models: NW A1100 -NH, NWA1121-NI, NW A1123-NI and NW A1123-AC. Y our NWA is an IPv6 wireless AP[...]

Chapter 1 Introducing the NWA NWA1000 Series U ser’s Guide 10 downloading while using the 5 GHz band for time sensitive tr affic like high-definition video, music, and gaming. Figure 1 Dual-Band Application 1.2 Wireless Modes The NWA can be configured to use the following WLAN operating modes: Applications for each operating mode are shown below [...]

Chapter 1 Introducing the NWA NWA1000 Series User’ s Guide 11 T o the wireless clients in the network, each SSID appears to be a different access point. As in any wireless network, clients can associate only with th e SSIDs for which they have the correct security settings. F or example, you might want to set up a wireless network i n your office[...]

Chapter 1 Introducing the NWA NWA1000 Series U ser’s Guide 12 In the figure below , the printer can receiv e requests from the wired computer clients A and B via the NW A in Client mode ( Z ) using only the 2.4 GHz band. Figure 3 Wireless Client Application[...]

Chapter 1 Introducing the NWA NWA1000 Series User’ s Guide 13 1.2.3 Root AP In Root AP mode, the NWA ( Z ) can act as the root AP in a wireless network and also al low repeaters ( X and Y ) to extend the r ange of its wireless network at the same time. In the figu re below , both clients A , B and C can access the wired netwo rk through the root [...]

Chapter 1 Introducing the NWA NWA1000 Series U ser’s Guide 14 clients and the wired LAN. Clients A and B access the AP and the wired network behind the AP through repeaters Z and Y . Figure 5 Repeater Application When the NWA is in R epeater mode, repeater s e curit y between the NW A and other repeater is independent of the security betw een the[...]

Chapter 1 Introducing the NWA NWA1000 Series User’ s Guide 15 1.4 Configuring Y our NW A’ s Security Features Y our NWA comes with a v ariety of security feat ures. This section summarizes these features and provides links to sections in the User’s Guide to configure security settings on your NW A. Follow the suggestions below to improve secu[...]

Chapter 1 Introducing the NWA NWA1000 Series U ser’s Guide 16 • Back up the configur ation (and make sure y ou know how to restore it). R estoring an earlier working configur ation may be useful if the devi ce becomes unstable or even crashes. If y ou forget your password, you will hav e to reset the NW A to its factory default settings. If you[...]

Chapter 1 Introducing the NWA NWA1000 Series User’ s Guide 17 WLAN Green On The WLAN is activ e. Blinking The W LAN is transmitting or receiving data. Off The WLAN is not ac tive. UPLINK Green On The port is connected. Blinking The NWA is sending/receivi ng data through th e port. Off The port is not c onnected. T a ble 2 LED (continued) LED COLO[...]

NWA1000 Series User’ s Guide 18 C HAPTER 2 Introducing the Web Configurator This chapter describes how to access the NWA’ s web configurator and provides an o verview of its screens. 2.1 Overview The NWA W eb Configur ator allows easy management using an Internet browser . In order to use the W eb Configurator , you must: • Use Internet Explo[...]

Chapter 2 Introducin g the Web Configurator NWA1000 Series User’ s Guide 19 3 T ype “192.168.1.2” as the URL (default). The login screen appears. Figure 7 The Login Screen 4 T ype “admin” as the (defaul t) username an d “1234” as the (default) password. Click Login . 5 Y ou should see a screen asking you to change y our password (high[...]

Chapter 2 Introducing the Web Configurator NWA1000 Series U ser’s Guide 20 2.3 Resetting the NW A If you forget your password or cannot access the web configur ator , you will need to use the RESET button at the rear panel of the NW A. This replaces the current configuration file with the factory- default configuration file. This means that y ou [...]

Chapter 2 Introducin g the Web Configurator NWA1000 Series User’ s Guide 21 2.4 Navigating the W eb Configurator The following summarizes how to navigate the web configur ator from the Dashboard screen. This guide uses the NWA1100-NH screens as an exampl e. The screens may v ary slightly for different models. Figure 10 Status Screen of the W eb C[...]

Chapter 2 Introducing the Web Configurator NWA1000 Series U ser’s Guide 22 2.4.2 Navigation Panel Use the menu items on the nav igation panel to open screens to configure NW A features. The following tables describe each menu item. T a ble 3 Navigation Panel Summary LINK TA B FUNCTION Dashboard This screen shows the NWA’ s general device and ne[...]

Chapter 2 Introducin g the Web Configurator NWA1000 Series User’ s Guide 23 2.4.3 Main Window The main window displays information and configurat ion fields. It is discussed in the rest of this document. Configuration File Use this scre en to backup and restore your device’s configuration (settings) or reset the factory defau lt settings. Resta[...]

NWA1000 Series User’ s Guide 24 C HAPTER 3 Dashboard The Dashboard screens display when you log into the NW A, or click Dashboard in the navigation menu. Use the Dashboard screen to look at the current status of the device, system resources, and interfaces. The Dashboard screens also provide detailed information about system statistics, associate[...]

Chapter 3 Dashboard NWA1000 Series User’ s Guide 25 Click Dashboard . The following screen displays. Figure 1 1 The Dashboard Screen (NW A1100-NH) Figure 12 The Dashboard Screen (NWA1123-NI or NW A1123-AC)[...]

Chapter 3 Dashboa rd NWA1000 Series U ser’s Guide 26 The following table describes the labels in this screen. T a ble 4 The Dashboard Screen LABEL DESCRIPTION Refresh Interv al Select ho w often you want the NWA to update this screen. Refresh Now Click this to upda te this scre en immediately . System Information System Name This field displays t[...]

Chapter 3 Dashboard NWA1000 Series User’ s Guide 27 View Log Click this to see a list of logs produced by the NW A. See Section 5.3 on page 46 . System S tatus System Up Time This field dis plays the el apsed time since the NWA was turned on. Current Date/Time This field displays the date and time configured on th e NWA. Y ou can change this in t[...]

NWA1000 Series User’ s Guide 28 C HAPTER 4 Tutorial This chapter first provides an ov erview of how to configure the wireless LAN on your NW A, and then gives step-by-step guidelines showing how to co nfigure your NW A for some example scenarios. 4.1 How to Configure the Wireless LAN This section illustrates how to choose which wireless operating[...]

Chapter 4 Tutorial NWA1000 Series User’ s Guide 29 page 67 ) to provide multiple wireless networks. Each wireless network will cater to a different type of user . Y ou want to mak e three wireless networks: one standard office wireless network with all the same settings you already hav e, another wireless network with high priorit y QoS settings [...]

Chapter 4 Tutorial NWA1000 Series U ser’s Guide 30 T o configure these settings, you need to know the Media Access Control (MAC) addresses of the devices you want to allow u sers of the guest network to access. The following table shows the addresses used in this example. 4.2.1 Configure the SSID Profiles 1 Log in to the NW A (see Section 2.2 on [...]

Chapter 4 Tutorial NWA1000 Series User’ s Guide 31 4.2.1.1 MBSSID 1 Go to Wireless LAN > Wireless Settings . Select MBSSID from the Operation Mode drop-down list box. 2 SSID01 is the standard network, so select SSID01 as the first profile. It is alwa ys active. 3 Select VoIP_SSID as the second profile, and Guest _SSID as the third profile. Sel[...]

Chapter 4 Tutorial NWA1000 Series U ser’s Guide 32 4.2.2 Configure the S t andard Network 1 Click Wireless LAN > SSID . Click the Edit icon next to SSID01 . 2 Select SecProfile1 as SSID01 ’ s security profile. Select the Hidden SSID checkbo x as you want only authorized compan y employees to us e this netw ork, so there is no need to broadca[...]

Chapter 4 Tutorial NWA1000 Series User’ s Guide 33 3 Next, click Wireless LAN > Security . Click the Edit icon next to SecProfile1 . 4 Since SSID01 is the standard network that has access to all resources, assign a more secure security mode. Select WPA2-PSK-MIX as the Security Mode , and enter the Pre-Shared K ey . In this example, use ThisisS[...]

Chapter 4 Tutorial NWA1000 Series U ser’s Guide 34 3 Select WMM_VOICE in the QoS field to give V oIP the highest priority in the wireless network. Click Apply . 4 Next, click Wireless LAN > Security . Click the Edit icon next to SecProfile2 .[...]

Chapter 4 Tutorial NWA1000 Series User’ s Guide 35 5 Select WPA2-PSK as the Security Mode , and enter the Pre-Shared K ey . In this example, use ThisisVoIPPreSharedKey . Click Apply . 6 Y our V oIP wireless network is now re ady to use. An y traffic usin g the VoIP_SSID profile will be given the highest priority across the wireless network. 4.2.4[...]

Chapter 4 Tutorial NWA1000 Series U ser’s Guide 36 4 Select the check -box of Intra-BSS Traffic blocking Enabled . Click Apply . 5 Next, click Wireless LAN > Security . Click the Edit icon next to SecProfile3 . 6 Select WPA2-PSK in the Security Mode field. WPA2-PSK provides strong securit y that is supported by most wireless clients. Even thou[...]

Chapter 4 Tutorial NWA1000 Series User’ s Guide 37 7 Enter the PSK you want to use in y our network in the Pre Sh ared Key field. In this example, the PSK is ThisismyGuestWPA2pre-sharedkey . Click Appl y . 8 Y our guest wireless network is now ready to use. 4.2.5 T esting the Wireless Networks T o ma ke sure that the three networks are correctly [...]

Chapter 4 Tutorial NWA1000 Series U ser’s Guide 38 wireless traffic between B and wireless clients connected to A ( W , Y and Z ). Other wireless devices ( X ) must not be able to connect to the FTP server . Figure 13 FTP Server Connected to a Wireless Client 4.3.2 Configuring the NW A in MBSSID or Root AP Mode Before setting up the NWA as a wire[...]

Chapter 4 Tutorial NWA1000 Series User’ s Guide 39 Log into the W eb Configurator on NW A ( A ) and go to the Wireless LAN > Wireless Settings screen. 1 Set the Operation Mode to Root AP . 2 Select the Wireless Mode . In this example, select 802.11b/g /n . 3 Select Profil e1 as the SSID Profile . 4 Choose the Channel you want NW A ( A ) to use[...]

Chapter 4 Tutorial NWA1000 Series U ser’s Guide 40 6 Go to Wireless LAN > SSID . Click the Edit icon next to Prof ile1 . 7 Change the SSID to AP-A . 8 Select SecProfile1 in the Security field. 9 Select the check -box for Intra-BSS Traffic blocking Enabl ed so the client cannot access other clients on the same wireless network. 10 Click Apply .[...]

Chapter 4 Tutorial NWA1000 Series User’ s Guide 41 11 Go to Wireless LAN > Security . Click the Edit icon next to SecProfile1 . 12 Configure WPA2-PSK as the Security Mod e and enter This isMyPreS haredKey in the Pre- Shared Key field. 13 Click Apply to finish configuration for NW A ( A ). 4.3.3 Configuring the NW A in Wireless Client Mode The [...]

Chapter 4 Tutorial NWA1000 Series U ser’s Guide 42 1 Select Client as Operation Mode . Click Apply . Site Survey button appears next to the drop-down list. 2 Click on the Site Survey button. A window should pop up wh ich contains a list of all av ailable wireless devices within your NWA’ s range. 3 Find and select NWA ( A )’s SSID: AP-A .[...]

Chapter 4 Tutorial NWA1000 Series User’ s Guide 43 4 Go to Wireless LAN > Security to configure the NWA to use the same security mode and Pre- Shared K ey as NWA ( A ): WPA2-PSK/ThisisMyPreSharedKey . Click Apply . Figure 14 4.3.4 MAC Filter Setup One way to ensure that only specified wireless c lients can access the F TP server is by enabling[...]

Chapter 4 Tutorial NWA1000 Series U ser’s Guide 44 4.3.5 T esting the Conne ction and T roubleshooting This section discusses how you can check if you have correctly configured your network setup as described in this tutorial. • T ry accessing the FTP server from wireless clients W, Y or Z . T est if you can send or retrieve a file. If you cann[...]

45 P ART II T echnical Reference The appendices provide general information. Some details may not apply to your NWA.[...]

NWA1000 Series User’ s Guide 46 C HAPTER 5 Monitor 5.1 Overview This chapter discusses read-only information related to the device state of the NWA. Note: T o access the Monitor screens, you can also click the links in the Summary t able of the Dashboard screen to view the wireless packets sent/received as well as the status of clients connected [...]

Chapter 5 Monitor NWA1000 Series User’ s Guide 47 Click Monitor > Logs . Figure 15 Logs The following table describes the labels in this screen. 5.4 S t atistics Use this screen to view read-only information, including 802.11 Mode , Channel ID, R etry Count and FCS Error Count. Also provided is the "poll interv al". The Poll Interval[...]

Chapter 5 Mon itor NWA1000 Series U ser’s Guide 48 Click Monitor > Stat istics . The following screen pops up. Figure 16 Statistics The following table describes the labels in this screen. 5.5 Association List View the wireless devices that are currently associated with the NWA in the Association List screen. Association means that a wireless [...]

Chapter 5 Monitor NWA1000 Series User’ s Guide 49 Click Monitor > Association List to display the screen as shown next. Figure 17 Association List The following table describes the labels in this screen. 5.6 Channel Usage Use this screen to know whether a channel is used by another wireless network or not. If a channel is being used, you shoul[...]

Chapter 5 Mon itor NWA1000 Series U ser’s Guide 50 W ait a moment while the NWA compiles the information. Figure 18 Channel Usage The following table describes the labels in this screen. T a ble 9 Channel Usage LABEL DESCRIPTION SSID This is the Se rvice Set IDenti fication (SSI D) name of the AP in an Infrastructure wireless network or wireless [...]

NWA1000 Series User’ s Guide 51 C HAPTER 6 Wireless LAN 6.1 Overview This chapter discusses the steps to configure the Wireless Settings screen on the NW A. It also introduces the wireless LAN (WLAN) and some basic scenarios. Figure 19 Wireless Mode In the figure above, the NWA allows access to another bridge devi ce ( A ) and a notebook computer[...]

Chapter 6 Wireless LAN NWA1000 Series U ser’s Guide 52 •U s e t h e MAC Filter screen to specify which wireless station is allowed or denied access to th e NWA (see Section 6.9 on page 82 ). 6.3 What Y ou Need T o Know BSS A Basic Service Set (BSS) exists when all communications between wireles s clients or between a wireless client and a wired[...]

Chapter 6 Wireless LAN NWA1000 Series User’ s Guide 53 Channel A channel is the radio frequency(ies) used by wireless devices. Channels a vailable depend on your geographical area. Y ou may have a choice of ch annels (for y our region) so you should use a different channel than an adjacent AP (access point) to reduce interference. Wireless Mode T[...]

Chapter 6 Wireless LAN NWA1000 Series U ser’s Guide 54 The NWA secure communications via data encryp tion, wireless client authentication and MAC address filtering. It can also hide its identity in the network. User Authentication Authentication is the process of verifying whethe r a wireless device is allowed to use the wireless network. Y ou ca[...]

Chapter 6 Wireless LAN NWA1000 Series User’ s Guide 55 Passphrase A passphrase functions lik e a password. In WEP security mode, it is fu rther converted by the NW A into a complicated string that is referred to as the “k ey” . This key is requested from all devices wishing to connect to a wireless network. PSK The Pre-Shared K e y (PSK) is a[...]

Chapter 6 Wireless LAN NWA1000 Series U ser’s Guide 56 In the figure above, wireless clients A and B are trying to access the Internet via the NW A. The NW A in turn queries the RADIUS server if the identity of clients A and U are allowe d access to the Internet. In this scenario, only client U ’s identity is verified by the RADIUS server and a[...]

Chapter 6 Wireless LAN NWA1000 Series User’ s Guide 57 6.4.1 Root AP Mode Use this screen to use your NWA as an access point. Select Root AP as the Operation Mode . The following screen displays. Figure 22 Wireless LAN > Wireless Settings: Root AP The followi ng table describ es the gener a l wireless LAN labels in this screen. Ta b l e 11 Wir[...]

Chapter 6 Wireless LAN NWA1000 Series U ser’s Guide 58 Wireless Mode If you are in the Wireless LAN > Wi reless Settings or Wireless LAN > Wireless Settings- 2.4G scree n, you ca n sele ct from the following: • 802.11b/g to allow both IEEE802.11b and IEEE802.11 g compliant WLAN devices to associate with th e NWA. The t ransmission rate of[...]

Chapter 6 Wireless LAN NWA1000 Series User’ s Guide 59 Rep ea te r SS ID Profile Select the SSI D profile you want to use for repeater connections. Note: Y ou can only configure None , or WP A2-PSK security mode for the SSID used by a repeater connection. Adv anced S etting s Beacon Interval When a wireless ly network devi ce sends a beacon, it i[...]

Chapter 6 Wireless LAN NWA1000 Series U ser’s Guide 60 MCS R ate The MCS Rate table is available only when 802.11n , 802.11b/g/n , 802.11a/n or 802.11a/n/ac is selected in the Wireless Mode field. IEEE 802.11n supports many different data r a tes which are called M CS rates. MCS stands for Modulation and Coding Sche me. This is an 802.11n featur [...]

Chapter 6 Wireless LAN NWA1000 Series User’ s Guide 61 6.4.2 Repeater Mode Use this screen to have the NW A act as a wireless repeater . Y ou need to know the MAC address of the peer device, which also must be in Repeater or R oot AP mode. Figure 23 Wireless LAN > Wireless Settings: Repeater The following table describes the bridge labels in t[...]

Chapter 6 Wireless LAN NWA1000 Series U ser’s Guide 62 Wireless Mode If you are in the Wireless LAN > Wi reless Settings or Wireless LAN > Wireless Settings- 2.4G scree n, you ca n sele ct from the following: • 802.11b/g to allow both IEEE802.11b and IEEE802.11 g compliant WLAN devices to associate with th e NWA. The t ransmission rate of[...]

Chapter 6 Wireless LAN NWA1000 Series User’ s Guide 63 DTI M I n te rva l Delivery T raffic Indication Message (D TIM) is the time period afte r which broadcast and multicast packe ts are transmit ted to mobile cl ients in the Active P ower Management mode. A high DTIM value can cause clients to lose conne ctivity with the network. Output P ower [...]

Chapter 6 Wireless LAN NWA1000 Series U ser’s Guide 64 6.4.3 Wireless Client Mode Use this screen to turn your NW A into a wireless client. Select Client as the Operation Mode . The following screen displays. Figure 24 Wireless LAN > Wireless Settings: Wireless Client The followi ng table describ es the gener a l wireless LAN labels in this sc[...]

Chapter 6 Wireless LAN NWA1000 Series User’ s Guide 65 SSID Pr ofi le The SSID (Service Set IDentifier) i dentifies th e Service Set with which a wireless station is associated. Wire less stations as sociating to the acc ess point (AP) mu st have the same SSID. In this field, select the S SID profil e of the AP you wa nt to use. Cli ck Apply . Th[...]

Chapter 6 Wireless LAN NWA1000 Series U ser’s Guide 66 Short GI This field is not av ailable in the NWA1100-NH and NW A1123-NI. Select Enabled to use Shor t GI (Guard Interv al). The guard in terv al is the gap introduced between data transmission from users in orde r to reduce i nterferenc e. Reducing the GI increases data t ransfer rates but al[...]

Chapter 6 Wireless LAN NWA1000 Series User’ s Guide 67 6.4.4 MBSSID Mode Use this screen to have the NW A function in MBSSID mode. Select MBSSID as the Operation Mode . The followi ng screen diplays. Figure 25 Wireless LAN > Wireless Settings: MBSSID The following table describes the labels in this screen. T a ble 14 Wireless LAN > Wireless[...]

Chapter 6 Wireless LAN NWA1000 Series U ser’s Guide 68 Wireless Mode If you are in the Wireless LAN > Wi reless Settings or Wireless LAN > Wireless Settings- 2.4G scree n, you ca n sele ct from the following: • 802.11b/g to allow both IEEE802.11b and IEEE802.11 g compliant WLAN devices to associate with th e NWA. The t ransmission rate of[...]

Chapter 6 Wireless LAN NWA1000 Series User’ s Guide 69 Preamble T ype Select Dynamic to ha ve the AP automa tically use short preamble wh en wireless adapters support it, otherwise the AP uses long preambl e. Select Long if you a re u ns ur e wh a t p re a mb l e m o de the wireless adapters support, and to provide more reliable commu nicatio ns [...]

Chapter 6 Wireless LAN NWA1000 Series U ser’s Guide 70 6.5 SSID Screen Use this screen to view and modify the setti ngs of the SSID profiles on the NW A. Click Wireless LAN > SSID to display the screen as shown. Figure 26 Wireless LAN > SSID The following table describes the labels in this screen. T a ble 15 Wireless LAN > SSID LABEL DES[...]

Chapter 6 Wireless LAN NWA1000 Series User’ s Guide 71 6.5.1 Configuring SSID Use this screen to configure an SSID profile. In the Wireless LAN > SSID screen, click Ed it next to the SSID profile you want to configure to display the following screen. Figure 27 SSID : E dit The following table describes the labels in this screen. T a ble 16 SSI[...]

Chapter 6 Wireless LAN NWA1000 Series U ser’s Guide 72 6.6 Wireless Security Screen Use this screen to choose the security mode for your NW A. QoS Select the Quality of Service priority fo r this BSS’s tr affic. • If you se lect WMM from the QoS list, the priority of a data packet depends on the packet’ s IEEE 802.1q or DSCP header . If a p[...]

Chapter 6 Wireless LAN NWA1000 Series User’ s Guide 73 Click Wireless LAN > Security . Select the profile that you want to configure and click Edit . Figure 28 Wireless > Security The Security Settings screen varies depending upon th e security mode you select. Figure 29 Security: None Note that some screens display differently de pending o[...]

Chapter 6 Wireless LAN NWA1000 Series U ser’s Guide 74 6.6.1 Security: WEP Use this screen to use WEP as the security mode for your NWA. Select WEP in the Security Mode field to display the following screen. Figure 30 Security: WEP The following table describes the labels in this screen. T a ble 17 Security: WEP LABEL DESCRIPTI ON Profile Name Th[...]

Chapter 6 Wireless LAN NWA1000 Series User’ s Guide 75 6.6.2 Security: WP A2, WP A2-MIX This screen varies depending on the oper ating mode you select in the Wireless LAN > Wireless Settings screen. 6.6.2.1 Access Point Use this screen to employ WP A2 as the security mode for your NW A that is in root AP , MBSSID or repeater operating mode. Se[...]

Chapter 6 Wireless LAN NWA1000 Series U ser’s Guide 76 6.6.2.2 Wireless Client Use this screen to employ WP A2 as the security mode for your NW A that is in wireless client operating mode. Select WPA2 in the Security Mode field to display the following screen. Figure 32 Security: WPA2 for Wireless Client The following table describes the labels i[...]

Chapter 6 Wireless LAN NWA1000 Series User’ s Guide 77 6.6.3 Security: WP A2-PSK, WP A2-PSK-MIX Use this screen to employ WPA2-PSK or WPA2-PSK -M IX as the security mode of your NW A. Select WPA2-PSK or WPA2-PSK-MIX in the Security Mode field to display the following screen. Figure 33 Security: WPA2-PSK or WP A2-PSK -MIX The following table descr[...]

Chapter 6 Wireless LAN NWA1000 Series U ser’s Guide 78 6.7 RADIUS Screen Use this screen to set up your NWA’ s RADIUS server settings. Click Wireless LAN > RADI US . The screen appears as shown. Figure 34 Wireless LAN > RADIUS Back Click Back to return to th e pre vious screen. Apply Click Apply to save your changes. Cancel Click Cancel t[...]

Chapter 6 Wireless LAN NWA1000 Series User’ s Guide 79 Select a profile you want to configure and click Edit . Figure 35 Wireless LAN > RADIUS The following table describes the labels in this screen. T a ble 21 Wireless LAN > RADIUS LABEL DESCRIPTION Profile N ame This is the name that identifyin g this RADIU S profile. Primary RA DIUS Serv[...]

Chapter 6 Wireless LAN NWA1000 Series U ser’s Guide 80 6.8 Layer-2 Isolation Layer-2 isolation is used to prevent wireless clients associated with your NWA from communicating with other wireless clients, APs, computers or routers in a network. In the following example, layer-2 isolation is enabled on the NWA to allow a guest wireless client ( A )[...]

Chapter 6 Wireless LAN NWA1000 Series User’ s Guide 81 network. The client can communicate with o ther wire less clients only if Intra-BSS T raffic blocking is disabled. Note: Intra-BSS Traffic Blocking is activated when you en able layer-2 isola tion. Figure 36 Layer-2 Isolation Application MAC addresses that are not listed in the lay er-2 isola[...]

Chapter 6 Wireless LAN NWA1000 Series U ser’s Guide 82 Note: Y ou need to know the MAC address of ea ch wireless client, AP , computer or router that you want to al low to communicate with the NW A's wireless clients. Figure 37 Wireless LAN > Layer-2 Isolation The following table describes the labels in this screen. 6.9 MAC Filter Screen [...]

Chapter 6 Wireless LAN NWA1000 Series User’ s Guide 83 The MAC filter function allows you to configure the NW A to grant access to the NWA from other wireless devices (Allow Association) or exclude de vices from accessing the NW A (Deny Association). Figure 38 MAC Filtering In the figure above, wireless client U is able to connect to the Internet[...]

Chapter 6 Wireless LAN NWA1000 Series U ser’s Guide 84 The following table describes the labels in this screen. 6.10 T echnical Reference This section provides technical background inform ation about the topics covered in this chapter . Re fe r t o Ap pendix E on page 178 for further readings on Wireless LAN. 6.10.1 Additional Wireless T erms T a[...]

Chapter 6 Wireless LAN NWA1000 Series User’ s Guide 85 6.10.2 WMM QoS WMM (Wi-Fi MultiMedia) QoS (Quality of Service) en sures quality of service in wireless networks. It controls WLAN transmission priorit y on packets to be tr ansmitted over the wireless network. WMM QoS prioritizes wireless traffic according to the delivery requirements of the [...]

Chapter 6 Wireless LAN NWA1000 Series U ser’s Guide 86 6.10.3 Security Mode Guideline The following is a general guideline in ch o osing the security mode for your NW A. • Use WP A2-PSK if you have WP A2-aware wireless clients but no RADIUS server . • Use WP A2 security if you have WP A2-aware wire less clients and a RADIUS server . WP A2 has[...]

NWA1000 Series User’ s Guide 87 C HAPTER 7 LAN and VLAN 7.1 LAN Overview This chapter describes how you can configure the IP address of your NW A. The Internet Protocol (IP) address identifies a device on a network. Ev ery networking device (including computers, servers, routers, printers , etc.) needs an IP address to communicate across the netw[...]

Chapter 7 LAN and VLAN NWA1000 Series U ser’s Guide 88 IPv6 IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 38 IP addresses. IPv6 Addressing The 128-bit IPv6 address is written as eight 16-bit hexadecimal blo[...]

Chapter 7 LAN and VLAN NWA1000 Series User’ s Guide 89 7.4 VLAN Overview This section discusses how to configure the NW A’s VLAN settings. Figure 42 Management VLAN Se tup In the figure above, to access an d manage the NWA from computer A , the NW A and switch B ’s ports to which computer A and the NWA are connected should be in the same VLAN[...]

Chapter 7 LAN and VLAN NWA1000 Series U ser’s Guide 90 7.6 LAN IP Screen Use this screen to configure the IP address for your NW A. Clic k Network > LAN to displa y the following screen. Figure 43 LAN IP The following table describes the labels in this screen. T a ble 27 LAN IP LABEL DESCRIPTION IPv4 Address Assignme nt Obtain IP Address Autom[...]

Chapter 7 LAN and VLAN NWA1000 Series User’ s Guide 91 IPv6 Address Assignme nt Enable Stateful Address Auto- configuration Select this to turn on IPv6 stateful auto -configurati on to have t he NWA obtain an IPv6 global address from a DHCPv6 server in your network. IPv6 Address/Prefix Length Enter your IPv6 address and prefix manually . System D[...]

NWA1000 Series User’ s Guide 92 C HAPTER 8 System 8.1 Overview This chapter shows you how to enable remote mana gement of your NWA . It provides information on determining which services or protocols can access which of th e NWA’ s interfaces. R emote Management allows a user to administr ate the device over the network. Y ou can manage your NW[...]

Chapter 8 System NWA1000 Series User’ s Guide 93 •U s e t h e SNMP screen to configure through which interface(s) and from which IP address(es) a network systems manager can access the NW A (see Section 8.7 on page 99 ). •U s e t h e FTP screen to configure through which interface(s) and from which IP address(es) you can use File T ransfer Pr[...]

Chapter 8 System NWA1000 Series U ser’s Guide 94 The next figure illustrates an SNMP management oper ation. Figure 45 SNMP Management Mode A SNMP managed network consists of two main types of componen t: agents and a manager . A n a g e n t i s a m a n a g e m e n t s o f t w a r e m o du l e t h a t r e s i d e s i n a m a n a g e d d e v i c e [...]

Chapter 8 System NWA1000 Series User’ s Guide 95 1 Te l n e t 2 HTTP Certificate A certificate contains the certificate owner’s identity and public k ey . Certificates provide a way to exchange public keys for use in authentication. Figure 46 Certificates Example In the figure above, the NW A (Z) checks the identi ty of the notebook (A) using a[...]

Chapter 8 System NWA1000 Series U ser’s Guide 96 T o change your NWA’ s WWW settings, click System > WWW . The following screen shows. Figure 47 System > WWW The following table describes the labels in this screen. 8.5 Certificates Screen Use this screen to delete or import certificates. T a ble 28 System > WWW LABEL DESCRIPTION WWW HT[...]

Chapter 8 System NWA1000 Series User’ s Guide 97 Click System > Cert ificates . The following sc reen shows. Figure 48 System > Certificates The following table describes the labels in this screen. 8.6 T elnet Screen Use this screen to configure your NW A for remote T elnet access. Y ou can use T elnet to access the NW A’s C ommand Line I[...]

Chapter 8 System NWA1000 Series U ser’s Guide 98 The following table describes the labels in this screen. T a ble 30 System > Telnet LABEL DESCRIPTION TELNET Port You can change the server port number for a service if needed, however y ou must use the same port number in order to us e that service for remote management. Secure Access Contro l [...]

Chapter 8 System NWA1000 Series User’ s Guide 99 8.7 SNMP Screen Use this screen to hav e a manager station admini strate your NW A over the network and configure SNMP accounts on the SNMP v3 manager . A SNMP admi nistrator/user is a SNMP manager . T o change your NW A’s SNMP settings, click System > SNMP . The following screen displays. Fig[...]

Chapter 8 System NWA1000 Series U ser’s Guide 100 The following table describes the labels in this screen. T a ble 31 System > SNMP LABEL DESCRIPTION SNMP Port Y ou can change th e server po rt number for a service if ne eded, howev er you must u se the same port number in order to use that serv ic e for remote management. Secure Access Contro[...]

Chapter 8 System NWA1000 Series User’ s Guide 101 8.8 FTP Screen Use this screen to upload and download the NWA’ s firmware using FTP . T o use this feature, your computer must have an FTP client. Privacy Prot ocol Specify the encryption method used fo r SNMP communication with the SNM P administrator . DES - Data Encryption Standard is a widel[...]

Chapter 8 System NWA1000 Series U ser’s Guide 102 T o change your NWA’ s FTP settings, click System > FTP . The following screen displays. Figure 51 System > F TP The following table describes the labels in this screen. 8.9 T echnical Reference This section provides some technical background information about the topics co vered in this c[...]

Chapter 8 System NWA1000 Series User’ s Guide 103 as number of packets received, node po rt status etc. A Management Information Base (MIB) is a collection of managed objects.SNMP itself is a simple request/response protocol based on the manager/agent model. The manager issues a requ est and the agent returns responses using the following protoco[...]

Chapter 8 System NWA1000 Series U ser’s Guide 104 certification authorities. Y ou can use the NWA to gener ate certification requests that contain identifying information and public keys and then se nd the certification requests to a certification authority . 8.9.5 Checking the Fing erprint of a Certificate on Y our Computer A certificate’ s fi[...]

NWA1000 Series User’ s Guide 105 C HAPTER 9 Log Settings 9.1 Overview This chapter provides information on viewing and generating logs on your NWA. Logs are files that contain recorded network ac tivit y over a set period. They are used by administrators to monitor the h ealth of th e system(s) they are managing. Logs enable administrators to eff[...]

Chapter 9 Log Sett ings NWA1000 Series U ser’s Guide 106 9.3 What Y ou Need T o Know Alert s and Logs An alert is a type of log that warr ants more serious attention. Some categories such as System Error consist of both logs and alerts. Y ou can differentiate them by their color in the Monit or > Logs screen. Alerts are displayed in red and lo[...]

Chapter 9 Log Settings NWA1000 Series User’ s Guide 107 T o change your NWA’ s log settings, click Configuration > Log Settings . The screen appears as shown. Figure 55 Log Settings The following table describes the labels in this screen. T a ble 33 Log Settings LABEL DESCRIPTION E-mail Log Sett ings Mail Server Enter the server name or the [...]

Chapter 9 Log Sett ings NWA1000 Series U ser’s Guide 108 SMTP Authentica tion SM TP (Simple Mail T ransfer Protocol) is the message-exchange standard for the Internet. Sele ct the check box to activate SMTP authenticat ion. If mail server authenticatio n is needed but this fea ture is disabled, you will not receive the e-mail logs. If you use SMT[...]

NWA1000 Series User’ s Guide 109 C HAPTER 10 Maintenance 10.1 Overview This chapter describes the maintenance screens. It discusses how you can upload new firmw are, manage configuration and restart your NWA without turning it off and on. This chapter provides information and instructions on how to identif y and manage your NW A over the network.[...]

Chapter 10 Maintenance NWA1000 Series U ser’s Guide 11 0 10.3 What Y ou Need T o Know You c a n f i n d t h e f i r m w a r e f o r y o u r d e v i c e a t w w w. z y x e l . c o m . I t i s a f i l e t h a t u s e s t h e s y s t e m p r o j e c t code with a "*.bin" extension, for example "V100AAEO0.bin". The upload process [...]

Chapter 10 Maintenance NWA1000 Series User’ s Guide 111 10.5 Password Screen Use this screen to control access to your NW A by assigning a password to it. Click Maintenance > Password . The following screen displays. Figure 58 Maintenance > Password The following table describes the labels in this screen. T a ble 35 Maintenance > Passwor[...]

Chapter 10 Maintenance NWA1000 Series U ser’s Guide 11 2 10.6 T ime Screen Use this screen to change your NW A’s time and date, click Maintenance > Time . The following screen displays. Figure 59 Maintenance > Time The following table describes the labels in this screen. T a ble 36 Maintenance > Time LABEL DESCRIPTION Current Time and [...]

Chapter 10 Maintenance NWA1000 Series User’ s Guide 11 3 10.7 Firmware Upgrade Screen Use this screen to upload a firmw are to your NW A. Click Maintenance > Fir mware Upgrade . Follow the instructions in this section to upload firmware to your NW A. Figure 60 Maintenance > Firmware Upgr ade Time Z one Choose the time zone of your location.[...]

Chapter 10 Maintenance NWA1000 Series U ser’s Guide 11 4 The following table describes the labels in this screen. Do not turn off the NW A while firmware upload is in progress! Figure 61 Firmware Upload In Process The NWA automatically restarts in this time causing a tempor ary network disconnect. In some operating systems, you ma y see the follo[...]

Chapter 10 Maintenance NWA1000 Series User’ s Guide 11 5 Click Maintenance > Configuration File . The screen appears as shown next. Figure 63 Maintenance > Configuration File 10.8.1 Backup Configuration Backup configuration allows y ou to back up (save) the NWA’ s current configuration to a file on your computer . Once your NW A is config[...]

Chapter 10 Maintenance NWA1000 Series U ser’s Guide 11 6 The NWA automatically restarts in this time causing a tempor ary network disconnect. In some operating systems, you ma y see the following icon on your desktop. Figure 64 Network T emporarily Disconnected If you uploaded the default conf igur ation file you may need to change the IP address[...]

NWA1000 Series User’ s Guide 11 7 C HAPTER 11 Troubleshooting This chapter offers some suggestions to solve problems you might encounter . The potential problems are divided into the following categories. • Po wer , Hardware Connections, and LEDs • NW A Access and Login • Internet Access • Wireless LAN 1 1.1 Power , Hardware Connections, [...]

Chapter 11 Tro ubleshooting NWA1000 Series U ser’s Guide 11 8 1 1.2 NW A Access and Login I forgot the IP address for the NWA. 1 The default IP address is 192.168.1.2 . 2 If the NW A is working as a DHCP client and receives an IP address from a DHCP server , check the DHCP server for the NWA’ s IP address. 3 If you configured a static IP addres[...]

Chapter 11 Troubl eshooting NWA1000 Series User’ s Guide 11 9 Advanced Suggestions • T ry to access the NW A using another service, such as T elnet. If you can access the NW A, check the remote management settings to find out why the NW A does not respond to HT TP . • If your computer is connected wirelessly , use a computer that is connected[...]

Chapter 11 Tro ubleshooting NWA1000 Series U ser’s Guide 120 I cannot access the Internet anymore. I had ac ces s to the Internet (with the NWA ), but my Internet connection is not a vailable an ymore. 1 Check the hardware connections, and make sure th e LEDs are behaving as expected. See the Quick Start Guide and Section 1.7 on page 16 . 2 R ebo[...]

Chapter 11 Troubl eshooting NWA1000 Series User’ s Guide 121 5 Check that both the NWA and y our wireless client are using the same wireless and wireless security settings.[...]

NWA1000 Series User’ s Guide 122 A PPENDIX A Setting Up Y our Computer ’ s IP Address Note: Y our specific NWA ma y not support all of the oper ating systems described in this appendix. See the product specifications for more information about which operating systems are sup ported. This appendix shows you how to configure the IP se ttings on y[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series User’ s Guide 123 1 Click Start > Control Panel . 2 In the Control Panel , click the Network Connections icon. 3 Right-click Local Area Connection and then select Properties .[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series U ser’s Guide 124 4 On the General tab, select Internet Protocol (TCP/I P) and then click Properties .[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series User’ s Guide 125 5 The Internet Protocol TCP/IP Properties window opens. 6 Select Obtain an IP address automatically if your network administrator or ISP assigns your IP address dynamically . Select Use the following IP Address and fill in the IP address , Subnet mask , and Defaul[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series U ser’s Guide 126 Windows V ist a This section shows screens from Windows Vista Professional. 1 Click Start > Control Panel . 2 In the Control Panel , click the Network and Internet icon. 3 Click the Network and Sharing Center icon.[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series User’ s Guide 127 4 Click Manage network connections . 5 Right-click Local Area Connection and then select Properties . Note: During this procedure, cl ick Continue whenever Windows displa ys a screen saying that it needs your permissi on to continue.[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series U ser’s Guide 128 6 Select Internet Protocol Version 4 (TCP/IPv 4) and then select Properties .[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series User’ s Guide 129 7 The Internet Protocol Version 4 (TCP/IPv4) Properties window opens. 8 Select Obtain an IP address automatically if your network administrator or ISP assigns your IP address dynamically . Select Use the following IP Address and fill in the IP address , Subnet mas[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series U ser’s Guide 130 Windows 7 This section shows screens from Windows 7 Enterprise. 1 Click Start > Control Panel . 2 In the Control Panel , click View network status and tasks under the Network and Intern et category . 3 Click Change adapter settings .[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series User’ s Guide 131 4 Double click Local Area Connection and then sele ct Properties . Note: During this procedure, cl ick Continue whenever Windows displa ys a screen saying that it needs your permissi on to continue.[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series U ser’s Guide 132 5 Select Internet Protocol Version 4 (TCP/IPv 4) and then select Properties .[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series User’ s Guide 133 6 The Internet Protocol Version 4 (TCP/IPv4) Properties window opens. 7 Select Obtain an IP address automatically if your network administrator or ISP assigns your IP address dynamically . Select Use the following IP Address and fill in the IP address , Subnet mas[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series U ser’s Guide 134 3 The IP settings are displayed as follows. Mac OS X: 10.3 and 10.4 The screens in this section are from Ma c OS X 10.4 but can also apply to 10.3. 1 Click Apple > System Preferen ces .[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series User’ s Guide 135 2 In the System Preferen ces window , click the Network icon. 3 When the Network preferences pane opens, select Built-in Et hernet from the network connection type list, and then click Config ure.[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series U ser’s Guide 136 4 For dynamically assigned settings, select Using DHCP from the Configur e IPv4 list in the TCP/IP tab. 5 For statically assigned settings, do the following: •F r o m t h e Configure IPv4 list, select Manually . •I n t h e IP Address field, type your IP addres[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series User’ s Guide 137 V erifying Settings Check your TCP/IP properties by clicking Appli cations > Utilities > Network Utilities , and then selecting the appropriate Network Interface from the Info tab. Figure 67 Mac OS X 1 0.4: Network Utility Mac OS X: 10.5 and 10.6 The screens[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series U ser’s Guide 138 2 In System Preferen ces , click the Network icon. 3 When the Network preferences pane opens, select Ethernet from the list of av ailable connection types. 4 From the Configure list, select Using DHCP for dynamically assigned settings. 5 For statically assigned se[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series User’ s Guide 139 •F r o m t h e Configure list, select Manually . •I n t h e IP Address field, enter your IP address. •I n t h e Subnet Mask field, enter y our subnet mask. •I n t h e Router field, enter the IP address of your NW A. 6 Click Apply and close the window.[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series U ser’s Guide 140 V erifying Settings Check your TCP/IP properties by clicking Appli cations > Utilities > Network Utilities , and then selecting the appropriate Network interface from the Info tab. Figure 68 Mac OS X 1 0.5: Network Utility Linux: Ubuntu 8 (GNOME) This sectio[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series User’ s Guide 141 2 When the Network Settings window opens, click Unlock to open the Authenticate window. (By default, the Unlock button is greyed out until clicked.) Y ou cannot make changes to your configuration unless you first enter your admin password. 3 In the Authenticate wi[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series U ser’s Guide 142 4 In the Network Settings window, select the connection that you want to configure, then click Properties . 5 The Properties dialog box opens. •I n t h e Configuration list, select Automatic Configuration (DHCP ) if you have a dynamic IP address. •I n t h e Co[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series User’ s Guide 143 7 If you know your DNS server IP address(es), click the DNS tab in the Network Settings window and then enter the DNS server information in the fields provided. 8 Click the Close button to apply the changes.[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series U ser’s Guide 144 V erifying Settings Check your TCP/IP properties by clicking System > Ad ministrati on > Network Tools , and then selecting the appropriate Network device from the Devices tab. The Interface Statistics column shows data if your connection is working properly[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series User’ s Guide 145 1 Click K Menu > Computer > Administrator Settings (YaST) . 2 When the Run as Root - KDE su dialog opens, enter the admin password and click OK .[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series U ser’s Guide 146 3 When the YaST Control Center window opens, select Network Devices and then click the Network Card icon. 4 When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button.[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series User’ s Guide 147 5 When the Network Card Setup window opens, click the Address tab Figure 70 openSUSE 10.3: Network Card Setup 6 Select Dynamic Address (DHCP) if you have a dyn amic IP address. Select Statically assigned IP Address if you have a static IP address. Fill in the IP a[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series U ser’s Guide 148 8 If you know your DNS server IP address(es), click the Hostname/DNS tab in Network Settings and then enter the DNS server information in the fields provided. 9 Click Finish to save your settings and close the window . V erifying Settings Click the KNetwork Manage[...]

Appendix A Setting Up Your Computer’s IP Address NWA1000 Series User’ s Guide 149 When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly . Figure 72 openSUSE: Connection Status - KNe twork Manager[...]

NWA1000 Series User’ s Guide 150 A PPENDIX B Pop-up Windows, JavaScript and Java Permissions In order to use the web configur ator you need to allow: • W eb browser pop-up windows from your device. • JavaS cript (enabled by default). • Jav a permissions (enabled by default). Note: The screens used below belong to Intern et Explorer versi on[...]

Appendix B Pop-up Windows, JavaScrip t and Java Permissions NWA1000 Series User’ s Guide 151 2 Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. Figure 74 Internet Options: Privacy 3 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alt[...]

Appendix B Pop-up Windows, JavaScript and Java Permissions NWA1000 Series U ser’s Guide 152 2 Select Settings… to open the Pop-up Bloc ker Settings screen. Figure 75 Internet Options: Privacy 3 T ype the IP address of your device (the web page that you do not want to have blocke d) with the prefix “http://” . For example, http://192.168.167[...]

Appendix B Pop-up Windows, JavaScrip t and Java Permissions NWA1000 Series User’ s Guide 153 4 Click Add to move the IP address to the list of Allowed sites . Figure 76 Pop-up Block er Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript If pages of the we b configurator do not display properly in[...]

Appendix B Pop-up Windows, JavaScript and Java Permissions NWA1000 Series U ser’s Guide 154 1 In Internet Explorer , click Tools , Internet Options and then the Security tab. Figure 77 Internet Options: Security 2 Click the Custom Level... button. 3 Scroll down to Scripting . 4 Under Active scripting make sure that Enable is selected (the default[...]

Appendix B Pop-up Windows, JavaScrip t and Java Permissions NWA1000 Series User’ s Guide 155 6 Click OK to close the window. Figure 78 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click Tools , Internet Option s and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM . 4 Under[...]

Appendix B Pop-up Windows, JavaScript and Java Permissions NWA1000 Series U ser’s Guide 156 5 Click OK to close the window. Figure 79 Security Settings - Java JA V A (Sun) 1 From Internet Explorer , click Tools , Internet Option s and then the Advance d tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is selected.[...]

Appendix B Pop-up Windows, JavaScrip t and Java Permissions NWA1000 Series User’ s Guide 157 3 Click OK to close the window. Figure 80 Java (Sun) Mozilla Firefox Mozilla Firefox 2.0 screens are used here. Screens for other v ersions may vary slightly . The steps below apply to Mozilla Firefox 3.0 as well. Y ou can enable Java, Ja vascript and pop[...]

Appendix B Pop-up Windows, JavaScript and Java Permissions NWA1000 Series U ser’s Guide 158 Click Content to show the screen below . Select the check boxes as shown in the following screen. Figure 82 Mozilla Firefox Content Security Opera Opera 10 screens are used here. Screens for o ther versions may v ary slightly .[...]

Appendix B Pop-up Windows, JavaScrip t and Java Permissions NWA1000 Series User’ s Guide 159 Allowing Pop-Ups From Opera, click Tools , then Preferences . In the General tab, go to Choose how you prefer to handle pop-ups and select Open all pop-ups . Figure 83 Opera: Allowing Pop-Ups Enabling Java From Opera, click Tools , then Preferences . In t[...]

Appendix B Pop-up Windows, JavaScript and Java Permissions NWA1000 Series U ser’s Guide 160 T o customize JavaScript behavior in the Oper a browser , click JavaScript Options . Figure 85 Opera: JavaScript Options Select the items you want Opera’ s JavaScript to apply .[...]

NWA1000 Series User’ s Guide 161 A PPENDIX C IP Addresses and Subnetting This appendix introduces IP addresses a nd subnet masks. IP addresses identify individual devices on a network. Ev ery networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network. These networking devices ar[...]

Appendix C IP Addresses and Subnetting NWA1000 Series U ser’s Guide 162 The following figure shows an example IP address in which the first three octets (192.168.1) are the network number , and the fourth octet (16) is the host ID. Figure 86 Network Number and Host ID How much of the IP address is the netw ork number and how much is the host ID v[...]

Appendix C I P Addresses and Subnetti ng NWA1000 Series User’ s Guide 163 Subnet masks can be referred to by the size of th e network number part (the bits with a “1” v alue). For example, an “8-bit mask” means that the first 8 bits of the mask are ones and the remaining 24 bits are zeroes. Subnet masks are expressed in dotted decimal not[...]

Appendix C IP Addresses and Subnetting NWA1000 Series U ser’s Guide 164 The following table shows some possible subnet masks using both notations. Subnetting Y ou can use subnetting to divide one network into multiple sub-networks. In the following e xample a network administrator creates two sub-networks to isolate a group of servers from the re[...]

Appendix C I P Addresses and Subnetti ng NWA1000 Series User’ s Guide 165 The following figure shows the company netw ork after subnetting . There are now two sub- networks, A and B . Figure 88 Subnetting Example: After Subnetting In a 25-bit subnet the host ID has 7 bits , so each sub-network has a maximum of 2 7 – 2 or 126 possible hosts (a h[...]

Appendix C IP Addresses and Subnetting NWA1000 Series U ser’s Guide 166 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subn ets (000, 00 1, 010, 011, 100, 101, 110 and 111). Subnet Address: 192.168.1.0 Lowest Host ID: 192.16 8.1.1 Broadcast Address: 192.168.1.63 Highest Host ID: 192.1 68.1.62 T a ble 44 Subnet 2 IP/SUBNET M[...]

Appendix C I P Addresses and Subnetti ng NWA1000 Series User’ s Guide 167 The following table shows IP address last octet values for each subnet. Subnet Planning The following table is a summary fo r subnet planni ng on a network with a 24-bit network number . The following table is a summary fo r subnet planni ng on a network with a 16-bit netwo[...]

Appendix C IP Addresses and Subnetting NWA1000 Series U ser’s Guide 168 Configuring IP Addresses Where you obtain your n etwork number depends on your particular situation. If the ISP or your network administrator assigns y ou a block of regist ered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask. If the [...]

NWA1000 Series User’ s Guide 169 A PPENDIX D IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 38 IP addresses. IPv6 Addressing The 128-bit IPv6 address is written as eight 16-bit hexadecimal bloc[...]

Appendix D IPv6 NWA1000 Series U ser’s Guide 170 Global Address A global address uniquely iden tifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. Unspecified Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not h[...]

Appendix D IPv6 NWA1000 Series User’ s Guide 171 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 ~ 10, A ~ F). Each block’s 16 bits are then represented by four hexadecimal c[...]

Appendix D IPv6 NWA1000 Series U ser’s Guide 172 combines its interface ID and global and subnet in formation advertised from the router . This is a routable global IP address. DHCPv6 The Dynamic Host Configur ation Protocol for IPv6 (DHCPv6, RFC 3315) is a server-client protocol that allows a DHCP server to assign and pa ss IPv6 network addresse[...]

Appendix D IPv6 NWA1000 Series User’ s Guide 173 such as the system name. The interface-ID option provides slot number , port information and the VLAN ID to the DHCPv6 server . The remote-ID option (if any) is stripped from the R elay-R eply messages before the relay agent sends the packets to the clients. The DHCP server copies th e interface-ID[...]

Appendix D IPv6 NWA1000 Series U ser’s Guide 174 determine whether the destination address is on- link and can be reached directly without passing through a router . If the address is onlink, the addre ss is considered as the next hop. Otherwise, the NW A determines the next-hop from the default rout er list or routing table. Once the next hop IP[...]

Appendix D IPv6 NWA1000 Series User’ s Guide 175 Example - Enabling IPv6 on Windows XP/2003/Vist a By default, Windows XP and Windows 2003 suppo r t IPv6. This example shows y ou how to use the ipv6 install command on Windows XP/2003 to enable IPv6. This also displays how to use the ipconfig command to see auto-generated IP addresses. IPv6 is ins[...]

Appendix D IPv6 NWA1000 Series U ser’s Guide 176 5 Click Start and then OK . 6 Now your computer can obtain an IP v6 address from a DH CPv6 server . Example - Enabling IPv6 on Windows 7 Windows 7 supports IPv6 by default. DHCPv6 is al so en abled when you enable IPv6 on a Windows 7 computer . T o enable IPv6 in Windows 7: 1 Select Control Panel &[...]

Appendix D IPv6 NWA1000 Series User’ s Guide 177 4 Click Close to exit the Local Area Connectio n Status screen. 5 Select Start > All Programs > Accessories > Command Prompt . 6 Use the ipconfig command to check your dynamic IPv6 address. This example shows a global address (2001:b021:2d::1000) obta ined from a DHCP server . C:>ipcon[...]

NWA1000 Series User’ s Guide 178 A PPENDIX E Wireless LANs Wireless LAN T o pologies This section discusses ad-hoc and infrastructure wireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an indepe ndent (Ad-hoc) WLAN that connects a set of computers with wireless adapters (A, B, C). Any time two or more wi[...]

Appendix E Wireless LANs NWA1000 Series User’ s Guide 179 disabled, wireless client A and B can still access the wired network but cannot communicate with each other . Figure 90 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together b[...]

Appendix E Wireless LANs NWA1000 Series U ser’s Guide 180 An ESSID (ES S IDentification) uniquely identifies each ESS. All access points and their associated wireless clients within the same ESS must have the same ES SID in order to communicate. Figure 91 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by wireless devices t[...]

Appendix E Wireless LANs NWA1000 Series User’ s Guide 181 cannot "hear" each other , that is they do not know if the channel is currently being used. Therefore, they are considered hidden from each othe r . Figure 92 RT S /C T S When station A sends data to the AP , it might not know that the station B is already using the channel. If t[...]

Appendix E Wireless LANs NWA1000 Series U ser’s Guide 182 Use short preamble if you are sure all wireless de vices on the network support it, and to prov ide more efficient communications. Use the dynamic setting to automatically use short preamble when all wireless devices on the network support it, otherwise the NW A uses long preamble. Note: T[...]

Appendix E Wireless LANs NWA1000 Series User’ s Guide 183 The following figure shows the relative effectivenes s of these wireless security methods available on your NWA. Note: Y ou must enable the same wireless security setti ngs on the NW A and on all wireless clients that y ou want to associate with it. IEEE 802.1x In June 2001, the IEEE 8 02.[...]

Appendix E Wireless LANs NWA1000 Series U ser’s Guide 184 T ypes of RADIUS Messages The following types of RADIUS messages are ex changed between the access point and the R ADIUS server for user authen tication: • Access-Request Sent by an access point requesting authentication. • Access-Reject Sent by a RADIUS server rejecting access. • Ac[...]

Appendix E Wireless LANs NWA1000 Series User’ s Guide 185 encrypting the password with the challenge and sends back the information. P assword is not sent in plain text. However , MD5 authentication has some weaknesses. Since the authentication server needs to get the plaintext passwords, the passwords must be stored. Thus someone other than the [...]

Appendix E Wireless LANs NWA1000 Series U ser’s Guide 186 For added securit y , certificate-based authentica tions (EAP- TLS, EAP- T TLS and PEAP) use dynamic keys for data encryption. They are often deplo y ed in corpor ate environments, but for public deployment, a simple user name and password pair is more pr actical. The following table is a [...]

Appendix E Wireless LANs NWA1000 Series User’ s Guide 187 The Message Integrity Check (MIC) is designed to pr event an attacker from capturing data packets, altering them and resending them. The MIC provides a strong mathematical function in which the receiver and the transmitter each compute and then compare the MIC. If they do not match, it is [...]

Appendix E Wireless LANs NWA1000 Series U ser’s Guide 188 4 The RADIUS server distributes the PMK to the AP . The AP then sets up a key hier archy and management system, using th e PMK to dynamically gener ate unique data encryption keys. The keys are used to encrypt every data pack et that is wirelessly communicated between the AP and the wirele[...]

Appendix E Wireless LANs NWA1000 Series User’ s Guide 189 4 The AP and wireless clie nts use the TKIP or AE S encryption process, the PMK and information exchanged in a handshake to create tempor al encryp tion keys. They use these keys to encrypt data exchanged between them. Figure 94 WPA2-PSK Authentication Security Pa rameters Summary R efer t[...]

Appendix E Wireless LANs NWA1000 Series U ser’s Guide 190 Po sitioning the antennas properly increases the range an d coverage area of a wireless LAN. Antenna Characteristics Frequency An antenna in the frequency of 2.4GHz or 5GHz is n eeded to communicate efficiently in a wireless LAN Radiation Pattern A radiation pattern is a diagram that allow[...]

Appendix E Wireless LANs NWA1000 Series User’ s Guide 191 F or directional antennas, point the antenna in the direction of th e desired cover age area.[...]

NWA1000 Series User’ s Guide 192 A PPENDIX F Customer Support In the event of problems th at cannot be solved by using this manual, you should contact your vendor . If you cannot contact your vendor , then contact a ZyX EL office for the region in which you bought the device. Regional websites are listed below (see also http://www .zyxel.com/ abo[...]

Appendix F Customer Support NWA1000 Series User’ s Guide 193 Korea • Z yXEL K orea Corp. • http://www.zyx el.kr Malaysia • Z yXEL Malaysia Sdn Bhd. • http://www.zyx el.com.my Pakist an • ZyXEL P akistan (Pvt.) Ltd. • http://www .zyxel.com.pk Philipines • Z yXEL Philippines • http://www .zyxel.com.ph Singapore • Z yXEL Singapore [...]

Appendix F Customer Support NWA1000 Series U ser’s Guide 194 Belgium • Z yXEL Communications B.V . • http://www .zyxel.com/be/nl/ Bulgaria •Z y X E L България • http://www.zyx el.com/bg/bg/ Czech • Z yXEL Communications Czech s.r .o • http://www.zyx el.cz Denmark • Z yXEL Communications A/S • http://www.zyx el.dk Estonia ?[...]

Appendix F Customer Support NWA1000 Series User’ s Guide 195 Lithuania • Z yXEL Lithuania • http://www .zyxel.com/lt/lt/homepage.shtml Netherlands •Z y X E L B e n e l u x • http://www.zyx el.nl Norway • Z yXEL Communications • http://www.zyx el.no Poland • Z yXEL Communications Poland • http://www.zyx el.pl Romania •Z y X E L R[...]

Appendix F Customer Support NWA1000 Series U ser’s Guide 196 T urkey •Z y X E L T u r k e y A . S . • http://www.zyx e l.com.tr UK • Z yXEL Communications UK Ltd. • http://www.zyx e l.co.uk Ukraine •Z y X E L U k r a i n e • http://www .ua.zyxel.com Latin America Argentina • Z yXEL Communication Corpor ation • http://www.zyx e l.c[...]

Appendix F Customer Support NWA1000 Series User’ s Guide 197 Oceania Australia • Z yXEL Communications Corporation • http://www .zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyx e l.co.za[...]

NWA1000 Series User’ s Guide 198 A PPENDIX G Legal Information Copyright Copyright © 2014 by Z yXEL Communications Corpor ation. Th e c o n te nt s of t hi s pu b li ca t io n ma y n o t b e re p ro d uc e d i n a n y p a rt o r a s a w ho l e, t ra ns c ri be d , s t or e d i n a r e tr i eva l sy s te m , t r anslated into any language, or tr [...]

Appendix G Legal Informa tion NWA1000 Series User’ s Guide 199 IC Radiation Exposur e St atement This equipmen t complies with IC radiati on exposure limi ts set forth for an uncontrolle d environment. End users must follow the spe cific operating instructions for satisfying RF exposu re compliance. 注意 ! 依據 低功率電波輻射性電機?[...]

Appendix G Legal Information NWA1000 Series U ser’s Guide 200 Registration Register your product onli ne to receive e-mail not ices of firmware upgrades and information at www .zyxel.com. Open Source Licenses This product contains in part some free software distribu ted under GPL licens e terms and/or GPL like lic enses. Open source lice nses are[...]

Appendix G Legal Informa tion NWA1000 Series User’ s Guide 201 National Restrictions This prod uct may be us ed in all E U count ries (and o ther coun tries foll owing the E U direct ive 1999/5 /EC) witho ut any limi tation except for the count ries mentio ned below: Ce produit peut être utilisé dans tous les pays de l’UE (et da ns tous les p[...]

Appendix G Legal Information NWA1000 Series U ser’s Guide 202 List of national codes Safety Warnings • Do NOT u se this product near w ater , for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, d ust or corrosive liquids. • Do NOT s tore things on the de vice. • Do NOT install, use, or service [...]

Appendix G Legal Informa tion NWA1000 Series User’ s Guide 203 Environment al Product Declaration[...]

Index NWA1000 Series User’ s Guide 204 Index A access privileges 10 Accounting Server 80 Advanced Encryption Standard See AES. AES 186 Alerts 106 Alternative subnet mask notation 164 Antenna 85 antenna directional 190 gain 190 omni-directional 190 AP (access point) 180 Applications Access Point 13 AP + Bridge 13 applications MBSSID 10 Re pe a t e[...]

Index NWA1000 Series U ser’s Guide 205 EAP Authentication 184 Encryption 55 , 74 encryption 13 , 186 ESS 52 , 179 Ethernet dev ice 82 Extended Service Set 52 Extended Service S et, See ESS 17 9 Extensible Authentication Protocol 55 F Fa c t o r y D e f a u l t s 11 6 restoring 20 FCC interference statement 198 Firefox 18 Firmware 11 0 FTP 94 rest[...]

Index NWA1000 Series User’ s Guide 206 Lightweight Extensible Authentication Protocol 55 Log 46 Log Screens 105 Logs accessing logs 105 receiving logs via e-mail 106 Logs Screen Mail Server 10 7 Mail Subject 107 Send Log to 107 Sys lo g 108 Logs, Uses of 10 5 M MAC Filter Allow Association 83 Deny Association 83 Maintenance 109 Association List 1[...]

Index NWA1000 Series U ser’s Guide 207 Accounting Server 80 Accounting Server IP Address 80 RADIUS server 54 Backup 80 Primary 79 Rates Co nfiguration 59 , 63 , 65 , 69 registration product 200 related documentation 2 R emote Authentication Dial In User Servic e 55 remote management 15 remote management limitations 93 Ro am i n g 85 R ootAP 13 RT[...]

Index NWA1000 Series User’ s Guide 208 U User Authentication 54 V Virtual Local Area Network 89 VLAN 89 introduction 89 Vo I P 11 , 72 W warranty 199 note 199 WDS 13 W eb Configurator 18 password 19 requirements 18 supported browsers 18 WEP 54 WEP key encrypting 86 Wi-Fi Multimedia QoS 85 Wired Equivalent Priv acy 54 Wireless Client 41 wireless c[...]